last executing test programs: 34.457130939s ago: executing program 0 (id=66): setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0) keyctl$restrict_keyring(0x6, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000d40), r0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000060000000400000000000012020000000000000000000001050000018000000000000000010000850200000000000000010000000000000400000000da"], 0x0, 0x52}, 0x20) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000fffffff3180100006400000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000c800000095"], &(0x7f0000000300)='GPL\x00', 0x9, 0xff6, &(0x7f0000001e00)=""/4086}, 0x94) ptrace$ARCH_SET_CPUID(0x1e, r1, 0x1, 0x1012) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) shmctl$IPC_STAT(0x0, 0x2, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x109942, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000580)) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x100, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x2}, 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={r4, &(0x7f0000000d80)="1ca226cb31a7396499e1cb7df1f879671e46f449306f0f807ea4d24560cff69cade0bb1ea166267effb3e189db7173bc189793eeaec18645e76cb325b2448ce887dfe66349830eafc841e495216aa9541d32a8c89ff05edc1069bcfd0e006211b4a8fa81e443f57e3566e51591b6335de09318ebf2177d9c2d160d5a39ea11a61e7a397024fd715b0c80dcfae11d6326db51bef8c69349c1913042d3a21fa52898a919791eebe3ff4ab7e51b99c106e883f9ce1f1e3d9f89a6a66dd0197050bef998272cc5b6aafe79f1e28ea2a99d71b2fcb4ea1b6b14037eb6206e3489a2539506e0932930e0a658a758eded83dd6915d67b999adacbd60f1194eed74c7c30109705a5141e4d05c22cd485026d18d95d8425a9474eca2b252cf597c057076668da2793b41b2c6b6aad9c46eb7537a88c1c5c43d3f777b3fa376b9c5e34672356058ca015d51a946e1ea8c2dc47f120f257b1552eac4c1310441c0bd5995337f773534ea9c602d3320eee5aa87c2d369f0c002410af2abf9dab0adebb50ba3a94e9e6bf01650f3721f9e975a35b910facda34d680648a14ed978ed5b590380d0179ad2d882b8095c938c1ff596210b4789baef435a7f6030e399e134d87182db2a33815a8d800b500e149c9259beebdbd27a73f8c9c4880d639dc937f17c1e097616e88b1f687d5e555a5a5a8b9ff619574322e26ce5b061dbddbcfdcbdb06c8d37d04647145bdb50372ae15dec143bb14853a0e8a84cabb173d5161870ab3145ddd0c61d053dbb35123177756bb58a59b9b715aa1aebdacfc4f3b2eb87e036def8f3553370bc9909e6206bf17077e23b087b41c287d6d6437b6ba39fc2290dc31823e3fd6710e6f5dcc20e044f01727decbc84beb847807705544e2a9f18db175b2aa18a372e2a727f34e54f2f0dd3d127d8948087abf7a4d41e9cb9304318ef923e7e598f145255d22caf3f5fe55640a9414d1de70791fe8636cfffbb73c45d731c92382a262c69f34f30c980e4f9c0cb8f2b2d26752dcc0d3b82b436420c38f798cb3cfef85401b334beb0e33e9d31555a341bfab81805272847c44de2980aaeee501a09cea6bd02d97590e2a634665c56ee83e69d0182bd074352aeab0dd4d974185792a6c59d930277c0b5e15e2df9c8ec323208bc715580660018bf4b903a4de0458bc0448127b1e135c9f0f60c59918d2fff46ccaa9ed5f7b76da0877940ad90600f8c990217016e11b89c8791e8c26a31c7933613ea7382650bb5694da58070a0ea24b12e144b40c46148a4f7749ffe9902ea2861dd1c931ab65263d95dc8ed699a1b1a154c97fae3aa503570a0e76c2aa6a3249772dd02499396dcc993f8eb131fba3a9fece0df4c2df213d05d972d4163eac4d773d20b8184bb79e2a68a90903c5d9626b582dfdd4646eee76ccd182fc713e6ec8f88ea4ee8f03f16de82e3609c8f8151c72782a9d5025a34b8a323f8100ddce05c1527fca90f58d79f72ffc7849c9de3cb872cdf406b68357b1801b59f137cfe7a26818f819678bf9b827ae3b908ee1117fb281f007954bfc26973aea191de025df68d9ee6367e2ddc9fd8a18bda9603d58032e4cca951d0cde19538acbb3d0cd82d19debce9e26562afe0706f83c8484462e8ed1a950f2304bb2b8b8cc5f37622c637c7a598269debc9d36e569bf30f81490d0392998e6b549f8b7440715e9581f037bd0cb8134d9383e4d43b8d98015980e1514a0514c98618b6a45ba0313ff33b0a7e6408096ffbfe22646f8d5c430c59213a8e578da1ba3a0b173c33016b45513c0f215e358025ea27a7431a69b8183fc849343f31e9582ca0ca672d8e078796263e1d9a5fce514bdb4e1f3d77d02f8cdfa8e1a2cf2366ca9f253db268ab1e4e3c63214da35fcd4655ffadf414303338d764cd1fc7ce1ad09e749bd20d163a5ec07601988303ad13847d7d484fe0dbd28770441a9cda84cb23bf3e8d5d540b18d2e08fd97d2b44e63828de7159d10e50eecfc01a17dc2e4fe112782bf41ec9ab6300ad65254a70e401b64cd0461b2803fc00b89ba47f2e79f9d2b4224692e479017aa41912cf19e4ff9a01da737696ef01ef599449fc10feb5ac6771a08274dce5ed07b452b949f7b8a1c80dcf468b34ff6cc609ff7e0ef997244e98ee3a5f9f74d88df131eb6aa8a4a63356494e033f35e75f57cfd5689115cd4b68b1db961b895be01108c4e1433fc084a2cd7ae766e35430306bbc657e8d3f38e314eaa23b0d63635a8576aef65bdb83d4d91e2dfd2c82a90f34102de6761c1293e0a4b91d87c0550d35a651fd303b041c23d43dbc0895785ccd3ca6d00b958b5928abf602ce317f9df13b4c8393a75bdc7029dc38f7124cf70ff843459bd83b5b70d3f890df706538dab25ea8329a1a673d0c19f1ca637a0125e8b4e493a2482ad2a311b5a1e23736c8811e071b84ad4b261b12165dce24f6e9e0b0af1dac563fe64ca4afcdbdd93bf9acabf06e242f30bae5e45dca008317d7567474824566bc83f10cc2fba404eca7eb47e168eec042a870846ca306711b5d858bf51de51792ebca3e3afc429f73a563584d66515ae36a0b5b786dd361f4da8edd97e89b61b6e1c1b5f2e5485c3a9f66bb88e3fccc94272044c4759cbbf1fc3fb1b90e970e843f1e706a0d4de1df9059fa548eba367c4cf9e38266bbff86f68dd2f2c798699224ab6b64fa252fd82a1e87821f2bd2022a5837d6aaafd34fc15705eba9d05ac4878e77189c195fef57dc3f984548cc508ca30ccff5ad8f2c07f483fd1ccd6d287e776bd967ccfcfd04d3fb386210ea970bae769926e6fcd3114d4d42c65a120a9f3234e4f7eda7a1212ec6e9d7fc1db010f59c927f8dd8f01727fb8c02e650244e8390485e7765a961483b752bcf15acd7abf509c3b440a96cd56441b41c1007d48ce986e7472084ea776a8a901ebf8a0881b9402955d6e96fb5610dfacec3fa66dee741667588b3ae24869639b1a831fc6df5b55eab525cb8ae6053ac3195bacf86c0b89d038eecdd66e8565f42ed57d3435da5516da5b0b4f8eb1021d923e857e2146cde46cc074bd8d112b24b3a360c0c114eb82b569a95909d14c1570ee6edcc9345390e0a58c56f4e60c72ca433e2b58ca49b462993ff84c3b6b558dcadf445c0948f4abac4d359f1b33820ea91fdbc33736fe028c939aba407cded6a134302b144caa583ee0f5ed1e0ea223682337b6b2bf643e5b79a647461c213588e8409867c02e4c6b2a376cf2d271d4e8e3168755babd8798b92152dce1874fae850e96197ebfaeb092a8add7fc561683723e7a347540b3d0a649b268837e65da6d7ac3187fd0390cf951ba5cf322afe7de04b3cb241e98c5f0a239809db9f6d2b23092ff05a6298f9470090c9416d743d2b53f363bf0e1eec72685b053c76d4d821127d59e7f0e04a130d4551617cbc8df3b35b82403f3ba7962970b9ad13011cf7c2fef6971565f601511880118eeb3607319109e2f500069877295cf8d5b1e451521f99f27c25b9edfad95170ecd428a6d8c8274f8fd1b052a54bb94ca1b30e3c69202e999eb853e7c12ec3329ff0946b7bd85bf49ef5444615497ab144e6bd11ab94074556333c93dafdbaaa8e63e43291d97b299211cea72673ecfa9546cc059c41dd27a7d67d5e8d4e8fdf030c0596c682877de8cefc5678cda4d9d76c076a57cb9a34fbad5e382a85fe8455976e9c733fb015d6f3a8f790a8a8b6834e4c0170939b29a793eea84599c4d8f14b44d71812f3a59a0b04cfab4144e6527548c915d9dbaadf920963dcf3eb24fb01dd5adb52a7aebeda50ff741b401f2577226cdbf5c1f7c8f3eacb1cbfa96a5544fe89ec785ca2e9711ea462a4c5b2a749bbbdc7ea2e0c70e2dd6d81cd899fe52d8427aef87106972ddab2d80bfb2b93d52c0bbb44a66d1c971d8923b7fd0486d8c01a4db8d959f0394de384d6f01a4186dd61ffc0126afff7bbb4947610a65677c9739d4f2f4d6ee933c15790b312873b582af22569c6e357e42799daac0de42643883910b0bd5071102902941b7d4a164f08470b4d2d00d6de5a2759b7c7105a9f83d583c2de19b248c3ad8c4711dde31b7722f04195db88971ec6bdcfc6041180b476cb3e73a2322504d514b238d2d99c2d38affeee90a4368fac2b07a54e8a982f6d5c2de7e8e9f7a589652ad281a2d98a8b6250aa3f8e6f6ba5444d6a1da2576ea88d36aa8428fd0d64259b48d7816807b9ddd2bf3be2b81e342ce63226e4740eb02ba93d2b5c5445c88609ff73be4f97a508df62e7e141e7f82a6d77e721c9df663d85e6a9c32d46f9dd651106a3d08319444feebfe63b9efc05e87e06778d0ff309a3076b068f32ddf16ee6573bc81c923741ac7327d62e9aa800a0e7afe230f31a74f89894a98a7252264ec0f362ada968a94f76a458d158c5c7ba6dde82cae0a300eb22451cf3a4a10afbaecd6b4b18dcc81812564622c16736d675c215ac519e19d4a6aa2fbd91b3b8650cd1171cf653f3e64a2090b25265f4b544d87063b0c02ce6bd8cfaae5c5105df1256f4effb089129944721212a87e97f6af03e4dc93b77269ee785ff134dfad1b96aa4c80144b7dd3d73d143a728fe8c941c588019ac836dcb3fb1645f791239a76eae89e78cd689cf35bf3139b4aa050151182be94cb79e3c38e1b602384a92ef0a8da4d427354dd9938f4a06a248ba56042dbcfb75e73860de8b9e43c1b78fc7c13455f9211613ea4873100066905314dc637714043ed8d94dd9af3996d3947513ba9d759988908fb51dcd427057ad26800eb06583c19a89c487dda848df08404b40828bf20effe2ddf9b169b54861737740099b482a360245189eb37579be12cded08d1ba65fd2b8bd1c9983dc09d8b505a502ca61144575a4a93476ee33ecc93e0b86efded2dbc9be7220814181539b1dac973bde7abdcdd0aceae7299c7638668613d0bd053af35054cbde313fee2391e1a933fb85a106378a6575961d0663049912f179a131101cf5e8f671e60c3409e1ce61573be72c7da499663872ca7dadba38d3af7f62caba486fa50a26835467836320bd2ba76d7a1f370a1ea1f3bbe0be69ace34221b18fcbfca2af4dd743ccfe580a35e41703e8e3b97096604126473087ff46626ba1a34d2d9a70dbbb53ef321dbfa803154bdfc16aaa7825e51f60427f4b4728180c46383e290c7e67fce5a338b2efa7905720fd7a2d79c9f9d3c93d340dcf49d5ed973b347b315616df4fde02246b2fd91d416441bbf8b8190edfd04b8d6f688e8b02ca2580e28511c4f5ec15c6ee90f73d98e8bc41310c6e3a4fdf2a53bd6f9022300cc36e4480e897932b90056df77fddff397ff754820d0fa55146e8726027ba116cb0c4b0fa6a9d793f9515cfd58a00cb02bb0944630b7b7309a24783e080594e805d180e3f11ce627a5de056095deb1abb8d3f4215bd2d90e7a7aeae90f2d471a491c6e2e7e3b943f25931d3c0061cc7c5c38dc639b4c22c5b771562c2e773070c7f0410f68552a8f5d553792a25e9bd1370a2439fdc643e3c848114859c5e30702b8f262d9627eb3ff9ddbedd25f0b63a6459a1f8fa7b3245355a142e4c179830f3d322bb07c00b3a7d77fb5cdeb3888ad491a488b742892727aaad741b2afa258b5736db2019f9d63877a707f4c708ed4eb3817699c5dd1e9b46a6eccec6c8af7400c74833e24ad983ad072d83e1ac1b342afa35bdb7682047365530a02cfa88bd4c013d4702a4a81bb80cb7e5cc5345d39f089dc3a8a8f02f73f8abaf3872fb8"}, 0x20) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) prlimit64(r1, 0x7, &(0x7f0000000140)={0xffffffff, 0x6}, 0x0) 34.022168169s ago: executing program 0 (id=70): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x1) syz_emit_ethernet(0x4a, &(0x7f0000000340)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000003c0)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5}}}}}}}, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) 33.97205832s ago: executing program 0 (id=73): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = getpid() bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x2, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x41000, 0xd, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_io_uring_setup(0x4175, &(0x7f0000000180)={0x0, 0x1bf58, 0x10000, 0x2, 0x2d0}, &(0x7f0000000440), &(0x7f0000000400)) io_uring_enter(r2, 0x7b1d, 0x693c, 0xc, 0x0, 0x0) io_uring_register$IORING_REGISTER_NAPI(r2, 0x1b, &(0x7f00000000c0)={0x5, 0x6}, 0x1) write$P9_RRENAME(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x15, 0x3}, 0x7) r3 = syz_pidfd_open(r1, 0x0) setns(r3, 0x24020000) syz_clone(0x12003080, 0x0, 0x0, 0x0, 0x0, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYRES32=r4], 0x33fe0}}, 0x10) mmap$xdp(&(0x7f0000ff6000/0x8000)=nil, 0x8000, 0x0, 0x40010, r0, 0x80000000) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0900000004000000080000000c00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000ff010000000000000000000000000000002290945923436ef9cb0ed30000faffffff00002a56bf763e99f60e708ff25f14ba9a35a8c23a48ff23bf437cb8b1f9facc847984707216419eb9d0fd6a5bafe4f13fa348eeb2950c350d2b0fd0cdc4cd83dbff1fedc1f75e0923d9852bdb31478f76fbd0cbb6decf25ddeb1b06072b528fcd527df0a0e8734e8745bc9c7f75f21fdfbdce1daf0d5d8eaeea87c9115650b4658c104bbaf0ff5379a95473f7577645758de0c4b00d089acb6471a850affc08d42f6f1a2cf7d8e6e9efab4e738f3e6c0329ef94"], 0x50) r6 = io_uring_setup(0x3eaf, &(0x7f0000000100)={0x0, 0x0, 0x1}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000040000000000a"], 0x68}}, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x22, &(0x7f0000000340)=[{&(0x7f0000000480)=""/233}], 0x1) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r7, r5}, 0xc) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1f, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000010850000000700001295"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1800}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0x5, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x11}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0x0, 0x28, 0xe80, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) syz_clone(0xc30e3400, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000140)={'ipvlan1\x00', &(0x7f0000000900)=@ethtool_link_settings={0x4c, 0x5, 0x8, 0xe, 0x3, 0x0, 0x8, 0x0, 0x0, 0x4, [0x0, 0x0, 0x6, 0x4, 0x1, 0xffbffffd, 0xfffffffa]}}) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[], 0x13) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1) 33.557430754s ago: executing program 0 (id=78): perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x95, 0x200, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1ff, 0x2, @perf_bp={0x0}, 0xc224, 0x2, 0xffffffff, 0x0, 0x2, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x2, 0x69f6) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x80) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000040)={[{@errors_continue}, {@init_itable_val={'init_itable', 0x3d, 0x8aa}}, {@nodelalloc}]}, 0x1, 0x4a3, &(0x7f0000000580)="$eJzs3c1rXOUaAPBnZpo0SXNvP+7l0vbCbaEXej9oJh9IE3XjSl0UxIIbhRqTaayZZEJmUpvQRaq7LlyIoiAu3PsXuLEriyCudS8upKI1ggrCyDkzk+Zr4qBpBnJ+Pzid95z3dJ73zfC8nHnPOXMCyKyzyT+5iMGI+DwijjZWN+9wtvGydv/mVLLkol6//F0u3S9Zb+3a+n9HImI1Ivoi4tknI17KbY9bXV6ZnSyXS4vN9WJtbqFYXV65cG1ucqY0U5ofGb84MTE+PDY6sWd9vf3GK7cvffR074c/vX7v7puffJw0a7BZt7Efe6nR9Z44vmHboYh4/GEE64JCsz/93W4If0jy+f0tIs6l+X80CumnCWRBvV6v/1o/3K56tQ4cWPn0GDiXH4qIRjmfHxpqHMP/PQby5Uq19v+rlaX56cax8rHoyV+9Vi4NN78rHIueXLI+kpYfrI9uWR+LSI+B3yr0p+tDU5Xy9P4OdcAWR7bk/4+FRv4DGeErP2SX/Ifskv+QXfIfskv+Q3bJf8gu+Q/ZJf8hu+Q/ZJf8h+yS/5BJz1y6lCz11v3v09eXl2Yr1y9Ml6qzQ3NLU0NTlcWFoZlKZSa9Z2fu996vXKksjDwSSzeKtVK1Vqwur1yZqyzN166k9/VfKfXsS6+AThw/c+fLXESsPtqfLoneZp1chYOtXs9Ft+9BBrqj0O0BCOgaU3+QXb7jAzv8RO8mfe0qFva+LcD+yHe7AUDXnD/l/B9klfl/yC7z/5BdjvEB8/+QPeb/IbsG2zz/6y8bnt01HBF/jYgvCj2HW8/6Ag6C/De55vH/+aP/Htxa25v7OT1F0BsRr753+Z0bk7Xa4kiy/fv17bV3m9tHu9F+oFOtPG3lMQCQXWv3b061lv2M++0TjYsQtsc/1Jyb7EvPUQ6s5TZdq5Dbo2sXVm9FxMmd4ueazztvnPkYWCtsi3+i+ZprvEXa3kPpc9P3J/6pDfH/tSH+6T/9V4FsuJOMP8M75V8+zelYz7/N48/gHl070X78y6+Pf4U249+ZDmO8/P5rX7eNfyvi9I7xW/H60lhb4ydtO99h/HsvPPePdnX1Dxrvs1P8lqRUrM0tFKvLKxfS35GbKc2PjF+cmBgfHhudKKZz1MXWTPV2j5387O5u/R9oE3+3/ifb/tth/3/556fPn90l/n/O7fz5n9glfn9E/K/D+D+MfvViu7ok/nSb/ud3iZ9sG+swfvXtpw53uCsAsA+qyyuzk+VyaVFBQUFhvdDtkQl42B4kfbdbAgAAAAAAAAAAAHRqPy4n7nYfAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOgt8CAAD//1kn1ls=") r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setopts(0x4200, r0, 0x5, 0x85565d0b4f4c053e) waitid(0x1, r0, &(0x7f0000000080), 0x40000000, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x20, r2, 0x607, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}}, 0x40000) ptrace(0x10, 0x0) mbind(&(0x7f0000bde000/0x2000)=nil, 0x2000, 0x4001, 0x0, 0x7, 0x0) 32.311859726s ago: executing program 0 (id=85): r0 = socket$kcm(0xa, 0x2, 0x0) r1 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'dh\x00', 0x1, 0x80005, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'sh\x00', 0x5, 0x9, 0x77}, {@remote, 0x4e20, 0x2000, 0xcd}}, 0x44) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0x2800, 0x0) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) pwritev(r2, &(0x7f0000000180)=[{&(0x7f00000000c0)="efb8975ab547419578d403193de32b1adccbb0018d51d9644a675c95ae9e3c6bb4eaee8c4e186e2e1a84a00181bc300fe996c6f75e2002221491418289c816cfda6a8167383793b9f687e952a496c92e378559ff7b144538232576812a73a48cf49e4f76bca7e15051d7da5e99de4bc4d271bdbf868c0e63bbde002f8d9ae66e41d1f0acda815fdb651d8bce674590bdd602f5f27c1c192573278235", 0x9c}, {&(0x7f00000001c0)="56d9e68aff555c48114b4e9a757098ea65160a019fad1a5e16a6b1ce3409be07f614723c4edf58703fea984e2a5b30b21845ce632ce7af7798040ae920d97fb2e4d74b9a7adc50e2083be07a0a444c791139542e1849e821afd64335f0befc9378", 0x61}], 0x2, 0x0, 0x7) 32.074782944s ago: executing program 0 (id=89): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0xf, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000001000000000000000000000018110000"], 0x0, 0x9, 0x0, 0x0, 0x40f00, 0x6c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socket(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000020000010000000000000000850000002f0000001801000020786c2500000000002020207b1af8ff90ffffffbfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) 32.071911573s ago: executing program 32 (id=89): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0xf, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000001000000000000000000000018110000"], 0x0, 0x9, 0x0, 0x0, 0x40f00, 0x6c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socket(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000020000010000000000000000850000002f0000001801000020786c2500000000002020207b1af8ff90ffffffbfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) 5.416887488s ago: executing program 4 (id=329): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800}, 0x38) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="b0010000100001000000000000000000fc010000000000000000000000000001000000000000000000000000000000000000ecdf00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000001300000000000000000032000000fc010000000000000000000000000000feffffffffffffff0000000000000000000000000000000000001f00000000000000000000000000fcffffffffffffff000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000058000200636263286165732900"/226], 0x1b0}}, 0x4050) 4.680645814s ago: executing program 4 (id=336): r0 = openat$selinux_load(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x38}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4042895) r2 = socket(0x1e, 0x4, 0x0) mq_open(0x0, 0x42, 0x0, 0x0) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r6 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETVIFCNT(r6, 0x89e0, &(0x7f0000000140)) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/notes', 0x100, 0x100) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r7 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x900}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) mmap$xdp(&(0x7f00004f2000/0x3000)=nil, 0x3000, 0x2000002, 0x30, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r8) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) r10 = socket$kcm(0x1e, 0x2, 0x0) setsockopt$sock_attach_bpf(r10, 0x10f, 0x87, &(0x7f00000008c0), 0x43) socket$nl_generic(0x10, 0x3, 0x10) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x638f, 0x400, 0x1, 0xd, 0x1, 0x6, 0x6}, 0x1c) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0xfd44) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) 4.529791767s ago: executing program 4 (id=347): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) perf_event_open(0x0, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x2) socket(0x2, 0x80805, 0x0) (async) socket(0x2, 0x80805, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) socket(0x10, 0x3, 0x0) (async) socket(0x10, 0x3, 0x0) unshare(0x6a040000) (async) unshare(0x6a040000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xb, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b4020000e66ad2e57cb54078df0e0734000000851c0000009500000000000000"], &(0x7f0000000380)='GPL\x00', 0x5, 0xc3, &(0x7f00000004c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x4b, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x10000}, 0x10}, 0x94) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x2000}, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x2000}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94) unshare(0x60000600) sync() (async) sync() sync() fsopen(&(0x7f0000000140)='ncpfs\x00', 0x1) r6 = dup(0xffffffffffffffff) bind$inet6(r6, 0x0, 0x0) 3.172907439s ago: executing program 4 (id=364): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800}, 0x38) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="b0010000100001000000000000000000fc010000000000000000000000000001000000000000000000000000000000000000ecdf00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000001300000000000000000032000000fc010000000000000000000000000000feffffffffffffff0000000000000000000000000000000000000000010000000000000000000000fcffffffffffffff000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000058000200636263286165732900"/226], 0x1b0}}, 0x4050) 3.07062506s ago: executing program 1 (id=367): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x1, 0x3a, 0x8, 0xffffffffffffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0, r0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sync_file_range(r1, 0xfffffffffffffff7, 