last executing test programs: 12m44.144121958s ago: executing program 32 (id=128): syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f0000000680)={[{@hide}, {@dmode={'dmode', 0x3d, 0x9}}, {@session={'session', 0x3d, 0x23}}, {@utf8}, {@map_acorn}, {@check_strict}, {@mode={'mode', 0x3d, 0xc9}}, {@cruft}, {@map_off}, {@check_strict}, {@overriderock}, {@block={'block', 0x3d, 0x200}}, {@cruft}, {@nocompress}, {@cruft}, {@session={'session', 0x3d, 0x2e}}, {@gid}, {@sbsector={'sbsector', 0x3d, 0x3}}]}, 0x1, 0xa2f, &(0x7f00000018c0)="$eJzs3c1vXFdfB/DvHduJH/chydOGUqK2nqQkdVvj2A5NiLooiT1JXPyCbEdqxKIpjYOiGAotSG2F1FRCrFqBBGIBu4oVq0rdUBaoGwQ7umKBhPovVKzCyujOjO2xPeNxjGO76edjzcx9+d1zfnfuy/HM3JkTflxWjm8YW1mp33Y5fvMf9yFjDrGrk99/+dUX5e2zBzmSnrxe/FPSn6Sa9CZ5LumbmJyfm+lS0P3kdpJvkyLJ0TQed+R2ir/Mz9fHv03x92W9HR3Zacl0s8JP2kHvfwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcBgVE5Ojo2PFkUzN3ny72pBUt5iYnJ8rsrKydc7qMg3f1Hv9Lr7pWm9SlLf096929f3cyfXZzyapnsnzjbHn6x2Spz+fPPXsiTee6a2sLt8pm/+Xozsv9sOPP7n/7vLy0gdt5xbFHmZ1yDT2keu12amFuamZK9dr1amFuerlixdHz9+4tlC9NjVdW7i1sFibqU7M164szs1XhyZeqY5dvnyhWhu5NXdz9vrkyHRtdeKlXx8fHb1YfWvkd2pX5hfmZs+/NbIwcWNqenpq9no9ppxdxlwqd8TfnlqsLtauzFSrd+8tL13YlFlPNu2/ZdBYt/Upg8a7BY2Pjo+PjY2Pj33W7D17bcLF1y+/fml0tHd0k2yJeEw7LYfLzzpv5r0/icMuVRrtfzKdqczmZt5Ote3fRCYzn7nMdJjftNr+nz1f27batLT/zVa+t2X+qfLuTF5sjvZ3aP875LJ/fx/m43yS+3k3y1nOUj448Iz29+96apnNVBYyl6nM5Ep9SrU5pZrLuZiLGc07uZHBLKQ31zKV6dSykFtZyGJq9T1qIvOp5UoWM5f5VDOUibySasZyOZdzIdXUMpJbmcvNzOZ6JnOlXsrd3Ks/7xe2yXEtaGwnQePbBG1pzB+5/a9t/ueEJ1Bl2638GM7isDsrzfb/SPfQoYn9SAgAAADYc7/67zl28ul/+++kyAv1z+WvTU3XRg86LQAAAGAP1S/Xe7586CuHXkjh9T8AAAA8aYr6d+yKJAMZbAytfhPKmwAAAADwhKh//v9iisH1CV7/AwAAwBOm+2/sd40ohld//rd6p/F4pxnRGCsGrk1N10Ym5qbfGMu5+q8M1L9psKW0nqToq3/94NWcbkSdHmg8DqyXWNbZX0aNjbwxlldzprkiQy+VDy8NtYkcb0S+3Ih8uTWyJxsiL5SRAPCkO7NNe7zT9v/VDDcihk/Vm/zeUxva4J56yzqqZQWAw2Ktj53/bXZp1qb9b0a82Kn9/41tXv+XEU/n7mDjkoKRvJf3s5w7GU7zioPBdqWu9kbQuAxhuMu7AQPNSxa+u1TJ8Jb3A/rX1rU1dinjGW77jkBLucVqDhcacT2PZxsAwH47s207vNb+927X/g9v//q/pc11SSEAHAZrPdg/6sDgzoMPeh0BgI200gAAAAAAAAAAAAAAAAAAAAAAAAAAALD3dvQD/v9xLlleXkp221lAm4Hv/vWff6ljzOdPJf2PkuH2A5XsTc6Hf6AnyUHV/mYeealyGx+Wp87AxoEDPjEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwL4qkp930SnI0yWiS8/uf1ePz4KAT2CvV3S1WPMzDfJRje50OAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBPXfP3/ytpPD7VmJTeSnI2ye0kv3vQOT6K/i7zH+5THofPH9TvW37/v5L0ZaVIb2Ozp+ibmJyfmyl3heJoOf/7L7/6orx1LPLT1YGtvSqUBZQ1bOhcollDy5S+jUv9or7UwOTSh/f/5P0/qk5ere+YVxevTU/OXJ//rfXAZ4uvG10gtHaDsJrvn539l79qmXykWfnX5Zq2t7nea/V6J7fW+yvtlu5Q7w7cW14aL2tarL29+Kd/WGmd9XROJy8NJUMba/r98tahptObn8+Nih+KvyiO5W9zu779y2ejWCnKTXS8vv4/u3tveWnkvfeX76zl9Om9j1oKOJHBJHc2HmVdchqsn0/aqu91lb6y1tF6UHl3skt522opcWz9ed2wDr+o7zIDj7QO1c7rUNfleW9mdGFzRivlQfLXf/xMzm27pY+2KfFclxrbKn4o/qu4kf/Mn7f0/1Ept//ZtD062xRRj2zZU1rnbTi8KmfX13y8dcY7m8vseFTyGHye38tvrm3/Ssv5v7mtOhw3a+ejN1smdjhuVg+tbY6Llhq3HBdN3Y6LrUfqPxzf0qKsqx9GJze1SM2zT6dlmnmebER1yPOX81rSe+qRziivdTmjdFt+t8f/3xVD+Z880P8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABw+BVJT7vpleRskhNJjpfj1WRlc8yDXdRXGSh2k+ae2U3OPz5FxxUtHuZhPsqx/c4IAAAAAAAAgMfj6uT3X371RXmrfx7fk1+rNOdUk94kJ4q/6ZuYnJ+b6VJQX3J79SP9/vYhHSbndnn38/Xxb8ux57rUd7CXDwDAj9r/BQAA//+CGm1g") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) 12m33.83253095s ago: executing program 33 (id=359): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000030affffffff00000000000002000009080003400000000a0900010073797a30000000000c000640000000000000000214000000020a0101"], 0x70}}, 0x200000000000000) 12m17.275090868s ago: executing program 34 (id=665): socket$netlink(0x10, 0x3, 0x0) r0 = perf_event_open(&(0x7f0000000a00)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x750b1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800004, 0x3fff8000}, 0x0, 0xffffffffffffffff, 0x43a1bd76, 0x2, 0x20000000000009, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000140affffffff00f5ffffff0002000009080003400000000a0900010073797a30000000000c000640000000000000000214000000020a010100000000000000000000000a14000000110001"], 0x70}}, 0x0) r4 = dup(r2) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) socket$kcm(0x10, 0x2, 0x0) 11m7.08827158s ago: executing program 35 (id=1699): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000d00)=[{{0x0, 0x1e, &(0x7f0000002c00)=[{&(0x7f0000001500)="b25b365c0254a7c6fc7ea6155a71b613b02d1645aab67271075189c3540c4dd19ebfb3c4acf87f2eeb258e62cc6ae96db360d874500cb86b4185ee533bf708", 0x3f}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62071e7ec69f658d5a52d7eb7ea31db43f8cf570f335a80860ac4cc240dc149d8468493db8aad089f590d62e0bcb9d1dcee636ee311ee51839b7201745baef82209b2ab741dc5ea481ae9dcebe39b1101a42a8c82de46107541c240ad0d9ee4a9340cffd72aaea692a60993637c81d23a0d0ebbae66f1eb2771df2482c043d8715ae788b56cc91eaa4d6bbdec82d8f91eb822d0b5f3ebd86", 0x1}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f0000002b40)='-', 0x1}], 0x5, 0x0, 0xfd58}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce90bfdbcfb8a86a74f6799f98c36e23e210f053830ac8e978a0785884001a7099c4b9016f1a65a57390caf78c272cbf9711f94505dd525af1ff7d013438df5b844226f41b81e58eb73366", 0x4b}, {&(0x7f0000000540)="f2e659a0b00d26c2ee15", 0xa}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2964dd16e01d56b414499264923beda58d7da0313c1ccafe53965750f25bdaa6b56a87307ec23d48b6f35ce49a813a2bc3cb23fdf42826bdc16788ff466919594de5bf8a1fa5d825947271ade4a95efeb170c", 0xfffffd57}, {&(0x7f0000001340)="b8", 0x1}, {&(0x7f0000000500)="01", 0x1}, {&(0x7f0000000280)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000140), 0x1}, {&(0x7f0000000340)="e4", 0xfffffec2}], 0x2, 0x0, 0xffffff84}}], 0x5f, 0x4000000) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) 11m5.527387601s ago: executing program 36 (id=1715): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000cc0)=ANY=[@ANYBLOB="2400000076001f0300000000000000000800a100", @ANYRES32, @ANYBLOB="0c000d80080003"], 0x24}], 0x1}, 0x2404c8c0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x418, 0x148, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x348, 0xffffffff, 0xffffffff, 0x348, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x100, 0x148, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@hashlimit1={{0x58}, {'geneve1\x00', {0x20, 0x4f, 0x40, 0x4, 0x398, 0x10001, 0x7, 0x8, 0x40}, {0x92}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x4, 0x7a3, 0x6, 'snmp_trap\x00', {0x369bc443}}}}, {{@ipv6={@remote, @local, [0xffffff00, 0xffffffff, 0xffffff00, 0xffffff00], [0xffffffff, 0xffffffff, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x61}, 0x0, 0x1c8, 0x200, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x29, 0x1, 0x1, 'syz0\x00'}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x2, 0x4, 0x4}, {0x3, 0x2, 0x3}, {0x2, 0x4}, 0xf, 0x5}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x478) 10m42.831261157s ago: executing program 37 (id=1978): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) (async, rerun: 32) r2 = socket$unix(0x1, 0x5, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001980)=@newqdisc={0x43c, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0xfff3}, {0x0, 0xfff1}, {0x2, 0x8}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x80000001, 0x8001, 0x3, 0x0, 0x6, 0x4, 0x8, 0x9, 0x401, 0xfffffffc, 0x6, 0xfffffff7, 0x3, 0x3, 0x4, 0x3, 0x100, 0x8, 0xff, 0x80, 0x9, 0x8001, 0x80, 0x7, 0x101, 0x7, 0xeb, 0x7ff, 0x7, 0x10001, 0x9, 0x6, 0x9c01, 0x7, 0x4, 0x0, 0xfaa, 0xc88, 0x6, 0x8d1, 0x1ff, 0x2, 0x3, 0x80000000, 0x6a, 0xffffffff, 0x7, 0x4, 0x3, 0x6, 0x0, 0x100, 0x4, 0x9, 0x8, 0x3, 0xd, 0x14574, 0x0, 0x7f, 0x7, 0x1, 0x314, 0x7, 0xe, 0x4, 0x2, 0x45, 0x7, 0x4, 0x2, 0x8, 0x5, 0x3, 0x1, 0x4, 0x1, 0x40, 0xb, 0x3ff, 0xfffffff9, 0x6, 0x9, 0x8, 0x80, 0x59b, 0x1, 0x2, 0x6, 0xc, 0x0, 0xfffffffa, 0x4, 0xfa65, 0x4, 0x0, 0x70e, 0x9, 0xd, 0x1, 0x0, 0xed6, 0x7fff, 0xfff, 0x4, 0x4, 0xac1, 0x5, 0x4, 0x9, 0x5, 0x9, 0x7, 0x5371, 0x709d7f5b, 0xa09a, 0xfffffffe, 0x4b8a, 0x9, 0x7, 0x4, 0x3, 0x8a9, 0x6, 0x4, 0x10001, 0xc0000000, 0x4, 0x7, 0xf, 0x86, 0x7, 0x3, 0x9, 0x9, 0x663, 0xfffffffd, 0xe2, 0x0, 0x4, 0x4, 0x6, 0xff, 0x1, 0x9, 0x8, 0x7, 0x8001, 0x0, 0x4, 0x5, 0xfd, 0x90, 0xffff, 0x5, 0xfffeffff, 0x7, 0x9, 0x8e0e, 0x1, 0xe, 0x8, 0x1, 0x2, 0x5, 0x0, 0xb, 0x6, 0x4, 0x9, 0x9, 0x0, 0xc, 0xaa8, 0xcb1a, 0x7, 0xffffffff, 0x9, 0x2, 0x81, 0x401, 0x280, 0x0, 0x8, 0x9, 0x8, 0xfffffff9, 0x800, 0x18e, 0x5, 0x5, 0x1, 0x32, 0x6, 0x4f, 0x8, 0xfffffff9, 0x1, 0x0, 0x6, 0x1, 0x7, 0x8001, 0x7, 0x53f, 0x4, 0xd13b, 0xb, 0x6, 0xb, 0x100, 0x7, 0x5, 0x6, 0x1, 0x10001, 0x6, 0x4, 0x7, 0x82, 0xf0, 0x4, 0x3, 0x6, 0x4, 0x5, 0x400, 0x0, 0x0, 0x1004, 0x6, 0xc, 0x2, 0x1, 0x3, 0xc, 0x8, 0x80000001, 0x8, 0xa4eb, 0x7, 0x4, 0xffffffff, 0x1ff, 0x3ff, 0x3, 0x80, 0x3, 0x8001, 0x1, 0x8, 0xe1, 0xc, 0x5, 0x3, 0x95]}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x11}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'macvtap0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r3, {0xfffd, 0x10}, {0x1, 0xfff1}, {0xfff2, 0xa}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x4000860) (async, rerun: 64) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000003, 0x20031, 0xffffffffffffffff, 0xffffe000) (rerun: 64) mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3, &(0x7f0000000000)=0x3, 0xa, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000140)) (async) get_mempolicy(0x0, 0x0, 0x7fffffffffffffff, &(0x7f0000ffd000/0x2000)=nil, 0x2) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r4, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7ef}]}, 0x20}}, 0x80) 9m30.121917566s ago: executing program 38 (id=2709): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="8510000004000000950000000000000020000000000000000000000000000000950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) 4m43.302411779s ago: executing program 3 (id=5756): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/vlan/vlan0\x00') r0 = socket$inet(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1, @rand_addr=0x64010102}, 0x10) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0xfffffffffffffffb}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) socketpair$unix(0x1, 0x1, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x2) 4m43.026701215s ago: executing program 3 (id=5758): fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x2, 0x1) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x40002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x1}, 0xc004, 0x10000, 0x0, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_read_part_table(0x60a, &(0x7f0000000340)="$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") add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x22029, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, @perf_bp={0x0}, 0x70, 0x0, 0x0, 0x0, 0x4, 0x7, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 4m42.419135242s ago: executing program 3 (id=5763): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000180), 0xfefc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x10012, r1, 0x0) getsockopt$bt_hci(r0, 0x84, 0x22, &(0x7f00000010c0)=""/4106, &(0x7f0000000000)=0x100a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000001000000000000000000400071123d00000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 4m42.112243109s ago: executing program 3 (id=5765): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/../file0/file0\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000851000000300000018000000", @ANYRES32, @ANYBLOB="0000000000000000950000000000000095"], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0xc8, 0x10, &(0x7f00000004c0), 0x10}, 0x94) 4m41.873307723s ago: executing program 3 (id=5766): pipe(&(0x7f0000000040)) r0 = fsopen(&(0x7f00000001c0)='mqueue\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) eventfd2(0x800, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000140)={0x0, 0x4, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r3 = socket(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f00000002c0)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r4, 0x3) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0xf2, 0x12, 0xd9, 0x4, 0x0, 0x0, 0x40001, 0x9d1bb95c38af5465, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000180), 0xb}, 0x21, 0x800, 0x3, 0x7, 0x2, 0xb, 0x7, 0x0, 0x8000, 0x0, 0x7f}, 0x0, 0x6, 0xffffffffffffffff, 0x2) syz_emit_ethernet(0x42, &(0x7f0000002a80)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x5, 0x2}]}}}}}}}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x4000, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}]}}}}}}}, 0x0) 4m41.110691438s ago: executing program 3 (id=5770): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair(0x1a, 0x80000, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40, 0xffffffff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5ff, 0x0, 0x3}, 0x0, 0xb, 0xffffffffffffffff, 0x9) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x40200, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r3) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) 4m41.08266284s ago: executing program 39 (id=5770): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair(0x1a, 0x80000, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40, 0xffffffff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5ff, 0x0, 0x3}, 0x0, 0xb, 0xffffffffffffffff, 0x9) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x40200, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r3) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) 3m46.809483518s ago: executing program 9 (id=6270): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="1808000000040000000000000008000385100000aa00000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50afdff00000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xa}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300, 0x2834}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_HASH_MAX={0x8, 0x1b, 0x549}, @IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x30048801}, 0x8044) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r1, 0x421, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc35d4f6d52288271}, 0x200048c4) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89001) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c00", @ANYRES16, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00'], 0x1c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r3, 0x0, 0x0) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x38, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x38}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r2, 0x0, 0x24004000) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, r1, 0x4, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x40000) 3m46.584118571s ago: executing program 9 (id=6273): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01080000000000000000010000000900030073797a32fff500001400048008000240fffffffe08000140000000040900010073797a300000000050000000060a010400000000000000000100000208000b40000000000900010073797a3000000000"], 0xd8}, 0x1, 0x0, 0x0, 0x2000c045}, 0x24000004) 3m46.404025651s ago: executing program 9 (id=6276): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x3, 0x1d, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7fff}, [@exit, @map_idx={0x18, 0xa, 0x5, 0x0, 0x4}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10001}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xb16}}]}, &(0x7f00000000c0)='GPL\x00', 0xc00000, 0x17, &(0x7f0000000140)=""/23, 0x40f00, 0x9, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x8, &(0x7f0000000680)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000300)={0x2, 0x7, 0x20, 0x9}, 0x10, 0x0, 0xffffffffffffffff, 0x6, &(0x7f00000006c0)=[0xffffffffffffffff], &(0x7f0000000700)=[{0x1, 0x5}, {0x1, 0x5, 0xb, 0x3}, {0x1, 0x2, 0x6, 0xc}, {0x0, 0x4, 0x8, 0x3}, {0x5, 0x1, 0x5, 0x9}, {0x2, 0x5, 0x5, 0xa}], 0x10, 0xfffffff8}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 3m46.146221817s ago: executing program 9 (id=6278): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xc41a, &(0x7f0000000040)={[{@noblock_validity}, {@dioread_lock}, {@nobh}, {@nodioread_nolock}, {@noblock_validity}, {@usrjquota, 0x2e}, {@noacl}, {@nodiscard}, {@jqfmt_vfsv0}, {@auto_da_alloc}], [], 0x2c}, 0x1, 0x46d, &(0x7f0000000540)="$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") chdir(&(0x7f0000000140)='./file0\x00') syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x201c400, &(0x7f0000000140)=ANY=[], 0x1, 0x2b0, &(0x7f0000000280)="$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") setreuid(0xee01, 0x0) r0 = syz_clone(0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) 3m45.471840086s ago: executing program 9 (id=6286): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff}, 0x4000) stat(&(0x7f00000001c0)='./file2\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000040)='./file2\x00', &(0x7f0000000140), 0x9, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}, {@debug={'debug', 0x3d, 0x8}}, {@cache_readahead}, {@privport}, {@access_user}], [{@subj_role={'subj_role', 0x3d, '#! '}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'memory.current\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '][$)#%(:{Q:+):\''}}, {@fowner_lt={'fowner<', r2}}]}}) syz_io_uring_setup(0x424a, &(0x7f0000000400)={0x0, 0x955f, 0x20c8, 0x7fff, 0x400252}, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x24, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='5\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd=r3}]}, 0x24}}, 0x0) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x1000000, &(0x7f00000000c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$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") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f00000004c0), 0x208e24b) ftruncate(r4, 0xb35) 3m45.121016907s ago: executing program 9 (id=6290): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="1808000000040000000000000008000385100000ae00000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50afdff00000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xa}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300, 0x2834}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_HASH_MAX={0x8, 0x1b, 0x549}, @IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x30048801}, 0x8044) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r1, 0x421, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc35d4f6d52288271}, 0x200048c4) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89001) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c00", @ANYRES16, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00'], 0x1c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r3, 0x0, 0x0) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x38, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x38}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r2, 0x0, 0x24004000) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, r1, 0x4, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x40000) 3m44.88747477s ago: executing program 40 (id=6290): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="1808000000040000000000000008000385100000ae00000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50afdff00000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xa}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300, 0x2834}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_HASH_MAX={0x8, 0x1b, 0x549}, @IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x30048801}, 0x8044) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r1, 0x421, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc35d4f6d52288271}, 0x200048c4) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89001) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c00", @ANYRES16, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00'], 0x1c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r3, 0x0, 0x0) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x38, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x38}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r2, 0x0, 0x24004000) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, r1, 0x4, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x40000) 2m54.074349754s ago: executing program 5 (id=6873): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8}]}}}]}, 0x3c}}, 0x0) 2m53.670046378s ago: executing program 5 (id=6876): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$netlink(0x10, 0x3, 0x10) statfs(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000003c0)=""/209) 2m53.628267721s ago: executing program 5 (id=6877): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x3, 0x5, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x87}, @call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="9d679cbe30d20da0b6afb48b33e9893e4d95227deb48ee9cec50c71f295c534cd7e88361bdf240ffc26682b70c120d60e19e9d489d8345e6e1c63ce488978847d75004e10c6fe276858e597f62f9a8eb3f185e4c336596778862d7b226fba4295983437ca2e88b1710e3a9225ffa1772e8f52190c0dac81575af6fc03820a79c3f1654882d4649b64cfab65bf9ad508b3603f9be307cc583ff8193820311e8ef6fb4a9beab680c6580caa259adc05fcdf3de39cdc0f1791d568adf13b2344cf64e36", @ANYBLOB="b5af2000000000000000010000000c00018008000400ee"], 0x20}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) open$dir(&(0x7f0000000100)='./file1\x00', 0x40000, 0x4) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000300)={0x3, 0x38, '\x00', 0x1, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x5, 0x10, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x101280, 0x26f, 0xd, 0x3, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil) mmap(&(0x7f000095f000/0x3000)=nil, 0x3000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f00000002c0)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, 0x1, 0x6, 0x2, 0x100, 0x4, 0x140300}) syz_emit_ethernet(0x2a, &(0x7f00000002c0)={@local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) syz_emit_ethernet(0x102b, &(0x7f0000001c00)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x101d, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xf82, 0x0, @wg=@data={0x4, 0x7407, 0xfffffffffffffffd, "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"}}}}}}, 0x0) readv(r2, &(0x7f00000005c0)=[{&(0x7f0000000180)=""/53, 0x35}], 0x1) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f00000000c0)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x4a, &(0x7f0000000000)=0x6, 0x4) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0xfe1d, @loopback={0xe0}, 0x9}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20004000, &(0x7f0000000080)={0xa, 0x4e22, 0x40000000, @empty, 0x6}, 0x1c) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000180)={[{@dioread_nolock}, {@stripe={'stripe', 0x3d, 0x3}}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@jqfmt_vfsold}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}], [{@appraise}]}, 0xfd, 0x573, &(0x7f0000000cc0)="$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") mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) 2m53.060398844s ago: executing program 5 (id=6879): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x2, 0x0, 0x7, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x4, 0x8, 0x2020009, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20081e, &(0x7f0000000840)={[{@grpjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xa30}}, {@grpquota}]}, 0x1, 0x52a, &(0x7f0000001440)="$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") openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x80642, 0x150) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x23, 0x64, 0xf31, 0xfffffffb, 0x400, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xfff3, 0xb}, {0xa, 0x1b}}}, 0x24}, 0x1, 0x0, 0x0, 0x4008051}, 0x4000) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) wait4(r1, 0x0, 0x8, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x280) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="40000000010103001000000000000000020000052c000180060003028005000107dadc5003a07873a1fca6000800000014000180080001000000000008000200ac14fca900000000000000"], 0x40}, 0x1, 0x0, 0x0, 0x4040801}, 0x4000040) ptrace$poke(0x5, r1, &(0x7f00000004c0), 