last executing test programs: 5m43.576399247s ago: executing program 3 (id=16): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041) ioctl$USBDEVFS_ALLOC_STREAMS(r0, 0x8008551c, 0x0) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x7fa962bfffff, 0x12, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r3, 0x0, 0x4000040) sendmsg$inet(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000180)="84", 0x1}], 0x1}, 0x8040) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r4 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r5 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r5, 0x0, 0xfdef) recvmsg(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001500)=""/4098, 0x1002}], 0x1}, 0x101a0) close(r3) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000080)="2e00000010008188040f46ecdb4cb9cca7480ef431000000e3bd6efb010509000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x8000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) 5m43.489956003s ago: executing program 3 (id=17): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/25], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b0000000000000000000000000004", @ANYRES32=0x0, @ANYBLOB, @ANYRESOCT=r5, @ANYBLOB, @ANYRES16=r3, @ANYRES64=r6], 0x50) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x2) syz_genetlink_get_family_id$nl802154(0x0, r0) r7 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x6, 0x40, 0x3, 0x0, 0x4000000000, 0xd4, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x100882, 0x7ff, 0x6, 0x3, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12011, r7, 0x0) 5m41.438909414s ago: executing program 3 (id=20): prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xb8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) poll(0x0, 0x0, 0x9) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="80400100000001000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000639810afd9f68e7e2d378816ddc963c93e558d5c5285d55158f162781b3bb804a02c1409529deb529f5de6"], 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r6, 0x0, 0x29, &(0x7f0000001b00)={@multicast1, @empty}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x804000, &(0x7f00000008c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) 5m39.786549687s ago: executing program 3 (id=25): r0 = socket$inet(0x2, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt', 0x0, 0x0) ioctl$EXT4_IOC_GETFSUUID(r1, 0x8008662c, 0x0) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mbind(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x1ff, 0x3) r3 = syz_clone(0x0, 0x0, 0x43, 0x0, 0x0, 0x0) process_vm_writev(r3, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) bind$inet(r0, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) listen(r0, 0x0) r4 = socket$inet(0x2, 0x1, 0x0) r5 = creat(&(0x7f0000000e40)='./file1\x00', 0x18) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0xa4c42, 0x108) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000140)={0xc, r5, 0x100000000, 0x54, 0x2, 0x293}) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000080)=r5, 0x4) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) setsockopt$sock_int(r4, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r4, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) 5m38.260820751s ago: executing program 3 (id=34): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041) ioctl$USBDEVFS_ALLOC_STREAMS(r0, 0x8008551c, 0x0) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x7fa962bfffff, 0x12, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r3, 0x0, 0x4000040) sendmsg$inet(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000180)="84", 0x1}], 0x1}, 0x8040) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r4 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r5 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r5, 0x0, 0xfdef) recvmsg(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001500)=""/4098, 0x1002}], 0x1}, 0x101a0) close(r3) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000080)="2e00000010008188040f46ecdb4cb9cca7480ef431000000e3bd6efb010509000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x8000) io_uring_setup(0x66a5, &(0x7f0000000100)={0x0, 0xbfb7, 0x800, 0xfffffff8, 0x87}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) 5m36.591518955s ago: executing program 3 (id=43): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$XFS_IOC_GETBMAPA(r0, 0xc020582c, &(0x7f0000000000)={0x4, 0x5, 0x4, 0x187a8, 0xd9}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000040)={0x1, 0x5, [@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @remote, @local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}, @local]}) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r2, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0xa4}, {0x6}]}) 5m36.52669884s ago: executing program 32 (id=43): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$XFS_IOC_GETBMAPA(r0, 0xc020582c, &(0x7f0000000000)={0x4, 0x5, 0x4, 0x187a8, 0xd9}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000040)={0x1, 0x5, [@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @remote, @local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}, @local]}) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r2, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0xa4}, {0x6}]}) 5m34.103552566s ago: executing program 2 (id=52): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000100001000000000000fffd000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a0104000000000000ef000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc980000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000006c0003806800008008000340000000025c000b802c0001800a0001006c696d69740000001c0002800c00024000000000000000030c00014000000000000100002c0001800a0001006c696d69740000001c0002800c00024000000000800000000c000140000000000000000814000000110001"], 0xfc}, 0x1, 0x0, 0x0, 0x4000850}, 0x844) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r5, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="34010000", @ANYRES16=r7, @ANYBLOB="050029bd708b000000002100000008000300", @ANYRES32=r8, @ANYBLOB], 0x134}}, 0x0) 5m33.230735075s ago: executing program 2 (id=59): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x8, 0x0, 0x0}}, 0x10) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000800000000000003000000000000000000000000000000fdfffffffbffffff0000000000000000ffffffffffffffff053b000000000000000000000000000102000000000000005600000000000000feffffffff7f4000020000000000000800000000000000000100050000000000440005"], 0xfc}}, 0x0) 5m33.042364868s ago: executing program 2 (id=61): poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000001705000300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a30000000000900020073797a32"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x2000c0c2) r1 = syz_clone(0x1320011, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r2) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000300000000000004000000080002000500000006000b000a"], 0x24}}, 0x0) setuid(0xee01) r4 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r4, &(0x7f0000000400)=""/48, 0x30) getdents(r4, 0xffffffffffffffff, 0x7a) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r7, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newqdisc={0x6c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x1ff, 0x4, 0x800, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xfffffff9, 0xfffffffa, 0x10, 0xffff}}]}]}}}]}, 0x6c}}, 0x0) sendto$packet(r5, &(0x7f00000001c0)="44c33b69ebc9e05e9bdec0c288a8", 0x1d, 0x830, &(0x7f0000000440)={0x11, 0x2, r8, 0x1, 0x6, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000780)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000680)=""/234, 0x14b, 0xea, 0x1}, 0x28) r10 = creat(&(0x7f0000000840)='./file0\x00', 0x111) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x18, 0x1000, 0x2, 0xa09, 0x8000, r4, 0x400, '\x00', 0x0, r9, 0x4, 0x2, 0x1, 0x0, @value=r10}, 0x50) tkill(r1, 0x12) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x32}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x97}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x280000, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) 5m33.033571079s ago: executing program 2 (id=62): r0 = socket$inet(0x2, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt', 0x0, 0x0) ioctl$EXT4_IOC_GETFSUUID(r1, 0x8008662c, 0x0) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mbind(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x1ff, 0x3) r3 = syz_clone(0x0, 0x0, 0x43, 0x0, 0x0, 0x0) process_vm_writev(r3, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) bind$inet(r0, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) listen(r0, 0x0) r4 = socket$inet(0x2, 0x1, 0x0) r5 = creat(&(0x7f0000000e40)='./file1\x00', 0x18) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0xa4c42, 0x108) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000140)={0xc, r5, 0x100000000, 0x54, 0x2, 0x293}) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000080)=r5, 0x4) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) bind$inet(r4, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) 5m32.299892689s ago: executing program 2 (id=65): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="a800000000010104000000000000000002000001240001801400018008000100e0000001083a0200e00000010c00028005000100000000000800084000009503040010"], 0xa8}, 0x1, 0x0, 0x0, 0x400d0}, 0x0) 5m29.147490035s ago: executing program 2 (id=72): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x1ea1e2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0xa, 0xc, "faf98357e5a1149989fc8dbec3bd02b82a128bbad0099cebdc25f5abb534464c516bdd8a0f3500", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "715237641a8ccf162e43ac61f700000000009b4100", [0x9, 0xa]}}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002940), r1) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000002980)={'wpan0\x00', 0x0}) (rerun: 32) sendmsg$NL802154_CMD_NEW_SEC_DEV(r2, &(0x7f0000002a80)={0x0, 0x0, &(0x7f0000002a40)={&(0x7f00000029c0)={0x20, r3, 0x1, 0x70bd2b, 0x2, {}, [@NL802154_ATTR_SEC_DEVICE={0x4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c000}, 0x40000) (async, rerun: 64) r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) (rerun: 64) fcntl$notify(r5, 0x402, 0x80000012) (async) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r5, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xfc, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0xfc}, 0x1, 0x0, 0x0, 0xc010}, 0x8004) write$binfmt_elf64(r6, &(0x7f0000000900)={{0x7f, 0x45, 0x4c, 0x46, 0x20, 0x4, 0x3, 0x0, 0x100000000000047e, 0x2, 0x3e, 0xffffffeb, 0x1ea, 0x40, 0x2, 0xfffffffd, 0x6, 0x38, 0x2e, 0xfffe, 0x1, 0x3}, [{0x3, 0xf, 0x7, 0x11, 0x8000000000000, 0xe5, 0xfffffffffffffffd, 0x3}]}, 0x178) (async) close(r6) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) 5m29.123201246s ago: executing program 33 (id=72): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x1ea1e2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0xa, 0xc, "faf98357e5a1149989fc8dbec3bd02b82a128bbad0099cebdc25f5abb534464c516bdd8a0f3500", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "715237641a8ccf162e43ac61f700000000009b4100", [0x9, 0xa]}}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002940), r1) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000002980)={'wpan0\x00', 0x0}) (rerun: 32) sendmsg$NL802154_CMD_NEW_SEC_DEV(r2, &(0x7f0000002a80)={0x0, 0x0, &(0x7f0000002a40)={&(0x7f00000029c0)={0x20, r3, 0x1, 0x70bd2b, 0x2, {}, [@NL802154_ATTR_SEC_DEVICE={0x4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c000}, 0x40000) (async, rerun: 64) r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) (rerun: 64) fcntl$notify(r5, 0x402, 0x80000012) (async) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r5, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xfc, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0xfc}, 0x1, 0x0, 0x0, 0xc010}, 0x8004) write$binfmt_elf64(r6, &(0x7f0000000900)={{0x7f, 0x45, 0x4c, 0x46, 0x20, 0x4, 0x3, 0x0, 0x100000000000047e, 0x2, 0x3e, 0xffffffeb, 0x1ea, 0x40, 0x2, 0xfffffffd, 0x6, 0x38, 0x2e, 0xfffe, 0x1, 0x3}, [{0x3, 0xf, 0x7, 0x11, 0x8000000000000, 0xe5, 0xfffffffffffffffd, 0x3}]}, 0x178) (async) close(r6) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) 2m28.299229041s ago: executing program 4 (id=1490): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000000440)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000040)="b1ec30", 0x3}], 0x1}}, {{&(0x7f0000000180)={0xa, 0x4e23, 0xe, @loopback, 0x101}, 0x1c, &(0x7f0000002980)=[{&(0x7f00000001c0)="53738d", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000280)="571f722e", 0x4}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="140000000000000029000000430000008000000000000000140000000000000029000000340000000900000000000000700000000000000029000000040000005e0a000000000000084aac3e280e70a77eb4b7b4a7b9d9f801abe4e2e349dfb78179c5ac0abc5a988cb337be2a2e75246060642e5708fb37fc2734dd1f24e7601fdd9b235689ae2a95ebd0ad4fac97b9d7fc82d9000100c204000100010000"], 0xb8}}], 0x3, 0x4000054) 2m28.250012475s ago: executing program 4 (id=1491): syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000580)='./file0\x00', 0x0, &(0x7f00000005c0), 0x1, 0x50d, &(0x7f0000000600)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0xbc) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000001f40)=ANY=[@ANYBLOB="000000004e900200000000000300010000000000000000000000000000000000000000000000000000003300000000000000000000000000000000000000000000000000050000000000000000000000ffffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff"]) 2m28.134089372s ago: executing program 4 (id=1495): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="a800000000010104000000000000000002000001240001801400018008000100e000000108000200e00000010c00028005a80100000000000800084000009503040010"], 0xa8}, 0x1, 0x0, 0x0, 0x400d0}, 0x0) 2m27.983301193s ago: executing program 4 (id=1498): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0xa01) setresuid(0xee01, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a0, 0xc000, 0x8, 0x132}) pipe2$watch_queue(&(0x7f0000000140), 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x17, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) time(0x0) r1 = syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000004c0)='./file0\x00', 0x0, &(0x7f0000000500)=ANY=[], 0xff, 0x2b1, &(0x7f0000000bc0)="$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") openat$incfs(r1, &(0x7f0000000540)='.log\x00', 0x1c10c1, 0x9c37611dc13d0da4) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c044}, 0x40000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f00000002c0)={0x0, 'syzkaller0\x00', {0x1}, 0xb5}) r6 = socket$netlink(0x10, 0x3, 0x0) preadv(r4, &(0x7f0000000300)=[{&(0x7f00000003c0)=""/18, 0x12}], 0x3e8, 0xe, 0x6) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) r8 = open(&(0x7f0000000300)='.\x00', 0x20000, 0x0) ioctl$FS_IOC_SETFLAGS(r8, 0x40086602, &(0x7f00000001c0)=0x10) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="500000001044c50c47288fcf2c4a000000ffdbdf2500080080", @ANYRES32=0x0, @ANYBLOB="002802000089040008000300", @ANYRES32=r7, @ANYBLOB="280012800a000100767863616e"], 0x50}, 0x1, 0xd, 0x0, 0x480c5}, 0x20000000) 2m27.771558977s ago: executing program 4 (id=1504): socket$isdn_base(0x22, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000002c0)={'wg0\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB="e0100000", @ANYRES16=r2, @ANYBLOB="0500000003000000000001000000060006004e240000901008809005008024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b24000100000000000000000000000000000000000021000000000000000000000000000024000200fcbefe9641719404cc5c9ab2766dd4793e367b0ea55e65e2e3416ac9d4e68841240002001171ee8da334a5099295af229a5d237a7f4102f01f28b34347d6cbbe135d83ec24000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691cb40409807c000080060001000a00000014000200000000000000000000000000000000010500030002000000060001000200000008000200ac1414aa0500030001000000060001000a00000014000200ff0100000000000000000000000000010500030001000000060001000200000008000200e00000010500030000000000f4000080060001000a00000014000200fc0000000000000000000000000000000500030001000000060001000a00000014000200fc0200000000000000000000000000010500030000000000060001000200000008000200e00000020500030003000000060001000200000008000200000000000500030000000000060001000200000008000200ac1414bb0500030001000000060001000200000008000200ac1414bb0500030000000000060001000a00000014000200000000000000000000000000000000010500030002000000060001000a00000014000200fc0200000000000000000000000000000500030003000000340000800600010002000000080002000a0101010500030004000000060001000200000008000200ac1414aa050003000300000064000080060001000a00000014000200200100000000000000000000000000000500030002000000060001000200000008000200ac1414aa0500030001000000060001000a00000014000200ff010000000000000000000000000001050003000200000094000080060001000200000008000200ac1e00010500030002000000060001000200000008000200e00000010500030002000000060001000a00000014000200fc0000000000000000000000000000000500030002000000060001000200000008000200000000000500030003000000060001000a00000014000200fe80000000000000000000000000000e050003000000000040000080060001000a00000014000200fc0200000000000000000000000000000500030002000000060001000200000008000200ac1414aa050003000000000064000080060001000a00000014000200200100000000000000000000000000020500030001000000060001000a00000014000200fc02000000000000000000000000000105000300020000000600010002000000080002000a010100050003000200000070000080060001000a00000014000200ff0200000000000000000000000000010500030000000000060001000a00000014000200000000000000000000000000000000000500030002000000060001000a0000001400020000000000000000000000000000000001050003000000000000010080060001000a00000014000200ff0200000000000000000000000000010500030000000000060001000200000008000200000000000500030003000000060001000200000008000200640101000500030002000000060001000200000008000200640101010500030001000000060001000200000008000200ac1414aa0500030002000000060001000a00000014000200fe8000000000000000000000000000bb05000300020000000600010002000000080002007f0000010500030002000000060001000a00000014000200fc0200000000000000000000000000010500030003000000060001000200000008000200640101010500030001000000240002005da952055e5857d673cddd36909746c80efa3ff95c317de1063db32bc80a0b3e1803008024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b39220600050005000000e802098058000080060001000200000008000200ac1e00010500030001000000060001000a00000014000200000000000000000000000000000000010500030000000000060001000200000008000200ffffffff05000300010000007c000080060001000a00000014000200000000000000000000000000000000010500030002000000060001000200000008000200ac1414bb0500030002000000060001000a000000140002000000000000000000000000000000000105000300020000000600010002000000080002000a0101010500030003000000f4000080060001000a0000001400020000000000000000000000ffffac1414aa0500030003000000060001000200000008000200ac1414aa05000300000000000600010002000000080002000a01010205000300020000000600010002000000080002007f00000105000300000000000600010002000000080002000a0101010500030003000000060001000200000008000200e00000010500030003000000060001000a00000014000200fc01000000000000000000000000000005000300010000000600010002000000080002000a0101000500030000000000060001000200000008000200ac1e0101050003000200000094000080060001000a00000014000200fc0200000000000000000000000000010500030002000000060001000a00000014000200ff0100000000000000000000000000010500030001000000060001000200000008000200e00000010500030002000000060001000200000008000200ac1414bb0500030001000000060001000200000008000200ffffffff050003000200000088000080060001000a00000014000200fe8000000000000000000000000000aa0500030001000000060001000200000008000200ac1414aa0500030002000000060001000a00000014000200fe8800000000000000000000000001010500030002000000060001000a00000014000200ff02000000000000000000000000000105000300020000007c000080200004000a004e2100000006fc0100000000000000000000000000010400000008000a000100000024000100f44da367a88ee6564f020211456727082f5debee8b1bf5eb7337341b459b3922080003000300000024000200379aa288b2244a5b504ba04bea45625d328fb93b62e607a1b2e4da2f7f76a549780000800800030001000000080003000400000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b3922080003000000000024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b1400040002004e22000000000000000000000000e4060080dc020980f4000080060001000a00000014000200000000000000000000000000000000000500030002000000060001000a00000014000200fc0000000000000000000000000000000500030001000000060001000200000008000200ffffffff0500030001000000060001000200000008000200ac1e00010500030001000000060001000200000008000200e000000105000300020000000600010002000000080002007f0000010500030002000000060001000a00000014000200000000000000000000000000000000010500030001000000060001000a00000014000200fc010000000000000000000000000001050003000300000034000080060001000200000008000200640101000500030001000000060001000200000008000200ac1414bb050003000200000000010080060001000a00000014000200200100000000000000000000000000010500030000000000060001000200000008000200e000000205000300020000000600010002000000080002006401010005000300020000000600010002000000080002007f00000105000300010000000600010002000000080002007f0000010500030001000000060001000a00000014000200fe8000000000000000000000000000bb0500030000000000060001000200000008000200ffffffff0500030000000000060001000200000008000200e00000010500030003000000060001000a00000014000200fc0100000000000000000000000000010500030000000000940000800600010002000000080002006401010005000300010000000600010002000000080002006401010205000300000000000600010002000000080002007f0000010500030003000000060001000200000008000200e00000020500030003000000060001000200000008000200ac1414120500030002000000060001000200000008000200ac14142d05000300020000001c000080060001000200000008000200ffffffff05000300030000000800030002000000200004000a004e2000000005fc010000000000000000000000000001000000009403098094000080060001000a0000001400020000000000000000000000ffffac1414bb0500030003000000060001000a00000014000200fe8800000000000000000000000000010500030002000000060001000a00000014000200ff0100000000000000000000000000010500030003000000060001000a00000014000200fe880000000000000000000000000101050003000100000064000080060001000a00000014000200fe8000000000000000000000000000bb0500030000000000060001000200000008000200ac1414bb0500030001000000060001000a0000001400020000000000000000000000ffffe00000020500030003000000f4000080060001000200000008000200000000000500030001000000060001000a00000014000200000000000000000000000000000000010500030003000000060001000200000008000200ac1414aa0500030001000000060001000a00000014000200fe80000000000000000000000000003e05000300010000000600010002000000080002007f0000010500030001000000060001000a00000014000200ff0200000000000000000000000000010500030001000000060001000a00000014000200000000000000000000000000000000010500030000000000060001000200000008000200e0000001050003000000000058000080060001000a00000014000200fe8000000000000000000000000000bb0500030000000000060001000200000008000200ac1414410500030010000000060001000200000008000200ac1e00010500030001000000f4000080060001000200000008000200640101000500030002000000060001000a00000014000200200100000000000000000000000000000500030000000000060001000a00000014000200fc0200000000000000000000000000010500030003000000060001000a00000014000200fe8000000000000000000000000000aa0500030003000000060001000200000008000200ac1414aa0500030000000000060001000200000008000200000000000500030000000000060001000200000008000200ac1414270500030000000000060001000a0000001400020020010000000000000000000000000002050003000100000058000080060001000200000008000200ac1414aa0500030001000000060001000a00000014000200fe8000000000000000000000000000140500030000000000060001000200000008000200e0000001050003000000000024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b240002000f1b8b82264208ab1a2dce776c03b9f348f500ef8e7606466943f5ba2ae2881e0c0000800800030006000000060006004e24000008000100", @ANYRES32=r3, @ANYBLOB="240003"], 