last executing test programs: 2.777319612s ago: executing program 3 (id=581): prctl$PR_SET_MM_AUXV(0x39, 0xc, 0x0, 0x0) unshare(0x2000400) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000bd848d2fb1b26d4f3ffb709404000000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200010, &(0x7f0000000100)={[{@nouid32}, {@nolazytime}, {@min_batch_time={'min_batch_time', 0x3d, 0x6}}]}, 0xfe, 0x55d, &(0x7f0000000980)="$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") creat(&(0x7f0000000000)='./bus\x00', 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x84182, 0x0) ftruncate(r1, 0x2007ffb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r1, 0x0) r2 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) r3 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r3, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x7a00, 0x0, 0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fallocate(r4, 0xa, 0x8000000000000000, 0x3ff) r5 = openat$cgroup_int(r4, &(0x7f0000000040)='cpuset.mems\x00', 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x100002, 0x0) sendfile(r6, r5, 0x0, 0x400000006) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) socket$inet6(0xa, 0x200000000003, 0x87) syz_emit_ethernet(0xa2, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "a0ca04", 0x6c, 0x2b, 0x0, @private2, @local, {[@hopopts={0x87}], {0x0, 0x300, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "82f63de64f6ce2ee11028289aefdb3449391a823213e6336516748a7949bb108", "402fa80400ffff8a1880000000000008", {"9ddeb8f71aa23d391b8fa99e9816af2d", "040876a663a86d97f46b9665cc18492b"}}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="b7000000000000ae"], 0x0}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) 2.627564684s ago: executing program 3 (id=586): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r1, &(0x7f00000013c0)=[{&(0x7f0000000080)='4', 0xffffff88}], 0x1, 0x0) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x9, 0x8, 0x40, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000480), 0x1000, r3}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r3, &(0x7f0000000100), &(0x7f0000000580)=""/4096}, 0x20) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0}, &(0x7f0000000400)=0xc) get_robust_list(r5, &(0x7f0000000540)=&(0x7f0000000500)={&(0x7f0000000440), 0x0, &(0x7f00000004c0)={&(0x7f0000000480)}}, &(0x7f0000001580)=0x18) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000002480)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r9 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000980)={'wg2\x00', 0x0}) sendto$packet(r8, &(0x7f0000000180)="0b031407e0ff640f0200475400f6a13bb1000e00080008004803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r10}, 0x14) sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="540100001000130700000000000000007f00000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8800000000000000000000000000010000000032000000ff02000000000000000000000000000100000000000700000100000000000000000000000000000000000000005c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000002000000000000000000001a48000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0004000700000000000000fe8000000000000000000000000000aa"], 0x154}}, 0x0) 2.598102067s ago: executing program 1 (id=587): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0xffffffffffffff96, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$rxrpc(0x21, 0x2, 0xa) r5 = dup(r4) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) rt_sigqueueinfo(r6, 0x2, &(0x7f00000001c0)={0x82, 0xff, 0xffffff09}) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000380)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, r2}}, 0x30) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4001, &(0x7f0000000000)=0x1, 0x7, 0x0) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000080)=0x5, 0x8, 0x0) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffc000/0x1000)=nil) mbind(&(0x7f0000ff9000/0x7000)=nil, 0x7000, 0x0, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast1}, {0x2, 0x0, 0x4, @loopback}, r2}}, 0x48) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4003, &(0x7f00000003c0), 0x2, 0x4e6, &(0x7f0000000840)="$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") syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f00000008c0)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@abort}, {@noload}, {@noload}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000780)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)='%ps \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x12, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000ab630000000000000200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b703000014000000b7030000000000008500000083000000bf090000000000005509010000000000183b000005000000000000000000000020eaf20000000000bf91000000000000b7020000010000008500000085000000b7000000000000009500"/120], &(0x7f0000000040)='GPL\x00', 0x9, 0x55, &(0x7f0000000300)=""/85, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x4, 0x3}, 0x8, 0x10, &(0x7f00000003c0)={0x4, 0x8, 0x6, 0x7ff}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000800)=[0x1, r7, r8], 0x0, 0x10, 0x7}, 0x90) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001080)={r3, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001180)={0x6, 0x1d, &(0x7f0000001240)=ANY=[@ANYBLOB="180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000aa080000850000000600000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000b7080000000000007b8af8ff00000000b7080000a90d00007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a5000000851000000100000018290000", @ANYRES32, @ANYBLOB="4f44e27b000000002482f551c4f8ccb39864cbf3647f06bd3da2760d64973c8a82f4f95bcc41cc337efd66f71311149d64254ab25de6a86af843370a8b7cb16c78e65d0abf013f11957117c7e51e6b6c1177a90f3dd734241e7325a341d6dc3f64642c337701a741caacdbe5122bf0931659253b95d266ab9a9802df69d2faa4b9690cbe17c75eca647a7f8c6fc9c6e381668e55ec5619b7ab9c7ee5585a76f7fa1da94dbe01bf89"], &(0x7f0000000e40)='GPL\x00', 0xe, 0x0, 0x0, 0x40f00, 0x11, '\x00', 0x0, 0x25, r3, 0x8, &(0x7f0000000e80)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000ec0)={0x4, 0x2, 0x840000, 0x6}, 0x10, 0x0, 0x0, 0x7, &(0x7f00000010c0)=[r5, r3, r9, r5], &(0x7f0000001100)=[{0x4, 0x2, 0xb, 0x2}, {0x1, 0x3, 0x6, 0xa}, {0x5, 0x1, 0x6}, {0x4, 0x4, 0xb, 0x8}, {0x0, 0x2, 0x8, 0x4}, {0x0, 0x4, 0x6, 0x2}, {0x5, 0x1, 0xc, 0x4}], 0x10, 0x7fffffff}, 0x90) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a421, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000780)={{0x2, 0x0, @loopback}, {0x20000010304, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}}, 0xde, {0x2, 0x0, @multicast1=0xe000cc02}, 'pimreg0\x00'}) r10 = socket$netlink(0x10, 0x3, 0x0) writev(r10, &(0x7f0000000000)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff06006000010000005600000025000000190004000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 2.366947756s ago: executing program 3 (id=592): syz_mount_image$ext4(&(0x7f0000000880)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000600)={[{@errors_remount}, {@init_itable_val={'init_itable', 0x3d, 0x3}}, {@usrquota}]}, 0xe1, 0x54a, &(0x7f0000000a80)="$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") r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x3, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000081006800000000009500000000000000"], &(0x7f0000000140)='syzkaller\x00'}, 0x90) unshare(0x50051000) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000340)='./bus\x00', 0x0, 0x1000, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000006, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) socket$unix(0x1, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000180), 0x4) openat$cgroup_ro(r1, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYRES16=r2, @ANYRESOCT=r0], 0x8c}}, 0x20000000) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xf, &(0x7f0000000640)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70700001400332722d25320507f000085de000088000000bf090000000000003509010000000000950000000000000000000000000056070000000000008500000000000000e15d89cb5ef31551b5e204e650b700000000e39c90d11148e48461267e4e9318ee5174c66cc90a5abaa53c174794a7a5afe6a90ad81900200cabb0b871d26769f1597003f27fc5d1c1056299cdcf5e8387fdde33db13403f206b317f8471007339099ca936c4d799849b55f4"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) munlock(&(0x7f00005fb000/0x3000)=nil, 0x3000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x9, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400000, 0x0, 0x0, 0x4000) r5 = creat(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000c00000095"], &(0x7f0000000240)='GPL\x00'}, 0x90) syz_mount_image$vfat(&(0x7f00000003c0), &(0x7f0000000040)='./bus\x00', 0xa0ed5e, &(0x7f0000003cc0)=ANY=[@ANYBLOB="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", @ANYRES16=r5, @ANYRES64=r5, @ANYBLOB="6b8542da47109266a2ae2b128ef2c5a59a58be603ca23d102ffc8717ee3bad909d8f876d5559c622e5d8fe4052f5155d3b33501796f516544eee244fadfef7eddc3d28597bf1ce76b4468f598a1260ee1a80a1f7125552386b6e4d2541fee2c0ca58c451d4d296d97bac482dc24a1bfd43198f90a4c0e6d9c66c10ca35479a17fec3d637b0ca1d3a64e413f4098343ac046e2bd4910daeef27f11368e494ba31979f91baaa4b19ad41bb34156a576f9cc14a3ee8984bf66f56bb67c3179cb70685cddce546cb3dd34b61217bdf8e3ea8f7be1a546ce530d30f878015b6c1b0b06bf084f126c23e0c3d7292d60ddd4351bcb50104df557d52ee0230b89f4b3d7b68a656c3787ed4ad70a4c9ecf0f540df09c334839a7b58a02d8d7e2b4443c5516bd6f25ec16bc5f34e3b12427076590b997f16a6796ecf84786a3247d06626820063a5fa5e7862cca40b8c8a28109f77e6f7152fa47c53cd529fa99d66326cd3f9c6db65693bb97e2e7649a5ab887ff157a815c82ab81dbffb844c177996d3609692ef1f07b01d7f0a683fd38621bd876064875ce46c6afae82ef26d35f029a1d104a044b66c303287bc2d767288c7c38ebb012132d21b198c17d1cc982a0237bda984c0f9810000000852c3af592a0e54ee1dc2ff8a2d3fc5a0ee4bb02493ad12e6cfa9104dff106c31e43cb04bda40bc72761cce971c12bfdb9aa9955bfe6722f97a97dbcd46767f58d66d72a6d5e2e4f26c0352ddb717225b029c4c757866a3ba1560f30637d620def509af8905c2a1aa077b1086484571c964031db8cd9ea5634522de35028dedabb4fd630e1f5b2b1afb6165028cf5e1f05fd77395910afc29d15c3f36e2f57c7db237902cd7072cb7271707a74ce97bb68e38e059191c81df156a21f0da0297fac49f0d8ff40f93e6aa85141e046b6d2eb8ecd17d0f9ac488bd034db3e21f4177877c7f96df442273fcb39909a59ca0d5e16e755449921b530cd5f4c8ac96c6d5449417b42745514c392980e05e740209d3880a4a7129d22b26cd8c1cc49124d995f8cff3d1971b3eba61b7bf3c27027f9ac9d06b7d71e04e2d2068e7445dcef3f1050004f7bfb261e213e2d13d9d31e71ced0a2aac5bafc0d8b2ce90b0027844d7e12a8a1e6f24bd0f814623d9465ea1f3accb5f3a70b3259c2d3e4f9285b8049f72e0610a8954a76825775b88f18f1e635448a089880182dd73e039affc99aadc4fcdb3759bcd31ad6cd798d60f83fba8f67a567d42de1f16e883cd9a9a248df9feae3a64b29c98858fd8f175536dc94295063411f47339e109fe77eaa877fab9e0fd71f4f691d9b86180a18135beea15eeafec69d80bfed965ee5388d412ea7a8cf7f545a03a311b378d1187a71b13ecbe2aea15bdd8406c41d99d6068dd42dd59a9c8d1d18d59880b39f716adbf1647cae8f895a39cbc8271cee7f2c4e32ff60c52982e0c2ce16f5ff28301d0759fc08a2f023cb5683621db98916736a684aacc473438014acc83d73cfbcf76a367908706bd383156f4671fce4633457843dda4f7a5a0f6e329426ac45a61526152ad35cddec82d83cf3e43f3bed20849658cd6fa1e826e7a6e8530509750d2589b4629c545191855e392a0720e6ef7ed7905587f7f181eede59a266fcb120c64899116b77bd80a15e2bb63c5db7f63fe21c7a5a326903d066e9b460b8a6dcb99d7d22c768e7bf11f6335f8976397fdb37021a51a87f4968f3215e10c3b3c038ba0225ae51011c77f509c3d2868141fa1dfb2fa4e1ffaa9a382c5815fde09cd97952fafd6b962965a4b5dd5be1c1658244792c660c83db816986f1b7b73849299c59d6c609b2a4a5f39b664289e1ac7a6ba33d73e56478d02a260a2bcf7056a40790cb516b85e0b2d709910f3018df450385f5f7bd755536f11561fdf0b6e36c5120dad0f75168045104aaa5208b830465257ae3ac59e7a8e65e22115305b03ef65539600a779322e522153c0019ac916307c71b4e4b53ed66464d9c34b55cd98e126d0b7b9f0cb448913d8750151cb1103fb7177c1052db17d0733bf4dcc0e82627610462dae91bfece17b7fba87067676269fe0eb2a4922cccf0d906e721af85c669cfb98c9d3b5a51b99aea7d66191849fd0944ac2ad5f05df742f9ebb81e9e475b92e60136de2858bc4f84a8781c751762c20cbaff47012acde774051d4433935420000a049b6f0fe5e6f0348967c13519461a63c647b7a714375b04635db93785ec2541320cd6ee43a401c5fe3ac1ed2b67de78aeb64b57bd3070aae4d0a97034858117bf210f1832407d1cf5165bb1e5f463e814362b46f3d2e53d92ed007dc87b0767a07b1b0417bb27d6701889a319acb39a9c3ffb2295d4f90783e31a7b7832fec150c333e84331ff791ce1176851e7558b0d4f586f4d733d754b31ebf39c85040ee88fcefc1fbf1915615740e38702ec99b2900451c3213d08de0a2bd9fece5f9047f2cb46c411cff666094fdb4e61c14b7b7b850cc8a64c1b43aea229b564c6d54d8901b69a550ae01baa2b08919e0be9d21db7dcb974e66152058997decba9cbccf57a60a44410e3e054465df50c9a860307bccd10b99ab07d3379f6d37a5736ebcb517b799ac89cfe8158d8dc77dbdfdb7a393ef44184aeaf779dbcda96fe07ee437c28b3aef1d62d3959d5e631196c9928b800dff988b63681602287ffb7189e07d181997dc481b80e804df1bddf8037caa1153fd72b7e7a87b954f47532944d73399c21d5fdd84c8779107325a8440841e895d633e8d2d56e01e2494938cd9f5e43f3146e0ec079a06756d738eeebb7deedf10d62c4d95467bc8a43918a8fcca7c2199dc34ad9aa4101f2e54d19b38dbe4918d308d72cdfe41bace6c9f0cdffb41cc29418cb68cc53ee6931218519a0556974e28f31cbd831c18c1d0468e505c0ebdf94a51d66d8c977f395ed8e5e6de9b27b39bb3b4293761ab01dae8937b16d6976580b2700d9857d77002816721cdc1958ce638670ab9cc8a47bb27912ae03c2f58e88ea0cbb248ef07ee751fd4eef7e3a0037a41f2a50dcadf112eb2df7f8289de7c03e021e07b6897892537d6045bee5c8e48227df6136162a16ff118d1eb8e4c931ad29b93c64d4bcd2fdd15a98daf6cc9270d2b8e5f7ada5f43d6775076a2ad64350ddf9312ff7e6ad314d03baa547c5f9aba1ad7a1e3fc1de908f66c2e2f5bc254934f1de0ac636f72c16cfb7ca67fe86daceccb4bc7a25d40e6a86c1969c4ad281e40de74c7d843c450e0d58235a45d18e069aa8477aee45307da97f518923fba493232925589f099e2b850a22af00c1bdeb60f49376c1f57dc6413930868d09a1914bd3515911dee9f4a3467a221ca4166aaf7baf22dbc70d640b1e92a3adc953922ad6a56a42779c5b2065e07c6a74ea4c1244cc6dcc28b31ee2c940228e211b847360aec1ba8ba8ee35b4b549478280ab35980e9a03cfd93f48b1c12880818170a9284a028e05f6ca8bc65dad264de04c9156f93f7bbadaec24c6c19e95ce78ae1c02bbddeebf60d6802d083a146ef9975f6953b7e7adb5cf54d54c3ec58a7b63b02db81feda15ed85a07e812dcd7a3b3bcab230f4b699b7999f943fc3dec6f174635c52fafde2806bc6f577cc023b557521fd985c6bd09d46c514b47b85491f7b7020f2ea3dd20e85c87706eebf8d4f8fadfa368ea19895ad34723b0724b9b582c72f788b3dbb90b749a42139f643671756770381312ace9b8b0090e3ae80ce2ce8dd4e05460d0adb964937532df952bd3fc62b26ebb6c922c0c45752177dbb3058a38524b4a771108a53489ddb963af0a8e20cc7033b35a5b9f2b1d447e835a20b30f0eb21a41e61b520a8f9c07022d0d71dcc5b5071894de5ebbdc26005a9b7120476826cdb829cb9300d1c649ed930ee8b0acf0c9dd58cea8caf00a4261179f05f2dc4a4b2b161503bb052347b25ad4e643e226ecb2ebf702fca15489f16cf0118fefd2494ae60264f0109ebebf280d3de37b23ed359d0e268a3db01101be888217b032f80a0d8f1199113164064f71d531d0fd445c97ab3f8d2c94352dc6d6f5a5da6016305912adaf12474d0a681ce8fd2d6cb2463fcd1b269ce611483468c1d504745820ba31ec0a4eefc8eea79b15f8c32584de8a2d1aedc770d762b844f944f1cc0cd6e1ac4ebb5636ef634ca7a900fa57c900c84a392bc1838f4abf725bd732ab5a385690c5c147b16ad932c5dfe5eac5bf7e4cf4adf5a858ef992d03b2ec1f4d5152490abedb1641004c6cd03d9e0380d9ec9ae31bc58ef2d1de5103adba6b3899b8030d83f202828aeda6af9daff69c138a63d7d63c3b96a4c86b832ee8c1f81db74ea244b022ff34d692b3e9510baabd257facd3f395df075cdb2ac91bc22a84b3c5ca16509e9cb9b85127ec39ff5df8c75ed2cb406eabbcc7b66d39e52f825c1cb69f93426a0447e8ea720a04e143fb9fca525699ecfea664509dd763db58f2189cfb84c8f29f2487f6c09b78aa5432579bc17e3c8d1b8d23c2a371c0a5a99a34ac90566d2b01ad79d9b045c05d87f8623f1b5557ba38cfff2d91d2379fbfaf21c4d600d485529c5ccb25ca00c016f283ea554843f106a9d40c2fce4d97b0aab03a4ba66d37b188232877ee1b7d2966654adaa9e37e5540240c9e2cb351f7189fd95e07eae530179593485680d8df247a3aaeebe403a23891367115d51e59beac5210ee0995b5d255c832a8d1c5dd6fe4add900b2859d5e20d63349c047b30b4177c952d6f102bda5b9efccaa5bc3db660c9c07ed827e85166ae10dd147671ac8744a790edc629dd073a65e17ac9cb11c1c0c354803b99c34a6e3f5a4d90bf1e9d73a9ee1a23f4267289bbdce618e814d4c8a3121d72929624817c25a012c6be28a93cb8bcb9eb4ae6526a9b1328aeb7b31e0fcee186a9eca1e0ede1c97532dd2c2555bae6a57e7d2367aac3a4488bccc8e771c30a190792932dc7e0e6991fc06f842760285dd10f8b3c51e65d8adb97de5cf2a209a52af4f93ffea9660666e583157a19b8fcd00a65aec01696afaf812e7a25ec0352e6bd929229305f324b6671584d73284c9637042a15a48aafe4f9962119f2afe43bb8abeb7dbd5e588b98f31ff3b59cd44787471e68fa6a085511ed251a5fdca0cd84c989bbe2dae097e469e96441afb06609798e5dea480e507115497c4ece6b29ec977286eb99acb85831439c383fa5879bf23dbba9868c25cfd9484600e9e7622d8463fe888f92aaa4377d13df6fbed79c80ef1c01371fd566b40736b2a5e86e0c35a21fe502e6c600afd9e0da38dabbcf8de55f7c88e91681f16cde515f0c0e1c4d0dcdefcd8269159c813401edfd6287fe9de5518529be997c8668f031e0300d39c2585b41f72e2560e3c3c553237dc890fd9c0482e58d8ad7386af5bc45fbc3e383d2391290a2cbce8e876e422d17b370ee323532cf5b8a0bc5dc8c8492e9d6f9010eef20945be79d5188ec6ec8666e4029cd358ff4bfe0459dbe2a9af1d6875029ea9d19dc9153a6cea3c9b3de1a26b84ff1c96fcd273b8e58a8a47bd23a7a718aebaed0e3f81692232a16a92c908670c100a34970ab0235c14fc492158795fe27dac025b7403d4c6f76b61114c1bdcc812da444cd490a6ef7fbeb06570f3d4a90cd3178a9cb5dab5c982379cec6762b9a839aaecdf888c1732d6016d19e053dcc40ad0c4708b3f59b5af874533380a608eab308b5973ddd3f9351737f9386087bc285634ce8e742b93f24aa1c2b1760a35e6c83f0afe14470b2a44bfc1094729a879a0ae5b6e978564e7b030584c3d332aaa01d01bfe9875ba571a7b890dcd0c86fe5e7c734b0a75b6c4844e09aebe69b83c87e36c1263fcca9c959c9b3b9b08387aa7f02ef7c4ee809afa9a23ef3c941fb2a7ca9df8d79febe1c3722c71d965e8475944f0b12bc009e08c0a1206f1f3c65c4f5861d795bd13ca174c8183d41c9641b0662b54f48b7844995a82ad9e6686911c71a5b6c8c4e8785898adcdd8bde6ab18ca99937890a375cf7b8386f41c38a", @ANYRES8=r5], 0x1, 0x121d, &(0x7f0000001000)="$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") r6 = open(&(0x7f00000005c0)='./bus\x00', 0x145842, 0x0) pwritev2(r6, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x100000}], 0x2, 0x0, 0x0, 0xb) 2.307985291s ago: executing program 1 (id=593): inotify_init1(0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'veth0_to_bond\x00', &(0x7f0000000140)=@ethtool_per_queue_op={0x1b, 0x0, [0x0, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0xb0e1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1]}}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$MPTCP_PM_CMD_SET_FLAGS(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) socket$nl_route(0x10, 0x3, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x40, &(0x7f00000004c0)=0x9, 0x4) r3 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) mmap(&(0x7f00009ff000/0x600000)=nil, 0x600000, 0x0, 0x13, r3, 0x0) sendto$inet6(r3, 0x0, 0x0, 0xfffffeffffff7fbf, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$binfmt_script(r3, &(0x7f0000001280), 0x9) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000f5d000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000000)=0x40) socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) io_uring_setup(0x30d3, &(0x7f0000000000)) r4 = syz_io_uring_setup(0x94c, &(0x7f0000000240)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)) write$UHID_CREATE2(r7, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r7, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r4, 0x2d3e, 0x0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, 0x0, 0x0) 1.909397613s ago: executing program 0 (id=600): socketpair$unix(0x1, 0x1, 0x0, 0x0) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f00000000c0), 0x0) setsockopt(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$HIDIOCSUSAGES(0xffffffffffffffff, 0x501c4814, &(0x7f00000009c0)={{0x2, 0x2, 0xf785, 0x6, 0xff, 0x8}, 0x308, [0x9, 0xb27e, 0x3, 0xe, 0x20000, 0x4, 0xfff, 0x1, 0x7fffffff, 0xf, 0x6, 0xe, 0x10, 0xcc, 0x5b78, 0x8, 0x66a, 0x1, 0xe, 0x4, 0x3, 0xdb, 0x7, 0x9, 0x6, 0xff, 0x9, 0x0, 0x1c9, 0x7, 0x9, 0xc, 0x34, 0x9, 0x8, 0xffffffff, 0x0, 0x1c0000, 0x0, 0x5, 0x1956, 0x4, 0x7fff, 0x9, 0x7d, 0x3, 0x0, 0x73f, 0x2575, 0x5, 0x9, 0xe59, 0xa, 0x6, 0x0, 0x7fff, 0x4, 0x2d, 0x4, 0x4, 0x8, 0x6, 0x6, 0x4, 0x5, 0x74000, 0xfffffffa, 0xc, 0x2, 0xfffffffe, 0x1, 0x2, 0x2, 0x33, 0x1ff, 0xd, 0xfffffffe, 0x10001, 0x26, 0xd6, 0x8, 0x2ef, 0x400, 0x2, 0x6, 0x0, 0xf93f, 0x6, 0x10, 0xffffffff, 0x8000, 0x1, 0x45, 0x600000, 0x6, 0x0, 0x1, 0x8, 0x6, 0x1, 0x92ab, 0x7, 0xf, 0xff1, 0x1, 0xf0, 0x6, 0x4b, 0x652, 0x5f924ee, 0x81, 0x5, 0x400, 0x0, 0x1000, 0x1, 0x7, 0x7fff, 0x2, 0xfc00, 0x7, 0x81, 0x0, 0x8, 0x5, 0x259, 0x8, 0x5, 0x6, 0x7f, 0xda, 0xfffffffb, 0x9, 0x0, 0x0, 0x4, 0x4, 0x7, 0x5, 0x3, 0x7ff, 0x80, 0x1, 0xea76, 0x4, 0x4, 0x4, 0x8, 0xe8a, 0x4, 0x8, 0x8000, 0x6, 0x6, 0x5, 0xfffffff9, 0x7, 0x8001, 0x7f, 0x3, 0x83, 0x3ff, 0xcc000, 0x3, 0x9, 0x4, 0x6, 0x200, 0x5, 0x3e0, 0x9, 0x4, 0x6, 0x5, 0xc, 0x5, 0x8, 0x1, 0x0, 0x416, 0x7, 0x5, 0x9, 0xf79, 0x0, 0x5, 0x7fff, 0x10000, 0xfffffffa, 0x4, 0x2, 0x9c9, 0x3, 0x4, 0x6, 0x3, 0x4, 0x0, 0x3, 0x2, 0x7f, 0x4, 0xa, 0x3, 0x4, 0x10001, 0x9, 0x5, 0x8000, 0x1, 0x2, 0xa3, 0x8, 0x1, 0x25, 0x2, 0x5, 0x10, 0xffffffff, 0x72cd, 0x80, 0x80, 0x2, 0x0, 0x101, 0x7b4, 0x320673a2, 0x1, 0xcf, 0xe, 0x2, 0x3, 0x7f, 0x29e, 0x7, 0x9, 0x1, 0x1cadef15, 0x6, 0x5fa4, 0x17, 0xfffffffd, 0xc, 0xd, 0x6, 0x9, 0x200, 0x6, 0xfffffffc, 0x3, 0x8, 0x2, 0x10000, 0xc25, 0x2, 0xa25b, 0xfe2, 0x2, 0x6000000, 0x482e, 0x80000001, 0x7, 0x3ff, 0x2, 0x0, 0x1ff, 0xf, 0x7, 0x6, 0x3ff, 0x0, 0x911, 0x2, 0x4c0c0f9b, 0x8, 0x7f, 0xdd, 0x1000, 0x80, 0x1ff, 0x354, 0x74f, 0x7, 0x1f95, 0xa, 0x4, 0x3, 0x3ff, 0x32, 0xb, 0x4, 0xfffffffc, 0xe, 0xdc, 0xa, 0x7, 0x6, 0x1ff, 0x2, 0x0, 0x5, 0x583, 0x4, 0x1, 0x8c, 0xc24, 0x4, 0xfffffff5, 0x4, 0x81, 0x9, 0xc, 0xb, 0x8, 0x7, 0x7, 0x1, 0xffffffc0, 0x3, 0x80000000, 0x2, 0x9, 0x3, 0x401, 0xffffffff, 0x3ff, 0x8, 0x9, 0xba6, 0x9, 0x5, 0x95, 0x4, 0x6, 0xfffffffc, 0xfff, 0x1b, 0x423a, 0x8, 0x1, 0x9, 0xfffffff8, 0x7, 0x2b6, 0x6, 0x3, 0x200, 0x2, 0x2, 0x9, 0xfce, 0xffffff80, 0xfffffff9, 0x5d, 0x0, 0x0, 0x9, 0x9a14, 0x0, 0x95e, 0x7, 0x2, 0xb06f, 0x4, 0x2, 0x10000, 0xabcb, 0x3, 0x5, 0x5, 0x5, 0x7, 0x4, 0x0, 0x8, 0x10000, 0xfffffffc, 0x8, 0xfffffff9, 0x7, 0xf22b, 0x2, 