0xc000000000000005) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffb1bfdf}, 0xc) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4000, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x1c) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000001080)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000050000000000000001000084000000000300000002000000000000210000000000000005000000000000005f"], &(0x7f0000000280)=""/254, 0x41, 0xfe, 0x1}, 0x28) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) 2m52.472193918s ago: executing program 5 (id=6886): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x7}, 0x1, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000d00)=[{{0x0, 0x1e, &(0x7f0000002c00)=[{&(0x7f0000001500)="b25b365c0254a7c6fc7ea6155a71b613b02d1645aab67271075189c3540c4dd19ebfb3c4acf87f2eeb258e62cc6ae96db360d874500cb86b4185ee533bf708", 0x3f}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62071e7ec69f658d5a52d7eb7ea31db43f8cf570f335a80860ac4cc240dc149d8468493db8aad089f590d62e0bcb9d1dcee636ee311ee51839b7201745baef82209b2ab741dc5ea481ae9dcebe39b1101a42a8c82de46107541c240ad0d9ee4a9340cffd72aaea692a60993637c81d23a0d0ebbae66f1eb2771df2482c043d8715ae788b56cc91eaa4d6bbdec82d8f91eb822d0b5f3ebd86", 0x1}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f0000002b40)='-', 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce90bfdbcfb8a86a74f6799f98c36e23e210f053830ac8e978a0785884001a7099c4b9016f1a65a57390caf78c272cbf9711f94505dd525af1ff7d013438df5b844226f41b81e58eb73366", 0x4b}, {&(0x7f0000000540)="f2e659a0b00d26c2ee15", 0xa}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2964dd16e01d56b414499264923beda58d7da0313c1ccafe53965750f25bdaa6b56a87307ec23d48b6f35ce49a813a2bc3cb23fdf42826bdc16788ff466919594de5bf8a1fa5d825947271ade4a95efeb170c", 0xfffffd57}, {&(0x7f0000001340)="b8", 0x1}, {&(0x7f0000000500)="01", 0x1}, {&(0x7f0000000280)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000140), 0x1}, {&(0x7f0000000340)="e4", 0xfffffec2}], 0x2, 0x0, 0xffffff84, 0x11000000}}], 0x5f, 0x4000000) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) 2m51.668042226s ago: executing program 5 (id=6896): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="180600000000000000000000000000001812b0ff", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b707000000000000180100002020702500000000202020207b1af8ff00000000bfa100000000000007010000ffffffffb702000008000000b703000000003133850000000600000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m51.627919088s ago: executing program 41 (id=6896): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="180600000000000000000000000000001812b0ff", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b707000000000000180100002020702500000000202020207b1af8ff00000000bfa100000000000007010000ffffffffb702000008000000b703000000003133850000000600000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m25.787657371s ago: executing program 8 (id=7192): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x0, 0x7, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1, 0x5, 0x2, 0xffff, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) pselect6(0x40, &(0x7f0000000040)={0xc}, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)={0xa, 0x4e1f, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1}, 0x1c, &(0x7f0000001780)=[{&(0x7f0000000040)="a4", 0x1}], 0x1}}, {{&(0x7f00000004c0)={0xa, 0x4e21, 0x0, @remote, 0x1}, 0x1c, &(0x7f0000000740)=[{&(0x7f0000000500)='l', 0x1}], 0x1}}], 0x2, 0x0) shutdown(r0, 0x1) syz_emit_ethernet(0x5e, &(0x7f0000003680)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabbc6dd60122d9200018000000000000000000000000000000000bbff0200000000000000000000000000018900907800000000000000000000000000000001ff000400ff020006000000000000000000000001"], 0x0) 2m25.479999149s ago: executing program 8 (id=7196): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000000)={[{@nomblk_io_submit}, {@bh}]}, 0x1, 0x47a, &(0x7f0000000180)="$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") 2m24.878343995s ago: executing program 8 (id=7201): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, 0x0, 0x40000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="180200008010000000000000040000008500000027000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000000c0)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) sendmsg$inet(r1, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) r5 = getpid() r6 = syz_open_dev$sg(&(0x7f0000000180), 0x7, 0x0) ioctl$SG_BLKTRACESETUP(r6, 0xc0481273, &(0x7f00000001c0)={'\x00', 0x7, 0x3, 0x4000400, 0x7, 0x100000001, r5}) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r7 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r8, 0x400, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) preadv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000280)=""/196, 0xc4}], 0x1, 0x8, 0xffffffff) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000a40)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d03000000000000000000000400000000000000000000000b030000000000006361"], 0x0, 0x52}, 0x28) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) r9 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x103440) syz_usb_disconnect(r9) syz_usb_connect$cdc_ncm(0x3, 0xf3, &(0x7f0000000540)=ANY=[], 0x0) 2m21.711095401s ago: executing program 8 (id=7248): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x80) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) syz_clone3(&(0x7f0000000640)={0x8000, &(0x7f0000000280), &(0x7f00000003c0)=0x0, &(0x7f0000000440), {0x2b}, &(0x7f00000004c0)=""/101, 0x65, &(0x7f0000000540)=""/118, &(0x7f00000005c0)=[0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x9, {r0}}, 0x58) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x4, @perf_config_ext={0x3fffffffc}, 0x0, 0x4, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, r1, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) getpgid(r1) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0/../file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x80) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) fchdir(r0) (async) syz_clone3(&(0x7f0000000640)={0x8000, &(0x7f0000000280), &(0x7f00000003c0), &(0x7f0000000440), {0x2b}, &(0x7f00000004c0)=""/101, 0x65, &(0x7f0000000540)=""/118, &(0x7f00000005c0)=[0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x9, {r0}}, 0x58) (async) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x4, @perf_config_ext={0x3fffffffc}, 0x0, 0x4, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, r1, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async) getpgid(r1) (async) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) (async) chroot(&(0x7f0000000100)='./file0\x00') (async) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) (async) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0/../file0\x00') (async) 2m21.411965289s ago: executing program 8 (id=7252): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) write$binfmt_script(r3, &(0x7f00000002c0)={'#! ', './file0', [{}, {0x20, '\x00\x18\xcf\xabo~\x103\x12x\xdc@\xd1\x90\r\x99\xce8&\xa2$\x0e\x83\x832\\\xc7\xbc\a00\x1d\b\xfa!\b#\x0e\x99\x87%\x8d\xd1\xe9\x8bZ\x1f\x9fgU!K\x80V\x90;*\xa6 \xe7\xd0{o\xe5T\x0e:\x1dzO\xb8\xdb\xec\xb8\x7f\t?\x99\"\a\x92\xd00Z\xd8\xb1\xaa\xf3\x1b\xae\x85(\xf0[kFzbO\r\xc87\x9e\xc4\xdd$\xd9\xa9\b5\xd3\x95\xd9\xf22\xac\x93L&A\xa9o\x1c\x8e\xc7'}]}, 0x8a) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, r2, 0x0, 0x343}}}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x48800}, 0x0) 2m20.573693828s ago: executing program 8 (id=7260): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000851000000300000018008900", @ANYRES32, @ANYBLOB="0000000000000000950000000000000095"], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0xc8, 0x10, &(0x7f00000004c0), 0x10}, 0x94) 2m20.532261501s ago: executing program 42 (id=7260): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000851000000300000018008900", @ANYRES32, @ANYBLOB="0000000000000000950000000000000095"], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0xc8, 0x10, &(0x7f00000004c0), 0x10}, 0x94) 1m51.370543689s ago: executing program 0 (id=7576): syz_usb_connect(0x6, 0x24, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffffb}, 0x0, 0x1, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./bus\x00', 0x2000410, &(0x7f00000006c0)={[{@bsdgroups}, {@jqfmt_vfsv1}, {@errors_remount}, {@quota}, {@jqfmt_vfsold}]}, 0xc1, 0x7e9, &(0x7f00000017c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, &(0x7f0000000100)={0x1, 0x2, 0x5b, &(0x7f0000000080)=""/91}) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0xfd09, 0x1000, 0x8000001, 0x224}, &(0x7f0000000040), &(0x7f0000000000)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0}, 0x28) 1m50.289347482s ago: executing program 0 (id=7586): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xc8, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x4, 0x6}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000005c0)='\"', 0x1, 0x4fed0) 1m50.061352475s ago: executing program 0 (id=7588): bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffff5) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0xff) 1m49.738689095s ago: executing program 0 (id=7591): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f00000000c0)={[{@quota}, {@bsdgroups}, {@nouid32}, {@errors_remount}, {@jqfmt_vfsv1}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x2, 0x46b, &(0x7f0000000580)="$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") perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$selinux_context(0xffffffffffffffff, &(0x7f0000000340)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) r0 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') io_setup(0x7, 0x0) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) pread64(r0, &(0x7f0000002240)=""/237, 0xed, 0x4eb) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001400b59527bd7000fcdbdf2523090000", @ANYRES32, @ANYBLOB="140002"], 0x34}}, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f00000000c0)={[{@quota}, {@bsdgroups}, {@nouid32}, {@errors_remount}, {@jqfmt_vfsv1}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x2, 0x46b, &(0x7f0000000580)="$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") (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) write$selinux_context(0xffffffffffffffff, &(0x7f0000000340)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) (async) syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') (async) io_setup(0x7, 0x0) (async) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) (async) pread64(r0, &(0x7f0000002240)=""/237, 0xed, 0x4eb) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001400b59527bd7000fcdbdf2523090000", @ANYRES32, @ANYBLOB="140002"], 0x34}}, 0x0) (async) 1m49.167638888s ago: executing program 0 (id=7596): syz_usb_connect(0x6, 0x24, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffffb}, 0x0, 0x1, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./bus\x00', 0x2000410, &(0x7f00000006c0)={[{@bsdgroups}, {@jqfmt_vfsv1}, {@errors_remount}, {@quota}, {@jqfmt_vfsold}]}, 0xc1, 0x7e9, &(0x7f00000017c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, &(0x7f0000000100)={0x1, 0x2, 0x5b, &(0x7f0000000080)=""/91}) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0xfd09, 0x1000, 0x8000001, 0x224}, &(0x7f0000000040), &(0x7f0000000000)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0}, 0x28) 1m48.615933461s ago: executing program 0 (id=7602): syz_emit_ethernet(0x82, &(0x7f00000006c0)={@broadcast, @random="17043a73dbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x64, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @rand_addr=0x64010102, {[@ssrr={0x89, 0x3, 0x6d}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x2, 0x3, 0x0, [{@private=0xa0100ff, 0x10000}, {@private=0xa010100}, {@local}, {@remote}, {@private}, {@remote, 0x200}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}]}}}}}}}, 0x0) r0 = creat(&(0x7f00000005c0)='./file0\x00', 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000000940)=0x707987cd) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x13}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) recvmsg(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000001c40)=""/4096, 0x8ec0}], 0x1}, 0x0) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) close(r0) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) r6 = socket$nl_route(0x10, 0x3, 0x0) set_mempolicy(0x5, &(0x7f0000000000)=0x4000000ff9, 0xf) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001100)=ANY=[@ANYBLOB="00000000104ebecadb", @ANYRES32=0x0, @ANYBLOB="a5fdad88000000001c0012800b00010067656e65766500000c0002800600050000000000"], 0x3c}}, 0x404c840) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) socket$inet6_udplite(0xa, 0x2, 0x88) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0x9, 0x6, 0x5, 0x801, 0x1, 0x4, '\x00', 0x0, r0, 0x3, 0x3}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r8, &(0x7f0000000180), &(0x7f0000000040)=@udp=r7}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r8, &(0x7f0000000140), 0x0}, 0x20) socket$xdp(0x2c, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x23, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x55, 0x2e5, 0x70bd2c, 0x13160000, {0x7, r11}, [@MDBA_SET_ENTRY={0x20, 0x1, {r11, 0x0, 0x0, 0x0, {@ip4=@empty}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x20000100) 1m48.603739372s ago: executing program 43 (id=7602): syz_emit_ethernet(0x82, &(0x7f00000006c0)={@broadcast, @random="17043a73dbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x64, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @rand_addr=0x64010102, {[@ssrr={0x89, 0x3, 0x6d}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x2, 0x3, 0x0, [{@private=0xa0100ff, 0x10000}, {@private=0xa010100}, {@local}, {@remote}, {@private}, {@remote, 0x200}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}]}}}}}}}, 0x0) r0 = creat(&(0x7f00000005c0)='./file0\x00', 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000000940)=0x707987cd) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x13}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) recvmsg(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000001c40)=""/4096, 0x8ec0}], 0x1}, 0x0) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) close(r0) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) r6 = socket$nl_route(0x10, 0x3, 0x0) set_mempolicy(0x5, &(0x7f0000000000)=0x4000000ff9, 0xf) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001100)=ANY=[@ANYBLOB="00000000104ebecadb", @ANYRES32=0x0, @ANYBLOB="a5fdad88000000001c0012800b00010067656e65766500000c0002800600050000000000"], 0x3c}}, 0x404c840) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) socket$inet6_udplite(0xa, 0x2, 0x88) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0x9, 0x6, 0x5, 0x801, 0x1, 0x4, '\x00', 0x0, r0, 0x3, 0x3}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r8, &(0x7f0000000180), &(0x7f0000000040)=@udp=r7}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r8, &(0x7f0000000140), 0x0}, 0x20) socket$xdp(0x2c, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x23, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x55, 0x2e5, 0x70bd2c, 0x13160000, {0x7, r11}, [@MDBA_SET_ENTRY={0x20, 0x1, {r11, 0x0, 0x0, 0x0, {@ip4=@empty}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x20000100) 7.385758345s ago: executing program 1 (id=8694): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a030000000c0000000000050000000900010073797a30000000000900030073797a300000000008000a400000000328000480080002400000001208000140"], 0xa4}}, 0x0) 7.184892877s ago: executing program 1 (id=8696): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') writev(r0, &(0x7f0000002680)=[{&(0x7f0000000600)="d058e8c511dc2d98f911c7e025fa7fc545b2e494978402daf118ab4eb83d81f704cc963d253af17c5dc46b9b05747fe7142fd8061d695bf0c6e895166e8a81abba7c7a72d3722f4c5d1e9b2aac54f2d260c44ab786b23a53cf86f38bbba858ffdcaedef61454ac17e895f2c485a2cb8daaaef1b731e19e1a0e9aa186ba7dcffcf8f7631e0815028e45bd072ba3701abe15632f9225716d5b3c21542cae02a484f1d63d9be2c37e767ac949ec0ce519a68f28584938f78c4492aab6519363de3a11e39c21134ddb87561921451a7dda4b506a4deaa8898996736cb2f11aa922051991edb744578c423f4dcc81f8d80a440b1524b26f7d430756567b6d882c40726303be0a352ee03b6d8d74f782c6118ea142203d04cb36ac65c2ce12f8b6cff723976cecc8f3ba5b525ef978b6f74d053f3d8f1e07027efed882d79026b87e7ce495a30bba32995ec030a1a6825ee67923c91021115eaf08cc940821067df9641318dcea6cf4ec97e61563690468d64cd8e773ae3ac2e9077d9fbacffa1180a26a5c7c8dad77142f70673a9191710f5fbb8ef64f3bd436b70cf42adff911b0c9a44222ca0c8d587e1672bb6dc206e292ad3ff780a9d1f4e2ab23184c65f3e9e0a9f844eedb1dc6683fa51053b46afa5f61a5cc8893fa84e81dc86f6a1a3274f174b8701ea666bc619a791b85a497e47cf43c68fba892839c4737027a6bd317ff97daf9f7396c9e52d28252a9ddd4bab49d6dd57f944a1b65132814a85fd2a6351f546e0acb98db7ad01955f65308110a32ecf4c1d58ee19ff400b8ffeda21861b52c885640ba24af8a7f43892a5a29da3fcd1195a3de13172118f540e2b430b6d10c8f21fd3ff7a81993752e1c86423e17f8ac746f6eceddb091641ba6865fdb196f2598e82b3e46cbe93bc04479f895d142639af60868da17067da91c131ccadc3601c9c26b2093d5a81ed633ebe3108deff9a87c46e1280509fd76161a06be418c360bd455e8dc779de89def3081938f9baf75cf7a38d402e12ccad08467f257c4c4d49e9589caa525f412da35f08954a34a959013c1f982efa5ca87491bd65332d74abe2709fe6590230f5f8479a627ef2331eec6b130fc89d3e60dbb0fcb97398fe9cd6fd1717f346e2f263a1df69f6c3e1794552e4ee7830b6fa0760d2b9c20a3381862d020edc182b0d7f8e62476d9dff7d483c17a0505ecccb66acc8ddefdd847c4831a81a4950f7707f343d1f9f24993ed34eb5c6be7a66ee5eb7d66d583e574672aca213ca9091b12f48c9f18a88e2c9b672917c9a3796178c2f5dd2b754e1ecc9067290bb9acff07038c4094ec5713277173ed28dec925532d50f7286ada669c68dec73e687302dfec67dfa5b43a70cebe5d667c326ce2af6fd2ecf00c295cede3a9a83b3d73be3be0e322814d14ffa9d44d96bed004ed238bfe95cb766e5723e892d86b3d5d67d16adbc9164ab3811bb209b4227ddd88024864229e6bddff4fb42ef0d60cdc8751071b717163c222e35258ef3aee9e89619a2b92ae0f8be47d50b6c9c80308af0785f20267041b4bcb9cfe1758ef3bed84eff77efe70d0196472d693fd58afcaa1701f69fbb47d6c91e0e92daab83e6f4aad29632568fd152bc8afbb76c0defa76f6f6b052c945bb0248c9be22f4a9f7bd2b5541cca0ffcee6bf16b4970d2ca4bca29d35aa3c0bf1fce0a7884101fa8eb437b95e4c230e55521f1a8c809d0ce6ac966c67f0d4de4ad46b468e59a28419883fc7804ecb4c239c0d04294fb8f2b15ca805a42f53a7206556bec1afb9e690d158aabf588217d66bc968233edda638d9079b8c85c51feb9d041197e269b47382d7291c564c5588d7048f80520a1bccb884dcf3bd4ee1ad7a878831d203d7ac0cb8fa7335353860b76d1cfd142e0079be52237f36f9a51bf83f4939b96ecd90f9235b46343f4ed972d49a64a87bfe9a71fd961f6d22a1bfdf15a3d21dd03ebd86b13cb6a38a9d4bdc6251686118e864a967a4c8d0647f926a5a17963f81307e70832292d1f5025d1dd369b67fa4a581f0a450cc1bab98d351a83a1cba84dae20e88307b338383cf7517624c1e51780182f809b35196b6fb8a3d7b8674270bf1d129fd42ebd54946749e8c823863bd970e14dee028dcf7e88ac624ceccc91a6b735285301a7e7274b0cc7fca7a5bb9ee935e983eacb0953f48deb690010802fa6529ffc4f65f2bbc547ccc4f00556b9460e9b6cfd091bc2346346b0cb2bfeccb3c8b71cc00e6aacf902430c46e46c1128df0db7cc14a35e1350503dbcd191b2404bce8eff6a450c8048a17b57717d59efbd4ed7190e7c16a8c7b89bce2850301e3d61f358b4b22f0740e0679dff9588fc5a222ad1a66ac819d34518c5700a14affd5fa53d85b48fde22124df994831370363858996ed41cef91beac1a6ba912970e8224f3cecc4fc46273c37746a4e7b532ef22c2fb1f014af5e440c055dc1c2afab5b2f1c4fabe2c339f9f147522181e8c7da500c30904b8f3e5dae76e15b7bc36456aa8028aadea7a07abcdbf96dd60e1087306c256f6f545855c0cb75e96d264dbce461ba06e85e636b372d0eeeae91d291ef99d5a900279a0b25f1846ff4d32869059a1db459304b5ebac4a47049744130a020a70610254fe5df7d55d6926b37b033fed821a1ab9d2841b87451f42ba0496db41690eecd1522f91e2b8a587624f143bee56f986e1cfcdbc7fd52bc86bfcadd836df99d78fd3fd87cb6a66447c01558e353c664eeba3266ba587a609c2255314c7d77403c2c5add4d67d92a5a5fa9bac9e5c7b4a2947f933ca455032606089072deaba411e9fa5908b328d52d8fe496b6ccfccd7701c7a625edc26a2a53732c939ce1163cdbd0397377d192040a5aac460e8dad1ef9f4dd531c624b201331715619fcfc86e2bc3540b5db7c5f3e8bbbb4f0f4e586b7a5741244766b662f000e7a18b69025d9e9df5e3800c0d88e147cc5e21c1d9fb31d4389af1c7d09b10892e191053f1f55192a84df10e49bf9714a1e921bb7dca41a603b364369f003765ce49417697f622d2a49ba6eb71e2a653fcce0d2e46b9964234e8abfeb412df3c2d47b09b6cdd928ae9ab4c98f48f78ccac42e3c89c1a9c1ae1f3ec93355233cd6a31834fc6af195ff7fd57c7f1d85114bd59d467bcb54e2d1f42306d4ff47d139a18a4f54302c51611940a539d9463b93dc95cf20b21863d9526042ed774f3cfefc634e9902c98d1fa6c737c14025a64c87dc99c43761ba6a81a4afd5f58a94f09987dc87c909ba9a98e445d33443636e5e1b154224c21a319f8f312faa526abb6ca405a444cac3aad1d3062616c15f1c5d25fa79ca1fcb313280b9e987b3de20ad552eab5cfc629325e42adfe2605c89bb8b6fade09911f423f2b51ef5232ade6f8e0170103265e5d524a469b7ade7d817ea7c76cdeb995b393869ff89b01afe1576e0f97e76bf56a7bd7f9313ab328ee089d43a012b94ed530bfd3dd17997ac71cb3e61d9a7893e03f5d0346b05563aafc4b9df9992334d73d0caa71f66f2c662658c1390ee4d01fd7f7b7cf8f08b8f1f1123be702d07185f6bfd2bf9a324be01d532471df2f1e090f9c58aae8da82051c3c73c53342f47772127d3e49556f3c9fe1dd6f0923f08d25ace0a349f445ed6603c7f1c499cf73fede86cd93cd3d64c09bf272b1e1c22e4c8645ebe8fe8218868727ca60c70e897933e31798aedf3b83f3b37549a583ea90312bef4e15f242f3b034ca450d9b5b0882f4bf313d1b3a2b788f6909dcf52aaff6f145d81dedecf64738727b5a6782a4c8f0a99b7bb62f0cd7ba150b7caf89339f8418e9e2cdfe031947fad9bb94805c43b88451c3d1320e5c9f38f1a5519cc63ef993742c3b63e8d831a06f307c475475fc137e1623bcfc72e3941c7bc7d08e287e9d284a5bfa6344af7acf5119c8bbd6bbdaaecb25f0a29c7f09799dba2cd29fb4623856de9ec3d5ff3f0dea0101e592c1aadea644b3886bf312ee934ae1df3a04459f6e12b900f7ae92ad364342cd82ecd5206d9e6e925b46dac6daab538e527c1b315d0b06b1b2a723f8ef86f8327b5dcaefb8ee584d6027445332b17afce547e561fd675cf520373980f05d9e358d8084888d2f8ac0cc2cd565feb719af55b638e568130ceb8f9acb9aacf6fe2db2e1a66c83c4a83d408b852ea60774b3072a6ccf8d41988ea4745c01be8fd784d2380f46dbfd9350fdcf07c102fdf2c30a31de8a1a6f89f8f93a98da10f790b8282e4bc612132453ffd944d6bd9dde81ab0166e1fba79254b3dfb25db22f6b571e21199ec83bb35872ec96d6b4bb95a0b507f68dc7b93e9df63c81b2c872faeca66ccbfbb31dfb42b9e399a7a1da305ee8d972004251310f26659c46136a77ee89bc0aa4bbc43911d220ad777d461b3a75527bedd95f9f70ce3259ab4860a2136112065d7d4d1869d624764306f886849b26369571be0a84c1356a9747ba338d6a23913ac12a074ec28f405d818d734b1630da78de6a859e98cdf16f3562b5f826235a0622ccd398edf25cad5cdb437473aeda94fe9c4b3f551aec4c2d3f70b8a62ec31baeb8d59c4229ce0195a91008a0c17625491ee14385c814156c5df675c7b9630ba5549b0288623475cf4b9787a96df659b3ff197b9c7254af3e3032a78254ace2a82aa47a0ed8db3f0d3b62faeb370afc6cb64ecca07dc6427b3517d9594959ca5f09b78b2d2f2e3714554939d649d0f82716f6c3846a52ca23e93ea65b0c579823ff4da3e2ca82081de3e8a06d16e44500b6378dc14cf00e914601e1f64ff14713da022befc7bbe755653331c7c34a5d3c0c10ee591532504408de19464604ecea35466687e413fdd239996d81afb2ff5d8a3b0efd552c76a0c44af637fb5138173cfce0e56384cc0a98f118644154a701298e863001eb4c34451dbed23e8e837346d9bb66a97e2f0da82c66008b80b0830bbdf5c38bbace5f23dead992559f354d3efbd706b2e02dc860d5c3c00aedb2ea2301a9d43fce16cbd695a794fda7a2e6c3c59f71190faa6b2f349d1ff243a3440b958fe6aea99bed4c04532ea8dd6e9f0073c9ba83ec9407e08120b37d37429e902b0c5b5f94f2ea51d6158220fe30b5b7af6acc9310067f26ad9b7c1ee533fb6540183a5183437794af6c176a5ac80b41eaa6a5823a4ba26e6b6f9eccdc8f04267f858718a845a5051e9ae83cefd6b275ecad1e2bcd43a7467c6f2c846473e1b346cdc142a37685a1813298c547ec386ac0d3f9adca9bcbc0ec048a3e93a97a6adcb233f0ecd3cbcac522a7aaec1f4198354bab644e234bad9b8e518d400418ddbaae0d130c5e93135868991c651ea9a5a707513e93c4bd26ef4de63ae286dda62788b61ca5375828e337f9606c1a8024b1e0cf9f159cca031dcf943e4d91669ab9174e36dce2a176b9978950ac2e309dcfb72bc6c7042dedd6106a91fc6f5db439cf4afbdab1746f3cfdb7e4378c8b4eb8b130a2bc88ab63cc6df5e8bc3e214d70768f1687f40aaa9fd2e54b4968de43062da6ed4157f9a74262dcc731262cf70bf2820aaaee9c1f03ff043a72cd2a7dd952786a8aee9939a28237f7bf61451fae32524bce0cd692ac2c35a606a468bcf27375e2c482b40fa753a1dd16524fb046d5a3fa96defbeadf50049fafd0499d29d92df2664326ffe742574c7dade0507ec69fd0688fb02d42ffee9f5be3587f4538f04df12ff82aec7364c8113dc259947d5a18a89f086c896f02f9bc5656acb47dc003dd4ec669af274c44d07eb269", 