0x10e0}}, 0x0) 2m27.504147676s ago: executing program 4 (id=1509): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) unshare(0x2a020480) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r2, 0x5}, 0x10) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r2, r1, 0x5, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x401, 0x0, 0x1, 0xffffffffffffffff}}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[], 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, &(0x7f0000000000), &(0x7f0000000080)=0x4) r3 = socket(0x400000000010, 0x3, 0x0) unshare(0x22020600) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'wg0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x2, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, &(0x7f00000017c0)=[{&(0x7f0000000040)="27031c00160014000000002f1eafacf706e105400000894f00050003ee0b80558ddbba9b37242d37a518fc9c5be50eaf07c3650596", 0x35}], 0x1}, 0x4) 2m26.901776457s ago: executing program 34 (id=1509): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) unshare(0x2a020480) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r2, 0x5}, 0x10) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r2, r1, 0x5, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x401, 0x0, 0x1, 0xffffffffffffffff}}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[], 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, &(0x7f0000000000), &(0x7f0000000080)=0x4) r3 = socket(0x400000000010, 0x3, 0x0) unshare(0x22020600) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'wg0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x2, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, &(0x7f00000017c0)=[{&(0x7f0000000040)="27031c00160014000000002f1eafacf706e105400000894f00050003ee0b80558ddbba9b37242d37a518fc9c5be50eaf07c3650596", 0x35}], 0x1}, 0x4) 1m26.789665531s ago: executing program 7 (id=2052): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x45, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xff, 0x4}, 0x12122, 0x10000, 0xfffffffe, 0x5, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x47, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x528, 0x0, @perf_bp={0x0, 0x1}, 0x419, 0x40000000, 0x0, 0x8, 0x103fb, 0x1ff, 0x1ff, 0x0, 0x0, 0x0, 0x400000000000007}, 0x0, 0x1, 0xffffffffffffffff, 0xb) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x652c0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x800000, 0x3fff8000}, 0x844, 0x32, 0x43a1bd76, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB], &(0x7f0000000440)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000180)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}, {@bh}, {@nomblk_io_submit}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x469, &(0x7f0000000500)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) ioctl$FIBMAP(r3, 0x1, &(0x7f0000000080)=0x3f015764) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbe, 0x0, @perf_config_ext={0x1800000000000000, 0x100000000}, 0x17008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000), 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001300)={{r4, 0xffffffffffffffff}, &(0x7f0000000400), &(0x7f00000003c0)='%-010d \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000900)={r5}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000140)={r6, 0xffffffffffffffff, 0xb, 0x0, @val=@perf_event={0x9}}, 0x18) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x80008000, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = gettid() process_vm_writev(r7, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 1m25.04759666s ago: executing program 7 (id=2066): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="a800000000010104000000000000000002000001240001801400018008000100e000000108000200e00000010c0002800500010000000f000800084000009503040010"], 0xa8}, 0x1, 0x0, 0x0, 0x400d0}, 0x0) 1m24.994050893s ago: executing program 7 (id=2067): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)={0x58, 0x2, 0x6, 0x301, 0x0, 0x0, {0x5}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x40}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}}, 0x8) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) io_uring_setup(0x1b7f, &(0x7f00000003c0)={0x0, 0x979b, 0x20, 0x1, 0x39d}) bind$packet(r0, &(0x7f00000001c0)={0x11, 0x0, r3, 0x1, 0x2, 0x6, @broadcast}, 0x14) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x400000c, 0x13012, r5, 0x0) mprotect(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0xb) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r7) timer_create(0x2, 0x0, 0x0) timer_gettime(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r8, 0x0, 0x0) sendmsg$nl_route_sched(r8, 0x0, 0x4890) socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCOUTQ(r0, 0x5411, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 1m24.857521803s ago: executing program 7 (id=2068): socket$inet_tcp(0x2, 0x1, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0xfffff000) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x4014, &(0x7f00000000c0), 0x1, 0x3f9, &(0x7f0000000900)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.parent_freezing\x00', 0x275a, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x80d4) bind$can_j1939(0xffffffffffffffff, &(0x7f00000000c0), 0x18) syz_clone3(&(0x7f0000000400)={0xa0100, &(0x7f0000000180), &(0x7f00000001c0)=0x0, &(0x7f0000000200), {0x3}, &(0x7f0000000240)=""/96, 0x60, &(0x7f00000002c0)=""/159, &(0x7f00000003c0)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x3, {r0}}, 0x58) ptrace$poke(0x4, r1, &(0x7f0000000480), 0x80000000) r2 = syz_clone(0xc008000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0xffff, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r3 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r3, 0x0, 0x0, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x4d, 0x1, 0x3, 0x104}, {0x60, 0x8}, {0x0, 0x0, 0xfe, 0x3ff}, {0x0, 0x0, 0x0, 0xffffffff}, {0x6, 0x4, 0x4, 0x10000000}]}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) bpf$MAP_CREATE(0x0, 0x0, 0x0) tgkill(r2, r2, 0x13) ptrace(0x10, r2) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x28011, r0, 0x0) madvise(&(0x7f000000b000/0x3000)=nil, 0x3000, 0x9) 1m23.618607358s ago: executing program 7 (id=2075): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200c093, 0x2, @perf_bp={0x0, 0x8}, 0x24, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r0, 0x5607, 0xe) 1m23.067539945s ago: executing program 7 (id=2081): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001080)=@mangle={'mangle\x00', 0x2, 0x6, 0x6e0, 0x0, 0x540, 0x540, 0x610, 0x0, 0x610, 0x610, 0x610, 0x610, 0x610, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [0xffffffff, 0xff000000], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x21}, 0x0, 0x188, 0x1d0, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2, [0x0, 0xffffff00]}}, @common=@inet=@multiport={{0x50}, {0x0, 0x0, [0x4e23, 0x80], [0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@private=0xa000000, @ipv4=@empty, 0x40, 0x30, 0x1}}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x0, 0x0, 0x0, 0xffffff00], [], '\x00', 'bond_slave_0\x00', {}, {}, 0x2f, 0x9}, 0x0, 0x168, 0x1a0, 0x48000000, {}, [@common=@ah={{0x30}, {[0x4d2, 0x4d3], 0xa000000, 0x4, 0x3}}, @common=@srh1={{0x90}, {0xc, 0x2, 0x4, 0x8, 0x8, @ipv4={'\x00', '\xff\xff', @loopback}, @private1, @private0, [0xff, 0xff000000, 0x0, 0xff000000], [0xffffffff, 0xffffff00, 0x0, 0xff], [0xff000000, 0x0, 0x0, 0x80], 0x804}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0x6, 0x5}, {0xffffffffffffffff, 0x6, 0x1}, {0x0, 0x4, 0x2}, 0xfffffffe}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0xfe}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x740) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x50, r1, 0x787fa000) r2 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000040)=0x14, 0x40800) connect$packet(r2, &(0x7f0000000080)={0x11, 0x8, r3, 0x1, 0xfc, 0x6, @link_local}, 0x14) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000000706010800000000000000000a0000040500010007000000925c9885fdb7f9fc5a2b3fd8de7cd7331a984e37747c3d3f6f086e6d0f68387d7739718ecfd79786e5fce277c58a3f"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) 1m23.067251815s ago: executing program 35 (id=2081): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001080)=@mangle={'mangle\x00', 0x2, 0x6, 0x6e0, 0x0, 0x540, 0x540, 0x610, 0x0, 0x610, 0x610, 0x610, 0x610, 0x610, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [0xffffffff, 0xff000000], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x21}, 0x0, 0x188, 0x1d0, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2, [0x0, 0xffffff00]}}, @common=@inet=@multiport={{0x50}, {0x0, 0x0, [0x4e23, 0x80], [0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@private=0xa000000, @ipv4=@empty, 0x40, 0x30, 0x1}}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x0, 0x0, 0x0, 0xffffff00], [], '\x00', 'bond_slave_0\x00', {}, {}, 0x2f, 0x9}, 0x0, 0x168, 0x1a0, 0x48000000, {}, [@common=@ah={{0x30}, {[0x4d2, 0x4d3], 0xa000000, 0x4, 0x3}}, @common=@srh1={{0x90}, {0xc, 0x2, 0x4, 0x8, 0x8, @ipv4={'\x00', '\xff\xff', @loopback}, @private1, @private0, [0xff, 0xff000000, 0x0, 0xff000000], [0xffffffff, 0xffffff00, 0x0, 0xff], [0xff000000, 0x0, 0x0, 0x80], 0x804}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0x6, 0x5}, {0xffffffffffffffff, 0x6, 0x1}, {0x0, 0x4, 0x2}, 0xfffffffe}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0xfe}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x740) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x50, r1, 0x787fa000) r2 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000040)=0x14, 0x40800) connect$packet(r2, &(0x7f0000000080)={0x11, 0x8, r3, 0x1, 0xfc, 0x6, @link_local}, 0x14) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000000706010800000000000000000a0000040500010007000000925c9885fdb7f9fc5a2b3fd8de7cd7331a984e37747c3d3f6f086e6d0f68387d7739718ecfd79786e5fce277c58a3f"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) 9.681257138s ago: executing program 8 (id=2499): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x45, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xff, 0x4}, 0x12122, 0x10000, 0xfffffffe, 0x5, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x47, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x528, 0x0, @perf_bp={0x0, 0x1}, 0x419, 0x40000000, 0x0, 0x8, 0x103fb, 0x1ff, 0x1ff, 0x0, 0x0, 0x0, 0x400000000000007}, 0x0, 0x1, 0xffffffffffffffff, 0xb) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x652c0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x800000, 0x3fff8000}, 0x844, 0x32, 0x43a1bd76, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB], &(0x7f0000000440)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = gettid() process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 8.459607901s ago: executing program 8 (id=2503): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x64, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYBLOB='\x00\x00\x00\x00'], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) sendmsg$NFT_BATCH(r4, &(0x7f0000000a40)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000a00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELCHAIN={0xbc, 0x5, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_CHAIN_USERDATA={0x8e, 0xc, "eb4860297dd144d79644e37f7638062973ecf0879e5c06099315bdb343c330910fc9cd7497d832bce8121ba5d93f8ad0376e6b486657653f02206ad7e048e9b366e948c5fdcde677c0da578d4f4f533edbe97c9cd3de1e0de0ec4dd8ddeca9fa3fed60294c5de4a0c99d9f129152f969e5ee697c9737c20542ccceaa9ee3ac97a274fe44b1976a6f712b"}]}, @NFT_MSG_NEWFLOWTABLE={0x188, 0x16, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_FLOWTABLE_HOOK={0x134, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfffffffa}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_virt_wifi\x00'}, {0x14, 0x1, 'hsr0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0xcc, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bond_slave_0\x00'}, {0x14, 0x1, 'bond_slave_1\x00'}, {0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'vlan1\x00'}, {0x14, 0x1, 'ip6tnl0\x00'}, {0x14, 0x1, 'veth1_to_bridge\x00'}, {0x14, 0x1, 'wlan0\x00'}, {0x14, 0x1, 'pimreg0\x00'}, {0x14, 0x1, 'pim6reg\x00'}, {0x14, 0x1, 'ip6gretap0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vxcan1\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x34, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'team_slave_0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}, @NFT_MSG_NEWCHAIN={0xc8, 0x3, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_CHAIN_USERDATA={0x4a, 0xc, "67736e4c633f520849b24de9a39710a75a7195886b8e1afff6cf23530807a1c9cf6790c49ef199eae2c3eff85ec5664369285776f0d60d9ccf1cfc5e0f1fbe3dddc6db291334"}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_CHAIN_HOOK={0x1c, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x47bd5fd3}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_COUNTERS={0x34, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x97be}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x81}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xdfb}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x354}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x2) syz_genetlink_get_family_id$nl802154(0x0, r0) r6 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x6, 0x40, 0x3, 0x0, 0x4000000000, 0xd4, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x100882, 0x7ff, 0x6, 0x0, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12011, r6, 0x0) 8.279639324s ago: executing program 5 (id=2504): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x45, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xff, 0x4}, 0x12122, 0x10000, 0xfffffffe, 0x5, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x47, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x528, 0x0, @perf_bp={0x0, 0x1}, 0x419, 0x40000000, 0x0, 0x8, 0x103fb, 0x1ff, 0x1ff, 0x0, 0x0, 0x0, 0x400000000000007}, 0x0, 0x1, 0xffffffffffffffff, 0xb) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x652c0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x800000, 0x3fff8000}, 0x844, 0x32, 0x43a1bd76, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB], &(0x7f0000000440)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000180)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}, {@bh}, {@nomblk_io_submit}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x469, &(0x7f0000000500)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) ioctl$FIBMAP(r3, 0x1, &(0x7f0000000080)=0x3f015764) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 6.077693354s ago: executing program 8 (id=2510): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=@gettfilter={0x6c, 0x2e, 0x10, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x1, 0xb}, {0xfff2, 0xb}, {0xfff2, 0xffff}}, [{0x8}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0xaf3}, {0x8, 0xb, 0x71c}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4040000}, 0x4048801) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="3c00000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x3c}, 0x1, 0x0, 0x0, 0x34041043}, 0xc000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYRES8=r2], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca2d410}, 0x4008840) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000980)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="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", @ANYRES32=r0, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) fcntl$F_GET_RW_HINT(r1, 0x40b, &(0x7f00000000c0)) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2200c16, &(0x7f0000000780), 0xff, 0x25e, &(0x7f0000000e80)="$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") io_uring_setup(0x2f04, &(0x7f000000c480)={0x0, 0xa868, 0x1, 0x20001, 0x2d6}) r5 = io_uring_setup(0x7625, &(0x7f0000000600)={0x0, 0x653f, 0x20, 0x2, 0x135}) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r6, 0x6, 0x2, 0x0, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r5, 0x1e, &(0x7f0000000280), 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x143041, 0x0) r8 = socket(0x25, 0x801, 0x0) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/power/image_size', 0x129a82, 0x0) sendfile(r8, r9, 0x0, 0x4) pwritev2(r7, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000000)=[{0x6, 0xfd, 0xc, 0x43}]}, 0x10) unshare(0x20040600) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r7, 0x58, &(0x7f0000000400)}, 0x10) getsockopt$sock_buf(r10, 0x1, 0x1a, 0xfffffffffffffffd, &(0x7f00000003c0)=0x4d) 5.051536855s ago: executing program 8 (id=2513): prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x2, 0x6, 0x548, 0x1e8, 0xe0, 0x3a8, 0x3a8, 0x3a8, 0x478, 0x478, 0x478, 0x478, 0x478, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe0, 0x0, {0x7a00000010000000}}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x2, 0x1}, {0xffffffffffffffff, 0x5, 0xc}, {0xffffffffffffffff}, 0x6, 0x7ff}}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0xa}, [0x0, 0x0, 0x0, 0xffffff00], [0x0, 0x0, 0xffffffff, 0xff], 'macvlan0\x00', 'veth1_vlan\x00', {}, {}, 0x6, 0x7f, 0x4}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@private=0xa010102, [0xff, 0xff, 0xff, 0xff000000], 0x4e23, 0x4e20, 0x4e21, 0x4e24, 0x7, 0x3, 0x81, 0x8, 0xbd8}}}, {{@uncond, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@AUDIT={0x28}}, {{@ipv6={@empty, @private0, [0xff, 0xffffffff, 0xffffff00, 0xffffffff], [0xffffff00, 0xffffff, 0xff, 0xffffffff], 'geneve0\x00', 'xfrm0\x00', {0xff}, {}, 0x3a, 0x5, 0x0, 0x8}, 0x40000000, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@rand_addr=0x64010100, @ipv4=@loopback}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a8) 4.985287689s ago: executing program 0 (id=2514): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd27, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8, "0000000000590072d8001000000100"}}}]}, 0x48}}, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext2\x00', &(0x7f0000000f00)='./file0\x00', 0x0, &(0x7f00000002c0)={[{@minixdf}]}, 0x1, 0x27e, &(0x7f0000000500)="$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") ioprio_set$pid(0x3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x4000000000000, 0xffffffffffbffffe, 0x7f, 0xfffffffd}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105142, 0x2c) sendfile(r3, r3, 0x0, 0x252c000000000000) 4.887682346s ago: executing program 0 (id=2516): socket$isdn_base(0x22, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000002c0)={'wg0\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB="e0100000", @ANYRES16=r2, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="240003"], 0x10e0}}, 0x0) 4.773617174s ago: executing program 0 (id=2518): syz_usb_connect$lan78xx(0x3, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x20040084) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in=@rand_addr=0x64010100, @in6=@loopback, 0x0, 0x0, 0x3, 0x0, 0x0, 0x80, 0xa0}, {@in6=@dev={0xfe, 0x80, '\x00', 0x2c}, 0x4d6, 0x33}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffed, 0x3}, {0x0, 0x0, 0x2, 0xfffbfffffffffffe}, {0x0, 0x0, 0x796}, 0x70bd2d, 0x0, 0x0, 0x0, 0x2, 0xe55286f1921f74be}, 0x0, 0x1a0b1}}, 0xf8}, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00000000000000000000000000000000000000000080ffffffffffffff0000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) 4.689936969s ago: executing program 5 (id=2519): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="a800000000010104000000000000000002000001240001801400018008000100e000000108000200e00000010c00028005000100000900000800084000009503040010"], 0xa8}, 0x1, 0x0, 0x0, 0x400d0}, 0x0) 4.623119674s ago: executing program 5 (id=2520): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f0000000040)={0xd1, 0x7, 0x800, 0x1, 0x100}) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x7, 0x3c26c, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0x2}, 0x10026, 0x10003, 0x1, 0x3, 0x100008, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r2, 0x0) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x7, 0x34328, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0, 0x2}, 0x10026, 0x7, 0xfffffff8, 0x2, 0x100008, 0x20007, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, r2, 0xa) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r3, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000001c0)=ANY=[@ANYRESHEX=r1], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41100}, 0x94) ioctl$NILFS_IOCTL_RESIZE(0xffffffffffffffff, 0x40086e8b, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180200002343ffff0000000000000000850000004100000095"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48}, 0x94) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r5, r6, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xe80, &(0x7f0000001b00)=ANY=[], 0x0) openat(0xffffffffffffff9c, 0x0, 0x1c1840, 0x0) r7 = open(&(0x7f00000000c0)='.