last executing test programs: 4m41.725426946s ago: executing program 32 (id=18): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x1ff, 0x8041) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={0x0, 0xf}, 0x10040, 0x0, 0x0, 0x9, 0x3, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) creat(&(0x7f0000000180)='./file0\x00', 0xa) fchmodat(0xffffffffffffff9c, 0x0, 0xffffffd3) ioctl$USBDEVFS_ALLOC_STREAMS(r0, 0x8008551c, &(0x7f0000000000)=ANY=[@ANYBLOB]) r1 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x0) fchdir(r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r3, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r3, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) keyctl$describe(0x6, 0x0, &(0x7f0000001000)=""/61, 0x3d) syz_genetlink_get_family_id$wireguard(&(0x7f0000000180), 0xffffffffffffffff) perf_event_open(&(0x7f0000001040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0x4000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x8018, &(0x7f0000000580)=ANY=[@ANYBLOB="6e6f646f74732c646f733178666c6f7070792c6e6f646f74732c646f74732c6e6f646f74732c646f74732c6e6f646f74732c646f74732c00c54cc17944a18ebf14e2b8a9ac6ea496fe7b48b2b2f8cdb92be6a539029275fea026b227a52d8faa1d1088d548ed4aaf1db14670bcdf8437de27498ec07a9c0ab653b718c93d3b8927625ec6b392"], 0x1, 0x2c5, &(0x7f0000000180)="$eJzs3c1OE1EUAOBD/xjZ2LVxMYkbV0R9g8aUhNjEBNOFrmyCLgRjUjbFFY/hM/hExo0+Aytc6BicSymFkAgDU+D7EnIPczrTe6eT3mlzbvr24cetzU8774vvX6IVebQi9uJXcdhOLaW2+S/uRGMmtxcAwE2zsTHqTf9p1toVLmH60i2dzo3HvVE7IpanWz78Ltvh1+vpHQAAAAAAAAAAAFWbrf/PslT/fxDRjca0puyopKyR6v9n/Wf9f1ZNrwGAyzhR/8+tNB73Rivp/u0k9f8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAfQ6K4n5xzl/d/QMAqjc7/zcjYn7+b9TdQQCget3Tc34rpXz+B4Db6bzv/7Mw/wPAbfTq9ZsXvcGgv5HnWcT+3mQ4GZZtmW+mx+V53j3ea38yGbZTPOg/zUvz+ZWIWFsf9J/N5n+kW4phJx4/is5h/jD3/OUgj2+z+y/H5lUPHgAAAAAAAAAAAAAAAAAAABbEat6MtDx/bn1/ufJ/dTXPz86X0dr6oP/kzPX/rXjQurZhAAAAAAAAAAAAAAAAAAAAwI22s/t5a7S9/W6cgp/j+S2LFxR/imIu1Yjqn6tYKk/RpY6TXcNp6VZ+5Htxgb2yOCO1nK6zBbhsrjpop6Fe+DjRWoBRpKBT1xsSAAAAAAAAAAAAAAAAAADcYceLfk/n2nV0CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABq0Iij3//fvaqgU/cYAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgLvhbwAAAP//KgV4eQ==") timerfd_create(0x2, 0x80800) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000000140)={0x0, 0x3, "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"}) socket$inet(0x2, 0x4000000000000001, 0x100) 4m30.754513722s ago: executing program 33 (id=38): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x1ff, 0x8041) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={0x0, 0xf}, 0x10040, 0x0, 0x0, 0x9, 0x3, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) creat(&(0x7f0000000180)='./file0\x00', 0xa) fchmodat(0xffffffffffffff9c, 0x0, 0xffffffd3) ioctl$USBDEVFS_ALLOC_STREAMS(r0, 0x8008551c, &(0x7f0000000000)=ANY=[@ANYBLOB]) r1 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x0) fchdir(r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r3, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r3, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) keyctl$describe(0x6, 0x0, &(0x7f0000001000)=""/61, 0x3d) syz_genetlink_get_family_id$wireguard(&(0x7f0000000180), 0xffffffffffffffff) perf_event_open(&(0x7f0000001040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0x4000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x8018, &(0x7f0000000580)=ANY=[@ANYBLOB="6e6f646f74732c646f733178666c6f7070792c6e6f646f74732c646f74732c6e6f646f74732c646f74732c6e6f646f74732c646f74732c00c54cc17944a18ebf14e2b8a9ac6ea496fe7b48b2b2f8cdb92be6a539029275fea026b227a52d8faa1d1088d548ed4aaf1db14670bcdf8437de27498ec07a9c0ab653b718c93d3b8927625ec6b392"], 0x1, 0x2c5, &(0x7f0000000180)="$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") timerfd_create(0x2, 0x80800) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000000140)={0x0, 0x3, "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"}) socket$inet(0x2, 0x4000000000000001, 0x100) 4m27.879313285s ago: executing program 5 (id=74): r0 = socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x2d1}, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xb, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) socket$inet_icmp(0x2, 0x2, 0x1) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r7 = timerfd_create(0x0, 0x0) timerfd_settime(r7, 0x3, 0x0, 0x0) r8 = bpf$ITER_CREATE(0xb, &(0x7f00000002c0)={r6}, 0x8) write$cgroup_int(r8, &(0x7f00000001c0), 0xfffffdef) sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e23, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000100)}, 0x0) 4m26.835353701s ago: executing program 5 (id=75): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) r3 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r7) io_uring_setup(0x18e5, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000100)='pagemap\x00') pread64(r9, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) recvmsg(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/4125, 0x101d}], 0x1}, 0x40002022) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r2, @ANYBLOB="00000000000000005c001280110001006272696467655f736c6176650000000044000580050005000000000005"], 0x7c}}, 0x24000004) 4m25.043077638s ago: executing program 5 (id=77): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) r3 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r7) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000100)='pagemap\x00') pread64(r9, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) recvmsg(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/4125, 0x101d}], 0x1}, 0x40002022) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r2, @ANYBLOB="00000000000000005c001280110001006272696467655f736c6176650000000044000580050005000000000005"], 0x7c}}, 0x24000004) 4m23.055414548s ago: executing program 5 (id=79): sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a000000}, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x24, &(0x7f0000000040)={0xa, 0x8, 0x29b}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0xf}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0xa) ioprio_get$pid(0x1, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x6, 0x5) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x4e23, @broadcast}, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}}, 0x6f631b4376e74f0e, {0x2, 0x0, @rand_addr=0x64010102}}) gettid() r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x80e42, 0x0) read(r1, &(0x7f0000000040)=""/148, 0xffffff96) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f00000047c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="180000007a0001862abd7000000000000700000000"], 0x18}], 0x1}, 0x0) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000740)={0xf, 0x0, 0x2b12, 0x3, 0xfb, "7ef90ce6d1d59a9ac1d0d29528a3dfc3d30753", 0x5, 0x8001}) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffe000/0x1000)=nil) mmap$xdp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, 0x4083811, 0xffffffffffffffff, 0x180000000) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1c917, &(0x7f0000000900)={[{@bsdgroups}, {@resuid={'resuid', 0x3d, 0xffffffffffffffff}}, {@discard}, {@barrier_val}, {@nogrpid}, {@nobh}, {@noinit_itable}, {@nombcache}, {@journal_dev={'journal_dev', 0x3d, 0x9}, 0x32}]}, 0x1, 0x4f4, &(0x7f0000000240)="$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") setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x450, 0x1c0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x478, 0xffffffff, 0xffffffff, 0x478, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0xa8, 0xc8, 0x60030000, {0x0, 0xff000000}}, @unspec=@TRACE={0x20}}, {{@ipv6={@mcast1, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xff, 0xffffffff, 0xff000000], 'netpci0\x00', 'ipvlan0\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x1, 0x1, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000800)=0x2, 0x4) sendto$inet6(r3, &(0x7f0000000640)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, 0x0, 0x0) 4m21.066939448s ago: executing program 5 (id=81): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5", 0x0, 0x0, 0x0, 0x3}, 0x3c) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000040)={@multicast2, @multicast1, 0x2, "4f6fb4d1af0f724e6118ecd4ac1100843af297baebb0efcdf5a284da144a011a", 0x4}, 0x3c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a20000000000a03000000000000000000030000000900010073797a300000000044000000030a03000000000000000000030000000900030073797a30000000000900010073797a30000000001400048008000240000000000800014000000000"], 0x8c}}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0xfffffffffffffd8f, &(0x7f00000000c0)=[{&(0x7f0000000100)="5c00000015006b05c84e21000af32c6e021875f802000000400001800000d34460bc04eab556a71525346182949a36c23d3b48dfd810000000003fce86b6345b05ca97fe4d5670a568fe43", 0x7c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a6970"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000100)=ANY=[@ANYBLOB="28000000030605000000000000000000020000050900020073797a310000000005000100070000"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x14) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000440), 0x2) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r5, 0xc0bc5351, &(0x7f0000000480)={0x100, 0x0, 'client0\x00', 0x80000002, "7ae839258d7aea71", "186eb3eda6b97aa6452ed04f40ff8271b8284639bf9f803da6ea8a7a288a1a9f", 0x8, 0x6}) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000180)={[{@jqfmt_vfsv0}, {@nouid32}, {@noblock_validity}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x7}}, {@nouid32}, {@nomblk_io_submit}, {@noinit_itable}, {@dioread_nolock}]}, 0x1, 0x5aa, &(0x7f0000000e40)="$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") r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000540)={0x0, 0x1, 0x565, 0x4, 0x2, 0x8, 0x40, 0xfffffffd, {0x0, @in6={{0xa, 0x4e22, 0x5, @empty, 0x8}}, 0x0, 0x10000, 0x5, 0x1, 0x80000000}}, &(0x7f0000000600)=0xb0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f0000000640)={r7, 0xfff9, 0x7f, 0x2, 0xb48, 0x6}, 0x14) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f00000000c0)) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, &(0x7f0000000100)={@multicast2, @multicast1, 0x400, "c6c0e6ec8755b5dc4e305886d95f086707764f8d0e5a0358ea21274f844a69e9", 0x9, 0x201, 0x489c, 0x100006}, 0x3c) r8 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r9 = fcntl$dupfd(r8, 0x0, r8) write$tun(r9, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x10c) 4m19.351572404s ago: executing program 5 (id=84): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x1ff, 0x8041) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={0x0, 0xf}, 0x10040, 0x0, 0x0, 0x9, 0x3, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) creat(&(0x7f0000000180)='./file0\x00', 0xa) fchmodat(0xffffffffffffff9c, 0x0, 0xffffffd3) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) ioctl$USBDEVFS_ALLOC_STREAMS(r0, 0x8008551c, &(0x7f0000000000)=ANY=[]) r1 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x0) fchdir(r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r3, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r3, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) keyctl$describe(0x6, 0x0, &(0x7f0000001000)=""/61, 0x3d) syz_genetlink_get_family_id$wireguard(&(0x7f0000000180), 0xffffffffffffffff) perf_event_open(&(0x7f0000001040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0x4000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x8018, &(0x7f0000000580)=ANY=[@ANYBLOB="6e6f646f74732c646f733178666c6f7070792c6e6f646f74732c646f74732c6e6f646f74732c646f74732c6e6f646f74732c646f74732c00c54cc17944a18ebf14e2b8a9ac6ea496fe7b48b2b2f8cdb92be6a539029275fea026b227a52d8faa1d1088d548ed4aaf1db14670bcdf8437de27498ec07a9c0ab653b718c93d3b8927625ec6b392"], 0x1, 0x2c5, &(0x7f0000000180)="$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") timerfd_create(0x2, 0x80800) r4 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, &(0x7f0000000140)={0x0, 0x3, "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"}) socket$inet(0x2, 0x4000000000000001, 0x100) 4m13.967997745s ago: executing program 34 (id=72): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = io_uring_setup(0x15c0, &(0x7f00000000c0)={0x0, 0x5e7, 0x10000, 0x2, 0x158}) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r2, 0x18, &(0x7f0000000040)={0x100, 0xffffffffffffffff, 0x20, {0xc5, 0x100}, 0x4}, 0x1) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) prlimit64(0x0, 0xb, 0x0, &(0x7f0000000280)) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r4, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000006506030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) 4m4.238825272s ago: executing program 35 (id=84): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x1ff, 0x8041) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={0x0, 0xf}, 0x10040, 0x0, 0x0, 0x9, 0x3, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) creat(&(0x7f0000000180)='./file0\x00', 0xa) fchmodat(0xffffffffffffff9c, 0x0, 0xffffffd3) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) ioctl$USBDEVFS_ALLOC_STREAMS(r0, 0x8008551c, &(0x7f0000000000)=ANY=[]) r1 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x0) fchdir(r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r3, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r3, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) keyctl$describe(0x6, 0x0, &(0x7f0000001000)=""/61, 0x3d) syz_genetlink_get_family_id$wireguard(&(0x7f0000000180), 0xffffffffffffffff) perf_event_open(&(0x7f0000001040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0x4000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x8018, &(0x7f0000000580)=ANY=[@ANYBLOB="6e6f646f74732c646f733178666c6f7070792c6e6f646f74732c646f74732c6e6f646f74732c646f74732c6e6f646f74732c646f74732c00c54cc17944a18ebf14e2b8a9ac6ea496fe7b48b2b2f8cdb92be6a539029275fea026b227a52d8faa1d1088d548ed4aaf1db14670bcdf8437de27498ec07a9c0ab653b718c93d3b8927625ec6b392"], 0x1, 0x2c5, &(0x7f0000000180)="$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") timerfd_create(0x2, 0x80800) r4 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, &(0x7f0000000140)={0x0, 0x3, "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"}) socket$inet(0x2, 0x4000000000000001, 0x100) 2m46.882906217s ago: executing program 6 (id=284): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) r3 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\a\x00\x00'], 0xfe33) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r7) io_uring_setup(0x18e5, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000100)='pagemap\x00') pread64(r9, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) recvmsg(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/4125, 0x101d}], 0x1}, 0x40002022) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r2, @ANYBLOB="00000000000000005c001280110001006272696467655f736c6176650000000044000580050005000000000005"], 0x7c}}, 0x24000004) 2m45.486108627s ago: executing program 7 (id=287): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5", 0x0, 0x0, 0x0, 0x3}, 0x3c) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000040)={@multicast2, @multicast1, 0x2, "4f6fb4d1af0f724e6118ecd4ac1100843af297baebb0efcdf5a284da144a011a", 0x4}, 0x3c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a20000000000a03000000000000000000030000000900010073797a300000000044000000030a03000000000000000000030000000900030073797a30000000000900010073797a30000000001400048008000240000000000800014000000000040008"], 0x8c}}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0xfffffffffffffd8f, &(0x7f00000000c0)=[{&(0x7f0000000100)="5c00000015006b05c84e21000af32c6e021875f802000000400001800000d34460bc04eab556a71525346182949a36c23d3b48dfd810000000003fce86b6345b05ca97fe4d5670a568fe43", 0x7c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000100)=ANY=[@ANYBLOB="28000000030605000000000000000000020000050900020073797a310000000005000100070000"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x14) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000440), 0x2) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r5, 0xc0bc5351, &(0x7f0000000480)={0x100, 0x0, 'client0\x00', 0x80000002, "7ae839258d7aea71", "186eb3eda6b97aa6452ed04f40ff8271b8284639bf9f803da6ea8a7a288a1a9f", 0x8, 0x6}) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000180)={[{@jqfmt_vfsv0}, {@nouid32}, {@noblock_validity}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x7}}, {@nouid32}, {@nomblk_io_submit}, {@noinit_itable}, {@dioread_nolock}]}, 0x1, 0x5aa, &(0x7f0000000e40)="$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") r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000540)={0x0, 0x1, 0x565, 0x4, 0x2, 0x8, 0x40, 0xfffffffd, {0x0, @in6={{0xa, 0x4e22, 0x5, @empty, 0x8}}, 0x0, 0x10000, 0x5, 0x1, 0x80000000}}, &(0x7f0000000600)=0xb0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f0000000640)={r7, 0xfff9, 0x7f, 0x2, 0xb48, 0x6}, 0x14) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f00000000c0)) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, &(0x7f0000000100)={@multicast2, @multicast1, 0x400, "c6c0e6ec8755b5dc4e305886d95f086707764f8d0e5a0358ea21274f844a69e9", 0x9, 0x201, 0x489c, 0x100006}, 0x3c) r8 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r9 = fcntl$dupfd(r8, 0x0, r8) write$tun(r9, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x10c) 2m44.927206136s ago: executing program 6 (id=288): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5", 0x0, 0x0, 0x0, 0x3}, 0x3c) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000040)={@multicast2, @multicast1, 0x2, "4f6fb4d1af0f724e6118ecd4ac1100843af297baebb0efcdf5a284da144a011a", 0x4}, 0x3c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a20000000000a03000000000000000000030000000900010073797a300000000044000000030a03000000000000000000030000000900030073797a30000000000900010073797a30000000001400048008000240000000000800014000000000040008"], 0x8c}}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0xfffffffffffffd8f, &(0x7f00000000c0)=[{&(0x7f0000000100)="5c00000015006b05c84e21000af32c6e021875f802000000400001800000d34460bc04eab556a71525346182949a36c23d3b48dfd810000000003fce86b6345b05ca97fe4d5670a568fe43", 0x7c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000100)=ANY=[@ANYBLOB="28000000030605000000000000000000020000050900020073797a310000000005000100070000"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x14) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000440), 0x2) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r5, 0xc0bc5351, &(0x7f0000000480)={0x100, 0x0, 'client0\x00', 0x80000002, "7ae839258d7aea71", "186eb3eda6b97aa6452ed04f40ff8271b8284639bf9f803da6ea8a7a288a1a9f", 0x8, 0x6}) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000180)={[{@jqfmt_vfsv0}, {@nouid32}, {@noblock_validity}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x7}}, {@nouid32}, {@nomblk_io_submit}, {@noinit_itable}, {@dioread_nolock}]}, 0x1, 0x5aa, &(0x7f0000000e40)="$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") r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000540)={0x0, 0x1, 0x565, 0x4, 0x2, 0x8, 0x40, 0xfffffffd, {0x0, @in6={{0xa, 0x4e22, 0x5, @empty, 0x8}}, 0x0, 0x10000, 0x5, 0x1, 0x80000000}}, &(0x7f0000000600)=0xb0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f0000000640)={r7, 0xfff9, 0x7f, 0x2, 0xb48, 0x6}, 0x14) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f00000000c0)) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, &(0x7f0000000100)={@multicast2, @multicast1, 0x400, "c6c0e6ec8755b5dc4e305886d95f086707764f8d0e5a0358ea21274f844a69e9", 0x9, 0x201, 0x489c, 0x100006}, 0x3c) r8 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r9 = fcntl$dupfd(r8, 0x0, r8) write$tun(r9, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x10c) 2m44.485545803s ago: executing program 7 (id=291): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) r3 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0xfe33) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r7) io_uring_setup(0x18e5, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000100)='pagemap\x00') pread64(r9, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) recvmsg(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/4125, 0x101d}], 0x1}, 0x40002022) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r2, @ANYBLOB="00000000000000005c001280110001006272696467655f736c6176650000000044000580050005000000000005"], 0x7c}}, 0x24000004) 2m43.235521572s ago: executing program 6 (id=293): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5", 0x0, 0x0, 0x0, 0x3}, 0x3c) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000040)={@multicast2, @multicast1, 0x2, "4f6fb4d1af0f724e6118ecd4ac1100843af297baebb0efcdf5a284da144a011a", 0x4}, 0x3c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a20000000000a03000000000000000000030000000900010073797a300000000044000000030a03000000000000000000030000000900030073797a30000000000900010073797a30000000001400048008000240000000000800014000000000040008"], 0x8c}}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0xfffffffffffffd8f, &(0x7f00000000c0)=[{&(0x7f0000000100)="5c00000015006b05c84e21000af32c6e021875f802000000400001800000d34460bc04eab556a71525346182949a36c23d3b48dfd810000000003fce86b6345b05ca97fe4d5670a568fe43", 0x7c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000100)=ANY=[@ANYBLOB="28000000030605000000000000000000020000050900020073797a310000000005000100070000"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x14) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000440), 0x2) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r5, 0xc0bc5351, &(0x7f0000000480)={0x100, 0x0, 'client0\x00', 0x80000002, "7ae839258d7aea71", "186eb3eda6b97aa6452ed04f40ff8271b8284639bf9f803da6ea8a7a288a1a9f", 0x8, 0x6}) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000180)={[{@jqfmt_vfsv0}, {@nouid32}, {@noblock_validity}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x7}}, {@nouid32}, {@nomblk_io_submit}, {@noinit_itable}, {@dioread_nolock}]}, 0x1, 0x5aa, &(0x7f0000000e40)="$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") r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000540)={0x0, 0x1, 0x565, 0x4, 0x2, 0x8, 0x40, 0xfffffffd, {0x0, @in6={{0xa, 0x4e22, 0x5, @empty, 0x8}}, 0x0, 0x10000, 0x5, 0x1, 0x80000000}}, &(0x7f0000000600)=0xb0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f0000000640)={r7, 0xfff9, 0x7f, 0x2, 0xb48, 0x6}, 0x14) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f00000000c0)) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, &(0x7f0000000100)={@multicast2, @multicast1, 0x400, "c6c0e6ec8755b5dc4e305886d95f086707764f8d0e5a0358ea21274f844a69e9", 0x9, 0x201, 0x489c, 0x100006}, 0x3c) r8 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r9 = fcntl$dupfd(r8, 0x0, r8) write$tun(r9, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x10c) 2m42.347130315s ago: executing program 7 (id=295): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) r3 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\a\x00\x00B\x00'], 0xfe33) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r7) io_uring_setup(0x18e5, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000100)='pagemap\x00') pread64(r9, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) recvmsg(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/4125, 0x101d}], 0x1}, 0x40002022) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r2, @ANYBLOB="00000000000000005c001280110001006272696467655f736c6176650000000044000580050005000000000005"], 0x7c}}, 0x24000004) 2m41.817842413s ago: executing program 6 (id=297): r0 = perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x62, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r1, 0x0, 0x24000840) sendmsg$NFT_MSG_GETCHAIN(r1, 0x0, 0x24008000) socket$nl_xfrm(0x10, 0x3, 0x6) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x103300, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = dup(r2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r2, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r4 = dup(r2) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x48, 0xff}, 0x9c) socket$nl_generic(0x10, 0x3, 0x10) getpid() bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYRES8=r0, @ANYBLOB="34910626330d000c0000000075d8bd7bfafdf2ab8773ee8ff9f4d947e7331b9e7ce120db", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) personality(0x87bf5ac905ea0f7f) ioctl$HIDIOCGCOLLECTIONINDEX(0xffffffffffffffff, 0x40184810, 0x0) syz_usb_connect(0x2, 0x36, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x100, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1004, 0x0, @perf_bp={&(0x7f0000000180), 0x1}, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff39cb, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$9p_rdma(&(0x7f00000013c0), &(0x7f0000000100)='.