0xfffffffffffffff7, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x8, 0xfffff00c}, {0x50}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000200)) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x4000080, 0x0, 0x0) r3 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f7}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x5c8c, 0x0, @empty, @mcast1, 0x80, 0x0, 0x0, 0x20000000}}) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x2d, 0x0, 0x1f, 0x10000}, 0x33, 0x0, 0x1, 0x0, 0x0, 0x40}, 0xc0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000002c000000030a01010000000000000000050000000900010073797a30000000000900030073797a300000000084000000060a010400000000000000000500400008000b40000000005c000480240001800b00010074756e6e656c0000140002800800014000000000080002400000000c340001800c0001007061796c6f616400240002800800024000000000080005400000000c080004400000009608000340000000860900010073797a30"], 0xf8}}, 0x0) sendmmsg$inet_sctp(r4, &(0x7f0000002240)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="1000005e"], 0x20, 0x800}], 0x1, 0x10) sendmmsg$inet(r4, &(0x7f0000002c80)=[{{&(0x7f0000000940)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000380)="00dd41dc115d27cf850a782da28375b561df298712d56b", 0x2}], 0x1}}, {{&(0x7f0000000c40)={0x2, 0x4e20, @local}, 0x10, 0x0, 0x0, &(0x7f0000000d80), 0x30}}], 0x2, 0x41) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0x232, 0x0, 0x90, [0x0, 0x200000000300, 0x0, 0x0, 0x200000000330, 0x200000000360], 0x0, 0x0, &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0x108) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2.931935605s ago: executing program 4 (id=370): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1000, 0xf) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x401}, 0x94) socket$nl_route(0x10, 0x3, 0x0) openat$misdntimer(0xffffffffffffff9c, 0x0, 0x80000, 0x0) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x4898, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 2.890418977s ago: executing program 1 (id=372): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) setresuid(0xee00, 0xee00, 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000180)=ANY=[@ANYBLOB=' \x00'], 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0xa, 0x1, 0x3f, 0x40, 0x42}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)="c52c35ea4f0134beb954bed8e1d986ae4c318fe66f5102b1bd2e3edab67f066a80f87ee6daaeacfff979df2b5edbdcdc175664cc391106709e65e4c0e5b747901195845facb1ac7f30e1f1767de49da2", &(0x7f0000000140), 0x1003, r3}, 0x38) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000001d40)={r3, &(0x7f0000001b80), &(0x7f0000001c40)=""/245}, 0x20) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000023896) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000aa0000/0x1000)=nil, 0x1000, 0x2000005, 0x40010, 0xffffffffffffffff, 0xf3e7a000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = getpid() process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) 2.889454267s ago: executing program 5 (id=373): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x41, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000004c0)=0x19) writev(r1, &(0x7f00000005c0)=[{0x0}, {&(0x7f0000001980)="a2", 0x1}], 0x2) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @local, 0xe1}, 0x1c) syz_mount_image$msdos(&(0x7f00000011c0), &(0x7f0000000000)='./file0\x00', 0x2808480, &(0x7f0000000040)={[{@dots}, {@fat=@nocase}, {@nodots}, {@fat=@dos1xfloppy}]}, 0x3, 0x11e6, &(0x7f0000002440)="$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") r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000001080)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x1) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000000340)={0x0, 0x0, 0x1, 0x0, '\x00', [{0x3, 0x5, 0xffffffffffffffff, 0x8, 0x66, 0x6}, {0x4, 0xe, 0x0, 0xfffffffffffffffe, 0x84a, 0x7}], ['\x00']}) setsockopt$inet6_int(r3, 0x29, 0x2, &(0x7f0000000000)=0x40000005, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x27, 0x0, 0x0, 0x0, 0x0, 0x3, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1002}, 0x50) recvmmsg(r3, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x8, &(0x7f00000001c0)=0x7f, 0x4) sendto$inet6(r3, 0x0, 0x0, 0x4000, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) 2.845093339s ago: executing program 4 (id=375): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32=0x0], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff0000000003000000000000000000000002000000000000000000"], 0x0, 0x56}, 0x28) getgroups(0x1, &(0x7f0000000180)=[0xee00]) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000700)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5560}}, './file0\x00'}) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000840)={0x4, 0xf, 0x2, 0xfff2, 0x0, 0x3, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000980)='./file0\x00', &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) statx(0xffffffffffffffff, &(0x7f0000000a40)='./file0\x00', 0x6000, 0x100, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r3, &(0x7f0000000940)='./file0\x00', r4, r5, 0x1000) setregid(r2, r5) bpf$MAP_CREATE(0x0, &(0x7f0000001340)=ANY=[@ANYBLOB="1a0000000400000000000000010000000080000005286057dab8ac42ac77517109c49059cb1912ae6724f444b749a6df45d671d4671941a8907ae58b18cf9f4ab3bae58a3d8bcf72272a0a7677d3518b4330f536defa7c434638958227a7aad42e43e7ed9e2a111fa312c646db4cb0549a32c878c76942052d265041f0b982a58bcc8e04cc12a31f150cdb9e07605bbcb9c77e965c55a7d4b9028ea8e97bbfc7826333f005644ad74ae587dcc959ab78eb92987953939c242072c2bb09709be91761f74f00"/211, @ANYRES32=0x1, @ANYBLOB="ffffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000400"/20, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00'], 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$inet_sctp(0x2, 0x5, 0x84) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], 0x25, 0x359, &(0x7f0000000bc0)="$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") syz_open_procfs(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x3, 0x80, 0x11, 0x1, 0x0, 0x40, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x7, 0x6}, 0x8887, 0x10000, 0x8, 0x1, 0x80d, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x0, 0xffffffffffffffff, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x0, 0xb1, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x600}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x3c}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 2.833315816s ago: executing program 2 (id=376): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_clone3(&(0x7f0000000080)={0x801400, &(0x7f0000000040), 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0xec, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000000, 0x100010, r1, 0x10000) file_getattr(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300), 0xb7, 0x1000) 1.114430863s ago: executing program 1 (id=377): mbind(&(0x7f0000bdf000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x2, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) mmap(&(0x7f00006f2000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0xdc560000) (async) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) r1 = openat$sysfs(0xffffff9c, &(0x7f0000000540)='/sys/power/wakeup_count', 0x0, 0x10a) r2 = syz_io_uring_setup(0xbdf, &(0x7f0000000000)={0x0, 0x6d0a, 0x80, 0xfffffffd, 0x40000331, 0x0, r1}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r1, 0x0, &(0x7f0000000600)=[{&(0x7f0000000300)=""/222, 0xde}], 0x1}) io_uring_enter(r2, 0x847ba, 0x2000, 0xe, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000008c0)='./file1\x00', 0x1008490, &(0x7f0000000a40)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000001500)="$eJzs3c9vVFsdAPDvnXZoKQMFZaFGBRFFQ5j+ABqCC2GjMYTESFy5gNoOTdMZpum0SCuLsnRvIokr/RPcuTBh5cKdO925wYUJKnkv9CVvMS/3zqUd2g7te7Qd6Hw+ye2955xhvufMcM6Ze2B6AuhZZyNiNSKORMS9iBjO85P8iButI33cq5ePp9ZePp5Kotm8878kK0/zou3PpI7lzzkYET/7ccQvk61xG8src5PVamUhT48s1uZHGssrl2YLec74xNjE6LXLV8f3rK1nan968aPZWz//y5+/8fzvq9//dVqt0m+OZ2Xt7dhLraYXo9SW1x8Rt/YjWJf0539/+PCkve1LEXEu6//D0Ze9mwDAYdZsDkdzuD0NABx26f1/KZJCOV8LKEWhUC631vBOx1ChWm8sXhyuLz2YjmwN62QUC/dnq5XRfK3wZBSTND2WXW+kxzelL0fEqYj47cDRLF2eqlenu/nBBwB62LFN8//HA635HwA45Aa7XQEA4MCZ/wGg95j/AaD3fI7537cDAeCQcP8PAL3H/A8AvWfH+f/JwdQDADgQP719Oz2aa/nvv55+uLz0g9LDS9OVxly5tjRVnqovzJdn6vWZaqU81Wzu9HzVen1+7Mp6srG8crdWX3qweHe2NjlTuVsp7nN7AICdnTrz7J9JRKxeP5od0baXg7kaDrdCtysAdE1ftysAdI3v80Dv2sU9vmUAOOS22aL3DR3/i9BTm7/Ch+rCV63/Q6+y/g+964ut//9wz+sBHDzr/9C7ms3Env8A0GOs8QPv9O//AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0KNK2ZEUytle4Kvpz0K5HHE8Ik5GMbk/W62MRsSJiPjHQHEgTY91u9IAwDsq/CfJ9/+6MHy+tLn0SPLJQHaOiF/9/s7vHk0uLi6Mpfn/X89ffJrnjx/pRgMAgHY3tma15un83HYj/+rl46nXx0FW8cXN1uaiady1/GiV9Ed/dh6MYkQMfZTk6Zb080rfHsRffRIRX9lo/6O2CKVsDaS18+nm+Gns4/sQf+P13xy/8Eb8QlaWnovZa/HlPagL9JpnN1vjZN730i6W979CnM3O2/f/wWyEenevx7+1LeNfYX3869sSP8n6/Nn19Ntr8uLKX3+yJbM53Cp7EvG1/u3iJ+vxkw7j7/ldtvFfX//muU5lzT9EXIjt47fUsmF2ZLE2P9JYXrk0W5ucqcxUHoyPT4xNjF67fHV8JFujbv3823Yx/nv94olO8dP2D3WIP7hD+7+zy/b/8dN7v/jWW+J/79vbv/+n3xI/nRO/u8v4k0M3Om7fncaf7tD+nd7/i7uM//zfK9O7fCgAcAAayytzk9VqZWGHi/Sz5k6PcfFhXsRqxHtQDRfv1UW3RyZgv210+m7XBAAAAAAAAAAAAAAA6KSxvDI3EPv7daJutxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDD67MAAAD//w/PzvM=") (async) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x3, 0x1, 0x246, 0x7fffffffffffffff, 0xfffffffffffffffa, 0xfffffffffffffffb, 0x10000000000000, 0x7fff, 0x9b}) (async) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./bus\x00', 0x0, &(0x7f00000002c0)=ANY=[], 0x41, 0x2c8, &(0x7f0000000580)="$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") perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4db, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x4, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) pwritev2(r7, &(0x7f0000000940), 0x0, 0x7fff, 0xc92, 0xc) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r9, 0x0) (async) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r10, &(0x7f0000001280)={'#! ', '', [], 0xa, "02ce00b26cd16126940cfac2"}, 0x10) (async) getsockopt$inet_sctp_SCTP_EVENTS(r9, 0x84, 0xb, &(0x7f0000000000), &(0x7f00000001c0)=0xe) 769.12153ms ago: executing program 5 (id=378): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000ff0)={0x0}, 0xee, 0x0, 0x0, 0x40041}, 0x88801) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0xa9, @mcast1, 0x2}, 0x1c) syz_mount_image$ext4(&(0x7f0000000140)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000000), 0xfd, 0x477, &(0x7f0000000880)="$eJzs3M9vVEUcAPDv2/7gt62IP0CUKhobjS0tqBw8gNHEgyYmesBjbQsiCzW0GiFEVw94NCTejUcT/wJPejHqycSr3g0JMVxAvTzzdt9rd5fddSlbF9zPJ1k68+YtM9+dN7szb7oNYGBNZP8kEdsj4teIGKtlG0+YqP24fvXC/J9XL8wnkaav/5FUz7t29cJ8cWrxvG1FptJ4vN7yufOn5srlxbN5fnrl9LvTy+fOP33y9NyJxROLZ2YPHz50cOa5Z2ef6UmcWZuu7flwae/ul9+89Or8sUtv/fh1UsTfEMf73f+nmzuWTrQ4NlQkHu++ljvCjrp0MtzHhnBT3o6IrLtGquN/LIZirfPG4qVP+to4YEOlaZpual9cSYH/sST63QKgP/LP+SSiMp+tgevX84PgytHaAiiL+3r+qJUMRyk/Z6RpfdtL2WrrWOWvL7JHNN1PAQDYCN8erf0s5n5r849Sw138I/ne0HhE3B0ROyPinojYFRH3RsR9EXF/RDxQ95xW+z7NmjdJbpz/lC6vK7AuZfO/5/O9rcb5XzH7i/GhPLejGv9IcvxkefFARNwVEZMxsinLz3So47sXf/msXdlE3fwve2T1F3PBvB2Xh5tu0C3MrczdSsz1rnwcsWe4VfzJ6k5A1o+7I2LPvvXVcfLJr/a2K/v3+DvowT5T+mXEE7X+r0RT/IWk8/7k9OYoLx6YLq6KG/3088XX2tV/S/H3QNb/W1te/6vxjyf1+7XLN1/Hxd8+bbum6fL6H61/Tnb9jyZvVNNFwQdzKytnZyJGk1fy40fy4431Vc+bXTs/i39yf+vxvzPWXokHIyK7iB+KiIcjYl/e9kci4tGI2N8h/h9eeOyd9ce/sbL4F26q/9smir3tG4qGTn3/TbWk6KzxDvEn0aL/D1VTk/mRbt7/Orb07K1czQAAAHDnKUXE9khKU6vpUmlqqvb78rtia6m8tLzy1PGl984s1L4jMB4jpeJO19jq/dCozOTL+uL+6GxT/mB+3/jzoS3V/NT8Unmh38HDgNvWZvxnfh/qd+uADef7WjC41jv+0zT9qMdNAf5jPv9hcBn/MLhajP8tTfkOfyMAuJO1+vy3sIfBYP4Pg8v4h8Fl/MPgMv5hIOXfhB/u5gv+G5bI3n/6V3s3iWhoYZr2qRmjt8erUU1EqW+1xzqfPtmnV+zv/I9t3h4d12Wi3+9MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvfFPAAAA//89VeJz") bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002fc0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900000000000000000000000000000000000000000200", [0x8, 0xffffffff9673e35d]}}) 548.94476ms ago: executing program 1 (id=379): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, r1, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x41}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000800}, 0x20000000) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000240)={'wpan4\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000240)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000280)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(r0, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x74, r2, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x74}, 0x1, 0x0, 0x0, 0x4084}, 0x80) (async) sendmsg$NL802154_CMD_GET_INTERFACE(r0, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x74, r2, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x74}, 0x1, 0x0, 0x0, 0x4084}, 0x80) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000400), r0) (async) r6 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000400), r0) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x54, r6, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x881a}, 0x4001) (async) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x54, r6, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x881a}, 0x4001) r7 = syz_io_uring_setup(0x5206, &(0x7f0000000540)={0x0, 0x431b, 0x20000, 0x3, 0x8e}, &(0x7f00000005c0), &(0x7f0000000600)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4, 0x20010, r7, 0x0) futex(&(0x7f0000000640)=0x1, 0x2, 0x0, &(0x7f0000000680)={0x0, 0x989680}, &(0x7f00000006c0)=0x1, 0x0) r8 = syz_open_dev$vcsn(&(0x7f0000000700), 0x2, 0x101081) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000780), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000007c0)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r8, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x24, r9, 0x100, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r10}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xffffffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4011) (async) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r8, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x24, r9, 0x100, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r10}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xffffffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4011) getsockopt$inet6_mreq(r8, 0x29, 0x15, &(0x7f0000000900)={@initdev, 0x0}, &(0x7f0000000940)=0x14) sendmsg$ETHTOOL_MSG_EEE_GET(r8, &(0x7f0000000a40)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x68, 0x0, 0x1, 0x70bd28, 0x25dfdbff, {}, [@HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4804}, 0x1000c000) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000ac0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000a80)={0xffffffffffffffff}, 0x106, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, &(0x7f0000000b00)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0xa, @dev={0xfe, 0x80, '\x00', 0x27}, 0x7fff}, {0xa, 0x4e20, 0xa, @empty, 0x3}, r12, 0x7}}, 0x48) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000, 0x7, &(0x7f0000ffc000/0x1000)=nil) (async) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000, 0x7, &(0x7f0000ffc000/0x1000)=nil) r13 = openat(r8, &(0x7f0000000b80)='./file0\x00', 0x2a180, 0x4) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r8, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x2c, 0x0, 0x300, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x2}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x7}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4000080) syz_genetlink_get_family_id$ipvs(&(0x7f0000000d00), r8) (async) r14 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000d00), r8) sendmsg$IPVS_CMD_SET_DEST(r13, &(0x7f0000000f40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000d40)={0x19c, r14, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x64, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xb014}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x75f2df1e5e8ca9c2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvlan1\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xb}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_bond\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xa}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x101}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x65d2}, @IPVS_CMD_ATTR_SERVICE={0x60, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}]}]}, 0x19c}, 0x1, 0x0, 0x0, 0x4008084}, 0x8000) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) syz_genetlink_get_family_id$devlink(&(0x7f0000000fc0), r8) (async) r15 = syz_genetlink_get_family_id$devlink(&(0x7f0000000fc0), r8) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r13, &(0x7f00000011c0)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001180)={&(0x7f0000001000)={0x14c, r15, 0x400, 0x70bd29, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x2}, {0x6, 0x16, 0x7f}, {0x5}, {0x6, 0x11, 0x4}, {0x8, 0xb, 0xfffff801}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4}, {0x6, 0x16, 0x1}, {0x5, 0x12, 0x4}, {0x6, 0x11, 0x10}, {0x8, 0xb, 0x7fff}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xec65}, {0x6, 0x16, 0x4d5}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0xfff5}, {0x8, 0xb, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x153}, {0x6, 0x16, 0x6}, {0x5}, {0x6, 0x11, 0xe}, {0x8, 0xb, 0x7fffffff}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x10}, 0x4004800) eventfd2(0x5, 0x80001) (async) eventfd2(0x5, 0x80001) 473.781496ms ago: executing program 2 (id=380): socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) (async) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x10311, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x6f, 0x2}, 0x10a406, 0x10000, 0x1, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async, rerun: 32) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) (rerun: 32) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000001c0)=0x3) r2 = mq_open(&(0x7f00000000c0)='e_1\x00', 0x8c2, 0x30, 0x0) preadv(r2, &(0x7f0000001380)=[{&(0x7f0000000280)=""/215, 0xd7}, {&(0x7f0000000380)=""/4096, 0x1000}], 0x2, 0x5, 0xd) (async) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x60, 0x6}]}) (async, rerun: 64) write$ppp(r1, &(0x7f00000008c0)='\x00\x00', 0x2) (rerun: 64) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYRES16=r3], 0x64}, 0x1, 0x0, 0x0, 0x48000}, 0x804) (async) socket$unix(0x1, 0x5, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'lo\x00'}) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x40, r6, 0x1, 0x0, 0x25dfdbfe, {0x2, 0x2, 0x2}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'xfrm0\x00'}]}, 0x40}, 0x1, 0x40030000000000, 0x0, 0x4000000}, 0x80) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53048c8) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYRES32=r6, @ANYBLOB="346e2eab5ecb83db226d524bb02d30994ca85ae8900435cae56ecea234f9b92b437340147a143d6a7766db7224b780983ff30b618dea1410a4826dc9e70502aa3e80dfc48907b521275c3627bd2ea44c78ee7b1b21cdfcc5a0b14fd13bfbb2f12a5b6319fbba5c0e3b4e4aa0b69956210a6036", @ANYRESOCT], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r9}, 0xc) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) ioctl$sock_inet_SIOCSIFNETMASK(r5, 0x891c, &(0x7f0000000440)={'team_slave_1\x00', {0x2, 0x4e23, @loopback}}) r10 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x10003, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x1}, 0x204, 0x0, 0x43a1b976, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) (async, rerun: 64) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x200000000000003c, &(0x7f00000013c0)=ANY=[@ANYRESOCT=r4, @ANYRES64=r0], &(0x7f0000000280)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0xffffffffffffff1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) (rerun: 64) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x20, 0xd, &(0x7f00000002c0)=ANY=[@ANYRES8=r8, @ANYRES32, @ANYBLOB="000000000000000018000000090000000000000003000000"], &(0x7f0000000100)='GPL\x00', 0xb900, 0x9f, &(0x7f0000000780)=""/159, 0x41000, 0x23, '\x00', 0x0, @fallback=0x6ce11b7c02f0e4db, 0xffffffffffffffff, 0x8, &(0x7f0000000880)={0xffffffff, 0x3}, 0x8, 0x10, &(0x7f00000008c0)={0x4, 0xa, 0x401, 0x5}, 0x10, 0xffffffffffffffff, r11, 0x0, &(0x7f0000000900)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0x1, 0x1], 