\x00', 0x20000, 0x80) getdents64(r7, &(0x7f0000000fc0)=""/224, 0xe0) 4.597627436s ago: executing program 6 (id=2521): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0x10, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300004a000000850000006900000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x66, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.163639515s ago: executing program 0 (id=2522): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x64, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x7a3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x3) ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, r4, 0x6, 0x4002) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x8, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0xbdc}, 0x10, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r3) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYBLOB='\x00\x00\x00\x00'], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x3) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket(0x840000000002, 0x3, 0xff) sendmsg$inet(r6, &(0x7f0000000900)={&(0x7f0000000000)={0x2, 0x4e23, @private=0xa010101}, 0x10, &(0x7f0000000040)}, 0x4004884) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="000227bd7000ffdbdf254900000008000100480000006feaa0aa5771c3db24af3c91a86d61a2bc9e9eb08edc68baa959d2e119c711e38c40f2a03e227a741712111b9ef6281443745002cac1dc85503cc572ea2465b3ce83b94e6576f9e9237dd35bf13c23aab38f801f6dcdd3cbe776cf955b8f19463d2d066a4b4b294520001648dd561e06144018"], 0x1c}, 0x1, 0x0, 0x0, 0x8011}, 0x810) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00', @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x24008080) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'erspan0\x00'}) 4.0969297s ago: executing program 5 (id=2524): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f00000002c0)={[{@test_dummy_encryption_v1}, {@usrjquota}, {@auto_da_alloc}, {@init_itable}, {@nodioread_nolock}, {@journal_checksum}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}]}, 0x1, 0x587, &(0x7f0000000940)="$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") setxattr$incfs_metadata(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280), &(0x7f0000000380)="30573472b621739984c336124406e8", 0xf, 0x1) socket$netlink(0x10, 0x3, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000002280), 0x2, 0x0) preadv(r2, &(0x7f0000003700)=[{&(0x7f00000022c0)=""/4096, 0x1000}, {0x0}], 0x2, 0x50, 0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x4000, &(0x7f00000000c0)={[{@noinit_itable}]}, 0x1, 0x512, &(0x7f0000000c40)="$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") syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) request_key(0x0, &(0x7f0000002840)={'syz', 0x1}, 0x0, 0x0) socket(0x2, 0x80805, 0x0) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xfd}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 3.000565855s ago: executing program 6 (id=2525): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_tables_targets\x00') preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/212, 0xd4}], 0x1, 0x30, 0xf5) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000009700)={r0, &(0x7f0000008700)="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", 0x0, 0x2}, 0x20) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="fb180400800b010014001a80100005800c000180080001"], 0x34}, 0x1, 0x0, 0x0, 0x4015}, 0x20002000) 3.000264205s ago: executing program 6 (id=2526): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="02030002130000002dbd7000ffdbdf25010014102300000005000600000000030a00ffffffffffffff80000000000000000000b5f4943a01fbffffff0000000002000100000000000400050c0000000005000500000000000a000000000000000000000000000000000000000000000107000000000000000400080098"], 0x98}, 0x1, 0x7}, 0x14) 2.078733788s ago: executing program 8 (id=2527): openat$pfkey(0xffffffffffffff9c, 0x0, 0x101000, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$inet_sctp(0x2, 0x5, 0x84) close(r0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000180)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000006c0)=[{0x0}, {&(0x7f0000000540)="7f782bb2", 0x4}], 0x2, &(0x7f00000000c0)=ANY=[@ANYBLOB="2000000000000000840000000200000006000400280100000b008002", @ANYRES32=r2], 0x20, 0x6044}, 0x6) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4084) set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e20}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x40800) 2.007490673s ago: executing program 6 (id=2528): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x8, 0x0, 0x0}}, 0x10) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000800000000000003000000000000000000000000000000fdfffffffbffffff0000000000000000ffffffffffffffff053b000000000000000000000000000002000000000000005600000000000000feffffffff7f4000020000000000000800000000000000000100050000000000440005"], 0xfc}}, 0xff80) 2.007160293s ago: executing program 1 (id=2529): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'geneve0\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x4, 0x4, 0x4, 0x10005, 0x800, 0xffffffffffffffff, 0x7fffffff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x37}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@newlink={0x6c, 0x10, 0x401, 0x70bd28, 0x1, {0x0, 0x0, 0x0, 0x0, 0x8, 0x10000}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x34, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x28, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x800}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x83, 0xffffff81}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8001, 0xffffffff}}]}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004) 1.072139687s ago: executing program 6 (id=2530): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x45, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xff, 0x4}, 0x12122, 0x10000, 0xfffffffe, 0x5, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x47, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x528, 0x0, @perf_bp={0x0, 0x1}, 0x419, 0x40000000, 0x0, 0x8, 0x103fb, 0x1ff, 0x1ff, 0x0, 0x0, 0x0, 0x400000000000007}, 0x0, 0x1, 0xffffffffffffffff, 0xb) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x652c0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x800000, 0x3fff8000}, 0x844, 0x32, 0x43a1bd76, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB], &(0x7f0000000440)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000180)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}, {@bh}, {@nomblk_io_submit}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x469, &(0x7f0000000500)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) ioctl$FIBMAP(r3, 0x1, &(0x7f0000000080)=0x3f015764) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 1.055643978s ago: executing program 1 (id=2531): r0 = fsopen(&(0x7f00000004c0)='mqueue\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000340)='Yockfs\x00\x01\f\xcc\x0e\xc94\x0f/\xb7~\x10\xf8\xe9\xd71\xc1s}\x9d\xd8\xc0\xb1>\xb4\x7f\xcf\x93\xf3^X\x1e<\xa1\xa992\x88\xd4/\xb9\xb3\xd2,\xa5:\x8d\x0e\x8ei\x03v\xf4\t%\x1aR\x84(\xe0\xb3O\xe2\x96a\xa2O\xa6\x90\xfd;0\\\xb8\x94\rz\x80\xbf{\xf1\xbfP\xd4#\xf1WH\x01#\xf3D\xa8/0T\xed\x92F\xe6&\x88\x83\x10\x83zU\xe4t\xf2\\\b\xa0\xef\x04\xeb\xe4\xbfu\x9a\x0eyb\xfb\x1d\xd6#\xaf\x18\xfa\xa8\xef\x9cm\x9dU\x9cg\xdek\x1fA\xa6\xd9\xc1\xc6a\x94\xec\xa7D\x05;\xd5\x95e\t\xc4y\x90\xbfx\x97\xe0\x04jp(>\xca\xfc\x18C\xa2\xa3aEk\x9f\vo\xe1\x11\xa2\x05\xd7\xd0e|\ns\xb1X\x86\xde\xea\xeaP\xdf\xe4\xe9\xe7\x128\xe9BP\xe0{<\xa8\x91\xa0>\xe1\xceR\x1a\xcd\x8c\x03A\xa1\x81*e\xd9\x06P\x87\x89\xf2\x96\x0f\xb8\x8eBG0\x04\xfd\n\x12\xfa\x01\'\xa8i\xd8\x19Ibm!5j\xd6\xae\xd8\xb5(w\xa9\xcdy\x84\xa0i\xcc\x8e\xba\xab\xd8p#m', &(0x7f0000000a80)='\\$#[\\/\x00\xd5\xd4^\xa7\xe4\xd4\x1f.yh\x18\xb8s\xe6\f\xaf*4\xe1\xa1e\x04%f\x8f\xde\x91\x04\xbb\xc8\x17\x15\xa4\xf0\x00\x15w\x00\x00\xed\xdd}\x00\x18\xf3\xde\n\xbe\x91\xc4\xc5\xe6\xd3o\xaau\xf34\t\x9d\x80rg\xbc\xee\x96p\x18\x9e(h\xeb\xd9\xde\xa6\xfc\x8e\xe3,\xae\xa8\xf0\x82y\x91\x1c{\x85 \xc7P\xa3\x9c\x06\xc1\xd3\x92\xcd\xcc\x17\xb2}\x13:\xbbh\"%;\b\x7f\x91\x8a\xa5Z\x92~<\xfe3\x19\xdcVJ\f\xd1\x89d\xf9N\xbd\x92\x86\xa2\xa8\xc0:\x1f\n\xc9\x8eUO\x8e\xea\x99\xe1\xbe%Y\x9eH#\xa4\x9d5\xa88m6\x89kE\xce\xc3\aBW\xec_\xea_\x81\xbe\x86~\x84F\xa9\xcd\xba\xfb\xd8\x8f\x01\x81~\x9c#\r\x87\xcf\x19\xb9\xbd \xcb\xff\x88io\xb0\xb1\xa0B\x8cI\x82+\xc4\xcf\xf4!+\x16v\xb6\x8a\xb7k}\x1d\xf2\x1c\x00\x8f\xd7\x84R\x12\xed){SM[\xe6g6\xfeF\x1dJ\x83', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000c80)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xaei\xb6\xb7\xc1Y\xd5YGhS\x97nZ\xf8\xc6\x1f\x03\x00\x00\x00\x00\x00\x00\x00\x9bg-D#g\x16\xf4\xd9\x00\x00\x00\x00\x00eA\x9f\xc3\x11\xfaz\x00\x00\x00\x00\x00\x00\xf6\xacE\xa3\xc8\xe7\xec\xd6\xbd\x1c+\n\xc7Q( \xba\xff\x17N\x1fB\x91\x15\x83\xec(B\b\x00\x00\x00\x00\x00\x00\x00\xee$\xb5\x1deC\xfb\xa2\xaa\xe0#\xcb\xde;sA\xad\xa6\xb6P\xa3\xf7\xc3q\xd4\xb6\x95\"\xd8*\xa8\xd2\x94\xa3\x89\xcb\xa0\xc5\xc9=\xa5^\x00\xcd\xd3\t\x01A\xd5\x81\xc1;9\xeez\xba\x00\x00\x00\xdc\x94\xff)\xa4\xe6\xfb]\x90bG\x11\b\x98#\xaa99ez|\x8b5\x92\xa5\xba\x96\xb3\xb26I\xbb\xdeb\x95?\xc0\x81\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb1\x98\xe3\xc3Q\xb4+\xec\xf5(\xd6\xf5O\xaf\x1f\xc0\xd2I`\xa2\vsNQ\xc2\xb6q\x1d\x9a\xdc\xefnU\xeb\xa0x\xf4B\xce\f&\x9f\xc9\xeaU\xf3\x01u\x18\xfau\x0fd\xee\xca\xc9\f\xec\xa5\xd2\x1a\xab_)\xcc\x10\x82\xcdxy\xa7\x02-\x13\x8fb\\t\x9c\x16\x95\xde\xaa\xc1\xc3q\x82B\xf7\x8e\xce\xdd\xcd`\xb4;ZU\xa0\x96\tg\xfa\xa4nAn\xfc\x98\x92\xeaS\'\xfb\xd8W2X\x9e\xc6vY@\xfa\xe52\"\x04^\x00\x00\x8d~n+6\f\xbfb\x05\x00\x00\x00\x00\x00\x00\x00\x8b\'\x0f\xa1\xc0\xf6\x1f\xda\xca\a\x95\x93\x06\xdem\x10\x01\xaf$J8T\xf3\xae\xda\x03\xaf-\xc1D\xe6\x80\xdd\xf2\x13\xfc#\nXs\x95\xf9\xb2\x1e\xee\xf6\xbbi\xae.\x9eF\xce\x80\x90mju\x85VUc\xbf\xc6w\"\x179S\fm\x87\xcfU:B\xdc\x91,\xe6\xa3\xd9\x83\xe4\x01\xc7E\x16f\xbeLg\xf9\xa7Ja\xac_\x18P\x9f;\xabI\x02&\x8b\xe6\x1c\x97\xda\x13\xb8px\x1b\xb2\xd3)n\xff\x05\rl\x01G\x04\xae\xc2\x8a;\x8c\xd6\xd3\xc12\xbc`1u,\x80`\x7f\xab\x17\x8a\xf2\x8a\x1aL\t\xe6`\x92\x17?!\xfd\xbeK>\xc3\xee\xce5h\x88T# \x15\xfb\xd7\xa2Q>\xb7A\\\x0e\x7f\\\x14', &(0x7f0000000940)='Yockfs\x00\x01\f\xcc\x0e\xc94\x0f/\xb7~\x10\xf8\xe9\xd71\xc1s}\x9d\xd8\xc0\xb1>\xb4\x7f\xcf\x93\xf3^X\x1e<\xa1\xa992\x88\xd4/\xb9\xb3\xd2,\xa5:\x8d\x0e\x8ei\x03v\xf4\t%\x1aR\x84(\xe0\xb3O\xe2\x96a\xa2O\xa6\x90\xfd;0\\\xb8\x94\rz\x80\xbf{\xf1\xbfP\xd4#\xf1WH\x01#\xf3D\xa8/0T\xed\x92F\xe6&\x88\x83\x10\x83zU\xe4t\xf2\\\b\xa0\xef\x04\xeb\xe4\xbfu\x9a\x0eyb\xfb\x1d\xd6#\xaf\x18\xfa\xa8\xef\x9cm\x9dU\x9cg\xdek\x1fA\xa6\xd9\xc1\xc6a\x94\xec\xa7D\x05;\xd5\x95e\t\xc4y\x90\xbfx\x97\xe0\x04jp(>\xca\xfc\x18C\xa2\xa3aEk\x9f\vo\xe1\x11\xa2\x05\xd7\xd0e|\ns\xb1X\x86\xde\xea\xeaP\xdf\xe4\xe9\xe7\x128\xe9BP\xe0{<\xa8\x91\xa0>\xe1\xceR\x1a\xcd\x8c\x03A\xa1\x81*e\xd9\x06P\x87\x89\xf2\x96\x0f\xb8\x8eBG0\x04\xfd\n\x12\xfa\x01\'\xa8i\xd8\x19Ibm!5j\xd6\xae\xd8\xb5(w\xa9\xcdy\x84\xa0i\xcc\x8e\xba\xab\xd8p#m', 0x0) r1 = perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x80, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000680)='\x00\xfb\xd4\xbe\xf0\x93D\x1f\xa9\x06\x00/8\xee\xce\x96*9\xa3/$\xa3\x1b\x92\xfe<\xf0\x94\f\xd6\x16\xbdD\x01y\x1a\xa4\x96\x88\x94K{\x7fs\xc0\xa8c\xe1\xfcH%\xd5\xe4IH\xca\xa4!W\xa2@\xfbKgW=\x03\xc6\xdb%W\x96\x9ch\xbc\xedi\x99\xf8\xd42\xc0\x95G\xd12\x12\x05}&\x10Y^\xb0\xcew\xc6\x00a2\xc9\x97(4\x05\x86\xd2\xc8\xc6\xb4K\x112\x1a\xd6\xcf\xa9\\j\x91\x9ag\x9e\xba\x87\x8b\"ttQ\n$\x9f\xaa\xf6\x12(\xb1\x84U\xf6M\xadD\xec\xeb\x99\xd1.\xc2\x96\xde0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000480)=0x14) fstat(r1, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000740)={{{@in=@private=0xa010102, @in6=@remote, 0x4e22, 0xfffa, 0x4e21, 0xff, 0xa, 0x80, 0x180, 0x6c, r3, r4}, {0xfffffffffffffff6, 0x7, 0x8000, 0x101, 0x3, 0x3, 0x7, 0x5}, {0xae, 0x7fffffff, 0x8, 0x1}, 0x695fa544, 0x6e6bc0, 0x0, 0x1, 0x2, 0x2}, {{@in=@rand_addr=0x64010101, 0x4d5, 0x6c}, 0x2, @in6=@loopback, 0x3501, 0x0, 0x3, 0x3, 0x4, 0x7, 0xb}}, 0xe8) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r2, &(0x7f00000060c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000140)='@', 0x1}], 0x1}}], 0x1, 0x4000000) sendto$inet(r2, &(0x7f0000000b00)='9', 0x1, 0x48c4, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000001180)='\xd0\x9e^\xa0\xee\xc8\t\x00\x00\x00I\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf1Ke\a\xa5\x8f\xab\x1a\xdaY\xfb\x03dhS\x97nZ\xf8\xc6\x1f\xd3K\xfa\xc8\x8d#\xce)\x9bg-D#g\x16\xf4\xd9\x00\x00\x00\x00\x00eA\x9f\xc3\x11\x18\xe6\xc5\x95\x9e!^\xa0\b\x14\xc5\xe4\t\f\xdeg\x8d\x16wW\xf6\xacE\xa3\xc8\xe7\x1f\x0f\xa4{\x89}\x9bP\xe3$B\xec\xd6\xbd\x1c+\n\xc7Q( \xba\xff\x17N\x1fB\x91\x15\x83\xec(C4/#W\xc5\x05\x9d\xd6\x02\x8cU!a\xdc|6\xdc\xee$\xb5\x1deC\xfb\xa2\xaa\xe0#\xcb\xde;sA\xad\xa6\xb6P\xa3\xf7\xbb\x9b\xd4\xb6\x95\x02\xd8*\xa8\xd2\x94\xa3\x89\xa9\xa0\xc5\xc9=\xa5^\x16\x16Q\x05\xe0\xbc\xd0\xe9\xba\xb4w\x13\xf6\x12/\xd6W\f\xb49f\xa3\xaas\xdd\xc4`_\xa1\xe5\xd4t\xee\xecFn\xed\xefOb<\xd0V\xd1?\xf4FT\xb1J\x95s\xa7\v\x1b\xc8U\v>\xe6\xd9c\x87\xb0\x1b@\x82\b\xfd\xb2.\xeb\x1c\x99\x9em\x98\xab\x96(E\xfc3z\xd0j\xdccif$$\a\x18\xa9\xfd\x88\xfa\xbec\xba.\xf5\xa2~\vW+\x82((>\xd7\x8d\r\xcc\xdc%\xe2\xcc\n\x99\xcb\xf8\xd6v\x1c_M\xc3Wm\r\xc0\x98\xbc22\xd3\x8a1O\x86x\x15V\x00[\x92\x01\xba\x8a\\\x0e\xcfi\xb2}\x90zR\xcb\xcf\xc0\x91\xa6<\xd8\x14\t\xf1\xd5\x9d\f\xe8\x81;\x86\x18\x06\x96\xf7\xaai\\\xde-\xc4@$\xfa{\\\x93\n\xe4\x15\xeew4G\xe0\'\xdd\x88\xbf\xc1\xf1\nHL\xa8\xd4\x9er\xab\xcbu\ae2*5\x1f\xc5K\xde\xde\x1aM\xb4\xf9E\xa4T:)\x1c\x0e\xa5\xc9>\xf6\x813\x0e\x11\x95g\x1e7\xba\x18(z\x88\x0fj\xa6b3\"^?\xbf=\x04\xf2c\xce^<\x16\xfa9\xda`\xf4cb\xcbj-\xdc\x1c', &(0x7f0000000280)='\x8cT\xd3v,*bb\x02/Q7\xf9\\\xa8\xc7$z2}\x8c\xb8\x1a\xe5\x12\xa3\xe0\x9c\x19\xfeJv\x03VY\x80\xa0\xef\xdbnH%Y\x92\x87\x1dd\xa4r\xdfG\xed\xa7C\xb0?}\xbb\x00\x02w)\x86\x00\x00', 0x0) close(r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180800001bc81a000000000002000001851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000101180000000000000000000000000000009500000000000000360a000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000e500010000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffbc}, 0x94) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x20846, 0x2) fallocate(r1, 0x2a, 0x10000, 0x4) write$P9_RLERRORu(r5, &(0x7f00000005c0)=ANY=[], 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r5, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', r5, &(0x7f0000000240)='./file0\x00', 0x7) 607.562109ms ago: executing program 0 (id=2532): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x2f00020b, 0xd, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b9", 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x4, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="180200000000000e00000000000000008500000053000000850000005000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r1}, &(0x7f0000000040), &(0x7f0000000080)=r2}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf092000000000000d090100000000b99500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000080000001c00000000000000bf9800000000000056080000000000008500000005000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 607.248369ms ago: executing program 8 (id=2533): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10e, &(0x7f00000000c0)={[{@errors_remount}, {@nodelalloc}, {@nombcache}, {@oldalloc}, {@nodiscard}, {@quota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}]}, 0x3, 0x452, &(0x7f0000000140)="$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") socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() mount$9p_virtio(0x0, &(0x7f0000001000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000003c0), 0x840020, &(0x7f0000000580)={'trans=virtio,', {[{@cachetag}, {@version_9p2000}, {@aname={'aname', 0x3d, '{(\'(%{&+'}}]}}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0xe1045, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x800000, 0x3fff8000}, 0x844, 0x32, 0x43a1bd76, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0xa, 0x1, 0x3f, 0x40, 0x42}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580), &(0x7f0000000140), 0x1003, r3}, 0x38) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000001d40)={r3, &(0x7f0000001b80), &(0x7f0000001c40)=""/245}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x41015500, &(0x7f0000000500)=0xfffffffc) 592.00133ms ago: executing program 5 (id=2534): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0), 0x3) getsockopt$bt_hci(r0, 0x11a, 0x3, 0x0, &(0x7f0000001940)) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)=0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000480)={0x2, r2}) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000340)={'#! ', './bus'}, 0x9) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3000001, 0x200000005c832, 0xffffffffffffffff, 0x0) copy_file_range(r4, &(0x7f0000000080), r3, &(0x7f0000000100), 0xfffffffffffffff8, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x8927, &(0x7f0000000140)={0x23a, 0xfffffffe, 0x1, 0x0, 0x3, [0x0, 0xffffffff, 0x4000097, 0x4000]}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x1, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYBLOB="010028"], 0x44}}, 0x30004004) sendmsg$key(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="02"], 0x70}, 0x19}, 0x20040814) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x8402, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8001, 0xf7f}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r6, &(0x7f0000000340)={0x15, 0x110, 0xfa00, {r8, 0x0, 0x30, 0x30, 0x0, @in6={0x1b, 0x4000, 0x0, @loopback, 0xbff}, @ib={0x1b, 0x38e, 0x0, {}, 0x0, 0x3ffffffc, 0x8}}}, 0x118) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4c0000000206850000000000000000000300000a090002007379020000000000240007800800094000000008050003008000000008000840000000440500150006000000050001000700000075fdbeac02fa9457d1b814fd0cdb12637166c01c1600dc0ccd1d9494d7da18717d716144ca48b8ee9377e21fb5f20d38c94c0c9b6443f61e32be26093d31099cf542eeb8bf2a8c0bce00492a90cecba8cc193ab242215e95842085a11dd494ccf036de6d261e0c6f5082306049a3446f3d5046c77d9e4af205010714ba359b3a6970c9d9e025021c20f1f8c8730c05c58150ccf93d9fc3ac6d1d995297c4d3c12944b240f06abab8ecc411d114bd75c0efc57c0c9063447af255a17a0c9b4bc5b2ad5dfd4323507fe3ed077e55ec2956c0bd03f1eeb82b0acc98c14d23e7da9efbdc59a4dd"], 0x4c}, 0x1, 0x0, 0x0, 0x404c011}, 0x20006044) sendto$inet6(r0, &(0x7f0000000240)="47dfde5baa5cd39a0baaca65a2dbf8d62d026e635ac933ee3acb1f755051b3bd12aa28040b5fce7938b6921a2d7c36ca2855e6da2547941695c54e4fa9b2bb9a70b0207b1a79b6b4816a17de116fc4c86bbfb9f57a95d0c43a8504788792aa8dc898e05d", 0x64, 0x4008010, &(0x7f00000002c0)={0xa, 0x4e22, 0x8001, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x1}, 0x1c) 560.698402ms ago: executing program 0 (id=2535): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000100001000000000000fffd000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000ffd908000540000000020900020073797a310000000008000a40fffffffc980000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000006c0003806800008008000340000000025c000b802c0001800a0001006c696d69740000001c0002800c00024000000000000000030c00014000000000000100002c0001800a0001006c696d69740000001c0002800c00024000000000800000000c000140000000000000000814000000110001"], 0xfc}, 0x1, 0x0, 0x0, 0x4000850}, 0x844) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r5, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="34010000", @ANYRES16=r7, @ANYBLOB="050029bd708b000000002100000008000300", @ANYRES32=r8, @ANYBLOB], 0x134}}, 0x0) 485.561247ms ago: executing program 1 (id=2536): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x200801f, &(0x7f0000000040), 0xfe, 0x4f4, &(0x7f0000000880)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x63, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x2, 0x7e, 0x3, 0x6, 0x0, 0xabe, 0x40000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000140)}, 0x0, 0x7, 0x8000007, 0x4, 0x8, 0x2, 0x3bf1, 0x0, 0x3ff, 0x0, 0x489d}, 0x0, 0xe, 0xffffffffffffffff, 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_ACTION={0x6, 0x3, 0x38}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x101, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r1, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000060a010400000000000000000a0000010900010073797a31000000001c0004801800018008000100666962000c00028008000240000000030900020073797a32"], 0x70}, 0x1, 0x0, 0x0, 0x4000854}, 0x20000040) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x800000000000, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0000fb0f00ffff28bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="715a0300231a05003c0012800b00010069703667726500002c0002801400060020010000000000000000000000000002140007000000000000000000000000000000010d"], 0x5c}, 0x1, 0x0, 0x0, 0x20008801}, 0x20040040) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000400)) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) sendmmsg$inet(r6, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) mount(&(0x7f0000000100)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./file2\x00', &(0x7f0000000180)='v7\x00', 0x2100010, &(0x7f00000001c0)='*\x00') newfstatat(0xffffffffffffff9c, &(0x7f0000000200)='./file2\x00', 0x0, 0x1000) 307.442919ms ago: executing program 1 (id=2537): socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 32) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (rerun: 32) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x10, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x200008c0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) (async) personality(0xfe47fef9f5ff7379) (async) fcntl$setsig(0xffffffffffffffff, 0xa, 0x31) r5 = syz_open_dev$loop(&(0x7f0000000280), 0x80010a, 0x1cb600) (async) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82803, 0x8e) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000000080)={r6, 