\x00', &(0x7f0000001440), 0x200800, &(0x7f0000000200)=ANY=[@ANYBLOB="7472616e733d72646d612c706f7274202a051562f4246759383d1a7830303030ae188dfb668c7f087cda11ab1084"]) 2m39.601625546s ago: executing program 6 (id=302): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = io_uring_setup(0x15c0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r3, 0x18, &(0x7f0000000040)={0x100, 0xffffffffffffffff, 0x20, {0xc5, 0x100}, 0x4}, 0x1) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) prlimit64(r0, 0xb, 0x0, &(0x7f0000000280)) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x40) r6 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r6, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000006506030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) 2m39.409318919s ago: executing program 7 (id=303): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0xb}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe, 0x800000000066e}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000000)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e22, @loopback}, @in6={0xa, 0x4, 0xff, @empty}], 0x3c) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x8c) perf_event_open(0x0, 0x0, 0xffffffffffffffff, r1, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000e00)=@newtaction={0x18, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x4}]}, 0x18}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000040)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4002003, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000100)={[{@min_batch_time={'min_batch_time', 0x3d, 0x9}}, {@jqfmt_vfsv0}, {@min_batch_time={'min_batch_time', 0x3d, 0x3ff}}, {@noload}, {@grpjquota_path={'grpjquota', 0x3d, '.\x02'}}, {@noblock_validity}, {@resgid}, {@nobarrier}, {@errors_continue}]}, 0xfa, 0x491, &(0x7f0000000f00)="$eJzs3M9vFFUcAPDvTLulgNiK+AMEqaKR+KOl5YccvGg04aCJiR4wnmpbSKVQQ2sihGj1gEdD4p149S8wnvRi1IsmXvVuSIjhAuJlzezM0NLutlu6ZQv7+SS7fW/mte99Z+btvJk33QA61kD2lkQ8EBF/RkRfnr29wED+48a1C2P/XrswlkS1+s4/Sa3c9WsXxsqi5e9tzTPVapHfVKfei+9HjE5NTZwt8kOzpz8amjl3/qXJ06MnJ05OnBk5evTQwT09R0YOtyTOLK7ruz6d3r3z2HuX3ho7fumDX5I08rhjURytMpBv3bqebXVlbbZtQTrpzt57i9ze3+bX1DsSaKeuiMh2V6XW//uiKzbfWtcXb3zR1sYB66parVaX+VSeqwL3sSTa3QKgPcoTfXb9W77u0tBjQ7j6an4BlMV9o3jla7ojzRN7K4uub1tpICKOz928nL1ine5DAAAs9EM2/nmx3vgvjUfzRE/29mAxh9IfEQ9FxPaIeDgidkTEIxG1so9FxOOrrH/xDMnS8U965Y6Da0I2/nulmNu6ffyXlkX6u4rctlr8leTE5NTEgWKb7I/KphOTycTwMnX8+PofXzVaVxv/lYPxuZuXs/rLsWDRjivdi27QjY/Ojq4l5oWufh6xq7te/EltXiCKeb2dEbHrDuuYfL674bqF49/jdeNfRuM/27TqNxHP5ft/LhbFX0oazk8Ov3xk5PBQb0xNHBgqj4qlfv394tuN6l9T/C2Q7f8tdY//W/H3J70RM+fOn6rN186svo6Lf33Z8Jpm5fhvO/6PbSuO/57k3dqCnmLFJ6Ozs2eHI3qSN5cuH5n/a2W+LJ/Fv39f/f6/Pea3xBMRsTsi9kTEk9lFYdH2pyLi6YjYt0z8P7/2zIerj7/+XfnKMvXciSz+8ZX2fyzc/6tPdJ366fuV4++NiEb7/1Attb9Y0sznX7MNXMu2AwAAgHtF/gx8kg7Op5PBwfwZ/h2xJZ2anpl94cT0x2fG82fl+6OSlne6+hbcDx0u7g2X+ZFF+YPFfeOvuzbX8oNj01Pj7Q4eOtzWJf0/TbP+n/m7q92tA9ZdC+bRgHuU/g+dS/+HzpSs2P9b/cgRsJE4/0Pnqtf/P2tYevC7dW0McFc5/0PnaqL/z+U/Go8KgHuT8z90Lv0fOlLD/41P1/Qv/y1N7Pk2b+tyZf4rvkJlo7T5/k9EuiGacf8nupv+MotGicrSvlzty/tUtmRT3d9q68cSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAy/wfAAD//3gk5XA=") unshare(0x2c020400) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200088d1, &(0x7f0000000100)={0x2, 0x4e21, @loopback}, 0x10) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r3 = epoll_create1(0x80000) epoll_wait(r3, &(0x7f0000000100)=[{}], 0x1, 0xff) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100), 0x0, 0xffffffffffffffff) 2m34.362997475s ago: executing program 6 (id=307): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) r3 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r7) io_uring_setup(0x18e5, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000100)='pagemap\x00') pread64(r9, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) recvmsg(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/4125, 0x101d}], 0x1}, 0x40002022) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r2, @ANYBLOB="00000000000000005c001280110001006272696467655f736c6176650000000044000580050005000000000005"], 0x7c}}, 0x24000004) 2m34.189077197s ago: executing program 7 (id=310): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = add_key$fscrypt_v1(&(0x7f0000000a00), &(0x7f0000000a40)={'fscrypt:', @desc4}, &(0x7f0000000a80)={0x0, "301971b48944577edae8c7bb32ad7ca1829e0922e71e334cf9101b3de25d35a38d11e1bf4f564e4379ac8b8e76076a335e6307bf7572aa1f72d48d2385170c0f", 0x18}, 0x48, 0xffffffffffffffff) keyctl$describe(0x6, r1, &(0x7f0000001000)=""/61, 0x3d) r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$restrict_keyring(0x1d, r2, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000280)='batadv0\x00') perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x3}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket(0x2b, 0x80801, 0x1) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RTC_WKALM_SET(r5, 0x4028700f, &(0x7f00000002c0)={0x1, 0x0, {0x29, 0x33, 0x14, 0x2, 0xc, 0x401, 0x4, 0xce, 0x1}}) listen(r4, 0x10) recvfrom$unix(r4, 0x0, 0x0, 0x10000, 0x0, 0x0) sendmmsg$inet6(r4, 0x0, 0x0, 0x20008095) r6 = socket(0xf, 0x0, 0x2) syz_genetlink_get_family_id$nl80211(0x0, r6) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x4, 0xfb, 0x53, 0x3, 0x7a, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2={0xff, 0x5}, 0x8, 0x10, 0xe3e1, 0xcfe}}) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r7, &(0x7f0000000bc0)=[{{&(0x7f00000000c0)={0xa, 0x4e20, 0x1, @local, 0x7}, 0x1c, 0x0}}, {{&(0x7f00000084c0)={0xa, 0x4e21, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000008500)="88", 0x1}], 0x1}}], 0x2, 0x24040040) shutdown(r7, 0x1) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e21, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0xc}}, 0x6, 0x7, 0x0, 0xc7b, 0x0, 0x9, 0xc}, &(0x7f0000000100)=0x9c) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd29, 0x25dedbfd, {0x0, 0x0, 0x0, r8, {0xc, 0xd}, {0xc}, {0xe, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x48050}, 0x40004) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="2c0000001900010028bd7000000000000a0020000000c8090010000008001e0000020000080004"], 0x2c}, 0x1, 0x0, 0x0, 0x880}, 0x4000050) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000002000)=""/4082) 2m34.06103803s ago: executing program 7 (id=311): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) r3 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r7) io_uring_setup(0x18e5, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000100)='pagemap\x00') pread64(r9, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) recvmsg(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/4125, 0x101d}], 0x1}, 0x40002022) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r2, @ANYBLOB="00000000000000005c001280110001006272696467655f736c6176650000000044000580050005000000000005"], 0x7c}}, 0x24000004) 2m18.676644882s ago: executing program 36 (id=307): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) r3 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r7) io_uring_setup(0x18e5, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000100)='pagemap\x00') pread64(r9, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) recvmsg(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/4125, 0x101d}], 0x1}, 0x40002022) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r2, @ANYBLOB="00000000000000005c001280110001006272696467655f736c6176650000000044000580050005000000000005"], 0x7c}}, 0x24000004) 2m18.494484234s ago: executing program 37 (id=311): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) r3 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r7) io_uring_setup(0x18e5, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000100)='pagemap\x00') pread64(r9, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) recvmsg(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/4125, 0x101d}], 0x1}, 0x40002022) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r2, @ANYBLOB="00000000000000005c001280110001006272696467655f736c6176650000000044000580050005000000000005"], 0x7c}}, 0x24000004) 2m7.431166071s ago: executing program 2 (id=343): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5", 0x0, 0x0, 0x0, 0x3}, 0x3c) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000040)={@multicast2, @multicast1, 0x2, "4f6fb4d1af0f724e6118ecd4ac1100843af297baebb0efcdf5a284da144a011a", 0x4}, 0x3c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a20000000000a03000000000000000000030000000900010073797a300000000044000000030a03000000000000000000030000000900030073797a30000000000900010073797a30000000001400048008000240000000000800014000000000040008"], 0x8c}}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0xfffffffffffffd8f, &(0x7f00000000c0)=[{&(0x7f0000000100)="5c00000015006b05c84e21000af32c6e021875f802000000400001800000d34460bc04eab556a71525346182949a36c23d3b48dfd810000000003fce86b6345b05ca97fe4d5670a568fe43", 0x7c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000100)=ANY=[@ANYBLOB="2800000003060500000000000000000002000005"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x14) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000440), 0x2) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r5, 0xc0bc5351, &(0x7f0000000480)={0x100, 0x0, 'client0\x00', 0x80000002, "7ae839258d7aea71", "186eb3eda6b97aa6452ed04f40ff8271b8284639bf9f803da6ea8a7a288a1a9f", 0x8, 0x6}) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000180)={[{@jqfmt_vfsv0}, {@nouid32}, {@noblock_validity}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x7}}, {@nouid32}, {@nomblk_io_submit}, {@noinit_itable}, {@dioread_nolock}]}, 0x1, 0x5aa, &(0x7f0000000e40)="$eJzs3T1sG2UfAPD/neOmH3nf9JXeV3pBHSpAKlJVJ+kHFKZ2RVSq1AGJBSLXjao4dRU70ESRSPcK0QEB6lI2GBhBDAyIhZGVhY8ZqaIRSE0HMHJ8TtPUDk6oY4h/P+ns57k7+/9/fH4e353u5AAG1uHGQxrxREScTyJG1y0bimzh4eZ6K8uLxfvLi8Uk6vULPyeRRMS95cVia/0kez4QEUsR8f+I+CofcTRde8s9rUJ1fmF6slwuzWb1sdrM1bHq/MKxyzOTU6Wp0pUTz79w6vTJUxPHJ9ane7++vpbfWltvfH/z7RvfvHT75sefHFoqvjuZxJkYyZatb8fj1PxM8nFmw/yTvQjWR0m/E2Bbclk/b3Sl/8Vo5LJe3059/eAwvCPpAT1UH46or1lXBAZAotPDgGrtBzSOf1vTTu5/3DnbPABpxF1ZXiy+Fa34Q81zE7F39dhk/y/JQ0cmjePNgzuZKLvS0vWIGB8aevT7n2Tfv+0bfxwJ0lNfnm1uqEe3f7o2/kSb8Wekde70L2qNfyvZ+LfSJn6uw/h3vssYv7364wcd418fjifbxk/W4idt4qcR8XqX8W+98vnpTsvqH0YcifbxW5LNzw+PXbpcLo03H9vG+OLIoRc7tz9if4f4zXO2e1cTWd/+PVlOaZft/+zrT59a2iT+s09vvv3bff77IuKdLuP/595HL3dadud6crexF7DV7Z9EPm53Gf+5M4e/y4rOGgIAAAAAAAAAwGOUrl7LlqSFtXKaFgrNe3j/G/vTcqVaO3qpMpfLrnk7GPm0daXVaLOeNOoT2fW4rfrxDfUTuSxgbt9qvVCslC/2ue0AAAAAAAAAAAAAAAAAAADwd3Fgw/3/v+ZW7//f+HfVwG7V+S+/gd1O/4fB9XD/T/qWB7Dz/P7DwKpv3v/tD8Bu5vcfBpf+D4NL/4fB1bb/79v5PICd5/cfBpf+DwAAAAAAAAAAAAAAAAAAAAAAAAAAPXH+3LnGVL+/vFhs1C8Ozc9NV944drFUnS7MzBULxcrs1cJUpTJVLhWKlZk/e7+kUrk6Hlfmro3VStXaWHV+4bWZytyV1n+IlfI9bxEAAAAAAAAAAAAAAAAAAAD884ysTklaiMg362laKET8KyIOJpFculwujUfEvyPi21x+uFGf6HfSAAAAAAAAAAAAAAAAAAAAsMtU5xemJ8vl0mzvCkNZqO5e9UOtp/kMbWXliFjadJ181rSu02i845ZzbkXp7WYakEKuy+/hwBf6NCABAAAAAAAAAAAAAAAAAMAAe3DTb7ev+L23CQEAAAAAAAAAAAAAAAAAAMBASn9KIqIxHRl9ZmTj0j3JSm71OSLevHXhvWuTtdrsRGP+3bX5tfez+cf7kT/QrVY/TSOi0Y8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAB6rzC9OT5XJpdpuF4S7W6XcbAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALbjjwAAAP//QKjKig==") r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000540)={0x0, 0x1, 0x565, 0x4, 0x2, 0x8, 0x40, 0xfffffffd, {0x0, @in6={{0xa, 0x4e22, 0x5, @empty, 0x8}}, 0x0, 0x10000, 0x5, 0x1, 0x80000000}}, &(0x7f0000000600)=0xb0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f0000000640)={r7, 0xfff9, 0x7f, 0x2, 0xb48, 0x6}, 0x14) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f00000000c0)) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, &(0x7f0000000100)={@multicast2, @multicast1, 0x400, "c6c0e6ec8755b5dc4e305886d95f086707764f8d0e5a0358ea21274f844a69e9", 0x9, 0x201, 0x489c, 0x100006}, 0x3c) r8 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r9 = fcntl$dupfd(r8, 0x0, r8) write$tun(r9, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x10c) 2m5.818596525s ago: executing program 2 (id=346): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000040)={@multicast2, @multicast1, 0x2, "4f6fb4d1af0f724e6118ecd4ac1100843af297baebb0efcdf5a284da144a011a", 0x4}, 0x3c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0xfffffffffffffd8f, &(0x7f00000000c0)=[{&(0x7f0000000100)="5c00000015006b05c84e21000af32c6e021875f802000000400001800000d34460bc04eab556a71525346182949a36c23d3b48dfd810000000003fce86b6345b05ca97fe4d5670a568fe43", 0x7c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, 0x0, 0x20004000) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x14) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000440), 0x2) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r4, 0xc0bc5351, &(0x7f0000000480)={0x100, 0x0, 'client0\x00', 0x80000002, "7ae839258d7aea71", "186eb3eda6b97aa6452ed04f40ff8271b8284639bf9f803da6ea8a7a288a1a9f", 0x8, 0x6}) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000180)={[{@jqfmt_vfsv0}, {@nouid32}, {@noblock_validity}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x7}}, {@nouid32}, {@nomblk_io_submit}, {@noinit_itable}, {@dioread_nolock}]}, 0x1, 0x5aa, &(0x7f0000000e40)="$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") r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000540)={0x0, 0x1, 0x565, 0x4, 0x2, 0x8, 0x40, 0xfffffffd, {0x0, @in6={{0xa, 0x4e22, 0x5, @empty, 0x8}}, 0x0, 0x10000, 0x5, 0x1, 0x80000000}}, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000640)={r6, 0xfff9, 0x7f, 0x2, 0xb48, 0x6}, 0x14) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f00000000c0)) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, &(0x7f0000000100)={@multicast2, @multicast1, 0x400, "c6c0e6ec8755b5dc4e305886d95f086707764f8d0e5a0358ea21274f844a69e9", 0x9, 0x201, 0x489c, 0x100006}, 0x3c) r7 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r8 = fcntl$dupfd(r7, 0x0, r7) write$tun(r8, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x10c) 2m4.065816401s ago: executing program 2 (id=348): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = add_key$fscrypt_v1(&(0x7f0000000a00), &(0x7f0000000a40)={'fscrypt:', @desc4}, &(0x7f0000000a80)={0x0, "301971b48944577edae8c7bb32ad7ca1829e0922e71e334cf9101b3de25d35a38d11e1bf4f564e4379ac8b8e76076a335e6307bf7572aa1f72d48d2385170c0f", 0x18}, 0x48, 0xffffffffffffffff) keyctl$describe(0x6, r1, &(0x7f0000001000)=""/61, 0x3d) r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$restrict_keyring(0x1d, r2, &(0x7f0000000240)='asymmetric\x00', 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x3}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket(0x2b, 0x80801, 0x1) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RTC_WKALM_SET(r5, 0x4028700f, &(0x7f00000002c0)={0x1, 0x0, {0x29, 0x33, 0x14, 0x2, 0xc, 0x401, 0x4, 0xce, 0x1}}) listen(r4, 0x10) recvfrom$unix(r4, 0x0, 0x0, 0x10000, 0x0, 0x0) sendmmsg$inet6(r4, 0x0, 0x0, 0x20008095) r6 = socket(0xf, 0x0, 0x2) syz_genetlink_get_family_id$nl80211(0x0, r6) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x4, 0xfb, 0x53, 0x3, 0x7a, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2={0xff, 0x5}, 0x8, 0x10, 0xe3e1, 0xcfe}}) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r7, &(0x7f0000000bc0)=[{{&(0x7f00000000c0)={0xa, 0x4e20, 0x1, @local, 0x7}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000002700)="89", 0x1}], 0x1}}, {{&(0x7f00000084c0)={0xa, 0x4e21, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000008500)="88", 0x1}], 0x1}}], 0x2, 0x24040040) shutdown(r7, 0x1) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e21, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0xc}}, 0x6, 0x7, 0x0, 0xc7b, 0x0, 0x9, 0xc}, &(0x7f0000000100)=0x9c) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd29, 0x25dedbfd, {0x0, 0x0, 0x0, r8, {0xc, 0xd}, {0xc}, {0xe, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x48050}, 0x40004) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="2c0000001900010028bd7000000000000a0020000000c8090010000008001e0000020000080004"], 0x2c}, 0x1, 0x0, 0x0, 0x880}, 0x4000050) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000002000)=""/4082) 2m3.792344555s ago: executing program 2 (id=350): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) r3 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\a\x00\x00B\x00'], 0xfe33) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r7) io_uring_setup(0x18e5, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000100)='pagemap\x00') pread64(r9, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) recvmsg(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/4125, 0x101d}], 0x1}, 0x40002022) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r2, @ANYBLOB="00000000000000005c001280110001006272696467655f736c6176650000000044000580050005000000000005"], 0x7c}}, 0x24000004) 2m1.799950626s ago: executing program 2 (id=352): write$cgroup_int(0xffffffffffffffff, &(0x7f0000000100)=0x8000000000000000, 0x12) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) socket$kcm(0x15, 0x5, 0x0) socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b000000000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x94) socket$kcm(0x2, 0x1, 0x0) socket$kcm(0x29, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x1e, 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x1ff, 0x4, 0x0, 0x4, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_icmp(0xa, 0x2, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x2, 0x200000000000001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xf8}, 0x2000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'dummy0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 2m1.001115388s ago: executing program 2 (id=353): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x1ff, 0x8041) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={0x0, 0xf}, 0x10040, 0x0, 0x0, 0x9, 0x3, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) creat(&(0x7f0000000180)='./file0\x00', 0xa) fchmodat(0xffffffffffffff9c, 0x0, 0xffffffd3) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) ioctl$USBDEVFS_ALLOC_STREAMS(r0, 0x8008551c, &(0x7f0000000000)=ANY=[@ANYBLOB]) r1 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x0) fchdir(r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ftruncate(r3, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r3, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) keyctl$describe(0x6, 0x0, &(0x7f0000001000)=""/61, 0x3d) syz_genetlink_get_family_id$wireguard(&(0x7f0000000180), 0xffffffffffffffff) perf_event_open(&(0x7f0000001040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0x4000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x8018, &(0x7f0000000580)=ANY=[@ANYBLOB="6e6f646f74732c646f733178666c6f7070792c6e6f646f74732c646f74732c6e6f646f74732c646f74732c6e6f646f74732c646f74732c00c54cc17944a18ebf14e2b8a9ac6ea496fe7b48b2b2f8cdb92be6a539029275fea026b227a52d8faa1d1088d548ed4aaf1db14670bcdf8437de27498ec07a9c0ab653b718c93d3b8927625ec6b392"], 0x1, 0x2c5, &(0x7f0000000180)="$eJzs3c1OE1EUAOBD/xjZ2LVxMYkbV0R9g8aUhNjEBNOFrmyCLgRjUjbFFY/hM/hExo0+Aytc6BicSymFkAgDU+D7EnIPczrTe6eT3mlzbvr24cetzU8774vvX6IVebQi9uJXcdhOLaW2+S/uRGMmtxcAwE2zsTHqTf9p1toVLmH60i2dzo3HvVE7IpanWz78Ltvh1+vpHQAAAAAAAAAAAFWbrf/PslT/fxDRjca0puyopKyR6v9n/Wf9f1ZNrwGAyzhR/8+tNB73Rivp/u0k9f8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAfQ6K4n5xzl/d/QMAqjc7/zcjYn7+b9TdQQCget3Tc34rpXz+B4Db6bzv/7Mw/wPAbfTq9ZsXvcGgv5HnWcT+3mQ4GZZtmW+mx+V53j3ea38yGbZTPOg/zUvz+ZWIWFsf9J/N5n+kW4phJx4/is5h/jD3/OUgj2+z+y/H5lUPHgAAAAAAAAAAAAAAAAAAABbEat6MtDx/bn1/ufJ/dTXPz86X0dr6oP/kzPX/rXjQurZhAAAAAAAAAAAAAAAAAAAAwI22s/t5a7S9/W6cgp/j+S2LFxR/imIu1Yjqn6tYKk/RpY6TXcNp6VZ+5Htxgb2yOCO1nK6zBbhsrjpop6Fe+DjRWoBRpKBT1xsSAAAAAAAAAAAAAAAAAADcYceLfk/n2nV0CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABq0Iij3//fvaqgU/cYAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgLvhbwAAAP//KgV4eQ==") timerfd_create(0x2, 0x80800) r4 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, &(0x7f0000000140)={0x0, 0x3, "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"}) socket$inet(0x2, 0x4000000000000001, 