0x0, 0x10, 0xe96a}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r10, 0x40042408, r12) getpid() (async) unshare(0x24020400) 448.540171ms ago: executing program 2 (id=381): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'wg1\x00', &(0x7f0000000100)=@ethtool_sset_info={0x37, 0x3, 0xfffffffffffffffd}}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x4, 0x0, 0x0, 0x4, 0xc4510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x20000000008, 0x0, 0x50c, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x13) r1 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_int(r1, 0x29, 0x4, &(0x7f0000000000)=0x2, 0x4) sendmmsg$inet6(r1, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00'], 0x28}}], 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000840000000000000070000006b112f000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0xbef2ea2e38e99913, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SIOCGSTAMPNS(r1, 0x8907, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x10000, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x8400, &(0x7f0000000880)=ANY=[@ANYBLOB='overriderockperm,iocharset=macturkish,showassoc,dmode=0x0000000000000005,nojoliet,uid=', @ANYRESHEX=0x0, @ANYBLOB=',iocharsturkish,iocharset=koi8-ru,\x00'], 0x0, 0x688, &(0x7f0000000100)="$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") r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@deltaction={0x50, 0x18, 0x1, 0x70bd2a, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x3c, 0x1, [{0x10, 0x8f, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x37}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x6, @mcast1}, 0x1c) sendto$inet6(r3, &(0x7f0000000e80)="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", 0x5c6, 0x6d91fb6102d8910c, 0x0, 0xfffffffffffffe38) sendto$inet6(r3, 0x0, 0x0, 0x40000, 0x0, 0x0) r4 = socket(0x2b, 0x80801, 0x1) sendmsg$DEVLINK_CMD_SB_POOL_SET(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000001540)={0x0}, 0x1, 0x0, 0x0, 0x48010}, 0x20000040) bind$l2tp6(r4, 0x0, 0x0) recvfrom(r3, &(0x7f0000001a80)=""/4050, 0xfd2, 0x2e, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0, r5}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r7 = io_uring_setup(0x6472, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x8, 0x290, 0x0, r6}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r7, 0x2219, 0x7721, 0x16, 0x0, 0x0) 396.536992ms ago: executing program 3 (id=382): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x9950, 0x1a882) ioctl$USBDEVFS_RESETEP(r0, 0x80045503, &(0x7f0000000180)={0x0, 0x1}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x31d1, &(0x7f0000000200)={0x0, 0x927f, 0x2000, 0x3, 0x29f}) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x400c89f, 0xc000, 0x7, 0x14e, 0x0, r1}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x2, 0x5c8c, 0x0, @mcast2, @mcast1, 0x7806, 0x0, 0x0, 0x20000000}}) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x2d, 0x0, 0x1f, 0x10000}, 0x33, 0x0, 0x1, 0x0, 0x0, 0x40}, 0xc0) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f00000001c0)=0x1) 323.700309ms ago: executing program 1 (id=383): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000040), 0xfd, 0x4c8, &(0x7f0000001540)="$eJzs3M9vG8UeAPDvOk7a9MdLXl8f0FJooCAKFUmTFuiBA0UgcQAJiUs5hiQtoWmDkhTRqoLAoRxRJe6IIxJ/ASe4IOCE1Gu5o0oV6qUFhGS09q7jxHbqJE5M689Hsj2zXnvmm52xZ3biDaBrDaV3ScSuiLgeEQOV7PIdhioPd25dnvjj1uWJJEqlt35PyvvdvnV5It81f93OPLO4fHut+YuXzo7PzEzNZfmRhXPvj8xfvPTs9LnxM1Nnps6PnThx/NjoC8+PPde88r2tx5nW6fb+j2YP7Hvt7atvTJy6+s5P3yR5/Mvi+KD1N13dUINtPXniyXaV8i+xu3zfX75PivnWQucqREvSBlnMutL1GIieqB68GIhXP+1o5YBNtfpX6GBElJYk2WPtNuAelrTcm3v1e7ivZF/0ScTiRDoHrp3Pd4ObJysToDTuO9mt8kyxOnvtrc5v2y+dbZ1a/PPL9BZL5yH6Nqk4AID47mTlMR/7LY3/CsXa/V7K1oYGI+K/EbEnIv4XEXsj4v8R8UBEPBgRD9W8ptG6z0orF0nqx5+FG+sKrEU3j0S8mK1tLR//VdcuBnuy3O5y/L3J6emZqaMR8Z+IOBy929L86CplfP/Ktc+zZN24bqhm/Jfe0vLzsWBWjxvFbctfMzm+ML7RuHM3P4nYX2wUf1JdCUiP476I2H9wfWVMP/P1gWbP3T3+BoorHjeg9FXEU5Xjvxgr4s8lq69PjmyPmamjI3mrqPfzL1febFb+uuJvo/T472jY/qvxDya167Xzay/jyq+fNZ1Tttj+l/WbtP33Jcu70ofjCwtzoxF9yevlfF/5EyvdHvX7jS3tn8Z/+FDj/r8nlv4SD0dE2ogfiYhHI+JgVvfHIuLxiDi0Svw/vvzEe+uPf3Ol8U/e/fi/+3T1+DdN5GvbdU/1nP3h2/Iz+SEbXCX+JBoc/+Pl1OFsSyuff6vWdG4jrRkAAADuPYWI2BVJYbiaLhSGhyv/L783dhRmZucXjpyevXB+svIbgcHoLeRnugaq50NjcTSb1ufnR8dW5I9l542/6Okv54cnZmcmOx08dLmdTfp/6reeTtcO2HRtWEcD7lHr7f+lUunjNlcF2GJ1/d/AH7qG8T90rwb9v39FfttW1QXYWjX9v5Bnaib2fy/9Thi43zQb/1/b4noAW8/8H7qX/g/dS/+HrpT9Er4YLf1afpMS6edP0316IqJTFWuSKJW211/loJKYvrCZpfe18Q13rbxKwsDa3icKayw0qW1j29dwjYa6RHS6Aawx8Vd2sc0Nvk+xhb9Y2pXm+pv3ptYTnf5kAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaI9/AgAA///2G9QA") r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r4) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="58000000100037040400"/20, @ANYRES32=r5, @ANYBLOB="8304050000000000380012800b000100697036746e6c000028000280080008001300000014000300fe"], 0x58}, 0x1, 0x0, 0x0, 0x9005}, 0x4000000) sendmmsg$inet(r3, &(0x7f0000000400)=[{{&(0x7f0000000580)={0x2, 0x4e5c, @multicast2}, 0x10, 0x0, 0x0, &(0x7f00000003c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) mremap(&(0x7f0000ffe000/0x2000)=nil, 0xf7ff, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$sock_attach_bpf(r6, 0x1, 0x50, &(0x7f0000000240), 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYRES16], 0xcc}, 0x1, 0x0, 0x0, 0x8810}, 0x4000080) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=ANY=[@ANYBLOB="40000000000101040000000000000000020000002c0001801400018008000100e000020108000200e00000010c00028005000100000000000600034000030000"], 0x40}}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r8, &(0x7f0000001c00)=[{&(0x7f0000000b00)='D', 0x1}], 0x1, 0x2) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) link(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00') ioctl$TIOCSWINSZ(r9, 0x5414, &(0x7f0000000140)={0x7, 0x8eff, 0x0, 0x44}) setsockopt$inet_int(r0, 0x0, 0x21, &(0x7f0000000180)=0x8001, 0x4) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f00000000c0)=0x5) sendmsg$rds(r1, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000300)=[{&(0x7f0000002640)=""/102389, 0x18ff5}], 0xf000, 0x1903d}}], 0x48}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x8, 0x3, 0x4e8, 0x0, 0x11, 0x148, 0x340, 0x0, 0x450, 0x2a8, 0x2a8, 0x450, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x81}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x4f, 0x7, "72f6daeff0a9c6294e211d2d88fe6dcff5d0e552201da3b7a1fdb30dcb59"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x548) 323.263629ms ago: executing program 3 (id=384): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc1}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, 0x0, 0x0) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}, 0x1, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xe3]}}, 0x5c) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000300)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@minixdf}, {@quota}]}, 0x3, 0x442, &(0x7f0000001180)="$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") inotify_add_watch(0xffffffffffffffff, &(0x7f0000000240)='.\x00', 0x50000048) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0300000004000000", @ANYRES32=0x1, @ANYBLOB="800000000000000100000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="030000000300"/28], 0x50) 317.926148ms ago: executing program 2 (id=385): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021a40300001e0a05010000000000000000070000070900020073797a31000000000900010073797a3000000000780303"], 0x428}, 0x1, 0x0, 0x0, 0x8801}, 0x20005044) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000180)="8ee454daa1679a167d4377b0a55617f3c05557eef6bdf3bb91dc327071789ffeea67a951d61f207a25d2ae79e42f262ea8a70213e1f7d654def0528cddb5b6ca951ea826579479af9bdff758adf8c84bf06fc1e0f2e48a02b212b4a4a9bad51ec9d3c688458bec5f2bb22385501daa72c8fc7078b676bd9da40c8c8c28d344ba359cbd99624cbb3bba2d88d7175f8757ea7b20a657ad9bad344cc293ae2dc29a14dfa6f566c518b413f124a9b902e3b8991e36e66598949d37fb", 0xba}, {&(0x7f0000000240)="89ee269212828ffc77a452d65f4d7ed98106cc11a5fb316e7f81622dc9a2c8a96343d54eb8754fdc3f8da4f90ecc4a133c9af626e64fb390828ff3ef2f0bddaa2f2d7c4e54dfba99dac92a0782754b7c153a929a312eb35290b7bdc54cf49577edd1d816ca650883160c0bdf829cbc400998ad566733c46be9b39564c63c12765fd96e7099d944d57d28ad6f71f4515ed8ce30a448519d61777663c081bc486fc5e8d1c8205e6bcaf5d9bbb2a683efb8cf09", 0xb2}, {&(0x7f0000000000)="950241306074da40050c7c68f46e1e6a8439b9cc06767c", 0x17}, {&(0x7f0000000300)="d2c692c5f9f525eea858136a9f584f12a3d115894f4245c79fa7ac52bc042548b7975efdeae4c48b43e38903b0da1ac5bbd14d291e752e74ee86bdfdc28138c308d15f8f754bdc78837ff56e6459ca064ba4a140125c0c0f79a06547fdb82f5d6a95292df76b69d419a951315179c80ce54f9719c4838f4698e01461f33da0eabb3840e83a021a", 0x87}, {&(0x7f0000000080)}, {&(0x7f00000003c0)="c44ef4939fb2", 0x6}, {&(0x7f0000000580)="818d46d0abb381acfcf6e21b187c377f4c5024989bbbf343b4aba568c20c77b60c7064107d9f60748d500be8493d6f520703cf3f50efcae5eebfef59935c14f823f304fb8ef3a73831619f87b9a926200e5528bdb06b97e516f46758cef46adf696b2261aa864689b9ea3ca3979c15217e66309021e566ce93303d889127e3a11b7c832208ae4a96b1fd0b6c1c06f9102237ac2aa95f6571a8cf028cb628d1b16c09162f43b5b6d3606be3664415268feee4eaac23610a4f0d60974d8b952c32e53fc43fbbb09bec31e166d3fb8bbb330264bd154d9a94bf4cdd8b2d2f3e0c9d61d09a325d65227622820fc9083137fb69f4de2c7e4b5d", 0xf7}], 0x7, 0x0, 0x0, 0x20000880}, 0x20080090) 278.74992ms ago: executing program 5 (id=386): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1000, 0xf) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x401}, 0x94) socket$nl_route(0x10, 0x3, 0x0) openat$misdntimer(0xffffffffffffff9c, 0x0, 0x80000, 0x0) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x4898, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd,rfd', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 277.9525ms ago: executing program 3 (id=387): process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x15, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r2, 0x0, 0x0, 0x4, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000280)="5338a3848b25e258a25f9dae13ed", 0xe}], 0x1}}], 0x1, 0x20008000) recvmsg(r1, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000000200)=""/112, 0x70}], 0x1}, 0x123) shutdown(r1, 0x1) r3 = getpgid(0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x13, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYRES64, @ANYRES64=r3, @ANYRES16=0x0, @ANYBLOB="ac141422000000000000000000000000000004d43200000000000000000000000000ffffe000000100080000000000007d0100000000000000000000000000000400000000004000ffffffffffffffff02000000000000007f0000000000000002000000000000000000000000000000fd2100000000000204000000000000000400000000000000f6004000040000000800000000000000ff340000020001be33000000000000004c001200726663343330392863636d2861657329290000000000000000000000000000000000000000000000bcfa56f4f322f5b6000000000000000000000000000000000000000040000000"], 0x13c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000004) creat(0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x8, 0x7}, 0x0, 0x0, 0x0, 0x7, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) socket$nl_netfilter(0x10, 0x3, 0xc) syz_read_part_table(0x60d, &(0x7f0000002200)="$eJzs3D9olHcYB/DvJbmcUTAdnFxqHDoJRXE0Q5XkqlgIp1IIDvYfIs0UIXDSw5Q4tBkUM0jHLlK4DhonYwYnRaFzEQeLkMGlYBepHXLl7l6SOyjF0oRS/HyGe353PDzf94F3/V34XxtIuTi1Kp3y/qd/298a3TzP50xzYvJ4q9VqnU5KOZtyxsq7l5MMpX9q9icZ7plz8/udq9/+9mG5+fTUq/fOPVgc2JhZyTtJdvU2Z+SvHqXyzzZlO9wafzi6cGW2erX9pdpYW/84uf1yorZycnFp+UT52Oft3y8nj4r+7osxkoup51K+zCdDbxz19eax1Jc/386vj194Um2sfdd8fnB9b3Xw7vkjr/etXrt/KJlrR0yl87JvGv6Xi/fkL/Tkz41dn15qHD1wZ8+Nw/V7j2svBn9vdRWR5a3JBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABge9xqf1yZrV6tj194Um2sffPzTx/dfjlRWzm5uLR8YvjYs6LvUVGHinox9VxKOclMZvJFZt88crrUmz/+cHRhI/+Pncnzg+t7q82754+8nly9dv9Qp6uUqXYZ2IqN+/XnN9bmxq5PLzWOHriz58bh+r3HtReD3b6ZSj7rrJuksvWPAQAAAAAAAAAAAAAAAAAAwFtuYvL4vqkPaqeTUs7uSPLrV51b9q3KyI/p3Lzv2l/UZ5Vkd5KbO7r/BdB8eurV8LkHi78Ul+LnU8l8kl0/rJxJ3t3IudwfW96czH/pzwAAAP//gTiR5w==") r4 = fsopen(&(0x7f0000000180)='ext4\x00', 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x86040, 0x41) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040), 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) msync(&(0x7f0000d39000/0x4000)=nil, 0x4000, 0x1) bind$netlink(0xffffffffffffffff, &(0x7f0000000200)={0x10, 0x0, 0x25dfdbfb, 0x40000000}, 0xc) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000780)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c0001000a080c00bdad01409bbc7a46e39a8285dcdf12176679df069163ce947ee2b49e33538afaeb2713f450ebd010a20ff27fff0000000000000000", 0x89}], 0x1}, 0xff0f0000000400c0) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="746f74732c5c6d61736b3d30303030303030303030584e30303030303030363637352c646973637f4e25c4324ddd97d77dc061f06172642c7549643d", @ANYRES32=r5, @ANYBLOB="2c646f74732cd3d182ca0876f7c8656275672c646f74732c646f74732c646f74732c6e6f646f74732c6e6f646f74732c6e6f646f74732c636865636b3d72656c617865642c6e6f646f74732c6e66732c6e6f646f74732c6e6f646f74732c666c7573682c756d61736b3d30303030303030303030303030303030303030303030372c646f733178666c6f7070792c646f74732c726f6f74636f6e746578743d73746166665f752c61707072616973655f747970653d696d617369672c66756e633d46494c455f434845434b2c7569643d", @ANYRESOCT=r5, @ANYBLOB=',smackfshat={)(:.,\x00'], 0x1, 0x204, &(0x7f0000000380)="$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") 227.397581ms ago: executing program 2 (id=388): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r1, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000000200)="000000000000004000ac731b3bb6fee46ced76f4462230356db631ed126544522450ae80cf5feba0a6ef71820d04fcc43cb8a78e3935bc10f677f0bd", 0x9}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62", 0xe}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f0000000a80)="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", 0xfe}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce90bfdb", 0x4}, {&(0x7f00000007c0)="f2e659", 0x3}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003000)="e1", 0xa3}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2964dd1", 0x4}, {&(0x7f0000000580)="b8a2f6", 0x3}, {&(0x7f00000002c0)="7940e900e0377757a9edc0d9376c21328ad2f7584fe4c8b712b3e5e08ecff5258151bd9eea7b4ce21f67ab51922ce035987127fda5812df903188e321419610f4beb6cdf6fa073876157c4f1d2054439d8db3f4d937872de928b62741fd60e6b56979ad883f89a02e24a577275bfb498b7a127abd0eb099e704d18d63dad611b45acfc3b8dc5457c8383d7d8621942e8e2ce6e4017dd6e5ed9732e739be6593c3b033524669ce17c3b822a6953eb11a20921220000000000000000", 0xbb}, {&(0x7f0000000280)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000880)="87", 0x1}, {&(0x7f0000000900)="f56f11e0", 0xfffffec4}], 0x2}}], 0x4, 0x4000000) pwritev(r0, &(0x7f0000000680)=[{&(0x7f0000000180)="de", 0x1}, {0x0}], 0x2, 0x0, 0x7) 160.534979ms ago: executing program 5 (id=389): r0 = perf_event_open(&(0x7f00000010c0)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={&(0x7f0000000200), 0x8}, 0x10b40, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x7) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x80c42, 0x0) r2 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0xf6b1, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x16, 0x1}) io_uring_enter(r2, 0xd44, 0x44c1, 0x7, 0x0, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0xb, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1001, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x3}, @TCA_SKBEDIT_PTYPE={0x6, 0x4}, @TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc, 0xa, {0xe4ffffff}}, {0xc, 0x9, {0xf5}}}}]}]}, 0x70}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000840)={'dummy0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@can_delroute={0x70, 0x19, 0x1, 0x0, 0x0, {}, [@CGW_LIM_HOPS={0x5, 0xd, 0x1}, @CGW_MOD_XOR={0x15, 0x3, {{{}, 0x0, 0x0, 0x0, 0x0, "f02d3f6aa0f99857"}}}, @CGW_MOD_OR={0x15, 0x2, {{{}, 0x0, 0x0, 0x0, 0x0, "03ef7506ecbef970"}, 0x3}}, @CGW_SRC_IF={0x8}, @CGW_FILTER={0xc}, @CGW_MOD_UID={0x8}, @CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffff8}}]}, 0x70}}, 0x0) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000080)) sendmsg$nl_route_sched(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x38, 0x2, {{0x0, 0x0, 0xe, 0x0, 0x0, 0xfffffffe}, [@TCA_NETEM_RATE={0x14, 0xd, {0x2000000}}, @TCA_NETEM_DELAY_DIST={0x7, 0x2, 'y~b'}]}}}]}, 0x68}}, 0x0) lseek(r5, 0x4, 0x4) 90.990186ms ago: executing program 3 (id=390): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000001000000000000000000000071120e000000000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x4010, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xd, 0x590, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x1}, 0x2000, 0x10000, 0x0, 0x6, 0x8, 0x80, 0x800, 0x0, 0x0, 0x0, 0x20000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bind$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x10, 0x0, 0x25dfdbfb, 0x4}, 0xc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 90.278726ms ago: executing program 1 (id=391): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x2]}, 0x8, 0x80000) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/128, 0x80}], 0x1) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x3000000, &(0x7f0000000080), 0x1, 0x533, &(0x7f0000000b00)="$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") 88.252916ms ago: executing program 5 (id=392): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000008c0)='./file1\x00', 0x1008490, &(0x7f0000000000)={[{@jqfmt_vfsold}, {@lazytime}], [{@measure}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@obj_role={'obj_role', 0x3d, '#,'}}, {@smackfshat}, {@measure}]}, 0x4, 0x4eb, &(0x7f0000001500)="$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") ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'gre0\x00', &(0x7f0000000080)={'gre0\x00', 0x0, 0x20, 0x8000, 0x4, 0x8, {{0x11, 0x4, 0x1, 0x12, 0x44, 0x67, 0x0, 0x6, 0x2f, 0x0, @rand_addr=0x64010101, @remote, {[@end, @generic={0x83, 0x4, 'op'}, @timestamp_prespec={0x44, 0x14, 0x69, 0x3, 0x7, [{@multicast1, 0x9}, {@multicast1, 0x3}]}, @generic={0x86, 0xf, "dfeb7edd1f6063fb816e8d4e6f"}, @noop, @rr={0x7, 0x7, 0xbd, [@empty]}]}}}}}) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r0, &(0x7f0000000400)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0302}}}, 0x14) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) file_getattr(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300), 0xb7, 0x1000) 73.855103ms ago: executing program 3 (id=393): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r0, r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x11, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff48020000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.21447ms ago: executing program 3 (id=394): syz_open_dev$usbfs(&(0x7f0000000000), 0x0, 0xa401) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="180000040000000023000000611108000000000085000000c60000009500000000000000adebad09b72679e3ba496813b46881346f5b0a2dceb3ffe480e3ced553012865c7cfd4a7e0daa2bffd4cb2294ca520377b7b5b12fba94a5385968ca3450a6e7e3960e00ca2fe59a50172089cc8c0e395a1437dcc8ac83c4bb9b6b91d28d9fe23d3969a9198f4415b11f491caad9790f0a2f10653a0b79a8da14c0625bc47649c434a64343a0bb13528c808c8bca00b941d2bf72802ea529c6b6352c5dd7f829e82f1cbf0ea2af11295d49d3c5ea21be2e5289d00840ef6abaf27840ee82dda2cf6ccf47dcdb70e9e491f76190da9477e7155003ef35e18c50452df41497a52dc79f78244f98983d716dcd69f66bb12b47c812f553df70b8196d199f3ff33c32e96ef0c788de932d927d99e91"], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x6f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffc0}, 0x94) r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) io_setup(0x40, &(0x7f00000006c0)) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x1, {0x40, 0x3, 0x4}}, 0x10) bind$tipc(r2, &(0x7f0000000140)=@name={0x1e, 0x2, 0x2, {{0x43}}}, 0x10) sendmsg$tipc(r0, 0x0, 0x4000044) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000040)=0x1, 0x12) waitid$P_PIDFD(0x3, r4, &(0x7f0000000240), 0x80000000, &(0x7f0000000400)) r5 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x2000, 0x0) r6 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) bind$can_j1939(r6, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f00000003c0)={'syztnl2\x00', &(0x7f0000000300)={'ip6tnl0\x00', 0x0, 