0x0, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffd, 0x0, 0x0, 0x1d, 0x14, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5d69098c8b534464c516bdd8a0f350000e35abdb80e38f5eb010001", "32d8cc263d9e234b02000000000000004a6783cdd3dfe7800b2d7b6aa54cc5001fcaed1e831fa79a000000020000000000000400", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x8, 0x5]}}) (async) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r4) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x48002) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) (async) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r8, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r7, 0x0}]) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000090000000400000003000093010000000700000001000000ffffff7f01000000020001000500000000000000000001000300000000615f5f2e5f005f"], 0x0, 0x51, 0x0, 0x9}, 0x28) (async, rerun: 32) r9 = socket$unix(0x1, 0x1, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$kcm(r6, &(0x7f0000000b00)={&(0x7f0000000200)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000940)=[{0x100, 0x3a, 0x9, "60e2aee2498ae1b0a6f1ef985cd1ff93647070c2060632eb220efe65c8cb1a71fc8bdcfc86e1bae297b6b6ff0b83b54c26969537617184e16c62cbd05442dc68196d88c7531e2e0fb01a1c0220d7d484f3b6ff280b0c7680c8a480a4a5727628c3fda2b55c67a9ba8ea4e3d2e2dfc6d1fdcc1e890e36718fd2f28c3c5dc88c5c19be702d96eebb4fdd2bcc3202a7fb0f3692dc428a2b6f80903a75072a0bf49cf8b1d6901d511b51e4ce78b9186b9de6fd3ee3b297a253b5409a6814ade84e08bc82d9bdbc4ca8121e5b59691715ce5fb33ba9718856c5e025572cd085c66c4cab16ee6cf55d2b45c563dc67bcad2c"}, {0xb8, 0x115, 0xdb3, "6683cdc3ab9fbbb852c2032a57f5c9c74db1b70b3d1f0cadbbcb5a8ec58b8225d8cdf458bd7ddbd2d52d6f7fabe37970d84bcaeacacb2cda8cd417b5919fc6332ca04c700a6f11bb2c4322719aaab9347f69c467ed093ac99f967f0e9dc79a678f7749008012257f42ffc8e242ab171bf182038e7dec5a43a7609ff15697dfec19d87abfc70b4e7880b411dc6e57696077c37c6c739ebbeadc2af0df755286ba5d80b937"}], 0x1b8}, 0x4851) (async, rerun: 64) r10 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) (rerun: 64) ioctl$TCSBRK(r10, 0x5409, 0xffffffff) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/key-users\x00', 0x0, 0x0) (async) fsopen(&(0x7f0000000000)='autofs\x00', 0x0) r12 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) sendfile(r12, r11, &(0x7f0000000000)=0x6c92d8b5, 0x200100) 307.282509ms ago: executing program 1 (id=2538): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x3, 0x10616, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0, 0x5}, 0x200, 0x1fb, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000000000002000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000ffa40000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002"], 0x110) 296.44655ms ago: executing program 1 (id=2539): prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x2, 0x6, 0x548, 0x1e8, 0xe0, 0x3a8, 0x3a8, 0x3a8, 0x478, 0x478, 0x478, 0x478, 0x478, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe0, 0x0, {0x7a00000010000000}}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x2, 0x1}, {0xffffffffffffffff, 0x5, 0xc}, {0xffffffffffffffff}, 0x6, 0x7ff}}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0xa}, [0x0, 0x0, 0x0, 0xffffff00], [0x0, 0x0, 0xffffffff, 0xff], 'macvlan0\x00', 'veth1_vlan\x00', {}, {}, 0x6, 0x7f, 0x4}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@private=0xa010102, [0xff, 0xff, 0xff, 0xff000000], 0x4e23, 0x4e20, 0x4e21, 0x4e24, 0x7, 0x3, 0x81, 0x8, 0xbd8}}}, {{@uncond, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@AUDIT={0x28}}, {{@ipv6={@empty, @private0, [0xff, 0xffffffff, 0xffffff00, 0xffffffff], [0xffffff00, 0xffffff, 0xff, 0xffffffff], 'geneve0\x00', 'xfrm0\x00', {0xff}, {}, 0x3a, 0x5, 0x0, 0x8}, 0x0, 0xa8, 0xf0, 0x3a00}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@rand_addr=0x64010100, @ipv4=@loopback}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a8) 251.456663ms ago: executing program 5 (id=2540): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f00000002c0)={[{@test_dummy_encryption_v1}, {@usrjquota}, {@auto_da_alloc}, {@init_itable}, {@nodioread_nolock}, {@journal_checksum}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}]}, 0x1, 0x587, &(0x7f0000000940)="$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") setxattr$incfs_metadata(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280), &(0x7f0000000380)="30573472b621739984c336124406e8", 0xf, 0x1) socket$netlink(0x10, 0x3, 0x0) socket$kcm(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000002280), 0x2, 0x0) preadv(r1, &(0x7f0000003700)=[{&(0x7f00000022c0)=""/4096, 0x1000}, {0x0}], 0x2, 0x50, 0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x4000, &(0x7f00000000c0)={[{@noinit_itable}]}, 0x1, 0x512, &(0x7f0000000c40)="$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") syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r6, 0x7, &(0x7f0000000340)={0x1, 0x0, 0x2, 0x80000001}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2, 0x204031, 0xffffffffffffffff, 0xec776000) unshare(0x24020400) socket$nl_audit(0x10, 0x3, 0x9) fcntl$lock(r7, 0x7, &(0x7f0000000240)={0x1, 0x0, 0x200000002, 0xfffffffffffffff8}) 0s ago: executing program 6 (id=2541): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000fdffffff000000000000000018110000c76d3febbe1695eb8d5acc1595942cf333a74c3363eddf3ad48ee219cb17aca8fff330d4d1314c9f4922c4c80c1f6e745dfab645d9e0429abcd2f75f71689470a15bed850176b434aa1dd82781f30afd679847e93528efd2376a77a1f489b0d47931aae5d45b72d48ee2950e436b87b987067af08f28200500000000000000137212971c9ce26071b5162ff5aba8bef75ad16fc753e6c9eb87b4cf698d447f0fd1c3f663a8544781b38c5e60b600", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x62, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x10) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, r2, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc40e, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x3}, 0x0, 0xc884, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r2, 0x0) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): 512 [ 228.326704][ T8720] EXT4-fs (loop6): 1 orphan inode deleted [ 228.340431][ T8720] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 228.356663][ T8720] ext4 filesystem being mounted at /227/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 228.379766][ T8720] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 228.394066][ T6709] Quota error (device loop6): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 228.667318][ T6709] EXT4-fs error (device loop6): ext4_release_dquot:7062: comm kworker/u8:22: Failed to release dquot type 1 [ 229.157075][ T8728] __nla_validate_parse: 4 callbacks suppressed [ 229.157097][ T8728] netlink: 280 bytes leftover after parsing attributes in process `syz.1.1441'. [ 229.416341][ T8750] loop5: detected capacity change from 0 to 512 [ 229.440643][ T8751] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1446'. [ 229.451582][ T8750] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 18)! [ 229.472131][ T28] audit: type=1400 audit(2000000052.962:1045): avc: denied { bind } for pid=8745 comm="syz.1.1448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 229.505037][ T8750] EXT4-fs (loop5): group descriptors corrupted! [ 229.511795][ T8751] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1446'. [ 229.540127][ T28] audit: type=1400 audit(2000000052.992:1046): avc: denied { create } for pid=8745 comm="syz.1.1448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 229.575092][ T28] audit: type=1400 audit(2000000052.992:1047): avc: denied { setopt } for pid=8745 comm="syz.1.1448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 229.769493][ T3803] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.801065][ T8760] loop5: detected capacity change from 0 to 128 [ 229.817762][ T8762] loop6: detected capacity change from 0 to 512 [ 229.825527][ T8762] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 229.839793][ T8762] EXT4-fs (loop6): orphan cleanup on readonly fs [ 229.849901][ T8762] EXT4-fs error (device loop6): ext4_orphan_get:1397: inode #17: comm syz.6.1450: inode has both inline data and extents flags [ 229.865906][ T8762] loop6: lost file I/O error report for ino 17 type 5 pos 0x0 len 0x0 error -117 [ 229.866216][ T8762] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.1450: couldn't read orphan inode 17 (err -117) [ 229.875434][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 229.875457][ C1] EXT4-fs (loop6): initial error at time 2000000053: ext4_orphan_get:1397: inode 17 [ 229.875485][ C1] EXT4-fs (loop6): last error at time 2000000053: ext4_orphan_get:1397: inode 17 [ 229.912447][ T8762] loop6: lost filesystem error report for type 5 error -117 [ 229.913808][ T8762] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 229.936912][ T8765] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1452'. [ 229.948206][ T28] audit: type=1400 audit(2000000053.442:1048): avc: denied { append } for pid=8761 comm="syz.6.1450" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 230.049834][ T3803] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.067838][ T8768] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1453'. [ 230.288680][ T8781] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1460'. [ 230.425357][ T8796] loop5: detected capacity change from 0 to 1024 [ 230.479236][ T8796] EXT4-fs: test_dummy_encryption option not supported [ 230.694302][ T8803] netlink: 280 bytes leftover after parsing attributes in process `syz.1.1461'. [ 231.633561][ T28] audit: type=1400 audit(2000000055.123:1049): avc: denied { ioctl } for pid=8812 comm="syz.1.1465" path="socket:[20979]" dev="sockfs" ino=20979 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 231.760831][ T28] audit: type=1400 audit(2000000055.123:1050): avc: denied { bind } for pid=8812 comm="syz.1.1465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 231.826793][ T8820] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1467'. [ 234.616133][ T8882] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1487'. [ 234.656611][ T8882] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1487'. [ 234.695523][ T8882] netlink: 'syz.1.1487': attribute type 5 has an invalid length. [ 234.736963][ T8882] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1487'. [ 234.826183][ T28] audit: type=1400 audit(2000000058.323:1051): avc: denied { create } for pid=8895 comm="syz.1.1493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 234.853981][ T8898] loop6: detected capacity change from 0 to 512 [ 234.881989][ T8900] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1495'. [ 234.901093][ T28] audit: type=1400 audit(2000000058.343:1052): avc: denied { write } for pid=8895 comm="syz.1.1493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 234.924520][ T8900] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1495'. [ 234.939758][ T8898] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 235.100184][ T8918] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=17424 sclass=netlink_route_socket pid=8918 comm=syz.4.1498 [ 235.147004][ T3803] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.163541][ T8920] netlink: 'syz.1.1503': attribute type 10 has an invalid length. [ 235.187483][ T8920] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1503'. [ 236.136062][ T8947] loop6: detected capacity change from 0 to 4096 [ 236.157417][ T8947] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 236.499544][ T6709] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.525489][ T8943] dummy0 speed is unknown, defaulting to 1000 [ 236.677833][ T6709] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.813902][ T8974] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1520'. [ 236.828990][ T8974] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1520'. [ 236.875831][ T6709] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.609106][ T8983] loop5: detected capacity change from 0 to 512 [ 238.758928][ T6709] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.792020][ T8953] dummy0 speed is unknown, defaulting to 1000 [ 239.904657][ T8983] EXT4-fs warning (device loop5): ext4_multi_mount_protect:394: Unable to create kmmpd thread for loop5. [ 240.001856][ T6709] hsr0: left allmulticast mode [ 240.006668][ T6709] hsr_slave_0: left allmulticast mode [ 240.038057][ T6709] hsr_slave_1: left allmulticast mode [ 240.043658][ T6709] bridge0: port 3(hsr0) entered disabled state [ 240.093374][ T6709] bridge_slave_1: left allmulticast mode [ 240.110462][ T6709] bridge_slave_1: left promiscuous mode [ 240.124342][ T6709] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.134967][ T6709] bridge_slave_0: left allmulticast mode [ 240.143213][ T6709] bridge_slave_0: left promiscuous mode [ 240.148942][ T6709] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.176117][ T9014] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1533'. [ 240.192609][ T9012] usb usb8: usbfs: process 9012 (syz.5.1530) did not claim interface 0 before use [ 240.318051][ T6709] ip6gretap0 (unregistering): left allmulticast mode [ 240.383353][ T9048] netlink: 100 bytes leftover after parsing attributes in process `syz.6.1540'. [ 240.492466][ T6709] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 240.502655][ T6709] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 240.517252][ T6709] bond0 (unregistering): Released all slaves [ 240.525362][ T6709] bond1 (unregistering): Released all slaves [ 240.534277][ T6709] bond2 (unregistering): Released all slaves [ 240.543052][ T6709] bond3 (unregistering): Released all slaves [ 240.551434][ T6709] bond4 (unregistering): Released all slaves [ 240.559922][ T6709] bond5 (unregistering): Released all slaves [ 240.569386][ T6709] bond6 (unregistering): Released all slaves [ 240.578296][ T6709] bond7 (unregistering): Released all slaves [ 240.586690][ T6709] bond8 (unregistering): Released all slaves [ 240.594945][ T6709] bond9 (unregistering): Released all slaves [ 240.607396][ T6498] syz!: Port: 1 Link DOWN [ 240.678249][ T6709] IPVS: stopping backup sync thread 6015 ... [ 240.705829][ T6709] hsr_slave_0: left promiscuous mode [ 240.717436][ T6709] hsr_slave_1: left promiscuous mode [ 240.727870][ T6709] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 240.745090][ T6709] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 240.754328][ T9069] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1546'. [ 240.777346][ T6709] veth1_macvtap: left promiscuous mode [ 240.783130][ T6709] veth0_macvtap: left promiscuous mode [ 240.788700][ T6709] veth1_vlan: left promiscuous mode [ 240.794277][ T6709] veth0_vlan: left promiscuous mode [ 240.895437][ T6709] team0 (unregistering): Port device team_slave_1 removed [ 240.905475][ T6709] team0 (unregistering): Port device team_slave_0 removed [ 240.986967][ T8953] chnl_net:caif_netlink_parms(): no params data found [ 241.064383][ T8953] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.074216][ T8953] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.082913][ T8953] bridge_slave_0: entered allmulticast mode [ 241.099672][ T8953] bridge_slave_0: entered promiscuous mode [ 241.108925][ T8953] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.116312][ T8953] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.131587][ T8953] bridge_slave_1: entered allmulticast mode [ 241.138405][ T8953] bridge_slave_1: entered promiscuous mode [ 241.170621][ T9111] netlink: 100 bytes leftover after parsing attributes in process `syz.5.1553'. [ 241.193738][ T8953] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 241.212890][ T8953] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 241.242007][ T8953] team0: Port device team_slave_0 added [ 241.251090][ T8953] team0: Port device team_slave_1 added [ 241.276883][ T8953] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 241.284980][ T8953] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 241.311068][ T8953] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 241.331940][ T8953] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 241.344045][ T8953] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 241.370488][ T8953] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 241.398689][ T6709] IPVS: stop unused estimator thread 0... [ 241.417456][ T8953] hsr_slave_0: entered promiscuous mode [ 241.430378][ T8953] hsr_slave_1: entered promiscuous mode [ 241.442818][ T8953] debugfs: 'hsr0' already exists in 'hsr' [ 241.458768][ T8953] Cannot create hsr debugfs directory [ 241.517411][ T9141] loop6: detected capacity change from 0 to 1024 [ 241.533168][ T9141] EXT4-fs: test_dummy_encryption option not supported [ 241.708111][ T9149] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1564'. [ 241.728958][ T9149] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1564'. [ 242.684236][ T9156] loop6: detected capacity change from 0 to 512 [ 244.596102][ T8953] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 244.795989][ T9156] EXT4-fs warning (device loop6): ext4_multi_mount_protect:394: Unable to create kmmpd thread for loop6. [ 244.828343][ T8953] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 244.838197][ T8953] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 244.847181][ T8953] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 244.986861][ T9192] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1575'. [ 245.032239][ T8953] 8021q: adding VLAN 0 to HW filter on device bond0 [ 245.047082][ T8953] 8021q: adding VLAN 0 to HW filter on device team0 [ 245.058311][ T6709] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.065501][ T6709] bridge0: port 1(bridge_slave_0) entered forwarding state [ 245.103087][ T6709] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.110282][ T6709] bridge0: port 2(bridge_slave_1) entered forwarding state [ 245.247863][ T8953] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 245.261813][ T9212] loop5: detected capacity change from 0 to 8192 [ 245.320755][ T9212] loop5: p1 p2 p3 p4 < > [ 245.334957][ T9212] loop5: partition table partially beyond EOD, truncated [ 245.342379][ T9212] loop5: p1 size 1342439424 extends beyond EOD, truncated [ 245.350764][ T9212] loop5: p2 size 117900032 extends beyond EOD, truncated [ 245.358604][ T9212] loop5: p3 start 67108864 is beyond EOD, truncated [ 245.365703][ T9212] loop5: p4 start 2130706559 is beyond EOD, truncated [ 245.455305][ T9215] bridge0: port 4(syz_tun) entered disabled state [ 245.463390][ T9215] bridge0: port 3(hsr0) entered disabled state [ 245.469657][ T9215] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.476925][ T9215] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.926188][ T9215] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 245.940512][ T9215] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 246.100749][ T6586] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.131981][ T28] audit: type=1400 audit(2000000069.633:1053): avc: denied { create } for pid=9264 comm="syz.0.1592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 246.153669][ T6586] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.176404][ T9271] netlink: 100 bytes leftover after parsing attributes in process `syz.5.1594'. [ 246.190240][ T70] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.199427][ T6721] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.200122][ T28] audit: type=1400 audit(2000000069.633:1054): avc: denied { bind } for pid=9264 comm="syz.0.1592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 246.299834][ T9282] loop5: detected capacity change from 0 to 1024 [ 246.321371][ T9282] EXT4-fs: Ignoring removed bh option [ 246.356284][ T9282] EXT4-fs: Ignoring removed bh option [ 246.366986][ T9282] EXT4-fs: Ignoring removed bh option [ 246.401064][ T9282] ext4: Unknown parameter 'euid<00000000000000049663' [ 246.409348][ T9289] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1596'. [ 246.421395][ T8953] veth0_vlan: entered promiscuous mode [ 246.433254][ T8953] veth1_vlan: entered promiscuous mode [ 246.444043][ T28] audit: type=1400 audit(2000000069.943:1055): avc: denied { create } for pid=9288 comm="syz.1.1596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 246.471333][ T8953] veth0_macvtap: entered promiscuous mode [ 246.479115][ T8953] veth1_macvtap: entered promiscuous mode [ 246.552591][ T8953] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 246.571072][ T8953] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 246.632756][ T6709] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.650519][ T6709] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.659544][ T6709] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.676087][ T6709] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.893334][ T28] audit: type=1400 audit(2000000070.373:1056): avc: denied { mounton } for pid=8953 comm="syz-executor" path="/root/syzkaller.KHZFTe/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=22848 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 247.058119][ T9318] netlink: 100 bytes leftover after parsing attributes in process `syz.5.1604'. [ 247.227478][ T9320] loop6: detected capacity change from 0 to 4096 [ 247.313326][ T9320] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 247.511399][ T3803] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.748309][ T28] audit: type=1326 audit(2000000071.233:1057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9340 comm="syz.7.1607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4828dc819 code=0x7ffc0000 [ 247.883303][ T28] audit: type=1326 audit(2000000071.233:1058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9340 comm="syz.7.1607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4828dc819 code=0x7ffc0000 [ 248.101454][ T28] audit: type=1326 audit(2000000071.243:1059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9340 comm="syz.7.1607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7fd4828dc819 code=0x7ffc0000 [ 248.188975][ T9353] netlink: 'syz.6.1609': attribute type 1 has an invalid length. [ 248.223391][ T28] audit: type=1326 audit(2000000071.243:1060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9340 comm="syz.7.1607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4828dc819 