0x1000}, {&(0x7f0000000480)="81ff025023ae3126b76567d6c24f9559ddea10fa0772d7acba4117c6696509c649ae598c3f812b28a2124a32fd07a59622af8df88df1ffb9885f410b616a9d8aa202e7ede28f9ec1f2243f47bec428ee8e7373d2eddc50892ea3fdfa710aba36d0279fc1c5756e9eb1ce1e40b77c3c7d115d558934b2", 0x76}, {&(0x7f0000002600)}, {&(0x7f0000000000)="c0325ee86dadd6a8198c8c56d239631217e8b433164ea7ad07893441cff8828e5fb9b15e37ba90b9cabed070deb5b4028291174c46069c", 0x37}], 0x4) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x100000001}, 0x6144, 0x2, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) lseek(0xffffffffffffffff, 0x0, 0x3) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r1, 0x0, 0xde6c8001d5ed5ea6, 0xffffffffffffffff, 0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x340, 0x0, 0x4c, 0x1a, 0x0, 0x73, 0x270, 0x258, 0x258, 0x270, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x11}, 0x0, 0x110, 0x140, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0x6}}, @common=@unspec=@connbytes={{0x38}, {[], 0x3}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0xa}}, {{@uncond, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) modify_ldt$read(0x0, 0x0, 0x0) syz_clone(0x40000400, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={'veth0_macvtap\x00', {0x2, 0x4e20, @loopback}}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106a053103000000000001"], 0x0) r4 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0x0) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xa) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000280)={r4, 0x20, &(0x7f00000001c0)={&(0x7f0000000300)=""/147, 0x93, 0x0, &(0x7f00000003c0)=""/99, 0x63}}, 0x10) r7 = open(&(0x7f0000000080)='./file0\x00', 0x44000, 0x4c) fcntl$setlease(r7, 0x400, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1b, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x38, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x0) write$binfmt_elf64(r4, &(0x7f0000002600)=ANY=[], 0x1820) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r8, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x7, 0x5], &(0x7f0000000240), 0x0, 0x12}}, 0x40) getsockopt$IPT_SO_GET_INFO(r3, 0x0, 0x40, &(0x7f0000000140)={'mangle\x00', 0x7003, [0xa, 0x8004000a, 0x41, 0x85]}, &(0x7f0000000100)=0x54) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) 4.291707567s ago: executing program 1 (id=8721): r0 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x109801) ioctl$EXT4_IOC_SETFSUUID(r0, 0x5382, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x4413, &(0x7f0000000100)={[{@journal_dev={'journal_dev', 0x3d, 0x80000000}}, {@auto_da_alloc}, {@errors_remount}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [{@smackfsfloor={'smackfsfloor', 0x3d, 'ext4\x00'}}, {@fowner_lt}, {@measure}], 0x2c}, 0x0, 0x45a, &(0x7f0000000480)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x80802, 0xb) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x5]}, 0x8) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@newtfilter={0x24, 0x2c, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x3, 0x1}, {0xfff1, 0x10}, {0x10, 0x2}}}, 0x24}}, 0x8040) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01032757c38d085641a7220000000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x20040005}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00', 0x0}) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000900)={@loopback, @dev, 0x0}, &(0x7f0000000940)=0xc) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000b40)={'tunl0\x00', &(0x7f0000000980)={'sit0\x00', 0x0, 0x40, 0x80, 0x2da5, 0xa1, {{0x59, 0x4, 0x2, 0x5, 0x164, 0x2, 0x0, 0x8, 0x2f, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x37}, {[@cipso={0x86, 0x2d, 0x2, [{0x2, 0x11, "bc48032be8ac3b92f1df5046d70867"}, {0x6, 0x3, "c4"}, {0x0, 0x8, "e724c202774f"}, {0x2, 0xb, "49a0b409bba58bbea4"}]}, @rr={0x7, 0xb, 0x31, [@broadcast, @multicast2]}, @cipso={0x86, 0x79, 0x2, [{0x6, 0x5, "67abd7"}, {0x2, 0x12, "1b47eefa501fbef3d1c3ad0ba068b70c"}, {0x5, 0x2}, {0x7, 0xd, "d8e8b439a85b93070b460e"}, {0x1, 0xc, "d659b364a053471e644b"}, {0x6, 0xa, "da2b8beb1fb75d0b"}, {0x5, 0xa, "c75f9f88a697a9cb"}, {0x6, 0xe, "be7661e49a6e792efe622af0"}, {0x1, 0xe, "c78562cab2de0f4846a688b9"}, {0x5, 0x11, "673b3124472491af4b6d9b4f0e98a4"}]}, @timestamp_addr={0x44, 0x2c, 0xa3, 0x1, 0x2, [{@loopback, 0x5}, {@empty, 0x9}, {@loopback}, {@dev={0xac, 0x14, 0x14, 0x1f}, 0x5}, {@multicast2, 0xfffffffd}]}, @timestamp_prespec={0x44, 0x54, 0x14, 0x3, 0xe, [{@multicast1, 0x8}, {@loopback, 0x3}, {@loopback, 0x21a}, {@rand_addr=0x64010101, 0xf}, {@empty, 0xae6}, {@multicast2, 0x3f9}, {@empty}, {@empty, 0x2d}, {@multicast2, 0xf93b}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xa71}]}, @lsrr={0x83, 0x13, 0xd3, [@dev={0xac, 0x14, 0x14, 0x1b}, @loopback, @private=0xa010102, @remote]}, @ra={0x94, 0x4}, @end, @ra={0x94, 0x4}]}}}}}) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r10, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r10, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xa}}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r10, 0x29, 0x1, &(0x7f0000000400), 0x4) setsockopt$inet6_tcp_TCP_ULP(r10, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r10, 0x11a, 0x2, &(0x7f0000000040)=@gcm_256={{0x304}, "c4915c7f49541ce8", "9b84f987950ff3df25fa8f46983d34157e047d27ae4a66a6d15608a32cbaa5bc", '\x00\x00 \x00', "a3f7a0879100"}, 0x38) recvmmsg(r10, &(0x7f0000005180)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x2000, 0x0) getsockopt$inet_mreqn(r4, 0x0, 0x20, &(0x7f0000000b80)={@loopback, @multicast2, 0x0}, &(0x7f0000000bc0)=0xc) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r3, &(0x7f0000001180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001140)={&(0x7f0000000c00)={0x524, r6, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x8c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x88, 0x3, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'ext4\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000000}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/dev/sg#\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8000}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'measure'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x94}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xdbf0}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '9p\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf40}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '{\xbf-{@\x00'}]}]}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x284, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x7d, 0x5, "b9c16247c22c299ec0496c28f0ebfa77feca5164d9b3d665777e7624957f8f45c53b2b7ffb02ca9ad04e43c8250385a83992007ce74a163c5d1278e2b860a4fd1a3ae0636c7bfb527e588607d1eed28d4831243aec2efec6d74d6ed7e50fbf9b16031780b92505ce23e3f5b40b49faee5003e181494c29b926"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7fffffff}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xe6, 0x5, "57a96376040d09c2a249bee9966161d574af8d7be7389ae847ca52c12d8c1a4e5ee0b69a43d8f1e82b87a800a2f6192e165c1d7d97b57bca6d43b0c0ac1c1df199a875ef0bb6bed4e44bc4d467622a75d1dcccdbd39f17223d022e833a5a691f9a4a40ee7bd0ca11a641751b121c31a040f13f673733997170543204c0cd0f0ab2611cf54fce72371b9481b0c2694cd0d1b12ff1b820d13ab049680e37eb7b3f20f1c7169eb35fd69a9511d43af6814d07d91ba614911518f79d1e0f44c11e1a5ffed44edc9b7a5d7d6e8d99f6472f47e20fb786059f0c0e0e1ef4f691bcaf5536fb"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0xf0, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'usrjquota='}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8000}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'measure'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\xbc\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x51}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, 'jqfmt=vfsv0'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/dev/sg#\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, 'smackfsfloor'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffc}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffb}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x14}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x401}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x124, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x11c, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc8}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, '(.]/\'&[[&$-\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ')\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'usrjquota='}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'measure'}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/dev/sg#\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, 'jqfmt=vfsv0'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'measure'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '%\xed\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, ':\xa6/\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/dev/sg#\x00'}]}]}]}]}, 0x524}, 0x1, 0x0, 0x0, 0x8080}, 0x40040) getsockname$packet(r3, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000700)=0x14) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r12, @ANYBLOB="0000040000000000000012800b000100697036746e6c00000c00028008000100c709b5adafc6a337181529e1033dfaeb47cb89d7e24136b6eb1baba8e168ad4bd1be304d4cda231bc75674e3b720151c06415ab7053c78", @ANYRES32=r3], 0x3c}}, 0x4880) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000004600)={&(0x7f0000000180)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=r12, @ANYBLOB="0000000020010000300012800b000100697036746e6c0000200002"], 0x50}}, 0x20004010) mount$9p_fd(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f00000001c0)) 3.925343899s ago: executing program 1 (id=8725): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, 0x0, 0x40000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000000c0)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) sendmsg$inet(r1, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x3) r5 = getpid() r6 = syz_open_dev$sg(&(0x7f0000000180), 0x7, 0x0) ioctl$SG_BLKTRACESETUP(r6, 0xc0481273, &(0x7f00000001c0)={'\x00', 0x7, 0x3, 0x4000400, 0x7, 0x100000001, r5}) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r7 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r8, 0x400, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) preadv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000280)=""/196, 0xc4}], 0x1, 0x8, 0xffffffff) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000a40)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d03000000000000000000000400000000000000000000000b030000000000006361"], 0x0, 0x52}, 0x28) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) r9 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x103440) syz_usb_disconnect(r9) syz_usb_connect$cdc_ncm(0x3, 0xf3, &(0x7f0000000540)=ANY=[], 0x0) 2.922528998s ago: executing program 2 (id=8736): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xe, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_io_uring_setup(0x111, &(0x7f0000000140)={0x0, 0x0, 0x800, 0xffffffff, 0xfffffffe}, &(0x7f0000000340)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x60000, 0x0) ioctl$PPPIOCGDEBUG(r3, 0x80047441, &(0x7f0000000100)) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000b40)=[{0x0}, {0x0}], 0x2}, 0x0, 0x60, 0x0, {0x1}}) io_uring_enter(r0, 0x69ae, 0x2000, 0x0, 0x0, 0x0) 2.666605313s ago: executing program 2 (id=8740): bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', 0x101c08a, &(0x7f00000000c0)={[{@utf8no}, {@utf8no}, {@shortname_win95}, {@uni_xlate}, {@numtail}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp869'}}, {@shortname_winnt}, {@rodir}, {@fat=@tz_utc}, {@iocharset={'iocharset', 0x3d, 'cp855'}}, {@numtail}, {@numtail}, {@rodir}, {@fat=@dos1xfloppy}, {@shortname_win95}, {@fat=@tz_utc}]}, 0x5, 0x2d2, &(0x7f00000008c0)="$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") perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0xff9, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs(0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2, &(0x7f0000000340)={[{@jqfmt_vfsold}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@abort}, {@noload}, {@delalloc}, {@max_batch_time={'max_batch_time', 0x3d, 0x1}}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@bsdgroups}, {@init_itable_val={'init_itable', 0x3d, 0xfff}}]}, 0xfa, 0x477, &(0x7f0000001380)="$eJzs3M9vFFUcAPDvTH/w21bEHyBIFY3EHy0tP+TgRaMJB01M9IDxVNtCKgs1tCZCiFYPeDQk3o3/hfGkF6NeNPGqd0NCDBdQL2tmZwaWZbfd0m0X2M8nme57M6/73ndm3u6bebsbQM8ayf4kEVsj4o+IGMqztxYYyR+uX70w9c/VC1NJVKtv/53Uyl27emGqLFr+35Y8U60W+Q1N6r34XsRkpTJztsiPLZz+cGz+3PkXZ09Pnpw5OXNm4ujRQwf3DB6ZONyROLO4ru36ZG73zmPvXnpz6vil939O0sjjjoY4OmUk37tNPdPpyrpsW1066a/fsvfXm+lmZwLd1BcR2eEaqPX/oeiLTTe2DcXrn3e1ccCaqlar1SVelRerwH0siW63AOiO8o0+u/4tl3UaetwVrrySXwBlcV8vlnxLf6R5Yu9Aw/Xt1g7WPxIRxxf//TpbYo3uQwAA1Ps+G/+80Gz8l8YjeWIw+/NAMYcyHBEPRsT2iHgoInZExMMRtbKPRsRjK6y/cYbk9vFPevmOg2tDNv57uZjbunX8l5ZFhvuK3LZa/APJidnKzIFin+yPgQ0nZpOZ8SXq+OG1379sta1+/JctWf3lWLBox+X+hht005MLk6uJud6VzyJ29TeLP4lyGieJiJ0RsesO65h9rr/ltuXjX0Lrp21b9ZuIZ/PjvxgN8ZeSlvOT4y8dmTg8tjEqMwfGyrPidr/8dvGtVvWvKv4OyI7/5qbn/434h5ONEfPnzp+qzdfOr+jps64TF//8ouU1TRF/1r3aOf+PbSvO/8HkndqKwWLDx5MLC2fHIwaTN25fP3Hz2cp8WT6Lf/++5v1/e9zcE49HxO6I2BMRT2QXhUXbn4yIpyJi3xI74adXn/5gmfibHP/1mSvN4p9e7vhH/fFfeaLv1I/fLR//xohodfwP1VL7izXtvP6128DV7DsAAAC4V+SfgU/S0RvpNB0dzT/DvyM2p5W5+YXnT8x9dGY6n/cejoG0vNM1VHc/dLy4N1zmJxryB4v7xl/1barlR6fmKtPdDh563JYW/T/zV1+3WwesuQ7MowH3KP0fepf+D70p0f+hp+n/0Lua9f9PW5Ye/XZNGwOsK+//0Lva6P+L+UPrUQFwb/L+D71L/4ee1PK78emqvvK/7on/it8zvFvac/8nIr0rmnH/J/rb/jGLFSSqQ3n/z9ZsaFqm269MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnfF/AAAA//8Qi+Nc") futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000000540)=0x2000204, 0x300) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) ioctl$FS_IOC_RESVSP(r1, 0x4030582b, &(0x7f00000001c0)={0x1100, 0x2, 0x3, 0x401, 0x2000000}) clock_nanosleep(0x9, 0x0, 0x0, 0xfffffffffffffffe) openat$sndseq(0xffffffffffffff9c, 0x0, 0x2143) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x40305829, 0x0) 2.336177972s ago: executing program 6 (id=8743): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f0000000040)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0xfffffffc, @dev={0xfe, 0x80, '\x00', 0x3}, 0x3}, 0x1c) sendmsg$inet6(r0, &(0x7f0000001280)={&(0x7f0000000240)={0xa, 0x4e23, 0x2, @private0, 0x6}, 0x1c, &(0x7f0000000200)}, 0x80) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x8, 0x2, 0x819}, 0x14) 2.21057458s ago: executing program 6 (id=8745): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000008000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r1 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r0, r0, 0x2f, 0x0, @void}, 0x10) ioctl$AUTOFS_IOC_FAIL(r1, 0x9361, 0x280000000) bpf$PROG_LOAD(0x22, &(0x7f0000000440)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x6}, 0x90) bpf$LINK_DETACH(0x22, &(0x7f0000000140)=r1, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x54, 0x0, 0x7, 0x3, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x24d}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x2}, @NFACCT_FILTER={0x1c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7ead}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x200}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x6}]}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x4000080) 2.073413038s ago: executing program 7 (id=8746): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000080)={@rand_addr=' \x01\x00', @private1, @dev={0xfe, 0x80, '\x00', 0x2b}, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x1800e3}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001840)='/proc/cgroups\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) write$binfmt_misc(r1, &(0x7f0000000400)="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", 0x12d) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000001b80)={'ip_vti0\x00', &(0x7f0000001b00)={'ip_vti0\x00', 0x0, 0x80, 0x1, 0x232e5d95, 0x4, {{0xd, 0x4, 0x2, 0x37, 0x34, 0x67, 0x0, 0xff, 0x29, 0x0, @multicast1, @local, {[@timestamp={0x44, 0xc, 0x2d, 0x0, 0xb, [0x7fffffff, 0x4]}, @cipso={0x86, 0xf, 0x3, [{0x5, 0x9, "799dddf26b7803"}]}, @ra={0x94, 0x4, 0x1}]}}}}}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r2, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="8b3e0023ec00"/20, @ANYRES32], 0x50) r4 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000300)=@filter={'filter\x00', 0xe, 0x3, 0x25e, [0x0, 0x200000000400, 0x200000000714, 0x20000000118a], 0x0, 0x0, &(0x7f0000000400)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{0x5, 0x8, 0x16, 'bond_slave_1\x00', 'veth0_vlan\x00', 'syzkaller0\x00', 'batadv_slave_0\x00', @local, [0xff, 0xff, 0xff, 0xff], @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x6e, 0x9e, 0x1ce, [], [@common=@STANDARD={'\x00', 0x8, {0xffffffffffffffff}}], @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x7fff, 'system_u:object_r:lvm_control_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x3, 0xfffffffffffffffe}]}, 0x2d6) write$selinux_load(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757815"], 0x65) r6 = creat(&(0x7f0000000000)='./file0\x00', 0x8c) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r6, {0x6, 0x6}}, './file0\x00'}) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) r7 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x121841) ioctl$SG_IO(r7, 0x2285, &(0x7f0000000140)={0x53, 0xfffffffffffffffb, 0x9, 0x3, @buffer={0x0, 0x0, 0x0}, &(0x7f00000001c0)="8589c5d3e700102735", 0x0, 0x3b, 0x12, 0x100, 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000001c80)={'sit0\x00', &(0x7f0000001c00)={'erspan0\x00', 0x0, 0x7, 0x8000, 0x7, 0x3, {{0x10, 0x4, 0x1, 0x17, 0x40, 0x66, 0x0, 0x2, 0x4, 0x0, @local, @multicast2, {[@rr={0x7, 0x7, 0x6f, [@multicast2]}, @rr={0x7, 0x23, 0xe4, [@local, @broadcast, @remote, @multicast1, @local, @multicast2, @local, @local]}]}}}}}) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x680242, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7, 0x2, &(0x7f0000006680)) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x6, 0x3) socket(0x40000000015, 0x1, 0x0) fchdir(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) unshare(0x60400) socketpair(0x3, 0x1, 0x0, 0x0) 1.998461243s ago: executing program 6 (id=8747): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x10000, &(0x7f0000000640), 0x1, 0x5c5, &(0x7f0000001a00)="$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") socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000041f0108000000000000000002000009"], 0x14}, 0x1, 0x0, 0x0, 0x4c081}, 0x20000001) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e22, @rand_addr=0x64010102}]}, &(0x7f0000000180)=0x10) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e22, @rand_addr=0x64010102}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f00000000c0), 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000200)={0x1, [0x0]}, &(0x7f0000000080)=0x8) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000200)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000440)={r2}, &(0x7f00000003c0)=0x8) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) 1.899945648s ago: executing program 7 (id=8748): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x10000, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x49) 1.69207369s ago: executing program 2 (id=8749): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="8510000004000000950000000000000018000000000000004100000000000000950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) 1.632091404s ago: executing program 7 (id=8750): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9400000000014f0400000000000000010a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000aa0c000280050001000000000008000740"], 0x94}, 0x1, 0x0, 0x0, 0xff97}, 0x0) 1.623769365s ago: executing program 7 (id=8751): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @multicast1}}}], 0x20}}], 0x1, 0x4049880) r0 = socket$inet(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8458, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x0, 0x401, 0x20004, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, 0x0, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027f"], 0x57) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000640), 0x1, 0x5c0, &(0x7f0000000c40)="$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") statfs(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 1.465833423s ago: executing program 2 (id=8753): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = syz_open_procfs(0x0, &(0x7f00000005c0)='smaps_rollup\x00') lseek(r0, 0x2000, 0x0) unshare(0x22020600) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) fsetxattr(r1, &(0x7f0000000100)=@known='system.posix_acl_access\x00', &(0x7f0000000140)='\x00', 0x1, 0x1) r2 = socket(0x10, 0x803, 0x0) mremap(&(0x7f0000331000/0x3000)=nil, 0x3000, 0x4000, 0x4, &(0x7f0000627000/0x4000)=nil) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f00000006c0)=ANY=[@ANYBLOB="08000000000000000af3000000000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000002000"], 0x5000) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r2) sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="ad0000006cdf36cd4d9c6b7b539b030d97550a9c91e8ba9304bf355df54500fd6bbb1cdcdca806b5fe0ec620e578631f9b3a5e5e6a83b73d08898bfd3ae29bd818f7b104e2b0b513619db95bc35e73b47d1cf6e0166c2d010926d43b876ac05738b3434c4b80a8813d708d0f3d8822c6ed7330c5296088b0655257fcf35493cae9861420e2435e5ecd3091c680d21bffc46b03", @ANYRES16=r4, @ANYBLOB="00022cbd7000ffdbdf2505000000080001007063690011000200303030303a30303a31302e30000000000800030000000000"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x88c1) fcntl$lock(r2, 0x5, &(0x7f00000001c0)={0x2, 0x2, 0x7fffffffffffffff, 0x589a0ec}) 1.374342899s ago: executing program 7 (id=8754): bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000000c0)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x26, 0xa, 0x0, 0x0, 0x0, 0x61, 0x10, 0xa0, 0x800000}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) 1.18789012s ago: executing program 7 (id=8757): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) r4 = openat(0xffffffffffffff9c, 0x0, 0x2040, 0x0) ftruncate(r4, 0x7f) sendmsg$nl_route(r2, 0x0, 0x42) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000)=0xa93f, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, 0x0, 0x0) r6 = getpid() r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r8, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r6}}]}, 0x3c}, 0x1, 0x600, 0x0, 0x4040010}, 0x30) r9 = getpid() r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010027bd7000fbdbdf25250000000e0001006e65746465767369690000000f00020008008b00790dbb04dc44a3359894ea64b31d77403d7b096d0c8a562fb25c9d50e2b3f808bde7cfcc5ef744a3b7fa7e6bd9f812a342c66696ad06b96b7d93b9756bb562d658f854747ef4a501f135b534453eeff01d738f7c00483bd513eac78f8f92817aaa6ac1c0f1bac719118881279fb4f4a1", @ANYRES32=r9, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) 1.149380592s ago: executing program 6 (id=8758): socket$inet_tcp(0x2, 0x1, 0x0) mknodat$loop(0xffffffffffffff9c, 0x0, 0x6004, 0x1) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0xc1) r0 = syz_io_uring_setup(0x5ce, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x82e, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0xb2752a96f73d6e14, 0x0, 0x0, 0x0, 0x23456}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 972.196923ms ago: executing program 4 (id=8760): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x4d) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) symlinkat(&(0x7f0000000200)='./bus\x00', r0, &(0x7f0000000240)='./bus\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000540)={r3, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f00000000c0)={r3, 0x1, 0x6, @multicast}, 0x10) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x18, &(0x7f0000000100)={0x0, r0, 0x4, {0x2000000000, 0x8000000000000001}, 0x5}, 0x1) setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f0000000080)={r3, 0x1, 0x6, @multicast}, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000001200002000128008000100687372001400028008000200", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r4], 