0x29, 0x91, 0x8, 0x3ff, 0x21, @empty, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x8000, 0x7800, 0xe0a9, 0xa}}) modify_ldt$read(0x0, &(0x7f0000000640)=""/61, 0x3d) getsockopt$inet6_mreq(r5, 0x29, 0x15, &(0x7f00000004c0)={@initdev}, &(0x7f0000000500)=0x14) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2000, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x6, 0x8000}, 0x100, 0x8000000, 0x0, 0x2, 0xfff, 0xa001, 0x5, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) lseek(r7, 0x9, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_wireguard(r8, 0x8933, &(0x7f0000000040)={'wg1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r5, r9, 0x25, 0x0, @void}, 0x10) sendmsg$NFT_BATCH(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x150}}, 0x0) 4.17014ms ago: executing program 5 (id=395): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0xdf, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000100)=@ethtool_coalesce={0x50, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffffffc, 0x0, 0x1, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0xdf, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) (async) socket$kcm(0x10, 0x2, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000100)=@ethtool_coalesce={0x50, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffffffc, 0x0, 0x1, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}) (async) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x0) (async) 0s ago: executing program 2 (id=396): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x5c35, &(0x7f0000000180)={0x0, 0xc89f, 0xc000, 0x8, 0x20002f7}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r1}, 0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001040)={0x3, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4002}, [@call={0x85, 0x0, 0x0, 0x53}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6cab2ea5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000040)="40d174b28bf781c274386d178550", 0x0, 0x1200801, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x5c8c, 0x0, @empty, @mcast1, 0x80, 0x0, 0x0, 0x20000000}}) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x2d, 0x0, 0x1f, 0x10000}, 0x33, 0x0, 0x1, 0x0, 0x0, 0x40}, 0xc0) unshare(0x80) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}, 0x4004, 0x0, 0xfffe, 0x0, 0x6, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) bpf$ENABLE_STATS(0x20, 0x0, 0x0) write$tun(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800fbfbffffffffffffbbbbbbbbbbbb88a821088100310008004500001c0068e000032f90780a010100e0000001a00086dd00089078"], 0x36) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000380)='ns/time_for_children\x00') r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x9}]}) r7 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) dup2(r0, r7) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.62' (ED25519) to the list of known hosts. [ 31.569131][ T28] audit: type=1400 audit(1772691738.760:62): avc: denied { mounton } for pid=3303 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 31.569987][ T3303] cgroup: Unknown subsys name 'net' [ 31.592799][ T28] audit: type=1400 audit(1772691738.760:63): avc: denied { mount } for pid=3303 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 31.620989][ T28] audit: type=1400 audit(1772691738.790:64): avc: denied { unmount } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 31.772967][ T3303] cgroup: Unknown subsys name 'cpuset' [ 31.779299][ T3303] cgroup: Unknown subsys name 'rlimit' [ 31.888797][ T28] audit: type=1400 audit(1772691739.080:65): avc: denied { setattr } for pid=3303 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 31.919153][ T28] audit: type=1400 audit(1772691739.080:66): avc: denied { create } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 31.939894][ T28] audit: type=1400 audit(1772691739.080:67): avc: denied { write } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 31.960885][ T28] audit: type=1400 audit(1772691739.080:68): avc: denied { read } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 31.968372][ T3309] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 31.981466][ T28] audit: type=1400 audit(1772691739.090:69): avc: denied { mounton } for pid=3303 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 32.015609][ T28] audit: type=1400 audit(1772691739.090:70): avc: denied { mount } for pid=3303 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 32.039577][ T28] audit: type=1400 audit(1772691739.110:71): avc: denied { read } for pid=3041 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 32.072011][ T3303] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 33.797116][ T3319] chnl_net:caif_netlink_parms(): no params data found [ 33.896433][ T3316] chnl_net:caif_netlink_parms(): no params data found [ 33.919646][ T3325] chnl_net:caif_netlink_parms(): no params data found [ 33.931124][ T3319] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.938656][ T3319] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.945890][ T3319] bridge_slave_0: entered allmulticast mode [ 33.952414][ T3319] bridge_slave_0: entered promiscuous mode [ 33.968089][ T3319] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.975461][ T3319] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.982805][ T3319] bridge_slave_1: entered allmulticast mode [ 33.989497][ T3319] bridge_slave_1: entered promiscuous mode [ 34.011607][ T3315] chnl_net:caif_netlink_parms(): no params data found [ 34.033062][ T3319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.047257][ T3319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.078763][ T3322] chnl_net:caif_netlink_parms(): no params data found [ 34.094717][ T3319] team0: Port device team_slave_0 added [ 34.105204][ T3316] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.112374][ T3316] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.119566][ T3316] bridge_slave_0: entered allmulticast mode [ 34.126003][ T3316] bridge_slave_0: entered promiscuous mode [ 34.135937][ T3319] team0: Port device team_slave_1 added [ 34.159447][ T3316] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.166568][ T3316] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.173793][ T3316] bridge_slave_1: entered allmulticast mode [ 34.180042][ T3316] bridge_slave_1: entered promiscuous mode [ 34.198696][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.205799][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.232574][ T3319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.262756][ T3316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.272779][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.280229][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.306996][ T3319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.318006][ T3325] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.325463][ T3325] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.332965][ T3325] bridge_slave_0: entered allmulticast mode [ 34.339786][ T3325] bridge_slave_0: entered promiscuous mode [ 34.348705][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.356241][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.363770][ T3315] bridge_slave_0: entered allmulticast mode [ 34.370161][ T3315] bridge_slave_0: entered promiscuous mode [ 34.377985][ T3316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.390881][ T3325] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.398229][ T3325] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.406553][ T3325] bridge_slave_1: entered allmulticast mode [ 34.412992][ T3325] bridge_slave_1: entered promiscuous mode [ 34.421862][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.429204][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.436860][ T3315] bridge_slave_1: entered allmulticast mode [ 34.443673][ T3315] bridge_slave_1: entered promiscuous mode [ 34.480405][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.499259][ T3316] team0: Port device team_slave_0 added [ 34.506336][ T3325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.520363][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.533994][ T3322] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.541705][ T3322] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.549078][ T3322] bridge_slave_0: entered allmulticast mode [ 34.555715][ T3322] bridge_slave_0: entered promiscuous mode [ 34.562862][ T3316] team0: Port device team_slave_1 added [ 34.568543][ T3322] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.576097][ T3322] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.583224][ T3322] bridge_slave_1: entered allmulticast mode [ 34.589553][ T3322] bridge_slave_1: entered promiscuous mode [ 34.596649][ T3325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.608855][ T3319] hsr_slave_0: entered promiscuous mode [ 34.615098][ T3319] hsr_slave_1: entered promiscuous mode [ 34.630890][ T3315] team0: Port device team_slave_0 added [ 34.649787][ T3315] team0: Port device team_slave_1 added [ 34.669954][ T3322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.680167][ T3325] team0: Port device team_slave_0 added [ 34.686061][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.693542][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.720993][ T3316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.740007][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.747509][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.774484][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.786406][ T3322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.801653][ T3325] team0: Port device team_slave_1 added [ 34.807774][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.814987][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.842254][ T3316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.857041][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.864517][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.890883][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.910577][ T3322] team0: Port device team_slave_0 added [ 34.917532][ T3322] team0: Port device team_slave_1 added [ 34.944697][ T3325] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.952160][ T3325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.978777][ T3325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.996791][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.003791][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.030998][ T3322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.046557][ T3325] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.054092][ T3325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.080373][ T3325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.096764][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.104196][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.130837][ T3322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.161404][ T3316] hsr_slave_0: entered promiscuous mode [ 35.167340][ T3316] hsr_slave_1: entered promiscuous mode [ 35.173400][ T3316] debugfs: 'hsr0' already exists in 'hsr' [ 35.179166][ T3316] Cannot create hsr debugfs directory [ 35.211515][ T3325] hsr_slave_0: entered promiscuous mode [ 35.217833][ T3325] hsr_slave_1: entered promiscuous mode [ 35.224098][ T3325] debugfs: 'hsr0' already exists in 'hsr' [ 35.229828][ T3325] Cannot create hsr debugfs directory [ 35.248119][ T3315] hsr_slave_0: entered promiscuous mode [ 35.254592][ T3315] hsr_slave_1: entered promiscuous mode [ 35.260532][ T3315] debugfs: 'hsr0' already exists in 'hsr' [ 35.266317][ T3315] Cannot create hsr debugfs directory [ 35.328557][ T3322] hsr_slave_0: entered promiscuous mode [ 35.334897][ T3322] hsr_slave_1: entered promiscuous mode [ 35.340738][ T3322] debugfs: 'hsr0' already exists in 'hsr' [ 35.346758][ T3322] Cannot create hsr debugfs directory [ 35.471385][ T3319] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 35.484761][ T3319] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 35.495948][ T3319] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 35.504678][ T3319] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 35.535892][ T3325] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 35.551986][ T3325] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 35.565290][ T3325] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 35.574750][ T3315] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 35.583402][ T3315] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 35.592266][ T3315] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 35.601378][ T3325] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 35.611692][ T3315] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 35.645450][ T3319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.664109][ T3316] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 35.673172][ T3316] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 35.681886][ T3316] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 35.698160][ T3316] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 35.712911][ T3319] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.735786][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.743070][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.763384][ T3322] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 35.772798][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.780017][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.795208][ T3322] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 35.811057][ T3322] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 35.820108][ T3322] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 35.829977][ T3325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.873796][ T3325] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.891789][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.924015][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.931447][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.948255][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.957021][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.964298][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.985637][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.992912][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.005811][ T3319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.017861][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.025134][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.042750][ T3322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.052522][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.069924][ T3322] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.079671][ T3325] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 36.096409][ T3316] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.106757][ T2878] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.113885][ T2878] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.132068][ T2878] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.139557][ T2878] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.163860][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.171309][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.181051][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.189268][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.209335][ T3315] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 36.220553][ T3315] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 36.249704][ T3325] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.299850][ T3322] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 36.317404][ T3316] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 36.329133][ T3316] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 36.357034][ T3319] veth0_vlan: entered promiscuous mode [ 36.391163][ T3319] veth1_vlan: entered promiscuous mode [ 36.413754][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.425971][ T3319] veth0_macvtap: entered promiscuous mode [ 36.438218][ T3325] veth0_vlan: entered promiscuous mode [ 36.455099][ T3319] veth1_macvtap: entered promiscuous mode [ 36.469571][ T3325] veth1_vlan: entered promiscuous mode [ 36.486244][ T3322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.497535][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.509468][ T3316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.521764][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.555762][ T917] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.567451][ T917] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.595349][ T917] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.605826][ T3325] veth0_macvtap: entered promiscuous mode [ 36.613157][ T917] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.640033][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 36.640081][ T28] audit: type=1400 audit(1772691743.830:85): avc: denied { mounton } for pid=3319 comm="syz-executor" path="/root/syzkaller.XexNQl/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 36.649734][ T3315] veth0_vlan: entered promiscuous mode [ 36.680427][ T28] audit: type=1400 audit(1772691743.830:86): avc: denied { mount } for pid=3319 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 36.690202][ T3325] veth1_macvtap: entered promiscuous mode [ 36.708772][ T28] audit: type=1400 audit(1772691743.830:87): avc: denied { mounton } for pid=3319 comm="syz-executor" path="/root/syzkaller.XexNQl/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 36.736832][ T3319] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 36.761763][ T28] audit: type=1400 audit(1772691743.830:88): avc: denied { mount } for pid=3319 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 36.766423][ T3325] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.793974][ T28] audit: type=1400 audit(1772691743.830:89): avc: denied { mounton } for pid=3319 comm="syz-executor" path="/root/syzkaller.XexNQl/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 36.824375][ T28] audit: type=1400 audit(1772691743.830:90): avc: denied { mounton } for pid=3319 comm="syz-executor" path="/root/syzkaller.XexNQl/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4433 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 36.843874][ T3315] veth1_vlan: entered promiscuous mode [ 36.858955][ T28] audit: type=1400 audit(1772691743.830:91): avc: denied { unmount } for pid=3319 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 36.863935][ T3325] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.899583][ T28] audit: type=1400 audit(1772691743.870:92): avc: denied { mounton } for pid=3319 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=538 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 36.930118][ T3315] veth0_macvtap: entered promiscuous mode [ 36.945301][ T3315] veth1_macvtap: entered promiscuous mode [ 36.953031][ T28] audit: type=1400 audit(1772691743.870:93): avc: denied { mount } for pid=3319 comm="syz-executor" name="/" dev="gadgetfs" ino=4440 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 36.964035][ T3322] veth0_vlan: entered promiscuous mode [ 36.982033][ T28] audit: type=1400 audit(1772691744.080:94): avc: denied { read write } for pid=3319 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 37.011613][ T2878] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.020957][ T2878] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.030882][ T3480] loop1: detected capacity change from 0 to 512 [ 37.033377][ T3322] veth1_vlan: entered promiscuous mode [ 37.049032][ T3480] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 37.064425][ T3480] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 37.064534][ T2878] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.075134][ T2878] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.095675][ T3480] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 37.098058][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.112454][ T3480] EXT4-fs (loop1): 1 truncate cleaned up [ 37.130015][ T3480] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.131843][ T3316] veth0_vlan: entered promiscuous mode [ 37.163288][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.198554][ T3322] veth0_macvtap: entered promiscuous mode [ 37.208340][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.208777][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.227104][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.236989][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.248790][ T3316] veth1_vlan: entered promiscuous mode [ 37.286437][ T3322] veth1_macvtap: entered promiscuous mode [ 37.293269][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.297284][ T3493] loop1: detected capacity change from 0 to 1024 [ 37.326487][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.343885][ T3493] ======================================================= [ 37.343885][ T3493] WARNING: The mand mount option has been deprecated and [ 37.343885][ T3493] and is ignored by this kernel. Remove the mand [ 37.343885][ T3493] option from the mount to silence this warning. [ 37.343885][ T3493] ======================================================= [ 37.386311][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.398813][ T3316] veth0_macvtap: entered promiscuous mode [ 37.407516][ T3316] veth1_macvtap: entered promiscuous mode [ 37.418406][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.442787][ T3493] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 37.463058][ T3493] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.465791][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.508475][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.526143][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.536671][ T3498] loop2: detected capacity change from 0 to 1024 [ 37.553873][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.584875][ T3498] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.599864][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.613786][ T3501] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4'. [ 37.646095][ T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.662866][ T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.685545][ T3501] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4'. [ 37.692514][ T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.753779][ T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.794258][ T3508] loop0: detected capacity change from 0 to 1024 [ 37.808847][ T3508] EXT4-fs: quotafile must be on filesystem root [ 37.982730][ T3486] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 38.079880][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 38.133632][ T3517] loop4: detected capacity change from 0 to 512 [ 38.143149][ T3517] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 38.182806][ T3517] EXT4-fs (loop4): 1 truncate cleaned up [ 38.191667][ C1] hrtimer: interrupt took 45577 ns [ 38.197748][ T3517] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.681306][ T3325] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.751023][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.831891][ T3531] netlink: 52 bytes leftover after parsing attributes in process `syz.4.11'. [ 38.842660][ T3532] loop2: detected capacity change from 0 to 2048 [ 38.875048][ T3532] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.061835][ T3522] syz.1.8 (3522) used greatest stack depth: 9736 bytes left [ 39.173742][ T3539] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 39.342288][ T3543] netlink: 80 bytes leftover after parsing attributes in process `syz.1.12'. [ 39.372541][ T3543] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12'. [ 39.382638][ T3543] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12'. [ 39.386367][ T3545] loop3: detected capacity change from 0 to 256 [ 39.415899][ T3545] vfat: Unknown parameter 'GPL' [ 39.468182][ T3545] loop3: detected capacity change from 0 to 1024 [ 39.485386][ T3545] EXT4-fs: inline encryption not supported [ 39.498955][ T3545] EXT4-fs: Ignoring removed i_version option [ 39.514346][ T3545] EXT4-fs: Ignoring removed oldalloc option [ 39.531101][ T3545] journal_path: Lookup failure for './file1' [ 39.538775][ T3550] SELinux: failed to load policy [ 39.547469][ T3550] loop0: detected capacity change from 0 to 512 [ 39.548035][ T3545] EXT4-fs: error: could not find journal device path [ 39.554643][ T3550] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 39.605424][ T3550] EXT4-fs (loop0): 1 truncate cleaned up [ 39.619644][ T3550] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.643174][ T3550] program syz.0.13 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 39.709824][ T3554] loop1: detected capacity change from 0 to 1024 [ 39.723577][ T3322] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.742858][ T3325] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.767334][ T3554] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.822610][ T3554] syz.1.18 uses obsolete (PF_INET,SOCK_PACKET) [ 39.838778][ T3560] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 39.873446][ T3566] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 39.885772][ T3560] FAT-fs (loop0): Filesystem has been set read-only [ 40.318589][ T3560] syz.0.17: attempt to access beyond end of device [ 40.318589][ T3560] loop0: rw=8912896, sector=2065, nr_sectors = 8 limit=128 [ 40.357642][ T3560] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 40.382106][ T3560] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 40.403840][ T3566] EXT4-fs (loop2): 1 truncate cleaned up [ 40.416888][ T3560] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 40.429762][ T3566] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.465401][ T3560] syz.0.17: attempt to access beyond end of device [ 40.465401][ T3560] loop0: rw=8912896, sector=2065, nr_sectors = 8 limit=128 [ 40.487544][ T3560] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 40.495721][ T3571] syz.0.17: attempt to access beyond end of device [ 40.495721][ T3571] loop0: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 40.499014][ T3560] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 40.509673][ T3559] syz.0.17: attempt to access beyond end of device [ 40.509673][ T3559] loop0: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 40.531598][ T3559] syz.0.17: attempt to access beyond end of device [ 40.531598][ T3559] loop0: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 40.545725][ T3559] syz.0.17: attempt to access beyond end of device [ 40.545725][ T3559] loop0: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 40.562352][ T3560] syz.0.17: attempt to access beyond end of device [ 40.562352][ T3560] loop0: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 40.576701][ T3571] syz.0.17: attempt to access beyond end of device [ 40.576701][ T3571] loop0: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 40.591047][ T3571] syz.0.17: attempt to access beyond end of device [ 40.591047][ T3571] loop0: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 40.605616][ T3560] syz.0.17: attempt to access beyond end of device [ 40.605616][ T3560] loop0: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 40.620918][ T3325] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.711729][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.785516][ T3583] dummy0: entered allmulticast mode [ 40.804222][ T3583] dummy0: left allmulticast mode [ 42.438717][ T28] kauditd_printk_skb: 87 callbacks suppressed [ 42.438741][ T28] audit: type=1400 audit(1772691749.630:182): avc: denied { create } for pid=3596 comm="syz.1.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 42.633081][ T28] audit: type=1400 audit(1772691749.830:183): avc: denied { unmount } for pid=3322 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 43.251118][ T28] audit: type=1400 audit(1772691750.410:184): avc: denied { create } for pid=3585 comm="syz.3.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 43.276749][ T3597] Zero length message leads to an empty skb [ 43.319039][ T3604] set_capacity_and_notify: 3 callbacks suppressed [ 43.319056][ T3604] loop4: detected capacity change from 0 to 512 [ 43.319181][ T3609] loop0: detected capacity change from 0 to 512 [ 43.341466][ T28] audit: type=1400 audit(1772691750.530:185): avc: denied { mounton } for pid=3585 comm="syz.3.25" path="/6/file0/file0" dev="loop3" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 43.386391][ T3603] Illegal XDP return value 4294967274 on prog (id 10) dev N/A, expect packet loss! [ 43.386404][ T3609] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.413531][ T3609] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.422226][ T28] audit: type=1400 audit(1772691750.560:186): avc: denied { mounton } for pid=3602 comm="syz.4.30" path="/5/file1" dev="tmpfs" ino=44 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 43.448020][ T3604] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e028, mo2=0002] [ 43.524825][ T3604] System zones: 0-2, 18-18, 34-34 [ 43.535898][ T3322] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.585331][ T28] audit: type=1400 audit(1772691750.770:187): avc: denied { read write } for pid=3622 comm="syz.2.35" name="ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 43.612554][ T3604] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 42 vs 41 free clusters [ 43.658322][ T3604] EXT4-fs (loop4): Remounting filesystem read-only [ 43.665408][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 43.665440][ C1] EXT4-fs (loop4): initial error at time 1772691750: ext4_mb_generate_buddy:1315 [ 43.665464][ C1] EXT4-fs (loop4): last error at time 1772691750: ext4_mb_generate_buddy:1315 [ 43.695835][ T28] audit: type=1400 audit(1772691750.770:188): avc: denied { open } for pid=3622 comm="syz.2.35" path="/dev/ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 43.760763][ T28] audit: type=1400 audit(1772691750.770:189): avc: denied { ioctl } for pid=3622 comm="syz.2.35" path="/dev/ptp0" dev="devtmpfs" ino=247 ioctlcmd=0x3d0c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 43.786207][ T3604] EXT4-fs (loop4): 1 truncate cleaned up [ 43.802662][ T3604] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.815739][ T3604] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.832227][ T28] audit: type=1400 audit(1772691750.770:190): avc: denied { bind } for pid=3622 comm="syz.2.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 43.879382][ T36] Quota error (device loop4): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 43.891936][ T36] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 43.902659][ T36] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 43.904536][ T3604] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.913647][ T36] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 43.954705][ T3633] capability: warning: `syz.3.36' uses 32-bit capabilities (legacy support in use) [ 44.686147][ T3645] loop2: detected capacity change from 0 to 1024 [ 44.908315][ T3648] loop4: detected capacity change from 0 to 1024 [ 45.608591][ T3645] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 45.622058][ T3648] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.713857][ T3645] EXT4-fs (loop2): Online defrag not supported with bigalloc [ 45.846782][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.473958][ T3672] loop0: detected capacity change from 0 to 256 [ 46.582895][ T3672] FAT-fs (loop0): Directory bread(block 64) failed [ 46.589739][ T3672] FAT-fs (loop0): Directory bread(block 65) failed [ 46.596529][ T3672] FAT-fs (loop0): Directory bread(block 66) failed [ 46.603331][ T3672] FAT-fs (loop0): Directory bread(block 67) failed [ 46.609878][ T3672] FAT-fs (loop0): Directory bread(block 68) failed [ 46.616894][ T3672] FAT-fs (loop0): Directory bread(block 69) failed [ 46.623658][ T3672] FAT-fs (loop0): Directory bread(block 70) failed [ 46.630233][ T3672] FAT-fs (loop0): Directory bread(block 71) failed [ 46.637178][ T3672] FAT-fs (loop0): Directory bread(block 72) failed [ 46.643948][ T3672] FAT-fs (loop0): Directory bread(block 73) failed [ 47.001365][ T3679] netlink: 'syz.4.46': attribute type 13 has an invalid length. [ 47.138029][ T3667] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 47.153327][ T3667] vhci_hcd vhci_hcd.2: invalid port number 96 [ 47.167765][ T3667] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 47.229926][ T3325] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 47.341495][ T3679] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.349025][ T3679] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.117513][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 48.117539][ T28] audit: type=1400 audit(1772691755.310:201): avc: denied { create } for pid=3690 comm="syz.2.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 48.246586][ T3679] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 48.278837][ T28] audit: type=1400 audit(1772691755.340:202): avc: denied { connect } for pid=3690 comm="syz.2.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 48.314107][ T28] audit: type=1400 audit(1772691755.450:203): avc: denied { mounton } for pid=3693 comm="syz.0.53" path="/8/file0" dev="tmpfs" ino=63 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 48.330236][ T3679] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 48.404790][ T3702] netlink: 188 bytes leftover after parsing attributes in process `syz.1.55'. [ 48.421554][ T28] audit: type=1400 audit(1772691755.610:204): avc: denied { ioctl } for pid=3697 comm="syz.1.55" path="/dev/virtual_nci" dev="devtmpfs" ino=132 ioctlcmd=0x0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 48.488245][ T30] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.500975][ T30] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.628057][ T28] audit: type=1400 audit(1772691755.800:205): avc: denied { ioctl } for pid=3708 comm="syz.3.58" path="socket:[5435]" dev="sockfs" ino=5435 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 48.653175][ T30] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.653243][ T28] audit: type=1400 audit(1772691755.800:206): avc: denied { connect } for pid=3708 comm="syz.3.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 48.662319][ T28] audit: type=1400 audit(1772691755.800:207): avc: denied { write } for pid=3708 comm="syz.3.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 48.716304][ T30] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.974063][ T28] audit: type=1400 audit(1772691756.170:208): avc: denied { create } for pid=3717 comm="syz.2.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 49.168904][ T28] audit: type=1400 audit(1772691756.250:209): avc: denied { write } for pid=3717 comm="syz.2.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 49.316518][ T3727] netlink: 'syz.1.65': attribute type 39 has an invalid length. [ 49.410186][ T3728] mmap: syz.3.63 (3728) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 49.425803][ T3732] 9p: Bad value for 'wfdno' [ 49.435638][ T3727] hsr_slave_1 (unregistering): left promiscuous mode [ 49.542201][ T28] audit: type=1400 audit(1772691756.660:210): avc: denied { remount } for pid=3721 comm="syz.3.63" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 49.595207][ T3738] netlink: 104 bytes leftover after parsing attributes in process `syz.4.68'. [ 49.633854][ T3725] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 49.641480][ T3725] vhci_hcd vhci_hcd.2: invalid port number 96 [ 49.651516][ T3736] loop1: detected capacity change from 0 to 4096 [ 49.651849][ T3725] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 49.689029][ T3736] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.790591][ T3727] netlink: 12 bytes leftover after parsing attributes in process `syz.1.65'. [ 50.003139][ T3777] loop4: detected capacity change from 0 to 256 [ 50.184226][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.193399][ T3767] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 50.208565][ T3767] vhci_hcd vhci_hcd.2: invalid port number 96 [ 50.225335][ T3767] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 50.666576][ T3793] loop0: detected capacity change from 0 to 512 [ 51.221816][ T3802] netlink: 12 bytes leftover after parsing attributes in process `syz.2.80'. [ 51.224857][ T3793] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.255255][ T3793] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.307209][ T3813] loop4: detected capacity change from 0 to 1024 [ 51.383090][ T3813] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.579487][ T3835] loop2: detected capacity change from 0 to 256 [ 51.673417][ T3826] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.716441][ T30] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.760253][ T30] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.777495][ T3842] ip6gretap0: entered promiscuous mode [ 51.783802][ T3842] macvtap1: entered promiscuous mode [ 51.790612][ T3842] ip6gretap0: left promiscuous mode [ 51.812955][ T3846] loop2: detected capacity change from 0 to 512 [ 51.825388][ T30] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.841791][ T3846] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 51.863597][ T3846] EXT4-fs (loop2): 1 orphan inode deleted [ 51.869792][ T3846] EXT4-fs (loop2): 1 truncate cleaned up [ 51.876630][ T3846] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.900843][ T3842] EXT4-fs error (device loop2): ext4_inlinedir_to_tree:1324: inode #12: block 7: comm syz.2.91: path /22/file0/file0: bad entry in directory: directory entry overrun - offset=788, inode=13, rec_len=784, size=60 fake=0 [ 51.926466][ T30] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.931413][ T3842] EXT4-fs (loop2): Remounting filesystem read-only [ 51.945664][ T3837] chnl_net:caif_netlink_parms(): no params data found [ 51.963517][ T3325] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.028083][ T30] bridge_slave_1: left allmulticast mode [ 52.034429][ T30] bridge_slave_1: left promiscuous mode [ 52.040571][ T30] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.048965][ T30] bridge_slave_0: left allmulticast mode [ 52.054967][ T30] bridge_slave_0: left promiscuous mode [ 52.060754][ T30] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.091635][ T3858] netlink: 188 bytes leftover after parsing attributes in process `syz.2.93'. [ 52.168693][ T30] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 52.184523][ T3868] loop1: detected capacity change from 0 to 512 [ 52.191682][ T3868] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 52.205058][ T30] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 52.217062][ T30] bond0 (unregistering): Released all slaves [ 52.217807][ T3868] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.96: bg 0: block 104: invalid block bitmap [ 52.235952][ T3868] loop1: lost filesystem error report for type 5 error -117 [ 52.236218][ T3868] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 52.236233][ T3837] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.236265][ T3837] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.243554][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 52.243580][ C1] EXT4-fs (loop1): initial error at time 1772691760: ext4_validate_block_bitmap:432 [ 52.254723][ T3837] bridge_slave_0: entered allmulticast mode [ 52.260100][ C1] [ 52.260110][ C1] EXT4-fs (loop1): last error at time 1772691760: ext4_validate_block_bitmap:432 [ 52.269175][ T3837] bridge_slave_0: entered promiscuous mode [ 52.275152][ C1] [ 52.275212][ T3868] loop1: lost filesystem error report for type 5 error -117 [ 52.287074][ T3837] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.325765][ T3837] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.329221][ T3868] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.96: invalid indirect mapped block 1 (level 1) [ 52.333093][ T3837] bridge_slave_1: entered allmulticast mode [ 52.348590][ T3868] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 52.353974][ T3837] bridge_slave_1: entered promiscuous mode [ 52.374050][ T3868] EXT4-fs (loop1): 1 truncate cleaned up [ 52.380120][ T3868] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.437241][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.461822][ T30] hsr_slave_0: left promiscuous mode [ 52.473983][ T3878] netlink: 'syz.3.97': attribute type 2 has an invalid length. [ 52.491404][ T3878] netlink: 'syz.3.97': attribute type 8 has an invalid length. [ 52.495503][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.518367][ T3878] netlink: 132 bytes leftover after parsing attributes in process `syz.3.97'. [ 52.535056][ T30] hsr_slave_1: left promiscuous mode [ 52.551362][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 52.559204][ T30] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 52.569510][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 52.579654][ T3892] netlink: 104 bytes leftover after parsing attributes in process `syz.2.100'. [ 52.610226][ T30] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 52.629968][ T30] veth1_macvtap: left promiscuous mode [ 52.641240][ T30] veth0_macvtap: left promiscuous mode [ 52.651058][ T30] veth1_vlan: left promiscuous mode [ 52.656657][ T30] veth0_vlan: left promiscuous mode [ 53.040082][ T30] team0 (unregistering): Port device team_slave_1 removed [ 53.066915][ T3916] 9p: Bad value for 'rfdno' [ 53.161660][ T30] team0 (unregistering): Port device team_slave_0 removed [ 53.314481][ T3837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.327349][ T3837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.428785][ T3919] netlink: 12 bytes leftover after parsing attributes in process `syz.1.103'. [ 53.558333][ T3837] team0: Port device team_slave_0 added [ 53.576985][ T3837] team0: Port device team_slave_1 added [ 53.663862][ T28] kauditd_printk_skb: 24 callbacks suppressed [ 53.663879][ T28] audit: type=1400 audit(1772691761.852:235): avc: denied { create } for pid=3937 comm="syz.2.105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 53.717870][ T28] audit: type=1400 audit(1772691761.892:236): avc: denied { write } for pid=3942 comm="syz.1.