0x100) 1m45.676289839s ago: executing program 38 (id=353): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x1ff, 0x8041) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={0x0, 0xf}, 0x10040, 0x0, 0x0, 0x9, 0x3, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) creat(&(0x7f0000000180)='./file0\x00', 0xa) fchmodat(0xffffffffffffff9c, 0x0, 0xffffffd3) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) ioctl$USBDEVFS_ALLOC_STREAMS(r0, 0x8008551c, &(0x7f0000000000)=ANY=[@ANYBLOB]) r1 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x0) fchdir(r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ftruncate(r3, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r3, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) keyctl$describe(0x6, 0x0, &(0x7f0000001000)=""/61, 0x3d) syz_genetlink_get_family_id$wireguard(&(0x7f0000000180), 0xffffffffffffffff) perf_event_open(&(0x7f0000001040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0x4000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x8018, &(0x7f0000000580)=ANY=[@ANYBLOB="6e6f646f74732c646f733178666c6f7070792c6e6f646f74732c646f74732c6e6f646f74732c646f74732c6e6f646f74732c646f74732c00c54cc17944a18ebf14e2b8a9ac6ea496fe7b48b2b2f8cdb92be6a539029275fea026b227a52d8faa1d1088d548ed4aaf1db14670bcdf8437de27498ec07a9c0ab653b718c93d3b8927625ec6b392"], 0x1, 0x2c5, &(0x7f0000000180)="$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") timerfd_create(0x2, 0x80800) r4 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, &(0x7f0000000140)={0x0, 0x3, "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"}) socket$inet(0x2, 0x4000000000000001, 0x100) 36.372507992s ago: executing program 9 (id=980): r0 = openat(0xffffffffffffff9c, &(0x7f0000000d80)='./file1\x00', 0x143042, 0x0) r1 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) fallocate(r1, 0x0, 0x0, 0x1001f0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000300)=ANY=[@ANYBLOB="0c000000000000000580"]) 36.372280082s ago: executing program 9 (id=982): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x8000, &(0x7f0000000180)={[{@resuid}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x52e, &(0x7f0000000f00)="$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") rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 36.305590624s ago: executing program 9 (id=985): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x33, 0x0, 0x0) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x4c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 36.289754374s ago: executing program 9 (id=986): syz_mount_image$iso9660(&(0x7f0000000380), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='map=off,iocharset=iso8859-1,session=0x0000000000000023,overriderockperm,uid=', @ANYRESHEX=0x0, @ANYBLOB=',check=strict,cruft,mode=0x0000000000000\x00\x00\x00\x00map=normal,dmode=0x000000000000107b,\x00'], 0x0, 0x567, &(0x7f00000003c0)="$eJzs3V1v09YfwPGfS/snyl+q0JgQqgocyiYVqQQngaCIK885SQ8kdmQ7qL1CFU1RRQoTZdLaG8YN26Ttdvfb5V7E3hHaK5iYbCd9oHlYn7vu+4m2c2If+/yOE/mH0/hEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAWG7FtvOW1I3XWlCDuZXAb2w/7W69Z4Hc3lUM6VfEiv+TTEaupouufr69+kr8vxmZTp9NSyYuMrL5/yuXHl4eH+ttPyTgffntgHta39h8sdTptF8fVSBn0LWLg9fVtGdC3zScmlYm9FW5VLLvzldDVTV1HS6GkW4oN9BO5Adq1r2t8uVyUencot/yahWnrnsLH9wp2HZJPco1tROEvnf3US505029brxa0iZeHbd5EL8RH5tIRdppKLWy2mkXRw0gbpT/J40KoxoV7EIhny8U8qX75fsPbHt8zwL7E7KnxdG9afHvdIRnb+Bwxrr5X+pixJOWLIjq+3ClIoH40hiwvquX/7+8q4f2uzP/97L81e3VU5Lk/+vps+uD8v+AWA70+Njrez9brcuGbMoLWZKOdKQtr/u1sg6y5+2jeoRjPPJHTbR4YiQUX4w0xEmWqO4SJWUpSUlseSrzUpVQlFTFSF20hLIooUSik3eUK4FocSQSXwJRMiuu3BYleSlLWYqiREtOFsWXlnhSk4o4yV5WZDU57kVR1sBjuCKXkkb5gcPI9l6hthSGjJb8j8M79DkbOCofe/kfAAAAAACcW1by6Xt8/T8h15Ja1dS1fdphAQAAAACAI5T85X86Libi2jWxuP4HAAAAAOC8sZJ77CwRycqNtLYiVnK7FB8CAAAAAABwTiR//78eF8kcKDfE2ppThet/AAAAAADOiR9GzrEfNi9af/wpQTBhvWsufGGtJXPzOmsX0u0ufLrHqDplTXZ3khSltBgfd/W0lUkbbU2C+aFbrIyKw9oOwNkK4Lv9BHB5XH6Sm2mbm8tpudxbk/aSrZq6zrl+/WFeHGdyLNIL0TcvV7+VZPg/eo1JKyOrnXbu2avOchLLu3gv79a6EyjumUdxSCxvkvkWknsu+o54IrkRo9tv1pKV1U7b3jn+sXTzsd09vp0c0ud7mUlbzXRnvM3uHn8m7jOfGzT6bhT5Q478vdxK29yavZUWfaIojIqisDOK/sfi8FEUR0VRPGQUAHBaVkZkIUv25N0DnOUOlt1ln9n9vcymbWankhPr+FSfM7o96oxuHzK7/b7nN5AG5di43593ZtVeOvh1YL9hvWDFh/DCm7Wv5cr6xuad1bWl5+3n7ZeFQrFk37Pt+wWZSIbRLcg9AIA+dv7GjtU3//da/PVL2nBv7r434qr6s62vFOTkmbySjizLXHK3QfKNg77/Isju+BrC3Iir1mySJtNfeJkbclX3v+Quh95+C0Pb7o6hePwvBAAAJ2hmRB62Rv8KnzU34rp7dy4ffnW83TZ/wkcCAID/Dh18sLLR91YQmObTfLmcd6J5rQLffawCU6lpZbxIB+6849W0agZ+5Lt+Pa48MRUdqrDVbPpBpKp+oJp+aBaS6QNV96ffQ91wvMi4vY+xXd+LHDdSFRO6qtn6qm7CeR0kG4dN7ZqqcZ3I+J4K/Vbg6pxSodY7GpqK9iJTNXHVU83ANJwgo5749VZDq4oO3cA0Iz/dYa8v41X9oJHsNnfKxxoAgLNifWPzxVKn0359jJW+HWdOfKgAAKBrRJYGAAAAAAAAAAAAAAAAAAAAAABnwEnc/0flZCrx63kqvfemgj4LB2G/lczZCOPsVUaeOt4e97kJwPH6OwAA///f0Erw") mount$bind(&(0x7f0000000200)='.\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000380)='\x00', 0x89901) fchdir(r0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x8000, &(0x7f0000000100)={0x5, 0x8, 0x100000, {r0}}, 0x20) 36.226108315s ago: executing program 9 (id=990): r0 = syz_io_uring_setup(0xefd, 0x0, &(0x7f0000000100), &(0x7f0000000240), &(0x7f0000000280)) io_uring_enter(r0, 0x545, 0xf301, 0x9, 0x0, 0x0) io_uring_enter(r0, 0xd2, 0x4da7, 0xb, 0x0, 0x0) 35.9068185s ago: executing program 9 (id=1003): chdir(&(0x7f0000000080)='./file0\x00') syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 35.90666289s ago: executing program 39 (id=1003): chdir(&(0x7f0000000080)='./file0\x00') syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 30.854375816s ago: executing program 8 (id=1124): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000800000000020000002c0004802800018011000100666c6f775f6f66666c6f616400000000100002800900010073797a30000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x80) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x29, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x500, 0x0, 0x28, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0x0, 0x700}, @generic={0x0, 0x2, "d58838000391"}]}}}}}}, 0xfd6c) 30.694952028s ago: executing program 8 (id=1130): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000020c0)={0x44, r1, 0x1, 0x300, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_LEVEL={0x24, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8}]}]}, 0x44}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r3) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)={0x3c, r4, 0x60b, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}]}, 0x3c}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x34, 0x0, 0x60b, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0xc010}, 0x0) 30.645959079s ago: executing program 8 (id=1133): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, 0x0, 0x0) 30.56313496s ago: executing program 8 (id=1144): syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x12000d0, &(0x7f00000005c0)=ANY=[], 0x1, 0x73a, &(0x7f0000001a00)="$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") munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r0, 0x0, 0x0) 30.479248851s ago: executing program 8 (id=1137): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x20a0, 0x0) 30.358418233s ago: executing program 8 (id=1141): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000800000000020000002c0004802800018011000100666c6f775f6f66666c6f616400000000100002800900010073797a30000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x80) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x29, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x500, 0x0, 0x28, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0x0, 0x700}, @generic={0x0, 0x2, "d58838000391"}]}}}}}}, 0xfd6c) 21.692779213s ago: executing program 1 (id=1344): sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000140)=@in6={0x2, 0x15, 0xe0000000, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 21.592419305s ago: executing program 1 (id=1345): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000009, 0x0, 0x0, 0x0, 0x9, 0x80, 0x0, 0x0, 0x101, 0x0}) ioctl$USBDEVFS_REAPURB(r0, 0x4008550c, 0x0) 20.708352889s ago: executing program 1 (id=1357): socket$nl_netfilter(0x10, 0x3, 0xc) socket$can_raw(0x1d, 0x3, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 20.60192388s ago: executing program 3 (id=1359): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0x4}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x11}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000280)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0xe, 0xf}, {}, {0x7, 0x1}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}}, 0x800) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r9 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r9, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f00000009c0)="f1", 0x1}], 0x1}, 0x24024024) 20.590157061s ago: executing program 1 (id=1360): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0xec, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x3}}]}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000200)=""/55, 0x37}], 0x1) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r3, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8089}, 0x4000814) 20.534297331s ago: executing program 4 (id=1362): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=@newqdisc={0x88, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0xa, [0x6, 0x0, 0x7, 0x9, 0x0, 0x5, 0x6, 0x1, 0x7, 0xb, 0x6, 0x5, 0x6, 0xa, 0x2, 0xd], 0x0, [0xd, 0x7, 0x4, 0x9, 0x31f5, 0x155, 0x1, 0x0, 0x4, 0x4, 0x1, 0x400, 0xfff, 0xe403, 0x5e4b, 0xfff], [0x7, 0x2, 0x5, 0x2, 0xd, 0x5, 0x0, 0xff48, 0x6, 0x2, 0x401, 0x400, 0x4, 0x6, 0x2, 0x1]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x85c}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=@newqdisc={0x40, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r3, {0x4}, {0xffff, 0xffff}, {0xe, 0x1}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x7, 0x1}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x3, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x0) 19.866837011s ago: executing program 3 (id=1367): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000009, 0x0, 0x0, 0x0, 0x9, 0x80, 0x0, 0x0, 0x101, 0x0}) ioctl$USBDEVFS_REAPURB(r0, 0x4008550c, 0x0) 19.745932793s ago: executing program 3 (id=1368): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000020c0)={0x44, r1, 0x1, 0x300, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_LEVEL={0x24, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8}]}]}, 0x44}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r3) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)={0x3c, r4, 0x60b, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}]}, 0x3c}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x34, r7, 0x60b, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0xc010}, 0x0) 19.28856909s ago: executing program 4 (id=1369): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r2, 0x1, 0xc000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c084}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 19.180457332s ago: executing program 4 (id=1370): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x4810, &(0x7f0000000140)={[{@journal_dev={'journal_dev', 0x3d, 0x8}}, {@nojournal_checksum}, {@nomblk_io_submit}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x1}}, {@nodelalloc}, {@noauto_da_alloc}]}, 0x0, 0x4f8, &(0x7f0000000200)="$eJzs3MtvVNUfAPDvnT6gP+DXik8eyigaG42UlufChRhN2JiYaAwua1sIUsDQmgBppD6CiQsNfwHqzsS/wJVujBoXGrcSXRoTYrqw6MKMOTN3xmlnhj7oA9rPJ5lyzr3nzjnn3nuG85g7AaxbxfQni9gcET9HRHclOjNBsfLPjamJob+mJoayKJVe+iMrp5uemvi4mrR63KY80luIKLyXxY4m+Y5duHhqcHR05Fwl+u618UK+5/TgiZETI2cGDh/ev6/r0MGBA0tSz1Sm6e1vnd257eirV14YOnbltW8/T+Ut5funpyaGZh7Rs8Ac2hq2FKM481zWeWyB736721IXztrT38LqFYZ5S3dtulwd5fbfHW3lWEV3PP9OLRGw5pRKpdKGhq21Bj9ZqpdllQOANSLTpGEd2lr3P/70VBqpTgw1joPXtutHojwCSvW+kb8qe9rLI9hiT2Vs1LFM+d8TEccm/76aXtF0HgIAYGl9eSSi9OufHanfUX1V9hTivrp0/8/Xhnoi4q6ISH3Hu/P+y70R5bT3R8QDdcekHuXGOfIvzoo39n9+7MoDqcu66Hq2kvp/T+drWzP7f7X1i562PLalXP+O7PjJ0ZG9+TnpjY4NKd7f+Na1abWvnvvpo1b5F+v6f+mV8q/2BfNy/N4+a4JueHB88FbrXXX97fKJvdRY/yzas2ooYltEbF/E+6dzdvKJz3a22l+rf1tcPZbqWa5//drRh63fvH0RBZql9EnE45XrPxmz6p905qG+8dNv9I1duPjUyfr1yf5DBwcO9G2M0ZG9fdW7otF3P1x+MQ82DCPmvv7LK13//zW9/2srlz1Z/Xrt2MLzuHzt/ZZjmsXe/53Zy+VwZ77t/OD4+Ln+iM5ssnH7wH/Hnh/smpE+1b93d/P2vzXin+ri9o6ISDfxgxHxUETsysv+cEQ8EhG7b1L/b5599PVWQ8j5XP+5PkNvRar/8IKuf6vAM99HNN/VdurrLxoy/qA4z/qn67+/HOrNtwwPjs95Sm5W0vrALZ9AAAAAuAPsiojNkRX25HOcm6NQ2LMnYlNtBmVs/MnjZ988M1x5RqAnOgrVma7uuvnQ/nxuOMXTUQN18bR/X3neuFQqlbpSPI3fR7esbtVh3dvUov0nv/neP6x9C1pHa/VEG3BHWvw6+tJ/IQNYWUvwPRrgDqX9w/o17/a/XE/BAaumWfu/FHFjFYoCrLBm7f+VVSgHsPKM/2H90v5h/dL+YV2a10PyiwhsPTp7S11eWfvyZNo6UIib/wpAT0R1S+ULjm1znJ9fChFLU8K2Ja1p14wyF5qm2RgpUP2NlcXmFYU507Qv4IcYVjZQuD2KUQlsiIg57t7aZbpUDVxc7oKVb45PV+tzCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYKn8GwAA//86I8nH") r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000480), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) write$nci(r0, &(0x7f0000000880)=ANY=[@ANYBLOB="4005013a"], 0x4) 17.523205736s ago: executing program 4 (id=1371): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'gretap0\x00'}) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) 17.520363816s ago: executing program 3 (id=1372): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000100)={[{@nogrpid}, {@init_itable_val={'init_itable', 0x3d, 0x32c}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@debug}, {@nombcache}, {@quota}, {@nolazytime}]}, 0x3, 0x447, &(0x7f0000001140)="$eJzs28tvG0UYAPBv7aSlLxKq8ugDCBRExSNp0lJ64AAIJA4gIcGhHE2SVqVug5og0aqCgFA5okrcEUck/gJOcEHACYkr3FGlCuXSwslo7d3Edm23Tuy41L+ftMmMd5yZb3fHntnJBjC0JtIfScTOiPgjIsZq2cYCE7VfN1Yuzf6zcmk2iUrl7b+TarnrK5dm86L5+3bkmZGIwudJ7G9R7+KFi2dK5fL8+Sw/tXT2g6nFCxefO322dGr+1Py5mePHjx6ZfuHYzPM9iTON6/q+jxcO7H393Stvzp648t4v3yV5/E1x9MhEp51PVio9rm6wdtWlk5EBNoSuFGvdNEar/X8sirF28sbitc8G2jigryqVSuWB9ruXK8BdLIlBtwAYjPyLPp3/5tsmDT3uCNderk2A0rhvZFttz0gUsjKjTfPbXpqIiBPL/36dbtGf+xAAAA1+SMc/z7Ya/xWi/r7QvdkaynhE3BcRuyPiWETsiYj7I6plH4yIh7qsv3mR5ObxT+HqugK7Ten478Vsbatx/JeP/mK8mOV2VeMfTU6eLs8fzo7JoRjdmuanO9Tx46u/f9luX/34L93S+vOxYNaOqyNbG98zV1oqbSTmetc+jdg30ir+ZHUlIImIvRGxb511nH762wPt9t06/g56sM5U+Sbiqdr5X46m+HNJ5/XJqXuiPH94Kr8qbvbrb5ffalf/huLvgfT8b295/a/GP57Ur9cudl/H5T+/aDunWe/1vyV5p+G1j0pLS+enI7Ykb9QaXf/6TFO5mbXyafyHDrbu/7tj7Ujsj4j0In44Ih6JiEeztj8WEY9HxMEO8f/8yhPvrz/+/krjn+vq/K8ltkSpXE5LLEdE466GRPHMT983VDreTfzp+T9aTR3KXrmdz78OzWlIbPDwAQAAwP9CISJ2RlKYXE0XCpOTtf/h3xPbC+WFxaVnTi58eG6u9ozAeIwW8jtdY3X3Q6ezaX2en2nKH8nuG39V3FbNT84ulOcGHTwMuR1t+n/qr+KgWwf0nee1YHjp/zC8uuv/W/vWDmDz+f6H4dWi/28bRDuAzdfq+/+TAbQD2HxN/d+yHwwR838YXvo/DC/9H4bS4ra49UPyw5FIIqLHf/mliLv28EbhjmiGRJ8Sg/5kAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6I3/AgAA//9j5uCa") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x80) open_by_handle_at(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0c000000010000000200"], 0x36e5476d) 17.441648558s ago: executing program 1 (id=1373): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x7, 0x0, 0x0, 0x0, 0x1, 0x2408a, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000006, 0x0, @perf_config_ext={0x2000000000000002, 0x800}, 0xa69, 0xd, 0xff, 0x2, 0x2, 0x4, 0x9, 0x0, 0xf, 0x0, 0x1}, 0x0, 0x40000000000, 0xffffffffffffffff, 0x1) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x28011, r0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000016c0), 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'gre0\x00', 0x0}) bind$packet(r4, &(0x7f0000000180)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x3c0, 0x43) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="0201130010061e00cb2f4359b648d5ed0000388dcf66ac141415ef06e63a808a5e5cbd43af9111aa0c520f06"], 0x3000}], 0x1}, 0x0) sendfile(r4, r3, 0x0, 0x80004700) 17.31374345s ago: executing program 3 (id=1376): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000100)=0x1, r1, 0x0, 0x2, 0x4}}, 0x20) 17.193821232s ago: executing program 1 (id=1377): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0x4}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x11}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000280)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0xe, 0xf}, {}, {0x7, 0x1}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}}, 0x800) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r9 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r9, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f00000009c0)="f1", 0x1}], 0x1}, 0x24024024) 17.182773022s ago: executing program 0 (id=1378): ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x80}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000009, 0x0, 0x0, 0x0, 0x9, 0x80, 0x0, 0x0, 0x101, 0x0}) ioctl$USBDEVFS_REAPURB(0xffffffffffffffff, 0x4008550c, 0x0) 17.084403993s ago: executing program 4 (id=1379): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x4, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000003e80)=[{{0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000014c0)="cd5927a8b2a00ee8cc111509a5dcf0343c2c5b667c514bb3055b96ebda11b4c8308aef587ef82686dc7f027c402a00582f1b338d80160b21beef66b139a7061ff65ea9c6ed4de3c272fcce0b257c322f54ca01000000bb318d29a96c5035fd713f02f959dc5e55bd518d2ce967008eb6db0a89b4129c5b692bff14aeaa783a3cb22eb1004d87c97e8c8c587adeff394c43b74f5ba5ce66df35b3f4e7d9d7cbc36a20ec75e5dc96701ef447ee3160e70ad13117e96c171be8f0ba442afef0d073a33d7eb218", 0xc5}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x42054) sendto$inet(r0, &(0x7f0000000040)="17", 0xfffffe75, 0x10008085, 0x0, 0x0) 17.084131803s ago: executing program 0 (id=1380): socket$nl_netfilter(0x10, 0x3, 0xc) socket$can_raw(0x1d, 0x3, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 16.596351931s ago: executing program 3 (id=1381): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) bind$netlink(r1, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r2, 0x1, 0xc000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c084}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 15.226193811s ago: executing program 0 (id=1382): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000020c0)={0x44, r1, 0x1, 0x300, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_LEVEL={0x24, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8}]}]}, 0x44}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r3) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)={0x3c, r4, 0x60b, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}]}, 0x3c}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r6) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x34, r7, 0x60b, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0xc010}, 0x0) 14.161559037s ago: executing program 40 (id=1141): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000800000000020000002c0004802800018011000100666c6f775f6f66666c6f616400000000100002800900010073797a30000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x80) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x29, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x500, 0x0, 0x28, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0x0, 0x700}, @generic={0x0, 0x2, "d58838000391"}]}}}}}}, 0xfd6c) 13.190555842s ago: executing program 4 (id=1384): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000000c0)={{0xeb9f, 0x2, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}, {0x2}}, 0x0, 0x1a, 0x0, 0x2}, 0x28) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r1}, 0x94) r4 = socket$netlink(0x10, 0x3, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x10, 0x10, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffff8000, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@generic={0x0, 0x7, 0x7, 0x3, 0x6}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000540)='GPL\x00', 0x8, 0x60, &(0x7f0000000580)=""/96, 0x41000, 0x1, '\x00', r1, @fallback=0x32, r2, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, r3, 0x9, 0x0, &(0x7f0000000740)=[{0x3, 0x2, 0x9, 0xc}, {0x3, 0x1, 0xa}, {0x4, 0x4, 0x0, 0x2}, {0x1, 0x4, 0x3, 0x1}, {0x2, 0x5, 0x8, 0x1}, {0x2, 0x1, 0xd, 0x9}, {0x0, 0x5, 0x10, 0x7}, {0x2, 0x4, 0x6, 0x5}, {0x0, 0x1, 0x10, 0xa}], 0x10, 0xb0}, 0x94) tee(r0, r5, 0x3, 0x6) ioctl$XFS_IOC_GETBMAPX(r3, 0xc0205838, 0x0) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r7) sendmsg$nl_route(r7, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r6, 0x1, 0x100, 0x25dfdbfd, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r3, r1, 0x25, 0x8, @void}, 0x10) 9.95477297s ago: executing program 0 (id=1385): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c0000000206050800000000000000000000000005000400000000000900020073797a30000000001400078008001340000000000800064000000000050005000000000005000100060000000d"], 0x5c}}, 0x0) 6.101200888s ago: executing program 0 (id=1386): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000100)={[{@nogrpid}, {@init_itable_val={'init_itable', 0x3d, 0x32c}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@debug}, {@nombcache}, {@quota}, {@nolazytime}]}, 0x3, 0x447, &(0x7f0000001140)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x80) open_by_handle_at(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0c000000010000000200"], 0x36e5476d) 3.009282015s ago: executing program 0 (id=1387): syz_init_net_socket$x25(0x9, 0x5, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7f, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x0, 0x20002f7}) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000340)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.146239733s ago: executing program 41 (id=1377): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0x4}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x11}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000280)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0xe, 0xf}, {}, {0x7, 0x1}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}}, 0x800) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r9 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r9, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f00000009c0)="f1", 0x1}], 0x1}, 0x24024024) 0s ago: executing program 42 (id=1381): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) bind$netlink(r1, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r2, 0x1, 0xc000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c084}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) kernel console output (not intermixed with test programs): 1782551152: ext4_iget_extra_inode:5180: inode 15 [ 254.164312][ T6996] loop8: lost filesystem error