0x9de4a34, 0x9, 0xa8c0, 0x9, 0x9, 0x80, 0x8, 0x8, 0x7, 0x800, 0x7ffffffd, 0x100, 0x4, 0x3, 0x42af, 0x26b, 0x1, 0xfffffffd, 0x6, 0x0, 0x7, 0x24, 0x28f, 0x1ff, 0x6, 0x7, 0x3ff, 0x5b0, 0xe, 0x6, 0x3, 0x3, 0x4, 0x4, 0x6, 0x5, 0x101, 0x0, 0xfffffffb, 0x7fff, 0x100, 0xe, 0x9, 0x0, 0x8, 0x6d00, 0x0, 0xe, 0x17, 0x3ff, 0x2, 0x6a71, 0x3, 0x7, 0x1, 0x4bc, 0x5, 0xffffff45, 0xfb40, 0xb82, 0x2, 0x1, 0x47, 0x9, 0x7, 0x3, 0x6, 0x8, 0x2, 0x9, 0x80000001, 0x2, 0x81, 0x8, 0x9000000, 0xe, 0x6, 0x1, 0xe0, 0x7, 0x4, 0xff, 0x100, 0x6, 0x3, 0x4, 0x7, 0x0, 0x1, 0x7fffffff, 0x81, 0xfffffff9, 0x10, 0xb, 0x6, 0x7, 0x100, 0x8, 0xe, 0x3, 0x6, 0x1, 0x9, 0x44, 0x5, 0x3ff, 0xc30, 0x8000, 0x66, 0x8, 0x3, 0x1, 0x0, 0x37, 0x8, 0x1, 0x2, 0x1, 0x1, 0x3, 0x0, 0x1, 0x3, 0x7, 0x2, 0x7, 0x4a4f52ae, 0x8, 0x9, 0xfffffffb, 0x5, 0x4, 0x3, 0x1edc, 0xc7d0, 0xd0, 0x7, 0x9, 0x800, 0x8, 0x5, 0x3ff, 0x0, 0x3, 0x0, 0x8000, 0x2, 0x597, 0x0, 0x40, 0x4, 0xf7, 0x190, 0x3, 0x8, 0x0, 0x8001, 0x60000000, 0x4, 0xffffff95, 0x2, 0x13b, 0xff, 0x200, 0x7fff, 0x10, 0xffff3659, 0x1, 0x3, 0xb85b, 0x3, 0x54, 0x6, 0x5, 0x3ff, 0x1, 0x2, 0x2, 0x1, 0x8ab, 0x4, 0x6, 0x4, 0x7fffffff, 0xcc42, 0x0, 0x5, 0x3ff, 0x80000001, 0x3, 0x5ea, 0xffffffff, 0x2, 0x7dd8ec18, 0x0, 0x7, 0xe, 0x0, 0x9, 0x0, 0x9, 0x1, 0x4237, 0x4, 0x8, 0x2, 0xa000000, 0x8, 0x3, 0x4309, 0x101, 0x8, 0x4ae, 0xa3, 0x200, 0x10000, 0x2, 0x8f91, 0x7, 0x2, 0x2, 0x80000001, 0xf32, 0xd, 0x8, 0x1, 0x9, 0x8, 0x2, 0x0, 0xdf, 0x7, 0x7, 0xd50, 0x80000001, 0x4, 0x1, 0x101, 0x3, 0x78, 0x0, 0x5, 0x81, 0x8001, 0x1, 0x9, 0x4, 0x10000, 0x7f, 0x0, 0x4, 0x6, 0x956, 0x9, 0x80, 0x7a35, 0x101, 0x7fff, 0x1, 0x0, 0xffffffff, 0x401, 0x10, 0x4, 0x9, 0xa0, 0x8, 0x1ae, 0x2a07, 0x2, 0x1000, 0x1, 0xffffffff, 0x4, 0x6, 0x6, 0x1, 0x75, 0x9, 0x0, 0x8, 0x7e, 0x0, 0x7, 0x8, 0xffff, 0xfaa, 0x1aa770de, 0x101, 0xf371, 0xfffffff1, 0xd5, 0x3, 0x1, 0xfff, 0x4, 0x4, 0x3, 0x80000001, 0x2b2, 0xfffffffd, 0xce82, 0x0, 0x7, 0x52848000, 0x6f1, 0x1, 0x8001, 0x7, 0x401, 0x2, 0x84, 0x2, 0xff, 0x4, 0x6, 0x4, 0x4, 0x5, 0x1, 0x4, 0x129, 0x1, 0x6, 0x3, 0x3, 0xcc, 0xfffffffc, 0x0, 0x4, 0x1, 0x9, 0x7, 0x9, 0xac, 0x8, 0x742f097f, 0x5, 0x0, 0x7, 0x4, 0x7ff, 0x1000000, 0x6, 0x3, 0x4, 0x7fffffff, 0x9, 0x8, 0x3, 0xd25a, 0x2, 0xa2, 0x5, 0x1, 0x7fff8, 0x5, 0x331, 0x1, 0x2, 0x3, 0x70000, 0x2, 0x2, 0xa, 0x4a, 0x5, 0x4, 0x5, 0x4, 0x81, 0x0, 0x9, 0xffffff15, 0x7, 0x2, 0x8, 0x3, 0x800, 0xf7e, 0x15, 0x0, 0x7, 0x0, 0x1000, 0x0, 0xfff, 0x1, 0xfffffffd, 0x3, 0x0, 0x1e0, 0x2, 0x7, 0x0, 0xb, 0x3421, 0x200000, 0xbd, 0x7fffffff, 0xf, 0x7, 0x10001, 0x100, 0x6, 0x4, 0x7f, 0x5, 0x8, 0x3, 0x1ff, 0x6, 0x0, 0x1, 0x4, 0x4, 0x0, 0x2de4332e, 0x6, 0xccc8, 0x4, 0x6, 0x4, 0x7, 0x4, 0x6, 0x6, 0x4, 0x8b, 0x7, 0x4cc4, 0x213, 0x7, 0x3, 0x0, 0x8, 0x5, 0xb1, 0x7f, 0x2, 0x0, 0xffffffff, 0x81, 0x6, 0x6, 0x8, 0x33f, 0xc, 0x8, 0x3, 0x2, 0x4, 0x2, 0x3, 0x3, 0x2, 0x9, 0x7a, 0x7, 0x7, 0x4, 0x400, 0x80000000, 0x0, 0x80d, 0xffffffd8, 0xd1, 0x2, 0xfffffffe, 0x100, 0xffff9603, 0x80000000, 0x1, 0x5, 0x80000000, 0x5, 0x1, 0x4, 0x4, 0x6, 0x2, 0x8, 0xffff, 0x1, 0x0, 0x707, 0x82c, 0x9, 0x1, 0x3, 0x9, 0x1, 0xd, 0x7, 0x2, 0x4, 0xfffffffa, 0x4, 0x100, 0x1ae0, 0x1, 0x1, 0x7, 0x0, 0x6, 0xae4, 0x9, 0x76e, 0x9, 0x1, 0x1, 0x5, 0xed, 0x3, 0x6, 0x2, 0x307, 0x7fff, 0x8001, 0x9, 0x7, 0x2, 0x0, 0x9, 0x9, 0x8, 0x40, 0x1, 0x8, 0x2, 0x10, 0x5, 0x656, 0x9, 0xffff0000, 0x9, 0x7, 0x400, 0x0, 0x0, 0x7a06, 0x6, 0x8, 0x0, 0x9, 0x7, 0x6b, 0x5, 0x1f3, 0xfffffeff, 0x3, 0xfffffffe, 0x8, 0x6, 0xfffffff9, 0x80000000, 0x7f, 0x80, 0xfff, 0x39f, 0x9, 0x3, 0x9, 0x9, 0x10, 0xfffffffd, 0x5, 0x8, 0x5ced, 0x80000001, 0x40, 0x0, 0x6, 0x1, 0x6, 0xdc, 0x8000, 0x2, 0x8, 0xd980, 0x4b, 0x7, 0x63, 0x400, 0x9, 0x80000001, 0x25, 0x5, 0x4a, 0x800, 0x3, 0x7, 0xe88f, 0x5, 0x3ff, 0xffffff01, 0x7, 0x7f08, 0xe, 0x7, 0x101, 0xfffffff9, 0x1e, 0xd, 0x7ff, 0xeac, 0x6, 0x4, 0x8, 0x3, 0x9, 0x1, 0x80000000, 0x400, 0x0, 0x1, 0x1, 0x6, 0x99a00000, 0x5, 0x5, 0xf, 0x1, 0x9, 0x5, 0x1, 0xafd3, 0x1ff, 0x83, 0xffffffff, 0xe, 0xa800, 0x7fff, 0x4, 0x36, 0x3, 0x811, 0xffff0001, 0x6, 0x6, 0x511, 0xff]}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="0000000000007e1b"], 0x14}}, 0x0) connect$pppl2tp(r0, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) close(0xffffffffffffffff) bind$can_raw(0xffffffffffffffff, &(0x7f0000000300), 0x10) poll(&(0x7f0000000100)=[{}], 0x1, 0x72) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}, 0x0, 0x0, 0xc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1) setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x0, 0x0, @loopback, 0x4f}, {0xa, 0xfffe, 0x0, @mcast2}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}, 0x5c) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, 0x0) r3 = socket$inet_dccp(0x2, 0x6, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000005, 0x13, r4, 0x0) getsockopt$inet_int(r3, 0x10d, 0xb5, 0x0, &(0x7f0000000040)=0xfffffffffffffe5e) bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000001a00)=@mangle={'mangle\x00', 0x1f, 0x6, 0x610, 0x288, 0x380, 0x0, 0x288, 0x0, 0x540, 0x540, 0x540, 0x540, 0x540, 0x6, &(0x7f0000000140), {[{{@ipv6={@empty, @private0, [0xffffffff, 0xff, 0xffffff00, 0xff], [0xff000000, 0xff000000, 0xff000000, 0xff], 'syzkaller1\x00', 'ip6gretap0\x00', {}, {}, 0x89, 0x4, 0x0, 0x62}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@dst={{0x48}, {0x5, 0x2, 0x1, [0xff80, 0x2, 0xe4c, 0x3, 0x3cb0, 0xffff, 0x1, 0x0, 0x200, 0x0, 0xfff, 0x9, 0xa, 0x6, 0x0, 0x101]}}, @inet=@rpfilter={{0x28}, {0x6}}]}, @HL={0x28, 'HL\x00', 0x0, {0x3, 0x2}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @empty, [0xff000000, 0xffffffff, 0xffffffff], [0xffffffff, 0xff, 0xff000000, 0xffffffff], 'caif0\x00', 'vxcan1\x00', {0xff}, {0xff}, 0x1, 0x8, 0x3, 0x22}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@ah={{0x30}, {[0x4d6, 0x4d5], 0xe2a7, 0x2}}, @common=@eui64={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@loopback, @ipv6=@dev={0xfe, 0x80, '\x00', 0x2b}, 0x9, 0x3f, 0xe}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x1, 0x7}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@multicast2, @ipv4=@remote, 0xc, 0x2f, 0xa}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x4, 0x7}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x670) pipe(&(0x7f0000002480)) 1.841295959s ago: executing program 3 (id=601): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x1b) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000003c0)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x22400049, &(0x7f00000002c0)={[{@dioread_nolock}, {@noinit_itable}, {@nomblk_io_submit}, {@noblock_validity}, {@data_err_abort}, {@jqfmt_vfsold}, {@jqfmt_vfsv0}, {@barrier_val={'barrier', 0x3d, 0xd95a}}, {@debug}]}, 0x84, 0x471, &(0x7f0000000bc0)="$eJzs3M9vFFUcAPDvzLZFfpQuiD9AlFUkNqItLagcvGg04WJiogc91lIJsoChNRFCBI3Bo/EvUI8m/gWe9GLUk8ar3o0JMVxED2bN7M7Att3WdrfLgvP5JNN9b3699+bN67yZt7MBlFYt+5NEbIuIXyJirBVdvEKt9XH92sXZv65dnE2i0Xjlj6S53p/XLs4Wq27LP7fm+xxPI9IPk7jcId358xdOzdTrc+fy+OTC6bcn589fePLk6ZkTcyfmzkwfPXrk8NQzT08/tSHlHM3yuue9s3t3H3v9k5dmG/HG919m+a/ky9vL0VLtOc1a1KLRaDTSRXNHmn8P9Lz328toWzgZGmBGWJfs/M+qa7jZ/seiEjcrbyxe/GCgmQP6Krs+7Vg2t3VVTA8kzeXA/5U2DmVVXPGz+99iurU9kMG6+lzrBigr9/V8ai0Ziuy+Pam27tgrfUp/W0S8dvnvT7MpOj6HAADYWF9n/Z8nOvX/0ri3bb3t+dhQNSIORsTOiLg7InZFxD0RzXXvi4j715l+bUl8ef/np81dFWyNsv7fs/nY1uL+341Rm2olj402yz+cvHmyPncoPybjMbwpi0+tksY3L/z88UrLam39v2zK0i/6gnk+fh/atHib4zMLM72Uud3V9yP2DHUqf3JjJCCJiN0RsaeL/WfH7OTjX+zNwtu3Ll/+3+VfxQaMMzU+j3isVf+XY0n5C0krpZXGJyfvivrcocnirFjuhx+vvNweH24L91T+DZDV/5aO539e/qIZFOO18+tP48qvH614T9Pt+T+SvNoMj+Tz3p1ZWDg3FTGSz1g0f/rmtkW8WD8r//j+zu1/Z8Q/n+XbPRAR2Un8YEQ8FBH78rw/HBGPRMT+Vcr/3fOPvrX6ERps/R9frf4jqkn7eH0Xgcqpb79aKf211f+RZmg8n7OW/39rzWAvxw4AAADuFGlzDDpJJ26E03RiovUd/l2xJa2fnV84WIt3zhxvjVVXYzgtnnSNtT0PncqfDRfx6SXxwxGxo/lNo83N+MTs2frooAsPJbd1hfaf+a1fX3oBbh/rGkdL+pcP4NbzviaUl/YP5aX9Q3lp/1Bendr/pYjrA8gKcIu5/kN5af9QXto/lJf2D6W0/JX44udWunnT/2Zg57GeNi9RoNKnPUf7j3b0IRDpwA9d94H0dsjGvjywKSLWutWlvtbp0vMHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgzvdvAAAA//+bHeQQ") r1 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, &(0x7f0000000080)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) shmget$private(0x0, 0x3000, 0x8, &(0x7f00005fa000/0x3000)=nil) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000000)={0x6, &(0x7f0000000080)=[{0x0, 0x7, 0x8, 0x1}, {0x0, 0x4, 0x6, 0x2}, {0x9, 0x4, 0x9, 0xe7}, {0x2002, 0x8, 0x4, 0x4}, {0x1000, 0x3, 0x4, 0x19f}, {0x6, 0x9, 0x7, 0x8}]}) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, 0x0) llistxattr(&(0x7f0000000040)='./file0\x00', 0x0, 0x2) getsockopt$inet6_mptcp_buf(r2, 0x11c, 0x2, 0x0, 0x0) 1.770817425s ago: executing program 0 (id=603): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="fb002dc9"], 0x64}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) r1 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @local}, 0x10, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x3) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071114500090000008510000002000000850000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xfffffffffffffda1, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000ae685c0b163ef93d95c7e307963117b5a705fd4a74bc49e24a9ae8c22842f85899c62ca3a6ff691f1df44c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x90) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES8=r4, @ANYRES8, @ANYRES32=r5, @ANYBLOB="38003300c0000000e7ffffffffff080211000000505050505050"], 0x54}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSF2(r8, 0x402c542d, &(0x7f0000000140)={0x1000200, 0x0, 0x80000000, 0xffff, 0x0, "4ae23ae17df2e98c69ba36c4095c911abad88f"}) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, 0xffffffffffffffff, &(0x7f0000000180)={0x10000001}) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, 0xffffffffffffffff, &(0x7f0000000180)={0xb}) ioctl$TIOCSTI(r8, 0x5412, &(0x7f0000000000)) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x1d, 0x20, 0x0}) ioctl$TIOCSTI(r8, 0x5412, &(0x7f0000002840)) ioctl$TIOCSTI(r8, 0x5412, &(0x7f0000000040)=0x3a) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x560, 0x3f0, 0x0, 0x200, 0x200, 0x0, 0x4c0, 0x4c0, 0x4c0, 0x4c0, 0x4c0, 0x6, 0x0, {[{{@ipv6={@empty, @loopback, [], [], 'gre0\x00', 'bond0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@remote, @ipv4=@private}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@private2}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x118}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@remote, @ipv4=@local}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5c0) read(r2, &(0x7f0000000280)=""/234, 0xea) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f00000003c0)={'bridge0\x00'}) ioctl$sock_SIOCBRDELBR(r6, 0x89a1, &(0x7f0000000080)='bridge0\x00') 1.689095421s ago: executing program 4 (id=604): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x200, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffed4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x90) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b70800000000002c7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r3}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x400000}, 0x10}, 0x90) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(r1, 0x40047451, 0x2000000a) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x3c56, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000080850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'gretap0\x00', &(0x7f0000000100)={'gre0\x00', 0x0, 0x0, 0x7, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}}}) setsockopt$inet_mreqn(r5, 0x0, 0x40, &(0x7f00000000c0)={@multicast1, @multicast2}, 0xc) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000580), 0xffffffff, r4}, 0x38) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x7c003f3182a6fa95}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="fc000000", @ANYRES16=r6, @ANYBLOB="000428bd7000fcdbdf253d0000000e00010002006e657464657673696d3000001c008200736f757263655f6d61635f69735f6d756c746963617374000800010070636900110b0200303030303a30303a31302e30000000001c008200736f757263655f6d61635f69735f6d756c74696361737400080001007063690011000200303030303a30303a31302e30000000001c008200594da3ab54b3465b67e38d94cf239a736f757263655f6d61635f69735f6d756c746963617374000e0001006e657464657673696d0000000f0002006e657464657673698200736f757263655f6d61"], 0xfc}, 0x1, 0x0, 0x0, 0x4014}, 0x4000004) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x7) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xf101}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r8, &(0x7f0000000280)=ANY=[@ANYBLOB="1e0334003c5c980128876360864668f82ffdeefa000000000000ffd2acb165fe580cd568cd1f31b87b548cb74136f366da0abe01880b"], 0x3e) 1.441864672s ago: executing program 0 (id=606): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x21, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r0, 0x0, 0x1, &(0x7f0000000080), 0x1d0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0x8, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000001700)={0x0, 0x7, 0x0, 0x0, 0x9, 0xb1, &(0x7f0000001580)=""/177, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001640)={0x0, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, &(0x7f0000001680)=[0xffffffffffffffff], &(0x7f00000016c0)=[{0x1, 0x4, 0xe, 0xc}], 0x10, 0x800}, 0x90) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) dup3(r3, r2, 0x0) r4 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r4, 0x2def, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000000000061110c0000000000180000000001000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6b00}, 0x80) io_uring_setup(0x30d3, &(0x7f00000000c0)) r7 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r7, &(0x7f0000000080), 0xc) read(r7, &(0x7f0000000180)=""/52, 0xfffffdef) ioctl$sock_qrtr_SIOCGIFADDR(r7, 0x8915, &(0x7f0000000000)={'vlan1\x00'}) add_key(0x0, 0x0, 0x0, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002220702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000002c0)='kfree\x00', r8}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 1.34530133s ago: executing program 1 (id=607): r0 = socket$inet6_udp(0xa, 0x2, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x26}}, 0x0) r4 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r4, 0x0) fallocate(r4, 0x0, 0x0, 0x1000f4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000000)='gretap0\x00', 0x10) r6 = dup(r5) sendto$packet(r6, 0x0, 0x2, 0x0, 0x0, 0x0) r7 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r7, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x1200, 0x0, 0x3) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) splice(r3, 0x0, r2, 0x0, 0x7, 0x0) r8 = fsopen(&(0x7f0000000040)='devpts\x00', 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r9, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r9, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000680)={@remote, @local, @broadcast}, 0xc) sendmmsg$inet(r9, &(0x7f0000005400)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000037c0)='-', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000003d80)=[{&(0x7f0000003ac0)="bb", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000004200)=[{&(0x7f0000003e80)='Z', 0x1}], 0x1}}], 0x3, 0x60cd894) close_range(r8, 0xffffffffffffffff, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x410, 0x0, 0x4c, 0x200, 0x0, 0x0, 0x340, 0x2e8, 0x2e8, 0x340, 0x2e8, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, [], [], 'veth1_to_bond\x00', 'ip6gre0\x00'}, 0x0, 0x228, 0x270, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@policy={{0x158}, {[{@ipv4=@dev, [], @ipv6=@mcast2}, {@ipv4, [], @ipv4=@broadcast}, {@ipv4=@multicast2, [], @ipv4=@multicast2}, {@ipv6=@loopback, [], @ipv6=@private2}], 0x3}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 'ip6gre0\x00'}}}, {{@ipv6={@mcast2, @private1, [], [], 'team_slave_0\x00', 'xfrm0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x470) r10 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000540)={0x6, 0x7ff, 0x8, 0x3, 0x400, 0x80, 0x7, 0x28, 0x0}, &(0x7f0000000580)=0x20) r12 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000006c0), 0x40000, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r12, 0x29, 0x23, &(0x7f0000000700)={{{@in6=@private1, @in6=@loopback}}, {{@in=@broadcast}, 0x0, @in=@dev}}, &(0x7f0000000800)=0xe8) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r10, 0x84, 0x1f, &(0x7f00000005c0)={r11, @in6={{0xa, 0x4e24, 0x200, @private2={0xfc, 0x2, '\x00', 0x1}, 0xffffffff}}, 0x3, 0x20}, 0x90) 1.34461745s ago: executing program 4 (id=608): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x13, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207baaf8ff00000000bda106000000000007010000f8ffffffb702000008000000b703000000000000850000000500000018010000202070250000000000202020db1af8ffa1000000bda100000000000007010000f8ffffffb702000008000000b703000000000000850000000500000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="b9ff03076804268c989e14f088a8", 0x0, 0x200, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) (async) close(r0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x13, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207baaf8ff00000000bda106000000000007010000f8ffffffb702000008000000b703000000000000850000000500000018010000202070250000000000202020db1af8ffa1000000bda100000000000007010000f8ffffffb702000008000000b703000000000000850000000500000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="b9ff03076804268c989e14f088a8", 0x0, 0x200, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) 1.34224516s ago: executing program 4 (id=609): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x1, 0x500, &(0x7f0000000500)="$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") (async) pipe2$9p(0x0, 0x0) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000080), 0xfffffffffffffdbb}, 0x48) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x20, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}]}, 0x20}}, 0x4000000) (async) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000002c0)=r0, 0x4) (async, rerun: 64) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) (rerun: 64) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000e40)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000000000000020000000000000003d3ad8675325581b89a6f4d65723b4d550f743f454e5962ddf74669688a0b97bfb541181235dda5b2735910911a3870a10f6342b835f07eeea97ed84367637571cc370a1381c863ba56a14c8232d4bf11853a3235bd258a67b954e6b85113df481dd9efed331faa0671b7bdd5fb51b27db943350133195256241b6b9cf3440835664bbc1483c0c8b1574608764fcaa069cead67488a8be6151b9f3682a880c069c6c803a6aa17d709eba78fa5c9cf52d7f"], 0x24, 0x0) (async, rerun: 64) mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffd000/0x2000)=nil) (async, rerun: 64) futex_waitv(&(0x7f0000001340)=[{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}], 0x36, 0x0, 0x0, 0x0) (async) chmod(&(0x7f0000000180)='./file0\x00', 0x0) 1.323725671s ago: executing program 4 (id=610): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000000)="d2", 0x1}], 0x1) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0x41d9, 0x4) recvmmsg(r0, &(0x7f0000007540)=[{{&(0x7f0000000380)=@isdn, 0x80, &(0x7f0000000800)=[{&(0x7f0000000400)}, {&(0x7f0000000440)=""/108, 0x6c}, {&(0x7f00000005c0)=""/209, 0xd1}, {&(0x7f00000006c0)=""/93, 0x5d}, {&(0x7f0000000740)=""/156, 0x9c}], 0x5, &(0x7f00000004c0)=""/22, 0x16}, 0x1}, {{&(0x7f0000000880)=@generic, 0x80, &(0x7f0000000e80)=[{&(0x7f0000000900)=""/133, 0x85}, {&(0x7f00000009c0)}, {&(0x7f0000000a00)=""/187, 0xbb}, {&(0x7f0000000ac0)=""/49, 0x31}, {&(0x7f0000000b40)=""/244, 0xf4}, {&(0x7f0000000c40)=""/222, 0xde}, {&(0x7f0000000d40)=""/204, 0xcc}, {&(0x7f0000000e40)=""/13, 0xd}], 0x8}, 0x4}, {{&(0x7f0000000f00)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, 0x80, &(0x7f0000001200)=[{&(0x7f0000000f80)=""/94, 0x5e}, {&(0x7f0000001000)=""/251, 0xfb}, {&(0x7f0000001100)=""/209, 0xd1}], 0x3, &(0x7f0000001240)=""/4096, 0x1000}, 0xb}, {{&(0x7f0000002240)=@nfc, 0x80, &(0x7f0000004780)=[{&(0x7f00000022c0)=""/211, 0xd3}, {&(0x7f00000023c0)}, {&(0x7f0000002400)=""/4096, 0x1000}, {&(0x7f0000003400)=""/4096, 0x1000}, {&(0x7f0000004400)=""/44, 0x2c}, {&(0x7f0000004440)=""/104, 0x68}, {&(0x7f00000044c0)=""/158, 0x9e}, {&(0x7f0000004580)=""/239, 0xef}, {&(0x7f0000004680)=""/250, 0xfa}], 0x9, &(0x7f0000004840)=""/218, 0xda}, 0xc}, {{&(0x7f0000004940)=@can, 0x80, &(0x7f0000004ac0)=[{&(0x7f00000049c0)=""/170, 0xaa}, {&(0x7f0000004a80)=""/45, 0x2d}], 0x2}, 0x6}, {{&(0x7f0000004b00)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, &(0x7f0000006200)=[{&(0x7f0000004b80)=""/137, 0x89}, {&(0x7f0000004c40)=""/59, 0x3b}, {&(0x7f0000004c80)=""/213, 0xd5}, {&(0x7f0000004d80)=""/4096, 0x1000}, {&(0x7f0000005d80)=""/237, 0xed}, {&(0x7f0000005e80)=""/201, 0xc9}, {&(0x7f0000005f80)=""/114, 0x72}, {&(0x7f0000006000)=""/67, 0x43}, {&(0x7f0000006080)=""/254, 0xfe}, {&(0x7f0000006180)=""/76, 0x4c}], 0xa, &(0x7f00000062c0)=""/4096, 0x1000}, 0x7}, {{&(0x7f00000072c0)=@pppol2tpin6, 0x80, &(0x7f0000007440)=[{&(0x7f0000007340)=""/16, 0x10}, {&(0x7f0000007380)=""/17, 0x11}, {&(0x7f00000073c0)=""/126, 0x7e}], 0x3, &(0x7f0000007480)=""/192, 0xc0}, 0x800}], 0x7, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="03630476bd008ce3faaeaeed99180000003e002902000000b8d00faecf7e93db305b89138a4e32940dd78fea58abf30a70597125b7426a334094fa546fda50fc6d68f3247d2ab62d2d36eebee232071273277a186fb92985f3b2046c22a0b279f9bf3e617b7b35a06105d813d09b84472d1d16dc3829b99a54091b8a3dc1a42f02b5e749d8ab404f8f6effdd773f5802927beca4f8292ef2cc00816f66d2eb1f964c0f1a7f5fe757c9"], 0x18}, 0x1, 0x0, 0x0, 0x40040}, 0x84090) syz_emit_ethernet(0x86, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000008100000086dd60dd690b004c2f0000000000000000000000ffffac1e0001ff020000000000000000000000000001242081000000000000000800000000000000000086dd0001080088be00000000100000000100000000000000080022eb000000002000000002000000000000006f7f0703624faaee00000000"], 