code=0x7ffc0000 [ 248.310305][ T9353] 8021q: adding VLAN 0 to HW filter on device bond9 [ 248.329879][ T28] audit: type=1326 audit(2000000071.243:1061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9340 comm="syz.7.1607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4828dc819 code=0x7ffc0000 [ 248.569920][ T28] audit: type=1326 audit(2000000071.243:1062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9340 comm="syz.7.1607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd4828dc4ab code=0x7ffc0000 [ 248.753565][ T9377] loop7: detected capacity change from 0 to 1024 [ 248.794279][ T9377] EXT4-fs: Ignoring removed mblk_io_submit option [ 248.846645][ T9377] EXT4-fs: Ignoring removed oldalloc option [ 248.885421][ T9377] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 248.911839][ T9377] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 248.964338][ T9385] EXT4-fs error (device loop7): ext4_map_blocks:828: inode #15: block 3: comm syz.7.1617: lblock 3 mapped to illegal pblock 3 (length 3) [ 248.988635][ T9385] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 249.012777][ T9385] EXT4-fs (loop7): This should not happen!! Data will be lost [ 249.012777][ T9385] [ 249.046653][ T9377] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.1617: bg 0: block 112: padding at end of block bitmap is not set [ 249.123169][ T6721] EXT4-fs error (device loop7): ext4_map_blocks:828: inode #15: block 8: comm kworker/u8:26: lblock 8 mapped to illegal pblock 8 (length 5) [ 249.140113][ T6721] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 5 with error 117 [ 249.169998][ T6721] EXT4-fs (loop7): This should not happen!! Data will be lost [ 249.169998][ T6721] [ 249.189164][ T8953] EXT4-fs warning (device loop7): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 249.213172][ T8953] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 249.307282][ T9397] loop7: detected capacity change from 0 to 512 [ 249.330855][ T9397] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 249.359750][ T8953] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.386021][ T9401] loop5: detected capacity change from 0 to 512 [ 249.408620][ T9401] EXT4-fs error (device loop5): ext4_orphan_get:1397: inode #15: comm syz.5.1626: inode has both inline data and extents flags [ 249.431202][ T9401] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 249.439228][ T9401] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.1626: couldn't read orphan inode 15 (err -117) [ 249.448448][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 249.448471][ C0] EXT4-fs (loop5): initial error at time 2000000072: ext4_orphan_get:1397: inode 15 [ 249.448510][ C0] EXT4-fs (loop5): last error at time 2000000072: ext4_orphan_get:1397: inode 15 [ 249.489077][ T9401] loop5: lost filesystem error report for type 5 error -117 [ 249.519497][ T9401] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 249.549089][ T9401] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.598321][ T9401] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1626'. [ 249.704605][ T9432] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1638'. [ 249.801499][ T9440] 9p: Could not find request transport: uni^ek}toر)&KpJws A4}(3ݒ [ 249.842270][ T9440] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9440 comm=syz.0.1641 [ 249.905359][ T9440] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1641'. [ 249.917921][ T9446] vlan2: entered promiscuous mode [ 250.000645][ T9444] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1641'. [ 250.028985][ T9446] bridge0: entered promiscuous mode [ 250.039503][ T9444] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1641'. [ 250.231128][ T9452] loop7: detected capacity change from 0 to 512 [ 250.305816][ T9452] EXT4-fs warning (device loop7): ext4_enable_quotas:7261: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 250.321937][ T9452] EXT4-fs (loop7): mount failed [ 250.480982][ T9460] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1645'. [ 250.814920][ T9467] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1647'. [ 250.970282][ T9471] loop6: detected capacity change from 0 to 1024 [ 250.990957][ T9471] EXT4-fs: test_dummy_encryption option not supported [ 252.834600][ T9487] __nla_validate_parse: 2 callbacks suppressed [ 252.834618][ T9487] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1651'. [ 253.064336][ T9498] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1658'. [ 253.166871][ T9508] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1655'. [ 255.014175][ T9516] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1662'. [ 255.128988][ T9526] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1664'. [ 255.141040][ T9526] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1664'. [ 255.160157][ T9529] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 255.226271][ T9535] loop7: detected capacity change from 0 to 512 [ 255.247779][ T9538] netlink: 100 bytes leftover after parsing attributes in process `syz.6.1668'. [ 255.285041][ T9535] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 255.329731][ T9535] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 255.375865][ T8953] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.432876][ T9550] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1672'. [ 256.027101][ T9556] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1675'. [ 256.050772][ T28] kauditd_printk_skb: 21 callbacks suppressed [ 256.050790][ T28] audit: type=1400 audit(2000000079.554:1084): avc: denied { setopt } for pid=9554 comm="syz.0.1675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 256.293290][ T9563] netlink: 'syz.7.1676': attribute type 1 has an invalid length. [ 256.311597][ T9563] 8021q: adding VLAN 0 to HW filter on device bond1 [ 256.555751][ T9567] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1678'. [ 256.905668][ T28] audit: type=1400 audit(2000000080.404:1085): avc: denied { ioctl } for pid=9584 comm="syz.6.1684" path="socket:[23300]" dev="sockfs" ino=23300 ioctlcmd=0x6e8a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 256.939701][ T9585] loop6: detected capacity change from 0 to 512 [ 256.949591][ T9585] EXT4-fs: Ignoring removed nomblk_io_submit option [ 257.060086][ T9585] EXT4-fs error (device loop6): ext4_do_update_inode:5602: inode #15: comm syz.6.1684: corrupted inode contents [ 257.072871][ T9585] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 257.073085][ T9585] EXT4-fs (loop6): Remounting filesystem read-only [ 257.082346][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 257.082369][ C0] EXT4-fs (loop6): initial error at time 2000000080: ext4_do_update_inode:5602: inode 15 [ 257.082402][ C0] EXT4-fs (loop6): last error at time 2000000080: ext4_do_update_inode:5602: inode 15 [ 257.344981][ T9585] EXT4-fs (loop6): 1 orphan inode deleted [ 257.427342][ T9585] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 258.823082][ T3803] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.834110][ T9644] infiniband syz!: RDMA CMA: cma_listen_on_dev, error -98 [ 258.899584][ T9649] __nla_validate_parse: 3 callbacks suppressed [ 258.899600][ T9649] netlink: 100 bytes leftover after parsing attributes in process `syz.6.1696'. [ 259.026852][ T9664] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1700'. [ 259.054180][ T9666] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1698'. [ 259.170265][ T9680] dummy0: entered allmulticast mode [ 259.181730][ T28] audit: type=1400 audit(2000000082.684:1086): avc: denied { connect } for pid=9679 comm="syz.7.1703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 259.467918][ T9692] loop6: detected capacity change from 0 to 512 [ 259.581605][ T9692] EXT4-fs warning (device loop6): ext4_enable_quotas:7261: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 259.598168][ T9692] EXT4-fs (loop6): mount failed [ 261.284360][ T9679] dummy0: left allmulticast mode [ 261.479496][ T9722] loop6: detected capacity change from 0 to 512 [ 262.462861][ T9722] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 263.250948][ T9731] netlink: 280 bytes leftover after parsing attributes in process `syz.7.1709'. [ 263.441183][ T3803] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.689027][ T28] audit: type=1400 audit(2000000087.184:1087): avc: denied { mount } for pid=9745 comm="syz.6.1713" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 264.131329][ T9767] loop6: detected capacity change from 0 to 2048 [ 264.164907][ T9767] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 264.187185][ T28] audit: type=1400 audit(2000000087.584:1088): avc: denied { associate } for pid=9760 comm="syz.0.1720" name="3" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 264.254160][ T9767] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.668171][ T9780] netlink: 280 bytes leftover after parsing attributes in process `syz.0.1725'. [ 265.330359][ T9806] tipc: Started in network mode [ 265.335285][ T9806] tipc: Node identity f6084e496fb2, cluster identity 4711 [ 265.362210][ T9806] tipc: Enabled bearer , priority 0 [ 265.379594][ T9806] syzkaller0: entered promiscuous mode [ 265.389957][ T9806] syzkaller0: entered allmulticast mode [ 265.410120][ T9808] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1737'. [ 265.419244][ T9808] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1737'. [ 265.444960][ T9806] tipc: Resetting bearer [ 265.456910][ T9805] tipc: Resetting bearer [ 265.477523][ T9805] tipc: Disabling bearer [ 265.943524][ T9820] loop6: detected capacity change from 0 to 764 [ 266.677484][ T9854] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1755'. [ 267.248388][ T28] audit: type=1400 audit(2000000090.735:1089): avc: denied { connect } for pid=9861 comm="syz.6.1757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 267.314543][ T9864] netlink: 'syz.1.1756': attribute type 1 has an invalid length. [ 267.374084][ T9864] 8021q: adding VLAN 0 to HW filter on device bond5 [ 267.548063][ T9884] loop6: detected capacity change from 0 to 512 [ 267.664760][ T9893] SELinux: policydb version 1582075451 does not match my version range 15-35 [ 267.677138][ T28] audit: type=1400 audit(2000000091.155:1090): avc: denied { load_policy } for pid=9892 comm="syz.5.1768" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 267.703117][ T9893] SELinux: failed to load policy [ 267.922892][ T9902] loop5: detected capacity change from 0 to 2048 [ 267.950518][ T9904] xt_HMARK: proto mask must be zero with L3 mode [ 267.983587][ T9902] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 268.011665][ T9904] loop6: detected capacity change from 0 to 128 [ 268.027627][ T9902] ext4 filesystem being mounted at /333/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 268.062024][ T9909] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1770'. [ 268.071774][ T9909] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1770'. [ 268.080924][ T9909] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1770'. [ 268.101379][ T9909] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1770'. [ 268.181752][ T3649] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.299857][ T9914] loop6: detected capacity change from 0 to 4096 [ 268.841397][ T9928] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1778'. [ 268.851990][ T9925] loop7: detected capacity change from 0 to 512 [ 268.868490][ T9925] EXT4-fs: Ignoring removed nobh option [ 268.953916][ T9914] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 268.971133][ T9925] EXT4-fs (loop7): orphan cleanup on readonly fs [ 268.985237][ T9925] EXT4-fs warning (device loop7): ext4_xattr_inode_get:546: inode #11: comm syz.7.1776: ea_inode file size=1535 entry size=6 [ 268.998477][ T9925] EXT4-fs warning (device loop7): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 269.012135][ T9925] EXT4-fs error (device loop7): ext4_do_update_inode:5602: inode #15: comm syz.7.1776: corrupted inode contents [ 269.024023][ T9925] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 269.028690][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 269.044297][ C1] EXT4-fs (loop7): initial error at time 2000000092: ext4_do_update_inode:5602: inode 15 [ 269.054150][ C1] EXT4-fs (loop7): last error at time 2000000092: ext4_do_update_inode:5602: inode 15 [ 269.074781][ T9925] EXT4-fs error (device loop7): ext4_dirty_inode:6495: inode #15: comm syz.7.1776: mark_inode_dirty error [ 269.086275][ T9925] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 269.088776][ T9925] EXT4-fs error (device loop7): ext4_do_update_inode:5602: inode #15: comm syz.7.1776: corrupted inode contents [ 269.109835][ T9925] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 269.126886][ T9925] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2999: inode #15: comm syz.7.1776: mark_inode_dirty error [ 269.147997][ T9925] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 269.172320][ T9925] EXT4-fs error (device loop7): ext4_xattr_delete_inode:3002: inode #15: comm syz.7.1776: mark inode dirty (error -117) [ 269.194054][ T9925] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 269.198430][ T9925] EXT4-fs warning (device loop7): ext4_evict_inode:285: xattr delete (err -117) [ 269.216758][ T9925] EXT4-fs (loop7): 1 orphan inode deleted [ 269.223761][ T9925] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 269.332455][ T9914] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.129824][ T8953] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.212550][ T9938] loop5: detected capacity change from 0 to 512 [ 270.458082][ T9938] EXT4-fs warning (device loop5): ext4_enable_quotas:7261: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 270.473233][ T9938] EXT4-fs (loop5): mount failed [ 272.187775][ T9957] loop7: detected capacity change from 0 to 1024 [ 272.203123][ T9954] dummy0 speed is unknown, defaulting to 1000 [ 272.323248][ T9963] loop5: detected capacity change from 0 to 1024 [ 272.343081][ T9957] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 272.360046][ T9963] EXT4-fs: test_dummy_encryption option not supported [ 272.511880][ T9963] loop5: detected capacity change from 0 to 512 [ 272.525368][ T9954] netlink: 332 bytes leftover after parsing attributes in process `syz.7.1783'. [ 272.570618][ T9954] netlink: 'syz.7.1783': attribute type 9 has an invalid length. [ 272.600015][ T9963] EXT4-fs (loop5): 1 orphan inode deleted [ 272.603181][ T9954] netlink: 108 bytes leftover after parsing attributes in process `syz.7.1783'. [ 272.613489][ T9963] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 272.629661][ T9954] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1783'. [ 272.647534][ T6586] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 272.659131][ T9963] ext4 filesystem being mounted at /341/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 272.672489][ T6586] EXT4-fs error (device loop5): ext4_release_dquot:7062: comm kworker/u8:9: Failed to release dquot type 1 [ 272.761635][ T3649] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.095423][ T28] audit: type=1400 audit(2000000096.575:1091): avc: denied { create } for pid=9991 comm="syz.5.1793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 273.134107][ T28] audit: type=1400 audit(2000000096.615:1092): avc: denied { connect } for pid=9991 comm="syz.5.1793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 273.206732][ T8953] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.316546][T10010] netlink: 'syz.1.1798': attribute type 4 has an invalid length. [ 273.338885][T10010] netlink: 'syz.1.1798': attribute type 4 has an invalid length. [ 273.382725][T10010] netlink: 'syz.1.1798': attribute type 4 has an invalid length. [ 273.398484][T10014] loop7: detected capacity change from 0 to 512 [ 273.477949][T10014] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 273.531506][T10014] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 273.700069][ T8953] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.681525][T10047] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1813'. [ 274.725724][T10047] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1813'. [ 274.893685][ T28] audit: type=1326 audit(2000000098.385:1093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10054 comm="syz.0.1816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb83dd5c819 code=0x7ffc0000 [ 275.428670][ T28] audit: type=1326 audit(2000000098.825:1094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10054 comm="syz.0.1816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb83dd5c819 code=0x7ffc0000 [ 275.461203][T10056] loop5: detected capacity change from 0 to 512 [ 275.501324][T10056] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 275.544442][ T28] audit: type=1326 audit(2000000098.925:1095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10054 comm="syz.0.1816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb83dd5c819 code=0x7ffc0000 [ 275.628462][T10056] ext4 filesystem being mounted at /349/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 275.682909][ T3649] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.699473][ T28] audit: type=1326 audit(2000000098.945:1096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10054 comm="syz.0.1816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb83dd5c819 code=0x7ffc0000 [ 275.761828][ T28] audit: type=1326 audit(2000000098.945:1097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10054 comm="syz.0.1816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb83dd5c819 code=0x7ffc0000 [ 275.810741][ T28] audit: type=1326 audit(2000000098.945:1098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10054 comm="syz.0.1816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb83dd5c819 code=0x7ffc0000 [ 275.839507][T10072] loop7: detected capacity change from 0 to 512 [ 275.855200][T10072] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 275.887311][T10072] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1820'. [ 275.925734][ T28] audit: type=1326 audit(2000000098.945:1099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10054 comm="syz.0.1816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb83dd5c819 code=0x7ffc0000 [ 275.955906][T10072] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-:/": -EINTR [ 275.976732][T10080] bond7: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 276.052686][T10080] bond7 (unregistering): Released all slaves [ 276.175358][T10090] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1823'. [ 276.813365][T10101] netlink: 280 bytes leftover after parsing attributes in process `syz.7.1829'. [ 276.845326][T10110] loop5: detected capacity change from 0 to 512 [ 276.923097][T10110] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 276.937036][T10110] ext4 filesystem being mounted at /351/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 277.040016][ T3649] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.802396][T10137] loop7: detected capacity change from 0 to 764 [ 278.871090][T10159] loop5: detected capacity change from 0 to 512 [ 278.913018][T10159] netlink: 27 bytes leftover after parsing attributes in process `syz.5.1847'. [ 278.954283][T10161] loop7: detected capacity change from 0 to 128 [ 279.008275][ T28] kauditd_printk_skb: 34 callbacks suppressed [ 279.008295][ T28] audit: type=1400 audit(2000000102.495:1134): avc: denied { getopt } for pid=10160 comm="syz.7.1848" lport=53846 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 279.425154][T10184] netlink: 'syz.7.1851': attribute type 1 has an invalid length. [ 279.439218][T10183] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1854'. [ 279.450161][ T28] audit: type=1400 audit(2000000102.935:1135): avc: denied { bind } for pid=10182 comm="syz.0.1854" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 279.476452][T10186] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1855'. [ 279.592402][T10184] 8021q: adding VLAN 0 to HW filter on device bond2 [ 279.717732][ T28] audit: type=1400 audit(2000000103.205:1136): avc: denied { write } for pid=10190 comm="syz.0.1856" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 280.110000][T10222] loop5: detected capacity change from 0 to 512 [ 280.148811][T10222] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 280.178135][T10227] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1866'. [ 280.187116][T10227] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1866'. [ 280.273163][ T3649] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.300136][T10237] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1872'. [ 280.309691][T10237] netlink: 'syz.1.1872': attribute type 1 has an invalid length. [ 280.388631][T10241] FAULT_INJECTION: forcing a failure. [ 280.388631][T10241] name failslab, interval 1, probability 0, space 0, times 1 [ 280.428177][T10241] CPU: 0 UID: 0 PID: 10241 Comm: syz.5.1873 Tainted: G W syzkaller #0 PREEMPT(full) [ 280.428280][T10241] Tainted: [W]=WARN [ 280.428288][T10241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 280.428303][T10241] Call Trace: [ 280.428309][T10241] [ 280.428318][T10241] __dump_stack+0x1d/0x30 [ 280.428350][T10241] dump_stack_lvl+0x95/0xd0 [ 280.428452][T10241] dump_stack+0x15/0x1b [ 280.428479][T10241] should_fail_ex+0x263/0x280 [ 280.428506][T10241] should_failslab+0x8c/0xb0 [ 280.428562][T10241] kmem_cache_alloc_node_noprof+0x6d/0x460 [ 280.428585][T10241] ? __alloc_skb+0x2d6/0x690 [ 280.428651][T10241] __alloc_skb+0x2d6/0x690 [ 280.428677][T10241] ? __alloc_skb+0x200/0x690 [ 280.428706][T10241] netlink_alloc_large_skb+0xbf/0xf0 [ 280.428794][T10241] netlink_sendmsg+0x40c/0x6f0 [ 280.428821][T10241] ? __pfx_netlink_sendmsg+0x10/0x10 [ 280.428845][T10241] ____sys_sendmsg+0x563/0x5b0 [ 280.428881][T10241] ___sys_sendmsg+0x195/0x1e0 [ 280.428913][T10241] __x64_sys_sendmsg+0xd4/0x160 [ 280.428998][T10241] x64_sys_call+0x194c/0x3020 [ 280.429095][T10241] do_syscall_64+0x12c/0x370 [ 280.429124][T10241] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.429221][T10241] RIP: 0033:0x7f3b1a90c819 [ 280.429236][T10241] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 280.429252][T10241] RSP: 