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 53.738492][ T28] audit: type=1326 audit(1772691761.902:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3939 comm="syz.3.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a541fc799 code=0x7ffc0000 [ 53.774140][ T3837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.781390][ T3837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.808811][ T28] audit: type=1326 audit(1772691761.902:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3939 comm="syz.3.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7f9a541fc799 code=0x7ffc0000 [ 53.833807][ T3837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.869079][ T28] audit: type=1326 audit(1772691761.902:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3939 comm="syz.3.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a541fc799 code=0x7ffc0000 [ 53.896526][ T28] audit: type=1326 audit(1772691761.902:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3939 comm="syz.3.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=4 compat=0 ip=0x7f9a541fc799 code=0x7ffc0000 [ 53.922971][ T3950] loop1: detected capacity change from 0 to 2048 [ 53.932077][ T28] audit: type=1326 audit(1772691761.902:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3939 comm="syz.3.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a541fc799 code=0x7ffc0000 [ 53.957853][ T28] audit: type=1326 audit(1772691761.902:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3939 comm="syz.3.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a541fc799 code=0x7ffc0000 [ 53.966092][ T3305] loop1: p1 < > p4 [ 53.983084][ T28] audit: type=1326 audit(1772691761.952:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3939 comm="syz.3.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=443 compat=0 ip=0x7f9a541fc799 code=0x7ffc0000 [ 54.030819][ T3305] loop1: p4 size 8388608 extends beyond EOD, truncated [ 54.046012][ T3837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.055267][ T3950] loop1: p1 < > p4 [ 54.060295][ T3950] loop1: p4 size 8388608 extends beyond EOD, truncated [ 54.063975][ T3837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.097210][ T28] audit: type=1326 audit(1772691761.952:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3939 comm="syz.3.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a541fc799 code=0x7ffc0000 [ 54.129284][ T3837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.205290][ T3837] hsr_slave_0: entered promiscuous mode [ 54.224565][ T3837] hsr_slave_1: entered promiscuous mode [ 54.230971][ T3837] debugfs: 'hsr0' already exists in 'hsr' [ 54.237615][ T3837] Cannot create hsr debugfs directory [ 54.277530][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 54.301138][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 54.339336][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 54.340233][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 54.376818][ T3976] 9p: Bad value for 'rfdno' [ 54.647487][ T3837] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 54.713711][ T3996] netlink: 172 bytes leftover after parsing attributes in process `syz.3.112'. [ 54.740617][ T3837] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 55.539428][ T4003] netlink: 24 bytes leftover after parsing attributes in process `syz.2.117'. [ 55.616227][ T3837] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 55.657310][ T3837] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 55.739137][ T3837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.757743][ T4018] loop2: detected capacity change from 0 to 512 [ 55.765663][ T3837] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.773552][ T4031] loop1: detected capacity change from 0 to 512 [ 55.780502][ T82] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.787763][ T82] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.792434][ T4018] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 55.825602][ T4031] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 ro without journal. Quota mode: writeback. [ 55.854641][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.862124][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.873962][ T4018] EXT4-fs (loop2): 1 truncate cleaned up [ 55.880205][ T4018] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.930807][ T3837] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 56.024191][ T3837] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.058576][ T3325] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.110340][ T4037] team0: Device gtp0 is of different type [ 56.142713][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 56.174322][ T4044] loop4: detected capacity change from 0 to 2048 [ 56.206467][ T3837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.219758][ T4057] 9p: Bad value for 'rfdno' [ 56.225150][ T3305] loop4: p1 < > p4 [ 56.229839][ T3305] loop4: p4 size 8388608 extends beyond EOD, truncated [ 56.248345][ T4044] loop4: p1 < > p4 [ 56.254453][ T4044] loop4: p4 size 8388608 extends beyond EOD, truncated [ 56.277241][ T3002] loop4: p1 < > p4 [ 56.281859][ T3002] loop4: p4 size 8388608 extends beyond EOD, truncated [ 56.300126][ T4061] loop1: detected capacity change from 0 to 512 [ 56.349130][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 56.361400][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 56.386575][ T4061] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e028, mo2=0002] [ 56.400136][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 56.411474][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 56.421498][ T4061] System zones: 0-2, 18-18, 34-34 [ 56.435283][ T4061] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 42 vs 41 free clusters [ 56.459971][ T4061] EXT4-fs (loop1): Remounting filesystem read-only [ 56.466822][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 56.466844][ C1] EXT4-fs (loop1): initial error at time 1772691764: ext4_mb_generate_buddy:1315 [ 56.466868][ C1] EXT4-fs (loop1): last error at time 1772691764: ext4_mb_generate_buddy:1315 [ 56.518759][ T4061] EXT4-fs (loop1): 1 truncate cleaned up [ 56.559555][ T3837] veth0_vlan: entered promiscuous mode [ 56.570512][ T4061] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.583509][ T12] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 56.596661][ T3837] veth1_vlan: entered promiscuous mode [ 56.602254][ T12] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 56.623525][ T12] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 56.626778][ T4061] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.649687][ T3837] veth0_macvtap: entered promiscuous mode [ 56.668005][ T3837] veth1_macvtap: entered promiscuous mode [ 56.682808][ T4061] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.702814][ T3837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.724120][ T3837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.778641][ T30] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.798527][ T30] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.834295][ T4072] loop4: detected capacity change from 0 to 512 [ 56.836016][ T30] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.898112][ T4072] msdos: Unknown parameter 'do@' [ 57.327376][ T30] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.898490][ T4107] netlink: 8 bytes leftover after parsing attributes in process `syz.3.135'. [ 58.489486][ T4110] netlink: 'syz.3.137': attribute type 29 has an invalid length. [ 58.611798][ T4122] loop5: detected capacity change from 0 to 2048 [ 58.637582][ T4054] syz.2.124 (4054) used greatest stack depth: 9352 bytes left [ 58.742921][ T3305] loop5: p1 < > p4 [ 58.775373][ T4124] loop2: detected capacity change from 0 to 512 [ 58.792519][ T3305] loop5: p4 size 8388608 extends beyond EOD, truncated [ 58.810887][ T4124] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 58.879278][ T28] kauditd_printk_skb: 63 callbacks suppressed [ 58.879318][ T28] audit: type=1400 audit(1772691767.062:300): avc: denied { read } for pid=4123 comm="syz.2.140" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 58.951275][ T28] audit: type=1400 audit(1772691767.102:301): avc: denied { open } for pid=4123 comm="syz.2.140" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 58.975944][ T4122] loop5: p1 < > p4 [ 58.982720][ T4122] loop5: p4 size 8388608 extends beyond EOD, truncated [ 59.004045][ T3002] loop5: p1 < > p4 [ 59.008421][ T3002] loop5: p4 size 8388608 extends beyond EOD, truncated [ 59.037690][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 59.043433][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 59.076120][ T28] audit: type=1400 audit(1772691767.262:302): avc: denied { create } for pid=4126 comm="syz.1.141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 59.122447][ T4124] netlink: 12 bytes leftover after parsing attributes in process `syz.2.140'. [ 59.142547][ T28] audit: type=1400 audit(1772691767.322:303): avc: denied { connect } for pid=4126 comm="syz.1.141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 59.325963][ T28] audit: type=1400 audit(1772691767.502:304): avc: denied { read write } for pid=4145 comm="syz.1.145" dev="sockfs" ino=6959 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 59.367571][ T4147] loop5: detected capacity change from 0 to 512 [ 59.426458][ T4147] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.559942][ T4147] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.833302][ T28] audit: type=1400 audit(1772691768.002:305): avc: denied { ioctl } for pid=4132 comm="syz.5.143" path="/5/file0/cpu.stat" dev="loop5" ino=18 ioctlcmd=0x583b scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 59.883516][ T3837] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.054342][ T28] audit: type=1400 audit(1772691768.242:306): avc: denied { create } for pid=4160 comm="syz.1.148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 60.092247][ T28] audit: type=1400 audit(1772691768.242:307): avc: denied { setopt } for pid=4160 comm="syz.1.148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 60.155172][ T4165] loop2: detected capacity change from 0 to 2048 [ 60.180711][ T28] audit: type=1400 audit(1772691768.352:308): avc: denied { connect } for pid=4160 comm="syz.1.148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 60.252214][ T4165] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.266550][ T28] audit: type=1400 audit(1772691768.452:309): avc: denied { write } for pid=4173 comm="syz.3.152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 60.336448][ T4159] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 60.345787][ T4165] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.149: bg 0: block 234: padding at end of block bitmap is not set [ 60.362991][ T4159] vhci_hcd vhci_hcd.2: invalid port number 96 [ 60.369288][ T4159] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 60.380979][ T4165] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 117 [ 60.395612][ T4165] EXT4-fs (loop2): This should not happen!! Data will be lost [ 60.395612][ T4165] [ 60.495342][ T4183] 9p: Bad value for 'rfdno' [ 60.537351][ T4185] netlink: 104 bytes leftover after parsing attributes in process `syz.3.156'. [ 60.555687][ T3325] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.601132][ T4191] loop2: detected capacity change from 0 to 512 [ 60.622656][ T4191] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.660786][ T4191] ext4 filesystem being mounted at /35/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.700415][ T3325] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.758630][ T4206] netlink: 24 bytes leftover after parsing attributes in process `syz.2.159'. [ 60.840890][ T4213] loop2: detected capacity change from 0 to 4096 [ 60.848639][ T4213] EXT4-fs: inline encryption not supported [ 60.874727][ T4213] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 60.883449][ T4213] System zones: 0-5 [ 60.888094][ T4213] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.077833][ T4220] netlink: 'syz.3.163': attribute type 1 has an invalid length. [ 61.088016][ T4220] bpf: Bad value for 'uid' [ 61.162611][ T3553] IPVS: starting estimator thread 0... [ 61.273055][ T4222] IPVS: using max 2832 ests per chain, 141600 per kthread [ 61.491507][ T4227] loop4: detected capacity change from 0 to 512 [ 61.501973][ T4227] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 61.516810][ T4227] EXT4-fs (loop4): 1 truncate cleaned up [ 61.523225][ T4227] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.547476][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.587883][ T4237] loop5: detected capacity change from 0 to 1024 [ 61.600684][ T4237] EXT4-fs: inline encryption not supported [ 61.607142][ T4237] EXT4-fs: Ignoring removed bh option [ 61.612864][ T4237] EXT4-fs: quotafile must be on filesystem root [ 61.648343][ T4239] loop4: detected capacity change from 0 to 512 [ 61.684933][ T4239] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.698610][ T4239] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.716953][ T4219] syz.2.164 (4219) used greatest stack depth: 9272 bytes left [ 61.734848][ T4251] netlink: 24 bytes leftover after parsing attributes in process `syz.3.174'. [ 61.750665][ T4249] netlink: 16 bytes leftover after parsing attributes in process `syz.5.172'. [ 61.777979][ T4249] netlink: 16 bytes leftover after parsing attributes in process `syz.5.172'. [ 61.779998][ T3325] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.807889][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.858152][ T4258] loop5: detected capacity change from 0 to 512 [ 61.888272][ T4262] loop4: detected capacity change from 0 to 512 [ 61.898938][ T4260] netlink: 'syz.3.179': attribute type 1 has an invalid length. [ 61.908662][ T4258] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 61.934200][ T4260] 8021q: adding VLAN 0 to HW filter on device bond1 [ 61.948020][ T4258] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.178: bg 0: block 104: invalid block bitmap [ 61.961421][ T4262] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e028, mo2=0002] [ 61.972957][ T4258] loop5: lost filesystem error report for type 5 error -117 [ 61.978752][ T4258] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 61.982194][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 61.992469][ T4262] System zones: [ 61.995071][ C1] EXT4-fs (loop5): initial error at time 1772691771: ext4_validate_block_bitmap:432 [ 62.013959][ T4258] loop5: lost filesystem error report for type 5 error -117 [ 62.014601][ C1] EXT4-fs (loop5): last error at time 1772691771: ext4_mb_clear_bb:6685 [ 62.014780][ T4258] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.178: invalid indirect mapped block 1 (level 1) [ 62.022190][ C1] [ 62.053254][ T4269] 8021q: adding VLAN 0 to HW filter on device bond1 [ 62.060114][ T4262] 0-2, 18-18, 34-34 [ 62.065352][ T4269] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 62.078209][ T4258] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 62.078403][ T4258] EXT4-fs (loop5): 1 truncate cleaned up [ 62.088308][ T4258] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.098097][ T4269] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 62.122277][ T4262] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 42 vs 41 free clusters [ 62.155448][ T4262] EXT4-fs (loop4): Remounting filesystem read-only [ 62.162190][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 62.168829][ C0] EXT4-fs (loop4): initial error at time 1772691771: ext4_mb_generate_buddy:1315 [ 62.172590][ T4262] EXT4-fs (loop4): 1 truncate cleaned up [ 62.178171][ C0] EXT4-fs (loop4): last error at time 1772691771: ext4_mb_generate_buddy:1315 [ 62.184399][ T4262] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.206794][ T4262] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.217605][ T36] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 62.228565][ T36] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 62.240762][ T36] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 62.262461][ T3837] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.294768][ T4274] loop2: detected capacity change from 0 to 2048 [ 62.415044][ T3305] loop2: p1 < > p4 [ 62.442742][ T3305] loop2: p4 size 8388608 extends beyond EOD, truncated [ 62.469359][ T4274] loop2: p1 < > p4 [ 62.474223][ T4274] loop2: p4 size 8388608 extends beyond EOD, truncated [ 62.490795][ T3002] loop2: p1 < > p4 [ 62.495567][ T3002] loop2: p4 size 8388608 extends beyond EOD, truncated [ 62.505073][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.811186][ T4287] netlink: 'syz.4.184': attribute type 1 has an invalid length. [ 62.821225][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 62.843756][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 62.978067][ T4287] bpf: Bad value for 'uid' [ 63.011750][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 63.028633][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 63.049740][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 63.071230][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 63.168605][ T4304] loop2: detected capacity change from 0 to 512 [ 63.193310][ T4304] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.207638][ T4304] ext4 filesystem being mounted at /41/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.250206][ T4306] IPv6: NLM_F_REPLACE set, but no existing node found! [ 63.263399][ T3325] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.275808][ T4306] netlink: 8 bytes leftover after parsing attributes in process `syz.1.190'. [ 63.294395][ T4309] loop5: detected capacity change from 0 to 1024 [ 63.302582][ T4309] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 63.309330][ T4316] netlink: 24 bytes leftover after parsing attributes in process `syz.2.192'. [ 63.312798][ T4309] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 63.340967][ T4309] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 63.355919][ T4309] EXT4-fs error (device loop5): ext4_get_journal_inode:5863: inode #5: comm syz.5.191: unexpected bad inode w/o EXT4_IGET_BAD [ 63.378898][ T4309] loop5: lost file I/O error report for ino 5 type 5 pos 0x0 len 0x0 error -117 [ 63.379959][ T4309] EXT4-fs (loop5): no journal found [ 63.389229][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 63.389250][ C0] EXT4-fs (loop5): initial error at time 1772691772: ext4_get_journal_inode:5863: inode 5 [ 