0x40}, 0x1, 0x0, 0x0, 0x40010}, 0x8000) 971.249303ms ago: executing program 6 (id=8761): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9400000000014f0400000000000000010a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000aa0c000280050001000000000008000740"], 0x94}, 0x1, 0x0, 0x0, 0xfff5}, 0x0) 819.975352ms ago: executing program 6 (id=8762): r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x1000000000009, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x53a1bd79, 0x7, 0x9, 0x86, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000004000000000000000000001800000004000040000000000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x18, 0x7, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000e8ffffff00000000000000e50003000000000085100000fcffffff250000001000000007000000faffffff95"], &(0x7f0000000640)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x9}, 0x94) 802.761473ms ago: executing program 4 (id=8763): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) fstat(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_GETQUOTA(0xffffffff80000700, &(0x7f00000010c0)=@loop={'/dev/loop', 0x0}, r1, 0x0) 753.292476ms ago: executing program 1 (id=8764): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @multicast1}}}], 0x20}}], 0x1, 0x4049880) r0 = socket$inet(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8458, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x0, 0x401, 0x20004, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000300), 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027f"], 0x57) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000640), 0x1, 0x5c0, &(0x7f0000000c40)="$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") statfs(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 707.859178ms ago: executing program 4 (id=8765): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x1, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="18000019090001000000000002000000cf403c00000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008bd6000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x74130, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_config_ext={0xb2, 0x10000}, 0x10000, 0x10003, 0x6, 0x5, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mmap$perf(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x4000011, r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x6, @vifc_lcl_ifindex, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'wg1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x70bd27, 0x25dfdbff, {0xa, 0x17, 0x0, 0xff, r5}, [@IFA_LOCAL={0x14, 0x2, @loopback}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2004c040}, 0x0) pwrite64(0xffffffffffffffff, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180), 0x4) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r6, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) 528.090459ms ago: executing program 4 (id=8766): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f0000000040)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0xfffffffc, @dev={0xfe, 0x80, '\x00', 0x3}, 0x3}, 0x1c) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x8, 0x2, 0x819}, 0x14) 429.052115ms ago: executing program 1 (id=8767): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001200), 0x101101, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0xfffffffa) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x80000000) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000400000008000700000000000800020005000000050008"], 0x34}}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) socket(0x2b, 0x800, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xe8030000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x38}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0x10, &(0x7f0000000500)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r7, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) 374.109738ms ago: executing program 4 (id=8768): unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) semtimedop(0x0, &(0x7f0000000000)=[{0x3, 0x1000, 0x1000}], 0x1, &(0x7f0000000040)) 312.844062ms ago: executing program 4 (id=8769): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xc, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000080008500000087000000850000005000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='status\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000180)={0x0, @l2tp={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x33}, 0x4}, @ethernet={0x7, @multicast}, @ethernet={0x6}, 0x7, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x10001, 0x7, 0x5}) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x14, 0x0, 0x1, 0x0, 0x25dfdbfb, {0x25}}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="500000003f0001002cbd7000ffdbdf2501"], 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x8000) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e4000000000000000805000400030000000900020073797a3100000000050005000200000014000300686173683a69702c706f72742c6970000500010007"], 0x4c}, 0x1, 0x0, 0x0, 0x20044095}, 0x8042) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) r5 = socket(0xa, 0x5, 0x0) listen(r5, 0x100) sendmsg$inet_sctp(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x800d, 0x8, 0x100}}], 0x20, 0x4000000}, 0x8010) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) recvmsg(r6, &(0x7f000000c1c0)={0x0, 0x0, &(0x7f000000c080)=[{&(0x7f000000acc0)=""/4089, 0xff9}, {&(0x7f000000bcc0)=""/63, 0x3f}], 0x2}, 0x20) r7 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r7, 0x6b, 0x1, &(0x7f0000000300)=[{0x3, 0x3, {0x2, 0x0, 0x1}, {0x1, 0x1}, 0xff, 0xff}, {0x1, 0x3, {0x1, 0xf0, 0x1}, {0x1, 0xff}, 0x2, 0xfd}, {0x1, 0x3, {0x0, 0x1, 0x3}, {0x2, 0x1}, 0x1}, {0x2, 0x2, {0x1, 0xf0, 0x1}, {0x2, 0xff, 0x2}, 0x1, 0xfe}, {0x2, 0x1, {0x3, 0xf0, 0x2}, {0x1, 0xff}, 0xfe, 0x1}, {0x1, 0x2, {0x2, 0x1}, {0x0, 0xff, 0x1}, 0xfb, 0xfd}, {0x1, 0x2, {0x0, 0xf0, 0x2}, {0x2, 0xf0}, 0x1, 0xff}], 0xe0) r8 = syz_open_procfs(0x0, &(0x7f0000000700)='uid_map\x00') preadv(r8, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/107, 0x6b}], 0x1, 0x7, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000dc0)="d8000000180081084e81f783db4cb9040a10080006007c09e8fc55a10a0015000600142603600e120800020081000401a8000100fec0ffff000000fd035c0461c1d67f6f94007134cf6efb800189b316277ce06bbaceac3c2fb14c2ee5a7cef4090f00201f373f7b9555da25364c3b10b7b91b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e003640fad9e3bb9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1, 0x0, 0x0, 0x4788}, 0x8004) sendmsg$kcm(r9, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="d80000001c0081054e81f782db44b904021d08040e000000100d10a118000c000600142603600e1208000f0000810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee0800080e408e8d8ef52a98516277ce06ebace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad8099639cace81ed0bffec193e2a9ecbee5de6ccd4d6e4ed6f3d93452a92954b43370e970189", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 245.590936ms ago: executing program 2 (id=8770): setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, 0x0, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, 0x0, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="03000000000000002000128008000100677265001400028008000600ac141424a1000700e0"], 0x48}}, 0x0) 0s ago: executing program 2 (id=8771): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000aff", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) kernel console output (not intermixed with test programs): s=blk_file permissive=1 [ 736.370691][ T29] audit: type=1400 audit(2147485152.314:174267): avc: denied { read write open } for pid=1673 comm="syz.7.8085" path="/dev/loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 736.376234][ T1669] EXT4-fs error (device loop1): ext4_find_dest_de:2050: inode #2: block 3: comm syz.1.8084: bad entry in directory: inode out of bounds - offset=92, inode=117440528, rec_len=16, size=2048 fake=0 [ 736.415663][ T1674] loop7: detected capacity change from 0 to 512 [ 736.442360][ T1674] EXT4-fs: Ignoring removed bh option [ 736.479861][ T1674] ext2: Bad value for 'max_dir_size_kb' [ 736.569150][ T29] audit: type=1400 audit(2147485152.354:174268): avc: denied { create } for pid=1677 comm="syz.4.8086" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 736.589124][ T29] audit: type=1400 audit(2147485152.354:174269): avc: denied { getopt } for pid=1677 comm="syz.4.8086" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 736.608870][ T29] audit: type=1400 audit(2147485152.354:174270): avc: denied { map_create } for pid=1677 comm="syz.4.8086" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 736.628380][ T29] audit: type=1400 audit(2147485152.354:174271): avc: denied { prog_load } for pid=1677 comm="syz.4.8086" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 736.648033][ T29] audit: type=1400 audit(2147485152.384:174272): avc: denied { add_name } for pid=1668 comm="syz.1.8084" name="cpuacct.usage_sys" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 736.670273][ T29] audit: type=1400 audit(2147485152.384:174273): avc: denied { create } for pid=1668 comm="syz.1.8084" name="cpuacct.usage_sys" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 736.691834][ T29] audit: type=1400 audit(2147485152.404:174274): avc: denied { read write } for pid=24855 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 736.721122][ T422] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 736.917253][ T1699] netlink: 'syz.7.8093': attribute type 1 has an invalid length. [ 736.946233][ T1707] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 50696 - 0 [ 737.007452][ T1700] loop6: detected capacity change from 0 to 1024 [ 737.076297][ T1700] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 737.096360][ T1699] 8021q: adding VLAN 0 to HW filter on device bond5 [ 737.129681][ T1699] bond4: (slave bond5): making interface the new active one [ 737.173466][ T1699] bond4: (slave bond5): Enslaving as an active interface with an up link [ 737.183043][ T1707] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 50696 - 0 [ 737.235498][ T1709] __nla_validate_parse: 7 callbacks suppressed [ 737.235513][ T1709] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8094'. [ 737.252058][T32040] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 737.266918][ T1707] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 50696 - 0 [ 737.376501][ T1707] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 50696 - 0 [ 737.456979][ T1688] lo speed is unknown, defaulting to 1000 [ 737.498627][ T1725] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8096'. [ 737.582163][ T1707] bridge_slave_1: left allmulticast mode [ 737.587994][ T1707] bridge0: port 2(bridge_slave_1) entered disabled state [ 737.614548][ T1732] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: writeback. [ 737.630634][ T1707] bridge_slave_0: left allmulticast mode [ 737.633924][ T1732] EXT4-fs error (device loop7): ext4_iget_extra_inode:5073: inode #12: comm syz.7.8101: corrupted in-inode xattr: e_value size too large [ 737.636323][ T1707] bridge_slave_0: left promiscuous mode [ 737.636488][ T1707] bridge0: port 1(bridge_slave_0) entered disabled state [ 737.650551][ T1732] EXT4-fs (loop7): Remounting filesystem read-only [ 737.765739][ T1707] bond5 (unregistering): (slave gretap1): Releasing active interface [ 737.795753][ T1742] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8103'. [ 737.831304][ T1707] bridge0 (unregistering): left allmulticast mode [ 738.025047][ T1753] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8106'. [ 738.229698][ T1707] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 738.257888][T30706] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 738.271741][ T1707] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 738.291432][ T1707] bond0 (unregistering): Released all slaves [ 738.308427][ T1707] bond1 (unregistering): (slave bond2): Releasing backup interface [ 738.323181][ T1707] bond1 (unregistering): Released all slaves [ 738.349631][ T1707] bond2 (unregistering): Released all slaves [ 738.360610][ T1707] bond3 (unregistering): (slave bond4): Releasing backup interface [ 738.381933][ T1707] bond3 (unregistering): Released all slaves [ 738.399428][ T1707] bond4 (unregistering): Released all slaves [ 738.409264][ T1763] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 738.421700][ T1707] bond5 (unregistering): Released all slaves [ 738.433208][ T1763] EXT4-fs (loop7): orphan cleanup on readonly fs [ 738.439839][ T1707] bond6 (unregistering): Released all slaves [ 738.450042][ T1707] bond7 (unregistering): Released all slaves [ 738.456933][ T1763] EXT4-fs error (device loop7): ext4_orphan_get:1391: inode #15: comm syz.7.8110: iget: bad i_size value: 360287970189639680 [ 738.486669][ T1707] bond8 (unregistering): Released all slaves [ 738.522420][ T1763] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.8110: couldn't read orphan inode 15 (err -117) [ 738.538841][ T1707] bond9 (unregistering): Released all slaves [ 738.559589][ T1763] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 738.574518][ T1707] bond10 (unregistering): Released all slaves [ 738.583759][ T1707] bond11 (unregistering): Released all slaves [ 738.592440][ T1707] bond12 (unregistering): Released all slaves [ 738.613859][ T1707] bond13 (unregistering): (slave bond14): Releasing backup interface [ 738.645310][ T1707] bond13 (unregistering): Released all slaves [ 738.670185][ T1707] bond14 (unregistering): Released all slaves [ 738.694591][ T1707] bond15 (unregistering): (slave bond16): Releasing backup interface [ 738.717687][ T1707] bond15 (unregistering): Released all slaves [ 738.735238][ T1707] bond16 (unregistering): Released all slaves [ 738.744074][ T1707] bond17 (unregistering): Released all slaves [ 738.819247][ T1707] tipc: Disabling bearer [ 738.825114][ T1707] tipc: Left network mode [ 738.972121][ T1707] hsr_slave_0: left promiscuous mode [ 739.006981][ T1707] hsr_slave_1: left promiscuous mode [ 739.033749][ T1770] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8112'. [ 739.042753][ T1770] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8112'. [ 739.094239][ T1707] pim6reg (unregistering): left allmulticast mode [ 739.180776][ T1707] team0 (unregistering): Port device team_slave_1 removed [ 739.219446][ T1707] team0 (unregistering): Port device team_slave_0 removed [ 739.402624][ T1767] set_capacity_and_notify: 2 callbacks suppressed [ 739.402637][ T1767] loop6: detected capacity change from 0 to 8192 [ 739.426132][ T1767] FAT-fs (loop6): bogus sectors per cluster 254 [ 739.432395][ T1767] FAT-fs (loop6): Can't find a valid FAT filesystem [ 739.471278][ T1802] netlink: 'syz.1.8118': attribute type 5 has an invalid length. [ 739.473690][ T1801] loop4: detected capacity change from 0 to 512 [ 739.514651][ T1688] chnl_net:caif_netlink_parms(): no params data found [ 739.585013][T30706] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 739.597813][ T1707] IPVS: stop unused estimator thread 0... [ 739.636035][ T1801] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 739.664133][ T1688] bridge0: port 1(bridge_slave_0) entered blocking state [ 739.671342][ T1688] bridge0: port 1(bridge_slave_0) entered disabled state [ 739.681480][ T1801] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8117'. [ 739.710214][ T1818] loop7: detected capacity change from 0 to 164 [ 739.759544][ T1688] bridge_slave_0: entered allmulticast mode [ 739.768274][ T1688] bridge_slave_0: entered promiscuous mode [ 739.791491][ T1688] bridge0: port 2(bridge_slave_1) entered blocking state [ 739.798727][ T1688] bridge0: port 2(bridge_slave_1) entered disabled state [ 739.842202][ T1830] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 739.857239][ T1688] bridge_slave_1: entered allmulticast mode [ 739.892290][ T1688] bridge_slave_1: entered promiscuous mode [ 739.982322][ T1827] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 739.991244][ T1837] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8122'. [ 740.067845][ T1688] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 740.162552][ T1688] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 740.176818][ T1830] lo speed is unknown, defaulting to 1000 [ 740.209953][ T1688] team0: Port device team_slave_0 added [ 740.222048][ T5060] Bluetooth: hci0: Frame reassembly failed (-84) [ 740.233161][ T1688] team0: Port device team_slave_1 added [ 740.258604][ T1688] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 740.265707][ T1688] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 740.291848][ T1688] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 740.293644][ T1853] netlink: 'syz.6.8123': attribute type 1 has an invalid length. [ 740.305491][ T1688] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 740.317196][ T1688] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 740.343300][ T1688] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 740.421539][ T1856] bond6 (unregistering): Released all slaves [ 740.422127][T24855] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 740.787343][ T1688] hsr_slave_0: entered promiscuous mode [ 740.793943][ T1887] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8127'. [ 740.801713][ T1688] hsr_slave_1: entered promiscuous mode [ 740.834931][ T1688] debugfs: 'hsr0' already exists in 'hsr' [ 740.840768][ T1688] Cannot create hsr debugfs directory [ 740.920774][ T1882] lo speed is unknown, defaulting to 1000 [ 740.996270][ T1902] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8128'. [ 741.281553][ T1913] bond13: option arp_validate: invalid value (16777218) [ 741.300479][ T1913] bond13 (unregistering): Released all slaves [ 741.325525][ T29] kauditd_printk_skb: 1429 callbacks suppressed [ 741.325540][ T29] audit: type=1400 audit(2147485157.334:175704): avc: denied { perfmon } for pid=1880 comm="syz.6.8126" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 741.414451][ T29] audit: type=1400 audit(2147485157.364:175705): avc: denied { search } for pid=1925 comm="sed" name="resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 741.436784][ T29] audit: type=1400 audit(2147485157.364:175706): avc: denied { read } for pid=1925 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=508 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 741.441532][ T1934] audit: audit_backlog=65 > audit_backlog_limit=64 [ 741.458923][ T29] audit: type=1400 audit(2147485157.364:175707): avc: denied { open } for pid=1925 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=508 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 741.458951][ T29] audit: type=1400 audit(2147485157.364:175708): avc: denied { getattr } for pid=1925 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=508 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 741.458973][ T29] audit: type=1400 audit(2147485157.374:175709): avc: denied { search } for pid=1930 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 741.465636][ T1934] audit: audit_lost=496 audit_rate_limit=0 audit_backlog_limit=64 [ 741.490565][ T29] audit: type=1400 audit(2147485157.374:175710): avc: denied { search } for pid=1930 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=477 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 741.490591][ T29] audit: type=1400 audit(2147485157.374:175711): avc: denied { search } for pid=1930 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=481 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 741.607323][ T1688] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 741.619498][ T1688] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 741.638109][ T1889] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 741.667728][ T1688] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 741.689050][ T1889] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 741.701803][ T1882] lo speed is unknown, defaulting to 1000 [ 741.717755][ T1688] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 741.794502][ T1938] lo speed is unknown, defaulting to 1000 [ 742.176336][ T1688] 8021q: adding VLAN 0 to HW filter on device bond0 [ 742.184949][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 742.242282][ T1688] 8021q: adding VLAN 0 to HW filter on device team0 [ 742.275317][ T8036] bridge0: port 1(bridge_slave_0) entered blocking state [ 742.282531][ T8036] bridge0: port 1(bridge_slave_0) entered forwarding state [ 742.320542][ T8036] bridge0: port 2(bridge_slave_1) entered blocking state [ 742.327683][ T8036] bridge0: port 2(bridge_slave_1) entered forwarding state [ 742.357424][ T1988] loop1: detected capacity change from 0 to 1024 [ 742.399975][ T1988] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 742.418308][ T1938] lo speed is unknown, defaulting to 1000 [ 742.483964][ T1941] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 742.495184][ T1941] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 742.547859][ T422] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 742.871533][ T2034] loop1: detected capacity change from 0 to 256 [ 742.893976][ T2034] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 742.916372][ T2037] __nla_validate_parse: 1 callbacks suppressed [ 742.916385][ T2037] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8133'. [ 742.931634][ T2037] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8133'. [ 742.951580][ T2041] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8134'. [ 743.000069][ T1688] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 743.028977][ T2041] veth1_macvtap: left promiscuous mode [ 743.439885][ T2071] loop7: detected capacity change from 0 to 512 [ 743.482659][ T2073] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8138'. [ 743.511361][ T2071] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 743.568395][ T1688] veth0_vlan: entered promiscuous mode [ 743.603240][ T1688] veth1_vlan: entered promiscuous mode [ 743.633170][ T2071] netlink: 28 bytes leftover after parsing attributes in process `syz.7.8139'. [ 743.678371][ T1688] veth0_macvtap: entered promiscuous mode [ 743.692895][ T1688] veth1_macvtap: entered promiscuous mode [ 743.703990][ T1688] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 743.781188][T30706] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 743.791219][ T1688] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 743.862316][T11435] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 743.904220][T11435] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 743.956387][T11435] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 743.977351][ T2092] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8142'. [ 743.999776][ T2096] loop7: detected capacity change from 0 to 1024 [ 744.017251][T11435] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 744.060852][ T2096] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 744.235185][T30706] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 744.264761][ T2110] loop4: detected capacity change from 0 to 256 [ 744.275759][ T2113] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8145'. [ 744.305835][ T2110] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 744.516695][ T2126] loop7: detected capacity change from 0 to 2048 [ 744.549682][ T2126] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: writeback. [ 744.704793][ T2126] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 744.721009][ T2126] EXT4-fs (loop7): Remounting filesystem read-only [ 744.785554][ T2143] loop2: detected capacity change from 0 to 1024 [ 744.876574][ T2143] EXT4-fs: inline encryption not supported [ 744.916939][ T2143] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 745.055527][ T2143] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #3: block 2: comm syz.2.8152: lblock 2 mapped to illegal pblock 2 (length 1) [ 745.128920][ T2163] loop6: detected capacity change from 0 to 512 [ 745.144703][ T2143] EXT4-fs (loop2): Remounting filesystem read-only [ 745.154570][ T2143] EXT4-fs (loop2): 1 orphan inode deleted [ 745.160778][ T2143] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 745.187916][ T2143] EXT4-fs (loop2): shut down requested (2) [ 745.210133][ T2163] EXT4-fs: Ignoring removed bh option [ 745.278723][ T1688] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 745.294196][ T2163] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 745.327101][ T2165] loop1: detected capacity change from 0 to 2048 [ 745.335958][ T2174] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8158'. [ 745.353956][ T2163] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 745.405588][ T2165] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: writeback. [ 745.462855][ T2163] ext4 filesystem being mounted at /93/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 745.505577][ T2165] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 745.520972][ T2165] EXT4-fs (loop1): Remounting filesystem read-only [ 745.533051][ T2183] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8159'. [ 745.619944][ T2154] netlink: 224 bytes leftover after parsing attributes in process `syz.6.8154'. [ 745.733289][T32040] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 745.760854][T30706] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 745.774929][ T2187] loop2: detected capacity change from 0 to 256 [ 745.807495][ T2187] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 745.941339][ T2192] loop7: detected capacity change from 0 to 512 [ 745.948852][ T2192] EXT4-fs: Ignoring removed nomblk_io_submit option [ 745.955510][ T2192] EXT4-fs: Ignoring removed bh option [ 745.965574][ T2192] EXT4-fs error (device loop7): __ext4_fill_super:5553: inode #2: comm syz.7.8162: iget: bad extra_isize 11 (inode size 256) [ 745.978795][ T2192] EXT4-fs (loop7): get root inode failed [ 745.984551][ T2192] EXT4-fs (loop7): mount failed [ 746.081153][ T2198] bond_slave_0: entered promiscuous mode [ 746.087030][ T2198] bond_slave_1: entered promiscuous mode [ 746.092839][ T2198] macvlan2: entered promiscuous mode [ 746.098189][ T2198] bond0: entered promiscuous mode [ 746.136689][ T2198] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 746.185275][ T2200] loop7: detected capacity change from 0 to 1024 [ 746.232731][ T2200] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 746.334528][ T29] kauditd_printk_skb: 2236 callbacks suppressed [ 746.334544][ T29] audit: type=1400 audit(2147485162.344:177933): avc: denied { prog_load } for pid=2207 comm="syz.2.8169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 746.420401][T30706] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 746.450373][ T29] audit: type=1400 audit(2147485162.344:177934): avc: denied { bpf } for pid=2207 comm="syz.2.8169" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 746.471110][ T29] audit: type=1400 audit(2147485162.344:177935): avc: denied { perfmon } for pid=2207 comm="syz.2.8169" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 746.492236][ T29] audit: type=1400 audit(2147485162.344:177936): avc: denied { perfmon } for pid=2207 comm="syz.2.8169" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 746.514248][ T29] audit: type=1400 audit(2147485162.344:177937): avc: denied { bpf } for pid=2207 comm="syz.2.8169" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 746.535507][ T29] audit: type=1400 audit(2147485162.424:177938): avc: denied { recv } for pid=3307 comm="udevd" saddr=10.128.0.163 src=30036 daddr=10.128.0.43 dest=45840 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 746.560601][ T29] audit: type=1400 audit(2147485162.424:177939): avc: denied { recv } for pid=3307 comm="udevd" saddr=10.128.0.163 src=30036 daddr=10.128.0.43 dest=45840 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 746.586674][ T29] audit: type=1400 audit(2147485162.424:177941): avc: denied { unmount } for pid=30706 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 746.606598][ T29] audit: type=1400 audit(2147485162.424:177940): avc: denied { recv } for pid=3307 comm="udevd" saddr=10.128.0.163 src=30036 daddr=10.128.0.43 dest=45840 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 746.631749][ T29] audit: type=1400 audit(2147485162.434:177942): avc: denied { read write } for pid=32040 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 746.697692][ T2212] loop2: detected capacity change from 0 to 1024 [ 746.720416][ T422] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 746.735254][ T2212] EXT4-fs: quotafile must be on filesystem root [ 746.933757][ T2231] xt_CT: You must specify a L4 protocol and not use inversions on it [ 747.157430][ T2237] loop1: detected capacity change from 0 to 1024 [ 747.209009][ T2237] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 747.280707][ T2241] erspan1: entered allmulticast mode [ 747.326104][ T2245] netlink: 'syz.7.8179': attribute type 7 has an invalid length. [ 747.356060][ T422] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 747.419247][ T1707] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 747.431286][ T2245] netlink: 'syz.7.8179': attribute type 7 has an invalid length. [ 747.454156][ T1707] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 747.504663][ T1707] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 747.566129][ T1707] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 747.760794][ T2261] netlink: 'syz.7.8185': attribute type 1 has an invalid length. [ 747.801113][ T2262] ipt_REJECT: TCP_RESET invalid for non-tcp [ 747.865720][ T2264] bond6 (unregistering): Released all slaves [ 747.961578][ T2185] loop4: detected capacity change from 0 to 8192 [ 747.991858][ T2271] netlink: 'syz.6.8188': attribute type 1 has an invalid length. [ 748.139585][ T2274] 8021q: adding VLAN 0 to HW filter on device bond8 [ 748.178731][ T2274] bond7: (slave bond8): making interface the new active one [ 748.224453][ T2274] bond7: (slave bond8): Enslaving as an active interface with an up link [ 748.401784][ T2185] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 748.430363][ T2288] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 748.454762][ T2185] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 748.458467][ T2286] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 748.655740][T32040] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 748.685372][ T2294] __nla_validate_parse: 5 callbacks suppressed [ 748.685431][ T2294] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8195'. [ 748.700613][ T2294] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8195'. [ 749.281674][ T2322] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 749.368874][ T2322] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8204'. [ 749.496989][ T1688] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 749.516355][ T2333] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 749.586874][ T2341] netlink: 'syz.1.8212': attribute type 1 has an invalid length. [ 749.648532][ T2338] ip6t_srh: unknown srh match flags 4000 [ 749.675818][ T2341] 8021q: adding VLAN 0 to HW filter on device bond2 [ 749.677999][ T2337] ip6t_srh: unknown srh match flags 4000 [ 749.714336][ T2341] bond1: (slave bond2): making interface the new active one [ 749.770802][ T2341] bond1: (slave bond2): Enslaving as an active interface with an up link [ 749.776856][ T2338] set_capacity_and_notify: 6 callbacks suppressed [ 749.776871][ T2338] loop6: detected capacity change from 0 to 1024 [ 749.804095][ T2347] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8213'. [ 749.814146][T30706] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 749.845211][ T2349] loop2: detected capacity change from 0 to 512 [ 749.900557][ T2338] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 750.014672][ T2355] loop7: detected capacity change from 0 to 512 [ 750.057226][ T2355] EXT4-fs error (device loop7): ext4_orphan_get:1417: comm syz.7.8214: bad orphan inode 13 [ 750.087829][ T2355] ext4_test_bit(bit=12, block=4) = 1 [ 750.093142][ T2355] is_bad_inode(inode)=0 [ 750.097336][ T2355] NEXT_ORPHAN(inode)=0 [ 750.101399][ T2355] max_ino=32 [ 750.101791][ T2359] loop1: detected capacity change from 0 to 512 [ 750.105031][ T2355] i_nlink=1 [ 750.112469][ T2359] EXT4-fs: Ignoring removed nomblk_io_submit option [ 750.114831][ T2355] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 750.120745][ T2359] EXT4-fs: Ignoring removed bh option [ 750.142395][ T2359] EXT4-fs error (device loop1): __ext4_fill_super:5553: inode #2: comm syz.1.8217: iget: bad extra_isize 255 (inode size 256) [ 750.155996][ T2359] EXT4-fs (loop1): get root inode failed [ 750.161647][ T2359] EXT4-fs (loop1): mount failed [ 750.214898][ T2355] EXT4-fs warning (device loop7): dx_probe:801: inode #2: comm syz.7.8214: Unrecognised inode hash code 20 [ 750.226412][ T2355] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.8214: Corrupt directory, running e2fsck is recommended [ 750.235525][ T2370] loop1: detected capacity change from 0 to 256 [ 750.249981][ T2370] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 750.266471][ T2368] loop2: detected capacity change from 0 to 512 [ 750.300920][ T2368] EXT4-fs: Mount option(s) incompatible with ext3 [ 750.360951][T30706] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 750.459730][ T2367] loop4: detected capacity change from 0 to 1024 [ 750.492987][T32040] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 750.527958][ T2367] EXT4-fs: Ignoring removed nobh option [ 750.533575][ T2367] EXT4-fs: Ignoring removed orlov option [ 750.581417][ T2382] loop7: detected capacity change from 0 to 512 [ 750.624572][ T2367] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 750.669619][ T2382] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 750.754091][ T2367] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 750.781186][ T2395] loop1: detected capacity change from 0 to 512 [ 750.837028][ T2382] netlink: 28 bytes leftover after parsing attributes in process `syz.7.8221'. [ 750.848109][ T2392] loop2: detected capacity change from 0 to 1024 [ 750.863414][ T2395] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.8225: error while reading EA inode 32 err=-116 [ 750.919195][ T2392] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 750.951427][ T2395] EXT4-fs (loop1): Remounting filesystem read-only [ 750.978857][T30706] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 750.989023][ T2395] EXT4-fs (loop1): 1 orphan inode deleted [ 751.014385][ T2395] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 751.060642][ T2400] EXT4-fs: Ignoring removed bh option [ 751.099311][ T2400] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 751.116420][ T1688] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 751.190204][ T422] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 751.199903][ T2406] EXT4-fs: Ignoring removed bh option [ 751.215712][ T2406] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 751.215972][ T2400] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 751.239974][ T2400] ext4 filesystem being mounted at /107/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 751.315590][ T2398] netlink: 224 bytes leftover after parsing attributes in process `syz.6.8226'. [ 751.355173][ T2406] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 751.378863][ T29] kauditd_printk_skb: 953 callbacks suppressed [ 751.378935][ T29] audit: type=1400 audit(2147485167.384:178896): avc: denied { ioctl } for pid=422 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 751.426047][ T29] audit: type=1400 audit(2147485167.424:178897): avc: denied { prog_load } for pid=2408 comm="syz.2.8228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 751.445371][ T29] audit: type=1400 audit(2147485167.424:178898): avc: denied { bpf } for pid=2408 comm="syz.2.8228" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 751.466230][ T29] audit: type=1400 audit(2147485167.424:178899): avc: denied { perfmon } for pid=2408 comm="syz.2.8228" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 751.489126][ T2406] ext4 filesystem being mounted at /191/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 751.500906][T32040] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 751.505453][ T29] audit: type=1400 audit(2147485167.484:178900): avc: denied { read } for pid=2414 comm="syz.1.8229" dev="nsfs" ino=4026532834 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 751.531255][ T29] audit: type=1400 audit(2147485167.484:178901): avc: denied { open } for pid=2414 comm="syz.1.8229" path="net:[4026532834]" dev="nsfs" ino=4026532834 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 751.554730][ T29] audit: type=1400 audit(2147485167.484:178902): avc: denied { create } for pid=2414 comm="syz.1.8229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 751.574884][ T29] audit: type=1400 audit(2147485167.494:178903): avc: denied { recv } for pid=22 comm="ksoftirqd/1" saddr=10.128.0.163 src=30036 daddr=10.128.0.43 dest=45840 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 751.600323][ T29] audit: type=1400 audit(2147485167.494:178904): avc: denied { recv } for pid=2989 comm="syslogd" saddr=10.128.0.163 src=30036 daddr=10.128.0.43 dest=45840 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 751.625746][ T29] audit: type=1400 audit(2147485167.494:178905): avc: denied { unmount } for pid=32040 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 751.631630][ T2406] netlink: 'syz.7.8227': attribute type 1 has an invalid length. [ 751.653822][ T2406] netlink: 224 bytes leftover after parsing attributes in process `syz.7.8227'. [ 751.722009][T24855] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 751.732034][ T2415] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: writeback. [ 751.881844][ T2415] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 751.897049][ T2415] EXT4-fs (loop1): Remounting filesystem read-only [ 751.994472][ T2422] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8231'. [ 752.012150][T30706] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 752.168947][ T2425] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8233'. [ 752.225887][ T2429] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 752.346867][ T2431] EXT4-fs: Ignoring removed oldalloc option [ 752.376521][ T2431] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 752.451140][ T2431] EXT4-fs (loop4): 1 truncate cleaned up [ 752.472716][ T2431] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 752.532101][ T2442] pim6reg: entered allmulticast mode [ 752.538287][ T2442] pim6reg: left allmulticast mode [ 752.571703][T24855] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 752.756365][ T2447] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8240'. [ 752.882220][ T2454] ip6gretap0: entered promiscuous mode [ 752.906314][ T2454] ip6gretap0: left promiscuous mode [ 753.785844][ T2487] __nla_validate_parse: 2 callbacks suppressed [ 753.785858][ T2487] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8253'. [ 753.801461][ T2487] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8253'. [ 754.000344][ T2493] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8255'. [ 754.056161][ T2495] netlink: 20 bytes leftover after parsing attributes in process `syz.6.8256'. [ 754.271012][ T2507] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8261'. [ 754.272893][ T2506] netlink: 52 bytes leftover after parsing attributes in process `syz.1.8260'. [ 754.465413][ T2506] EXT4-fs warning (device loop1): read_mmp_block:111: Error -117 while reading MMP block 12 [ 755.012737][ T2503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 755.046584][ T2529] set_capacity_and_notify: 13 callbacks suppressed [ 755.046600][ T2529] loop7: detected capacity change from 0 to 1024 [ 755.058709][ T2503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 755.176641][ T2521] loop1: detected capacity change from 0 to 32768 [ 755.179993][ T2529] FAULT_INJECTION: forcing a failure. [ 755.179993][ T2529] name failslab, interval 1, probability 0, space 0, times 0 [ 755.195955][ T2529] CPU: 1 UID: 0 PID: 2529 Comm: syz.7.8267 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 755.195988][ T2529] Tainted: [W]=WARN [ 755.196070][ T2529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 755.196083][ T2529] Call Trace: [ 755.196092][ T2529] [ 755.196101][ T2529] __dump_stack+0x1d/0x30 [ 755.196126][ T2529] dump_stack_lvl+0x95/0xd0 [ 755.196159][ T2529] dump_stack+0x15/0x1b [ 755.196175][ T2529] should_fail_ex+0x263/0x280 [ 755.196195][ T2529] should_failslab+0x8c/0xb0 [ 755.196216][ T2529] __kmalloc_noprof+0xb8/0x580 [ 755.196332][ T2529] ? ext4_find_extent+0x16b/0x7a0 [ 755.196354][ T2529] ext4_find_extent+0x16b/0x7a0 [ 755.196380][ T2529] ext4_ext_map_blocks+0x128/0x38a0 [ 755.196419][ T2529] ext4_map_query_blocks+0xae/0x550 [ 755.196441][ T2529] ? ext4_es_lookup_extent+0x3ac/0x540 [ 755.196514][ T2529] ? avc_alloc_node+0x23e/0x280 [ 755.196536][ T2529] ext4_map_blocks+0x398/0xd70 [ 755.196609][ T2529] ext4_getblk+0x128/0x530 [ 755.196669][ T2529] ext4_bread_batch+0x5c/0x320 [ 755.196754][ T2529] __ext4_find_entry+0x852/0xdf0 [ 755.196785][ T2529] ? kmem_cache_alloc_lru_noprof+0x2bb/0x490 [ 755.196867][ T2529] ? __d_alloc+0x37/0x340 [ 755.196894][ T2529] ext4_lookup+0xcd/0x3a0 [ 755.196915][ T2529] lookup_one_qstr_excl+0xcb/0x250 [ 755.196941][ T2529] __start_renaming+0xff/0x2a0 [ 755.196966][ T2529] do_renameat2+0x2b4/0x850 [ 755.196993][ T2529] __x64_sys_renameat2+0x7e/0x90 [ 755.197087][ T2529] x64_sys_call+0x35f/0x3000 [ 755.197158][ T2529] do_syscall_64+0xc0/0x2a0 [ 755.197181][ T2529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 755.197201][ T2529] RIP: 0033:0x7f8d4a4eacb9 [ 755.197215][ T2529] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 755.197302][ T2529] RSP: 002b:00007f8d48f47028 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 755.197324][ T2529] RAX: ffffffffffffffda RBX: 00007f8d4a765fa0 RCX: 00007f8d4a4eacb9 [ 755.197384][ T2529] RDX: ffffffffffffff9c RSI: 00002000000007c0 RDI: ffffffffffffff9c [ 755.197456][ T2529] RBP: 00007f8d48f47090 R08: 0000000000000004 R09: 0000000000000000 [ 755.197469][ T2529] R10: 00002000000005c0 R11: 0000000000000246 R12: 0000000000000001 [ 755.197483][ T2529] R13: 00007f8d4a766038 R14: 00007f8d4a765fa0 R15: 00007ffc7b1f4198 [ 755.197561][ T2529] [ 755.455874][ T2521] loop1: p1 p3 < > [ 755.529248][ T2535] loop1: detected capacity change from 0 to 1024 [ 755.621301][ T2539] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8269'. [ 755.743105][ T2544] loop7: detected capacity change from 0 to 512 [ 755.751261][ T2544] EXT4-fs: Ignoring removed nomblk_io_submit option [ 755.757907][ T2544] EXT4-fs: Ignoring removed bh option [ 755.776618][ T2544] EXT4-fs error (device loop7): mb_free_blocks:2037: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 755.791132][ T2544] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #11: comm syz.7.8270: corrupted inode contents [ 755.803974][ T2544] EXT4-fs error (device loop7): ext4_dirty_inode:6502: inode #11: comm syz.7.8270: mark_inode_dirty error [ 755.815572][ T2544] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.8270: invalid indirect mapped block 4 (level 1) [ 755.829850][ T2544] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #11: comm syz.7.8270: corrupted inode contents [ 755.844411][ T2544] EXT4-fs error (device loop7) in ext4_orphan_del:303: Corrupt filesystem [ 755.853398][ T2544] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #11: comm syz.7.8270: corrupted inode contents [ 755.866122][ T2544] EXT4-fs error (device loop7): ext4_truncate:4635: inode #11: comm syz.7.8270: mark_inode_dirty error [ 755.877665][ T2544] EXT4-fs error (device loop7) in ext4_process_orphan:345: Corrupt filesystem [ 755.886853][ T2544] EXT4-fs (loop7): 1 truncate cleaned up [ 755.929432][ T8840] udevd[8840]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 755.948068][ T5472] udevd[5472]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 756.206160][ T2562] loop7: detected capacity change from 0 to 1024 [ 756.235800][ T2562] EXT4-fs (loop7): couldn't mount as ext3 due to feature incompatibilities [ 756.384926][ T29] kauditd_printk_skb: 1628 callbacks suppressed [ 756.384975][ T29] audit: type=1400 audit(2147485172.395:180531): avc: denied { recv } for pid=3273 comm="syz-executor" saddr=10.128.0.163 src=30036 daddr=10.128.0.43 dest=45840 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 756.492171][ T29] audit: type=1400 audit(2147485172.425:180532): avc: denied { recv } for pid=3273 comm="syz-executor" saddr=10.128.0.163 src=30036 daddr=10.128.0.43 dest=45840 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 756.518241][ T29] audit: type=1400 audit(2147485172.425:180533): avc: denied { recv } for pid=30706 comm="syz-executor" saddr=10.128.0.163 src=30036 daddr=10.128.0.43 dest=45840 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 756.544430][ T29] audit: type=1400 audit(2147485172.435:180534): avc: denied { read write } for pid=30706 comm="syz-executor" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 756.569305][ T29] audit: type=1400 audit(2147485172.435:180535): avc: denied { read write open } for pid=30706 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 756.572429][ T2572] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8280'. [ 756.594835][ T29] audit: type=1400 audit(2147485172.435:180536): avc: denied { ioctl } for pid=30706 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=107 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 756.629518][ T29] audit: type=1400 audit(2147485172.465:180537): avc: denied { execmem } for pid=2565 comm="syz.2.8279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 756.652298][ T29] audit: type=1400 audit(2147485172.555:180538): avc: denied { recv } for pid=29 comm="kauditd" saddr=10.128.0.163 src=30036 daddr=10.128.0.43 dest=45840 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 756.677615][ T29] audit: type=1400 audit(2147485172.555:180539): avc: denied { open } for pid=2571 comm="syz.7.8280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 756.697152][ T29] audit: type=1400 audit(2147485172.555:180540): avc: denied { perfmon } for pid=2571 comm="syz.7.8280" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 756.880808][ T2575] loop7: detected capacity change from 0 to 164 [ 756.890267][ T2575] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 756.912522][ T2575] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 756.969236][ T2575] rock: directory entry would overflow storage [ 756.975465][ T2575] rock: sig=0x4f50, size=4, remaining=3 [ 756.981093][ T2575] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 757.148755][ T2584] loop4: detected capacity change from 0 to 2048 [ 757.453342][ T2595] loop1: detected capacity change from 0 to 8192 [ 757.634842][ T2606] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8291'. [ 757.887530][ T2610] loop7: detected capacity change from 0 to 256 [ 758.607568][ T2626] syzkaller0: entered promiscuous mode [ 758.613142][ T2626] syzkaller0: entered allmulticast mode [ 758.867604][ T2635] loop7: detected capacity change from 0 to 8192 [ 759.117666][ T2648] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8303'. [ 759.127818][ T2635] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 759.136323][ T2635] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 759.189487][ T2650] infiniband syb2: RDMA CMA: cma_listen_on_dev, error -98 [ 759.404080][ T2663] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8307'. [ 759.431296][ T2662] lo speed is unknown, defaulting to 1000 [ 759.633008][ T2674] netlink: 224 bytes leftover after parsing attributes in process `syz.2.8311'. [ 759.807502][ T2681] lo speed is unknown, defaulting to 1000 [ 760.248179][ T2687] set_capacity_and_notify: 1 callbacks suppressed [ 760.248194][ T2687] loop4: detected capacity change from 0 to 1024 [ 760.275556][ T2687] ext4: Unknown parameter 'obj_user' [ 760.308861][ T2689] loop1: detected capacity change from 0 to 512 [ 760.319193][ T2689] EXT4-fs: Ignoring