002b:00007f3b19367028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 280.429274][T10241] RAX: ffffffffffffffda RBX: 00007f3b1ab85fa0 RCX: 00007f3b1a90c819 [ 280.429291][T10241] RDX: 0000000000000008 RSI: 0000200000000100 RDI: 0000000000000008 [ 280.429307][T10241] RBP: 00007f3b19367090 R08: 0000000000000000 R09: 0000000000000000 [ 280.429323][T10241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 280.429336][T10241] R13: 00007f3b1ab86038 R14: 00007f3b1ab85fa0 R15: 00007ffc3cabae18 [ 280.429354][T10241] [ 280.774227][T10251] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1877'. [ 280.793536][T10249] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1876'. [ 280.810350][T10251] hsr_slave_1 (unregistering): left promiscuous mode [ 280.825182][T10253] tmpfs: Unknown parameter 'sieWi' [ 280.877069][T10257] netlink: 100 bytes leftover after parsing attributes in process `syz.5.1878'. [ 280.969079][T10263] loop5: detected capacity change from 0 to 764 [ 281.383950][T10274] loop5: detected capacity change from 0 to 512 [ 281.511551][T10274] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 281.613662][ T28] audit: type=1400 audit(2000000105.105:1137): avc: denied { mounton } for pid=10258 comm="syz.7.1880" path="/proc/172/task" dev="proc" ino=24487 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 281.762006][ T3649] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.205737][T10301] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1893'. [ 282.303670][T10302] loop5: detected capacity change from 0 to 2048 [ 282.359848][T10302] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 282.393383][ T28] audit: type=1400 audit(2000000105.885:1138): avc: denied { map } for pid=10300 comm="syz.5.1888" path="/370/file1/memory.events" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 282.448931][ T3649] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.045389][T10319] loop7: detected capacity change from 0 to 512 [ 283.132452][T10319] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 283.180941][ T8953] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.300148][T10333] netlink: 'syz.5.1895': attribute type 1 has an invalid length. [ 283.359493][T10333] 8021q: adding VLAN 0 to HW filter on device bond4 [ 283.604394][ T28] audit: type=1400 audit(2000000107.095:1139): avc: denied { getopt } for pid=10338 comm="syz.0.1907" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 283.772202][T10342] loop7: detected capacity change from 0 to 512 [ 283.920967][T10342] EXT4-fs error (device loop7): ext4_orphan_get:1397: inode #15: comm syz.7.1908: inode has both inline data and extents flags [ 283.951579][T10342] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 283.952430][T10342] EXT4-fs error (device loop7): ext4_orphan_get:1402: comm syz.7.1908: couldn't read orphan inode 15 (err -117) [ 283.961742][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 283.961765][ C1] EXT4-fs (loop7): initial error at time 2000000107: ext4_orphan_get:1397: inode 15 [ 283.961809][ C1] EXT4-fs (loop7): last error at time 2000000107: ext4_orphan_get:1397: inode 15 [ 284.032293][T10342] loop7: lost filesystem error report for type 5 error -117 [ 284.043834][T10342] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 284.179260][T10342] EXT4-fs: Ignoring removed bh option [ 284.193838][T10342] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 285.224431][ T8953] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.577513][ T28] audit: type=1400 audit(2000000108.996:1140): avc: denied { read } for pid=10375 comm="syz.1.1917" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 285.734446][T10381] loop5: detected capacity change from 0 to 512 [ 285.780276][T10381] EXT4-fs (loop5): 1 orphan inode deleted [ 285.789238][T10381] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 285.803833][T10381] ext4 filesystem being mounted at /373/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 286.016649][ T50] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 286.067377][ T50] EXT4-fs error (device loop5): ext4_release_dquot:7062: comm kworker/u8:3: Failed to release dquot type 1 [ 286.089224][T10385] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 287.127920][T10426] __nla_validate_parse: 3 callbacks suppressed [ 287.127947][T10426] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1932'. [ 287.270371][ T28] audit: type=1400 audit(2000000110.756:1141): avc: denied { watch } for pid=10436 comm="syz.0.1935" path="/376/file0" dev="tmpfs" ino=1976 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 287.653751][T10446] netlink: 280 bytes leftover after parsing attributes in process `syz.0.1937'. [ 288.168301][ T28] audit: type=1326 audit(2000000111.666:1142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10471 comm="syz.6.1945" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5c1b70c819 code=0x0 [ 288.307871][T10476] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1947'. [ 288.316922][T10476] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1947'. [ 288.409238][T10476] bond10: option xmit_hash_policy: invalid value (64) [ 288.440586][T10476] bond10 (unregistering): Released all slaves [ 288.497654][ T28] audit: type=1400 audit(2000000111.986:1143): avc: denied { getopt } for pid=10481 comm="syz.0.1950" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 288.545743][T10486] loop6: detected capacity change from 0 to 512 [ 288.605273][ T28] audit: type=1400 audit(2000000112.096:1144): avc: denied { remount } for pid=10474 comm="syz.6.1947" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 288.871140][T10523] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.968773][T10523] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.032515][ T28] audit: type=1400 audit(2000000112.526:1145): avc: denied { relabelfrom } for pid=10524 comm="syz.7.1961" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 289.159335][T10536] netlink: 280 bytes leftover after parsing attributes in process `syz.6.1960'. [ 289.257206][ T28] audit: type=1400 audit(2000000112.526:1146): avc: denied { relabelto } for pid=10524 comm="syz.7.1961" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 289.539268][T10523] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.609809][ T28] audit: type=1400 audit(2000000113.106:1147): avc: denied { read } for pid=10540 comm="syz.7.1964" path="socket:[26744]" dev="sockfs" ino=26744 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 289.665084][T10523] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.855329][T10465] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.928866][ T6696] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.950223][T10562] xt_TCPMSS: Only works on TCP SYN packets [ 289.997583][T10466] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.016024][T10466] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.093688][T10574] cgroup: Need name or subsystem set [ 290.094586][ T28] audit: type=1400 audit(2000000113.586:1148): avc: denied { mounton } for pid=10573 comm="syz.7.1973" path="/syzcgroup/cpu/syz7/cgroup.procs" dev="cgroup" ino=445 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 290.289916][T10572] loop6: detected capacity change from 0 to 8192 [ 290.387784][T10601] bridge_slave_0: left allmulticast mode [ 290.393532][T10601] bridge_slave_0: left promiscuous mode [ 290.422872][T10601] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.436786][ T3304] loop6: p2 p3 p4[EZD] [ 290.447810][ T3304] loop6: p3 start 331781 is beyond EOD, truncated [ 290.454326][ T3304] loop6: p4 size 197376 extends beyond EOD, truncated [ 290.466671][T10601] bridge_slave_1: left allmulticast mode [ 290.472494][T10601] bridge_slave_1: left promiscuous mode [ 290.478279][T10601] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.501429][T10572] loop6: p2 p3 p4[EZD] [ 290.524959][T10601] bond0: (slave bond_slave_0): Releasing backup interface [ 290.542991][T10610] 9p: Bad value for 'rfdno' [ 290.559682][T10609] Invalid ELF header magic: != ELF [ 290.567701][T10572] loop6: p3 start 331781 is beyond EOD, truncated [ 290.574363][T10572] loop6: p4 size 197376 extends beyond EOD, truncated [ 290.577788][T10610] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1984'. [ 290.629228][T10601] bond0: (slave bond_slave_1): Releasing backup interface [ 290.670001][T10601] team0: Port device team_slave_0 removed [ 290.716131][T10601] team0: Port device team_slave_1 removed [ 290.739517][T10601] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 290.751198][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 290.751281][ T28] audit: type=1400 audit(2000000114.246:1151): avc: denied { shutdown } for pid=10621 comm="syz.0.1987" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 290.789155][T10601] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 290.803007][T10601] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 290.820924][T10601] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 290.839737][T10601] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 290.999058][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 291.078978][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 291.152030][T10632] loop6: detected capacity change from 0 to 512 [ 291.171017][T10632] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 291.204832][ T3803] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.261833][T10638] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1992'. [ 291.273831][ T3649] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.496343][T10645] loop5: detected capacity change from 0 to 764 [ 291.591175][T10653] loop7: detected capacity change from 0 to 512 [ 291.599396][T10652] sctp: [Deprecated]: syz.1.1999 (pid 10652) Use of int in maxseg socket option. [ 291.599396][T10652] Use struct sctp_assoc_value instead [ 291.619900][T10655] netlink: 100 bytes leftover after parsing attributes in process `syz.5.2000'. [ 291.650910][T10653] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2 [ 291.662235][T10658] loop5: detected capacity change from 0 to 512 [ 291.669019][T10653] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -2 [ 291.698665][T10653] EXT4-fs (loop7): 1 truncate cleaned up [ 291.715012][T10653] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 291.738382][T10658] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: inode #12: comm syz.5.2001: missing EA_INODE flag [ 291.757846][T10658] loop5: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 291.757972][T10658] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.2001: error while reading EA inode 12 err=-117 [ 291.779549][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 291.779572][ C0] EXT4-fs (loop5): initial error at time 2000000115: ext4_xattr_inode_iget:441: inode 12 [ 291.779622][ C0] EXT4-fs (loop5): last error at time 2000000115: ext4_xattr_inode_iget:441: inode 12 [ 291.847486][T10658] loop5: lost filesystem error report for type 5 error -117 [ 291.848595][T10658] EXT4-fs (loop5): 1 orphan inode deleted [ 291.932512][T10667] futex_wake_op: syz.6.2002 tries to shift op by -1; fix this program [ 291.948130][T10668] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 291.980779][ T28] audit: type=1400 audit(2000000115.446:1152): avc: denied { create } for pid=10651 comm="syz.7.1998" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 292.029632][T10658] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 292.117849][T10672] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=46724 sclass=netlink_xfrm_socket pid=10672 comm=syz.7.1998 [ 292.176270][T10674] loop6: detected capacity change from 0 to 2048 [ 292.244930][T10674] EXT4-fs: Ignoring removed orlov option [ 292.260633][T10674] EXT4-fs: Ignoring removed oldalloc option [ 292.273069][ T28] audit: type=1400 audit(2000000115.766:1153): avc: denied { write } for pid=10651 comm="syz.7.1998" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 292.321162][T10674] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 292.352259][ T3803] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.455924][ T3649] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.467986][ T8953] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.824816][T10708] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2014'. [ 292.994286][T10709] 8021q: adding VLAN 0 to HW filter on device bond7 [ 293.048615][T10709] bond6: (slave bond7): Enslaving as an active interface with an up link [ 293.169074][T10712] 8021q: adding VLAN 0 to HW filter on device bond8 [ 293.216830][T10712] bond6: (slave bond8): Enslaving as an active interface with an up link [ 293.272485][T10717] batadv_slave_1: entered promiscuous mode [ 293.281129][T10710] batadv_slave_1: left promiscuous mode [ 293.520397][T10725] loop7: detected capacity change from 0 to 764 [ 294.353733][T10731] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2018'. [ 294.511708][T10739] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2020'. [ 294.563352][T10744] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2023'. [ 294.721948][T10763] loop7: detected capacity change from 0 to 512 [ 294.818985][T10765] hub 8-0:1.0: USB hub found [ 294.823987][T10765] hub 8-0:1.0: 8 ports detected [ 294.841744][T10765] netlink: 'syz.5.2028': attribute type 10 has an invalid length. [ 294.924885][T10765] macvlan1: entered allmulticast mode [ 294.953871][T10763] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 295.033573][ T28] audit: type=1326 audit(2000000118.506:1154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10767 comm="syz.6.2032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c1b70c819 code=0x7ffc0000 [ 295.110949][T10763] ext4 filesystem being mounted at /88/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 295.271911][ T28] audit: type=1326 audit(2000000118.506:1155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10767 comm="syz.6.2032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c1b70c819 code=0x7ffc0000 [ 295.305788][ T28] audit: type=1326 audit(2000000118.506:1156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10767 comm="syz.6.2032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7f5c1b70c819 code=0x7ffc0000 [ 295.377633][ T28] audit: type=1326 audit(2000000118.506:1157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10767 comm="syz.6.2032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c1b70c819 code=0x7ffc0000 [ 295.410596][ T28] audit: type=1326 audit(2000000118.506:1158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10767 comm="syz.6.2032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c1b70c819 code=0x7ffc0000 [ 295.434509][ T28] audit: type=1326 audit(2000000118.506:1159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10767 comm="syz.6.2032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f5c1b70c819 code=0x7ffc0000 [ 295.464040][ T28] audit: type=1326 audit(2000000118.576:1160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10767 comm="syz.6.2032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c1b70c819 code=0x7ffc0000 [ 295.547941][T10787] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2036'. [ 295.577157][ T8953] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.621340][T10789] loop7: detected capacity change from 0 to 1024 [ 295.647312][T10789] EXT4-fs (loop7): VFS: Can't find ext4 filesystem [ 295.733221][T10803] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2041'. [ 295.733233][T10804] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2042'. [ 295.769855][T10804] loop7: detected capacity change from 0 to 512 [ 295.791623][T10804] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8846c028, mo2=0002] [ 295.802864][T10809] syz.1.2043 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 295.809325][T10804] EXT4-fs (loop7): orphan cleanup on readonly fs [ 295.822574][T10804] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2 [ 295.838141][T10804] EXT4-fs error (device loop7): __ext4_iget:5393: inode #13: block 25: comm syz.7.2042: invalid block [ 295.849357][T10804] loop7: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 295.857212][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 295.872820][ C0] EXT4-fs (loop7): initial error at time 2000000119: __ext4_iget:5393: inode 13: block 25 [ 295.882865][ C0] EXT4-fs (loop7): last error at time 2000000119: __ext4_iget:5393: inode 13: block 25 [ 295.900383][T10804] EXT4-fs (loop7): Remounting filesystem read-only [ 295.907665][T10804] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 295.936132][ T8953] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.345218][T10833] loop6: detected capacity change from 0 to 512 [ 296.375350][T10837] netlink: 100 bytes leftover after parsing attributes in process `syz.5.2053'. [ 296.867232][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 296.867250][ T28] audit: type=1400 audit(2000000120.346:1174): avc: denied { getopt } for pid=10838 comm="syz.1.2054" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 296.932518][T10840] loop7: detected capacity change from 0 to 512 [ 296.939278][T10840] EXT4-fs: Ignoring removed bh option [ 296.944700][T10840] EXT4-fs: Ignoring removed nomblk_io_submit option [ 296.955613][T10840] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 296.984371][T10840] EXT4-fs (loop7): 1 truncate cleaned up [ 296.990723][T10840] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 297.003640][T10840] EXT4-fs warning (device loop7): ext4_block_to_path:107: block 1057052516 > max in inode 18 [ 297.383801][T10833] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 297.457793][T10853] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000 [ 297.486131][T10833] ext4 filesystem being mounted at /350/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 297.714618][T10871] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2064'. [ 297.920765][ T8953] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.984000][T10876] netlink: 100 bytes leftover after parsing attributes in process `syz.7.2066'. [ 298.028674][ T28] audit: type=1400 audit(2000000121.526:1175): avc: denied { accept } for pid=10878 comm="syz.7.2067" path="socket:[26249]" dev="sockfs" ino=26249 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 298.076282][T10879] netlink: 'syz.7.2067': attribute type 10 has an invalid length. [ 298.091590][T10879] 8021q: adding VLAN 0 to HW filter on device team0 [ 298.109164][T10879] bond0: (slave team0): Enslaving as an active interface with an up link [ 298.260024][T10884] loop7: detected capacity change from 0 to 512 [ 298.271314][T10884] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 298.862003][ T3803] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.112126][T10897] netlink: 280 bytes leftover after parsing attributes in process `syz.1.2071'. [ 299.387651][ T28] audit: type=1400 audit(2000000122.876:1176): avc: denied { unlink } for pid=8953 comm="syz-executor" name="freezer.parent_freezing" dev="loop7" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 299.448087][T10907] x_tables: ip_tables: osf match: used from hooks POSTROUTING, but only valid from PREROUTING/INPUT/FORWARD [ 299.520043][T10912] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2077'. [ 299.529397][T10915] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2077'. [ 299.543293][ T9232] IPVS: starting estimator thread 0... [ 299.558990][T10919] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2079'. [ 299.572607][T10909] loop6: detected capacity change from 0 to 7 [ 299.579398][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 299.589014][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 299.599188][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 299.608788][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 299.616652][ T3304] loop6: unable to read partition table [ 299.630487][T10920] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2078'. [ 299.640522][T10917] IPVS: using max 2448 ests per chain, 122400 per kthread [ 299.648293][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 299.657904][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 299.665842][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 299.675463][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 299.684466][T10920] veth1_macvtap: left promiscuous mode [ 299.690846][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 299.700453][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 299.708539][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 299.718160][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 299.728063][T10909] loop6: unable to read partition table [ 299.734653][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 299.744851][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 299.754878][T10909] loop_reread_partitions: partition scan of loop6 (Wý* %4FLQk݊5) failed (rc=-5) [ 299.766630][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 299.776236][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 299.784319][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 299.793900][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 299.865555][T10466] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.882186][T10886] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.511167][T10466] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.792451][T10466] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.844996][ T28] audit: type=1400 audit(2000000124.316:1177): avc: denied { bind } for pid=10951 comm="syz.6.2087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 301.019572][T10466] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.087674][ T28] audit: type=1400 audit(2000000124.366:1178): avc: denied { name_bind } for pid=10951 comm="syz.6.2087" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 301.240471][T10930] dummy0 speed is unknown, defaulting to 1000 [ 301.276710][ T28] audit: type=1400 audit(2000000124.696:1179): avc: denied { write } for pid=10964 comm="syz.6.2089" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 301.380094][ T28] audit: type=1400 audit(2000000124.756:1180): avc: denied { listen } for pid=10964 comm="syz.6.2089" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 