0x0) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffc000/0x1000)=nil) r2 = memfd_create(&(0x7f0000000040)='\x00', 0x4) fcntl$addseals(r2, 0x409, 0x0) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffd000/0x3000)=nil) brk(0x20ffc000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_BITWISE_DATA={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0x0) prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000ffc000/0x4000)=nil) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = open(&(0x7f0000000180)='./bus\x00', 0x26a27e, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001080010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028008001c001f0000000500010004000000"], 0x44}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0xf865, 0xc0d, 0x80, 0x1, 0xc7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0xb}, 0x48) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x42000000) copy_file_range(r3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/diskstats\x00', 0x0, 0x0) r6 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r6, r5, 0x0, 0x3fffff) 1.319997892s ago: executing program 2 (id=611): syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000440)={0x1d, r2, 0x3}, 0x18) connect$can_j1939(r1, &(0x7f0000000140)={0x1d, r2}, 0x18) sendmsg$can_j1939(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)='dat', 0x3}}, 0x0) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000500), r0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)={0x28, r3, 0x60b, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r5, 0x6, &(0x7f0000002000)) fcntl$lock(r5, 0x26, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x9}) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x0, 0x0, 0xd18f}) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r4) 1.237244628s ago: executing program 1 (id=612): syz_open_procfs(0x0, &(0x7f0000000240)='task\x00') (async) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='task\x00') socket$inet6_sctp(0xa, 0x1, 0x84) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x0, 0x4c0, 0x360, 0xffffffff, 0xffffffff, 0x4c0, 0x4c0, 0x4c0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "0a638a2dbb58606299a32be092e6d84e4ce08a234743a9eb2ca6b9dced6c"}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @dev, [], [], 'ip_vti0\x00', 'macsec0\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) statx(r0, 0x0, 0x1000, 0x0, 0x0) (async) statx(r0, 0x0, 0x1000, 0x0, 0x0) prctl$PR_GET_TSC(0x19, &(0x7f0000000040)) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r2, 0x29, 0xc8, 0x0, 0xc000000) (async) setsockopt$MRT6_DEL_MIF(r2, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}}, 0x5c) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x8, 0x0, @mcast1}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x1]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x68, @remote}, {0xa, 0x0, 0x0, @loopback, 0x9}, 0x1, {[0xfc3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8a1, 0xfffffffe]}}, 0x5c) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r2, 0x29, 0xc8, 0x0, 0xd33e215dd6bdf342) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x8, 0x6, 0x1}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[], 0x44}}, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[], 0x44}}, 0x0) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}}, 0x5c) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, 0x0) setsockopt$MRT6_DEL_MIF(0xffffffffffffffff, 0x29, 0xcb, 0x0, 0x0) setsockopt$MRT6_FLUSH(r3, 0x29, 0xd4, &(0x7f0000000100)=0x2, 0x4) (async) setsockopt$MRT6_FLUSH(r3, 0x29, 0xd4, &(0x7f0000000100)=0x2, 0x4) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x2010400, &(0x7f0000000240)={[{@min_batch_time={'min_batch_time', 0x3d, 0x9}}, {@auto_da_alloc}]}, 0x1, 0x4d4, &(0x7f0000000740)="$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") 1.236637788s ago: executing program 2 (id=613): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000300)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r0}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) r1 = socket$inet(0x2, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0xca5, 0x3, &(0x7f0000000080)=""/163, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, &(0x7f0000000e80)=0x2, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001240)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6}, @TCA_FLOWER_KEY_ENC_IPV4_SRC_MASK={0xfffffffffffffe84}]}}]}, 0x44}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@updsa={0x180, 0x1a, 0x1, 0x0, 0x0, {{@in=@private, @in6=@mcast2}, {@in=@broadcast, 0x0, 0x6c}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'sha3-512-generic\x00'}}}, @algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x180}}, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000900], 0x2, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0000000000003c173158c4d96e4a58ad5d4bac1c4200000000000000000000000000004800"/150]}, 0x10e) socket$pppl2tp(0x18, 0x1, 0x1) syz_clone3(&(0x7f00000003c0)={0x8000000, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000280), {0x30}, &(0x7f0000000300)=""/28, 0x1c, &(0x7f0000000340)=""/49, &(0x7f0000000380)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x9}, 0x58) r7 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r7, 0x84, 0x82, &(0x7f00000002c0), 0x8) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000100)={0x84, @remote, 0x0, 0x0, 'lc\x00', 0x1}, 0x2c) 1.208044831s ago: executing program 3 (id=614): socketpair$unix(0x1, 0x1, 0x0, 0x0) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f00000000c0), 0x0) setsockopt(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) close(r1) bind$can_raw(0xffffffffffffffff, &(0x7f0000000300), 0x10) poll(&(0x7f0000000100)=[{}], 0x1, 0x72) r2 = creat(&(0x7f0000000300)='./bus\x00', 0x0) close(r2) socket$packet(0x11, 0x3, 0x300) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r3, 0x0, 0x0, 0x20080001, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x11}, 0x1c) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000180), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}, 0x0, 0x0, 0xc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1) setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x0, 0x0, @loopback, 0x4f}, {0xa, 0xfffe, 0x0, @mcast2}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}, 0x5c) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, 0x0) r4 = socket$inet_dccp(0x2, 0x6, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_aout(r5, &(0x7f00000002c0)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000005, 0x13, r5, 0x0) getsockopt$inet_int(r4, 0x10d, 0xb5, 0x0, &(0x7f0000000040)=0xfffffffffffffe5e) bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) 1.158828734s ago: executing program 2 (id=615): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x0, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="791298000000000061138c0000000000bf2000000000000015000000080063033d03010000000000950000"], 0x0}, 0x90) r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x8041}, 0x10) (async) socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket(0x2a, 0x2, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff3}}}, 0x24}}, 0x0) (rerun: 64) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000049c0)=@newtfilter={0x44, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x1c}}, [@TCA_CHAIN={0x8, 0xb, 0x7f}, @filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_IPV4_SRC={0x8, 0xa, @broadcast}]}}]}, 0x44}}, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket$tipc(0x1e, 0x2, 0x0) (async) r5 = socket$inet(0x2, 0x6, 0x0) setsockopt$inet_opts(r5, 0x0, 0x4, 0x0, 0x0) (async) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_opts(r5, 0x0, 0x4, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f00000000c0)={0x800042}, 0x10) (async) r6 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x3, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x7}, [], {0x95, 0x0, 0x5a5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x90) (async) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r7, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) (async) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r8, &(0x7f0000000080)=[{0x1e, 0x0, 0x0, 0xfd, @time, {}, {}, @result}], 0x1c) 1.09328627s ago: executing program 2 (id=616): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffa702000008000000b70300000000ecb2850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) (async) socket$inet_dccp(0x2, 0x6, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) r0 = open(0x0, 0x185102, 0x0) ftruncate(0xffffffffffffffff, 0x2007ffb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r0, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_io_uring_setup(0x2570, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000), &(0x7f0000000100)) (async) r1 = syz_io_uring_setup(0x2570, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000003880), 0x63}, 0x0, 0xe3d08660d3cd4684}) io_uring_enter(r1, 0x92, 0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(r1, 0x92, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.09172036s ago: executing program 1 (id=617): socket$packet(0x11, 0xa, 0x300) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@bloom_filter={0x1e, 0x4, 0x3, 0x5, 0x1442, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x2, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{r0, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000800000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x63, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) sched_setscheduler(0x0, 0x0, 0x0) (async) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0xe) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) (async) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r4, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, 0x0) (async) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) (async) set_mempolicy(0x2002, &(0x7f0000000400)=0x7, 0x5) write$cgroup_pid(r6, &(0x7f0000000440), 0x12) (async) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./bus\x00', 0x22000406, &(0x7f0000000700)={[{@stripe={'stripe', 0x3d, 0x3}}, {@debug}, {@nogrpid}, {@init_itable}, {@dioread_nolock}, {@grpjquota, 0x2e}, {@oldalloc}, {@errors_remount}, {@jqfmt_vfsv1}, {@discard}], [], 0x2c}, 0x0, 0x4da, &(0x7f0000000140)="$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") (async) getdents64(0xffffffffffffffff, &(0x7f0000000f80)=""/4096, 0x18) (async) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x11, 0x0, 0x0) (async) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) (async) r7 = fcntl$getown(r0, 0x9) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000640)={0x2, r7}) (async) socket(0x10, 0x3, 0x0) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) (async) r9 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r9, 0x1, 0x3e, &(0x7f00000002c0)=r8, 0x161) (async) sendmsg$inet(r9, &(0x7f0000007940)={&(0x7f0000000140)={0x2, 0x4e24, @private}, 0x10, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="2800000000000000000000000700000007040700441408"], 0x28}, 0x0) 1.079256431s ago: executing program 1 (id=618): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x602a01) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000a40)={[{@stripe={'stripe', 0x3d, 0x3}}, {@noauto_da_alloc}, {@jqfmt_vfsold}, {@data_err_ignore}, {@noauto_da_alloc}, {@delalloc}, {@resuid}, {@oldalloc}, {@jqfmt_vfsv1}]}, 0xfc, 0x550, &(0x7f0000000340)="$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") open(&(0x7f0000000340)='./bus\x00', 0x143142, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef9cc093fce47d85272036dc78388e3dc177e9b496", "f28359738e229a4c66810000000000d3000dd602000000005cf7ce1fc986bcdf"}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x0) pwritev2(r4, &(0x7f00000001c0)=[{&(0x7f0000000200)='y', 0x1}], 0x1, 0xd00, 0x0, 0x0) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x64b11f98, 0x3, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r5, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) mlockall(0x3) migrate_pages(0x0, 0x6, &(0x7f0000001300)=0xc, &(0x7f0000001340)=0x1) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x19f, &(0x7f00000004c0)={[{@nombcache}, {@nolazytime}, {@quota}, {@noblock_validity}, {@usrquota}, {@nomblk_io_submit}]}, 0x1, 0x524, &(0x7f0000000780)="$eJzs3UFvG1kdAPD/OHa2adNNFjjASiwLuyhdQe1kw+5GHJYiIThVQpR7CYkTRXHiKHbaJqpo+gmQEAIkTnDhgsQHQEKVuHBESJXgDFIRCEELBw7QQbYnaZLaidM6dkh+P2k6783Mm/97aWYyb+ZpJoBz682IuBYRT9M0fScixrLluWyK7dbU2O7J47tzjSmJNL3x9ySSbNnOvpJsfikrdiEivvG1iG8nz8etbW4tz1Yq5fUsX6qvrJVqm1tXl1ZmF8uL5dXp6an3Zz6YeW9msrVB+nLtvBwRH37lzz/47s+++uGvPn/7Tzf/euU7jWqNZuv3tuOY8nszB5vayheaP4u9BdZfMNhplG+2MDPSXZn7J1gfAAA6a1zjfyQiPhMR78RYDO2/nAUAAADOgPRLo/GfJCJtb7jDcgAAAOD/SK45BjbJFbOxAKORyxWLrTG8H4uLuUq1Vv/cQnVjdb41VnY8CrmFpUp5MhsrPB6FpJGfaqaf5d89kJ+OiNci4vtjI818ca5amR/0zQ8AAAA4Jy4d6P//a6zV/wcAAADOmPFBVwAAAAA4cfr/AAAAcPbp/wMAAMCZ9vXr1xtTuvP96/lbmxvL1VtX58u15eLKxlxxrrq+VlysVheb7+xbOWp/lWp17QuxunGnVC/X6qXa5tbNlerGav3m0r5PYAMAAAB99NqnHvwhiYjtL440p4bhQVcK6Iv8birJ5m2O/j++2po/6lOlgL4Y6mKbR6/0oSJA3+UHXQFgYAqDrgAwcMkR6zsO3vltNv90b+sDAAD03sQnOj//zx1acvvw1cCp5yCG8+vA8/90bFAVAfqu+fy/2wG/LhbgTCl0NQIQOMte+vn/kdL0WBUCAAB6brQ5JblidntvNHK5YjHicvOzAIVkYalSnoyIVyPi92OFVxr5qWbJ5Mg+AwAAAAAAAAAAAAAAAAAAAAAAAADQkqZJpN06xqYAAADA6RGR+0vy69a7/CfG3h49eH9gOPl385PAwxFx+8c3fnhntl5fn2os/8fu8vqPsuXvDuIOBgAAAHDQTj99px8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAL305PHduZ2pn3H/9uWIGG8XPx8XmvMLUYiIi/9MIr+nXBIRQz2Iv30/Ij7eLn7SqNZuyHbxR04+foxnP4V28S/1ID6cZw8a559r7Y6/XLzZnLc//vIR+/IvqvP5L3bPf0Mdjv/LXcZ4/eEvSh3j3494Pd/+/LMTP+kQ/60u43/rm1tbndalP4mYaPv3J9kXq1RfWSvVNreuLq3MLpYXy6vT01Pvz3ww897MZGlhqVLO/m0b43uf/OXTw9p/sUP88SPa/3aX7f/vwzuPP9pKFvavudeMf+WtNvF/89Nsm+fj57K/fZ/N0o31Ezvp7VZ6rzd+/rs3Dmv//LP2F47z/3+ly/b35EABAHqmtrm1PFuplNd7kxjOdtuzHb58otFL73PQxvXOqWi7xOGJez3dYZqmaYdf/gcR0c1+kjiZlqaZY5Qa7HkJAADovWcX/YOuCQAAAAAAAAAAAAAAAAAAAJxf/XjL2sGY27upxJuBAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBT438BAAD//+ac18U=") r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) io_uring_enter(r6, 0x40079c9, 0xdebf, 0x21, &(0x7f0000000200)={[0x1ff]}, 0x8) socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000340)=ANY=[@ANYBLOB="3800000003080102000000000000000000000000140004aff969f7199acc6b15ce9e856b7ed899a4fc3c806df90fad23a108000240000000000800014000000000050003008400000006000edb5bfc52e630335fc74566749a3a2433abe6587fd30bfb1a7537d530d466c261a01fd8d25d112eb77dee02e88b5afe8d765efc74cdffe52d7f3ccdddab69639f8c84d6d2d73b1a5c9bd16a66ada95a0e4f10fe4734ede0c90326d3316b7eca9bc526cff6f9ffb09a"], 0x38}}, 0x0) 546.333045ms ago: executing program 0 (id=619): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_int(r0, 0x0, 0x2, 0x0) write$cgroup_subtree(r1, 0x0, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000005c0)='tlb_flush\x00'}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x48) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffffd}, 0x90) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001780), 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x1a3, 0x0, 0x0, 0x0, 0x0, 0xd00, 0x12000000, 0x0, 0x0, 0x0, 0x0}, 0x48) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r4, 0x0, 0xb, &(0x7f0000000180)=0x4, 0x4) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x16, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffa0}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001180), 0x0, 0x800}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000380)={&(0x7f0000000280), &(0x7f0000000340)=""/49, &(0x7f0000000600)="ee50e9ff98a0b05c62131d44982926e02e5602b87d7ab163c0c5ac68394a5d5af1b1c39b53d0dc9faf289651ae8ac250992526f9840331296529d5e1cea88c86c0275caa638d8c773dd5621752917f5a8a7e2dc89a376a13af", &(0x7f0000000400), 0x0, r2}, 0x38) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000500)={0xffffffffffffffff}, 0xc) close(r3) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0xfc, 0x8000, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 461.215632ms ago: executing program 0 (id=620): syz_genetlink_get_family_id$devlink(&(0x7f0000000540), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x2, 0x1000}, 0x48) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x2, 0x1000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f0000000380)={'gretap0\x00', 0x0, 0x1, 0x1, 0x9, 0xdf5, {{0x6, 0x4, 0x1, 0x3, 0x18, 0x64, 0x0, 0x7, 0x0, 0x0, @multicast1, @loopback, {[@end]}}}}}) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f0000000a40)={0x2e0, 0x12, 0x100, 0x70bd28, 0x25dfdbfc, {0x12, 0x7, 0x1, 0x30, {0x4e23, 0x4e20, [0x933, 0x3, 0x200, 0x9a2], [0xc9ef, 0x2, 0x800, 0x81], r2, [0x813f, 0x9]}, 0x6, 0x7}, [@INET_DIAG_REQ_BYTECODE={0x85, 0x1, "9998759a9d7fa9742686042d1905b09671bcc36a31372ddaee0700313eb1a0abeaadbe29a82621246a11b2807d602dd0b18e795d448a1d0f6bcc82da2c3f8984b85296dac8a78e9afc6d8c406fac09fce45a04d3f939b10ff53cc4681133f19661528681095eec40579f5efc12921b1f84e42311e6192da713efc54f418b474270"}, @INET_DIAG_REQ_BYTECODE={0x87, 0x1, "3fa67759afc52fc60784a12b7f7a0c682a361806ef4096ac79d07b02f4fd2ccc793ef3a357fbc1e41d92b5d6ba5915cf40159a35b8b3c7ee3793fe01bc697a90e4503c86258166ce1106a3ed6ee1f704379d8e46759f53c961984f258a96feb10a50ff30fa6ecc44845f9ec9e0356612b35f48a714e0d82d19d0ea14548b765905d71d"}, @INET_DIAG_REQ_BYTECODE={0x70, 0x1, "75e65ada897b5737894f7ee39f1bfecf9957b12755a97d6a70ea9521d5990fcd81bb90af6590d76090327c38a63828b7445133a47a5332b4d560d5e878cbd5a926f748a5ebca0e08e380832acae65bbdd6a1ae60f72cdab4c0846fd34d34268f1ef940a0a9c3ce5b54b57bab"}, @INET_DIAG_REQ_BYTECODE={0x4f, 0x1, "c6d41ec88fd208669bf79be06a8ce0fdd0ffbfc8d71cc963276e0e02774baed1d9663a90a12c0d56696a709376eff9930e3cfaa3e183fe7a6603e5323c440b6bdcb9c764dc45d3514854bf"}, @INET_DIAG_REQ_BYTECODE={0xc2, 0x1, "2f03b30ed17fa3d0fa18ce6c90abfe1e5f1a6a0f09b8e35588d655c513d5563ec36716e143b124393ec64c1c5a64074d7fce11ba9fe029d09682ca93cb324959fbbce59d1ec70a00907921018c38e9663b9381fe02856d7f56d770cf137818354dba6d29f14cecaafb2dd0eb55da42490b4c6030746b649cee40255b0d28e24f5b9028daa58b7490689bb94d6f419b91e524943e348fe8ad9c2f7a7dcc799a0be0982506c8bcc1b5ad84eedf103ddd23e8c6cae7386c0735f90b4b293062"}]}, 0x2e0}, 0x1, 0x0, 0x0, 0x4801}, 0x80) (async) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f0000000a40)={0x2e0, 0x12, 0x100, 0x70bd28, 0x25dfdbfc, {0x12, 0x7, 0x1, 0x30, {0x4e23, 0x4e20, [0x933, 0x3, 0x200, 0x9a2], [0xc9ef, 0x2, 0x800, 0x81], r2, [0x813f, 0x9]}, 0x6, 0x7}, [@INET_DIAG_REQ_BYTECODE={0x85, 0x1, "9998759a9d7fa9742686042d1905b09671bcc36a31372ddaee0700313eb1a0abeaadbe29a82621246a11b2807d602dd0b18e795d448a1d0f6bcc82da2c3f8984b85296dac8a78e9afc6d8c406fac09fce45a04d3f939b10ff53cc4681133f19661528681095eec40579f5efc12921b1f84e42311e6192da713efc54f418b474270"}, @INET_DIAG_REQ_BYTECODE={0x87, 0x1, "3fa67759afc52fc60784a12b7f7a0c682a361806ef4096ac79d07b02f4fd2ccc793ef3a357fbc1e41d92b5d6ba5915cf40159a35b8b3c7ee3793fe01bc697a90e4503c86258166ce1106a3ed6ee1f704379d8e46759f53c961984f258a96feb10a50ff30fa6ecc44845f9ec9e0356612b35f48a714e0d82d19d0ea14548b765905d71d"}, @INET_DIAG_REQ_BYTECODE={0x70, 0x1, "75e65ada897b5737894f7ee39f1bfecf9957b12755a97d6a70ea9521d5990fcd81bb90af6590d76090327c38a63828b7445133a47a5332b4d560d5e878cbd5a926f748a5ebca0e08e380832acae65bbdd6a1ae60f72cdab4c0846fd34d34268f1ef940a0a9c3ce5b54b57bab"}, @INET_DIAG_REQ_BYTECODE={0x4f, 0x1, "c6d41ec88fd208669bf79be06a8ce0fdd0ffbfc8d71cc963276e0e02774baed1d9663a90a12c0d56696a709376eff9930e3cfaa3e183fe7a6603e5323c440b6bdcb9c764dc45d3514854bf"}, @INET_DIAG_REQ_BYTECODE={0xc2, 0x1, "2f03b30ed17fa3d0fa18ce6c90abfe1e5f1a6a0f09b8e35588d655c513d5563ec36716e143b124393ec64c1c5a64074d7fce11ba9fe029d09682ca93cb324959fbbce59d1ec70a00907921018c38e9663b9381fe02856d7f56d770cf137818354dba6d29f14cecaafb2dd0eb55da42490b4c6030746b649cee40255b0d28e24f5b9028daa58b7490689bb94d6f419b91e524943e348fe8ad9c2f7a7dcc799a0be0982506c8bcc1b5ad84eedf103ddd23e8c6cae7386c0735f90b4b293062"}]}, 0x2e0}, 0x1, 0x0, 0x0, 0x4801}, 0x80) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2}}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}, @func_proto]}}, 0x0, 0x4a}, 0x20) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000d80), 0x208e24b) (async) write$binfmt_script(r3, &(0x7f0000000d80), 0x208e24b) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}) (async) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}) execve(0x0, 0x0, &(0x7f00000002c0)=[&(0x7f0000000240)='nicvf0\x00']) (async) execve(0x0, 0x0, &(0x7f00000002c0)=[&(0x7f0000000240)='nicvf0\x00']) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r6) (async) setuid(r6) inotify_init1(0x0) (async) inotify_init1(0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) fdatasync(r3) (async) fdatasync(r3) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000008000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r8}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x10000000000002a9, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000180)={0x0, 0xea60}, 0x10) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x100, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x20000000000001d9, &(0x7f0000000280)=@framed={{0xffffffb4, 0x6, 0x0, 0x0, 0x0, 0x73, 0x11, 0x48}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x20000000000001d9, &(0x7f0000000280)=@framed={{0xffffffb4, 0x6, 0x0, 0x0, 0x0, 0x73, 0x11, 0x48}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x90) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000000)=0x9) 411.076846ms ago: executing program 4 (id=621): syz_open_dev$MSR(0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0xd000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x60, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0x16, 0xa, 