report for type 5 error -117 [ 254.174751][ T28] audit: type=1400 audit(1782551152.107:360): avc: denied { write } for pid=7052 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 254.252616][ T7030] sg_write: data in/out 451548/226 bytes for SCSI command 0x0-- guessing data in; [ 254.252616][ T7030] program syz.3.423 not setting count and/or reply_len properly [ 254.283533][ T6996] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 254.400611][ T5882] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 254.428520][ T28] audit: type=1400 audit(1782551152.357:361): avc: denied { write } for pid=7055 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 254.503943][ T28] audit: type=1400 audit(1782551152.437:362): avc: denied { write } for pid=7066 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 254.691098][ T4402] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.767208][ T7078] loop4: detected capacity change from 0 to 512 [ 254.798046][ T7078] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 254.816631][ T7078] EXT4-fs error (device loop4): ext4_iget_extra_inode:5180: inode #15: comm syz.4.425: corrupted in-inode xattr: e_value size too large [ 254.831933][ T7089] netlink: 'syz.8.427': attribute type 1 has an invalid length. [ 254.836313][ T7078] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 254.850933][ T7078] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.425: couldn't read orphan inode 15 (err -117) [ 254.860442][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 254.860465][ C1] EXT4-fs (loop4): initial error at time 1782551152: ext4_iget_extra_inode:5180: inode 15 [ 254.860498][ C1] EXT4-fs (loop4): last error at time 1782551152: ext4_iget_extra_inode:5180: inode 15 [ 254.863287][ T7089] netlink: 4 bytes leftover after parsing attributes in process `syz.8.427'. [ 254.872715][ T28] audit: type=1400 audit(1782551152.787:363): avc: denied { write } for pid=7073 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 254.968985][ T7078] loop4: lost filesystem error report for type 5 error -117 [ 254.970471][ T7078] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 255.032430][ T7071] loop9: detected capacity change from 0 to 512 [ 255.062768][ T7076] loop3: detected capacity change from 0 to 512 [ 255.079092][ T28] audit: type=1400 audit(1782551152.937:364): avc: denied { write } for pid=7092 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 255.108787][ T7089] netlink: 8 bytes leftover after parsing attributes in process `syz.8.427'. [ 255.213336][ T7099] loop8: detected capacity change from 0 to 1024 [ 255.237183][ T7099] EXT4-fs: Ignoring removed nomblk_io_submit option [ 255.257043][ T7071] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -2 [ 255.274116][ T7071] EXT4-fs error (device loop9): ext4_iget_extra_inode:5180: inode #15: comm syz.9.426: corrupted in-inode xattr: e_value size too large [ 255.301652][ T7099] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 255.328186][ T28] audit: type=1400 audit(1782551153.257:365): avc: denied { write } for pid=7095 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 255.356759][ T7071] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 255.365084][ T7071] EXT4-fs error (device loop9): ext4_orphan_get:1404: comm syz.9.426: couldn't read orphan inode 15 (err -117) [ 255.375972][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 255.376253][ C1] EXT4-fs (loop9): initial error at time 1782551153: ext4_iget_extra_inode:5180: inode 15 [ 255.376483][ C1] EXT4-fs (loop9): last error at time 1782551153: ext4_iget_extra_inode:5180: inode 15 [ 255.435663][ T7099] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 255.452018][ T7076] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 255.470668][ T28] audit: type=1400 audit(1782551153.317:366): avc: denied { write } for pid=7112 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 255.492630][ T7071] loop9: lost filesystem error report for type 5 error -117 [ 255.501602][ T7076] EXT4-fs error (device loop3): ext4_iget_extra_inode:5180: inode #15: comm syz.3.424: corrupted in-inode xattr: e_value size too large [ 255.525800][ T3294] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.539797][ T7076] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 255.543034][ T7076] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.424: couldn't read orphan inode 15 (err -117) [ 255.554395][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 255.554634][ C1] EXT4-fs (loop3): initial error at time 1782551153: ext4_iget_extra_inode:5180: inode 15 [ 255.555555][ C1] EXT4-fs (loop3): last error at time 1782551153: ext4_iget_extra_inode:5180: inode 15 [ 255.635353][ T7071] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 255.651626][ T7099] sg_write: data in/out 451548/226 bytes for SCSI command 0x0-- guessing data in; [ 255.651626][ T7099] program syz.8.427 not setting count and/or reply_len properly [ 255.663613][ T7076] loop3: lost filesystem error report for type 5 error -117 [ 255.759630][ T7076] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 255.842597][ T28] audit: type=1400 audit(1782551153.777:367): avc: denied { write } for pid=7115 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 255.906957][ T4402] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 256.137523][ T28] audit: type=1400 audit(1782551153.917:368): avc: denied { write } for pid=7130 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 256.163674][ T5873] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.519818][ T7140] loop4: detected capacity change from 0 to 512 [ 256.813729][ T5882] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.154798][ T7176] loop8: detected capacity change from 0 to 512 [ 257.204359][ T7176] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -2 [ 257.217992][ T7156] loop3: detected capacity change from 0 to 512 [ 257.232537][ T7176] EXT4-fs error (device loop8): ext4_iget_extra_inode:5180: inode #15: comm syz.8.432: corrupted in-inode xattr: e_value size too large [ 257.310376][ T7176] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 257.317475][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 257.333162][ C1] EXT4-fs (loop8): initial error at time 1782551155: ext4_iget_extra_inode:5180: inode 15 [ 257.343287][ C1] EXT4-fs (loop8): last error at time 1782551155: ext4_iget_extra_inode:5180: inode 15 [ 257.356952][ T7176] EXT4-fs error (device loop8): ext4_orphan_get:1404: comm syz.8.432: couldn't read orphan inode 15 (err -117) [ 257.396546][ T7176] loop8: lost filesystem error report for type 5 error -117 [ 257.397147][ T7176] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 257.473304][ T7156] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 257.574474][ T7156] EXT4-fs error (device loop3): ext4_iget_extra_inode:5180: inode #15: comm syz.3.431: corrupted in-inode xattr: e_value size too large [ 257.626851][ T7156] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 257.631065][ T7156] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.431: couldn't read orphan inode 15 (err -117) [ 257.643276][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 257.643704][ C0] EXT4-fs (loop3): initial error at time 1782551155: ext4_iget_extra_inode:5180: inode 15 [ 257.644233][ C0] EXT4-fs (loop3): last error at time 1782551155: ext4_iget_extra_inode:5180: inode 15 [ 257.727053][ T7156] loop3: lost filesystem error report for type 5 error -117 [ 257.734326][ T7156] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 257.739936][ T7189] netlink: 'syz.9.430': attribute type 2 has an invalid length. [ 257.835225][ T4402] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.885111][ T7189] netlink: 'syz.9.430': attribute type 8 has an invalid length. [ 257.963079][ T7189] netlink: 'syz.9.430': attribute type 9 has an invalid length. [ 258.023538][ T7189] netlink: 'syz.9.430': attribute type 10 has an invalid length. [ 258.030193][ T7196] loop8: detected capacity change from 0 to 512 [ 258.040537][ T7196] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -2 [ 258.053965][ T7196] EXT4-fs error (device loop8): ext4_iget_extra_inode:5180: inode #15: comm syz.8.433: corrupted in-inode xattr: e_value size too large [ 258.077517][ T7196] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 258.079116][ T7196] EXT4-fs error (device loop8): ext4_orphan_get:1404: comm syz.8.433: couldn't read orphan inode 15 (err -117) [ 258.088481][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 258.088510][ C1] EXT4-fs (loop8): initial error at time 1782551156: ext4_iget_extra_inode:5180: inode 15 [ 258.088543][ C1] EXT4-fs (loop8): last error at time 1782551156: ext4_iget_extra_inode:5180: inode 15 [ 258.169103][ T5882] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.188981][ T7196] loop8: lost filesystem error report for type 5 error -117 [ 258.189538][ T7196] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 258.366482][ T7205] loop3: detected capacity change from 0 to 512 [ 258.410050][ T7205] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 258.429155][ T7205] EXT4-fs error (device loop3): ext4_iget_extra_inode:5180: inode #15: comm syz.3.434: corrupted in-inode xattr: e_value size too large [ 258.467618][ T7205] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 258.477494][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 258.490261][ T7205] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.434: couldn't read orphan inode 15 (err -117) [ 258.493250][ C0] EXT4-fs (loop3): initial error at time 1782551156: ext4_iget_extra_inode:5180: inode 15 [ 258.514939][ C0] EXT4-fs (loop3): last error at time 1782551156: ext4_iget_extra_inode:5180: inode 15 [ 258.544041][ T4402] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.566372][ T7205] loop3: lost filesystem error report for type 5 error -117 [ 258.566887][ T7205] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 258.701070][ T7204] loop0: detected capacity change from 0 to 512 [ 258.748147][ T7208] loop4: detected capacity change from 0 to 512 [ 258.822818][ T7204] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 258.851341][ T7204] EXT4-fs error (device loop0): ext4_iget_extra_inode:5180: inode #15: comm syz.0.435: corrupted in-inode xattr: e_value size too large [ 258.969188][ T7204] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 258.977475][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 258.993117][ C1] EXT4-fs (loop0): initial error at time 1782551156: ext4_iget_extra_inode:5180: inode 15 [ 259.003100][ C1] EXT4-fs (loop0): last error at time 1782551156: ext4_iget_extra_inode:5180: inode 15 [ 259.051042][ T7204] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.435: couldn't read orphan inode 15 (err -117) [ 259.069267][ T7204] loop0: lost filesystem error report for type 5 error -117 [ 259.078385][ T5882] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.111997][ T7208] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 259.166338][ T7208] EXT4-fs error (device loop4): ext4_iget_extra_inode:5180: inode #15: comm syz.4.436: corrupted in-inode xattr: e_value size too large [ 259.196028][ T7204] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 259.217273][ T7208] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 259.228205][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 259.247224][ C0] EXT4-fs (loop4): initial error at time 1782551157: ext4_iget_extra_inode:5180: inode 15 [ 259.258794][ C0] EXT4-fs (loop4): last error at time 1782551157: ext4_iget_extra_inode:5180: inode 15 [ 259.304094][ T7208] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.436: couldn't read orphan inode 15 (err -117) [ 259.332609][ T7208] loop4: lost filesystem error report for type 5 error -117 [ 259.345510][ T7208] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 259.643237][ T6502] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.859296][ T3294] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.090848][ T7227] netlink: 20 bytes leftover after parsing attributes in process `syz.0.440'. [ 260.115584][ T7227] loop0: detected capacity change from 0 to 1024 [ 260.136371][ T7227] EXT4-fs: Ignoring removed nomblk_io_submit option [ 260.269790][ T7227] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 260.299316][ T7227] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 260.530072][ T7238] netlink: 'syz.3.443': attribute type 1 has an invalid length. [ 260.560567][ T7227] sg_write: data in/out 451548/226 bytes for SCSI command 0x0-- guessing data in; [ 260.560567][ T7227] program syz.0.440 not setting count and/or reply_len properly [ 260.695484][ T7238] netlink: 4 bytes leftover after parsing attributes in process `syz.3.443'. [ 260.765139][ T7235] netlink: 28 bytes leftover after parsing attributes in process `syz.3.443'. [ 260.791087][ T7238] loop3: detected capacity change from 0 to 1024 [ 260.802327][ T7238] EXT4-fs: Ignoring removed nomblk_io_submit option [ 260.856461][ T6502] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 260.898828][ T7238] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 260.911556][ T7238] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 261.206353][ T7247] loop0: detected capacity change from 0 to 1024 [ 261.257282][ T7247] EXT4-fs: Ignoring removed nomblk_io_submit option [ 262.105843][ T7249] netlink: 48 bytes leftover after parsing attributes in process `syz.4.445'. [ 262.335819][ T5882] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 262.351661][ T7247] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 262.369703][ T7247] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 262.617756][ T7243] sg_write: data in/out 451548/226 bytes for SCSI command 0x0-- guessing data in; [ 262.617756][ T7243] program syz.0.444 not setting count and/or reply_len properly [ 262.830078][ T6502] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 263.102504][ T7263] loop0: detected capacity change from 0 to 1024 [ 263.115117][ T7260] netlink: 'syz.0.447': attribute type 1 has an invalid length. [ 263.129263][ T7260] netlink: 4 bytes leftover after parsing attributes in process `syz.0.447'. [ 263.156229][ T7264] netlink: 'syz.4.448': attribute type 1 has an invalid length. [ 263.170364][ T7263] EXT4-fs: Ignoring removed nomblk_io_submit option [ 263.255593][ T7264] netlink: 4 bytes leftover after parsing attributes in process `syz.4.448'. [ 263.293132][ T7263] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 263.295651][ T7264] netlink: 28 bytes leftover after parsing attributes in process `syz.4.448'. [ 263.328429][ T7263] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 263.364851][ T7264] loop4: detected capacity change from 0 to 1024 [ 263.376459][ T7264] EXT4-fs: Ignoring removed nomblk_io_submit option [ 263.402609][ T7264] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 263.415195][ T7263] sg_write: data in/out 451548/226 bytes for SCSI command 0x0-- guessing data in; [ 263.415195][ T7263] program syz.0.447 not setting count and/or reply_len properly [ 263.454566][ T7279] netlink: 'syz.9.451': attribute type 1 has an invalid length. [ 263.462558][ T7264] ext4 filesystem being mounted at /108/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 263.477632][ T7279] netlink: 4 bytes leftover after parsing attributes in process `syz.9.451'. [ 263.580378][ T7264] sg_write: data in/out 451548/226 bytes for SCSI command 0x0-- guessing data in; [ 263.580378][ T7264] program syz.4.448 not setting count and/or reply_len properly [ 263.616131][ T7279] loop9: detected capacity change from 0 to 1024 [ 263.628055][ T6502] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 263.642620][ T7279] EXT4-fs: Ignoring removed nomblk_io_submit option [ 263.712145][ T3294] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 263.722117][ T7279] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 263.742235][ T7279] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 263.921289][ T7279] sg_write: data in/out 451548/226 bytes for SCSI command 0x0-- guessing data in; [ 263.921289][ T7279] program syz.9.451 not setting count and/or reply_len properly [ 263.954344][ T7266] loop3: detected capacity change from 0 to 512 [ 264.551702][ T7293] netlink: 48 bytes leftover after parsing attributes in process `syz.8.454'. [ 264.774968][ T5873] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 265.104171][ T7302] netlink: 8 bytes leftover after parsing attributes in process `syz.9.455'. [ 265.231119][ T7302] loop9: detected capacity change from 0 to 1024 [ 265.293693][ T7302] EXT4-fs: Ignoring removed nomblk_io_submit option [ 265.418821][ T7303] loop4: detected capacity change from 0 to 512 [ 265.430864][ T7302] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 265.532320][ T7302] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 266.081440][ T7300] sg_write: data in/out 451548/226 bytes for SCSI command 0x0-- guessing data in; [ 266.081440][ T7300] program syz.9.455 not setting count and/or reply_len properly [ 266.327378][ T7314] netlink: 'syz.8.458': attribute type 2 has an invalid length. [ 266.335923][ T7314] netlink: 'syz.8.458': attribute type 8 has an invalid length. [ 266.344755][ T7314] netlink: 'syz.8.458': attribute type 9 has an invalid length. [ 266.353147][ T7314] netlink: 'syz.8.458': attribute type 10 has an invalid length. [ 266.383694][ T7307] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 266.829508][ T5873] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 267.015772][ T7321] netlink: 'syz.4.461': attribute type 1 has an invalid length. [ 267.075831][ T7321] netlink: 4 bytes leftover after parsing attributes in process `syz.4.461'. [ 267.168418][ T7323] loop4: detected capacity change from 0 to 1024 [ 267.221183][ T7323] EXT4-fs: Ignoring removed nomblk_io_submit option [ 267.388879][ T7323] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 267.431200][ T7323] ext4 filesystem being mounted at /111/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 267.536482][ T7328] netlink: 'syz.0.457': attribute type 2 has an invalid length. [ 267.595642][ T7328] netlink: 'syz.0.457': attribute type 8 has an invalid length. [ 267.603569][ T7328] netlink: 'syz.0.457': attribute type 9 has an invalid length. [ 267.611405][ T7328] netlink: 'syz.0.457': attribute type 10 has an invalid length. [ 267.673641][ T7319] sg_write: data in/out 451548/226 bytes for SCSI command 0x0-- guessing data in; [ 267.673641][ T7319] program syz.4.461 not setting count and/or reply_len properly [ 268.098247][ T3294] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 268.177503][ T7342] netlink: 'syz.9.463': attribute type 1 has an invalid length. [ 268.249416][ T7342] netlink: 4 bytes leftover after parsing attributes in process `syz.9.463'. [ 268.310693][ T7344] loop9: detected capacity change from 0 to 1024 [ 268.380572][ T7344] EXT4-fs: Ignoring removed nomblk_io_submit option [ 268.606946][ T7344] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 268.631379][ T7357] netlink: 4 bytes leftover after parsing attributes in process `syz.8.465'. [ 268.701993][ T7344] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 268.851298][ T7360] loop8: detected capacity change from 0 to 1024 [ 268.880616][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 268.880633][ T28] audit: type=1400 audit(1782551166.817:373): avc: denied { write } for pid=7345 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 268.932972][ T28] audit: type=1400 audit(1782551166.867:374): avc: denied { write } for pid=7366 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 268.952606][ T7360] EXT4-fs: Ignoring removed nomblk_io_submit option [ 268.996555][ T7344] sg_write: data in/out 451548/226 bytes for SCSI command 0x0-- guessing data in; [ 268.996555][ T7344] program syz.9.463 not setting count and/or reply_len properly [ 269.116772][ T5873] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 269.236554][ T7360] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 269.249276][ T7360] ext4 filesystem being mounted at /67/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 269.349872][ T7357] sg_write: data in/out 451548/226 bytes for SCSI command 0x0-- guessing data in; [ 269.349872][ T7357] program syz.8.465 not setting count and/or reply_len properly [ 269.472159][ T28] audit: type=1400 audit(1782551167.407:375): avc: denied { write } for pid=7369 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 269.529237][ T4402] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 269.566356][ T28] audit: type=1400 audit(1782551167.487:376): avc: denied { write } for pid=7388 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 270.385834][ T7404] netlink: 48 bytes leftover after parsing attributes in process `syz.8.468'. [ 270.795317][ T28] audit: type=1400 audit(1782551168.727:377): avc: denied { write } for pid=7392 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 270.942204][ T28] audit: type=1400 audit(1782551168.877:378): avc: denied { write } for pid=7411 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 271.185686][ T7418] loop9: detected capacity change from 0 to 512 [ 271.299287][ T7413] netlink: 48 bytes leftover after parsing attributes in process `syz.4.466'. [ 271.379364][ T28] audit: type=1400 audit(1782551169.317:379): avc: denied { write } for pid=7417 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 271.515329][ T28] audit: type=1400 audit(1782551169.367:380): avc: denied { write } for pid=7430 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 271.689743][ T7435] loop8: detected capacity change from 0 to 1024 [ 271.730932][ T7435] EXT4-fs: Ignoring removed nomblk_io_submit option [ 271.774966][ T7435] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 271.841119][ T7435] ext4 filesystem being mounted at /69/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 272.003942][ T7435] sg_write: data in/out 451548/226 bytes for SCSI command 0x0-- guessing data in; [ 272.003942][ T7435] program syz.8.469 not setting count and/or reply_len properly [ 272.105189][ T4402] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 272.673073][ T7443] loop9: detected capacity change from 0 to 1024 [ 272.718071][ T7443] EXT4-fs: Ignoring removed nomblk_io_submit option [ 272.766623][ T7443] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 272.834295][ T7443] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 