301.517668][T10979] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2095'. [ 301.633594][T10466] bond0 (unregistering): (slave team0): Releasing backup interface [ 301.660723][T10466] bond0 (unregistering): Released all slaves [ 301.681863][T10466] bond1 (unregistering): Released all slaves [ 301.705888][T10466] bond2 (unregistering): Released all slaves [ 301.862237][T10981] dummy0 speed is unknown, defaulting to 1000 [ 301.884237][T10930] chnl_net:caif_netlink_parms(): no params data found [ 301.974616][T10466] hsr_slave_0: left promiscuous mode [ 302.003463][T10466] hsr_slave_1: left promiscuous mode [ 302.035216][T10466] veth1_macvtap: left promiscuous mode [ 302.067715][T10466] veth0_macvtap: left promiscuous mode [ 302.073321][T10466] veth1_vlan: left promiscuous mode [ 302.121747][T10466] veth0_vlan: left promiscuous mode [ 302.240587][T11009] netlink: 100 bytes leftover after parsing attributes in process `syz.6.2101'. [ 302.342644][T11022] loop6: detected capacity change from 0 to 512 [ 302.357291][T11022] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 302.371739][T11022] ext4 filesystem being mounted at /358/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 302.387535][T10982] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2096'. [ 302.402189][T10997] dvmrp2: entered allmulticast mode [ 302.408591][T11030] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1794 sclass=netlink_route_socket pid=11030 comm=syz.0.2106 [ 302.427671][ T28] audit: type=1400 audit(2000000125.907:1181): avc: denied { setopt } for pid=11023 comm="syz.0.2106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 302.459354][ T3803] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.467413][T11020] tipc: Started in network mode [ 302.473461][T11020] tipc: Node identity b290d15552a2, cluster identity 4711 [ 302.493290][T11020] tipc: Enabled bearer , priority 0 [ 302.525192][T11027] syzkaller0: entered promiscuous mode [ 302.535124][T11033] loop6: detected capacity change from 0 to 1024 [ 302.547566][T11033] EXT4-fs: Ignoring removed mblk_io_submit option [ 302.554554][T11027] syzkaller0: entered allmulticast mode [ 302.579015][T11039] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2109'. [ 302.589404][T11033] EXT4-fs: Ignoring removed oldalloc option [ 302.594712][T11003] bridge_slave_1: mtu less than device minimum [ 302.607135][T11003] ref_ctr increment failed for inode: 0x833 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff8881048dca40 [ 302.618694][T11002] uprobe: syz.5.2098:11002 failed to unregister, leaking uprobe [ 302.637058][T11002] tipc: Resetting bearer [ 302.649587][T11033] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 302.661975][T11033] ext4 filesystem being mounted at /359/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 302.683656][T11002] tipc: Disabling bearer [ 302.708602][T10930] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.715765][T10930] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.723233][T10930] bridge_slave_0: entered allmulticast mode [ 302.729901][T10930] bridge_slave_0: entered promiscuous mode [ 302.731926][T11033] EXT4-fs error (device loop6): ext4_map_blocks:828: inode #15: block 3: comm syz.6.2107: lblock 3 mapped to illegal pblock 3 (length 3) [ 302.751933][T10930] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.759199][T10930] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.768885][T10930] bridge_slave_1: entered allmulticast mode [ 302.775382][T10930] bridge_slave_1: entered promiscuous mode [ 302.793339][T10930] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 302.803789][T10930] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 302.824498][T11033] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 302.866115][T10930] team0: Port device team_slave_0 added [ 302.873422][T11033] EXT4-fs (loop6): This should not happen!! Data will be lost [ 302.873422][T11033] [ 302.886579][T10930] team0: Port device team_slave_1 added [ 302.902877][T11059] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.2107: bg 0: block 112: padding at end of block bitmap is not set [ 302.937992][T10930] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 302.945018][T10930] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 302.977091][ T6696] EXT4-fs error (device loop6): ext4_map_blocks:828: inode #15: block 8: comm kworker/u8:15: lblock 8 mapped to illegal pblock 8 (length 5) [ 302.992707][T10930] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 303.017485][ T6696] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 5 with error 117 [ 303.022647][T10930] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 303.037965][T11070] netlink: 100 bytes leftover after parsing attributes in process `syz.5.2114'. [ 303.039344][T10930] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 303.052905][ T6696] EXT4-fs (loop6): This should not happen!! Data will be lost [ 303.052905][ T6696] [ 303.077460][T10930] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 303.087528][T11071] netlink: 'syz.1.2111': attribute type 1 has an invalid length. [ 303.130216][ T3803] EXT4-fs warning (device loop6): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 303.145659][ T3803] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 303.162021][T10930] hsr_slave_0: entered promiscuous mode [ 303.169260][T10930] hsr_slave_1: entered promiscuous mode [ 303.175659][T10930] debugfs: 'hsr0' already exists in 'hsr' [ 303.193597][T10930] Cannot create hsr debugfs directory [ 303.255655][T11071] 8021q: adding VLAN 0 to HW filter on device bond9 [ 303.406064][T11084] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2118'. [ 303.416404][T11084] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2118'. [ 303.459544][T11084] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2118'. [ 303.491108][T11083] loop5: detected capacity change from 0 to 1024 [ 303.498149][T11084] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2118'. [ 303.513847][T11084] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2118'. [ 303.541201][T11083] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 303.587258][T11083] System zones: 0-1, 3-36 [ 303.659276][T11083] EXT4-fs error (device loop5): ext4_orphan_get:1423: comm syz.5.2117: bad orphan inode 134217728 [ 303.723703][T10930] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 303.731453][T11083] loop5: lost filesystem error report for type 5 error -117 [ 303.749158][T11083] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 303.877293][T10930] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 303.900199][T10930] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 303.959143][T10930] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 304.147399][T10930] 8021q: adding VLAN 0 to HW filter on device bond0 [ 304.161759][T10930] 8021q: adding VLAN 0 to HW filter on device team0 [ 304.184145][T11142] netlink: 'syz.6.2124': attribute type 1 has an invalid length. [ 304.256072][T10930] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 304.282813][ T3649] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.313398][T10930] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 304.429104][T11142] 8021q: adding VLAN 0 to HW filter on device bond10 [ 304.446715][ T6696] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.453841][ T6696] bridge0: port 1(bridge_slave_0) entered forwarding state [ 304.521332][ T6696] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.528638][ T6696] bridge0: port 2(bridge_slave_1) entered forwarding state [ 304.667260][T11152] loop5: detected capacity change from 0 to 512 [ 304.674305][T10930] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 304.685717][T11152] EXT4-fs: Ignoring removed nobh option [ 304.700331][T11154] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2126'. [ 304.733113][T11152] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 not in group (block 3)! [ 304.764538][T11161] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2128'. [ 304.773604][T11152] EXT4-fs (loop5): group descriptors corrupted! [ 305.320313][T11172] netlink: 280 bytes leftover after parsing attributes in process `syz.5.2130'. [ 305.382838][T11175] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2131'. [ 305.837100][T11197] veth1_to_bridge: entered promiscuous mode [ 305.885371][T10930] veth0_vlan: entered promiscuous mode [ 305.928617][T11197] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 305.991340][T10930] veth1_vlan: entered promiscuous mode [ 306.051846][T10930] veth0_macvtap: entered promiscuous mode [ 306.072103][T10930] veth1_macvtap: entered promiscuous mode [ 306.107024][T10930] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 306.222553][T10930] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 306.251757][T10466] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.301180][T10466] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.314479][T11217] loop5: detected capacity change from 0 to 1024 [ 306.323550][T10466] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.338032][T11219] netlink: 'syz.1.2141': attribute type 1 has an invalid length. [ 306.349215][ T28] audit: type=1400 audit(2000000129.837:1182): avc: denied { mount } for pid=10930 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 306.372158][T11217] EXT4-fs: test_dummy_encryption option not supported [ 306.512161][T11219] 8021q: adding VLAN 0 to HW filter on device bond10 [ 306.989153][T11223] loop5: detected capacity change from 0 to 512 [ 307.070205][T11223] EXT4-fs (loop5): 1 orphan inode deleted [ 307.084902][T11223] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 307.104400][T11223] ext4 filesystem being mounted at /406/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 307.131158][T10465] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 307.290955][T10466] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.038197][T10465] EXT4-fs error (device loop5): ext4_release_dquot:7062: comm kworker/u8:36: Failed to release dquot type 1 [ 308.470016][T11246] loop8: detected capacity change from 0 to 512 [ 308.577375][T11246] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 308.873960][T11252] xt_nat: multiple ranges no longer supported [ 309.030867][T10930] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.040754][ T3649] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.087692][T11255] batadv_slave_0: entered promiscuous mode [ 309.094132][T11255] __nla_validate_parse: 3 callbacks suppressed [ 309.094148][T11255] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2154'. [ 309.110922][T11255] batadv_slave_0 (unregistering): left promiscuous mode [ 309.118197][T11255] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 309.721874][T11276] netlink: 'syz.1.2160': attribute type 4 has an invalid length. [ 309.731941][T11276] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2160'. [ 309.980301][T11284] loop8: detected capacity change from 0 to 1024 [ 309.998601][T11276] .`: renamed from bond0 (while UP) [ 310.022973][T11284] EXT4-fs: test_dummy_encryption option not supported [ 311.266317][T11290] loop8: detected capacity change from 0 to 512 [ 312.961279][T11290] EXT4-fs warning (device loop8): ext4_multi_mount_protect:394: Unable to create kmmpd thread for loop8. [ 313.159055][T11305] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2165'. [ 313.235379][T11307] syzkaller0: entered promiscuous mode [ 313.241067][T11307] syzkaller0: entered allmulticast mode [ 313.357449][ T28] audit: type=1400 audit(2000000136.837:1183): avc: denied { setopt } for pid=11320 comm="syz.1.2169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 313.430567][ T28] audit: type=1400 audit(2000000136.867:1184): avc: denied { setattr } for pid=11322 comm="syz.8.2170" name="loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 313.432242][T11327] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2172'. [ 313.507252][T11327] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2172'. [ 313.680636][T11344] gre0: entered promiscuous mode [ 313.689818][T11344] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 313.822275][T11355] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2183'. [ 314.058693][T11357] tipc: Cannot configure node identity twice [ 314.191603][T11360] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2180'. [ 314.205332][T11359] loop5: detected capacity change from 0 to 1764 [ 315.060636][T11378] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2188'. [ 315.500667][T11396] netlink: 100 bytes leftover after parsing attributes in process `syz.5.2191'. [ 315.608782][T11406] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2194'. [ 315.874273][T11418] netlink: 'syz.5.2195': attribute type 1 has an invalid length. [ 316.438205][T11419] batadv0: entered promiscuous mode [ 316.444077][T11419] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 316.454871][T11419] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 316.465091][T11419] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 316.542644][T11419] batadv0: left promiscuous mode [ 316.755564][T11435] loop5: detected capacity change from 0 to 512 [ 316.824084][T11435] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 316.876522][ T3649] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.075632][T11472] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2208'. [ 317.115036][T11453] loop5: detected capacity change from 0 to 512 [ 317.138608][T11476] loop6: detected capacity change from 0 to 1764 [ 317.182337][T11476] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2198'. [ 317.191942][T11476] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2198'. [ 317.208929][T11476] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 317.383409][T11453] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 317.438579][T11453] ext4 filesystem being mounted at /421/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 317.465475][T11470] loop8: detected capacity change from 0 to 512 [ 317.473319][T11485] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2209'. [ 317.488295][T11487] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2210'. [ 317.521963][T11470] EXT4-fs: Ignoring removed bh option [ 317.595094][T11470] EXT4-fs: Ignoring removed nomblk_io_submit option [ 317.658556][T11470] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 317.683016][T11470] EXT4-fs (loop8): 1 truncate cleaned up [ 317.697241][ T3649] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.707395][T11470] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 317.742847][T11462] EXT4-fs warning (device loop8): ext4_block_to_path:107: block 1057052516 > max in inode 18 [ 318.116280][T11501] netlink: 'syz.5.2213': attribute type 3 has an invalid length. [ 318.329634][ T28] audit: type=1400 audit(2000000141.827:1185): avc: denied { accept } for pid=11514 comm="syz.1.2216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 318.829768][T10930] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.848164][ T28] audit: type=1400 audit(2000000142.347:1186): avc: denied { append } for pid=11538 comm="syz.5.2219" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 318.907893][T11543] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2220'. [ 318.962453][T11549] loop5: detected capacity change from 0 to 512 [ 319.000171][T11549] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 319.060647][ T3649] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.287369][T11575] loop8: detected capacity change from 0 to 1024 [ 319.307545][T11575] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 319.347765][T10930] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 319.470101][T11583] dummy0 speed is unknown, defaulting to 1000 [ 319.826216][T11593] loop8: detected capacity change from 0 to 512 [ 323.574799][T11603] __nla_validate_parse: 2 callbacks suppressed [ 323.574819][T11603] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2242'. [ 323.698612][T11593] EXT4-fs warning (device loop8): ext4_multi_mount_protect:394: Unable to create kmmpd thread for loop8. [ 324.323863][T11601] loop6: detected capacity change from 0 to 512 [ 324.501263][ T28] audit: type=1400 audit(2000000147.198:1187): avc: denied { write } for pid=11596 comm="syz.6.2240" name="hwrng" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 324.543164][T11606] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2243'. [ 324.890246][T11601] EXT4-fs warning (device loop6): ext4_enable_quotas:7261: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 324.907434][T11601] EXT4-fs (loop6): mount failed [ 324.960552][T11613] loop8: detected capacity change from 0 to 512 [ 325.036762][T11613] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 325.138662][T10930] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.357480][T11640] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 325.367618][T11640] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 325.377482][ T28] audit: type=1400 audit(2000000148.878:1188): avc: denied { setopt } for pid=11638 comm="syz.6.2255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 328.347864][T11672] netlink: 100 bytes leftover after parsing attributes in process `syz.6.2265'. [ 328.398745][T11676] loop5: detected capacity change from 0 to 512 [ 328.460884][T11676] EXT4-fs error (device loop5): ext4_expand_extra_isize_ea:2808: inode #11: comm syz.5.2267: corrupted xattr block 95: invalid header [ 328.518112][T11695] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2273'. [ 328.559752][T11676] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 328.559968][T11676] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2858: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 328.569193][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 328.569214][ C0] EXT4-fs (loop5): initial error at time 2000000152: ext4_expand_extra_isize_ea:2808: inode 11 [ 328.569249][ C0] EXT4-fs (loop5): last error at time 2000000152: ext4_expand_extra_isize_ea:2808: inode 11 [ 328.609799][T11696] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2270'. [ 328.630156][T11698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 328.633348][T11676] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.2267: bg 0: block 7: invalid block bitmap [ 328.638944][T11698] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 328.651898][T11676] loop5: lost filesystem error report for type 5 error -117 [ 328.662399][T11676] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 328.679303][T11676] loop5: lost filesystem error report for type 5 error -117 [ 328.680134][T11676] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2970: inode #11: comm syz.5.2267: corrupted xattr block 95: invalid header [ 328.701545][T11676] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 328.701729][T11676] EXT4-fs warning (device loop5): ext4_evict_inode:285: xattr delete (err -117) [ 328.720565][T11676] EXT4-fs (loop5): 1 orphan inode deleted [ 328.737569][T11676] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 328.804481][ T3649] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 329.039728][T11711] netlink: 'syz.5.2278': attribute type 1 has an invalid length. [ 329.058038][T11711] 8021q: adding VLAN 0 to HW filter on device bond5 [ 329.218691][T11714] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2280'. [ 329.280902][T11714] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2280'. [ 329.396029][T11718] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2281'. [ 329.423169][T11718] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2281'. [ 329.517248][T11725] geneve2: entered promiscuous mode [ 329.535104][T11725] geneve2: entered allmulticast mode [ 330.495199][T11734] loop5: detected capacity change from 0 to 1024 [ 330.509070][ T6691] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 330.517956][T11734] EXT4-fs: inline encryption not supported [ 330.537929][ T6691] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 330.546454][T11734] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 330.560626][ T6691] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 330.572355][T11734] EXT4-fs error (device loop5): ext4_map_blocks:786: inode #3: block 2: comm syz.5.2286: lblock 2 mapped to illegal pblock 2 (length 1) [ 330.595273][ T6691] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 330.677345][T11738] netlink: 'syz.1.2287': attribute type 7 has an invalid length. [ 330.693795][T11734] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 330.693904][T11734] EXT4-fs (loop5): Remounting filesystem read-only [ 330.703044][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 330.703060][ C0] EXT4-fs (loop5): initial error at time 2000000154: ext4_map_blocks:786: inode 3: block 2 [ 330.703123][ C0] EXT4-fs (loop5): last error at time 2000000154: ext4_map_blocks:786: inode 3: block 2 [ 330.755058][T11742] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2289'. [ 330.768064][T11738] netlink: 'syz.1.2287': attribute type 7 has an invalid length. [ 330.776081][ T6691] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 330.784382][ T6691] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 330.796137][ T6691] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 330.824929][ T6691] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 330.866628][T11734] Quota error (device loop5): qtree_write_dquot: dquota write failed [ 330.887992][T11734] Quota error (device loop5): v2_write_file_info: Can't write info structure [ 330.908109][T11734] EXT4-fs (loop5): 1 orphan inode deleted [ 330.917710][T11734] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 331.907848][ T3649] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 331.932115][ T28] audit: type=1400 audit(2000000155.418:1189): avc: denied { recv } for pid=11771 comm="syz.8.2298" saddr=10.128.0.163 src=39494 daddr=10.128.0.109 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 332.961562][T11789] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2302'. [ 333.258696][T11806] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2305'. [ 333.521125][T11808] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2306'. [ 