'nojournal_checksum'}, @NBD_ATTR_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x8000) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000006a00230300001300000000000200000200000000083f3800"/37], 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="9feb01001800000000000000b7000000b70000000400000004000000000000090406d46392e18f0100000000000006f10e0000000100000f0300000005000000080000000e000000252873080000000000000c050000000c0000000a0000850500002005000000050d338ca4733dccc200000003000000030000000f00000003000000090000000d00000005000000890000000b000000020000007a0400000d000000000000007f00000010000000010000000700c6f10a00000004000000040000000100000005000000f196ef5e0300000002"], &(0x7f0000000780)=""/200, 0xd4, 0xc8, 0x0, 0x3ff}, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x4000000400000bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) execve(&(0x7f00000009c0)='./bus\x00', &(0x7f0000000740), &(0x7f0000000d00)) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x9, &(0x7f0000000000), 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000000440)={[{@noblock_validity}, {@nobh}, {@abort}, {@norecovery}, {@nojournal_checksum}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x6, 0x56a, &(0x7f00000015c0)="$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") setxattr$trusted_overlay_opaque(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x0, 0x0, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000200)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="4c000300"], 0xd) sync() unlink(&(0x7f00000003c0)='./file1\x00') bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f00000006c0)={[{@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@resuid}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@lazytime}, {@jqfmt_vfsold}, {@dioread_lock}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r3 = fcntl$getown(r0, 0x9) syz_open_procfs$namespace(r3, &(0x7f0000000180)='ns/ipc\x00') 351.180731ms ago: executing program 0 (id=622): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./bus\x00', 0x1518c83, &(0x7f0000000440), 0x1, 0x775, &(0x7f0000001180)="$eJzs3c9rXNUeAPDvnSRNm/a95MGD9+oqIGigdGJqbBVcVFyIYKGga9thMg01k0zJTEoTAlpEcCOouBB007U/6s6tP7b6X7gQS9W0WHEhkTu5t502M2mSJpnqfD5wM+fceyfnfOf+OGfmHu4NoGeNpn8KEYcj4t0kYjibn0TEQDPVH3Fybb1bK8vldEpidfXlX5LmOjdXlsvR8p7UwSzz/4j45q2II4X15dYXl2ZK1WplPsuPN2YvjNcXl46eny1NV6Yrc8cnJiePnXjqxPGdi/W375cOXXvvhcc/P/nHm/+7+s63SZyMQ9my1jh2ymiMZp/JQPoR3uX5nS6sy5JuV4BtSQ/NvrWjPA7HcPQ1UwDAP9nrEbEKAPSYRPsPAD0m/x3g5spyOZ+6+4vE3rr+XETsX4s/v765tqQ/u2a3v3kddOhmcteVkSQiRnag/NGI+PjLVz9Np9il65AA7bxxOSLOjoyuP/8n68YsbNUTGyzbl72O3jPf+Q/2zldp/+fpdv2/wu3+T7Tp/wy2OXa3477H/4EdKGQDaf/v2Zaxbbda4s+M9GW5fzX7fAPJufPVSnpu+3dEjMXAYJqf2KCMsRt/3ui0rLX/9+v7r32Slp++3lmj8FP/4N3vmSo1Sg8Sc6vrlyMe6W8Xf3J7+ycd+r+nN1nGi8+8/VGnZWn8abz5tD7+yEYn7Y7VKxGPtd3+d0a0JRuOTxxv7g7j+U7Rxhc/fDjUqfzW7Z9Oafn5d4G9kG7/oY3jH0lax2vWt17Gd1eGv+607P7xt9//9yWvNNN5P+JSqdGYn4jYl7y0fv6xO+/N8/n6afxjj7Y//jfa/9PvhGc3GX//tZ8/2378uyuNf2pL23/riau3Zvo6lb+57T/ZTI1lczZz/ttsBR/kswMAAAAAAAAAAAAAAAAAAAAAAACAzSpExKFICsXb6UKhWFx7hvd/Y6hQrdUbR87VFuamovms7JEYKOS3uhxuuR/qRHY//Dx/7J78kxHxn4j4YPBAkt9HcarLsQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA7mCH5/+nfhzsdu0AgF2zv9sVAAD2nPYfAHqP9h8Aeo/2HwB6j/YfAHqP9h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBddvrUqXRa/X1luZzmpy4uLszULh6dqtRnirML5WK5Nn+hOF2rTVcrxXJt9n7/r1qrXZiMuYVL441KvTFeX1w6M1tbmGucOT9bmq6cqQzsSVQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsDX1xaWZUrVamZfYRmL14ahG9xN92e70sNRnTxPJw1GNHU50+cQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8DfxVwAAAP//02Ii/w==") r0 = socket$inet(0x2, 0x80001, 0x0) listen(r0, 0x0) listen(r0, 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000080)={@ipv4={""/10, ""/2, @local}}, &(0x7f0000000180)=0x14) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r1) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000280)={0x3, &(0x7f0000000180)=[{0x7, 0x0, 0x4, 0x200}, {0x4d}, {0x6}]}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000012c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000cb270045000030000000000021907800000000ffffffff05009078ac141400450000000000000000000000ac1e0001ac141400"], 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x5400, 0x0) r3 = socket(0x10, 0x2, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c) connect$inet6(r6, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000680)="ac9e0e", 0x3}], 0x1}}], 0x1, 0xc8000) sendmmsg(r6, &(0x7f00000092c0), 0x4ff, 0x0) splice(r6, 0x0, r5, 0x0, 0x200000000045, 0x0) r7 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r4) getsockname$packet(r7, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000280)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', r8, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2}, @loopback}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'syztnl1\x00', r9, 0x0, 0x0, 0x0, 0x0, 0xd, @dev, @private0={0xfc, 0x0, '\x00', 0x1}, 0x700}}) open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) 133.041709ms ago: executing program 2 (id=623): memfd_create(&(0x7f0000000040)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t%\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\xec\xd4D\x8a\x1f\x1b\xf6\x18\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbeQ\xee\xf0\x99\x1e|C\xd8\x01\xd0\xf5\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajnW\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x300201e, &(0x7f00000001c0)=ANY=[], 0xd, 0x2b3, &(0x7f00000006c0)="$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") r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x50007a2) removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@known='system.posix_acl_access\x00') perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x80000000000000, 0x2}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_io_uring_setup(0x231, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) socket$l2tp(0x2, 0x2, 0x73) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x1, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffd}, 0x0, 0x202, 0x0, 0x1, 0x4000, 0x0, 0x73b, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="c39790390000000000005d04085ea4f5738755392d2465b1969c1d7c6a0bfac5965d2b5a32a788c675a4679b2d999f4c079de4781cb276f9a09c04afe7768f64426f644cb78da84f2ccabad89b5d440b4c37f83160d49595ac5f", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x250801, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x10, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, r1, 0x8) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='blkio.bfq.io_serviced_recursive\x00', 0x26e1, 0x0) 132.160809ms ago: executing program 3 (id=624): perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async, rerun: 32) r1 = getpid() (rerun: 32) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000003c0)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async, rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) (async) bpf$MAP_CREATE(0xe4ffffff00000000, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r4, &(0x7f0000000080)="b3019c28", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3, &(0x7f0000000b00)=0x10001, 0x4) (async) setsockopt$inet6_int(r4, 0x29, 0x8, &(0x7f0000000380)=0x3f, 0x4) (async) recvmmsg(r4, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000000c0)=@nl, 0x80, &(0x7f0000000240)=[{&(0x7f0000000180)=""/186, 0xba}, {0xffffffffffffffff}], 0x2, &(0x7f0000000280)=""/239, 0xef}}, {{&(0x7f0000000e80)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000400)=""/18, 0x12}, {&(0x7f0000000440)=""/110, 0x6e}, {&(0x7f00000007c0)=""/165, 0xa5}, {&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f0000000580)=""/245, 0xf5}], 0x5, &(0x7f0000000700)=""/27, 0x1b}}, {{&(0x7f0000000740)=@nfc, 0x80, &(0x7f0000000c40)=[{&(0x7f0000002540)=""/4096, 0x1000}, {&(0x7f0000000880)=""/225, 0xe1}, {&(0x7f00000009c0)=""/243, 0xf3}, {&(0x7f00000003c0)=""/55, 0x37}, {&(0x7f0000003540)=""/4096, 0x1000}, {&(0x7f00000004c0)=""/24, 0x18}, {&(0x7f0000000b40)=""/246, 0xf6}, {&(0x7f0000000f00)=""/150, 0x96}], 0x8, &(0x7f0000000cc0)=""/180, 0xb4}}], 0x4, 0x10162, 0x0) open(0x0, 0x0, 0x0) (async) unshare(0x2c060000) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r5 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r5) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r6, &(0x7f0000000f80)=""/4096, 0x1000) 60.382935ms ago: executing program 2 (id=625): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000300)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r0}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) r1 = socket$inet(0x2, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0xca5, 0x3, &(0x7f0000000080)=""/163, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, &(0x7f0000000e80)=0x2, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001240)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6}, @TCA_FLOWER_KEY_ENC_IPV4_SRC_MASK={0xfffffffffffffe84}]}}]}, 0x44}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@updsa={0x180, 0x1a, 0x1, 0x0, 0x0, {{@in=@private, @in6=@mcast2}, {@in=@broadcast, 0x0, 0x6c}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'sha3-512-generic\x00'}}}, @algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x180}}, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000900], 0x2, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0000000000003c173158c4d96e4a58ad5d4bac1c4200000000000000000000000000004800"/150]}, 0x10e) socket$pppl2tp(0x18, 0x1, 0x1) syz_clone3(&(0x7f00000003c0)={0x8000000, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000280), {0x30}, &(0x7f0000000300)=""/28, 0x1c, &(0x7f0000000340)=""/49, &(0x7f0000000380)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x9}, 0x58) r7 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r7, 0x84, 0x82, &(0x7f00000002c0), 0x8) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000100)={0x84, @remote, 0x0, 0x0, 'lc\x00', 0x1}, 0x2c) 0s ago: executing program 4 (id=626): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) vmsplice(r0, &(0x7f0000000240)=[{&(0x7f0000000040)="d6", 0x1}], 0x1, 0x0) syz_read_part_table(0x5fd, &(0x7f0000000d00)="$eJzs2z9olGccB/DvxVzOP9B0cHKpcegkFMXRDFWSU7EQTqUQHLS1iJgpQuCkhwc6tBkUM0jHLlK4ReNkzOBQFIXORRxahAwuBV2kdshbrvc2rfaPR8kNxc9n+T338rvn+/zgWZ/wvzaUarkqar+VDz751/5i9I91O8c6E5MHi6IojiaVHE81Y9++s5hkOK/umh1JRv60z/WvNy9/+fxAtfP4yIv3T9ybH1rbs5Z3k2wZeePRa/1PyaDcGL8/evHSbP1y90e9tbL6cXLz2URj6fD8wuKh6v5T3e8Xkgdlf+9ibMq5NHM+Z3Ny+L+kVl7Jb3fzm+NnHtVbK191nuxa3Vbv3D699+X25St3dydz3Yip1/6XN9+vvqzNX+bPjV2dXmjt23lr67U9zTsPG083/Fz0lJHV9ckFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAwbozfH714abZ+uTl+5lG9tfLF9999dPPZRGPp8PzC4qGR/afKvgdlHS7ruTRzPmdzMjOZyWeZ7T9yuvKP+b9sTp7sWt1W79w+vffl5PKVu7vLvqn1GPZvvD7/3NjV6YXWvp23tl7b07zzsPF0Q69vppZPU+2tawM6CwAAAAAAAAAAAAAAAAAAAG+vicmD26c+bBxNKjm+MclPnw91vxflI/ff3+rvKOsPtWRTkusbk/bzA9XO4yMvRk7cm/+x7G+nlnaSLd8sHUveW8u58JfkyqBHow+/BgAA//8hVpWc") sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000002300)={&(0x7f0000002240)=@deltclass={0x3c, 0x29, 0x2, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0xf}, {0xfff8}}, [@TCA_RATE={0x6, 0x5, {0x0, 0xfd}}, @TCA_RATE={0x6, 0x5, {0x1, 0x3}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x3c}}, 0x276e44b56bbed558) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000023c0)={0x0, 0x0}) recvmmsg(r1, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000001fc0), 0x0, &(0x7f0000000600)=""/191, 0xbf}, 0x7ff}], 0x1, 0x0, &(0x7f0000003700)={r2, r3+60000000}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo\x00') getdents64(r4, &(0x7f0000000280)=""/4096, 0x1000) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r4, 0x58, &(0x7f0000000200)}, 0x10) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1081005, 0x0) mount$9p_xen(0x0, &(0x7f0000002440)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x48400, 0x0) r5 = creat(&(0x7f0000002400)='./file0\x00', 0x0) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000380)={'\x00', 0x0, 0x7fff, 0x69}) ioctl$BLKTRACESTART(r5, 0x1274, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x5, 0x8, &(0x7f0000001300)=ANY=[@ANYRES32=r6], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x30, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x20000}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000140)='sys_enter\x00'}, 0x10) write$binfmt_script(r7, &(0x7f0000000140), 0xb) readv(r8, &(0x7f0000000000)=[{&(0x7f0000000140)=""/205, 0xcd}], 0x1) tee(r6, r9, 0xaf5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r11 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc042, 0x0) sendfile(r11, r10, &(0x7f0000002200)=0x2, 0x6) mkdir(0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) kernel console output (not intermixed with test programs): ject_r:node_t tclass=tcp_socket permissive=1 [ 35.071521][ T29] audit: type=1400 audit(1723124719.643:385): avc: denied { bind } for pid=3703 comm="syz.4.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 35.094526][ T3716] loop0: detected capacity change from 0 to 1024 [ 35.104078][ T29] audit: type=1400 audit(1723124719.643:386): avc: denied { connect } for pid=3703 comm="syz.4.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 35.110627][ T3716] EXT4-fs: Ignoring removed orlov option [ 35.123913][ T29] audit: type=1400 audit(1723124719.713:387): avc: denied { name_bind } for pid=3710 comm="syz.3.57" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 35.129693][ T3716] EXT4-fs: Ignoring removed nomblk_io_submit option [ 35.155324][ T3721] loop3: detected capacity change from 0 to 512 [ 35.189786][ T3721] EXT4-fs (loop3): orphan cleanup on readonly fs [ 35.196957][ T3721] EXT4-fs error (device loop3): ext4_acquire_dquot:6848: comm syz.3.57: Failed to acquire dquot type 1 [ 35.262319][ T3721] EXT4-fs (loop3): 1 truncate cleaned up [ 35.273813][ T36] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.287816][ T3716] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.355764][ T36] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.466538][ T36] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.546589][ T3721] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 35.561554][ T3721] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.575980][ T36] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.596055][ T3265] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.679405][ T36] bridge_slave_1: left allmulticast mode [ 35.685195][ T36] bridge_slave_1: left promiscuous mode [ 35.690978][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.710445][ T36] bridge_slave_0: left allmulticast mode [ 35.716188][ T36] bridge_slave_0: left promiscuous mode [ 35.721949][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.809908][ T3464] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 35.883299][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 35.914601][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 35.948273][ T36] bond0 (unregistering): Released all slaves [ 36.067974][ T36] hsr_slave_0: left promiscuous mode [ 36.085675][ T36] hsr_slave_1: left promiscuous mode [ 36.095159][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 36.102647][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 36.126334][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 36.133889][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 36.148666][ T36] veth1_macvtap: left promiscuous mode [ 36.154225][ T36] veth0_macvtap: left promiscuous mode [ 36.159836][ T36] veth1_vlan: left promiscuous mode [ 36.165126][ T36] veth0_vlan: left promiscuous mode [ 36.369685][ T3837] loop0: detected capacity change from 0 to 512 [ 36.403606][ T3837] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.416339][ T3793] loop4: detected capacity change from 0 to 512 [ 36.423334][ T3793] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 36.442947][ T3837] ext4 filesystem being mounted at /16/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 36.459148][ T36] team0 (unregistering): Port device team_slave_1 removed [ 36.481841][ T36] team0 (unregistering): Port device team_slave_0 removed [ 36.603323][ T3735] chnl_net:caif_netlink_parms(): no params data found [ 36.764276][ T3735] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.771429][ T3735] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.786975][ T3735] bridge_slave_0: entered allmulticast mode [ 36.795907][ T3735] bridge_slave_0: entered promiscuous mode [ 36.805209][ T3735] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.812341][ T3735] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.819684][ T3735] bridge_slave_1: entered allmulticast mode [ 36.826402][ T3735] bridge_slave_1: entered promiscuous mode [ 36.858871][ T3735] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.875507][ T3735] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.907861][ T3735] team0: Port device team_slave_0 added [ 36.947569][ T3735] team0: Port device team_slave_1 added [ 36.969520][ T3263] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.001893][ T3912] __nla_validate_parse: 2 callbacks suppressed [ 37.001955][ T3912] netlink: 256 bytes leftover after parsing attributes in process `syz.4.73'. [ 37.017463][ T3735] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.024528][ T3735] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.050544][ T3735] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.096373][ T3916] loop3: detected capacity change from 0 to 512 [ 37.108901][ T3735] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.115961][ T3735] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.142356][ T3735] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.165798][ T3916] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.179774][ T3916] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.234508][ T3265] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.272393][ T3935] loop2: detected capacity change from 0 to 512 [ 37.281869][ T3735] hsr_slave_0: entered promiscuous mode [ 37.290594][ T3735] hsr_slave_1: entered promiscuous mode [ 37.331667][ T3935] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.353460][ T3935] ext4 filesystem being mounted at /10/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 37.421417][ T3935] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.679433][ T3975] netlink: 8 bytes leftover after parsing attributes in process `syz.2.83'. [ 37.721229][ T3983] loop2: detected capacity change from 0 to 1024 [ 37.745514][ T3983] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.758698][ T3735] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 37.769657][ T3735] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 37.778556][ T3735] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 37.788187][ T3735] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 37.837754][ T3735] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.854916][ T3735] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.868846][ T3337] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.876006][ T3337] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.894264][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.901381][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.940089][ T4000] netlink: 4 bytes leftover after parsing attributes in process `syz.2.84'. [ 37.961754][ T3260] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.103507][ T3735] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.132445][ T4021] loop3: detected capacity change from 0 to 1024 [ 38.158858][ T4021] EXT4-fs: Ignoring removed nomblk_io_submit option [ 38.182911][ T4021] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 38.214136][ T4021] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.265641][ T3735] veth0_vlan: entered promiscuous mode [ 38.279603][ T3735] veth1_vlan: entered promiscuous mode [ 38.324402][ T3735] veth0_macvtap: entered promiscuous mode [ 38.345788][ T3735] veth1_macvtap: entered promiscuous mode [ 38.379807][ T3735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.390424][ T3735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.400383][ T3735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.410971][ T3735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.420801][ T3735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.431317][ T3735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.441166][ T3735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.451613][ T3735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.466030][ T4045] loop0: detected capacity change from 0 to 1764 [ 38.482547][ T4045] iso9660: Unknown parameter 'sbse„' [ 38.490950][ T3735] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.518081][ T3735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.528585][ T3735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.538543][ T3735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.549052][ T3735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.558922][ T3735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.569468][ T3735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.579332][ T3735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.589883][ T3735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.607499][ T3735] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.616423][ T3735] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.625257][ T3735] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.634024][ T3735] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.642812][ T3735] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.678521][ T3263] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.788334][ T4073] loop1: detected capacity change from 0 to 1024 [ 38.801753][ T4073] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.978034][ C0] hrtimer: interrupt took 36919 ns [ 39.079575][ T4089] netlink: 8 bytes leftover after parsing attributes in process `syz.4.93'. [ 39.144885][ T4091] netlink: 8 bytes leftover after parsing attributes in process `syz.4.94'. [ 39.155380][ T3260] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.206326][ T4099] netlink: 128 bytes leftover after parsing attributes in process `syz.4.96'. [ 39.414466][ T4116] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(13) [ 39.421110][ T4116] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 39.428588][ T4116] vhci_hcd vhci_hcd.0: Device attached [ 39.464006][ T4119] vhci_hcd: connection closed [ 39.464162][ T63] vhci_hcd: stop threads [ 39.473357][ T63] vhci_hcd: release socket [ 39.477796][ T63] vhci_hcd: disconnect device [ 39.544055][ T4102] chnl_net:caif_netlink_parms(): no params data found [ 39.594335][ T4102] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.601547][ T4102] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.608849][ T4102] bridge_slave_0: entered allmulticast mode [ 39.615564][ T4102] bridge_slave_0: entered promiscuous mode [ 39.623758][ T4102] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.630952][ T4102] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.638215][ T4102] bridge_slave_1: entered allmulticast mode [ 39.645428][ T4102] bridge_slave_1: entered promiscuous mode [ 39.667735][ T4102] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.678575][ T4102] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.700624][ T4102] team0: Port device team_slave_0 added [ 39.707446][ T4102] team0: Port device team_slave_1 added [ 39.713906][ T3735] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.767301][ T4102] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.774343][ T4102] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.800343][ T4102] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.812843][ T4102] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.819846][ T4102] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.845892][ T4102] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.887045][ T4102] hsr_slave_0: entered promiscuous mode [ 39.897041][ T4102] hsr_slave_1: entered promiscuous mode [ 39.904614][ T4102] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 39.912317][ T4102] Cannot create hsr debugfs directory [ 40.031700][ T4102] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.067871][ T29] kauditd_printk_skb: 45 callbacks suppressed [ 40.067888][ T29] audit: type=1400 audit(1723124724.683:431): avc: denied { sqpoll } for pid=4149 comm="syz.1.108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 40.110248][ T4150] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 40.141055][ T4102] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.144879][ T29] audit: type=1400 audit(1723124724.763:432): avc: denied { ioctl } for pid=4159 comm="syz.0.111" path="socket:[5791]" dev="sockfs" ino=5791 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 40.155266][ T4165] loop2: detected capacity change from 0 to 512 [ 40.199719][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 40.212940][ T29] audit: type=1400 audit(1723124724.823:433): avc: denied { setopt } for pid=4169 comm="syz.4.112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 40.270792][ T4102] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.381251][ T4102] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.411972][ T4187] capability: warning: `syz.2.113' uses 32-bit capabilities (legacy support in use) [ 40.447353][ T4102] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 40.461799][ T4102] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 40.475203][ T4102] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 40.497033][ T4102] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 40.524336][ T4174] netlink: 12 bytes leftover after parsing attributes in process `syz.2.113'. [ 40.533300][ T4174] netlink: 8 bytes leftover after parsing attributes in process `syz.2.113'. [ 40.553536][ T4192] loop4: detected capacity change from 0 to 2048 [ 40.602339][ T4195] loop0: detected capacity change from 0 to 128 [ 40.620946][ T4197] tmpfs: Bad value for 'size' [ 40.627460][ T4195] EXT4-fs: dax option not supported [ 40.643859][ T4102] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.692153][ T4198] loop4: detected capacity change from 0 to 2048 [ 40.722483][ T4102] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.795900][ T4198] FAT-fs (loop4): error, invalid access to FAT (entry 0x000004ff) [ 40.804166][ T4198] FAT-fs (loop4): Filesystem has been set read-only [ 40.828719][ T4195] xt_CT: You must specify a L4 protocol and not use inversions on it [ 40.839000][ T3335] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.846166][ T3335] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.958865][ T4202] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4202 comm=syz.0.119 [ 40.972548][ T3335] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.979728][ T3335] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.994124][ T29] audit: type=1400 audit(1723124725.613:434): avc: denied { remount } for pid=4193 comm="syz.0.119" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 41.481049][ T4211] loop1: detected capacity change from 0 to 512 [ 41.489326][ T4213] loop4: detected capacity change from 0 to 1024 [ 41.492370][ T63] bridge_slave_1: left allmulticast mode [ 41.501459][ T63] bridge_slave_1: left promiscuous mode [ 41.507398][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.517459][ T4213] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 41.528911][ T63] bridge_slave_0: left allmulticast mode [ 41.529160][ T4211] EXT4-fs (loop1): 1 truncate cleaned up [ 41.534657][ T63] bridge_slave_0: left promiscuous mode [ 41.544683][ T4213] loop4: detected capacity change from 0 to 164 [ 41.545884][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.559577][ T4211] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.593233][ T29] audit: type=1400 audit(1723124726.213:435): avc: denied { create } for pid=4210 comm="syz.1.122" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 41.614417][ T4211] EXT4-fs error (device loop1): ext4_add_entry:2435: inode #2: comm syz.1.122: Directory hole found for htree leaf block 0 [ 41.632513][ T29] audit: type=1400 audit(1723124726.253:436): avc: denied { mount } for pid=4212 comm="syz.4.124" name="/" dev="loop4" ino=1920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 41.655146][ T4211] EXT4-fs (loop1): Remounting filesystem read-only [ 41.663506][ T4211] netlink: 64 bytes leftover after parsing attributes in process `syz.1.122'. [ 41.681616][ T4213] loop4: detected capacity change from 164 to 0 [ 41.682339][ T3735] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.707964][ T29] audit: type=1400 audit(1723124726.323:437): avc: denied { unmount } for pid=3267 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 41.732596][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 41.749020][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 41.759429][ T63] bond0 (unregistering): Released all slaves [ 41.772323][ T4102] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.824606][ T4233] loop2: detected capacity change from 0 to 1024 [ 41.842094][ T4233] EXT4-fs (loop2): stripe (6) is not aligned with cluster size (16), stripe is disabled [ 41.863501][ T63] hsr_slave_0: left promiscuous mode [ 41.869960][ T63] hsr_slave_1: left promiscuous mode [ 41.877242][ T4233] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.896134][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 41.903689][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 41.912850][ T29] audit: type=1400 audit(1723124726.533:438): avc: denied { read append open } for pid=4232 comm="syz.2.128" path="/25/file1/blkio.bfq.io_wait_time_recursive" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 41.918698][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 41.943009][ T4244] loop4: detected capacity change from 0 to 1024 [ 41.946152][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 41.970129][ T63] veth1_macvtap: left promiscuous mode [ 41.975686][ T63] veth0_macvtap: left promiscuous mode [ 41.977712][ T29] audit: type=1400 audit(1723124726.593:439): avc: denied { map } for pid=4232 comm="syz.2.128" path="/25/file1/blkio.bfq.io_wait_time_recursive" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 41.981287][ T63] veth1_vlan: left promiscuous mode [ 42.005885][ T29] audit: type=1400 audit(1723124726.593:440): avc: denied { write } for pid=4232 comm="syz.2.128" path="/25/file1/blkio.bfq.io_wait_time_recursive" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 42.011132][ T63] veth0_vlan: left promiscuous mode [ 42.028148][ T4244] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.074138][ T3267] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.119021][ T4249] loop4: detected capacity change from 0 to 4096 [ 42.129354][ T4249] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.148303][ T4249] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 42.173140][ T63] team0 (unregistering): Port device team_slave_1 removed [ 42.183512][ T63] team0 (unregistering): Port device team_slave_0 removed [ 42.230965][ T4102] veth0_vlan: entered promiscuous mode [ 42.241253][ T4102] veth1_vlan: entered promiscuous mode [ 42.265584][ T3263] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.313525][ T3267] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.323677][ T4102] veth0_macvtap: entered promiscuous mode [ 42.342952][ T4102] veth1_macvtap: entered promiscuous mode [ 42.356249][ T4102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.366865][ T4102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.376845][ T4102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.387488][ T4102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.397361][ T4102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.407873][ T4102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.417800][ T4102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.428341][ T4102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.433006][ T4263] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 42.444618][ T4102] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 42.445895][ T4102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.451820][ T4263] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 42.462251][ T4102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.469869][ T4263] vhci_hcd vhci_hcd.0: Device attached [ 42.479547][ T4102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.487194][ T4266] sctp: [Deprecated]: syz.4.133 (pid 4266) Use of int in max_burst socket option. [ 42.487194][ T4266] Use struct sctp_assoc_value instead [ 42.495563][ T4102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.495577][ T4102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.531401][ T4102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.541945][ T4102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.552390][ T4102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.570593][ T4102] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.583152][ T4102] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.592007][ T4102] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.601008][ T4102] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.609815][ T4102] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.611640][ T4264] vhci_hcd: connection closed [ 42.629595][ T3901] vhci_hcd: stop threads [ 42.638601][ T3901] vhci_hcd: release socket [ 42.643123][ T3901] vhci_hcd: disconnect device [ 42.671195][ T4273] loop0: detected capacity change from 0 to 1024 [ 42.679770][ T3347] vhci_hcd: vhci_device speed not set [ 42.707720][ T4273] EXT4-fs: Ignoring removed orlov option [ 42.724506][ T4273] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.746465][ T4273] process 'syz.0.136' launched './file0/file0' with NULL argv: empty string added [ 42.801419][ T4289] netlink: 4 bytes leftover after parsing attributes in process `syz.3.98'. [ 42.948693][ T3265] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.145003][ T4294] netlink: 52 bytes leftover after parsing attributes in process `syz.2.140'. [ 43.199655][ T4298] loop2: detected capacity change from 0 to 4096 [ 43.213338][ T4298] ext4: Unknown parameter 'pcr' [ 43.264540][ T4303] loop2: detected capacity change from 0 to 512 [ 43.301907][ T4303] EXT4-fs warning (device loop2): ext4_multi_mount_protect:318: fsck is running on the filesystem [ 43.304041][ T4309] can0: slcan on ttyS3. [ 43.312555][ T4303] EXT4-fs warning (device loop2): ext4_multi_mount_protect:318: MMP failure info: last update time: 1669132791, last update node: dvyukov-desk.muc.corp.google.com, last update device: loop14 [ 43.338496][ T4301] loop1: detected capacity change from 0 to 2048 [ 43.400502][ T4301] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.143: bad orphan inode 8192 [ 43.412371][ T4310] can0 (unregistered): slcan off ttyS3. [ 43.433543][ T4301] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.482181][ T4322] loop0: detected capacity change from 0 to 128 [ 43.492861][ T4326] loop2: detected capacity change from 0 to 512 [ 43.524748][ T4326] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.543913][ T4326] ext4 filesystem being mounted at /32/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 43.618060][ T3735] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.641579][ T4326] 9pnet_fd: Insufficient options for proto=fd [ 43.741737][ T4350] bond_slave_1: entered promiscuous mode [ 43.777030][ T4350] bond0: (slave bond_slave_1): Releasing backup interface [ 43.829687][ T4365] loop1: detected capacity change from 0 to 256 [ 43.881314][ T4374] netlink: 'syz.0.156': attribute type 21 has an invalid length. [ 43.891687][ T4374] netlink: 132 bytes leftover after parsing attributes in process `syz.0.156'. [ 43.950087][ T4385] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4385 comm=syz.0.158 [ 44.081138][ T4393] ieee802154 phy0 wpan0: encryption failed: -22 [ 44.290808][ T4423] loop4: detected capacity change from 0 to 256 [ 44.311230][ T4423] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 44.349481][ T4431] 9pnet_fd: Insufficient options for proto=fd [ 44.350332][ T3263] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.395193][ T4433] loop0: detected capacity change from 0 to 512 [ 44.423059][ T4433] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.436764][ T4433] ext4 filesystem being mounted at /40/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.482449][ T4433] syz_tun: entered promiscuous mode [ 44.495475][ T4433] macvtap1: entered promiscuous mode [ 44.500877][ T4433] macvtap1: entered allmulticast mode [ 44.506271][ T4433] syz_tun: entered allmulticast mode [ 44.514866][ T4433] syz_tun: left allmulticast mode [ 44.520189][ T4433] syz_tun: left promiscuous mode [ 44.539987][ T4435] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.547307][ T4435] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.555948][ T4435] bridge0: entered promiscuous mode [ 44.619247][ T3265] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.647965][ T4446] 9pnet_fd: Insufficient options for proto=fd [ 44.679904][ T4450] loop0: detected capacity change from 0 to 2048 [ 44.696077][ T3908] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.728674][ T4455] netlink: 24 bytes leftover after parsing attributes in process `syz.2.177'. [ 44.741977][ T3908] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.782460][ T4460] loop2: detected capacity change from 0 to 256 [ 44.792355][ T3908] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.836652][ T3908] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.938812][ T3908] bridge_slave_1: left allmulticast mode [ 44.941686][ T4482] netlink: 100 bytes leftover after parsing attributes in process `syz.0.181'. [ 44.944571][ T3908] bridge_slave_1: left promiscuous mode [ 44.959245][ T3908] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.987299][ T3908] bridge_slave_0: left allmulticast mode [ 44.993025][ T3908] bridge_slave_0: left promiscuous mode [ 44.998760][ T3908] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.038420][ T4497] loop2: detected capacity change from 0 to 512 [ 45.054702][ T4497] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 45.071921][ T4497] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.089138][ T29] kauditd_printk_skb: 25 callbacks suppressed [ 45.089155][ T29] audit: type=1400 audit(1723124729.703:466): avc: denied { getopt } for pid=4496 comm="syz.2.185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 45.125392][ T3263] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 45.163451][ T3908] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 45.174874][ T3908] bond0 (unregistering): Released all slaves [ 45.184319][ T4490] netlink: 24 bytes leftover after parsing attributes in process `syz.0.183'. [ 45.197870][ T4492] netlink: 24 bytes leftover after parsing attributes in process `syz.0.183'. [ 45.207676][ T4493] sch_tbf: burst 88 is lower than device veth3 mtu (1514) ! [ 45.215504][ T4510] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 45.222768][ T4510] IPv6: NLM_F_CREATE should be set when creating new route [ 45.249034][ T4514] loop1: detected capacity change from 0 to 512 [ 45.281612][ T29] audit: type=1400 audit(1723124729.903:467): avc: denied { bind } for pid=4517 comm="syz.3.190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 45.312707][ T4514] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 45.320764][ T4514] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 45.342826][ T4514] System zones: 0-1, 15-15, 18-18, 34-34 [ 45.352485][ T3908] hsr_slave_0: left promiscuous mode [ 45.360016][ T4514] EXT4-fs (loop1): orphan cleanup on readonly fs [ 45.366748][ T3908] hsr_slave_1: left promiscuous mode [ 45.386732][ T3908] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 45.394203][ T3908] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 45.411740][ T4514] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=0 [ 45.423400][ T4514] EXT4-fs warning (device loop1): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 45.437987][ T4514] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 45.444840][ T4514] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.188: bad orphan inode 16 [ 45.445091][ T3908] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 45.454846][ T4514] ext4_test_bit(bit=15, block=18) = 1 [ 45.462300][ T3908] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 45.467597][ T4514] is_bad_inode(inode)=0 [ 45.467607][ T4514] NEXT_ORPHAN(inode)=0 [ 45.467614][ T4514] max_ino=32 [ 45.467619][ T4514] i_nlink=2 [ 45.469411][ T4514] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 45.506339][ T3908] veth1_macvtap: left promiscuous mode [ 45.511880][ T3908] veth0_macvtap: left promiscuous mode [ 45.517746][ T3908] veth1_vlan: left promiscuous mode [ 45.523043][ T3908] veth0_vlan: left promiscuous mode [ 45.652093][ T3908] team0 (unregistering): Port device team_slave_1 removed [ 45.665589][ T3908] team0 (unregistering): Port device team_slave_0 removed [ 45.761589][ T29] audit: type=1400 audit(1723124730.383:468): avc: denied { read write } for pid=4549 comm="syz.0.193" name="ppp" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 45.830565][ T29] audit: type=1400 audit(1723124730.413:469): avc: denied { open } for pid=4549 comm="syz.0.193" path="/dev/ppp" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 45.869478][ T4456] chnl_net:caif_netlink_parms(): no params data found [ 45.893148][ T3735] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.965692][ T4578] loop1: detected capacity change from 0 to 2048 [ 45.974610][ T4456] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.981801][ T4456] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.994716][ T4578] EXT4-fs: Ignoring removed orlov option [ 46.000836][ T4456] bridge_slave_0: entered allmulticast mode [ 46.008833][ T29] audit: type=1400 audit(1723124730.623:470): avc: denied { ioctl } for pid=4581 comm="syz.3.197" path="socket:[6735]" dev="sockfs" ino=6735 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 46.019433][ T4582] loop3: detected capacity change from 0 to 1024 [ 46.033152][ T29] audit: type=1400 audit(1723124730.623:471): avc: denied { bind } for pid=4581 comm="syz.3.197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 46.040184][ T4456] bridge_slave_0: entered promiscuous mode [ 46.068062][ T4456] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.072903][ T29] audit: type=1400 audit(1723124730.693:472): avc: denied { read } for pid=4559 comm="syz.0.194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 46.075161][ T4456] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.105033][ T4578] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.115099][ T4456] bridge_slave_1: entered allmulticast mode [ 46.125337][ T4456] bridge_slave_1: entered promiscuous mode [ 46.138364][ T29] audit: type=1400 audit(1723124730.753:473): avc: denied { create } for pid=4594 comm="syz.2.198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 46.160128][ T29] audit: type=1400 audit(1723124730.763:474): avc: denied { sys_admin } for pid=4594 comm="syz.2.198" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 46.223617][ T3735] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.250582][ T4456] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.265530][ T4456] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.322560][ T4610] netlink: zone id is out of range [ 46.345036][ T4610] netlink: zone id is out of range [ 46.364926][ T4610] netlink: zone id is out of range [ 46.370259][ T4610] netlink: zone id is out of range [ 46.375683][ T4610] netlink: zone id is out of range [ 46.380884][ T4610] netlink: zone id is out of range [ 46.386009][ T4610] netlink: zone id is out of range [ 46.391167][ T4610] netlink: zone id is out of range [ 46.396382][ T4610] netlink: zone id is out of range [ 46.401564][ T4610] netlink: zone id is out of range [ 46.413656][ T4456] team0: Port device team_slave_0 added [ 46.424415][ T4618] netlink: 56 bytes leftover after parsing attributes in process `syz.0.203'. [ 46.434134][ T4456] team0: Port device team_slave_1 added [ 46.495095][ T4456] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.502099][ T4456] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.528065][ T4456] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.585082][ T4456] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.592081][ T4456] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.618343][ T4456] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.651516][ T4638] netlink: 44 bytes leftover after parsing attributes in process `syz.3.207'. [ 46.709277][ T4456] hsr_slave_0: entered promiscuous mode [ 46.715503][ T4456] hsr_slave_1: entered promiscuous mode [ 46.721729][ T4456] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.729303][ T4456] Cannot create hsr debugfs directory [ 46.784626][ T4648] loop0: detected capacity change from 0 to 512 [ 46.820843][ T4648] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.850009][ T4648] ext4 filesystem being mounted at /52/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.889370][ T4658] netlink: 'syz.3.211': attribute type 4 has an invalid length. [ 46.901440][ T4661] loop1: detected capacity change from 0 to 764 [ 46.912068][ T4661] iso9660: Unknown parameter 'ÿÿÿÿÿÿ18446744073709551615' [ 46.935885][ T4661] loop1: detected capacity change from 0 to 128 [ 46.962679][ T4666] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 3, id = 0 [ 46.973758][ T4669] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 3, id = 2 [ 46.985076][ T4670] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 3, id = 3 [ 46.995753][ T4668] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 3, id = 1 [ 47.143377][ T4678] loop3: detected capacity change from 0 to 764 [ 47.171604][ T3265] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.372763][ T4456] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 47.420631][ T4456] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 47.457947][ T4456] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 47.499536][ T4456] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 47.604876][ T4456] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.639570][ T4456] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.659460][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.666616][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.698474][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.705637][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.898626][ T4456] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.212597][ T4456] veth0_vlan: entered promiscuous mode [ 48.241245][ T4456] veth1_vlan: entered promiscuous mode [ 48.284471][ T4456] veth0_macvtap: entered promiscuous mode [ 48.296659][ T4456] veth1_macvtap: entered promiscuous mode [ 48.332459][ T4456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.342967][ T4456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.352809][ T4456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.363394][ T4456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.373261][ T4456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.383730][ T4456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.393594][ T4456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.404133][ T4456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.416612][ T4456] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.442843][ T4456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.453476][ T4456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.463402][ T4456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.473868][ T4456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.483769][ T4456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.494897][ T4456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.504760][ T4456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.515550][ T4456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.570777][ T4456] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.618787][ T4456] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.627605][ T4456] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.632261][ T8] IPVS: starting estimator thread 0... [ 48.636332][ T4456] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.650005][ T4775] loop1: detected capacity change from 0 to 128 [ 48.650465][ T4456] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.677090][ T4775] vfat: Unknown parameter './file0' [ 48.730050][ T4785] IPVS: using max 2160 ests per chain, 108000 per kthread [ 48.809378][ T4787] loop3: detected capacity change from 0 to 128 [ 48.970463][ T4787] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 49.130420][ T4787] ext4 filesystem being mounted at /12/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 49.342800][ T4824] loop2: detected capacity change from 0 to 512 [ 49.400009][ T4824] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 49.408498][ T4824] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 49.461196][ T4828] loop0: detected capacity change from 0 to 1764 [ 49.467747][ T4828] iso9660: Unknown parameter 'ÿÓ7ò'Û8íÅAñ¦â‰ñåª [ 49.467747][ T4828] PIŽèð¦GlTF5h' [ 49.522359][ T4828] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.529460][ T4828] netlink: 8 bytes leftover after parsing attributes in process `syz.0.226'. [ 49.802122][ T4863] loop4: detected capacity change from 0 to 4096 [ 49.827045][ T4863] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.922878][ T4456] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.952584][ T4102] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 50.000920][ T4883] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 50.144275][ T29] kauditd_printk_skb: 19 callbacks suppressed [ 50.144290][ T29] audit: type=1400 audit(1723124734.763:494): avc: denied { create } for pid=4892 comm="syz.2.239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 50.172138][ T4902] netlink: 'syz.4.241': attribute type 13 has an invalid length. [ 50.206577][ T29] audit: type=1326 audit(1723124734.813:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4901 comm="syz.4.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95123e79f9 code=0x7ffc0000 [ 50.230648][ T29] audit: type=1326 audit(1723124734.813:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4901 comm="syz.4.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f95123e79f9 code=0x7ffc0000 [ 50.230683][ T29] audit: type=1326 audit(1723124734.813:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4901 comm="syz.4.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95123e79f9 code=0x7ffc0000 [ 50.230715][ T29] audit: type=1326 audit(1723124734.813:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4901 comm="syz.4.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f95123e9817 code=0x7ffc0000 [ 50.230763][ T29] audit: type=1326 audit(1723124734.813:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4901 comm="syz.4.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f95123e978c code=0x7ffc0000 [ 50.230793][ T29] audit: type=1326 audit(1723124734.813:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4901 comm="syz.4.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f95123e96c4 code=0x7ffc0000 [ 50.230869][ T29] audit: type=1326 audit(1723124734.813:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4901 comm="syz.4.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f95123e96c4 code=0x7ffc0000 [ 50.230899][ T29] audit: type=1326 audit(1723124734.813:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4901 comm="syz.4.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f95123e668a code=0x7ffc0000 [ 50.230923][ T29] audit: type=1326 audit(1723124734.813:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4901 comm="syz.4.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95123e79f9 code=0x7ffc0000 [ 50.512041][ T4916] netlink: 20 bytes leftover after parsing attributes in process `syz.4.244'. [ 50.549153][ T4919] loop2: detected capacity change from 0 to 128 [ 50.927748][ T4941] netlink: 8 bytes leftover after parsing attributes in process `syz.4.250'. [ 50.953280][ T4943] loop3: detected capacity change from 0 to 128 [ 50.994229][ T4943] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 51.012639][ T4947] loop1: detected capacity change from 0 to 128 [ 51.038138][ T4947] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 51.040217][ T4943] ext4 filesystem being mounted at /18/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 51.071616][ T4947] ext4 filesystem being mounted at /35/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 51.143703][ T3735] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 51.214193][ T4102] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 51.292153][ T4958] loop3: detected capacity change from 0 to 128 [ 51.323574][ T4958] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 51.346668][ T4958] ext4 filesystem being mounted at /19/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 51.413743][ T4958] xt_bpf: check failed: parse error [ 51.419085][ T3335] IPVS: starting estimator thread 0... [ 51.427016][ T4967] loop0: detected capacity change from 0 to 512 [ 51.473841][ T4102] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 51.483669][ T4967] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 51.492504][ T4967] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 51.511481][ T4968] IPVS: using max 2448 ests per chain, 122400 per kthread [ 51.529352][ T4967] System zones: 0-1, 15-15, 18-18, 34-34 [ 51.539953][ T4967] EXT4-fs (loop0): orphan cleanup on readonly fs [ 51.562689][ T4967] EXT4-fs warning (device loop0): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 51.577673][ T4967] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 51.645103][ T4967] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.256: bad orphan inode 16 [ 51.670301][ T4967] ext4_test_bit(bit=15, block=18) = 1 [ 51.675711][ T4967] is_bad_inode(inode)=0 [ 51.678828][ T4981] loop3: detected capacity change from 0 to 512 [ 51.679912][ T4967] NEXT_ORPHAN(inode)=0 [ 51.690292][ T4967] max_ino=32 [ 51.693493][ T4967] i_nlink=2 [ 51.703549][ T4981] EXT4-fs (loop3): blocks per group (95) and clusters per group (32768) inconsistent [ 51.713794][ T4967] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 51.756103][ T4967] capability: warning: `syz.0.256' uses deprecated v2 capabilities in a way that may be insecure [ 51.832618][ T3265] EXT4-fs error (device loop0): ext4_ext_check_inode:520: inode #13: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic f300, entries 1, max 4(0), depth 0(0) [ 51.871065][ T4996] loop4: detected capacity change from 0 to 1764 [ 51.878158][ T3265] EXT4-fs error (device loop0): ext4_ext_check_inode:520: inode #13: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic f300, entries 1, max 4(0), depth 0(0) [ 51.900554][ T4996] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 51.916701][ T4996] ISOFS: unable to read i-node block [ 51.921275][ T4993] Illegal XDP return value 4294967274 on prog (id 164) dev N/A, expect packet loss! [ 51.922111][ T4996] isofs_fill_super: get root inode failed [ 52.032490][ T3265] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.047750][ T3901] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.096837][ T5011] loop4: detected capacity change from 0 to 2048 [ 52.118974][ T3901] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.134512][ T5014] netlink: 12 bytes leftover after parsing attributes in process `syz.1.272'. [ 52.164854][ T5011] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.207367][ T3901] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.242532][ T4456] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.311007][ T3901] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.504892][ T3901] bridge_slave_1: left allmulticast mode [ 52.510673][ T3901] bridge_slave_1: left promiscuous mode [ 52.516457][ T3901] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.551657][ T3901] bridge_slave_0: left allmulticast mode [ 52.557334][ T3901] bridge_slave_0: left promiscuous mode [ 52.563119][ T3901] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.775295][ T3901] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 52.792663][ T3901] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 52.817164][ T3901] bond0 (unregistering): Released all slaves [ 52.838829][ T5061] block device autoloading is deprecated and will be removed. [ 52.879568][ T5063] loop2: detected capacity change from 0 to 128 [ 52.889356][ T5061] syz.1.272: attempt to access beyond end of device [ 52.889356][ T5061] md102: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 52.920481][ T3901] IPVS: stopping master sync thread 4670 ... [ 52.936767][ T3901] IPVS: stopping master sync thread 4669 ... [ 52.957930][ T3901] IPVS: stopping master sync thread 4668 ... [ 52.989688][ T3901] IPVS: stopping master sync thread 4666 ... [ 53.015670][ T3901] hsr_slave_0: left promiscuous mode [ 53.033410][ T3901] hsr_slave_1: left promiscuous mode [ 53.069371][ T3901] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 53.076881][ T3901] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 53.088493][ T5074] loop4: detected capacity change from 0 to 1024 [ 53.116957][ T3901] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 53.124492][ T3901] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 53.143163][ T5074] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.157072][ T5090] EXT4-fs error (device loop4): ext4_expand_extra_isize_ea:2792: inode #12: comm syz.4.279: corrupted in-inode xattr: bad magic number in in-inode xattr [ 53.174060][ T5090] EXT4-fs (loop4): Remounting filesystem read-only [ 53.188995][ T3901] veth1_macvtap: left promiscuous mode [ 53.194653][ T3901] veth0_macvtap: left promiscuous mode [ 53.200420][ T3901] veth1_vlan: left promiscuous mode [ 53.205971][ T3901] veth0_vlan: left promiscuous mode [ 53.211100][ T5094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.234276][ T5094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.245118][ T4456] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.287810][ T5103] loop4: detected capacity change from 0 to 1024 [ 53.305524][ T5103] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.371973][ T3901] team0 (unregistering): Port device team_slave_1 removed [ 53.385474][ T3901] team0 (unregistering): Port device team_slave_0 removed [ 53.435573][ T5017] chnl_net:caif_netlink_parms(): no params data found [ 53.479794][ T5108] netlink: 24 bytes leftover after parsing attributes in process `syz.1.284'. [ 53.491339][ T5108] loop1: detected capacity change from 0 to 256 [ 53.505753][ T5108] FAT-fs (loop1): Directory bread(block 64) failed [ 53.512591][ T5108] FAT-fs (loop1): Directory bread(block 65) failed [ 53.519582][ T5108] FAT-fs (loop1): Directory bread(block 66) failed [ 53.526878][ T5108] FAT-fs (loop1): Directory bread(block 67) failed [ 53.536542][ T5108] FAT-fs (loop1): Directory bread(block 68) failed [ 53.550350][ T5108] FAT-fs (loop1): Directory bread(block 69) failed [ 53.562924][ T5108] FAT-fs (loop1): Directory bread(block 70) failed [ 53.563542][ T4456] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.570322][ T5017] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.585667][ T5017] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.589780][ T5108] FAT-fs (loop1): Directory bread(block 71) failed [ 53.593289][ T5017] bridge_slave_0: entered allmulticast mode [ 53.602788][ T5108] FAT-fs (loop1): Directory bread(block 72) failed [ 53.605827][ T5017] bridge_slave_0: entered promiscuous mode [ 53.618980][ T5017] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.626095][ T5017] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.633293][ T5017] bridge_slave_1: entered allmulticast mode [ 53.639739][ T5017] bridge_slave_1: entered promiscuous mode [ 53.642434][ T5108] FAT-fs (loop1): Directory bread(block 73) failed [ 53.681271][ T5017] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.695785][ T5017] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.726749][ T5017] team0: Port device team_slave_0 added [ 53.734270][ T5017] team0: Port device team_slave_1 added [ 53.803180][ T5017] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.810205][ T5017] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.836317][ T5017] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.863374][ T5017] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.870481][ T5017] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.896555][ T5017] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.911498][ T5148] loop3: detected capacity change from 0 to 512 [ 53.933320][ T5148] EXT4-fs: Ignoring removed oldalloc option [ 53.939278][ T5148] ext4: Bad value for 'journal_dev' [ 53.974151][ T5133] loop1: detected capacity change from 0 to 512 [ 53.984276][ T5133] EXT4-fs (loop1): blocks per group (95) and clusters per group (32768) inconsistent [ 53.996036][ T5150] loop4: detected capacity change from 0 to 128 [ 54.006758][ T5150] vfat: Unknown parameter 'utf`Nt‡ÙçþN8' [ 54.019416][ T5150] SELinux: Context system_ is not valid (left unmapped). [ 54.050374][ T5017] hsr_slave_0: entered promiscuous mode [ 54.072260][ T5017] hsr_slave_1: entered promiscuous mode [ 54.088644][ T5017] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.096623][ T5017] Cannot create hsr debugfs directory [ 54.110785][ T5159] loop1: detected capacity change from 0 to 2048 [ 54.145440][ T5159] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.274376][ T5157] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 54.316053][ T5172] loop3: detected capacity change from 0 to 2048 [ 54.343250][ T5172] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.349454][ T5157] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 54.367608][ T5157] EXT4-fs (loop1): This should not happen!! Data will be lost [ 54.367608][ T5157] [ 54.377362][ T5157] EXT4-fs (loop1): Total free blocks count 0 [ 54.383529][ T5157] EXT4-fs (loop1): Free/Dirty block details [ 54.389482][ T5157] EXT4-fs (loop1): free_blocks=2415919104 [ 54.395272][ T5157] EXT4-fs (loop1): dirty_blocks=32 [ 54.400441][ T5157] EXT4-fs (loop1): Block reservation details [ 54.406456][ T5157] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 54.437384][ T36] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 54.451533][ C0] net_ratelimit: 253 callbacks suppressed [ 54.451545][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 54.556947][ T5188] loop1: detected capacity change from 0 to 2048 [ 54.574489][ T4102] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.600416][ T5188] loop1: p2 < > [ 54.717516][ T5199] loop3: detected capacity change from 0 to 512 [ 54.772485][ T5199] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.797508][ T5017] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 54.824100][ T5199] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.847135][ T5017] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 54.883095][ T5017] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 54.907084][ T5017] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 55.031523][ T5017] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.071771][ T5017] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.115112][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.122237][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.152262][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.159409][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.216492][ T5017] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.343182][ T5017] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.527123][ T5017] veth0_vlan: entered promiscuous mode [ 55.558022][ T4102] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.567032][ T5017] veth1_vlan: entered promiscuous mode [ 55.600715][ T5017] veth0_macvtap: entered promiscuous mode [ 55.620419][ T5017] veth1_macvtap: entered promiscuous mode [ 55.642484][ T5017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.653197][ T5017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.663044][ T5017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.673597][ T5017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.683544][ T5017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.694013][ T5017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.703935][ T5017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.714526][ T5017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.729735][ T5017] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.740208][ T5017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.750715][ T5017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.760633][ T5017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.771128][ T5017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.781025][ T5017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.791578][ T5017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.801435][ T5017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.811965][ T5017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.854790][ T5017] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.880330][ T5017] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.889077][ T5017] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.898102][ T5017] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.906890][ T5017] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.921929][ T5279] netlink: 'syz.3.301': attribute type 3 has an invalid length. [ 55.961034][ T29] kauditd_printk_skb: 46 callbacks suppressed [ 55.961050][ T29] audit: type=1400 audit(1723124740.583:549): avc: denied { create } for pid=5156 comm="syz.4.292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 56.000679][ T5279] loop3: detected capacity change from 0 to 1764 [ 56.020614][ T5279] iso9660: Unknown parameter 'laxed' [ 56.049097][ T29] audit: type=1400 audit(1723124740.583:550): avc: denied { write } for pid=5156 comm="syz.4.292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 56.109132][ T5297] loop0: detected capacity change from 0 to 512 [ 56.138660][ T5297] EXT4-fs: Ignoring removed i_version option [ 56.174135][ T5297] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.207715][ T5297] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.266071][ T5297] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 56.331086][ T5297] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 2 with error 28 [ 56.343642][ T5297] EXT4-fs (loop0): This should not happen!! Data will be lost [ 56.343642][ T5297] [ 56.353307][ T29] audit: type=1326 audit(1723124740.963:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5296 comm="syz.0.271" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe11a8179f9 code=0x0 [ 56.376196][ T5297] EXT4-fs (loop0): Total free blocks count 0 [ 56.382497][ T5297] EXT4-fs (loop0): Free/Dirty block details [ 56.388404][ T5297] EXT4-fs (loop0): free_blocks=65280 [ 56.393803][ T5297] EXT4-fs (loop0): dirty_blocks=2 [ 56.398894][ T5297] EXT4-fs (loop0): Block reservation details [ 56.404922][ T5297] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 56.440353][ T29] audit: type=1400 audit(1723124741.063:552): avc: denied { bind } for pid=5317 comm="syz.3.307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 56.447882][ T5130] loop2: detected capacity change from 0 to 512 [ 56.483876][ T5297] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.497833][ T5297] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.504959][ T5297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.514540][ T29] audit: type=1400 audit(1723124741.103:553): avc: denied { read } for pid=5296 comm="syz.0.271" dev="sockfs" ino=9171 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 56.536159][ T29] audit: type=1400 audit(1723124741.103:554): avc: denied { rename } for pid=5296 comm="syz.0.271" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 56.559189][ T5130] ext4: Unknown parameter '' [ 56.589817][ T29] audit: type=1326 audit(1723124741.203:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5334 comm="syz.3.309" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faa810379f9 code=0x0 [ 56.668964][ T5349] loop4: detected capacity change from 0 to 2048 [ 56.691970][ T5349] loop4: detected capacity change from 0 to 512 [ 56.702567][ T5349] EXT4-fs: dax option not supported [ 56.709390][ T29] audit: type=1400 audit(1723124741.323:556): avc: denied { execute } for pid=5334 comm="syz.3.309" path="/35/hugetlb.2MB.rsvd.usage_in_bytes" dev="tmpfs" ino=214 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 56.755714][ T5349] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 56.833013][ T29] audit: type=1400 audit(1723124741.453:557): avc: denied { execute } for pid=5348 comm="syz.4.311" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=10261 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 56.888354][ T5297] syz.0.271 (5297) used greatest stack depth: 10008 bytes left [ 56.911164][ T5017] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.950202][ T5370] netlink: 4 bytes leftover after parsing attributes in process `syz.0.312'. [ 56.959232][ T5370] tc_dump_action: action bad kind [ 56.975835][ T5372] x_tables: duplicate underflow at hook 1 [ 56.991483][ T29] audit: type=1400 audit(1723124741.613:558): avc: denied { map } for pid=5369 comm="syz.0.312" path="socket:[10275]" dev="sockfs" ino=10275 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 57.043457][ T5377] 9pnet_fd: Insufficient options for proto=fd [ 57.055791][ T5377] netlink: 'syz.1.315': attribute type 5 has an invalid length. [ 57.063515][ T5377] netlink: 16 bytes leftover after parsing attributes in process `syz.1.315'. [ 57.094870][ T5377] netlink: 'syz.1.315': attribute type 1 has an invalid length. [ 57.102628][ T5377] netlink: 'syz.1.315': attribute type 2 has an invalid length. [ 57.110416][ T5377] netlink: 48 bytes leftover after parsing attributes in process `syz.1.315'. [ 57.124216][ T5380] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5380 comm=syz.1.315 [ 57.426866][ T5419] loop4: detected capacity change from 0 to 128 [ 57.494831][ T5422] loop3: detected capacity change from 0 to 512 [ 57.512060][ T5420] loop1: detected capacity change from 0 to 4096 [ 57.535806][ T5420] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.568638][ T5428] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5428 comm=syz.4.327 [ 57.606057][ T5428] netlink: 24 bytes leftover after parsing attributes in process `syz.4.327'. [ 57.632045][ T35] kernel write not supported for file /vcsa1 (pid: 35 comm: kworker/1:1) [ 57.651826][ T3735] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.831874][ T5433] sctp: [Deprecated]: syz.1.329 (pid 5433) Use of int in max_burst socket option. [ 57.831874][ T5433] Use struct sctp_assoc_value instead [ 58.024181][ T5442] loop0: detected capacity change from 0 to 512 [ 58.030854][ T5442] EXT4-fs: Ignoring removed nobh option [ 58.036760][ T5442] ext4: Unknown parameter 'smackfsdef' [ 58.093774][ T5450] netlink: 4 bytes leftover after parsing attributes in process `syz.1.334'. [ 58.136016][ T5452] loop0: detected capacity change from 0 to 8192 [ 58.144400][ T5452] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 58.296227][ T5463] loop3: detected capacity change from 0 to 512 [ 58.325557][ T5463] ext4 filesystem being mounted at /38/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.513021][ T5474] EXT4-fs error (device loop3): ext4_add_entry:2435: inode #2: comm syz.3.338: Directory hole found for htree leaf block 0 [ 58.542563][ T5478] xt_CT: You must specify a L4 protocol and not use inversions on it [ 58.611492][ T5482] loop4: detected capacity change from 0 to 512 [ 58.633498][ T5482] EXT4-fs (loop4): VFS: Can't find ext4 filesystem [ 58.720035][ T5487] loop1: detected capacity change from 0 to 512 [ 58.731335][ T5487] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 58.739471][ T5487] EXT4-fs (loop1): orphan cleanup on readonly fs [ 58.747258][ T5487] EXT4-fs warning (device loop1): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 58.752121][ T5489] vhci_hcd: default hub control req: 0017 v0000 i0000 l0 [ 58.762866][ T5487] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 58.773814][ T5490] loop3: detected capacity change from 0 to 512 [ 58.788918][ T5490] EXT4-fs: Ignoring removed nobh option [ 58.789213][ T5487] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2978: inode #16: comm syz.1.343: corrupted xattr block 31: invalid header [ 58.811866][ T5487] EXT4-fs warning (device loop1): ext4_evict_inode:271: xattr delete (err -117) [ 58.822529][ T5487] EXT4-fs (loop1): 1 orphan inode deleted [ 58.853900][ T5490] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 58.874999][ T5490] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #13: comm syz.3.342: casefold flag without casefold feature [ 58.899104][ T5494] netlink: 64 bytes leftover after parsing attributes in process `syz.1.344'. [ 58.917354][ T5490] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.342: couldn't read orphan inode 13 (err -117) [ 58.951303][ T5495] netlink: 8 bytes leftover after parsing attributes in process `syz.2.345'. [ 59.008244][ T5501] loop3: detected capacity change from 0 to 512 [ 59.042474][ T5501] EXT4-fs (loop3): orphan cleanup on readonly fs [ 59.047449][ T5506] loop0: detected capacity change from 0 to 512 [ 59.050360][ T5501] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.347: bg 0: block 248: padding at end of block bitmap is not set [ 59.071505][ T5501] EXT4-fs error (device loop3): ext4_acquire_dquot:6848: comm syz.3.347: Failed to acquire dquot type 1 [ 59.083587][ T5501] EXT4-fs (loop3): 1 truncate cleaned up [ 59.086423][ T5506] ext4 filesystem being mounted at /6/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 59.185819][ T5520] loop2: detected capacity change from 0 to 128 [ 59.192526][ T5520] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 59.212604][ T36] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 59.230288][ T5523] x_tables: unsorted underflow at hook 2 [ 59.264444][ T5523] loop2: detected capacity change from 0 to 8192 [ 59.309987][ T5523] loop2: p1 p2 p3 p4 [ 59.314205][ T5523] loop2: p1 size 108922248 extends beyond EOD, truncated [ 59.322252][ T5523] loop2: p2 start 861536256 is beyond EOD, truncated [ 59.328958][ T5523] loop2: p3 start 851968 is beyond EOD, truncated [ 59.335562][ T5523] loop2: p4 size 65536 extends beyond EOD, truncated [ 59.354999][ C0] operation not supported error, dev loop2, sector 0 op 0x9:(WRITE_ZEROES) flags 0x10000800 phys_seg 0 prio class 0 [ 59.413923][ T5531] xt_TPROXY: Can be used only with -p tcp or -p udp [ 59.434742][ T5533] loop2: detected capacity change from 0 to 128 [ 59.441441][ T5533] ext2: Unknown parameter 'audit' [ 59.447474][ T5533] SELinux: Context system_u:object_r:dhcp_sta is not valid (left unmapped). [ 59.472707][ T5535] (unnamed net_device) (uninitialized): option arp_validate: invalid value (8192) [ 59.533422][ T5539] netlink: 8 bytes leftover after parsing attributes in process `syz.4.358'. [ 59.586019][ T5551] loop4: detected capacity change from 0 to 1024 [ 59.592793][ T5551] EXT4-fs: Ignoring removed orlov option [ 59.598564][ T5551] EXT4-fs: Ignoring removed nomblk_io_submit option [ 59.822958][ T5501] syz.3.347 (5501) used greatest stack depth: 9416 bytes left [ 59.842723][ T5563] loop4: detected capacity change from 0 to 512 [ 59.878059][ T5563] EXT4-fs error (device loop4): ext4_find_inline_data_nolock:164: inode #15: comm syz.4.364: inline data xattr refers to an external xattr inode [ 59.897423][ T5563] EXT4-fs (loop4): Remounting filesystem read-only [ 59.913020][ T5563] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 60.023307][ T5569] netlink: 8 bytes leftover after parsing attributes in process `syz.1.366'. [ 60.295523][ T5577] loop2: detected capacity change from 0 to 256 [ 60.303457][ T5577] FAT-fs (loop2): bogus sectors per cluster 255 [ 60.309803][ T5577] FAT-fs (loop2): Can't find a valid FAT filesystem [ 60.391783][ T5578] netlink: 4 bytes leftover after parsing attributes in process `syz.2.369'. [ 60.885350][ T5583] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 61.080642][ T29] kauditd_printk_skb: 51 callbacks suppressed [ 61.080660][ T29] audit: type=1400 audit(1723124745.513:608): avc: denied { map } for pid=5579 comm="syz.3.365" path="socket:[10157]" dev="sockfs" ino=10157 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 61.177265][ T36] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.236632][ T29] audit: type=1400 audit(1723124745.853:609): avc: denied { module_request } for pid=5587 comm="syz.1.373" kmod="net-pf-0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 61.277621][ T5592] loop2: detected capacity change from 0 to 1024 [ 61.289571][ T29] audit: type=1400 audit(1723124745.903:610): avc: denied { read } for pid=5599 comm="syz.4.375" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 61.301752][ T5588] sctp: [Deprecated]: syz.1.373 (pid 5588) Use of struct sctp_assoc_value in delayed_ack socket option. [ 61.301752][ T5588] Use struct sctp_sack_info instead [ 61.313785][ T29] audit: type=1400 audit(1723124745.903:611): avc: denied { open } for pid=5599 comm="syz.4.375" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 61.357538][ T36] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.370012][ T29] audit: type=1400 audit(1723124745.973:612): avc: denied { ioctl } for pid=5599 comm="syz.4.375" path="socket:[10663]" dev="sockfs" ino=10663 ioctlcmd=0x534e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 61.384531][ T29] audit: type=1400 audit(1723124746.003:613): avc: denied { search } for pid=2944 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 61.431383][ T36] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.480439][ T36] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.494731][ T5612] loop4: detected capacity change from 0 to 512 [ 61.514029][ T5612] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #13: comm syz.4.378: attempt to clear invalid blocks 1 len 1 [ 61.583955][ T5612] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.378: bg 0: block 343: padding at end of block bitmap is not set [ 61.608271][ T5628] loop1: detected capacity change from 0 to 1024 [ 61.614820][ T5612] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 61.624505][ T5628] /dev/loop1: Can't open blockdev [ 61.642182][ T5612] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.378: invalid indirect mapped block 1819239214 (level 0) [ 61.670855][ T5612] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.378: invalid indirect mapped block 1819239214 (level 1) [ 61.688409][ T5612] EXT4-fs (loop4): 1 truncate cleaned up [ 61.700093][ T5612] EXT4-fs error (device loop4): ext4_find_dest_de:2067: inode #2: block 13: comm syz.4.378: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 61.722870][ T5612] EXT4-fs error (device loop4): ext4_find_dest_de:2067: inode #2: block 13: comm syz.4.378: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 61.757527][ T36] bridge_slave_1: left allmulticast mode [ 61.763346][ T36] bridge_slave_1: left promiscuous mode [ 61.768988][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.857669][ T36] bridge_slave_0: left allmulticast mode [ 61.863574][ T36] bridge_slave_0: left promiscuous mode [ 61.865573][ T5647] loop4: detected capacity change from 0 to 512 [ 61.869342][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.884770][ T5650] loop3: detected capacity change from 0 to 512 [ 61.901334][ T5650] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 61.920731][ T5650] EXT4-fs (loop3): invalid journal inode [ 61.926442][ T5650] EXT4-fs (loop3): can't get journal size [ 61.939079][ T5647] ext4 filesystem being mounted at /43/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.958605][ T5650] EXT4-fs (loop3): 1 truncate cleaned up [ 61.972818][ T5650] No source specified [ 61.973177][ T29] audit: type=1400 audit(1723124746.593:614): avc: denied { mounton } for pid=5649 comm="syz.3.386" path="/44/file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 62.021854][ T29] audit: type=1400 audit(1723124746.643:615): avc: denied { watch watch_reads } for pid=5649 comm="syz.3.386" path="/44/file0" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 62.037463][ T5665] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 3: comm syz.4.385: path /43/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 62.045717][ T29] audit: type=1400 audit(1723124746.643:616): avc: denied { listen } for pid=5645 comm="syz.4.385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 62.122237][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 62.133264][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 62.143771][ T36] bond0 (unregistering): Released all slaves [ 62.156405][ T5591] chnl_net:caif_netlink_parms(): no params data found [ 62.198373][ T5651] __nla_validate_parse: 4 callbacks suppressed [ 62.198393][ T5651] netlink: 8 bytes leftover after parsing attributes in process `syz.2.384'. [ 62.290968][ T36] hsr_slave_0: left promiscuous mode [ 62.302799][ T5677] loop3: detected capacity change from 0 to 1024 [ 62.309255][ T36] hsr_slave_1: left promiscuous mode [ 62.309539][ T5677] EXT4-fs: Ignoring removed orlov option [ 62.320443][ T5677] EXT4-fs: Ignoring removed nomblk_io_submit option [ 62.327277][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 62.334874][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 62.346448][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 62.354033][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 62.354939][ T29] audit: type=1326 audit(1723124746.973:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5679 comm="syz.1.390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febc67f79f9 code=0x7ffc0000 [ 62.390918][ T36] veth1_macvtap: left promiscuous mode [ 62.396430][ T36] veth0_macvtap: left promiscuous mode [ 62.402036][ T36] veth1_vlan: left promiscuous mode [ 62.407299][ T36] veth0_vlan: left promiscuous mode [ 62.416622][ T5677] No source specified [ 62.471730][ T5703] loop4: detected capacity change from 0 to 128 [ 62.507379][ T5705] sctp: [Deprecated]: syz.1.394 (pid 5705) Use of int in max_burst socket option. [ 62.507379][ T5705] Use struct sctp_assoc_value instead [ 62.525265][ T36] team0 (unregistering): Port device team_slave_1 removed [ 62.539667][ T36] team0 (unregistering): Port device team_slave_0 removed [ 62.593011][ T5684] vlan1: entered promiscuous mode [ 62.616645][ T5687] syzkaller0: entered promiscuous mode [ 62.622186][ T5687] syzkaller0: entered allmulticast mode [ 62.636110][ T5684] vlan1: left promiscuous mode [ 62.658250][ T5591] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.665476][ T5591] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.672944][ T5591] bridge_slave_0: entered allmulticast mode [ 62.679729][ T5591] bridge_slave_0: entered promiscuous mode [ 62.726452][ T5591] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.733715][ T5591] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.746869][ T5591] bridge_slave_1: entered allmulticast mode [ 62.750557][ T5725] loop2: detected capacity change from 0 to 2048 [ 62.757037][ T5591] bridge_slave_1: entered promiscuous mode [ 62.789853][ T5725] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #2: comm syz.2.397: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 3(3) [ 62.808565][ T5725] EXT4-fs (loop2): get root inode failed [ 62.814232][ T5725] EXT4-fs (loop2): mount failed [ 62.848713][ T5591] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.873581][ T5591] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.898119][ T5591] team0: Port device team_slave_0 added [ 62.905695][ T5591] team0: Port device team_slave_1 added [ 62.928416][ T5591] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.935518][ T5591] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.961475][ T5591] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.972996][ T5591] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.979952][ T5591] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.006190][ T5591] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.052769][ T5591] hsr_slave_0: entered promiscuous mode [ 63.059290][ T5591] hsr_slave_1: entered promiscuous mode [ 63.065515][ T5591] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.073464][ T5591] Cannot create hsr debugfs directory [ 63.079041][ T5751] netlink: 'syz.3.401': attribute type 5 has an invalid length. [ 63.416560][ T5591] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 63.431382][ T5591] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 63.443843][ T5591] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 63.471322][ T5591] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 63.517721][ T5591] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.524864][ T5591] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.532176][ T5801] loop1: detected capacity change from 0 to 8192 [ 63.532234][ T5591] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.545590][ T5591] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.586937][ T5810] loop2: detected capacity change from 0 to 1024 [ 63.609531][ T5810] EXT4-fs: Ignoring removed nomblk_io_submit option [ 63.619134][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.626472][ T5810] EXT4-fs: Mount option(s) incompatible with ext3 [ 63.642839][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.727961][ T5810] loop2: detected capacity change from 0 to 1024 [ 63.732527][ T5591] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.756147][ T5810] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (47082!