removed oldalloc option [ 760.359735][ T2689] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 760.384447][ T2689] EXT4-fs (loop1): 1 truncate cleaned up [ 760.578574][ T2697] loop1: detected capacity change from 0 to 256 [ 760.819078][ T2699] netlink: 'syz.6.8318': attribute type 16 has an invalid length. [ 760.826964][ T2699] netlink: 64138 bytes leftover after parsing attributes in process `syz.6.8318'. [ 761.038615][ T2710] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8321'. [ 761.047739][ T2710] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8321'. [ 761.163803][ T2717] netlink: 224 bytes leftover after parsing attributes in process `syz.1.8322'. [ 761.256146][ T2723] usb usb8: usbfs: process 2723 (syz.2.8323) did not claim interface 0 before use [ 761.312210][ T2723] usb usb8: selecting invalid altsetting 2047 [ 761.336027][ T2727] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8325'. [ 761.359979][ T2730] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8326'. [ 761.396514][ T29] kauditd_printk_skb: 1111 callbacks suppressed [ 761.396527][ T29] audit: type=1400 audit(2147485177.405:181652): avc: denied { search } for pid=2732 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 761.425203][ T29] audit: type=1400 audit(2147485177.405:181653): avc: denied { search } for pid=2732 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=477 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 761.448199][ T29] audit: type=1400 audit(2147485177.405:181654): avc: denied { search } for pid=2732 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=481 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 761.471582][ T29] audit: type=1400 audit(2147485177.405:181655): avc: denied { read open } for pid=2732 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 761.513030][ T29] audit: type=1400 audit(2147485177.405:181656): avc: denied { recv } for pid=2694 comm="syz.6.8318" saddr=10.128.0.163 src=30036 daddr=10.128.0.43 dest=45840 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 761.538642][ T29] audit: type=1400 audit(2147485177.405:181657): avc: denied { recv } for pid=2694 comm="syz.6.8318" saddr=10.128.0.163 src=30036 daddr=10.128.0.43 dest=45840 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 761.564296][ T29] audit: type=1400 audit(2147485177.435:181658): avc: denied { recv } for pid=3273 comm="syz-executor" saddr=10.128.0.163 src=30036 daddr=10.128.0.43 dest=45840 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 761.589992][ T29] audit: type=1400 audit(2147485177.435:181659): avc: denied { recv } for pid=3273 comm="syz-executor" saddr=10.128.0.163 src=30036 daddr=10.128.0.43 dest=45840 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 761.615694][ T29] audit: type=1400 audit(2147485177.455:181660): avc: denied { read write } for pid=32040 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 761.640428][ T29] audit: type=1400 audit(2147485177.455:181661): avc: denied { open } for pid=32040 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 761.671059][ T2739] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 761.677634][ T2739] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 761.685328][ T2739] vhci_hcd vhci_hcd.0: Device attached [ 761.693932][ T2741] loop6: detected capacity change from 0 to 256 [ 761.701635][ T2741] msdos: Bad value for 'time_offset' [ 761.851839][ T2742] vhci_hcd: connection closed [ 761.852514][ T8754] vhci_hcd vhci_hcd.4: stop threads [ 761.862473][ T8754] vhci_hcd vhci_hcd.4: release socket [ 761.868210][ T8754] vhci_hcd vhci_hcd.4: disconnect device [ 761.874249][ T3489] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 761.886787][ T2751] loop7: detected capacity change from 0 to 512 [ 761.909048][ T2735] bond1: entered promiscuous mode [ 761.963814][ T2751] netlink: 28 bytes leftover after parsing attributes in process `syz.7.8330'. [ 761.973700][ T2735] 8021q: adding VLAN 0 to HW filter on device bond1 [ 761.982923][ T2735] team0: Port device bond1 added [ 761.998136][ T2758] loop1: detected capacity change from 0 to 736 [ 762.028331][ T2758] rock: directory entry would overflow storage [ 762.034541][ T2758] rock: sig=0x3b10, size=4, remaining=3 [ 762.227237][ T2766] netlink: 'syz.7.8333': attribute type 3 has an invalid length. [ 762.365038][ T2758] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2758 comm=syz.1.8331 [ 762.453607][ T2777] netlink: 'syz.7.8337': attribute type 1 has an invalid length. [ 762.536595][ T2781] loop4: detected capacity change from 0 to 512 [ 762.577213][ T2777] 8021q: adding VLAN 0 to HW filter on device bond8 [ 762.585534][ T2777] bond7: (slave bond8): making interface the new active one [ 762.593590][ T2777] bond7: (slave bond8): Enslaving as an active interface with an up link [ 762.711402][ T2791] loop7: detected capacity change from 0 to 8192 [ 762.753523][ T2791] loop7: p1 p2 p4 [ 762.823352][ T2791] loop7: p4 size 262912 extends beyond EOD, truncated [ 762.922616][ T3007] loop7: p1 p2 p4 [ 762.947027][ T3007] loop7: p4 size 262912 extends beyond EOD, truncated [ 762.979481][ T2806] loop2: detected capacity change from 0 to 256 [ 763.005063][ T2806] FAT-fs (loop2): bogus number of directory entries (5) [ 763.012045][ T2806] FAT-fs (loop2): Can't find a valid FAT filesystem [ 763.082192][ T2813] loop6: detected capacity change from 0 to 512 [ 763.181837][ T2823] netlink: 'syz.7.8354': attribute type 1 has an invalid length. [ 763.259893][ T2823] 8021q: adding VLAN 0 to HW filter on device bond10 [ 763.275346][ T2823] bond9: (slave bond10): making interface the new active one [ 763.284264][ T2823] bond9: (slave bond10): Enslaving as an active interface with an up link [ 763.309252][ T5472] udevd[5472]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 763.340108][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory [ 763.349001][ T8840] udevd[8840]: inotify_add_watch(7, /dev/loop7p2, 10) failed: No such file or directory [ 763.739631][ T8838] udevd[8838]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory [ 763.760862][ T8840] udevd[8840]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 763.775900][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop7p2, 10) failed: No such file or directory [ 763.973157][T32040] EXT4-fs unmount: 22 callbacks suppressed [ 763.973175][T32040] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 764.264743][ T2855] __nla_validate_parse: 5 callbacks suppressed [ 764.264825][ T2855] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8363'. [ 764.296072][ T2858] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8365'. [ 764.340816][ T2861] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8363'. [ 764.625747][ T2868] netlink: 14 bytes leftover after parsing attributes in process `syz.7.8369'. [ 764.697653][ T2872] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8370'. [ 764.718170][ T2872] netlink: 36 bytes leftover after parsing attributes in process `syz.6.8370'. [ 764.943357][ T2886] netlink: 'syz.6.8376': attribute type 1 has an invalid length. [ 764.951129][ T2886] netlink: 224 bytes leftover after parsing attributes in process `syz.6.8376'. [ 765.138365][ T2890] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8378'. [ 765.165824][ T2899] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8381'. [ 765.174761][ T2899] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8381'. [ 765.292282][ T2905] netlink: 'syz.6.8383': attribute type 21 has an invalid length. [ 765.376833][ T2905] bridge0: port 2(bridge_slave_1) entered disabled state [ 765.615704][ T2918] set_capacity_and_notify: 3 callbacks suppressed [ 765.615717][ T2918] loop6: detected capacity change from 0 to 1024 [ 765.647969][ T2918] EXT4-fs (loop6): stripe (4) is not aligned with cluster size (16), stripe is disabled [ 765.744554][ T2918] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 765.763607][ T2918] ext4 filesystem being mounted at /142/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 765.807231][ T2917] EXT4-fs error (device loop6): ext4_free_blocks:6728: comm syz.6.8387: Freeing blocks not in datazone - block = 0, count = 16 [ 765.820718][ T2917] EXT4-fs (loop6): Remounting filesystem read-only [ 765.840515][T32040] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 765.878793][ T2927] loop7: detected capacity change from 0 to 128 [ 765.888703][ T2929] loop6: detected capacity change from 0 to 1764 [ 765.971745][ T2931] sg_write: data in/out 327903/28 bytes for SCSI command 0xe4-- guessing data in; [ 765.971745][ T2931] program syz.2.8390 not setting count and/or reply_len properly [ 766.325190][ T2942] bond3: entered promiscuous mode [ 766.346799][ T2942] 8021q: adding VLAN 0 to HW filter on device bond3 [ 766.355152][ T2942] team0: Port device bond3 added [ 766.400765][ T2949] loop7: detected capacity change from 0 to 512 [ 766.443669][ T29] kauditd_printk_skb: 1330 callbacks suppressed [ 766.443686][ T29] audit: type=1400 audit(2147485182.445:182992): avc: denied { mounton } for pid=2940 comm="syz.7.8397" path="/227/file1" dev="tmpfs" ino=1232 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 766.637160][ T29] audit: type=1400 audit(2147485182.495:182993): avc: denied { create } for pid=2941 comm="syz.1.8396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 766.657824][ T29] audit: type=1400 audit(2147485182.495:182994): avc: denied { read write } for pid=1688 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 766.682192][ T29] audit: type=1400 audit(2147485182.495:182995): avc: denied { open } for pid=1688 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 766.706530][ T29] audit: type=1400 audit(2147485182.495:182996): avc: denied { recv } for pid=3273 comm="syz-executor" saddr=10.128.0.163 src=30036 daddr=10.128.0.43 dest=45840 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 766.732223][ T29] audit: type=1400 audit(2147485182.495:182997): avc: denied { recv } for pid=3273 comm="syz-executor" saddr=10.128.0.163 src=30036 daddr=10.128.0.43 dest=45840 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 766.758333][ T29] audit: type=1400 audit(2147485182.495:182999): avc: denied { write } for pid=2941 comm="syz.1.8396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 766.778870][ T29] audit: type=1400 audit(2147485182.495:183000): avc: denied { recv } for pid=1688 comm="syz-executor" saddr=10.128.0.163 src=30036 daddr=10.128.0.43 dest=45840 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 766.804683][ T29] audit: type=1400 audit(2147485182.495:182998): avc: denied { ioctl } for pid=1688 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 766.817910][ T2949] EXT4-fs warning (device loop7): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 766.830490][ T29] audit: type=1400 audit(2147485182.525:183001): avc: denied { execmem } for pid=2946 comm="syz.6.8398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 766.897752][ T2949] EXT4-fs (loop7): mount failed [ 767.179295][ T2972] loop7: detected capacity change from 0 to 1024 [ 767.202131][ T2972] EXT4-fs: Ignoring removed bh option [ 767.240631][ T2972] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 767.314731][ T2975] loop1: detected capacity change from 0 to 8192 [ 767.482603][T30706] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 767.568841][ T2975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 767.633113][ T2975] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 767.635384][ T2980] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 767.839147][ T2987] loop2: detected capacity change from 0 to 1024 [ 767.870118][ T2987] EXT4-fs: inline encryption not supported [ 767.917180][ T2987] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 768.040659][ T1688] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 768.165082][ T3003] bond11: entered promiscuous mode [ 768.171026][ T3003] 8021q: adding VLAN 0 to HW filter on device bond11 [ 768.180674][ T3003] team0: Port device bond11 added [ 768.401213][ T3011] loop2: detected capacity change from 0 to 512 [ 768.449943][ T3015] loop7: detected capacity change from 0 to 1024 [ 768.493755][ T3015] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 768.703295][T30706] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 768.917535][ T3031] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 769.048978][ T3034] bond9: entered promiscuous mode [ 769.055149][ T3034] 8021q: adding VLAN 0 to HW filter on device bond9 [ 769.063509][ T3034] team0: Port device bond9 added [ 769.219774][ T3053] loop2: detected capacity change from 0 to 256 [ 769.241169][ T3053] vfat: Unknown parameter 'ttf8' [ 769.590549][ T3070] netlink: 'syz.6.8428': attribute type 1 has an invalid length. [ 769.618742][ T3070] 8021q: adding VLAN 0 to HW filter on device bond11 [ 769.629938][ T3070] bond10: (slave bond11): making interface the new active one [ 769.638676][ T3070] bond10: (slave bond11): Enslaving as an active interface with an up link [ 769.715704][ T3074] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 769.821530][T32040] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 769.873460][ T3081] x_tables: duplicate entry at hook 1 [ 769.890440][ T3080] dvmrp0: entered allmulticast mode [ 769.920701][ T3085] __nla_validate_parse: 15 callbacks suppressed [ 769.920716][ T3085] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8433'. [ 770.079574][ T3088] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8434'. [ 770.116165][ T3089] bond12: entered promiscuous mode [ 770.143464][ T3089] 8021q: adding VLAN 0 to HW filter on device bond12 [ 770.169232][ T3094] usb usb1: usbfs: interface 0 claimed by hub while 'syz.6.8436' sets config #1 [ 770.203508][ T3095] netlink: 'syz.2.8437': attribute type 1 has an invalid length. [ 770.211261][ T3095] netlink: 224 bytes leftover after parsing attributes in process `syz.2.8437'. [ 770.223737][ T3089] team0: Port device bond12 added [ 770.244611][ T3088] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 770.296491][ T3096] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 770.330241][ T3101] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8439'. [ 770.415716][ T3101] veth0_macvtap: left promiscuous mode [ 770.500987][ T3104] FAT-fs (loop6): bogus number of directory entries (5) [ 770.508046][ T3104] FAT-fs (loop6): Can't find a valid FAT filesystem [ 770.541237][ T3099] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 770.558587][ T3110] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8441'. [ 770.590320][ T3110] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 770.609812][ T3110] batman_adv: batadv0: Adding interface: ip6gretap1 [ 770.616514][ T3110] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 770.803648][ T3110] batman_adv: batadv0: Interface activated: ip6gretap1 [ 770.887945][ T3125] netlink: 36 bytes leftover after parsing attributes in process `syz.7.8447'. [ 770.926337][ T3136] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8446'. [ 771.083462][ T3138] set_capacity_and_notify: 3 callbacks suppressed [ 771.083475][ T3138] loop1: detected capacity change from 0 to 1024 [ 771.136953][ T3142] loop2: detected capacity change from 0 to 512 [ 771.144622][ T3142] EXT4-fs: Ignoring removed nomblk_io_submit option [ 771.151294][ T3142] EXT4-fs: Ignoring removed bh option [ 771.175202][ T3142] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #11: comm syz.2.8449: iget: bad extra_isize 8192 (inode size 256) [ 771.189193][ T3142] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.8449: couldn't read orphan inode 11 (err -117) [ 771.202252][ T3142] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 771.215179][ T3142] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 771.249784][ T3150] netlink: 'syz.7.8451': attribute type 1 has an invalid length. [ 771.257908][ T3150] netlink: 224 bytes leftover after parsing attributes in process `syz.7.8451'. [ 771.268406][ T3146] loop4: detected capacity change from 0 to 8192 [ 771.278397][ T3138] EXT4-fs: Ignoring removed bh option [ 771.364759][ T3138] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 771.463779][ T29] kauditd_printk_skb: 1104 callbacks suppressed [ 771.463837][ T29] audit: type=1400 audit(2147485187.476:184106): avc: denied { egress } for pid=22 comm="ksoftirqd/1" saddr=fe80::1b daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 771.493956][ T29] audit: type=1400 audit(2147485187.476:184107): avc: denied { sendto } for pid=22 comm="ksoftirqd/1" saddr=fe80::1b daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 771.548167][ T3146] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 771.564498][ T3146] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 771.604617][ T29] audit: type=1400 audit(2147485187.526:184108): avc: denied { recv } for pid=29 comm="kauditd" saddr=10.128.0.163 src=30036 daddr=10.128.0.43 dest=45840 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 771.629748][ T29] audit: type=1400 audit(2147485187.526:184109): avc: denied { recv } for pid=2996 comm="klogd" saddr=10.128.0.163 src=30036 daddr=10.128.0.43 dest=45840 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 771.654800][ T29] audit: type=1400 audit(2147485187.526:184110): avc: denied { recv } for pid=17715 comm="kworker/u8:40" saddr=10.128.0.163 src=30036 daddr=10.128.0.43 dest=45840 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 771.680733][ T29] audit: type=1400 audit(2147485187.536:184111): avc: denied { perfmon } for pid=3155 comm="syz.2.8452" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 771.701900][ T29] audit: type=1400 audit(2147485187.546:184112): avc: denied { prog_load } for pid=3155 comm="syz.2.8452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 771.721274][ T29] audit: type=1400 audit(2147485187.546:184113): avc: denied { bpf } for pid=3155 comm="syz.2.8452" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 771.742035][ T29] audit: type=1400 audit(2147485187.546:184114): avc: denied { perfmon } for pid=3155 comm="syz.2.8452" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 771.763101][ T29] audit: type=1400 audit(2147485187.546:184115): avc: denied { bpf } for pid=3155 comm="syz.2.8452" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 771.860746][ T422] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 771.903911][ T3170] netlink: 'syz.6.8454': attribute type 1 has an invalid length. [ 771.947029][ T3170] 8021q: adding VLAN 0 to HW filter on device bond13 [ 771.997164][ T3170] bond12: (slave bond13): making interface the new active one [ 772.029729][ T3170] bond12: (slave bond13): Enslaving as an active interface with an up link [ 772.228788][ T3182] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=3182 comm=syz.7.8459 [ 772.280358][ T3189] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=3189 comm=syz.7.8459 [ 772.314473][ T3191] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8460'. [ 772.407933][ T3200] loop1: detected capacity change from 0 to 764 [ 772.455907][ T3202] loop7: detected capacity change from 0 to 256 [ 772.482264][ T3200] rock: directory entry would overflow storage [ 772.488588][ T3200] rock: sig=0x5245, size=8, remaining=5 [ 772.501214][ T3204] netlink: 'syz.2.8463': attribute type 1 has an invalid length. [ 772.509047][ T3204] netlink: 224 bytes leftover after parsing attributes in process `syz.2.8463'. [ 772.617276][ T3202] FAT-fs (loop7): Directory bread(block 64) failed [ 772.631762][ T3202] FAT-fs (loop7): Directory bread(block 65) failed [ 772.650307][ T3207] loop2: detected capacity change from 0 to 2048 [ 772.665508][ T3202] FAT-fs (loop7): Directory bread(block 66) failed [ 772.685212][ T3207] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 772.690412][ T3202] FAT-fs (loop7): Directory bread(block 67) failed [ 772.729930][ T3202] FAT-fs (loop7): Directory bread(block 68) failed [ 772.743131][ T3206] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 772.759338][ T3202] FAT-fs (loop7): Directory bread(block 69) failed [ 772.783393][ T3202] FAT-fs (loop7): Directory bread(block 70) failed [ 772.806612][ T3202] FAT-fs (loop7): Directory bread(block 71) failed [ 772.820471][ T3202] FAT-fs (loop7): Directory bread(block 72) failed [ 772.831159][ T3202] FAT-fs (loop7): Directory bread(block 73) failed [ 772.904222][ T1688] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 773.163750][ T3221] netlink: 'syz.6.8468': attribute type 1 has an invalid length. [ 773.207278][ T3220] loop7: detected capacity change from 0 to 2048 [ 773.227253][ T3220] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: writeback. [ 773.245199][ T3220] netlink: 'syz.7.8467': attribute type 9 has an invalid length. [ 773.253008][ T3220] netlink: 'syz.7.8467': attribute type 7 has an invalid length. [ 773.260726][ T3220] netlink: 'syz.7.8467': attribute type 8 has an invalid length. [ 773.301588][ T3223] 8021q: adding VLAN 0 to HW filter on device bond15 [ 773.342269][ T3220] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 773.357466][ T3220] EXT4-fs (loop7): Remounting filesystem read-only [ 773.363492][ T3223] bond14: (slave bond15): making interface the new active one [ 773.384322][ T3223] bond14: (slave bond15): Enslaving as an active interface with an up link [ 773.820290][ T3251] lo speed is unknown, defaulting to 1000 [ 774.075606][ T3263] loop1: detected capacity change from 0 to 2048 [ 774.121021][T30706] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 774.511429][ T3283] loop4: detected capacity change from 0 to 128 [ 774.569966][ T3283] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 774.640466][ T3283] ext4 filesystem being mounted at /470/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 774.767505][T24855] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 774.795574][ T3299] loop2: detected capacity change from 0 to 512 [ 774.921380][ T3299] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 774.977857][ T3299] EXT4-fs (loop2): mount failed [ 775.109580][ T3304] bond13: entered promiscuous mode [ 775.155582][ T3304] 8021q: adding VLAN 0 to HW filter on device bond13 [ 775.165770][ T3304] team0: Port device bond13 added [ 775.328712][ T3314] __nla_validate_parse: 3 callbacks suppressed [ 775.328725][ T3314] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8496'. [ 775.472347][ T3321] netlink: 60 bytes leftover after parsing attributes in process `syz.7.8499'. [ 775.481709][ T3321] unsupported nlmsg_type 40 [ 775.502559][ T3316] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8495'. [ 775.518129][ T3306] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 775.522949][ T3316] netlink: 52 bytes leftover after parsing attributes in process `syz.2.8495'. [ 775.528201][ T3306] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 775.535548][ T3316] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8495'. [ 775.565413][ T3322] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 775.591448][ T3322] EXT4-fs (loop1): orphan cleanup on readonly fs [ 775.599563][ T3318] Alternate GPT is invalid, using primary GPT. [ 775.605966][ T3318] loop4: p1 p2 p3 [ 775.609737][ T3318] loop4: partition table partially beyond EOD, truncated [ 775.660133][ T3322] EXT4-fs warning (device loop1): ext4_enable_quotas:7221: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 775.745362][ T3322] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 775.770983][ T3322] EXT4-fs error (device loop1): ext4_ext_check_inode:523: inode #13: comm syz.1.8497: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 775.815308][ T3322] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.8497: couldn't read orphan inode 13 (err -117) [ 775.862691][ T3322] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 775.925093][ T3322] EXT4-fs error (device loop1): ext4_lookup:1785: comm syz.1.8497: inode #15: comm syz.1.8497: iget: illegal inode # [ 775.960787][ T3331] bond14: entered promiscuous mode [ 775.971363][ T3310] udevd[3310]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 775.990490][ T8840] udevd[8840]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 