272.989646][ T7443] sg_write: data in/out 451548/226 bytes for SCSI command 0x0-- guessing data in; [ 272.989646][ T7443] program syz.9.471 not setting count and/or reply_len properly [ 273.064703][ T7439] loop8: detected capacity change from 0 to 1024 [ 273.097519][ T5873] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 273.321263][ T7439] EXT4-fs: Ignoring removed nomblk_io_submit option [ 274.203858][ T7439] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 274.287423][ T7439] ext4 filesystem being mounted at /70/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 274.522976][ T7453] validate_nla: 1 callbacks suppressed [ 274.522998][ T7453] netlink: 'syz.0.472': attribute type 2 has an invalid length. [ 274.719663][ T7453] netlink: 'syz.0.472': attribute type 8 has an invalid length. [ 274.817336][ T7453] netlink: 'syz.0.472': attribute type 9 has an invalid length. [ 274.858999][ T7442] sg_write: data in/out 451548/226 bytes for SCSI command 0x0-- guessing data in; [ 274.858999][ T7442] program syz.8.470 not setting count and/or reply_len properly [ 274.930805][ T7453] netlink: 'syz.0.472': attribute type 10 has an invalid length. [ 275.102173][ T4402] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 275.231212][ T7469] netlink: 48 bytes leftover after parsing attributes in process `syz.9.476'. [ 275.295475][ T7470] netlink: 'syz.8.475': attribute type 1 has an invalid length. [ 275.317171][ T7469] loop9: detected capacity change from 0 to 1024 [ 275.326696][ T7470] netlink: 4 bytes leftover after parsing attributes in process `syz.8.475'. [ 275.347396][ T7469] EXT4-fs: Ignoring removed nomblk_io_submit option [ 275.393782][ T7469] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 275.433174][ T7469] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 275.455322][ T7470] loop8: detected capacity change from 0 to 1024 [ 275.469357][ T7470] EXT4-fs: Ignoring removed nomblk_io_submit option [ 275.528991][ T7470] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 275.548495][ T7469] sg_write: data in/out 451548/226 bytes for SCSI command 0x0-- guessing data in; [ 275.548495][ T7469] program syz.9.476 not setting count and/or reply_len properly [ 275.590434][ T7470] ext4 filesystem being mounted at /71/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 275.677324][ T5873] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 275.902163][ T7479] loop3: detected capacity change from 0 to 512 [ 275.913488][ T4402] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 275.963791][ T7482] netlink: 'syz.9.479': attribute type 1 has an invalid length. [ 275.988360][ T7482] netlink: 4 bytes leftover after parsing attributes in process `syz.9.479'. [ 276.198187][ T7487] loop8: detected capacity change from 0 to 1024 [ 276.230093][ T7482] loop9: detected capacity change from 0 to 1024 [ 276.244416][ T7487] EXT4-fs: Ignoring removed nomblk_io_submit option [ 276.251529][ T7482] EXT4-fs: Ignoring removed nomblk_io_submit option [ 276.302913][ T7487] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 276.319916][ T7482] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 276.337233][ T7487] ext4 filesystem being mounted at /72/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 276.362590][ T7482] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 276.537416][ T7482] sg_write: data in/out 451548/226 bytes for SCSI command 0x0-- guessing data in; [ 276.537416][ T7482] program syz.9.479 not setting count and/or reply_len properly [ 276.754644][ T7487] sg_write: data in/out 451548/226 bytes for SCSI command 0x0-- guessing data in; [ 276.754644][ T7487] program syz.8.480 not setting count and/or reply_len properly [ 276.798144][ T7494] netlink: 'syz.4.481': attribute type 2 has an invalid length. [ 276.817475][ T7494] netlink: 'syz.4.481': attribute type 8 has an invalid length. [ 276.827899][ T7494] netlink: 'syz.4.481': attribute type 9 has an invalid length. [ 276.848042][ T7494] netlink: 'syz.4.481': attribute type 10 has an invalid length. [ 276.967223][ T5873] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 277.286770][ T4402] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 277.849997][ T7509] netlink: 4 bytes leftover after parsing attributes in process `syz.8.484'. [ 277.998688][ T7509] loop8: detected capacity change from 0 to 1024 [ 278.055313][ T7509] EXT4-fs: Ignoring removed nomblk_io_submit option [ 278.109170][ T7509] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 278.134204][ T7509] ext4 filesystem being mounted at /73/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 278.510109][ T4402] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 278.800234][ T7519] loop4: detected capacity change from 0 to 512 [ 278.972242][ T7519] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 279.038132][ T7519] EXT4-fs error (device loop4): ext4_iget_extra_inode:5180: inode #15: comm syz.4.486: corrupted in-inode xattr: e_value size too large [ 279.113016][ T7519] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 279.117469][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 279.133319][ C0] EXT4-fs (loop4): initial error at time 1782551177: ext4_iget_extra_inode:5180: inode 15 [ 279.143658][ C0] EXT4-fs (loop4): last error at time 1782551177: ext4_iget_extra_inode:5180: inode 15 [ 279.156921][ T7519] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.486: couldn't read orphan inode 15 (err -117) [ 279.209413][ T7519] loop4: lost filesystem error report for type 5 error -117 [ 279.218083][ T7519] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 279.407597][ T7512] loop9: detected capacity change from 0 to 512 [ 279.638187][ T3294] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.778378][ T7532] validate_nla: 5 callbacks suppressed [ 279.778396][ T7532] netlink: 'syz.4.489': attribute type 1 has an invalid length. [ 279.813184][ T7532] netlink: 4 bytes leftover after parsing attributes in process `syz.4.489'. [ 279.913665][ T7532] loop4: detected capacity change from 0 to 1024 [ 279.938007][ T7532] EXT4-fs: Ignoring removed nomblk_io_submit option [ 280.015411][ T7532] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 280.051011][ T7532] ext4 filesystem being mounted at /117/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 280.163593][ T7526] loop8: detected capacity change from 0 to 512 [ 280.171860][ T7535] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 280.216071][ T7532] sg_write: data in/out 1719024976/222 bytes for SCSI command 0x2c-- guessing data in; [ 280.216071][ T7532] program syz.4.489 not setting count and/or reply_len properly [ 280.416387][ T3294] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 280.695307][ T7548] netlink: 'syz.4.492': attribute type 1 has an invalid length. [ 280.712119][ T7548] netlink: 4 bytes leftover after parsing attributes in process `syz.4.492'. [ 280.821479][ T7548] loop4: detected capacity change from 0 to 1024 [ 280.841054][ T7547] netlink: 'syz.9.494': attribute type 1 has an invalid length. [ 280.878044][ T7548] EXT4-fs: Ignoring removed nomblk_io_submit option [ 280.891650][ T7547] netlink: 4 bytes leftover after parsing attributes in process `syz.9.494'. [ 280.936660][ T7552] loop9: detected capacity change from 0 to 1024 [ 280.948754][ T7548] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 280.953204][ T7552] EXT4-fs: Ignoring removed nomblk_io_submit option [ 280.976676][ T7548] ext4 filesystem being mounted at /118/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 281.023866][ T7552] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 281.076661][ T7552] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 281.118652][ T7561] netlink: 'syz.0.493': attribute type 2 has an invalid length. [ 281.159617][ T7561] netlink: 'syz.0.493': attribute type 8 has an invalid length. [ 281.169256][ T7561] netlink: 'syz.0.493': attribute type 9 has an invalid length. [ 281.184675][ T7561] netlink: 'syz.0.493': attribute type 10 has an invalid length. [ 281.242435][ T7547] sg_write: data in/out 1719024976/222 bytes for SCSI command 0x2c-- guessing data in; [ 281.242435][ T7547] program syz.9.494 not setting count and/or reply_len properly [ 281.410975][ T3294] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 281.465354][ T5873] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 281.579798][ T7567] loop4: detected capacity change from 0 to 512 [ 281.719739][ T7567] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 281.783338][ T7567] EXT4-fs error (device loop4): ext4_iget_extra_inode:5180: inode #15: comm syz.4.497: corrupted in-inode xattr: e_value size too large [ 281.812342][ T7575] netlink: 'syz.9.499': attribute type 1 has an invalid length. [ 281.838942][ T7575] netlink: 4 bytes leftover after parsing attributes in process `syz.9.499'. [ 281.848929][ T7567] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 281.856321][ T7567] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.497: couldn't read orphan inode 15 (err -117) [ 281.857745][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 281.857791][ C1] EXT4-fs (loop4): initial error at time 1782551179: ext4_iget_extra_inode:5180: inode 15 [ 281.858030][ C1] EXT4-fs (loop4): last error at time 1782551179: ext4_iget_extra_inode:5180: inode 15 [ 281.868072][ T7565] loop8: detected capacity change from 0 to 512 [ 281.882474][ T7567] loop4: lost filesystem error report for type 5 error -117 [ 281.942322][ T7575] loop9: detected capacity change from 0 to 1024 [ 281.964726][ T7567] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 282.012861][ T7575] EXT4-fs: Ignoring removed nomblk_io_submit option [ 282.071293][ T7575] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 282.117540][ T7575] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 282.161037][ T7565] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -2 [ 282.192564][ T7565] EXT4-fs error (device loop8): ext4_iget_extra_inode:5180: inode #15: comm syz.8.496: corrupted in-inode xattr: e_value size too large [ 282.209487][ T7565] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 282.215270][ T7565] EXT4-fs error (device loop8): ext4_orphan_get:1404: comm syz.8.496: couldn't read orphan inode 15 (err -117) [ 282.226181][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 282.226311][ C0] EXT4-fs (loop8): initial error at time 1782551180: ext4_iget_extra_inode:5180: inode 15 [ 282.226991][ C0] EXT4-fs (loop8): last error at time 1782551180: ext4_iget_extra_inode:5180: inode 15 [ 282.227369][ T7575] sg_write: data in/out 451548/226 bytes for SCSI command 0x0-- guessing data in; [ 282.227369][ T7575] program syz.9.499 not setting count and/or reply_len properly [ 282.308946][ T7558] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 282.309036][ T7565] loop8: lost filesystem error report for type 5 error -117 [ 282.329718][ T5873] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 282.364265][ T7583] netlink: 8 bytes leftover after parsing attributes in process `syz.3.501'. [ 282.382086][ T3294] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.393213][ T7565] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 282.570336][ T7596] netlink: 'syz.3.504': attribute type 1 has an invalid length. [ 282.640529][ T7596] netlink: 4 bytes leftover after parsing attributes in process `syz.3.504'. [ 282.651652][ T7592] loop9: detected capacity change from 0 to 512 [ 282.690166][ T4402] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.726689][ T7596] loop3: detected capacity change from 0 to 1024 [ 282.764556][ T7596] EXT4-fs: Ignoring removed nomblk_io_submit option [ 282.824146][ T7592] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -2 [ 282.862916][ T7596] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 282.883306][ T7592] EXT4-fs error (device loop9): ext4_iget_extra_inode:5180: inode #15: comm syz.9.502: corrupted in-inode xattr: e_value size too large [ 282.905420][ T7598] loop4: detected capacity change from 0 to 512 [ 282.918123][ T7596] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 282.946520][ T7592] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 282.951356][ T7598] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 282.961134][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 282.961546][ C0] EXT4-fs (loop9): initial error at time 1782551180: ext4_iget_extra_inode:5180: inode 15 [ 282.962395][ C0] EXT4-fs (loop9): last error at time 1782551180: ext4_iget_extra_inode:5180: inode 15 [ 283.026799][ T7592] EXT4-fs error (device loop9): ext4_orphan_get:1404: comm syz.9.502: couldn't read orphan inode 15 (err -117) [ 283.057599][ T7598] EXT4-fs error (device loop4): ext4_iget_extra_inode:5180: inode #15: comm syz.4.505: corrupted in-inode xattr: e_value size too large [ 283.089902][ T7592] loop9: lost filesystem error report for type 5 error -117 [ 283.095063][ T7598] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 283.139188][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 283.147874][ T7592] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 283.154047][ C0] EXT4-fs (loop4): initial error at time 1782551181: ext4_iget_extra_inode:5180 [ 283.176526][ T7598] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.505: couldn't read orphan inode 15 (err -117) [ 283.177458][ C0] : inode 15 [ 283.177474][ C0] EXT4-fs (loop4): last error at time 1782551181: ext4_iget_extra_inode:5180: inode 15 [ 283.178158][ T7609] netlink: 'syz.8.507': attribute type 1 has an invalid length. [ 283.178176][ T7609] netlink: 4 bytes leftover after parsing attributes in process `syz.8.507'. [ 283.243881][ T7598] loop4: lost filesystem error report for type 5 error -117 [ 283.250493][ T7593] sg_write: data in/out 1719024976/222 bytes for SCSI command 0x2c-- guessing data in; [ 283.250493][ T7593] program syz.3.504 not setting count and/or reply_len properly [ 283.364384][ T5882] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 283.379815][ T7598] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 283.573311][ T5873] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.464083][ T3294] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.736286][ T7629] loop4: detected capacity change from 0 to 512 [ 284.753071][ T7629] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 284.779141][ T7629] EXT4-fs error (device loop4): ext4_iget_extra_inode:5180: inode #15: comm syz.4.510: corrupted in-inode xattr: e_value size too large [ 284.827916][ T7629] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 284.828068][ T7629] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.510: couldn't read orphan inode 15 (err -117) [ 284.849201][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 284.849223][ C0] EXT4-fs (loop4): initial error at time 1782551182: ext4_iget_extra_inode:5180: inode 15 [ 284.849251][ C0] EXT4-fs (loop4): last error at time 1782551182: ext4_iget_extra_inode:5180: inode 15 [ 285.150321][ T7629] loop4: lost filesystem error report for type 5 error -117 [ 285.152309][ T7629] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 285.176946][ T7609] loop8: detected capacity change from 0 to 1024 [ 286.027536][ T7635] validate_nla: 4 callbacks suppressed [ 286.027557][ T7635] netlink: 'syz.9.513': attribute type 2 has an invalid length. [ 286.040829][ T7635] netlink: 'syz.9.513': attribute type 8 has an invalid length. [ 286.128172][ T7635] netlink: 'syz.9.513': attribute type 9 has an invalid length. [ 286.135941][ T7635] netlink: 'syz.9.513': attribute type 10 has an invalid length. [ 286.246345][ T7640] netlink: 'syz.3.514': attribute type 2 has an invalid length. [ 286.255412][ T7640] netlink: 'syz.3.514': attribute type 8 has an invalid length. [ 286.267190][ T7640] netlink: 'syz.3.514': attribute type 9 has an invalid length. [ 286.280790][ T7640] netlink: 'syz.3.514': attribute type 10 has an invalid length. [ 286.457010][ T7649] netlink: 'syz.3.516': attribute type 1 has an invalid length. [ 286.524926][ T7649] netlink: 4 bytes leftover after parsing attributes in process `syz.3.516'. [ 286.578800][ T3294] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.609719][ T7654] loop3: detected capacity change from 0 to 1024 [ 286.633787][ T7654] EXT4-fs: Ignoring removed nomblk_io_submit option [ 286.710176][ T7654] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 286.732591][ T7654] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 286.853171][ T7646] sg_write: data in/out 451548/226 bytes for SCSI command 0x0-- guessing data in; [ 286.853171][ T7646] program syz.3.516 not setting count and/or reply_len properly [ 286.897745][ T7652] loop0: detected capacity change from 0 to 512 [ 287.085664][ T7663] netlink: 'syz.4.518': attribute type 1 has an invalid length. [ 287.105495][ T7660] loop8: detected capacity change from 0 to 512 [ 287.129246][ T7663] netlink: 4 bytes leftover after parsing attributes in process `syz.4.518'. [ 287.164162][ T7663] netlink: 28 bytes leftover after parsing attributes in process `syz.4.518'. [ 287.182386][ T7652] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 287.196283][ T7652] EXT4-fs error (device loop0): ext4_iget_extra_inode:5180: inode #15: comm syz.0.517: corrupted in-inode xattr: e_value size too large [ 287.211749][ T7652] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 287.217489][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 287.235937][ C1] EXT4-fs (loop0): initial error at time 1782551185: ext4_iget_extra_inode:5180: inode 15 [ 287.237643][ T7660] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -2 [ 287.237853][ T7660] EXT4-fs error (device loop8): ext4_iget_extra_inode:5180: inode #15: comm syz.8.519: corrupted in-inode xattr: e_value size too large [ 287.238349][ T7660] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 287.248626][ C1] EXT4-fs (loop0): last error at time 1782551185: ext4_iget_extra_inode:5180: inode 15 [ 287.302040][ T7652] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.517: couldn't read orphan inode 15 (err -117) [ 287.317582][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 287.331787][ C0] EXT4-fs (loop8): initial error at time 1782551185: ext4_iget_extra_inode:5180: inode 15 [ 287.343180][ C0] EXT4-fs (loop8): last error at time 1782551185: ext4_iget_extra_inode:5180: inode 15 [ 287.344405][ T7652] loop0: lost filesystem error report for type 5 error -117 [ 287.362447][ T7660] EXT4-fs error (device loop8): ext4_orphan_get:1404: comm syz.8.519: couldn't read orphan inode 15 (err -117) [ 287.399420][ T7660] loop8: lost filesystem error report for type 5 error -117 [ 287.561953][ T7666] loop9: detected capacity change from 0 to 512 [ 287.584766][ T7671] loop3: detected capacity change from 0 to 1024 [ 287.612837][ T7671] EXT4-fs: Ignoring removed nomblk_io_submit option [ 287.647736][ T7671] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 287.697879][ T7666] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -2 [ 287.707235][ T7669] sg_write: data in/out 451548/226 bytes for SCSI command 0x0-- guessing data in; [ 287.707235][ T7669] program syz.3.521 not setting count and/or reply_len properly [ 287.707696][ T7666] EXT4-fs error (device loop9): ext4_iget_extra_inode:5180: inode #15: comm syz.9.520: corrupted in-inode xattr: e_value size too large [ 287.754546][ T7666] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 287.758089][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 287.776379][ C1] EXT4-fs (loop9): initial error at time 1782551185: ext4_iget_extra_inode:5180: inode 15 [ 287.788580][ C1] EXT4-fs (loop9): last error at time 1782551185: ext4_iget_extra_inode:5180: inode 15 [ 287.900548][ T7666] EXT4-fs error (device loop9): ext4_orphan_get:1404: comm syz.9.520: couldn't read orphan inode 15 (err -117) [ 287.970467][ T7666] loop9: lost filesystem error report for type 5 error -117 [ 288.586065][ T7686] netlink: 48 bytes leftover after parsing attributes in process `syz.8.523'. [ 289.232850][ T7694] loop3: detected capacity change from 0 to 512 [ 289.251914][ T5873] EXT4-fs unmount: 8 callbacks suppressed [ 289.251934][ T5873] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.364537][ T7662] loop4: detected capacity change from 0 to 1024 [ 289.437053][ T7694] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 289.468464][ T7662] EXT4-fs: Ignoring removed nomblk_io_submit option [ 289.504582][ T7694] EXT4-fs error (device loop3): ext4_iget_extra_inode:5180: inode #15: comm syz.3.524: corrupted in-inode xattr: e_value size too large [ 289.540637][ T7699] loop0: detected capacity change from 0 to 512 [ 289.548988][ T7694] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 289.556104][ T7694] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.524: couldn't read orphan inode 15 (err -117) [ 289.567604][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 289.567837][ C1] EXT4-fs (loop3): initial error at time 1782551187: ext4_iget_extra_inode:5180: inode 15 [ 289.568359][ C1] EXT4-fs (loop3): last error at time 1782551187: ext4_iget_extra_inode:5180: inode 15 [ 289.726873][ T7694] loop3: lost filesystem error report for type 5 error -117 [ 289.760912][ T7694] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 289.808144][ T7706] netlink: 4 bytes leftover after parsing attributes in process `syz.8.527'. [ 289.985015][ T7706] loop8: detected capacity change from 0 to 1024 [ 290.017929][ T7662] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 290.047789][ T7662] ext4 filesystem being mounted at /123/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 290.088052][ T7706] EXT4-fs: Ignoring removed nomblk_io_submit option [ 290.111336][ T28] audit: type=1400 audit(1782551188.047:381): avc: denied { ioctl } for pid=7713 comm="syz.0.529" path="socket:[16139]" dev="sockfs" ino=16139 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 290.150469][ T7706] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 290.163468][ T7706] ext4 filesystem being mounted at /83/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 290.181402][ T7703] sg_write: data in/out 451548/226 bytes for SCSI command 0x0-- guessing data in; [ 290.181402][ T7703] program syz.8.527 not setting count and/or reply_len properly [ 290.229967][ T3294] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 290.268782][ T5882] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.306930][ T7723] syzkaller0: entered