63.389307][ C0] EXT4-fs (loop5): last error at time 1772691772: ext4_get_journal_inode:5863: inode 5 [ 63.421731][ T4309] EXT4-fs (loop5): can't get journal size [ 63.458894][ T4309] EXT4-fs (loop5): failed to initialize system zone (-117) [ 63.491731][ T4309] EXT4-fs (loop5): mount failed [ 63.508215][ T4320] loop2: detected capacity change from 0 to 2048 [ 63.805160][ T4326] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e028, mo2=0002] [ 63.861726][ T4326] System zones: 0-2, 18-18, 34-34 [ 63.980691][ T4311] netlink: 76 bytes leftover after parsing attributes in process `syz.5.191'. [ 64.008913][ T4326] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 42 vs 41 free clusters [ 64.043053][ T4326] EXT4-fs (loop4): Remounting filesystem read-only [ 64.049656][ T4333] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.050268][ T4326] EXT4-fs (loop4): 1 truncate cleaned up [ 64.058523][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 64.058545][ C0] EXT4-fs (loop4): initial error at time 1772691773: ext4_mb_generate_buddy:1315 [ 64.058567][ C0] EXT4-fs (loop4): last error at time 1772691773: ext4_mb_generate_buddy:1315 [ 64.069512][ T4333] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.072318][ T4326] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.080618][ T36] __quota_error: 19 callbacks suppressed [ 64.080632][ T36] Quota error (device loop4): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 64.089982][ T4326] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.100465][ T36] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 64.110990][ T3308] loop2: p1 < > p4 [ 64.139341][ T36] Quota error (device loop4): write_blk: dquota write failed [ 64.163766][ T3308] loop2: p4 size 8388608 extends beyond EOD, truncated [ 64.181882][ T36] Quota error (device loop4): remove_free_dqentry: Can't write block (5) with free entries [ 64.192494][ T36] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 64.193904][ T4320] loop2: p1 < > p4 [ 64.207671][ T36] Quota error (device loop4): write_blk: dquota write failed [ 64.209809][ T4320] loop2: p4 size 8388608 extends beyond EOD, truncated [ 64.215834][ T36] Quota error (device loop4): free_dqentry: Can't move quota data block (5) to free list [ 64.224401][ T4311] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e028, mo2=0002] [ 64.232945][ T36] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 64.240749][ T4311] System zones: [ 64.251365][ T36] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 64.264434][ T36] Quota error (device loop4): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 64.266529][ T4311] 0-2 [ 64.277584][ T3002] loop2: p1 < > p4 [ 64.284831][ T3002] loop2: p4 size 8388608 extends beyond EOD, truncated [ 64.286187][ T36] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 64.292781][ T4311] , 18-18, 34-34 [ 64.311627][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 64.324567][ T4311] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 42 vs 41 free clusters [ 64.326743][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 64.339751][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.355047][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 64.368743][ T4311] EXT4-fs (loop5): Remounting filesystem read-only [ 64.369964][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 64.375488][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 64.375508][ C1] EXT4-fs (loop5): initial error at time 1772691773: ext4_mb_generate_buddy:1315 [ 64.401490][ C1] EXT4-fs (loop5): last error at time 1772691773: ext4_mb_generate_buddy:1315 [ 64.413106][ T4311] EXT4-fs (loop5): 1 truncate cleaned up [ 64.419315][ T4311] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.433996][ T4311] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.472847][ T2878] Quota error (device loop5): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 64.485987][ T2878] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 64.497076][ T2878] Quota error (device loop5): write_blk: dquota write failed [ 64.506640][ T2878] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 64.521866][ T4339] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 64.531095][ T2878] EXT4-fs (loop5): Quota write (off=8, len=24) cancelled because transaction is not started [ 64.543756][ T4339] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.199: bg 0: block 104: invalid block bitmap [ 64.560716][ T4339] loop4: lost filesystem error report for type 5 error -117 [ 64.560921][ T4339] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 64.568356][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 64.568381][ C0] EXT4-fs (loop4): initial error at time 1772691773: ext4_validate_block_bitmap:432 [ 64.568407][ C0] EXT4-fs (loop4): last error at time 1772691773: ext4_validate_block_bitmap:432 [ 64.603379][ T4339] loop4: lost filesystem error report for type 5 error -117 [ 64.603538][ T4339] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.199: invalid indirect mapped block 1 (level 1) [ 64.624452][ T4339] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 64.625466][ T4339] EXT4-fs (loop4): 1 truncate cleaned up [ 64.635894][ T4309] netlink: 20 bytes leftover after parsing attributes in process `syz.5.191'. [ 64.657927][ T4339] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.672487][ T4344] /dev/loop2: Can't open blockdev [ 64.753358][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.826109][ T4356] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 64.913168][ T4345] bond2: (slave ip6gre0): Device is not bonding slave [ 64.921007][ T4345] bond2: option active_slave: invalid value (ip6gre0) [ 64.954690][ T4345] bond2 (unregistering): Released all slaves [ 65.350366][ T4367] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 65.377105][ T4367] vhci_hcd vhci_hcd.2: invalid port number 96 [ 65.400440][ T4367] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 66.054376][ T4399] set_capacity_and_notify: 5 callbacks suppressed [ 66.054393][ T4399] loop2: detected capacity change from 0 to 512 [ 66.093598][ T4399] ext4 filesystem being mounted at /45/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.137878][ T4408] netlink: 104 bytes leftover after parsing attributes in process `syz.5.215'. [ 66.403803][ T4433] syz.5.217 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 66.529299][ T4445] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 66.558311][ T4445] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 66.573554][ T917] Bluetooth: hci0: Frame reassembly failed (-84) [ 66.583048][ T3553] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 66.665392][ T4460] loop2: detected capacity change from 0 to 512 [ 66.687524][ T4460] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 66.718272][ T4460] EXT4-fs (loop2): 1 truncate cleaned up [ 66.844785][ T4474] netlink: 188 bytes leftover after parsing attributes in process `syz.3.227'. [ 66.891481][ T4476] loop1: detected capacity change from 0 to 256 [ 66.899032][ T4476] vfat: Unknown parameter 'GPL' [ 67.272413][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 67.452247][ T4491] netlink: 8 bytes leftover after parsing attributes in process `syz.5.230'. [ 67.458587][ T10] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 68.297916][ T4498] loop5: detected capacity change from 0 to 1024 [ 68.302377][ T30] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 68.319677][ T30] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 68.398460][ T4498] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 68.427367][ T4498] System zones: 0-1, 3-36 [ 68.447554][ T4498] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.231: bad orphan inode 134217728 [ 68.460430][ T4498] loop5: lost filesystem error report for type 5 error -117 [ 68.462675][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 68.477936][ C0] EXT4-fs (loop5): initial error at time 1772691779: ext4_orphan_get:1417 [ 68.489065][ C0] EXT4-fs (loop5): last error at time 1772691779: ext4_orphan_get:1417 [ 68.508351][ T4498] EXT4-fs mount: 6 callbacks suppressed [ 68.508486][ T4498] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.590984][ T4523] netlink: 104 bytes leftover after parsing attributes in process `syz.1.239'. [ 68.641007][ T43] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 68.765541][ T4535] 9p: Bad value for 'rfdno' [ 68.834300][ T4537] loop1: detected capacity change from 0 to 128 [ 68.882245][ T4545] netlink: 188 bytes leftover after parsing attributes in process `syz.4.242'. [ 68.883282][ T4537] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 68.904571][ T4537] ext4 filesystem being mounted at /52/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 68.912280][ T35] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 69.020104][ T3319] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 69.281993][ T4570] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=18396 sclass=netlink_route_socket pid=4570 comm=syz.4.247 [ 69.539370][ T3837] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.778669][ T4582] program syz.1.250 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 69.806542][ T4584] loop4: detected capacity change from 0 to 512 [ 69.807634][ T4577] netlink: 188 bytes leftover after parsing attributes in process `syz.5.249'. [ 69.838549][ T4584] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.863164][ T4584] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.961777][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.965404][ T4595] netlink: 104 bytes leftover after parsing attributes in process `syz.5.252'. [ 70.004538][ T4599] loop4: detected capacity change from 0 to 512 [ 70.045123][ T4599] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 70.130223][ T4607] loop2: detected capacity change from 0 to 512 [ 70.139387][ T4599] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.254: bg 0: block 104: invalid block bitmap [ 70.159754][ T4599] loop4: lost filesystem error report for type 5 error -117 [ 70.160194][ T4599] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 70.168015][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 70.168036][ C1] EXT4-fs (loop4): initial error at time 1772691781: ext4_validate_block_bitmap:432 [ 70.168061][ C1] EXT4-fs (loop4): last error at time 1772691781: ext4_validate_block_bitmap:432 [ 70.202869][ T4599] loop4: lost filesystem error report for type 5 error -117 [ 70.203241][ T4599] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.254: invalid indirect mapped block 1 (level 1) [ 70.232280][ T4599] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 70.232922][ T4599] EXT4-fs (loop4): 1 truncate cleaned up [ 70.249652][ T4599] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.394609][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.714405][ T4607] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e028, mo2=0002] [ 70.742375][ T4607] System zones: 0-2, 18-18, 34-34 [ 70.753842][ T4607] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 42 vs 41 free clusters [ 70.769273][ T4607] EXT4-fs (loop2): Remounting filesystem read-only [ 70.776187][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 70.776211][ C0] EXT4-fs (loop2): initial error at time 1772691781: ext4_mb_generate_buddy:1315 [ 70.776233][ C0] EXT4-fs (loop2): last error at time 1772691781: ext4_mb_generate_buddy:1315 [ 70.803270][ T4607] EXT4-fs (loop2): 1 truncate cleaned up [ 70.809395][ T4607] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.837127][ T4607] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.847771][ T4623] loop4: detected capacity change from 0 to 512 [ 70.854635][ T30] __quota_error: 27 callbacks suppressed [ 70.854652][ T30] Quota error (device loop2): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 70.885844][ T30] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 70.902577][ T28] audit: type=1400 audit(1772691782.097:342): avc: denied { write } for pid=4606 comm="syz.2.256" name="anycast6" dev="proc" ino=4026532578 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 70.958191][ T30] Quota error (device loop2): write_blk: dquota write failed [ 70.959191][ T3325] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.966112][ T30] Quota error (device loop2): remove_free_dqentry: Can't write block (5) with free entries [ 70.985555][ T30] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 70.996392][ T30] Quota error (device loop2): write_blk: dquota write failed [ 71.003846][ T30] Quota error (device loop2): free_dqentry: Can't move quota data block (5) to free list [ 71.009670][ T4623] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.035084][ T30] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 71.037202][ T4628] netlink: 96 bytes leftover after parsing attributes in process `syz.3.260'. [ 71.052456][ T4623] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.054980][ T4626] loop5: detected capacity change from 0 to 512 [ 71.090789][ T4626] EXT4-fs: Ignoring removed oldalloc option [ 71.100701][ T30] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 71.151950][ T4626] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 71.152220][ T30] Quota error (device loop2): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 71.184331][ T4626] EXT4-fs error (device loop5): ext4_map_blocks:776: inode #2: block 3: comm syz.5.259: lblock 0 mapped to illegal pblock 3 (length 1) [ 71.202233][ T30] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 71.232587][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.304597][ T4626] EXT4-fs warning (device loop5): dx_probe:791: inode #2: lblock 0: comm syz.5.259: error -117 reading directory block [ 71.407604][ T28] audit: type=1400 audit(1772691783.590:343): avc: denied { execute } for pid=4647 comm="syz.4.266" name="file1" dev="tmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 71.462928][ T4632] netlink: 20 bytes leftover after parsing attributes in process `syz.1.262'. [ 71.515734][ T3837] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.533238][ T4632] netlink: 'syz.1.262': attribute type 16 has an invalid length. [ 71.563419][ T4657] Cannot find add_set index 1 as target [ 71.580462][ T4657] netlink: 12 bytes leftover after parsing attributes in process `syz.3.269'. [ 71.637304][ T4632] netlink: 'syz.1.262': attribute type 17 has an invalid length. [ 71.700052][ T4666] tipc: Started in network mode [ 71.705244][ T4666] tipc: Node identity 72c82a94bf9, cluster identity 4711 [ 71.722385][ T4666] tipc: Enabled bearer , priority 0 [ 71.837630][ T4632] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.108532][ T4632] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.131694][ T4675] loop2: detected capacity change from 0 to 512 [ 72.163648][ T4675] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 72.195545][ T4675] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 72.294230][ T4675] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.270: Corrupt directory, running e2fsck is recommended [ 72.349680][ T4673] loop4: detected capacity change from 0 to 8192 [ 72.363163][ T4675] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 72.372032][ T4675] EXT4-fs error (device loop2): ext4_iget_extra_inode:5025: inode #15: comm syz.2.270: corrupted in-inode xattr: e_name out of bounds [ 72.372975][ T4674] tipc: Resetting bearer [ 72.422279][ T4675] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 72.422763][ T4675] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.270: couldn't read orphan inode 15 (err -117) [ 72.432333][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 72.432362][ C1] EXT4-fs (loop2): initial error at time 1772691784: ext4_iget_extra_inode:5025: inode 15 [ 72.432391][ C1] EXT4-fs (loop2): last error at time 1772691784: ext4_iget_extra_inode:5025: inode 15 [ 72.482249][ T4675] loop2: lost filesystem error report for type 5 error -117 [ 72.532635][ T3305] loop4: p1 < > p2 p4 < p5 > [ 72.539865][ T4675] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.540151][ T3305] loop4: partition table partially beyond EOD, truncated [ 72.574181][ T3305] loop4: p1 start 134217728 is beyond EOD, truncated [ 72.580905][ T3305] loop4: p2 size 591360 extends beyond EOD, truncated [ 72.588679][ T3305] loop4: p5 size 591360 extends beyond EOD, truncated [ 72.597748][ T4673] loop4: p1 < > p2 p4 < p5 > [ 72.612938][ T4673] loop4: partition table partially beyond EOD, truncated [ 72.620155][ T4673] loop4: p1 start 134217728 is beyond EOD, truncated [ 72.622257][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 72.627049][ T4673] loop4: p2 size 591360 extends beyond EOD, truncated [ 72.642928][ T4673] loop4: p5 size 591360 extends beyond EOD, truncated [ 72.694244][ T4658] tipc: Disabling bearer [ 72.946165][ T3325] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.267319][ T4690] netlink: 28 bytes leftover after parsing attributes in process `syz.2.275'. [ 73.297407][ T4690] loop2: detected capacity change from 0 to 512 [ 73.309723][ T4690] EXT4-fs: Ignoring removed oldalloc option [ 73.332632][ T4690] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 73.362423][ T4690] EXT4-fs (loop2): orphan cleanup on readonly fs [ 73.368962][ T4690] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:517: comm syz.2.275: Block bitmap for bg 0 marked uninitialized [ 73.409739][ T4690] loop2: lost filesystem error report for type 5 error -117 [ 73.409894][ T4690] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 73.417376][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 73.417416][ C0] EXT4-fs (loop2): initial error at time 1772691785: ext4_read_block_bitmap_nowait:517 [ 73.417442][ C0] EXT4-fs (loop2): last error at time 1772691785: ext4_read_block_bitmap_nowait:517 [ 73.512825][ T4690] loop2: lost filesystem error report for type 5 error -117 [ 73.556260][ T4690] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:517: comm syz.2.275: Block bitmap for bg 0 marked uninitialized [ 73.612679][ T4690] loop2: lost filesystem error report for type 5 error -117 [ 73.612952][ T4690] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 73.652324][ T4690] loop2: lost filesystem error report for type 5 error -117 [ 73.652616][ T4690] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:517: comm syz.2.275: Block bitmap for bg 0 marked uninitialized [ 73.684791][ T4690] loop2: lost filesystem error report for type 5 error -117 [ 73.685115][ T4690] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 73.831730][ T4690] loop2: lost filesystem error report for type 5 error -117 [ 73.832143][ T4690] EXT4-fs (loop2): 1 orphan inode deleted [ 73.871016][ T4690] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 73.914341][ T4690] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:517: comm syz.2.275: Block bitmap for bg 0 marked uninitialized [ 73.964138][ T4690] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.028830][ T3325] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.194209][ T4727] loop5: detected capacity change from 0 to 512 [ 74.209827][ T4727] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 74.218517][ T4728] netlink: 188 bytes leftover after parsing attributes in process `syz.4.284'. [ 74.260073][ T4727] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.286: bg 0: block 104: invalid block bitmap [ 74.290287][ T4736] openvswitch: netlink: Key 23 has unexpected len 4 expected 2 [ 74.302818][ T4727] loop5: lost filesystem error report for type 5 error -117 [ 74.304113][ T4727] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 74.320484][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 74.320505][ C1] EXT4-fs (loop5): initial error at time 1772691786: ext4_validate_block_bitmap:432 [ 74.320535][ C1] EXT4-fs (loop5): last error at time 1772691786: ext4_validate_block_bitmap:432 [ 74.346589][ T4727] loop5: lost filesystem error report for type 5 error -117 [ 74.346822][ T4727] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.286: invalid indirect mapped block 1 (level 1) [ 74.368077][ T4727] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 74.368320][ T4727] EXT4-fs (loop5): 1 truncate cleaned up [ 74.392134][ T4727] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.408759][ T4716] loop2: detected capacity change from 0 to 1024 [ 74.461548][ T3837] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.576336][ T4716] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 74.588773][ T4716] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 74.635002][ T4716] JBD2: no valid journal superblock found [ 74.644349][ T4716] EXT4-fs (loop2): Could not load journal inode [ 75.264304][ T4774] loop2: detected capacity change from 0 to 1024 [ 75.334233][ T4774] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 75.346930][ T4774] System zones: 0-1, 3-36 [ 75.421098][ T4774] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.283: bad orphan inode 134217728 [ 75.455884][ T4774] loop2: lost filesystem error report for type 5 error -117 [ 75.487000][ T4774] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.658579][ T4777] netlink: 8 bytes leftover after parsing attributes in process `syz.4.295'. [ 75.680992][ T3325] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.682551][ T4777] loop4: detected capacity change from 0 to 512 [ 75.736181][ T4777] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 75.780043][ T4777] EXT4-fs (loop4): orphan cleanup on readonly fs [ 75.797374][ T4777] EXT4-fs error (device loop4): ext4_quota_enable:7188: comm syz.4.295: Bad quota inum: 2, type: 2 [ 75.812581][ T4796] netlink: 188 bytes leftover after parsing attributes in process `syz.5.298'. [ 75.831197][ T4783] loop2: detected capacity change from 0 to 1024 [ 75.869214][ T4783] EXT4-fs: inline encryption not supported [ 75.878996][ T4777] loop4: lost filesystem error report for type 5 error -117 [ 75.880568][ T4777] EXT4-fs warning (device loop4): ext4_enable_quotas:7236: Failed to enable quota tracking (type=2, err=-117, ino=2). Please run e2fsck to fix. [ 75.888124][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 75.888145][ C0] EXT4-fs (loop4): last error at time 1772691788: ext4_quota_enable:7188 [ 75.930144][ T4777] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 75.938589][ T4777] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 75.938681][ T4783] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.952016][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 75.952031][ T28] audit: type=1400 audit(1772691788.140:350): avc: denied { nlmsg_read } for pid=4782 comm="syz.2.296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 76.033190][ T3325] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.112570][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.176998][ T4817] netlink: 24 bytes leftover after parsing attributes in process `syz.4.304'. [ 76.263543][ T4822] loop5: detected capacity change from 0 to 512 [ 76.280634][ T4822] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 76.419015][ T28] audit: type=1400 audit(1772691788.470:351): avc: denied { relabelfrom } for pid=4820 comm="syz.4.305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 76.471727][ T4822] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.306: bg 0: block 104: invalid block bitmap [ 76.484706][ T28] audit: type=1400 audit(1772691788.470:352): avc: denied { relabelto } for pid=4820 comm="syz.4.305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 76.505265][ T4822] loop5: lost filesystem error report for type 5 error -117 [ 76.512181][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 76.526071][ C0] EXT4-fs (loop5): initial error at time 1772691788: ext4_validate_block_bitmap:432 [ 76.535655][ C0] EXT4-fs (loop5): last error at time 1772691788: ext4_validate_block_bitmap:432 [ 76.547612][ T4822] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 76.556790][ T4822] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.306: invalid indirect mapped block 1 (level 1) [ 76.570198][ T28] audit: type=1400 audit(1772691788.530:353): avc: denied { setopt } for pid=4820 comm="syz.4.305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 76.592237][ T4822] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 76.592444][ T4822] EXT4-fs (loop5): 1 truncate cleaned up [ 76.611280][ T4822] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.741331][ T3837] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.845263][ T28] audit: type=1400 audit(1772691789.040:354): avc: denied { read } for pid=4836 comm="syz.5.309" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 76.929736][ T4848] loop5: detected capacity change from 0 to 2048 [ 77.039328][ T28] audit: type=1400 audit(1772691789.040:355): avc: denied { open } for pid=4836 comm="syz.5.309" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 77.083923][ T4840] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.118053][ T4848] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.158554][ T4840] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.186823][ T4857] netlink: 188 bytes leftover after parsing attributes in process `syz.3.313'. [ 77.227700][ T28] audit: type=1400 audit(1772691789.040:356): avc: denied { ioctl } for pid=4836 comm="syz.5.309" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 77.265086][ T28] audit: type=1400 audit(1772691789.150:357): avc: denied { getopt } for pid=4839 comm="syz.4.311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 77.289946][ T4848] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.309: bg 0: block 234: padding at end of block bitmap is not set [ 77.346121][ T4848] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 232 with error 28 [ 77.360706][ T4860] netlink: 76 bytes leftover after parsing attributes in process `syz.1.315'. [ 77.362423][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.380316][ T4848] EXT4-fs (loop5): This should not happen!! Data will be lost [ 77.380316][ T4848] [ 77.390413][ T4848] EXT4-fs (loop5): Total free blocks count 0 [ 77.397126][ T4848] EXT4-fs (loop5): Free/Dirty block details [ 77.403146][ T4848] EXT4-fs (loop5): free_blocks=0 [ 77.408280][ T4848] EXT4-fs (loop5): dirty_blocks=240 [ 77.414043][ T4848] EXT4-fs (loop5): Block reservation details [ 77.452411][ T4848] EXT4-fs (loop5): i_reserved_data_blocks=15 [ 77.495855][ T4864] netlink: 188 bytes leftover after parsing attributes in process `syz.3.317'. [ 77.537267][ T4873] netlink: 188 bytes leftover after parsing attributes in process `syz.4.314'. [ 77.547621][ T28] audit: type=1400 audit(1772691789.740:358): avc: denied { create } for pid=4876 comm="syz.2.320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 77.570277][ T4870] delete_channel: no stack [ 77.574845][ T4870] delete_channel: no stack [ 77.602660][ T28] audit: type=1400 audit(1772691789.760:359): avc: denied { connect } for pid=4869 comm="syz.1.319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 77.626849][ T3837] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.641239][ T4886] set_capacity_and_notify: 1 callbacks suppressed [ 77.641258][ T4886] loop2: detected capacity change from 0 to 512 [ 77.670776][ T4886] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e028, mo2=0002] [ 77.696151][ T4886] System zones: 0-2, 18-18, 34-34 [ 77.761822][ T4886] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 42 vs 41 free clusters [ 77.781102][ T4886] EXT4-fs (loop2): Remounting filesystem read-only [ 77.787764][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 77.787788][ C0] EXT4-fs (loop2): initial error at time 1772691789: ext4_mb_generate_buddy:1315 [ 77.787814][ C0] EXT4-fs (loop2): last error at time 1772691789: ext4_mb_generate_buddy:1315 [ 77.854888][ T4886] EXT4-fs (loop2): 1 truncate cleaned up [ 77.861104][ T4886] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.874364][ T82] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 77.903821][ T82] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 78.227163][ T4886] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.244684][ T4901] 9p: Could not find request transport: fd0x0000000000000003 [ 78.357237][ T82] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 78.398094][ T4911] netlink: 104 bytes leftover after parsing attributes in process `syz.4.329'. [ 78.411338][ T3325] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.456588][ T4916] loop2: detected capacity change from 0 to 128 [ 78.514903][ T4916] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 78.573122][ T4916] ext4 filesystem being mounted at /63/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 78.585598][ T4925] IPVS: Error connecting to the multicast addr [ 78.667852][ T3325] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 78.751220][ T4935] loop2: detected capacity change from 0 to 2048 [ 78.921122][ T4935] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.947555][ T4935] EXT4-fs error (device loop2): ext4_iget_extra_inode:5025: inode #12: comm syz.2.333: corrupted in-inode xattr: e_name out of bounds [ 78.998895][ T4935] EXT4-fs (loop2): Remounting filesystem read-only [ 79.021382][ T4952] netlink: 44 bytes leftover after parsing attributes in process `syz.3.339'. [ 79.061625][ T3325] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.070964][ T4952] netlink: 'syz.3.339': attribute type 1 has an invalid length. [ 79.221848][ T4970] loop1: detected capacity change from 0 to 512 [ 79.243817][ T4970] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 79.292618][ T4970] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.345: bg 0: block 104: invalid block bitmap [ 79.318379][ T4970] fserror_report: 1 callbacks suppressed [ 79.318397][ T4970] loop1: lost filesystem error report for type 5 error -117 [ 79.333270][ T4970] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 79.349690][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 79.349714][ C0] EXT4-fs (loop1): initial error at time 1772691791: ext4_validate_block_bitmap:432 [ 79.349753][ C0] EXT4-fs (loop1): last error at time 1772691791: ext4_validate_block_bitmap:432 [ 79.377340][ T4983] netlink: 12 bytes leftover after parsing attributes in process `syz.3.349'. [ 79.379175][ T4970] loop1: lost filesystem error report for type 5 error -117 [ 79.386760][ T4970] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.345: invalid indirect mapped block 1 (level 1) [ 79.407881][ T4970] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 79.408216][ T4970] EXT4-fs (loop1): 1 truncate cleaned up [ 79.424118][ T4970] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.468345][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.730372][ T5006] netlink: 'syz.3.355': attribute type 4 has an invalid length. [ 79.738543][ T5007] netlink: 'syz.3.355': attribute type 2 has an invalid length. [ 79.771641][ T5007] netlink: 'syz.3.355': attribute type 1 has an invalid length. [ 80.269979][ T5026] loop1: detected capacity change from 0 to 512 [ 80.314595][ T5027] loop5: detected capacity change from 0 to 512 [ 80.327030][ T5026] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 80.405897][ T5027] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.421684][ T5028] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 80.433910][ T5026] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.362: bg 0: block 104: invalid block bitmap [ 80.459045][ T5027] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.471467][ T5028] bond1 (unregistering): Released all slaves [ 80.499442][ T5026] loop1: lost filesystem error report for type 5 error -117 [ 80.502185][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 80.516099][ C0] EXT4-fs (loop1): initial error at time 1772691793: ext4_validate_block_bitmap:432 [ 80.525696][ C0] EXT4-fs (loop1): last error at time 1772691793: ext4_validate_block_bitmap:432 [ 80.536092][ T5026] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 80.555149][ T5026] loop1: lost filesystem error report for type 5 error -117 [ 80.555407][ T5026] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.362: invalid indirect mapped block 1 (level 1) [ 80.589904][ T5026] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 80.597147][ T5026] EXT4-fs (loop1): 1 truncate cleaned up [ 80.602052][ T3837] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.617380][ T5026] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.737729][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.828031][ T5041] __nla_validate_parse: 4 callbacks suppressed [ 80.828104][ T5041] netlink: 188 bytes leftover after parsing attributes in process `syz.2.366'. [ 80.896493][ T5060] 9p: Could not find request transport: fd0x0000000000000003 [ 81.193306][ T5076] loop4: detected capacity change from 0 to 256 [ 81.220261][ T5067] loop5: detected capacity change from 0 to 8192 [ 81.256981][ T5076] FAT-fs (loop4): Directory bread(block 64) failed [ 81.263758][ T5076] FAT-fs (loop4): Directory bread(block 65) failed [ 81.270422][ T5076] FAT-fs (loop4): Directory bread(block 66) failed [ 81.277272][ T5076] FAT-fs (loop4): Directory bread(block 67) failed [ 81.284208][ T5076] FAT-fs (loop4): Directory bread(block 68) failed [ 81.290953][ T5076] FAT-fs (loop4): Directory bread(block 69) failed [ 81.298452][ T5076] FAT-fs (loop4): Directory bread(block 70) failed [ 81.305198][ T5076] FAT-fs (loop4): Directory bread(block 71) failed [ 81.311954][ T5076] FAT-fs (loop4): Directory bread(block 72) failed [ 81.319177][ T5076] FAT-fs (loop4): Directory bread(block 73) failed [ 81.361559][ T5076] bridge_slave_0: left allmulticast mode [ 81.368518][ T5076] bridge_slave_0: left promiscuous mode [ 81.378582][ T5076] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.467474][ T5076] bridge_slave_1: left allmulticast mode [ 81.475020][ T5076] bridge_slave_1: left promiscuous mode [ 81.484694][ T5076] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.525652][ T5076] bond0: (slave bond_slave_0): Releasing backup interface [ 81.552000][ T5076] bond0: (slave bond_slave_1): Releasing backup interface [ 81.591642][ T5076] team0: Port device team_slave_0 removed [ 81.620458][ T5076] team0: Port device team_slave_1 removed [ 81.630786][ T5076] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 81.649287][ T5076] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 81.662242][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 81.663689][ T5076] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 83.117610][ T5077] lo speed is unknown, defaulting to 1000 [ 83.123600][ T5077] lo speed is unknown, defaulting to 1000 [ 83.126631][ T5088] loop5: detected capacity change from 0 to 512 [ 83.129460][ T5077] lo speed is unknown, defaulting to 1000 [ 83.141764][ T5077] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 83.149489][ T5077] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 83.159028][ T5088] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 83.160081][ T5077] lo speed is unknown, defaulting to 1000 [ 83.173244][ T28] kauditd_printk_skb: 21 callbacks suppressed [ 83.173259][ T28] audit: type=1400 audit(1772691796.364:373): avc: denied { append } for pid=5073 comm="syz.2.376" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 83.180162][ T5077] lo speed is unknown, defaulting to 1000 [ 83.209016][ T5077] lo speed is unknown, defaulting to 1000 [ 83.215340][ T5077] lo speed is unknown, defaulting to 1000 [ 83.221437][ T5077] lo speed is unknown, defaulting to 1000 [ 83.246463][ T5077] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 83.266227][ T5088] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.378: bg 0: block 104: invalid block bitmap [ 83.290513][ T5088] loop5: lost filesystem error report for type 5 error -117 [ 83.290702][ T5088] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 83.298564][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 83.298599][ C1] EXT4-fs (loop5): initial error at time 1772691796: ext4_validate_block_bitmap:432 [ 83.298626][ C1] EXT4-fs (loop5): last error at time 1772691796: ext4_validate_block_bitmap:432 [ 83.333381][ T5088] loop5: lost filesystem error report for type 5 error -117 [ 83.334497][ T5088] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.378: invalid indirect mapped block 1 (level 1) [ 83.362534][ T5088] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 83.364736][ T5088] EXT4-fs (loop5): 1 truncate cleaned up [ 83.398093][ T5088] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.413983][ T5107] loop2: detected capacity change from 0 to 764 [ 83.425890][ T5107] iso9660: Unknown parameter 'iocharsturkish' [ 83.473525][ T5111] loop1: detected capacity change from 0 to 512 [ 83.511794][ T5111] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.383: bg 0: block 4: invalid block bitmap [ 83.525464][ T5111] loop1: lost filesystem error report for type 5 error -117 [ 83.528715][ T5111] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 83.534452][ T3837] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.536288][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 83.560704][ C1] EXT4-fs (loop1): initial error at time 1772691796: ext4_validate_block_bitmap:432 [ 83.570321][ C1] EXT4-fs (loop1): last error at time 1772691796: ext4_validate_block_bitmap:432 [ 83.580359][ T5111] loop1: lost filesystem error report for type 5 error -117 [ 83.581002][ T5111] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.383: invalid indirect mapped block 1 (level 1) [ 83.603704][ T5111] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 83.603982][ T5111] EXT4-fs (loop1): 1 truncate cleaned up [ 83.616983][ T5126] 9pnet_fd: Insufficient options for proto=fd [ 83.646853][ T5111] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.662499][ T5111] netlink: 8 bytes leftover after parsing attributes in process `syz.1.383'. [ 83.706391][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.751307][ T5137] loop5: detected capacity change from 0 to 512 [ 83.759021][ T5137] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 83.781484][ T28] audit: type=1400 audit(1772691796.964:374): avc: denied { connect } for pid=5132 comm="syz.5.392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 83.812744][ T5140] loop1: detected capacity change from 0 to 512 [ 83.841135][ T5140] EXT4-fs (loop1): cluster size (1024) smaller than block size (4096) [ 83.850172][ T28] audit: type=1400 audit(1772691797.014:375): avc: denied { allowed } for pid=5142 comm="syz.2.396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 83.872538][ T5144] netlink: 'syz.5.395': attribute type 39 has an invalid length. [ 83.915052][ T28] audit: type=1326 audit(1772691797.104:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5142 comm="syz.2.396" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff504c9c799 code=0x0 [ 83.940239][ T5146] ================================================================== [ 83.948714][ T5146] BUG: KCSAN: data-race in mas_state_walk / mas_wr_store_entry [ 83.956553][ T5146] [ 83.958966][ T5146] write to 0xffff8881047f7d08 of 8 bytes by task 5141 on cpu 0: [ 83.966800][ T5146] mas_wr_store_entry+0x14b0/0x2ed0 [ 83.972004][ T5146] mas_store_prealloc+0x72e/0xa70 [ 83.977084][ T5146] commit_merge+0x6a1/0x720 [ 83.981830][ T5146] vma_expand+0x315/0x510 [ 83.986602][ T5146] vma_merge_new_range+0x29c/0x320 [ 83.991950][ T5146] mmap_region+0x1176/0x2050 [ 83.996643][ T5146] do_mmap+0x9b2/0xbd0 [ 84.000808][ T5146] vm_mmap_pgoff+0x183/0x2d0 [ 84.005847][ T5146] ksys_mmap_pgoff+0xc1/0x310 [ 84.010713][ T5146] x64_sys_call+0x14df/0x3020 [ 84.015586][ T5146] do_syscall_64+0x12c/0x370 [ 84.020469][ T5146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.026511][ T5146] [ 84.028943][ T5146] read to 0xffff8881047f7d08 of 8 bytes by task 5146 on cpu 1: [ 84.036753][ T5146] mas_state_walk+0x28f/0x650 [ 84.041643][ T5146] mas_walk+0x60/0x150 [ 84.046334][ T5146] lock_vma_under_rcu+0xc9/0x210 [ 84.051365][ T5146] do_user_addr_fault+0x232/0x1050 [ 84.056487][ T5146] exc_page_fault+0x62/0xa0 [ 84.060999][ T5146] asm_exc_page_fault+0x26/0x30 [ 84.065942][ T5146] [ 84.068267][ T5146] value changed: 0x00007f3d48b1cfff -> 0x00007f3d48afbfff [ 84.075370][ T5146] [ 84.077824][ T5146] Reported by Kernel Concurrency Sanitizer on: [ 84.084149][ T5146] CPU: 1 UID: 0 PID: 5146 Comm: syz.5.395 Not tainted syzkaller #0 PREEMPT(full) [ 84.093802][ T5146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 84.103875][ T5146] ==================================================================