776.017455][ T7226] udevd[7226]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 776.023649][ T3331] 8021q: adding VLAN 0 to HW filter on device bond14 [ 776.088118][ T3331] team0: Port device bond14 added [ 776.098593][ T422] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 776.228559][ T3338] ip6gretap0: entered promiscuous mode [ 776.252710][ T3338] macsec1: entered promiscuous mode [ 776.264664][ T3338] ip6gretap0: left promiscuous mode [ 776.356395][ T3342] set_capacity_and_notify: 3 callbacks suppressed [ 776.356408][ T3342] loop4: detected capacity change from 0 to 128 [ 776.492865][ T29] kauditd_printk_skb: 1199 callbacks suppressed [ 776.492879][ T29] audit: type=1400 audit(2147485192.506:185315): avc: denied { read write } for pid=1688 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 776.597667][ T29] audit: type=1400 audit(2147485192.506:185316): avc: denied { read write open } for pid=1688 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 776.616145][ T3350] netlink: 44 bytes leftover after parsing attributes in process `syz.2.8507'. [ 776.623129][ T29] audit: type=1400 audit(2147485192.506:185317): avc: denied { ioctl } for pid=1688 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 776.658323][ T29] audit: type=1400 audit(2147485192.536:185318): avc: denied { prog_load } for pid=3346 comm="syz.1.8506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 776.677819][ T29] audit: type=1400 audit(2147485192.536:185319): avc: denied { bpf } for pid=3346 comm="syz.1.8506" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 776.698532][ T29] audit: type=1400 audit(2147485192.536:185320): avc: denied { perfmon } for pid=3346 comm="syz.1.8506" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 776.701547][ T3350] netlink: 68 bytes leftover after parsing attributes in process `syz.2.8507'. [ 776.719619][ T29] audit: type=1400 audit(2147485192.536:185321): avc: denied { perfmon } for pid=3346 comm="syz.1.8506" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 776.749621][ T29] audit: type=1400 audit(2147485192.536:185322): avc: denied { bpf } for pid=3346 comm="syz.1.8506" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 776.770369][ T29] audit: type=1400 audit(2147485192.536:185323): avc: denied { bpf } for pid=3346 comm="syz.1.8506" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 776.791079][ T29] audit: type=1400 audit(2147485192.536:185324): avc: denied { prog_run } for pid=3346 comm="syz.1.8506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 776.879681][ T3329] loop7: detected capacity change from 0 to 512 [ 776.957336][ T3358] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8509'. [ 777.038999][ T3362] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 777.045583][ T3362] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 777.053276][ T3362] vhci_hcd vhci_hcd.0: Device attached [ 777.075767][ T3364] vhci_hcd: connection closed [ 777.076009][T11616] vhci_hcd vhci_hcd.1: stop threads [ 777.085951][T11616] vhci_hcd vhci_hcd.1: release socket [ 777.091335][T11616] vhci_hcd vhci_hcd.1: disconnect device [ 777.106301][ T3329] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 777.192485][ T3329] ext4 filesystem being mounted at /250/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 777.205834][ T3369] loop4: detected capacity change from 0 to 1024 [ 777.266968][ T3369] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 777.333267][ T3369] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4215: comm syz.4.8510: Allocating blocks 481-513 which overlap fs metadata [ 777.355411][ T3376] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8513'. [ 777.393533][ T3369] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 777.400115][ T3369] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 777.407587][ T3369] vhci_hcd vhci_hcd.0: Device attached [ 777.447530][ T3369] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(10) [ 777.454153][ T3369] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 777.461701][ T3369] vhci_hcd vhci_hcd.0: Device attached [ 777.474068][ T3369] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(12) [ 777.480684][ T3369] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 777.488411][ T3369] vhci_hcd vhci_hcd.0: Device attached [ 777.502422][T30706] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 777.511749][ T3369] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(14) [ 777.518387][ T3369] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 777.526006][ T3369] vhci_hcd vhci_hcd.0: Device attached [ 777.558622][ T3387] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(17) [ 777.565243][ T3387] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 777.572871][ T3387] vhci_hcd vhci_hcd.0: Device attached [ 777.595036][ T3399] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 777.614222][ T3369] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 777.663294][ T3387] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 777.686696][ T3399] usb 9-1: new full-speed USB device number 3 using vhci_hcd [ 777.729928][ T3369] vhci_hcd vhci_hcd.0: pdev(4) rhport(7) sockfd(20) [ 777.736580][ T3369] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 777.744167][ T3369] vhci_hcd vhci_hcd.0: Device attached [ 777.773368][ T3387] EXT4-fs (loop4): pa ffff888107dd8d90: logic 1, phys. 481, len 2 [ 777.781247][ T3387] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 1 [ 777.919027][ T3415] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8520'. [ 777.938397][ T3388] vhci_hcd: connection closed [ 777.938514][ T3382] vhci_hcd: connection closed [ 777.938695][ T3377] vhci_hcd: connection reset by peer [ 777.943414][ T3379] vhci_hcd: connection closed [ 777.952651][ T3384] vhci_hcd: connection closed [ 777.953562][ T3398] vhci_hcd: connection closed [ 777.992833][T11616] vhci_hcd vhci_hcd.4: stop threads [ 778.002772][T11616] vhci_hcd vhci_hcd.4: release socket [ 778.008151][T11616] vhci_hcd vhci_hcd.4: disconnect device [ 778.061886][T11616] vhci_hcd vhci_hcd.4: stop threads [ 778.067279][T11616] vhci_hcd vhci_hcd.4: release socket [ 778.072712][T11616] vhci_hcd vhci_hcd.4: disconnect device [ 778.079888][ T3419] lo speed is unknown, defaulting to 1000 [ 778.094868][T11616] vhci_hcd vhci_hcd.4: stop threads [ 778.100134][T11616] vhci_hcd vhci_hcd.4: release socket [ 778.105609][T11616] vhci_hcd vhci_hcd.4: disconnect device [ 778.120967][ T3425] loop7: detected capacity change from 0 to 128 [ 778.166806][T11616] vhci_hcd vhci_hcd.4: stop threads [ 778.172029][T11616] vhci_hcd vhci_hcd.4: release socket [ 778.177443][T11616] vhci_hcd vhci_hcd.4: disconnect device [ 778.220237][T11616] vhci_hcd vhci_hcd.4: stop threads [ 778.225550][T11616] vhci_hcd vhci_hcd.4: release socket [ 778.231008][T11616] vhci_hcd vhci_hcd.4: disconnect device [ 778.242537][ T3425] FAT-fs (loop7): bogus number of reserved sectors [ 778.249069][ T3425] FAT-fs (loop7): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 778.258429][ T3425] FAT-fs (loop7): Can't find a valid FAT filesystem [ 778.293318][T11616] vhci_hcd vhci_hcd.4: stop threads [ 778.298547][T11616] vhci_hcd vhci_hcd.4: release socket [ 778.304060][T11616] vhci_hcd vhci_hcd.4: disconnect device [ 778.516353][T24855] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 778.547568][ T3445] syz_tun: entered promiscuous mode [ 779.193207][ T3471] loop6: detected capacity change from 0 to 512 [ 779.226637][ T3471] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 779.260397][ T3471] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #15: comm syz.6.8538: casefold flag without casefold feature [ 779.297739][ T1707] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 779.328920][ T3471] EXT4-fs (loop6): Remounting filesystem read-only [ 779.344266][ T3471] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 779.396180][ T1707] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 779.428842][T32040] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 779.442905][ T1707] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 779.461408][ T1707] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 779.938044][ T3504] loop4: detected capacity change from 0 to 8192 [ 779.983834][ T3509] ip6gre1: entered promiscuous mode [ 779.989081][ T3509] ip6gre1: entered allmulticast mode [ 780.033707][ T3307] loop4: p1 p2 p3 p4 [ 780.046735][ T3307] loop4: p1 size 835329 extends beyond EOD, truncated [ 780.078736][ T3307] loop4: p2 size 327680 extends beyond EOD, truncated [ 780.100210][ T3509] loop7: detected capacity change from 0 to 4096 [ 780.111071][ T3307] loop4: p3 start 1052673 is beyond EOD, truncated [ 780.117694][ T3307] loop4: p4 size 262144 extends beyond EOD, truncated [ 780.149857][ T3509] EXT4-fs warning (device loop7): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 780.165845][ T3513] loop6: detected capacity change from 0 to 256 [ 780.177873][ T3513] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 780.202740][ T3509] EXT4-fs (loop7): mount failed [ 780.207798][ T3513] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 780.226766][ T3504] loop4: p1 p2 p3 p4 [ 780.253315][ T3504] loop4: p1 size 835329 extends beyond EOD, truncated [ 780.330935][ T3504] loop4: p2 size 327680 extends beyond EOD, truncated [ 780.365038][ T3504] loop4: p3 start 1052673 is beyond EOD, truncated [ 780.371585][ T3504] loop4: p4 size 262144 extends beyond EOD, truncated [ 780.390473][ T3524] loop1: detected capacity change from 0 to 1024 [ 780.438305][ T3524] EXT4-fs: Ignoring removed orlov option [ 780.495218][ T3524] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 780.827100][ T7226] udevd[7226]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 780.836440][ T8840] udevd[8840]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 780.874237][ T3452] loop2: detected capacity change from 0 to 8192 [ 780.928271][ T3311] udevd[3311]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 780.966835][ T3546] EXT4-fs: Ignoring removed nomblk_io_submit option [ 780.973512][ T3546] EXT4-fs: Ignoring removed bh option [ 781.012837][ T3546] EXT4-fs error (device loop6): mb_free_blocks:2037: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 781.027336][ T3546] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #11: comm syz.6.8558: corrupted inode contents [ 781.039692][ T3546] EXT4-fs error (device loop6): ext4_dirty_inode:6502: inode #11: comm syz.6.8558: mark_inode_dirty error [ 781.051187][ T3546] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.8558: invalid indirect mapped block 1 (level 1) [ 781.065332][ T3546] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #11: comm syz.6.8558: corrupted inode contents [ 781.082615][ T3546] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem [ 781.101034][ T3546] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #11: comm syz.6.8558: corrupted inode contents [ 781.123355][ T3546] EXT4-fs error (device loop6): ext4_truncate:4635: inode #11: comm syz.6.8558: mark_inode_dirty error [ 781.138772][ T3546] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem [ 781.149590][ T3546] EXT4-fs (loop6): 1 truncate cleaned up [ 781.155795][ T3546] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 781.170051][ T3546] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 781.186272][ T3556] __nla_validate_parse: 13 callbacks suppressed [ 781.186287][ T3556] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8557'. [ 781.326707][ T7226] udevd[7226]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 781.343500][ T3555] team0 (unregistering): Port device team_slave_0 removed [ 781.346222][ T3311] udevd[3311]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 781.369317][ T5472] udevd[5472]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 781.380930][ T422] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 781.407548][ T3555] team0 (unregistering): Port device team_slave_1 removed [ 781.456961][ T3555] team0 (unregistering): Port device bond11 removed [ 781.503973][ T29] kauditd_printk_skb: 929 callbacks suppressed [ 781.503989][ T29] audit: type=1400 audit(2147485197.516:186252): avc: denied { read append } for pid=3451 comm="syz.2.8531" name="event1" dev="devtmpfs" ino=243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 781.549248][ T3555] team0 (unregistering): Port device bond12 removed [ 781.622132][ T3420] syz!: Port: 1 Link DOWN [ 781.661501][ T29] audit: type=1400 audit(2147485197.516:186253): avc: denied { open } for pid=3451 comm="syz.2.8531" path="/dev/input/event1" dev="devtmpfs" ino=243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 781.685941][ T29] audit: type=1400 audit(2147485197.546:186254): avc: denied { recv } for pid=3558 comm="syz.6.8562" saddr=10.128.0.163 src=30036 daddr=10.128.0.43 dest=45840 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 781.711982][ T29] audit: type=1400 audit(2147485197.566:186255): avc: denied { read } for pid=3560 comm="syz.1.8563" dev="nsfs" ino=4026532834 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 781.733304][ T29] audit: type=1400 audit(2147485197.566:186256): avc: denied { open } for pid=3560 comm="syz.1.8563" path="net:[4026532834]" dev="nsfs" ino=4026532834 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 781.756799][ T29] audit: type=1400 audit(2147485197.566:186257): avc: denied { create } for pid=3560 comm="syz.1.8563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 781.776896][ T29] audit: type=1400 audit(2147485197.576:186258): avc: denied { ioctl } for pid=3560 comm="syz.1.8563" path="socket:[106498]" dev="sockfs" ino=106498 ioctlcmd=0x48d4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 781.802858][ T29] audit: type=1400 audit(2147485197.586:186259): avc: denied { allowed } for pid=3560 comm="syz.1.8563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 781.823063][ T29] audit: type=1400 audit(2147485197.666:186260): avc: denied { recv } for pid=3273 comm="syz-executor" saddr=10.128.0.163 src=30036 daddr=10.128.0.43 dest=45840 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 781.837704][ T3452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 781.849023][ T29] audit: type=1400 audit(2147485197.666:186261): avc: denied { read write } for pid=30706 comm="syz-executor" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 781.896153][ T3452] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 782.027216][ T3576] set_capacity_and_notify: 1 callbacks suppressed [ 782.027237][ T3576] loop6: detected capacity change from 0 to 1024 [ 782.050341][ T3577] loop1: detected capacity change from 0 to 512 [ 782.057853][ T3577] EXT4-fs: Ignoring removed nomblk_io_submit option [ 782.064751][ T3577] EXT4-fs: Ignoring removed bh option [ 782.076921][ T3577] EXT4-fs error (device loop1): mb_free_blocks:2037: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 782.091533][ T3577] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #11: comm syz.1.8566: corrupted inode contents [ 782.104242][ T3577] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #11: comm syz.1.8566: mark_inode_dirty error [ 782.116143][ T3577] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.8566: invalid indirect mapped block 1 (level 1) [ 782.130134][ T3577] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #11: comm syz.1.8566: corrupted inode contents [ 782.142405][ T3577] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 782.151401][ T3577] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #11: comm syz.1.8566: corrupted inode contents [ 782.163958][ T3577] EXT4-fs error (device loop1): ext4_truncate:4635: inode #11: comm syz.1.8566: mark_inode_dirty error [ 782.175902][ T3577] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 782.185097][ T3577] EXT4-fs (loop1): 1 truncate cleaned up [ 782.185417][ T3577] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 782.203311][ T3577] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 782.253875][ T3579] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8567'. [ 782.751411][ T3399] usb 9-1: enqueue for inactive port 0 [ 782.775464][ T3601] xt_CT: No such helper "pptp" [ 782.781542][ T3399] usb 9-1: enqueue for inactive port 0 [ 782.789658][ T3602] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8579'. [ 782.798609][ T3602] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8579'. [ 782.834190][ T3607] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8578'. [ 782.861130][ T3606] bond16: entered promiscuous mode [ 782.868684][ T3606] 8021q: adding VLAN 0 to HW filter on device bond16 [ 782.877218][ T3606] team0: Port device bond16 added [ 782.882167][ T3399] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 783.431349][ T3639] netlink: 1 bytes leftover after parsing attributes in process `syz.2.8591'. [ 783.521213][T11616] tipc: Subscription rejected, illegal request [ 783.669193][ T3649] bond2: entered promiscuous mode [ 783.674933][ T3649] 8021q: adding VLAN 0 to HW filter on device bond2 [ 783.684462][ T3649] team0: Port device bond2 added [ 783.991400][ T3663] xt_l2tp: v2 doesn't support IP mode [ 784.418998][ T3688] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8605'. [ 784.427958][ T3688] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8605'. [ 784.617798][ T3694] netlink: 'syz.1.8607': attribute type 21 has an invalid length. [ 784.630826][ T3629] loop4: detected capacity change from 0 to 8192 [ 784.664398][ T3693] bond3: entered promiscuous mode [ 784.690175][ T3698] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8609'. [ 784.712453][ T3693] 8021q: adding VLAN 0 to HW filter on device bond3 [ 784.769126][ T3693] team0: Port device bond3 added [ 784.787189][ T3694] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8607'. [ 784.843014][ T3694] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 784.856450][ T3694] batman_adv: batadv0: Adding interface: ip6gretap1 [ 784.863173][ T3694] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 784.901637][ T3694] batman_adv: batadv0: Interface activated: ip6gretap1 [ 784.976365][ T3712] loop2: detected capacity change from 0 to 512 [ 785.034160][ T3712] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 785.052737][ T3629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 785.090109][ T3629] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 785.099816][ T3712] ext4 filesystem being mounted at /107/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 785.184914][ T1688] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 785.251676][ T3723] loop2: detected capacity change from 0 to 256 [ 785.486467][ T3726] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 785.495830][ T3730] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 785.853362][ T3756] loop2: detected capacity change from 0 to 512 [ 785.915652][ T3756] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 785.945384][ T3756] EXT4-fs (loop2): warning: maximal mount count reached, running e2fsck is recommended [ 785.970745][ T3756] EXT4-fs error (device loop2): ext4_orphan_get:1391: comm syz.2.8626: inode #15: comm syz.2.8626: iget: illegal inode # [ 785.990922][ T3756] EXT4-fs (loop2): Remounting filesystem read-only [ 785.999061][ T3756] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 786.092968][ T3767] Unsupported ieee802154 address type: 0 [ 786.100297][ T1688] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 786.130808][ T3770] netlink: 'syz.4.8629': attribute type 1 has an invalid length. [ 786.210101][ T3778] __nla_validate_parse: 4 callbacks suppressed [ 786.210115][ T3778] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8629'. [ 786.262436][ T3777] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8632'. [ 786.283773][ T3783] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8631'. [ 786.317107][ T3777] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8632'. [ 786.513407][ T29] kauditd_printk_skb: 1248 callbacks suppressed [ 786.513421][ T29] audit: type=1400 audit(2147485202.516:187510): avc: denied { ioctl } for pid=3791 comm="syz.1.8634" path="socket:[107960]" dev="sockfs" ino=107960 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 786.544897][ T29] audit: type=1400 audit(2147485202.516:187511): avc: denied { bpf } for pid=3791 comm="syz.1.8634" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 786.565703][ T29] audit: type=1400 audit(2147485202.526:187512): avc: denied { connect } for pid=3791 comm="syz.1.8634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 786.585640][ T29] audit: type=1400 audit(2147485202.526:187513): avc: denied { write } for pid=3791 comm="syz.1.8634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 786.605126][ T29] audit: type=1400 audit(2147485202.526:187514): avc: denied { create } for pid=3791 comm="syz.1.8634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 786.626909][ T3798] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8634'. [ 786.649052][ T29] audit: type=1400 audit(2147485202.526:187515): avc: denied { ioctl } for pid=3791 comm="syz.1.8634" path="socket:[107961]" dev="sockfs" ino=107961 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 786.674201][ T29] audit: type=1400 audit(2147485202.526:187516): avc: denied { module_request } for pid=3791 comm="syz.1.8634" kmod="netdev-vxcan0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 786.696394][ T29] audit: type=1400 audit(2147485202.526:187517): avc: denied { execmem } for pid=3785 comm="syz.2.8633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 786.715868][ T29] audit: type=1400 audit(2147485202.556:187518): avc: denied { recv } for pid=5472 comm="udevd" saddr=10.128.0.163 src=30036 daddr=10.128.0.43 dest=45840 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 786.741012][ T29] audit: type=1400 audit(2147485202.616:187519): avc: denied { sys_module } for pid=3791 comm="syz.1.8634" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 786.802552][ T3805] netlink: 44 bytes leftover after parsing attributes in process `syz.2.8638'. [ 786.811528][ T3805] netlink: 43 bytes leftover after parsing attributes in process `syz.2.8638'. [ 786.820592][ T3805] netlink: 'syz.2.8638': attribute type 6 has an invalid length. [ 786.823545][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811aa9de00: rx timeout, send abort [ 786.828846][ T3805] netlink: 43 bytes leftover after parsing attributes in process `syz.2.8638'. [ 787.019869][ T3806] loop4: detected capacity change from 0 to 8192 [ 787.027549][ T3812] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8640'. [ 787.150986][ T3815] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8642'. [ 787.336464][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811aa9de00: abort rx timeout. Force session deactivation [ 787.381049][ T3802] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 787.404287][ T3802] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 787.448964][ T3821] bond4: entered promiscuous mode [ 787.454918][ T3821] 8021q: adding VLAN 0 to HW filter on device bond4 [ 787.468281][ T3821] team0: Port device bond4 added [ 787.530207][ T3824] loop2: detected capacity change from 0 to 1024 [ 787.573245][ T3827] loop6: detected capacity change from 0 to 512 [ 787.581010][ T3827] EXT4-fs: Ignoring removed nomblk_io_submit option [ 787.587645][ T3827] EXT4-fs: Ignoring removed bh option [ 787.617908][ T3827] EXT4-fs error (device loop6): mb_free_blocks:2037: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 787.632559][ T3827] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #11: comm syz.6.8647: corrupted inode contents [ 787.644878][ T3827] EXT4-fs error (device loop6): ext4_dirty_inode:6502: inode #11: comm syz.6.8647: mark_inode_dirty error [ 787.657854][ T3827] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.8647: invalid indirect mapped block 1 (level 1) [ 787.671477][ T3827] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #11: comm syz.6.8647: corrupted inode contents [ 787.683625][ T3827] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem [ 787.684152][ T3824] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 787.705282][ T3827] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #11: comm syz.6.8647: corrupted inode contents [ 787.717366][ T3827] EXT4-fs error (device loop6): ext4_truncate:4635: inode #11: comm syz.6.8647: mark_inode_dirty error [ 787.728862][ T3827] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem [ 787.740327][ T3827] EXT4-fs (loop6): 1 truncate cleaned up [ 787.746490][ T3827] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 787.759977][ T3827] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 787.825878][ T1688] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 788.052048][ T3841] loop1: detected capacity change from 0 to 164 [ 788.075386][ T3841] isofs_fill_super: bread failed, dev=loop1, iso_blknum=41, block=82 [ 788.154510][ T3844] bond5: option mode: invalid value (9) [ 788.165713][ T3844] bond5 (unregistering): Released all slaves [ 788.252135][ T3849] bond5: option mode: invalid value (9) [ 788.295449][ T3849] bond5 (unregistering): Released all slaves [ 788.581416][ T3857] lo speed is unknown, defaulting to 1000 [ 788.604100][ T3863] loop4: detected capacity change from 0 to 512 [ 788.611863][ T3863] EXT4-fs: Ignoring removed nomblk_io_submit option [ 788.618534][ T3863] EXT4-fs: Ignoring removed bh option [ 788.631485][ T3863] EXT4-fs error (device loop4): mb_free_blocks:2037: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 788.646073][ T3863] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #11: comm syz.4.8658: corrupted inode contents [ 788.660304][ T3863] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #11: comm syz.4.8658: mark_inode_dirty error [ 788.676443][ T3863] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.8658: invalid indirect mapped block 1 (level 1) [ 788.690038][ T3863] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #11: comm syz.4.8658: corrupted inode contents [ 788.702102][ T3863] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 788.727081][ T3863] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #11: comm syz.4.8658: corrupted inode contents [ 788.739652][ T3863] EXT4-fs error (device loop4): ext4_truncate:4635: inode #11: comm syz.4.8658: mark_inode_dirty error [ 788.768445][ T3863] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 788.792175][ T3863] EXT4-fs (loop4): 1 truncate cleaned up [ 788.798640][ T3863] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 788.812312][ T3863] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 788.827899][ T3870] FAT-fs (loop5): bogus number of reserved sectors [ 788.834429][ T3870] FAT-fs (loop5): Can't find a valid FAT filesystem [ 789.100793][ T3873] dvmrp1: entered allmulticast mode [ 789.736512][ T3893] netlink: 'syz.7.8669': attribute type 1 has an invalid length. [ 789.902262][ T3912] loop6: detected capacity change from 0 to 512 [ 789.910121][ T3912] EXT4-fs: Ignoring removed nomblk_io_submit option [ 789.916767][ T3912] EXT4-fs: Ignoring removed bh option [ 789.925928][ T7284] kernel read not supported for file /vcsu1 (pid: 7284 comm: kworker/0:13) [ 789.940464][ T3912] EXT4-fs error (device loop6): mb_free_blocks:2037: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 789.955172][ T3912] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #11: comm syz.6.8671: corrupted inode contents [ 789.967252][ T3912] EXT4-fs error (device loop6): ext4_dirty_inode:6502: inode #11: comm syz.6.8671: mark_inode_dirty error [ 789.978908][ T3912] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.8671: invalid indirect mapped block 1 (level 1) [ 789.994490][ T3912] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #11: comm syz.6.8671: corrupted inode contents [ 790.006599][ T3912] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem [ 790.015386][ T3912] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #11: comm syz.6.8671: corrupted inode contents [ 790.028076][ T3912] EXT4-fs error (device loop6): ext4_truncate:4635: inode #11: comm syz.6.8671: mark_inode_dirty error [ 790.039332][ T3912] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem [ 790.048872][ T3912] EXT4-fs (loop6): 1 truncate cleaned up [ 790.055419][ T3912] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 790.068366][ T3912] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 790.331275][ T3924] loop7: detected capacity change from 0 to 512 [ 790.606186][ T3931] loop7: detected capacity change from 0 to 128 [ 790.973548][ C1] vcan0: j1939_tp_rxtimer: 0xffff88810343f600: rx timeout, send abort [ 791.089701][ T3943] bond17: option downdelay: invalid value (18446744073709551615) [ 791.097966][ T3943] bond17: option downdelay: allowed values 0 - 2147483647 [ 791.129697][ T3943] bond17 (unregistering): Released all slaves [ 791.231094][ T3876] loop4: detected capacity change from 0 to 8192 [ 791.300254][ T3940] __nla_validate_parse: 14 callbacks suppressed [ 791.300284][ T3940] netlink: 16 bytes leftover after parsing attributes in process `syz.6.8681'. [ 791.385127][ T3948] loop1: detected capacity change from 0 to 2048 [ 791.415643][ T3950] loop7: detected capacity change from 0 to 512 [ 791.427158][ T3948] loop1: p1 p3 p4 [ 791.439672][ T3948] loop1: p4 size 589824 extends beyond EOD, truncated [ 791.449220][ T3950] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 791.481787][ C1] vcan0: j1939_tp_rxtimer: 0xffff88810343f600: abort rx timeout. Force session deactivation [ 791.516495][ T3950] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8684'. [ 791.528908][ T3950] ipvlan2: entered promiscuous mode [ 791.539860][ T29] kauditd_printk_skb: 1012 callbacks suppressed [ 791.539917][ T29] audit: type=1400 audit(2147485207.547:188532): avc: denied { map_create } for pid=3949 comm="syz.7.8684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 791.595198][ T3876] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 791.620858][ T3876] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 791.658061][ T29] audit: type=1400 audit(2147485207.547:188533): avc: denied { prog_load } for pid=3949 comm="syz.7.8684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 791.677486][ T29] audit: type=1400 audit(2147485207.547:188534): avc: denied { bpf } for pid=3949 comm="syz.7.8684" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 791.698281][ T29] audit: type=1400 audit(2147485207.547:188535): avc: denied { perfmon } for pid=3949 comm="syz.7.8684" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 791.719445][ T29] audit: type=1400 audit(2147485207.547:188536): avc: denied { bpf } for pid=3949 comm="syz.7.8684" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 791.740161][ T29] audit: type=1400 audit(2147485207.557:188537): avc: denied { recv } for pid=3949 comm="syz.7.8684" saddr=10.128.0.163 src=30036 daddr=10.128.0.43 dest=45840 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 791.766044][ T29] audit: type=1400 audit(2147485207.587:188538): avc: denied { unmount } for pid=30706 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 791.786277][ T29] audit: type=1400 audit(2147485207.587:188539): avc: denied { recv } for pid=3953 comm="syz-executor" saddr=10.128.0.163 src=30036 daddr=10.128.0.43 dest=45840 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 791.811919][ T29] audit: type=1400 audit(2147485207.587:188540): avc: denied { recv } for pid=3953 comm="syz-executor" saddr=10.128.0.163 src=30036 daddr=10.128.0.43 dest=45840 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 791.821410][ T3958] netlink: 'syz.1.8687': attribute type 20 has an invalid length. [ 791.837679][ T29] audit: type=1400 audit(2147485207.587:188541): avc: denied { recv } for pid=3875 comm="syz.4.8661" saddr=10.128.0.163 src=30036 daddr=10.128.0.43 dest=45840 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 791.871198][ T3958] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8687'. [ 791.973993][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 791.976157][ T8840] udevd[8840]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 791.990436][ T3310] udevd[3310]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 792.244067][ T3954] 9pnet_virtio: no channels available for device 127.0.0.1 [ 792.251582][ T3966] iso9660: Bad value for 'dmode' [ 792.256615][ T3954] sctp: [Deprecated]: syz.6.8685 (pid 3954) Use of struct sctp_assoc_value in delayed_ack socket option. [ 792.256615][ T3954] Use struct sctp_sack_info instead [ 792.326888][ T3964] sctp: [Deprecated]: syz.6.8685 (pid 3964) Use of struct sctp_assoc_value in delayed_ack socket option. [ 792.326888][ T3964] Use struct sctp_sack_info instead [ 792.395038][ T3969] FAT-fs (loop7): Directory bread(block 64) failed [ 792.417951][ T3969] FAT-fs (loop7): Directory bread(block 65) failed [ 792.441634][ T3969] FAT-fs (loop7): Directory bread(block 66) failed [ 792.479554][ T3969] FAT-fs (loop7): Directory bread(block 67) failed [ 792.509991][ T3969] FAT-fs (loop7): Directory bread(block 68) failed [ 792.535327][ T3969] FAT-fs (loop7): Directory bread(block 69) failed [ 792.604271][ T3969] FAT-fs (loop7): Directory bread(block 70) failed [ 792.624518][ T3978] set_capacity_and_notify: 3 callbacks suppressed [ 792.624531][ T3978] loop2: detected capacity change from 0 to 1024 [ 792.638239][ T3969] FAT-fs (loop7): Directory bread(block 71) failed [ 792.658695][ T3980] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8694'. [ 792.667976][ T3969] FAT-fs (loop7): Directory bread(block 72) failed [ 792.675792][ T3978] EXT4-fs: inline encryption not supported [ 792.683094][ T3979] loop4: detected capacity change from 0 to 1024 [ 792.705915][ T3969] FAT-fs (loop7): Directory bread(block 73) failed [ 792.731890][ T3974] loop6: detected capacity change from 0 to 8192 [ 792.738085][ T3979] EXT4-fs: inline encryption not supported [ 792.754904][ T3978] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 792.787578][ T3978] EXT4-fs error (device loop2): mb_free_blocks:2037: group 0, inode 15: block 225:freeing already freed block (bit 14); block bitmap corrupt. [ 792.826830][ T3979] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 792.900951][ T3978] EXT4-fs (loop2): Remounting filesystem read-only [ 792.941834][ T1688] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 793.009094][ T3979] netlink: 'syz.4.8692': attribute type 5 has an invalid length. [ 793.029646][ T3989] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8697'. [ 793.116163][ T3994] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8698'. [ 793.200961][T24855] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 793.274256][ T3992] lo speed is unknown, defaulting to 1000 [ 793.355892][ T3996] loop7: detected capacity change from 0 to 8192 [ 793.401209][ T3999] lo speed is unknown, defaulting to 1000 [ 793.502881][ T4004] netlink: 152 bytes leftover after parsing attributes in process `syz.4.8701'. [ 793.959220][ T4011] loop7: detected capacity change from 0 to 8192 [ 794.053355][ T4023] netlink: 20 bytes leftover after parsing attributes in process `syz.6.8706'. [ 794.326775][ T4038] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8709'. [ 794.365896][ T4008] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 794.431505][ T3998] lo speed is unknown, defaulting to 1000 [ 794.475747][ T3987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 794.533871][ T4042] loop6: detected capacity change from 0 to 1024 [ 794.546301][ T4008] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 794.591915][ T3987] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 794.599757][ T4042] EXT4-fs: test_dummy_encryption option not supported [ 794.726044][ T4042] bridge5: the hash_elasticity option has been deprecated and is always 16 [ 794.811019][ T4046] loop2: detected capacity change from 0 to 8192 [ 794.985424][ T4050] loop6: detected capacity change from 0 to 512 [ 794.996864][ T4050] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 795.044763][ T4050] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8714'. [ 795.085080][ T4050] ipvlan2: entered promiscuous mode [ 795.429856][ T4063] loop6: detected capacity change from 0 to 256 [ 795.485271][ T4063] FAT-fs (loop6): Directory bread(block 64) failed [ 795.524858][ T4063] FAT-fs (loop6): Directory bread(block 65) failed [ 795.548006][ T4063] FAT-fs (loop6): Directory bread(block 66) failed [ 795.580789][ T4063] FAT-fs (loop6): Directory bread(block 67) failed [ 795.615892][ T4063] FAT-fs (loop6): Directory bread(block 68) failed [ 795.631918][ T4063] FAT-fs (loop6): Directory bread(block 69) failed [ 795.649382][ T4063] FAT-fs (loop6): Directory bread(block 70) failed [ 795.672346][ T4063] FAT-fs (loop6): Directory bread(block 71) failed [ 795.693992][ T4063] FAT-fs (loop6): Directory bread(block 72) failed [ 795.726316][ T4063] FAT-fs (loop6): Directory bread(block 73) failed [ 795.762469][ T4071] loop1: detected capacity change from 0 to 512 [ 795.784582][ T4071] EXT4-fs (loop1): orphan cleanup on readonly fs [ 795.803299][ T4071] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 795.831932][ T4071] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.8721: invalid indirect mapped block 8 (level 2) [ 795.862291][ T4071] EXT4-fs (loop1): Remounting filesystem read-only [ 795.869020][ T4071] EXT4-fs (loop1): 1 truncate cleaned up [ 795.875154][ T4071] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 796.022795][ T422] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 796.144172][ T4089] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 796.244016][ T4089] ipvlan3: entered promiscuous mode [ 796.313401][ T4094] __nla_validate_parse: 5 callbacks suppressed [ 796.313417][ T4094] netlink: 20 bytes leftover after parsing attributes in process `syz.7.8728'. [ 796.403502][ T4096] x_tables: ip6_tables: tcp match: only valid for protocol 6 [ 796.556979][ T29] kauditd_printk_skb: 924 callbacks suppressed [ 796.556996][ T29] audit: type=1400 audit(2147485212.567:189466): avc: denied { recv } for pid=4101 comm="syz.2.8732" saddr=10.128.0.163 src=30036 daddr=10.128.0.43 dest=45840 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 796.629310][ T4102] xt_l2tp: v2 doesn't support IP mode [ 796.664844][ T29] audit: type=1400 audit(2147485212.587:189467): avc: denied { create } for pid=4099 comm="syz.6.8731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 796.676420][ T4100] bond17: entered promiscuous mode [ 796.685554][ T29] audit: type=1400 audit(2147485212.597:189468): avc: denied { write } for pid=4099 comm="syz.6.8731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 796.692888][ T4100] 8021q: adding VLAN 0 to HW filter on device bond17 [ 796.711148][ T29] audit: type=1400 audit(2147485212.597:189469): avc: denied { create } for pid=4099 comm="syz.6.8731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 796.724431][ T4100] team0: Port device bond17 added [ 796.737612][ T29] audit: type=1400 audit(2147485212.597:189470): avc: denied { setopt } for pid=4099 comm="syz.6.8731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 796.762587][ T29] audit: type=1400 audit(2147485212.597:189471): avc: denied { recv } for pid=30706 comm="syz-executor" saddr=10.128.0.163 src=30036 daddr=10.128.0.43 dest=45840 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 796.788399][ T29] audit: type=1400 audit(2147485212.607:189472): avc: denied { recv } for pid=3273 comm="syz-executor" saddr=10.128.0.163 src=30036 daddr=10.128.0.43 dest=45840 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 796.814049][ T29] audit: type=1400 audit(2147485212.607:189473): avc: denied { recv } for pid=3273 comm="syz-executor" saddr=10.128.0.163 src=30036 daddr=10.128.0.43 dest=45840 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 796.839942][ T29] audit: type=1400 audit(2147485212.607:189474): avc: denied { read write } for pid=30706 comm="syz-executor" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 796.864400][ T29] audit: type=1400 audit(2147485212.607:189475): avc: denied { open } for pid=30706 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 796.924411][ T4110] syzkaller0: entered allmulticast mode [ 796.930285][ T4110] syzkaller0: entered promiscuous mode [ 797.106565][ T4105] syzkaller0 (unregistering): left allmulticast mode [ 797.113357][ T4105] syzkaller0 (unregistering): left promiscuous mode [ 797.309250][ T4110] bridge0: port 2(bridge_slave_1) entered disabled state [ 797.316496][ T4110] bridge0: port 1(bridge_slave_0) entered disabled state [ 797.393819][ T4110] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 797.404544][ T4110] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 797.441129][ T4128] FAT-fs (loop2): IO charset cp855 not found [ 797.484194][T11093] netdevsim netdevsim7 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 797.493177][T11093] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 797.547930][T11093] netdevsim netdevsim7 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 797.556910][T11093] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 797.649974][T11093] netdevsim netdevsim7 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 797.658916][T11093] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 797.732250][T11093] netdevsim netdevsim7 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 797.741279][T11093] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 797.758560][ T4141] set_capacity_and_notify: 2 callbacks suppressed [ 797.758573][ T4141] loop7: detected capacity change from 0 to 256 [ 797.803561][ T4141] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 797.936174][ T4147] loop6: detected capacity change from 0 to 512 [ 797.985299][ T4148] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 797.993104][ T4148] SELinux: failed to load policy [ 797.998480][ T4090] loop1: detected capacity change from 0 to 8192 [ 798.111992][ T4147] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 798.254523][ T4147] EXT4-fs error (device loop6): ext4_validate_block_bitmap:423: comm syz.6.8747: bg 0: bad block bitmap checksum [ 798.309767][ T4147] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6689: Filesystem failed CRC [ 798.382583][ T4161] netlink: 'syz.7.8751': attribute type 4 has an invalid length. [ 798.411870][ T4161] loop7: detected capacity change from 0 to 512 [ 798.437740][ T4161] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 798.459634][ T4161] EXT4-fs warning (device loop7): ext4_dirblock_csum_verify:375: inode #2: comm syz.7.8751: No space for directory leaf checksum. Please run e2fsck -D. [ 798.475769][ T4161] EXT4-fs error (device loop7): __ext4_find_entry:1626: inode #2: comm syz.7.8751: checksumming directory block 0 [ 798.499552][ T4090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 798.564128][T30706] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 798.583262][ T4090] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 798.803505][T32040] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 798.983468][ T4183] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8757'. [ 799.053717][ T4186] batadv_slave_1: entered promiscuous mode [ 799.115546][ T4185] batadv_slave_1: left promiscuous mode [ 799.329444][ T4197] netlink: 'syz.1.8764': attribute type 4 has an invalid length. [ 799.379079][ T4197] loop1: detected capacity change from 0 to 512 [ 799.414064][ T4197] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 799.428840][ T4197] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:375: inode #2: comm syz.1.8764: No space for directory leaf checksum. Please run e2fsck -D. [ 799.444275][ T4197] EXT4-fs error (device loop1): __ext4_find_entry:1626: inode #2: comm syz.1.8764: checksumming directory block 0 [ 799.515257][ T422] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 799.669663][ T4208] 9p: Bad value for 'rfdno' [ 799.680071][ T4208] netlink: 60 bytes leftover after parsing attributes in process `syz.4.8769'. [ 799.775166][ T4211] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8770'. [ 799.784076][ T4211] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8770'. [ 799.814350][ T4212] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8767'. [ 799.949882][ T4214] ================================================================== [ 799.957997][ T4214] BUG: KCSAN: data-race in hash_ipportip4_add / hash_ipportip4_head [ 799.965997][ T4214] [ 799.968312][ T4214] read-write to 0xffff88811cd4d319 of 1 bytes by task 4208 on cpu 0: [ 799.976372][ T4214] hash_ipportip4_add+0x7e1/0x10a0 [ 799.981489][ T4214] hash_ipportip4_uadt+0x789/0x8b0 [ 799.986619][ T4214] call_ad+0x231/0x640 [ 799.990683][ T4214] ip_set_ad+0x5c0/0x690 [ 799.995103][ T4214] ip_set_uadd+0x41/0x50 [ 799.999425][ T4214] nfnetlink_rcv_msg+0x509/0x5d0 [ 800.004365][ T4214] netlink_rcv_skb+0x123/0x220 [ 800.009132][ T4214] nfnetlink_rcv+0x167/0x1720 [ 800.013803][ T4214] netlink_unicast+0x5c0/0x690 [ 800.018570][ T4214] netlink_sendmsg+0x5c8/0x6f0 [ 800.020680][ T4213] netlink: 'syz.4.8769': attribute type 21 has an invalid length. [ 800.023331][ T4214] __sock_sendmsg+0x145/0x170 [ 800.023354][ T4214] ____sys_sendmsg+0x31e/0x4a0 [ 800.031237][ T4213] IPv6: NLM_F_CREATE should be specified when creating new route [ 800.035851][ T4214] ___sys_sendmsg+0x195/0x1e0 [ 800.040683][ T4213] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 800.048353][ T4214] __x64_sys_sendmsg+0xd4/0x160 [ 800.048385][ T4214] x64_sys_call+0x17ba/0x3000 [ 800.053098][ T4213] IPv6: NLM_F_CREATE should be set when creating new route [ 800.060249][ T4214] do_syscall_64+0xc0/0x2a0 [ 800.065300][ T4213] IPv6: NLM_F_CREATE should be set when creating new route [ 800.069920][ T4214] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 800.077130][ T4213] IPv6: NLM_F_CREATE should be set when creating new route [ 800.081571][ T4214] [ 800.081579][ T4214] read to 0xffff88811cd4d319 of 1 bytes by task 4214 on cpu 1: [ 800.111620][ T4214] hash_ipportip4_head+0x28f/0x790 [ 800.116882][ T4214] ip_set_dump_do+0xa34/0xb00 [ 800.121567][ T4214] netlink_dump+0x455/0x8a0 [ 800.126072][ T4214] netlink_recvmsg+0x420/0x550 [ 800.130834][ T4214] sock_recvmsg+0x139/0x160 [ 800.135370][ T4214] ____sys_recvmsg+0xf5/0x280 [ 800.140146][ T4214] ___sys_recvmsg+0x11f/0x3b0 [ 800.144838][ T4214] __x64_sys_recvmsg+0xd1/0x160 [ 800.149695][ T4214] x64_sys_call+0x2cbf/0x3000 [ 800.154381][ T4214] do_syscall_64+0xc0/0x2a0 [ 800.158884][ T4214] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 800.162405][ T4217] netlink: 'syz.4.8769': attribute type 12 has an invalid length. [ 800.164857][ T4214] [ 800.164863][ T4214] value changed: 0x03 -> 0x04 [ 800.172712][ T4217] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8769'. [ 800.174970][ T4214] [ 800.174977][ T4214] Reported by Kernel Concurrency Sanitizer on: [ 800.197158][ T4214] CPU: 1 UID: 0 PID: 4214 Comm: syz.4.8769 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 800.208443][ T4214] Tainted: [W]=WARN [ 800.212244][ T4214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 800.222301][ T4214] ================================================================== [ 800.240552][ T4216] netlink: 'syz.2.8771': attribute type 1 has an invalid length. [ 800.270120][ T4208] Set syz1 is full, maxelem 65536 reached [ 802.181565][ T29] kauditd_printk_skb: 633 callbacks suppressed [ 802.181580][ T29] audit: type=1400 audit(2147485218.197:190109): avc: denied { egress } for pid=0 comm="swapper/1" saddr=fe80::1c daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 802.212591][ T29] audit: type=1400 audit(2147485218.197:190110): avc: denied { sendto } for pid=0 comm="swapper/1" saddr=fe80::1c daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 802.821538][ T29] audit: type=1400 audit(2147485218.837:190111): avc: denied { egress } for pid=22 comm="ksoftirqd/1" saddr=fe80::1b daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 802.845271][ T29] audit: type=1400 audit(2147485218.837:190112): avc: denied { sendto } for pid=22 comm="ksoftirqd/1" saddr=fe80::1b daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1