promiscuous mode [ 290.330757][ T7723] syzkaller0: entered allmulticast mode [ 290.341431][ T28] audit: type=1400 audit(1782551188.267:382): avc: denied { name_bind } for pid=7724 comm="syz.3.532" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 290.386785][ T7729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 290.397623][ T4402] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 290.406712][ T28] audit: type=1400 audit(1782551188.317:383): avc: denied { read write } for pid=7728 comm="syz.3.533" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 290.419005][ T7729] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 290.431871][ T28] audit: type=1400 audit(1782551188.317:384): avc: denied { open } for pid=7728 comm="syz.3.533" path="/dev/raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 290.463325][ T28] audit: type=1400 audit(1782551188.317:385): avc: denied { ioctl } for pid=7728 comm="syz.3.533" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 290.494645][ T7727] loop9: detected capacity change from 0 to 512 [ 290.556059][ T28] audit: type=1400 audit(1782551188.487:386): avc: denied { mmap_zero } for pid=7730 comm="syz.8.534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 290.600813][ T7733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 290.636424][ T7733] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 290.784458][ T28] audit: type=1400 audit(1782551188.717:387): avc: denied { setopt } for pid=7738 comm="syz.0.538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 290.812057][ T3374] IPVS: starting estimator thread 0... [ 290.831514][ T28] audit: type=1400 audit(1782551188.757:388): avc: denied { ioctl } for pid=7736 comm="syz.4.537" path="socket:[16647]" dev="sockfs" ino=16647 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 290.867287][ T28] audit: type=1400 audit(1782551188.757:389): avc: denied { write } for pid=7736 comm="syz.4.537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 290.928730][ T7740] IPVS: using max 2448 ests per chain, 122400 per kthread [ 290.963166][ T28] audit: type=1400 audit(1782551188.897:390): avc: denied { firmware_load } for pid=7746 comm="syz.0.541" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 291.047803][ T7750] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 291.055275][ T7750] IPv6: NLM_F_CREATE should be set when creating new route [ 291.206586][ T7756] syzkaller0: entered promiscuous mode [ 291.251175][ T7762] validate_nla: 1 callbacks suppressed [ 291.251192][ T7762] netlink: 'syz.0.548': attribute type 1 has an invalid length. [ 291.263875][ T7756] syzkaller0: entered allmulticast mode [ 291.327748][ T7762] 8021q: adding VLAN 0 to HW filter on device bond1 [ 291.666615][ T7791] syzkaller1: entered promiscuous mode [ 291.686615][ T7791] syzkaller1: entered allmulticast mode [ 291.781673][ T7802] syz_tun: entered allmulticast mode [ 291.811015][ T7801] syz_tun: left allmulticast mode [ 291.890187][ T7810] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 291.905141][ T7811] netlink: 8 bytes leftover after parsing attributes in process `syz.3.568'. [ 291.940893][ T7811] macvlan2: entered allmulticast mode [ 291.957381][ T7811] veth1_vlan: entered allmulticast mode [ 292.041074][ T7815] 9pnet_virtio: no channels available for device syz [ 292.348758][ T7844] syz.8.581 uses obsolete (PF_INET,SOCK_PACKET) [ 292.806325][ T7893] tls_set_device_offload: netdev not found [ 293.049822][ T7914] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.143003][ T7914] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.198484][ T7914] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.284901][ T7914] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.372383][ T30] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.387536][ T30] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.396483][ T30] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.409265][ T30] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.624115][ T7958] loop4: detected capacity change from 0 to 256 [ 293.646214][ T7958] FAT-fs (loop4): codepage cp950 not found [ 293.695201][ T7938] Set syz1 is full, maxelem 65536 reached [ 293.836471][ T7974] loop3: detected capacity change from 0 to 512 [ 293.844663][ T7974] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 293.866326][ T7974] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 293.877736][ T7974] EXT4-fs (loop3): 1 truncate cleaned up [ 293.883850][ T7974] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 293.905009][ T7974] EXT4-fs error (device loop3): ext4_generic_delete_entry:2673: inode #2: block 13: comm syz.3.632: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 293.926969][ T7974] EXT4-fs (loop3): Remounting filesystem read-only [ 293.981306][ T5882] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.020360][ T938] hid-generic 0006:0008:0001.0001: unknown main item tag 0x0 [ 294.028662][ T938] hid-generic 0006:0008:0001.0001: unknown main item tag 0x0 [ 294.036636][ T938] hid-generic 0006:0008:0001.0001: unknown main item tag 0x0 [ 294.046092][ T938] hid-generic 0006:0008:0001.0001: unknown main item tag 0x0 [ 294.059767][ T938] hid-generic 0006:0008:0001.0001: unknown main item tag 0x0 [ 294.069548][ T938] hid-generic 0006:0008:0001.0001: unknown main item tag 0x0 [ 294.077134][ T938] hid-generic 0006:0008:0001.0001: unknown main item tag 0x0 [ 294.085001][ T938] hid-generic 0006:0008:0001.0001: unknown main item tag 0x0 [ 294.096505][ T3391] hid-generic 0006:0008:0001.0002: unknown main item tag 0x0 [ 294.105536][ T3391] hid-generic 0006:0008:0001.0002: unknown main item tag 0x0 [ 294.114251][ T3391] hid-generic 0006:0008:0001.0002: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 294.124751][ T938] hid-generic 0006:0008:0001.0001: hidraw1: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 294.160744][ T7993] fido_id[7993]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 294.176643][ T7992] fido_id[7992]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 294.231856][ T7999] loop4: detected capacity change from 0 to 2048 [ 294.268045][ T7999] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 294.304520][ T3294] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.326871][ T8009] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 294.369075][ T8015] loop4: detected capacity change from 0 to 256 [ 294.412557][ T8015] FAT-fs (loop4): IO charset cp936 not found [ 294.427802][ T8020] loop3: detected capacity change from 0 to 128 [ 294.439432][ T8020] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 294.461256][ T8020] ext4 filesystem being mounted at mnt:[4026533115] supports timestamps until 2038-01-19 (0x7fffffff) [ 294.478971][ T8020] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 294.506415][ T8024] loop4: detected capacity change from 0 to 512 [ 294.526790][ T8027] loop3: detected capacity change from 0 to 256 [ 294.564758][ T8024] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 294.593936][ T8024] ext4 filesystem being mounted at /159/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 294.644371][ T8038] syzkaller1: entered promiscuous mode [ 294.644746][ T3294] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.650098][ T8038] syzkaller1: entered allmulticast mode [ 294.724395][ T8048] loop3: detected capacity change from 0 to 764 [ 294.735295][ T8044] netlink: 84 bytes leftover after parsing attributes in process `syz.8.662'. [ 294.763124][ T8044] netlink: 'syz.8.662': attribute type 1 has an invalid length. [ 294.889376][ T8068] loop3: detected capacity change from 0 to 512 [ 294.889819][ T8067] netlink: 'syz.8.673': attribute type 1 has an invalid length. [ 294.904559][ T8068] EXT4-fs: Ignoring removed nobh option [ 294.921332][ T8068] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 294.937365][ T8070] loop4: detected capacity change from 0 to 1024 [ 294.945167][ T8068] EXT4-fs (loop3): 1 truncate cleaned up [ 294.951307][ T8070] EXT4-fs: Ignoring removed bh option [ 294.954547][ T8068] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 294.962192][ T8067] 8021q: adding VLAN 0 to HW filter on device bond1 [ 294.996959][ T8070] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 295.015036][ T5882] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.060775][ T3294] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.245150][ T8097] EXT4-fs: Ignoring removed bh option [ 295.279917][ T8097] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 295.311608][ T28] kauditd_printk_skb: 68 callbacks suppressed [ 295.311624][ T28] audit: type=1400 audit(1782551193.247:459): avc: denied { mounton } for pid=8106 comm="syz.9.689" path="/49/file0" dev="loop9" ino=1920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=dir permissive=1 [ 295.315665][ T8097] EXT4-fs warning (device loop8): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 295.317880][ T28] audit: type=1400 audit(1782551193.247:460): avc: denied { write } for pid=8095 comm="syz.8.685" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 295.376072][ T28] audit: type=1400 audit(1782551193.247:461): avc: denied { read write } for pid=8095 comm="syz.8.685" name="file1" dev="loop8" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 295.398868][ T28] audit: type=1400 audit(1782551193.247:462): avc: denied { open } for pid=8095 comm="syz.8.685" path="/116/file1/file1" dev="loop8" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 295.428235][ T28] audit: type=1400 audit(1782551193.367:463): avc: denied { ioctl } for pid=8095 comm="syz.8.685" path="/116/file1/file1" dev="loop8" ino=15 ioctlcmd=0x660b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 295.463445][ T8110] EXT4-fs error (device loop3): ext4_iget_extra_inode:5180: inode #15: comm syz.3.691: corrupted in-inode xattr: invalid ea_ino [ 295.515279][ T8116] EXT4-fs error (device loop4): mb_free_blocks:2049: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 295.537458][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 295.544105][ C0] EXT4-fs (loop4): initial error at time 1782551193: mb_free_blocks:2049: inode 11: block 64 [ 295.554447][ C0] EXT4-fs (loop4): last error at time 1782551193: mb_free_blocks:2049: inode 11: block 64 [ 295.558961][ T8110] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 295.566036][ T8116] EXT4-fs error (device loop4): ext4_do_update_inode:5742: inode #11: comm syz.4.693: corrupted inode contents [ 295.575234][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 295.575271][ C1] EXT4-fs (loop3): initial error at time 1782551193: ext4_iget_extra_inode:5180: inode 15 [ 295.575302][ C1] EXT4-fs (loop3): last error at time 1782551193: ext4_iget_extra_inode:5180: inode 15 [ 295.615419][ T8110] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.691: couldn't read orphan inode 15 (err -117) [ 295.633978][ T4402] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.643635][ T8110] loop3: lost filesystem error report for type 5 error -117 [ 295.647561][ T8110] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 295.650047][ T8116] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 295.664391][ T28] audit: type=1400 audit(1782551193.587:464): avc: denied { write } for pid=8108 comm="syz.3.691" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 295.679262][ T8110] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.691: bg 0: block 4: invalid block bitmap [ 295.732508][ T8116] EXT4-fs error (device loop4): ext4_dirty_inode:6639: inode #11: comm syz.4.693: mark_inode_dirty error [ 295.766118][ T8116] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 295.770058][ T8116] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.693: invalid indirect mapped block 1 (level 1) [ 295.809815][ T8126] rock: directory entry would overflow storage [ 295.821888][ T8126] rock: sig=0x4654, size=5, remaining=4 [ 295.837648][ T8116] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 295.839311][ T8116] EXT4-fs error (device loop4): ext4_do_update_inode:5742: inode #11: comm syz.4.693: corrupted inode contents [ 295.860773][ T8116] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 295.866144][ T8116] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 295.898114][ T8116] loop4: lost filesystem error report for type 5 error -117 [ 295.899776][ T8116] EXT4-fs error (device loop4): ext4_do_update_inode:5742: inode #11: comm syz.4.693: corrupted inode contents [ 295.938764][ T5882] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.941630][ T8116] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 295.961856][ T8116] EXT4-fs error (device loop4): ext4_truncate:4691: inode #11: comm syz.4.693: mark_inode_dirty error [ 295.982328][ T8116] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 295.983849][ T8116] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 296.002253][ T8116] loop4: lost filesystem error report for type 5 error -117 [ 296.002442][ T8116] EXT4-fs (loop4): 1 truncate cleaned up [ 296.016162][ T8116] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 296.066368][ T8116] EXT4-fs error (device loop4): ext4_lookup:1785: inode #12: comm syz.4.693: iget: bogus i_mode (3355) [ 296.085094][ T8150] netlink: 'syz.8.709': attribute type 1 has an invalid length. [ 296.104381][ T3294] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.129907][ T8140] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 296.166967][ T28] audit: type=1400 audit(1782551194.097:465): avc: denied { write } for pid=8153 comm="syz.8.712" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 296.273012][ T28] audit: type=1400 audit(1782551194.097:466): avc: denied { open } for pid=8153 comm="syz.8.712" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 296.343399][ T28] audit: type=1400 audit(1782551194.277:467): avc: denied { write } for pid=8170 comm="syz.9.719" name="ip_vs" dev="proc" ino=4026533215 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 296.398808][ T8178] netlink: 'syz.0.722': attribute type 1 has an invalid length. [ 296.650960][ T28] audit: type=1400 audit(1782551194.587:468): avc: denied { create } for pid=8202 comm="syz.0.734" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 296.701507][ T8212] netlink: 'syz.4.737': attribute type 1 has an invalid length. [ 296.741613][ T8216] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 296.765383][ T8216] EXT4-fs (loop9): 1 truncate cleaned up [ 296.774842][ T8216] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 296.805887][ T8216] EXT4-fs error (device loop9): ext4_generic_delete_entry:2673: inode #2: block 13: comm syz.9.741: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 296.828471][ T8216] EXT4-fs (loop9): Remounting filesystem read-only [ 296.922308][ T5873] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.939865][ T8228] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 296.953388][ T8228] ext4 filesystem being mounted at /179/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 297.020919][ T8237] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 297.058974][ T8237] ext4 filesystem being mounted at /64/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 297.086403][ T3294] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.143005][ T5873] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.183384][ T8250] EXT4-fs: Ignoring removed nomblk_io_submit option [ 297.216061][ T8250] EXT4-fs: Ignoring removed mblk_io_submit option [ 297.243627][ T8250] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 297.293640][ T8250] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 297.338149][ T8263] syzkaller0: entered promiscuous mode [ 297.350824][ T8250] EXT4-fs (loop4): 1 truncate cleaned up [ 297.375006][ T8263] syzkaller0: entered allmulticast mode [ 297.381207][ T8250] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 297.430217][ T8272] rock: directory entry would overflow storage [ 297.438046][ T8272] rock: sig=0x4654, size=5, remaining=4 [ 297.443585][ T8250] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #2: block 4: comm syz.4.752: lblock 0 mapped to illegal pblock 4 (length 1) [ 297.461825][ T8250] EXT4-fs (loop4): Remounting filesystem read-only [ 297.523314][ T3294] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.610661][ T8292] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 297.658204][ T8292] EXT4-fs (loop4): 1 truncate cleaned up [ 297.684228][ T8292] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 297.738765][ T3294] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.788328][ T8305] FAT-fs (loop9): codepage cp866 not found [ 297.820254][ T8316] syzkaller0: entered promiscuous mode [ 297.831296][ T8316] syzkaller0: entered allmulticast mode [ 297.882520][ T8323] EXT4-fs: inline encryption not supported [ 297.917072][ T8323] EXT4-fs error (device loop9): ext4_orphan_get:1425: comm syz.9.789: bad orphan inode 15 [ 297.951502][ T8326] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 297.956768][ T8323] loop9: lost filesystem error report for type 5 error -117 [ 297.965037][ T8323] ext4_test_bit(bit=14, block=5) = 0 [ 297.972433][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 297.972458][ C1] EXT4-fs (loop9): initial error at time 1782551195: ext4_orphan_get:1425 [ 297.972486][ C1] EXT4-fs (loop9): last error at time 1782551195: ext4_orphan_get:1425 [ 298.002547][ T8323] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 298.008045][ T8326] ext4 filesystem being mounted at /91/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 298.018931][ T8323] EXT4-fs error (device loop9): __ext4_new_inode:1081: comm syz.9.789: reserved inode found cleared - inode=1 [ 298.049668][ T5873] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.065618][ T8326] EXT4-fs (loop3): shut down requested (2) [ 298.072840][ T8326] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 298.089400][ T8326] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 298.121029][ T5882] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.206785][ T8345] EXT4-fs: test_dummy_encryption option not supported [ 298.226257][ T8355] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 298.243197][ T8355] ext4 filesystem being mounted at /187/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 298.256354][ T8359] EXT4-fs: Ignoring removed bh option [ 298.325876][ T8359] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 298.347982][ T8359] EXT4-fs error (device loop9): ext4_find_dest_de:2050: inode #12: block 7: comm syz.9.805: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 298.351687][ T3294] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.389619][ T8359] EXT4-fs (loop9): Remounting filesystem read-only [ 298.396107][ T8373] EXT4-fs error (device loop8): ext4_iget_extra_inode:5180: inode #15: comm syz.8.811: corrupted in-inode xattr: invalid ea_ino [ 298.419639][ T8373] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 298.420104][ T8373] EXT4-fs error (device loop8): ext4_orphan_get:1404: comm syz.8.811: couldn't read orphan inode 15 (err -117) [ 298.429385][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 298.429408][ C1] EXT4-fs (loop8): initial error at time 1782551196: ext4_iget_extra_inode:5180: inode 15 [ 298.429452][ C1] EXT4-fs (loop8): last error at time 1782551196: ext4_iget_extra_inode:5180: inode 15 [ 298.468189][ T8373] loop8: lost filesystem error report for type 5 error -117 [ 298.471885][ T5873] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.503260][ T8373] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 298.565327][ T4402] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.617907][ T8401] EXT4-fs: Ignoring removed bh option [ 298.630576][ T8401] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 298.647178][ T8401] EXT4-fs error (device loop9): ext4_read_inline_dir:1494: inode #12: block 7: comm syz.9.823: path /78/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 298.680406][ T8407] set_capacity_and_notify: 30 callbacks suppressed [ 298.680422][ T8407] loop4: detected capacity change from 0 to 256 [ 298.719566][ T8401] EXT4-fs (loop9): Remounting filesystem read-only [ 298.746209][ T8407] FAT-fs (loop4): codepage cp950 not found [ 298.777512][ T5873] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.816654][ T8421] debugfs: Bad value for 'uid' [ 298.825048][ T8421] debugfs: Bad value for 'uid' [ 298.832937][ T8420] loop9: detected capacity change from 0 to 512 [ 298.850906][ T8420] FAT-fs (loop9): error, clusters badly computed (1 != 0) [ 298.870135][ T8420] FAT-fs (loop9): error, clusters badly computed (2 != 1) [ 298.916753][ T8433] loop4: detected capacity change from 0 to 2048 [ 298.930867][ T8433] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 298.971469][ T3294] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.996858][ T8441] loop4: detected capacity change from 0 to 512 [ 299.013874][ T8441] EXT4-fs: test_dummy_encryption option not supported [ 299.051298][ T8451] loop9: detected capacity change from 0 to 1024 [ 299.081699][ T8451] EXT4-fs: Ignoring removed bh option [ 299.120490][ T8451] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 299.228272][ T5873] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.253278][ T8475] loop8: detected capacity change from 0 to 512 [ 299.304914][ T8475] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.854: invalid indirect mapped block 4294967295 (level 1) [ 299.319153][ T8475] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 299.326208][ T8478] loop4: detected capacity change from 0 to 1024 [ 299.327465][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 299.348283][ C0] EXT4-fs (loop8): initial error at time 1782551197: ext4_free_branches:1023: inode 11 [ 299.354881][ T8475] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.854: invalid indirect mapped block 4294967295 (level 1) [ 299.358252][ C0] EXT4-fs (loop8): last error at time 1782551197: ext4_free_branches:1023: inode 11 [ 299.397986][ T8485] loop9: detected capacity change from 0 to 128 [ 299.406666][ T8478] EXT4-fs: inline encryption not supported [ 299.470685][ T8478] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 299.493557][ T8475] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 299.493873][ T8475] EXT4-fs (loop8): 2 truncates cleaned up [ 299.509949][ T8475] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 299.573143][ T3294] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.590425][ T4402] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.615215][ T8498] loop9: detected capacity change from 0 to 2048 [ 299.658486][ T8506] loop4: detected capacity change from 0 to 512 [ 299.676148][ T8498] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 299.689888][ T8502] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.724950][ T8515] EXT4-fs: Ignoring removed mblk_io_submit option [ 299.725302][ T8506] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 299.776940][ T5873] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.790584][ T8515] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 299.795429][ T8506] ext4 filesystem being mounted at /199/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 299.839111][ T8515] ext4 filesystem being mounted at /102/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 299.843841][ T8520] FAT-fs (loop8): error, clusters badly computed (1 != 0) [ 299.860665][ T8502] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.882293][ T8515] EXT4-fs (loop3): shut down requested (2) [ 299.883628][ T8520] FAT-fs (loop8): error, clusters badly computed (2 != 1) [ 299.956346][ T5882] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 299.967034][ T3294] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.007616][ T8502] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.073277][ T8531] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.876: invalid indirect mapped block 4294967295 (level 1) [ 300.098944][ T8502] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.117466][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 300.120821][ T8531] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.876: invalid indirect mapped block 4294967295 (level 1) [ 300.124019][ C1] EXT4-fs (loop8): initial error at time 1782551198: ext4_free_branches:1023: inode 11 [ 300.124060][ C1] EXT4-fs (loop8): last error at time 1782551198: ext4_free_branches:1023: inode 11 [ 300.234161][ T68] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.244273][ T68] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.248456][ T8531] EXT4-fs (loop8): 2 truncates cleaned up [ 300.280108][ T4012] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.282568][ T8526] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 300.300406][ T4012] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.317311][ T8531] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 300.396664][ T8542] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 300.461853][ T28] kauditd_printk_skb: 38 callbacks suppressed [ 300.461890][ T28] audit: type=1400 audit(1782551198.397:507): avc: denied { write } for pid=8541 comm="syz.4.882" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 300.514263][ T4402] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.605538][ T8563] EXT4-fs: Ignoring removed bh option [ 300.673582][ T28] audit: type=1400 audit(1782551198.607:508): avc: denied { write } for pid=8562 comm="syz.4.892" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 300.765116][ T28] audit: type=1400 audit(1782551198.607:509): avc: denied { write } for pid=8562 comm="syz.4.892" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 300.818898][ T28] audit: type=1400 audit(1782551198.607:510): avc: denied { write } for pid=8562 comm="syz.4.892" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 300.862935][ T8590] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 300.895053][ T8590] EXT4-fs (loop4): 1 truncate cleaned up [ 300.904701][ T28] audit: type=1400 audit(1782551198.607:511): avc: denied { write } for pid=8562 comm="syz.4.892" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 300.941811][ T28] audit: type=1400 audit(1782551198.867:512): avc: denied { write } for pid=8589 comm="syz.4.901" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 300.942729][ T8592] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 301.049955][ T8604] netlink: 'syz.0.906': attribute type 1 has an invalid length. [ 301.074709][ T8608] EXT4-fs: Ignoring removed bh option [ 301.102712][ T8604] 8021q: adding VLAN 0 to HW filter on device bond2 [ 301.135963][ T8608] EXT4-fs error (device loop8): ext4_read_inline_dir:1494: inode #12: block 7: comm syz.8.908: path /156/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 301.170515][ T8608] EXT4-fs (loop8): Remounting filesystem read-only [ 301.212404][ T8624] rock: directory entry would overflow storage [ 301.218965][ T8624] rock: sig=0x4654, size=5, remaining=4 [ 301.266626][ T28] audit: type=1400 audit(1782551199.197:513): avc: denied { unmount } for pid=4402 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 301.319804][ T8635] ext4 filesystem being mounted at /116/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 301.332671][ T8641] EXT4-fs: Ignoring removed nomblk_io_submit option [ 301.346281][ T8635] EXT4-fs error (device loop3): ext4_lookup:1785: inode #14: comm syz.3.918: invalid fast symlink length 39 [ 301.373611][ T8641] EXT4-fs: Ignoring removed mblk_io_submit option [ 301.385629][ T8643] EXT4-fs: Ignoring removed bh option [ 301.408243][ T8641] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -2 [ 301.423252][ T8641] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -2 [ 301.434626][ T8641] EXT4-fs (loop8): 1 truncate cleaned up [ 301.494653][ T8656] netlink: 'syz.3.924': attribute type 1 has an invalid length. [ 301.546021][ T8660] FAT-fs (loop8): codepage cp862 not found [ 301.554215][ T8656] 8021q: adding VLAN 0 to HW filter on device bond1 [ 301.566193][ T8664] EXT4-fs: Ignoring removed bh option [ 301.606854][ T8668] FAT-fs (loop3): codepage cp864 not found [ 301.630676][ T8664] EXT4-fs error (device loop9): ext4_read_inline_dir:1494: inode #12: block 7: comm syz.9.929: path /94/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 301.692215][ T8664] EXT4-fs (loop9): Remounting filesystem read-only [ 301.707615][ T28] audit: type=1400 audit(1782551199.647:514): avc: denied { append } for pid=8678 comm="syz.3.933" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 301.742417][ T28] audit: type=1400 audit(1782551199.647:515): avc: denied { open } for pid=8678 comm="syz.3.933" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 301.766715][ T28] audit: type=1400 audit(1782551199.647:516): avc: denied { ioctl } for pid=8678 comm="syz.3.933" path="/dev/nvram" dev="devtmpfs" ino=98 ioctlcmd=0xf518 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 301.789184][ T8687] EXT4-fs: Ignoring removed bh option [ 301.869692][ T8697] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 301.894564][ T8699] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 301.894691][ T8697] EXT4-fs (loop4): 1 truncate cleaned up [ 301.906031][ T8699] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 301.919880][ T8699] System zones: 1-12 [ 301.925537][ T8699] EXT4-fs (loop8): 1 truncate cleaned up [ 301.998043][ T8709] EXT4-fs: Ignoring removed bh option [ 302.050681][ T8711] ext4 filesystem being mounted at /167/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 302.113476][ T8723] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 302.139531][ T8723] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 302.150859][ T8723] System zones: 1-12 [ 302.156850][ T8723] EXT4-fs (loop9): 1 truncate cleaned up [ 302.215476][ T8733] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 302.232630][ T8733] EXT4-fs (loop9): 1 truncate cleaned up [ 302.250196][ T8734] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 302.319938][ T8743] EXT4-fs: Ignoring removed bh option [ 302.330116][ T8745] ext4 filesystem being mounted at /101/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 302.404846][ T8754] EXT4-fs: inline encryption not supported [ 302.432159][ T8754] EXT4-fs: test_dummy_encryption option not supported [ 302.493339][ T8764] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 302.529153][ T8764] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 302.536243][ T8770] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 302.542096][ T8764] System zones: 1-12 [ 302.554959][ T8764] EXT4-fs (loop4): 1 truncate cleaned up [ 302.596794][ T8770] EXT4-fs (loop8): 1 truncate cleaned up [ 302.659110][ T8777] ext4 filesystem being mounted at /104/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 302.723105][ T8777] EXT4-fs (loop9): shut down requested (1) [ 302.887059][ T8799] netlink: 'syz.8.981': attribute type 1 has an invalid length. [ 302.913535][ T8799] 8021q: adding VLAN 0 to HW filter on device bond2 [ 303.043938][ T8816] EXT4-fs error (device loop4): ext4_get_branch:178: inode #11: block 4294967295: comm syz.4.988: invalid block [ 303.075802][ T8816] fserror_report: 2 callbacks suppressed [ 303.075818][ T8816] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 303.094493][ T8816] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.988: invalid indirect mapped block 4294967295 (level 1) [ 303.107466][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 303.124274][ C1] EXT4-fs (loop4): initial error at time 1782551201: ext4_get_branch:178: inode 11: block 4294967295 [ 303.135317][ C1] EXT4-fs (loop4): last error at time 1782551201: ext4_get_branch:178: inode 11: block 4294967295 [ 303.145625][ T8816] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 303.150838][ T8816] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.988: invalid indirect mapped block 4294967295 (level 1) [ 303.174804][ T8816] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 303.182025][ T8816] EXT4-fs (loop4): 2 truncates cleaned up [ 303.334654][ T8839] EXT4-fs: Ignoring removed bh option [ 303.348571][ T3421] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.412264][ T3421] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.435174][ T8850] EXT4-fs error (device loop8): ext4_get_branch:178: inode #11: block 4294967295: comm syz.8.1005: invalid block [ 303.494602][ T8850] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 303.494780][ T8850] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.1005: invalid indirect mapped block 4294967295 (level 1) [ 303.504128][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 303.504153][ C0] EXT4-fs (loop8): initial error at time 1782551201: ext4_get_branch:178: inode 11: block 4294967295 [ 303.504201][ C0] EXT4-fs (loop8): last error at time 1782551201: ext4_get_branch:178: inode 11: block 4294967295 [ 303.550489][ T8850] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 303.551486][ T8850] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.1005: invalid indirect mapped block 4294967295 (level 1) [ 303.574862][ T8850] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 303.575206][ T8850] EXT4-fs (loop8): 2 truncates cleaned up [ 303.575828][ T3421] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.615314][ T3397] hid_parser_main: 24 callbacks suppressed [ 303.615346][ T3397] hid-generic 0006:0008:0001.0003: unknown main item tag 0x0 [ 303.630152][ T3397] hid-generic 0006:0008:0001.0003: unknown main item tag 0x0 [ 303.642118][ T3397] hid-generic 0006:0008:0001.0003: unknown main item tag 0x0 [ 303.649943][ T3397] hid-generic 0006:0008:0001.0003: unknown main item tag 0x0 [ 303.657966][ T3397] hid-generic 0006:0008:0001.0003: unknown main item tag 0x0 [ 303.665650][ T3397] hid-generic 0006:0008:0001.0003: unknown main item tag 0x0 [ 303.673914][ T3397] hid-generic 0006:0008:0001.0003: unknown main item tag 0x0 [ 303.681787][ T3397] hid-generic 0006:0008:0001.0003: unknown main item tag 0x0 [ 303.697684][ T3397] hid-generic 0006:0008:0001.0003: unknown main item tag 0x0 [ 303.701205][ T8875] set_capacity_and_notify: 43 callbacks suppressed [ 303.701224][ T8875] loop4: detected capacity change from 0 to 8192 [ 303.705552][ T3397] hid-generic 0006:0008:0001.0003: unknown main item tag 0x0 [ 303.712984][ T3421] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.719664][ T3397] hid-generic 0006:0008:0001.0003: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 303.783211][ T8880] fido_id[8880]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 303.814036][ T8884] loop3: detected capacity change from 0 to 1024 [ 303.843350][ T8884] EXT4-fs: Ignoring removed bh option [ 303.939248][ T8899] loop4: detected capacity change from 0 to 512 [ 303.948359][ T8899] EXT4-fs error (device loop4): ext4_get_branch:178: inode #11: block 4294967295: comm syz.4.1023: invalid block [ 303.960674][ T8899] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 303.960837][ T8899] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.1023: invalid indirect mapped block 4294967295 (level 1) [ 303.970104][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 303.970146][ C0] EXT4-fs (loop4): initial error at time 1782551201: ext4_get_branch:178: inode 11: block 4294967295 [ 303.970189][ C0] EXT4-fs (loop4): last error at time 1782551201: ext4_get_branch:178: inode 11: block 4294967295 [ 303.983923][ T8903] loop3: detected capacity change from 0 to 764 [ 303.986530][ T8899] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 304.018965][ T3421] bridge_slave_1: left allmulticast mode [ 304.042684][ T3421] bridge_slave_1: left promiscuous mode [ 304.048817][ T3421] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.060583][ T3421] bridge_slave_0: left allmulticast mode [ 304.064277][ T8899] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.1023: invalid indirect mapped block 4294967295 (level 1) [ 304.066586][ T3421] bridge_slave_0: left promiscuous mode [ 304.086340][ T3421] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.093721][ T8899] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 304.097650][ T8899] EXT4-fs (loop4): 2 truncates cleaned up [ 304.139802][ T9] hid-generic 0006:0008:0001.0004: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 304.194724][ T8914] fido_id[8914]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 304.254953][ T8908] loop8: detected capacity change from 0 to 8192 [ 304.347065][ T3421] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 304.388110][ T3421] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 304.403975][ T3421] bond0 (unregistering): Released all slaves [ 304.420248][ T3018] 8021q: adding VLAN 0 to HW filter on device eth21 [ 304.455303][ T3421] hsr_slave_0: left promiscuous mode [ 304.461610][ T3421] hsr_slave_1: left promiscuous mode [ 304.462024][ T3421] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 304.462043][ T3421] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 304.472504][ T3421] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 304.472525][ T3421] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 304.478314][ T3421] veth1_macvtap: left promiscuous mode [ 304.478342][ T3421] veth0_macvtap: left promiscuous mode [ 304.478475][ T3421] veth1_vlan: left promiscuous mode [ 304.478537][ T3421] veth0_vlan: left promiscuous mode [ 304.481042][ T8944] loop3: detected capacity change from 0 to 512 [ 304.497886][ T9] hid-generic 0006:0008:0001.0005: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 304.527408][ T8944] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz.3.1035: invalid block [ 304.550040][ T8949] fido_id[8949]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 304.582331][ T8944] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 304.615993][ T8944] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.1035: invalid indirect mapped block 4294967295 (level 1) [ 304.625252][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 304.625275][ C1] EXT4-fs (loop3): initial error at time 1782551202: ext4_get_branch:178: inode 11: block 4294967295 [ 304.625329][ C1] EXT4-fs (loop3): last error at time 1782551202: ext4_get_branch:178: inode 11: block 4294967295 [ 304.671110][ T8944] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.1035: invalid indirect mapped block 4294967295 (level 1) [ 304.686080][ T8944] EXT4-fs (loop3): 2 truncates cleaned up [ 304.734938][ T3421] team0 (unregistering): Port device team_slave_1 removed [ 304.755156][ T3421] team0 (unregistering): Port device team_slave_0 removed [ 304.788041][ T8970] loop8: detected capacity change from 0 to 1024 [ 304.805179][ T8970] EXT4-fs: Ignoring removed bh option [ 304.824270][ T8974] loop3: detected capacity change from 0 to 512 [ 304.831800][ T8974] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 304.844490][ T8974] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 304.862407][ T8974] System zones: 1-12 [ 304.869901][ T8974] EXT4-fs (loop3): 1 truncate cleaned up [ 304.912913][ T8976] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.965374][ T8990] loop3: detected capacity change from 0 to 1024 [ 304.981151][ T8990] EXT4-fs: Ignoring removed bh option [ 304.993999][ T8976] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.068131][ T8976] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.103781][ T8851] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.118601][ T8851] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.133207][ T8851] bridge_slave_0: entered allmulticast mode [ 305.145814][ T8851] bridge_slave_0: entered promiscuous mode [ 305.153729][ T8851] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.160906][ T8851] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.168629][ T8851] bridge_slave_1: entered allmulticast mode [ 305.175064][ T8851] bridge_slave_1: entered promiscuous mode [ 305.203437][ T8976] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.220858][ T3018] 8021q: adding VLAN 0 to HW filter on device eth22 [ 305.265748][ T8851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 305.273992][ T9022] loop3: detected capacity change from 0 to 512 [ 305.286862][ T8851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 305.325073][ T9022] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.1053: invalid indirect mapped block 4294967295 (level 1) [ 305.352755][ T3421] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.369503][ T3421] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.384314][ T8851] team0: Port device team_slave_0 added [ 305.401271][ T3421] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.421539][ T9022] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.1053: invalid indirect mapped block 4294967295 (level 1) [ 305.435674][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 305.435700][ C0] EXT4-fs (loop3): initial error at time 1782551203: ext4_free_branches:1023: inode 11 [ 305.435729][ C0] EXT4-fs (loop3): last error at time 1782551203: ext4_free_branches:1023: inode 11 [ 305.445301][ T3421] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.454913][ T9022] EXT4-fs (loop3): 2 truncates cleaned up [ 305.484020][ T8851] team0: Port device team_slave_1 added [ 305.591339][ T8851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 305.602660][ T9041] ext4 filesystem being mounted at /243/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 305.626883][ T8851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 305.645565][ T28] kauditd_printk_skb: 41 callbacks suppressed [ 305.645581][ T28] audit: type=1400 audit(1782551203.577:558): avc: denied { write } for pid=9026 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 305.654986][ T8851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 305.691924][ T9041] EXT4-fs warning (device loop4): verify_group_input:156: Last group not full [ 305.693606][ T8851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 305.708805][ T8851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 305.735262][ T8851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 305.768773][ T28] audit: type=1400 audit(1782551203.707:559): avc: denied { write } for pid=9048 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 305.795177][ T8851] hsr_slave_0: entered promiscuous mode [ 305.811618][ T8851] hsr_slave_1: entered promiscuous mode [ 305.822642][ T8851] debugfs: 'hsr0' already exists in 'hsr' [ 305.836741][ T8851] Cannot create hsr debugfs directory [ 305.882391][ T3018] 8021q: adding VLAN 0 to HW filter on device eth23 [ 305.894772][ T9054] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1060'. [ 305.909037][ T9054] netlink: 'syz.4.1060': attribute type 1 has an invalid length. [ 306.020499][ T9068] FAT-fs (loop8): error, clusters badly computed (1 != 0) [ 306.045845][ T9068] FAT-fs (loop8): error, clusters badly computed (2 != 1) [ 306.086425][ T9071] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.1066: invalid indirect mapped block 4294967295 (level 1) [ 306.173636][ T9071] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.1066: invalid indirect mapped block 4294967295 (level 1) [ 306.187732][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 306.187757][ C0] EXT4-fs (loop3): initial error at time 1782551204: ext4_free_branches:1023: inode 11 [ 306.187793][ C0] EXT4-fs (loop3): last error at time 1782551204: ext4_free_branches:1023: inode 11 [ 306.233227][ T28] audit: type=1400 audit(1782551204.157:560): avc: denied { write } for pid=9070 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 306.267255][ T9071] EXT4-fs (loop3): 2 truncates cleaned up [ 306.291641][ T28] audit: type=1400 audit(1782551204.227:561): avc: denied { write } for pid=9093 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 306.340211][ T3018] 8021q: adding VLAN 0 to HW filter on device eth24 [ 306.465567][ T9106] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1075'. [ 306.475403][ T28] audit: type=1400 audit(1782551204.397:562): avc: denied { write } for pid=9105 comm="syz.3.1075" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 306.522754][ T9104] syzkaller1: entered promiscuous mode [ 306.529767][ T28] audit: type=1400 audit(1782551204.397:563): avc: denied { nlmsg_write } for pid=9105 comm="syz.3.1075" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 306.541450][ T9104] syzkaller1: entered allmulticast mode [ 306.595940][ T9113] FAT-fs (loop8): error, clusters badly computed (1 != 0) [ 306.611053][ T9113] FAT-fs (loop8): error, clusters badly computed (2 != 1) [ 306.666008][ T28] audit: type=1400 audit(1782551204.597:564): avc: denied { write } for pid=9102 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 306.715421][ T9123] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1077'. [ 306.732182][ T28] audit: type=1400 audit(1782551204.597:565): avc: denied { write } for pid=9128 