333.558083][T11808] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2306'. [ 333.690933][T11816] netlink: 'syz.0.2311': attribute type 27 has an invalid length. [ 334.055093][ T28] audit: type=1400 audit(2000000157.518:1190): avc: denied { lock } for pid=11815 comm="syz.0.2311" path="socket:[30170]" dev="sockfs" ino=30170 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 334.277740][T11830] loop6: detected capacity change from 0 to 512 [ 334.285759][T11830] EXT4-fs: Ignoring removed oldalloc option [ 334.292396][T11830] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 334.305357][T11830] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #16: comm syz.6.2312: invalid indirect mapped block 83886080 (level 1) [ 334.328971][T11830] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 334.329287][T11830] EXT4-fs (loop6): Remounting filesystem read-only [ 334.338449][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 334.338468][ C0] EXT4-fs (loop6): initial error at time 2000000157: ext4_free_branches:1023: inode 16 [ 334.338509][ C0] EXT4-fs (loop6): last error at time 2000000157: ext4_free_branches:1023: inode 16 [ 334.399214][T11830] EXT4-fs (loop6): 1 orphan inode deleted [ 334.405684][T11830] EXT4-fs (loop6): 1 truncate cleaned up [ 334.412207][T11830] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 335.821745][ T28] audit: type=1400 audit(2000000159.318:1191): avc: denied { create } for pid=11834 comm="syz.8.2314" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_generic_socket permissive=1 [ 336.384821][T11833] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 336.393847][T11833] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 336.534237][ T28] audit: type=1400 audit(2000000160.028:1192): avc: denied { create } for pid=11834 comm="syz.8.2314" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_socket permissive=1 [ 336.985254][T11816] bridge0: port 3(hsr0) entered disabled state [ 336.991583][T11816] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.998756][T11816] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.158440][ T28] audit: type=1400 audit(2000000160.658:1193): avc: denied { listen } for pid=11846 comm="syz.5.2315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 337.178626][T11847] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=11847 comm=syz.5.2315 [ 337.192118][T11847] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=11847 comm=syz.5.2315 [ 337.210335][T11847] tmpfs: Bad value for 'mpol' [ 337.223458][T11816] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 337.233143][T11816] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 337.259194][T11816] ip6gre1: left promiscuous mode [ 337.264254][T11816] ip6gre1: left allmulticast mode [ 337.443381][T11816] geneve2: left promiscuous mode [ 337.448505][T11816] geneve2: left allmulticast mode [ 337.474350][T11819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 337.482888][T11819] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 337.499535][T11830] lo speed is unknown, defaulting to 1000 [ 337.505350][T11830] lo speed is unknown, defaulting to 1000 [ 337.511255][T11830] lo speed is unknown, defaulting to 1000 [ 337.518413][T11830] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 337.570703][T11830] lo speed is unknown, defaulting to 1000 [ 337.576932][T11830] lo speed is unknown, defaulting to 1000 [ 337.583137][T11830] lo speed is unknown, defaulting to 1000 [ 337.589168][T11830] lo speed is unknown, defaulting to 1000 [ 337.595267][T11830] lo speed is unknown, defaulting to 1000 [ 337.604313][T11855] loop5: detected capacity change from 0 to 256 [ 337.610863][T11855] vfat: Unknown parameter '0x000000000000000618446744073709551615>OrHx4).c, priority 0 [ 346.548507][T12067] syzkaller0: entered promiscuous mode [ 346.554910][T12067] syzkaller0: entered allmulticast mode [ 346.564488][ T6717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.572647][ T6717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.592337][T12067] tipc: Resetting bearer [ 346.608396][ T6496] vhci_hcd vhci_hcd.8: vhci_device speed not set [ 346.614979][T12067] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.623235][T12067] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.636998][T12065] tipc: Resetting bearer [ 346.647346][T12065] tipc: Disabling bearer [ 346.750511][T12083] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2383'. [ 346.761885][T12081] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2382'. [ 347.013685][T12092] netlink: 'syz.5.2384': attribute type 1 has an invalid length. [ 347.065581][T12092] 8021q: adding VLAN 0 to HW filter on device bond6 [ 347.271927][T12100] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2389'. [ 347.330612][T12100] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2389'. [ 347.361656][T12102] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2390'. [ 347.412924][T12102] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2390'. [ 347.491982][T12116] loop6: detected capacity change from 0 to 512 [ 347.500901][T12116] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 347.516240][T12116] EXT4-fs (loop6): 1 truncate cleaned up [ 347.593062][T12116] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 347.627181][T12123] loop8: detected capacity change from 0 to 512 [ 347.661476][ T28] kauditd_printk_skb: 24 callbacks suppressed [ 347.661492][ T28] audit: type=1400 audit(2000000171.159:1232): avc: denied { append } for pid=12115 comm="syz.6.2395" name="file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 347.737665][T12123] EXT4-fs: journaled quota format not specified [ 347.750784][ T3803] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.605407][T12133] loop6: detected capacity change from 0 to 764 [ 349.627223][T12141] netlink: 80 bytes leftover after parsing attributes in process `syz.5.2404'. [ 350.460847][ T28] audit: type=1400 audit(2000000173.959:1233): avc: denied { create } for pid=12147 comm="syz.6.2407" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 352.224065][T12159] netlink: 'syz.5.2411': attribute type 1 has an invalid length. [ 352.399351][T12159] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 352.802153][T12172] __nla_validate_parse: 2 callbacks suppressed [ 352.802185][T12172] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.2412'. [ 352.891884][T12170] loop6: detected capacity change from 0 to 512 [ 352.898614][T12170] EXT4-fs: Ignoring removed bh option [ 352.904154][T12170] EXT4-fs: Ignoring removed nomblk_io_submit option [ 353.322228][T12178] netlink: 'syz.1.2415': attribute type 28 has an invalid length. [ 353.473413][T12179] netlink: 'syz.1.2415': attribute type 28 has an invalid length. [ 353.495293][T12178] netlink: 'syz.1.2415': attribute type 3 has an invalid length. [ 353.512152][T12179] netlink: 'syz.1.2415': attribute type 3 has an invalid length. [ 353.540600][T12178] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2415'. [ 353.553146][T12184] loop8: detected capacity change from 0 to 1024 [ 353.559995][T12179] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2415'. [ 353.569711][T12184] EXT4-fs: test_dummy_encryption option not supported [ 353.745189][T12170] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 354.736762][T12194] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2420'. [ 355.076788][T12192] loop8: detected capacity change from 0 to 512 [ 355.505148][T12170] EXT4-fs (loop6): 1 truncate cleaned up [ 355.511806][T12170] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 355.530832][T12170] EXT4-fs warning (device loop6): ext4_block_to_path:107: block 1057052516 > max in inode 18 [ 355.824049][T12192] EXT4-fs (loop8): 1 orphan inode deleted [ 355.836563][T12192] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 355.855716][T12192] ext4 filesystem being mounted at /58/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 355.881256][ T6691] Quota error (device loop8): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 355.922438][ T6691] EXT4-fs error (device loop8): ext4_release_dquot:7062: comm kworker/u8:13: Failed to release dquot type 1 [ 356.047155][ T3803] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.067345][T10930] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.104389][T12209] netlink: 100 bytes leftover after parsing attributes in process `syz.6.2423'. [ 356.248519][ T28] audit: type=1400 audit(2000000179.750:1234): avc: denied { lock } for pid=12216 comm="syz.5.2427" path="socket:[31492]" dev="sockfs" ino=31492 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 356.268407][T12218] loop5: detected capacity change from 0 to 512 [ 356.391006][T12221] loop8: detected capacity change from 0 to 4096 [ 356.951658][T12218] ext4: Unknown parameter 'mask' [ 357.078763][T12222] loop5: detected capacity change from 0 to 512 [ 359.875740][T12271] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2446'. [ 360.974336][T12274] loop6: detected capacity change from 0 to 4096 [ 362.529482][T12276] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2447'. [ 364.630763][T12292] IPv6: sit3: Disabled Multicast RS [ 364.637205][T12292] sit3: entered allmulticast mode [ 364.839840][T12304] netlink: 100 bytes leftover after parsing attributes in process `syz.6.2458'. [ 364.928404][T12302] sctp: [Deprecated]: syz.0.2449 (pid 12302) Use of struct sctp_assoc_value in delayed_ack socket option. [ 364.928404][T12302] Use struct sctp_sack_info instead [ 365.471305][T12326] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2463'. [ 365.610630][T12329] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2466'. [ 365.678381][T12336] netlink: 'syz.0.2467': attribute type 28 has an invalid length. [ 365.686311][T12336] netlink: 'syz.0.2467': attribute type 3 has an invalid length. [ 365.694450][T12336] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2467'. [ 365.705307][T12336] tipc: Started in network mode [ 365.710281][T12336] tipc: Node identity ac14140f, cluster identity 4711 [ 365.717681][T12336] tipc: New replicast peer: 255.255.255.255 [ 365.723966][T12336] tipc: Enabled bearer , priority 10 [ 365.752526][T12340] loop8: detected capacity change from 0 to 1024 [ 365.759484][T12340] EXT4-fs: test_dummy_encryption option not supported [ 366.358170][T12348] loop5: detected capacity change from 0 to 4096 [ 366.899975][T12347] loop8: detected capacity change from 0 to 512 [ 367.725546][ T9227] tipc: Node number set to 2886997007 [ 368.798233][T12347] EXT4-fs warning (device loop8): ext4_multi_mount_protect:394: Unable to create kmmpd thread for loop8. [ 368.940031][T12363] loop8: detected capacity change from 0 to 1024 [ 369.120129][ T28] audit: type=1400 audit(2000000192.620:1235): avc: denied { unmount } for pid=10930 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 369.565359][T12375] veth1_to_batadv: entered promiscuous mode [ 369.674678][T12375] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12375 comm=syz.1.2478 [ 369.790230][T12389] loop5: detected capacity change from 0 to 512 [ 369.797097][T12389] EXT4-fs: Ignoring removed oldalloc option [ 369.806647][T12389] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 369.902753][T12389] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #16: comm syz.5.2479: invalid indirect mapped block 83886080 (level 1) [ 369.963071][T12389] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 369.963297][T12389] EXT4-fs (loop5): Remounting filesystem read-only [ 369.978989][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 369.979011][ C0] EXT4-fs (loop5): initial error at time 2000000193: ext4_free_branches:1023: inode 16 [ 369.979061][ C0] EXT4-fs (loop5): last error at time 2000000193: ext4_free_branches:1023: inode 16 [ 370.024628][T12389] EXT4-fs (loop5): 1 orphan inode deleted [ 370.030469][T12389] EXT4-fs (loop5): 1 truncate cleaned up [ 370.039354][T12389] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 370.063834][T12400] loop6: detected capacity change from 0 to 512 [ 370.071973][T12400] EXT4-fs: Ignoring removed oldalloc option [ 370.114573][T12402] dummy0 speed is unknown, defaulting to 1000 [ 370.160623][T12402] lo speed is unknown, defaulting to 1000 [ 370.183123][T12400] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 370.260913][T12389] siw: device registration error -23 [ 370.339883][T12400] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #16: comm syz.6.2483: invalid indirect mapped block 83886080 (level 1) [ 370.363570][T12400] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 370.363745][T12400] EXT4-fs (loop6): Remounting filesystem read-only [ 370.379439][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 370.379469][ C0] EXT4-fs (loop6): initial error at time 2000000193: ext4_free_branches:1023: inode 16 [ 370.379534][ C0] EXT4-fs (loop6): last error at time 2000000193: ext4_free_branches:1023: inode 16 [ 370.453095][T12400] EXT4-fs (loop6): 1 orphan inode deleted [ 370.463172][T12400] EXT4-fs (loop6): 1 truncate cleaned up [ 370.473387][T12400] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 370.627598][T12400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 370.636077][T12400] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 370.740322][ T28] audit: type=1400 audit(2000000194.240:1236): avc: denied { map } for pid=12414 comm="syz.8.2485" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=31989 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 370.784296][ T28] audit: type=1400 audit(2000000194.250:1237): avc: denied { read write } for pid=12414 comm="syz.8.2485" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=31989 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 372.085549][ T3649] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 372.115625][ T3803] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 372.420524][T12433] loop6: detected capacity change from 0 to 512 [ 372.427946][T12433] EXT4-fs: Ignoring removed bh option [ 372.433407][T12433] EXT4-fs: Ignoring removed nomblk_io_submit option [ 372.440724][T12433] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 372.563178][T12433] EXT4-fs (loop6): 1 truncate cleaned up [ 372.569326][T12433] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 372.583182][T12433] EXT4-fs warning (device loop6): ext4_block_to_path:107: block 1057052516 > max in inode 18 [ 373.116447][ T3803] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 373.307748][T12452] bridge0: port 4(ipvlan2) entered blocking state [ 373.332783][T12452] bridge0: port 4(ipvlan2) entered disabled state [ 373.366343][T12452] ipvlan2: entered allmulticast mode [ 373.419447][T12452] bridge0: entered allmulticast mode [ 373.443961][T12452] ipvlan2: left allmulticast mode [ 373.548089][T12452] bridge0: left allmulticast mode [ 374.014658][T12462] siw: device registration error -23 [ 375.568200][T12481] loop6: detected capacity change from 0 to 764 [ 375.653416][T12484] loop5: detected capacity change from 0 to 512 [ 375.660216][T12484] EXT4-fs: Ignoring removed bh option [ 375.666294][T12484] EXT4-fs: Ignoring removed nomblk_io_submit option [ 375.878703][T12484] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 376.976404][T12493] netlink: 48 bytes leftover after parsing attributes in process `syz.8.2510'. [ 377.007548][T12493] netlink: 48 bytes leftover after parsing attributes in process `syz.8.2510'. [ 377.018184][T12484] EXT4-fs (loop5): 1 truncate cleaned up [ 377.024324][T12484] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 377.042005][T12479] EXT4-fs warning (device loop5): ext4_block_to_path:107: block 1057052516 > max in inode 18 [ 377.084834][T12499] loop8: detected capacity change from 0 to 128 [ 377.110785][T12499] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 377.155986][T12499] ext4 filesystem being mounted at /75/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 377.214931][T12499] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 378.239394][T12519] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2518'. [ 378.293559][T12516] siw: device registration error -23 [ 378.310504][ T3649] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.357526][T12522] netlink: 100 bytes leftover after parsing attributes in process `syz.5.2519'. [ 378.934765][T12531] loop5: detected capacity change from 0 to 1024 [ 378.963477][T12531] EXT4-fs: test_dummy_encryption option not supported [ 380.160651][T12537] loop5: detected capacity change from 0 to 512 [ 381.946961][T12543] geneve2: entered promiscuous mode [ 381.952375][T12543] geneve2: entered allmulticast mode [ 381.967007][ T6691] netdevsim netdevsim8 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 382.248224][T12537] EXT4-fs warning (device loop5): ext4_multi_mount_protect:394: Unable to create kmmpd thread for loop5. [ 382.261200][ T6691] netdevsim netdevsim8 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 382.320253][T12553] loop6: detected capacity change from 0 to 512 [ 382.326948][T12553] EXT4-fs: Ignoring removed bh option [ 382.332406][T12553] EXT4-fs: Ignoring removed nomblk_io_submit option [ 382.339554][T12553] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 382.357737][T12553] EXT4-fs (loop6): 1 truncate cleaned up [ 382.363990][T12553] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 382.377047][T12553] EXT4-fs warning (device loop6): ext4_block_to_path:107: block 1057052516 > max in inode 18 [ 382.421364][ T6696] netdevsim netdevsim8 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 382.433055][T12560] loop8: detected capacity change from 0 to 512 [ 382.442812][T12560] EXT4-fs: Ignoring removed oldalloc option [ 382.443294][ T6696] netdevsim netdevsim8 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 382.474527][ T28] audit: type=1400 audit(2000000205.981:1238): avc: denied { ioctl } for pid=12561 comm="syz.5.2534" path="socket:[32254]" dev="sockfs" ino=32254 ioctlcmd=0x8927 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 382.502077][T12560] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 382.545086][T12560] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #16: comm syz.8.2533: invalid indirect mapped block 83886080 (level 1) [ 382.559833][T12560] loop8: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 382.559962][T12560] EXT4-fs (loop8): Remounting filesystem read-only [ 382.569219][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 382.569240][ C1] EXT4-fs (loop8): initial error at time 2000000206: ext4_free_branches:1023: inode 16 [ 382.569291][ C1] EXT4-fs (loop8): last error at time 2000000206: ext4_free_branches:1023: inode 16 [ 382.617299][T12560] EXT4-fs (loop8): 1 orphan inode deleted [ 382.623582][T12560] EXT4-fs (loop8): 1 truncate cleaned up [ 382.630152][T12560] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 382.848879][T12586] netlink: 280 bytes leftover after parsing attributes in process `syz.0.2535'. [ 382.955071][T12587] loop5: detected capacity change from 0 to 1024 [ 382.991699][T12560] siw: device registration error -23 [ 383.009684][ T3803] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 383.052506][T12587] EXT4-fs: test_dummy_encryption option not supported [ 383.112069][ T3000] ================================================================== [ 383.120189][ T3000] BUG: KCSAN: data-race in block_uevent / inc_diskseq [ 383.126998][ T3000] [ 383.129344][ T3000] write to 0xffff888101dcfa18 of 8 bytes by task 3803 on cpu 0: [ 383.137004][ T3000] inc_diskseq+0x2d/0x40 [ 383.141306][ T3000] disk_force_media_change+0x9e/0xe0 [ 383.146623][ T3000] lo_release+0x2eb/0x420 [ 383.150998][ T3000] bdev_release+0x373/0x3d0 [ 383.155522][ T3000] blkdev_release+0x15/0x20 [ 383.160039][ T3000] __fput+0x29b/0x650 [ 383.164034][ T3000] fput_close_sync+0xad/0x190 [ 383.168727][ T3000] __x64_sys_close+0x55/0xf0 [ 383.173339][ T3000] x64_sys_call+0x275d/0x3020 [ 383.178030][ T3000] do_syscall_64+0x12c/0x370 [ 383.182649][ T3000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.188546][ T3000] [ 383.190873][ T3000] read to 0xffff888101dcfa18 of 8 bytes by task 3000 on cpu 1: [ 383.198447][ T3000] block_uevent+0x31/0x50 [ 383.202788][ T3000] dev_uevent+0x375/0x400 [ 383.207134][ T3000] uevent_show+0x11a/0x200 [ 383.211569][ T3000] dev_attr_show+0x3f/0xa0 [ 383.216000][ T3000] sysfs_kf_seq_show+0x1a3/0x280 [ 383.220960][ T3000] kernfs_seq_show+0x82/0xa0 [ 383.225558][ T3000] seq_read_iter+0x31e/0x940 [ 383.230163][ T3000] kernfs_fop_read_iter+0xc1/0x330 [ 383.235285][ T3000] vfs_read+0x6c0/0x7f0 [ 383.239442][ T3000] ksys_read+0xdc/0x1a0 [ 383.243598][ T3000] __x64_sys_read+0x40/0x50 [ 383.248108][ T3000] x64_sys_call+0x2886/0x3020 [ 383.252813][ T3000] do_syscall_64+0x12c/0x370 [ 383.257414][ T3000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.263338][ T3000] [ 383.265665][ T3000] value changed: 0x00000000000001fd -> 0x0000000000000201 [ 383.272781][ T3000] [ 383.275106][ T3000] Reported by Kernel Concurrency Sanitizer on: [ 383.281283][ T3000] CPU: 1 UID: 0 PID: 3000 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(full) [ 383.291706][ T3000] Tainted: [W]=WARN [ 383.295508][ T3000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 383.305571][ T3000] ================================================================== [ 383.315350][T12560] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 383.323854][T12560] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 383.454654][T12590] dummy0 speed is unknown, defaulting to 1000 [ 383.461674][T12590] lo speed is unknown, defaulting to 1000 [ 383.659859][T12594] loop5: detected capacity change from 0 to 512 [ 383.728370][T12594] EXT4-fs (loop5): 1 orphan inode deleted [ 383.749339][T12594] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 383.773320][T12594] ext4 filesystem being mounted at /484/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 383.921428][ T28] audit: type=1400 audit(2000000207.321:1239): avc: denied { lock } for pid=12584 comm="syz.5.2540" path="/484/file1/cpuset.effective_cpus" dev="loop5" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 384.254395][T10930] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.977283][ T3649] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.