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 306.754690][ T9123] netlink: 'syz.0.1077': attribute type 1 has an invalid length. [ 306.766446][ T8851] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 306.777665][ T8851] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 306.791379][ T8851] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 306.802813][ T8851] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 306.819861][ T28] audit: type=1400 audit(1782551204.757:566): avc: denied { write } for pid=9133 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 306.858515][ T8851] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 306.868432][ T8851] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 306.888859][ T28] audit: type=1400 audit(1782551204.817:567): avc: denied { write } for pid=9144 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 306.891011][ T8851] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 306.965244][ T8851] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 307.152541][ T8851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 307.193358][ T8851] 8021q: adding VLAN 0 to HW filter on device team0 [ 307.208339][ T310] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.215497][ T310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 307.257215][ T310] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.264388][ T310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 307.292962][ T9184] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1093'. [ 307.318175][ T9184] netlink: 'syz.0.1093': attribute type 1 has an invalid length. [ 307.328835][ T9190] EXT4-fs: Ignoring removed bh option [ 307.366019][ T8851] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 307.583367][ T9222] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.657383][ T9222] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.683830][ T8851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 307.722058][ T9222] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.769908][ T9222] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.839337][ T8851] veth0_vlan: entered promiscuous mode [ 307.855205][ T8851] veth1_vlan: entered promiscuous mode [ 307.873354][ T310] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.891269][ T310] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.907225][ T49] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.917934][ T8851] veth0_macvtap: entered promiscuous mode [ 307.932291][ T3421] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.941698][ T9273] syz_tun: entered allmulticast mode [ 307.948631][ T8851] veth1_macvtap: entered promiscuous mode [ 307.964843][ T9273] pim6reg: entered allmulticast mode [ 307.980543][ T8851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 308.001783][ T8851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 308.013357][ T9273] syz_tun: left allmulticast mode [ 308.030254][ T310] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.051306][ T310] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.074076][ T310] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.083328][ T310] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.188023][ T9304] FAT-fs (loop1): error, corrupted file size (i_pos 51, 9216) [ 308.402214][ T9335] syz_tun: entered allmulticast mode [ 308.416237][ T9335] syz_tun: left allmulticast mode [ 308.580442][ T9355] EXT4-fs: Ignoring removed bh option [ 308.681714][ T9372] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.740317][ T9385] set_capacity_and_notify: 14 callbacks suppressed [ 308.740335][ T9385] loop8: detected capacity change from 0 to 764 [ 308.986738][ T9423] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1143'. [ 309.003228][ T9423] netlink: 'syz.0.1143': attribute type 1 has an invalid length. [ 309.236777][ T9455] loop3: detected capacity change from 0 to 764 [ 309.480229][ T9372] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.681880][ T9489] loop4: detected capacity change from 0 to 764 [ 309.742503][ T9491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 309.752161][ T9491] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 309.761464][ T9491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 309.770680][ T9491] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 309.780028][ T9491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 309.788655][ T9491] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 310.481105][ T9525] netlink: 'syz.3.1173': attribute type 1 has an invalid length. [ 310.498669][ T9525] 8021q: adding VLAN 0 to HW filter on device bond2 [ 310.601292][ T9372] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.708862][ T28] kauditd_printk_skb: 39 callbacks suppressed [ 310.708881][ T28] audit: type=1400 audit(1782551208.647:607): avc: denied { append } for pid=9538 comm="syz.4.1178" name="001" dev="devtmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 310.744874][ T28] audit: type=1400 audit(1782551208.677:608): avc: denied { create } for pid=9530 comm="syz.3.1175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 310.773418][ T28] audit: type=1400 audit(1782551208.677:609): avc: denied { write } for pid=9530 comm="syz.3.1175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 310.878532][ T9372] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.920088][ T9551] loop4: detected capacity change from 0 to 1024 [ 310.935580][ T9551] EXT4-fs: Ignoring removed mblk_io_submit option [ 310.980957][ T310] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.996364][ T9551] ext4 filesystem being mounted at /261/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 311.000981][ T310] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.022636][ T28] audit: type=1400 audit(1782551208.957:610): avc: denied { write } for pid=9550 comm="syz.4.1182" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 311.064771][ T49] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.086173][ T3421] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.097551][ T9561] syzkaller1: entered promiscuous mode [ 311.103372][ T9561] syzkaller1: entered allmulticast mode [ 311.136713][ T9567] loop4: detected capacity change from 0 to 2048 [ 311.389797][ T9591] loop4: detected capacity change from 0 to 1024 [ 311.403347][ T9591] EXT4-fs: Ignoring removed mblk_io_submit option [ 311.429273][ T9591] ext4 filesystem being mounted at /267/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 311.441514][ T28] audit: type=1400 audit(1782551209.377:611): avc: denied { write } for pid=9590 comm="syz.4.1198" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 311.482267][ T9595] syzkaller1: entered promiscuous mode [ 311.488096][ T9595] syzkaller1: entered allmulticast mode [ 311.730082][ T9606] loop1: detected capacity change from 0 to 1024 [ 311.738027][ T9606] EXT4-fs: Ignoring removed bh option [ 311.769770][ T28] audit: type=1400 audit(1782551209.707:612): avc: denied { write } for pid=9605 comm="syz.1.1204" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 311.901422][ T28] audit: type=1400 audit(1782551209.837:613): avc: denied { create } for pid=9613 comm="syz.4.1207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 311.962488][ T28] audit: type=1400 audit(1782551209.867:614): avc: denied { connect } for pid=9613 comm="syz.4.1207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 311.992232][ T9624] loop3: detected capacity change from 0 to 512 [ 312.019255][ T9624] ext4 filesystem being mounted at /175/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 312.061170][ T9628] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1212'. [ 312.101371][ T9630] loop1: detected capacity change from 0 to 1024 [ 312.113959][ T9630] EXT4-fs: Ignoring removed mblk_io_submit option [ 312.153008][ T9634] loop4: detected capacity change from 0 to 2048 [ 312.157199][ T9630] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 312.183586][ T28] audit: type=1400 audit(1782551210.117:615): avc: denied { write } for pid=9629 comm="syz.1.1213" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 312.223310][ T28] audit: type=1400 audit(1782551210.157:616): avc: denied { write } for pid=9633 comm="syz.4.1216" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 312.259258][ T9638] syzkaller0: entered promiscuous mode [ 312.265506][ T9638] syzkaller0: entered allmulticast mode [ 312.429855][ T9663] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1225'. [ 312.469368][ T9666] syzkaller0: entered promiscuous mode [ 312.488229][ T9666] syzkaller0: entered allmulticast mode [ 312.527405][ T9670] EXT4-fs: Ignoring removed mblk_io_submit option [ 312.562247][ T9670] ext4 filesystem being mounted at /279/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 312.599810][ T9670] EXT4-fs (loop4): shut down requested (2) [ 312.805441][ T9684] syzkaller0: entered promiscuous mode [ 312.811418][ T9684] syzkaller0: entered allmulticast mode [ 312.936204][ T9686] netlink: 'syz.4.1235': attribute type 1 has an invalid length. [ 313.072949][ T9692] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 313.085364][ T9692] EXT4-fs (loop4): 1 truncate cleaned up [ 313.192992][ T9701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 313.205618][ T9701] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 313.263057][ T9705] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1244'. [ 313.313663][ T9707] syzkaller0: entered promiscuous mode [ 313.319387][ T9707] syzkaller0: entered allmulticast mode [ 313.575450][ T9728] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1255'. [ 313.685857][ T9738] syzkaller0: entered promiscuous mode [ 313.691477][ T9738] syzkaller0: entered allmulticast mode [ 313.791364][ T9740] set_capacity_and_notify: 2 callbacks suppressed [ 313.791392][ T9740] loop4: detected capacity change from 0 to 1024 [ 313.813818][ T9740] EXT4-fs: Ignoring removed bh option [ 314.004451][ T9756] loop4: detected capacity change from 0 to 512 [ 314.019720][ T9756] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 314.039362][ T9756] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 314.047606][ T9756] System zones: 1-12 [ 314.052432][ T9756] EXT4-fs (loop4): 1 truncate cleaned up [ 314.108353][ T9759] bridge_slave_0: left allmulticast mode [ 314.115089][ T9759] bridge_slave_0: left promiscuous mode [ 314.121566][ T9759] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.131516][ T9759] bridge_slave_1: left allmulticast mode [ 314.137190][ T9759] bridge_slave_1: left promiscuous mode [ 314.143717][ T9759] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.154202][ T9759] bond0: (slave bond_slave_0): Releasing backup interface [ 314.166173][ T9759] bond0: (slave bond_slave_1): Releasing backup interface [ 314.178721][ T9759] team0: Port device team_slave_0 removed [ 314.188358][ T9759] team0: Port device team_slave_1 removed [ 314.196855][ T9759] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 314.204948][ T9759] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 314.214297][ T9759] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 314.223181][ T9759] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 314.233030][ T9759] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 314.251536][ T9760] team0: Mode changed to "loadbalance" [ 314.263054][ T9761] team0: Unable to change to the same mode the team is in [ 314.478929][ T9776] netlink: 'syz.3.1276': attribute type 1 has an invalid length. [ 314.513169][ T9780] loop4: detected capacity change from 0 to 512 [ 314.540857][ T9780] ext4 filesystem being mounted at /309/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 314.573689][ T9784] loop3: detected capacity change from 0 to 512 [ 314.580795][ T9784] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 314.599509][ T9784] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 314.607711][ T9784] System zones: 1-12 [ 314.612780][ T9784] EXT4-fs (loop3): 1 truncate cleaned up [ 314.996400][ T9809] netlink: 'syz.1.1289': attribute type 1 has an invalid length. [ 315.294591][ T9836] netlink: 'syz.4.1302': attribute type 1 has an invalid length. [ 315.418476][ T9843] syzkaller1: entered promiscuous mode [ 315.430634][ T9843] syzkaller1: entered allmulticast mode [ 315.457090][ T9845] syzkaller0: entered promiscuous mode [ 315.467553][ T9845] syzkaller0: entered allmulticast mode [ 315.653732][ T9867] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1316'. [ 315.985498][ T9889] loop3: detected capacity change from 0 to 2048 [ 316.006287][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 316.006305][ T28] audit: type=1400 audit(1782551213.937:625): avc: denied { write } for pid=9887 comm="syz.3.1326" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 316.041936][ T9897] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1327'. [ 316.051356][ T9897] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1327'. [ 316.060488][ T9897] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1327'. [ 316.144327][ T9903] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1331'. [ 316.154057][ T9903] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.161449][ T9903] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.217204][ T9907] netlink: 'syz.0.1331': attribute type 10 has an invalid length. [ 316.228589][ T28] audit: type=1400 audit(1782551214.137:626): avc: denied { create } for pid=9902 comm="syz.0.1331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 316.253990][ T9907] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.261773][ T9907] bridge0: port 2(bridge_slave_1) entered listening state [ 316.269564][ T9907] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.276732][ T9907] bridge0: port 1(bridge_slave_0) entered listening state [ 316.297618][ T9907] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 316.313113][ T9909] syzkaller0: entered promiscuous mode [ 316.319099][ T9909] syzkaller0: entered allmulticast mode [ 316.384300][ T9911] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 317.096491][ T28] audit: type=1400 audit(1782551215.027:627): avc: denied { ioctl } for pid=9916 comm="syz.1.1337" path="socket:[23385]" dev="sockfs" ino=23385 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 318.086966][ T9962] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1348'. [ 318.216486][ T9968] loop4: detected capacity change from 0 to 2048 [ 318.245930][ T28] audit: type=1400 audit(1782551216.177:628): avc: denied { write } for pid=9938 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 318.368317][ T28] audit: type=1400 audit(1782551216.217:629): avc: denied { write } for pid=9967 comm="syz.4.1351" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 318.483119][ T9981] loop4: detected capacity change from 0 to 512 [ 318.492918][ T28] audit: type=1400 audit(1782551216.437:630): avc: denied { write } for pid=9978 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 318.535055][ T9981] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 318.602143][ T9981] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 318.646301][ T9981] System zones: 1-12 [ 318.674274][ T9981] EXT4-fs (loop4): 1 truncate cleaned up [ 318.822549][T10001] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 318.867934][T10003] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1361'. [ 318.879372][T10001] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 319.060697][T10009] netlink: 'syz.4.1362': attribute type 1 has an invalid length. [ 319.886967][ T28] audit: type=1400 audit(1782551217.817:631): avc: denied { write } for pid=10018 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 320.093240][T10041] loop4: detected capacity change from 0 to 512 [ 320.110319][T10041] EXT4-fs: Ignoring removed nomblk_io_submit option [ 320.146299][T10041] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043e01c, mo2=0002] [ 320.155106][ T28] audit: type=1400 audit(1782551218.077:632): avc: denied { write } for pid=10039 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 320.187766][T10041] System zones: 1-12 [ 320.200256][T10041] EXT4-fs error (device loop4): ext4_get_branch:178: inode #11: block 33261: comm syz.4.1370: invalid block [ 320.212008][T10041] fserror_report: 6 callbacks suppressed [ 320.212042][T10041] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 320.218066][T10041] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.1370: invalid indirect mapped block 8 (level 2) [ 320.240596][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 320.240619][ C0] EXT4-fs (loop4): initial error at time 1782551218: ext4_get_branch:178: inode 11: block 33261 [ 320.240674][ C0] EXT4-fs (loop4): last error at time 1782551218: ext4_get_branch:178: inode 11: block 33261 [ 320.271052][T10041] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 320.284877][T10041] EXT4-fs (loop4): 1 truncate cleaned up [ 320.327868][T10041] EXT4-fs mount: 113 callbacks suppressed [ 320.327889][T10041] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 320.758011][ T28] audit: type=1400 audit(1782551218.687:633): avc: denied { write } for pid=10050 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 320.892648][ T28] audit: type=1400 audit(1782551218.827:634): avc: denied { write } for pid=10061 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 321.720453][ T9996] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 321.784547][T10065] loop3: detected capacity change from 0 to 512 [ 321.791128][T10044] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 361: padding at end of block bitmap is not set [ 321.826896][ T3294] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.860838][T10065] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 321.896799][T10065] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 321.921946][T10065] System zones: 1-12 [ 321.938152][T10065] EXT4-fs (loop3): 1 truncate cleaned up [ 321.944594][T10065] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 322.025616][ T5882] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 340.067504][ C1] ================================================================== [ 340.075654][ C1] BUG: KCSAN: data-race in wq_worker_tick / wq_worker_tick [ 340.083304][ C1] [ 340.085731][ C1] read-write to 0xffff8881000c5cd8 of 8 bytes by interrupt on cpu 0: [ 340.093839][ C1] wq_worker_tick+0x64/0x240 [ 340.098555][ C1] sched_tick+0xbc/0x1f0 [ 340.102821][ C1] update_process_times+0x15e/0x190 [ 340.108052][ C1] tick_nohz_handler+0x227/0x380 [ 340.113009][ C1] __hrtimer_run_queues+0x1f8/0x510 [ 340.118326][ C1] hrtimer_interrupt+0x257/0x810 [ 340.123330][ C1] __sysvec_apic_timer_interrupt+0x5f/0x1c0 [ 340.129260][ C1] sysvec_apic_timer_interrupt+0x32/0x80 [ 340.135091][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 340.141554][ C1] kcsan_setup_watchpoint+0x3e8/0x450 [ 340.146969][ C1] ip_route_output_key_hash_rcu+0xe43/0x1320 [ 340.153006][ C1] ip_route_output_flow+0x65/0x110 [ 340.158402][ C1] ip_route_me_harder+0x40c/0x690 [ 340.163453][ C1] synproxy_send_tcp+0x1e2/0x2e0 [ 340.168417][ C1] synproxy_send_client_synack+0x55e/0x5b0 [ 340.174247][ C1] nft_synproxy_eval_v4+0x21f/0x270 [ 340.179476][ C1] nft_synproxy_do_eval+0x1cf/0x270 [ 340.184782][ C1] nft_synproxy_eval+0x29/0x40 [ 340.189566][ C1] nft_do_chain+0x1ff/0xde0 [ 340.194183][ C1] nft_do_chain_inet+0x2f0/0x320 [ 340.199148][ C1] nf_hook_slow+0x78/0x180 [ 340.203629][ C1] ip_local_deliver+0x199/0x1e0 [ 340.208506][ C1] ip_rcv_finish+0x188/0x1a0 [ 340.213124][ C1] ip_rcv+0x62/0x160 [ 340.217046][ C1] process_backlog+0x333/0x680 [ 340.221839][ C1] __napi_poll+0x61/0x300 [ 340.226223][ C1] net_rx_action+0x456/0x930 [ 340.230842][ C1] handle_softirqs+0xb9/0x280 [ 340.235535][ C1] do_softirq+0x45/0x60 [ 340.239792][ C1] __local_bh_enable_ip+0x70/0x80 [ 340.244835][ C1] __alloc_skb+0x6b1/0x6f0 [ 340.249288][ C1] nsim_dev_trap_report_work+0x18b/0x630 [ 340.255056][ C1] process_scheduled_works+0x4d4/0x9a0 [ 340.260555][ C1] worker_thread+0x569/0x750 [ 340.265182][ C1] kthread+0x221/0x270 [ 340.269278][ C1] ret_from_fork+0x146/0x330 [ 340.273924][ C1] ret_from_fork_asm+0x1a/0x30 [ 340.278806][ C1] [ 340.281138][ C1] read-write to 0xffff8881000c5cd8 of 8 bytes by interrupt on cpu 1: [ 340.289206][ C1] wq_worker_tick+0x64/0x240 [ 340.293999][ C1] sched_tick+0xbc/0x1f0 [ 340.298249][ C1] update_process_times+0x15e/0x190 [ 340.303483][ C1] tick_nohz_handler+0x227/0x380 [ 340.308433][ C1] __hrtimer_run_queues+0x1f8/0x510 [ 340.313675][ C1] hrtimer_interrupt+0x257/0x810 [ 340.318636][ C1] __sysvec_apic_timer_interrupt+0x5f/0x1c0 [ 340.324606][ C1] sysvec_apic_timer_interrupt+0x32/0x80 [ 340.330253][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 340.336259][ C1] ipt_do_table+0xa86/0xb40 [ 340.340858][ C1] nf_hook_slow+0x78/0x180 [ 340.345374][ C1] ip_rcv+0x11f/0x160 [ 340.349368][ C1] process_backlog+0x333/0x680 [ 340.354160][ C1] __napi_poll+0x61/0x300 [ 340.358589][ C1] net_rx_action+0x456/0x930 [ 340.363206][ C1] handle_softirqs+0xb9/0x280 [ 340.367896][ C1] do_softirq+0x45/0x60 [ 340.372063][ C1] __local_bh_enable_ip+0x70/0x80 [ 340.377095][ C1] _raw_spin_unlock_bh+0x18/0x20 [ 340.382072][ C1] nsim_dev_trap_report_work+0x521/0x630 [ 340.387722][ C1] process_scheduled_works+0x4d4/0x9a0 [ 340.393212][ C1] worker_thread+0x569/0x750 [ 340.397816][ C1] kthread+0x221/0x270 [ 340.401900][ C1] ret_from_fork+0x146/0x330 [ 340.406659][ C1] ret_from_fork_asm+0x1a/0x30 [ 340.411637][ C1] [ 340.413965][ C1] value changed: 0x00000000006ec760 -> 0x00000000006eee70 [ 340.421090][ C1] [ 340.423420][ C1] Reported by Kernel Concurrency Sanitizer on: [ 340.429659][ C1] CPU: 1 UID: 0 PID: 49 Comm: kworker/u8:3 Not tainted syzkaller #0 PREEMPT(lazy) [ 340.438966][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 340.449138][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 340.456140][ C1] ================================================================== SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 343.402685][ T28] audit: type=1400 audit(1782551241.217:635): avc: denied { write } for pid=10129 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 344.742482][ T28] audit: type=1400 audit(1782551242.677:636): avc: denied { write } for pid=10152 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 346.789508][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 346.796755][ C0] bridge0: port 2(bridge_slave_1) entered learning state