=20869) [ 63.771692][ T5591] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.781374][ T5810] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 63.782373][ T5838] loop3: detected capacity change from 0 to 512 [ 63.803677][ T3333] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.806375][ T5810] JBD2: no valid journal superblock found [ 63.810897][ T3333] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.816597][ T5810] EXT4-fs (loop2): Could not load journal inode [ 63.848508][ T3333] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.855709][ T3333] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.874516][ T5838] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 63.897724][ T5838] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 63.909141][ T5838] EXT4-fs error (device loop3): __ext4_get_inode_loc:4436: comm syz.3.411: Invalid inode table block 0 in block_group 0 [ 63.922578][ T5838] EXT4-fs (loop3): get root inode failed [ 63.928342][ T5838] EXT4-fs (loop3): mount failed [ 64.002617][ T5838] loop3: detected capacity change from 0 to 4096 [ 64.013252][ T5591] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.164807][ T5591] veth0_vlan: entered promiscuous mode [ 64.180534][ T5591] veth1_vlan: entered promiscuous mode [ 64.220088][ T5591] veth0_macvtap: entered promiscuous mode [ 64.237404][ T5591] veth1_macvtap: entered promiscuous mode [ 64.250475][ T5591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.261003][ T5591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.270881][ T5591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.281360][ T5591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.291379][ T5591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.302027][ T5591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.312423][ T5591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.322885][ T5591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.335647][ T5591] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.348086][ T5591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.353100][ T5903] loop3: detected capacity change from 0 to 512 [ 64.358545][ T5591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.374656][ T5591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.380208][ T5903] loop3: detected capacity change from 0 to 512 [ 64.385164][ T5591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.400763][ T5899] loop2: detected capacity change from 0 to 128 [ 64.401284][ T5591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.418034][ T5591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.427961][ T5591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.438457][ T5591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.451238][ T5591] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.462498][ T5591] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.471637][ T5591] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.480821][ T5591] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.489751][ T5591] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.590410][ T5926] IPv6: NLM_F_CREATE should be specified when creating new route [ 64.619218][ T5931] loop1: detected capacity change from 0 to 128 [ 64.638190][ T5926] loop2: detected capacity change from 0 to 512 [ 64.644829][ T5933] 9pnet_virtio: no channels available for device [ 64.671692][ T5926] SELinux: Context system_u:object_r:audit_spool_t:s0 is not valid (left unmapped). [ 64.684724][ T5939] netlink: 8560 bytes leftover after parsing attributes in process `syz.1.425'. [ 64.836327][ T5952] loop2: detected capacity change from 0 to 512 [ 64.858118][ T5952] EXT4-fs (loop2): blocks per group (95) and clusters per group (32768) inconsistent [ 64.977541][ T5969] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 65.001559][ T5959] loop0: detected capacity change from 0 to 1024 [ 65.024900][ T5959] EXT4-fs: Ignoring removed i_version option [ 65.030996][ T5959] ext4: Unknown parameter 'audit' [ 65.060382][ T5972] loop2: detected capacity change from 0 to 8192 [ 65.064968][ T5959] loop0: detected capacity change from 0 to 512 [ 65.082193][ T5959] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.090534][ T5972] loop2: p1 p2 p3 p4[EZD] [ 65.097072][ T5972] loop2: p1 size 16128 extends beyond EOD, truncated [ 65.104502][ T5972] loop2: p2 size 2130728454 extends beyond EOD, truncated [ 65.112474][ T5972] loop2: p3 start 459039 is beyond EOD, truncated [ 65.118967][ T5972] loop2: p4 start 268437891 is beyond EOD, truncated [ 65.131226][ T5983] loop1: detected capacity change from 0 to 128 [ 65.137750][ T5983] vfat: Unknown parameter '00000000000000000000012' [ 65.304592][ T5996] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 65.765277][ T6000] loop4: detected capacity change from 0 to 512 [ 65.794265][ T6000] ext4 filesystem being mounted at /52/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 65.886258][ T6013] 9pnet_fd: Insufficient options for proto=fd [ 65.945963][ T6014] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(14) [ 65.952610][ T6014] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 65.960122][ T6014] vhci_hcd vhci_hcd.0: Device attached [ 65.967303][ T6014] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 65.978952][ T6014] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 65.988391][ T6014] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(20) [ 65.995019][ T6014] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 66.002704][ T6014] vhci_hcd vhci_hcd.0: Device attached [ 66.010148][ T6014] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 66.023941][ T6014] vhci_hcd vhci_hcd.0: pdev(1) rhport(5) sockfd(24) [ 66.030570][ T6014] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 66.038167][ T6014] vhci_hcd vhci_hcd.0: Device attached [ 66.061580][ T6023] netlink: 8 bytes leftover after parsing attributes in process `syz.2.447'. [ 66.062364][ T6014] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 66.096180][ T6025] loop3: detected capacity change from 0 to 128 [ 66.171665][ T4219] vhci_hcd: vhci_device speed not set [ 66.239922][ T4219] usb 3-1: new full-speed USB device number 2 using vhci_hcd [ 66.296070][ T29] kauditd_printk_skb: 158 callbacks suppressed [ 66.296083][ T29] audit: type=1400 audit(1723124751.024:776): avc: denied { connect } for pid=6041 comm="syz.2.451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 66.324439][ T6040] netlink: 12 bytes leftover after parsing attributes in process `syz.3.448'. [ 66.334841][ T29] audit: type=1326 audit(1723124751.065:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6024 comm="syz.3.448" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faa810379f9 code=0x0 [ 66.336708][ T6042] loop2: detected capacity change from 0 to 512 [ 66.368944][ T6042] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm syz.2.451: invalid block [ 66.381880][ T6042] EXT4-fs (loop2): Remounting filesystem read-only [ 66.388747][ T6042] EXT4-fs (loop2): 2 truncates cleaned up [ 66.395192][ T6042] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 66.551825][ T29] audit: type=1400 audit(1723124751.280:778): avc: denied { write } for pid=6046 comm="syz.2.453" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 66.964277][ T6050] netlink: 8 bytes leftover after parsing attributes in process `syz.3.454'. [ 67.187319][ T6013] 9pnet_fd: p9_fd_create_tcp (6013): problem connecting socket to 127.0.0.1 [ 67.187755][ T6018] vhci_hcd: connection closed [ 67.196041][ T6020] vhci_hcd: connection closed [ 67.196407][ T1638] vhci_hcd: stop threads [ 67.209754][ T1638] vhci_hcd: release socket [ 67.210350][ T6015] vhci_hcd: connection reset by peer [ 67.214163][ T1638] vhci_hcd: disconnect device [ 67.225096][ T1638] vhci_hcd: stop threads [ 67.229448][ T1638] vhci_hcd: release socket [ 67.233981][ T1638] vhci_hcd: disconnect device [ 67.247113][ T1638] vhci_hcd: stop threads [ 67.251407][ T1638] vhci_hcd: release socket [ 67.255865][ T1638] vhci_hcd: disconnect device [ 67.329179][ T6065] loop2: detected capacity change from 0 to 256 [ 67.336167][ T6065] vfat: Unknown parameter '0x0000000000000007' [ 67.343211][ T6065] netlink: 'syz.2.459': attribute type 1 has an invalid length. [ 67.362502][ T6065] netlink: 36 bytes leftover after parsing attributes in process `syz.2.459'. [ 67.390792][ T6071] netlink: 4 bytes leftover after parsing attributes in process `syz.2.461'. [ 67.422580][ T6071] loop2: detected capacity change from 0 to 4096 [ 67.431088][ T6071] EXT4-fs mount: 30 callbacks suppressed [ 67.431100][ T6071] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.450893][ T29] audit: type=1400 audit(1723124752.212:779): avc: denied { lock } for pid=6070 comm="syz.2.461" path="/95/file0/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 67.474013][ T29] audit: type=1400 audit(1723124752.212:780): avc: denied { lock } for pid=6070 comm="syz.2.461" path="/95/file0/cpuacct.usage_all" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 67.503719][ T6075] loop4: detected capacity change from 0 to 512 [ 67.513485][ T3263] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.513833][ T6075] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.462: bad orphan inode 1 [ 67.532667][ T6075] EXT4-fs (loop4): Remounting filesystem read-only [ 67.539840][ T6075] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.551963][ T6075] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 67.558925][ T6075] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.574166][ T29] audit: type=1400 audit(1723124752.335:781): avc: denied { create } for pid=6077 comm="syz.2.463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 67.588752][ T6075] loop4: detected capacity change from 0 to 512 [ 67.612763][ T6075] EXT4-fs: Ignoring removed i_version option [ 67.618853][ T6075] EXT4-fs: Ignoring removed nobh option [ 67.632920][ T6075] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.462: bad orphan inode 1 [ 67.643952][ T6075] EXT4-fs (loop4): Remounting filesystem read-only [ 67.651254][ T6075] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.664062][ T6075] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 67.671396][ T6075] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.831209][ T6087] loop3: detected capacity change from 0 to 2048 [ 67.878564][ T6097] netlink: 8 bytes leftover after parsing attributes in process `syz.3.466'. [ 67.902895][ T29] audit: type=1400 audit(1723124752.672:782): avc: denied { mounton } for pid=6100 comm="syz.3.467" path="/65/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 68.187211][ T6112] loop1: detected capacity change from 0 to 1024 [ 68.193802][ T6112] EXT4-fs: Ignoring removed nobh option [ 68.205661][ T6112] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.301147][ T3735] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.355944][ T29] audit: type=1400 audit(1723124753.132:783): avc: denied { sys_module } for pid=6128 comm="syz.4.474" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 68.377808][ T6126] loop1: detected capacity change from 0 to 2048 [ 68.397860][ T6126] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.446792][ T6142] loop4: detected capacity change from 0 to 8192 [ 68.457764][ T6142] program syz.4.475 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 68.477726][ T6144] vxcan1: tx drop: invalid da for name 0x0000000000000003 [ 68.535979][ T6144] netlink: 20 bytes leftover after parsing attributes in process `syz.2.476'. [ 68.547375][ T6147] netlink: 56 bytes leftover after parsing attributes in process `syz.0.477'. [ 68.563181][ T29] audit: type=1400 audit(1723124753.347:784): avc: denied { append } for pid=6143 comm="syz.2.476" name="pfkey" dev="proc" ino=4026532732 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 68.622490][ T29] audit: type=1400 audit(1723124753.398:785): avc: denied { connect } for pid=6125 comm="syz.1.472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 68.649463][ T6155] gretap0: entered promiscuous mode [ 68.658061][ T6155] macsec1: entered promiscuous mode [ 68.663376][ T6155] macsec1: entered allmulticast mode [ 68.668718][ T6155] gretap0: entered allmulticast mode [ 68.694540][ T6155] gretap0: left allmulticast mode [ 68.699702][ T6155] gretap0: left promiscuous mode [ 68.733894][ T6153] netlink: 8 bytes leftover after parsing attributes in process `syz.0.478'. [ 68.754785][ T6150] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.472: bg 0: block 234: padding at end of block bitmap is not set [ 68.771300][ T6150] EXT4-fs (loop1): Remounting filesystem read-only [ 68.845027][ T6126] EXT4-fs (loop1): ext4_do_writepages: jbd2_start: 9223372036854775807 pages, ino 18; err -5 [ 68.914044][ T6171] loop0: detected capacity change from 0 to 512 [ 68.917974][ T6173] loop3: detected capacity change from 0 to 512 [ 68.987895][ T6173] EXT4-fs: Ignoring removed mblk_io_submit option [ 69.000995][ T3735] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.015275][ T6173] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 69.048922][ T6173] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.485: corrupted in-inode xattr: e_value out of bounds [ 69.063776][ T6173] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.485: couldn't read orphan inode 15 (err -117) [ 69.086862][ T6173] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.559491][ T6200] netlink: 8 bytes leftover after parsing attributes in process `syz.0.491'. [ 69.602655][ T4102] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.644956][ T6212] 9pnet_fd: Insufficient options for proto=fd [ 69.652360][ T6208] loop0: detected capacity change from 0 to 1024 [ 69.663394][ T6212] loop3: detected capacity change from 0 to 512 [ 69.685056][ T6212] EXT4-fs: Ignoring removed oldalloc option [ 69.709294][ T6208] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.732891][ T6212] EXT4-fs: Ignoring removed i_version option [ 69.739599][ T6223] loop1: detected capacity change from 0 to 512 [ 69.750455][ T6223] EXT4-fs (loop1): blocks per group (95) and clusters per group (32768) inconsistent [ 69.753099][ T6208] EXT4-fs (loop0): Online resizing not supported with bigalloc [ 69.768948][ T6212] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 69.792959][ T6225] loop2: detected capacity change from 0 to 512 [ 69.800130][ T6212] EXT4-fs (loop3): orphan cleanup on readonly fs [ 69.824533][ T6212] EXT4-fs (loop3): 1 truncate cleaned up [ 69.830880][ T6212] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 69.894432][ T4102] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.896926][ T6236] loop4: detected capacity change from 0 to 512 [ 69.936490][ T6236] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 69.946561][ T6236] EXT4-fs (loop4): orphan cleanup on readonly fs [ 69.953784][ T6236] EXT4-fs warning (device loop4): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 69.968847][ T6236] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 69.975935][ T6236] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #16: comm syz.4.500: casefold flag without casefold feature [ 69.992104][ T6236] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.500: couldn't read orphan inode 16 (err -117) [ 70.004624][ T6236] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 70.018758][ T6236] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.046191][ T6245] ALSA: seq fatal error: cannot create timer (-19) [ 70.093471][ T6249] pimreg: entered allmulticast mode [ 70.121944][ T6253] netlink: 8 bytes leftover after parsing attributes in process `syz.3.503'. [ 70.164155][ T6264] loop3: detected capacity change from 0 to 1024 [ 70.171579][ T6265] netlink: 24 bytes leftover after parsing attributes in process `syz.4.505'. [ 70.184479][ T6264] EXT4-fs (loop3): can't mount with journal_async_commit, fs mounted w/o journal [ 70.186754][ T6265] loop4: detected capacity change from 0 to 512 [ 70.204711][ T6265] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.505: casefold flag without casefold feature [ 70.216889][ T6264] loop3: detected capacity change from 0 to 256 [ 70.224089][ T6264] msdos: Bad value for 'allow_utime' [ 70.232516][ T6265] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.505: couldn't read orphan inode 15 (err -117) [ 70.247271][ T6265] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.258422][ T6269] netlink: 16 bytes leftover after parsing attributes in process `syz.3.508'. [ 70.443469][ T5591] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.690423][ T6298] syz.2.517 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 70.697309][ T6297] loop1: detected capacity change from 0 to 512 [ 70.716288][ T6297] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 70.724679][ T6297] EXT4-fs (loop1): orphan cleanup on readonly fs [ 70.731302][ T6297] EXT4-fs warning (device loop1): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 70.746340][ T6297] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 70.753468][ T6297] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.516: bg 0: block 40: padding at end of block bitmap is not set [ 70.767813][ T6297] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 70.777024][ T6297] EXT4-fs (loop1): 1 truncate cleaned up [ 70.783160][ T6297] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 70.810586][ T6297] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #16: comm syz.1.516: corrupted xattr block 31: invalid header [ 70.824038][ T6297] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=16 [ 70.833117][ T6297] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #16: comm syz.1.516: corrupted xattr block 31: invalid header [ 70.846642][ T6297] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=16 [ 70.855778][ T6297] EXT4-fs error (device loop1): ext4_get_link:106: inode #16: comm syz.1.516: bad symlink. [ 70.866208][ T6303] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #16: comm syz.1.516: corrupted xattr block 31: invalid header [ 70.879544][ T6303] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=16 [ 70.889253][ T6303] EXT4-fs error (device loop1): ext4_get_link:106: inode #16: comm syz.1.516: bad symlink. [ 70.977073][ T4456] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.999641][ T6306] loop4: detected capacity change from 0 to 1024 [ 71.013830][ T6306] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.102253][ T4456] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.196007][ T4219] usb 3-1: enqueue for inactive port 0 [ 71.202063][ T4219] usb 3-1: enqueue for inactive port 0 [ 71.288106][ T4219] vhci_hcd: vhci_device speed not set [ 71.326122][ T29] kauditd_printk_skb: 25 callbacks suppressed [ 71.326142][ T29] audit: type=1326 audit(1723124756.161:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6334 comm="syz.0.526" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4913d579f9 code=0x0 [ 71.531267][ T3735] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.580200][ T29] audit: type=1400 audit(1723124756.426:810): avc: denied { setopt } for pid=6354 comm="syz.2.532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 71.598139][ T6362] tipc: Can't bind to reserved service type 2 [ 71.630381][ T29] audit: type=1400 audit(1723124756.476:811): avc: denied { ioctl } for pid=6369 comm="syz.2.535" path="/dev/virtual_nci" dev="devtmpfs" ino=108 ioctlcmd=0x0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 71.702998][ T29] audit: type=1400 audit(1723124756.537:812): avc: denied { mount } for pid=6375 comm="syz.4.536" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 71.885508][ T29] audit: type=1400 audit(1723124756.731:813): avc: denied { nlmsg_read } for pid=6400 comm="syz.1.541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 71.926488][ T29] audit: type=1400 audit(1723124756.761:814): avc: denied { setopt } for pid=6400 comm="syz.1.541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 71.946649][ T29] audit: type=1400 audit(1723124756.761:815): avc: denied { getopt } for pid=6400 comm="syz.1.541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 72.114077][ T29] audit: type=1326 audit(1723124756.965:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6403 comm="syz.1.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febc67f79f9 code=0x7fc00000 [ 72.139700][ T29] audit: type=1400 audit(1723124756.995:817): avc: denied { read } for pid=6403 comm="syz.1.542" path="socket:[13276]" dev="sockfs" ino=13276 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 72.162826][ T29] audit: type=1326 audit(1723124756.995:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6403 comm="syz.1.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7febc67f79f9 code=0x7fc00000 [ 72.225665][ T6412] loop0: detected capacity change from 0 to 4096 [ 72.246761][ T6412] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.289436][ T5591] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.586016][ T6420] dccp_invalid_packet: P.type (RESET) not Data || [Data]Ack, while P.X == 0 [ 72.663623][ T6422] loop0: detected capacity change from 0 to 1024 [ 72.691852][ T6422] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.887260][ T6445] __nla_validate_parse: 4 callbacks suppressed [ 72.887274][ T6445] netlink: 4 bytes leftover after parsing attributes in process `syz.2.551'. [ 72.952322][ T6448] batman_adv: batadv0: Adding interface: gretap1 [ 72.959039][ T6448] batman_adv: batadv0: Interface activated: gretap1 [ 72.966578][ T6450] netlink: 28 bytes leftover after parsing attributes in process `syz.1.554'. [ 72.975845][ T6450] netlink: 28 bytes leftover after parsing attributes in process `syz.1.554'. [ 72.984738][ T6450] netlink: 96 bytes leftover after parsing attributes in process `syz.1.554'. [ 73.027431][ T6448] syzkaller0: entered promiscuous mode [ 73.030364][ T6452] loop4: detected capacity change from 0 to 1024 [ 73.032929][ T6448] syzkaller0: entered allmulticast mode [ 73.042554][ T6455] loop1: detected capacity change from 0 to 2048 [ 73.047385][ T6452] EXT4-fs: Ignoring removed i_version option [ 73.058900][ T6452] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 73.067708][ T6452] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 73.173389][ T6459] macsec0: entered promiscuous mode [ 73.179207][ T6459] macsec1: entered promiscuous mode [ 73.184539][ T6459] macsec1: entered allmulticast mode [ 73.189995][ T6459] macsec0: entered allmulticast mode [ 73.195299][ T6459] veth1_macvtap: entered allmulticast mode [ 73.203017][ T6459] macsec0: left allmulticast mode [ 73.208235][ T6459] veth1_macvtap: left allmulticast mode [ 73.240957][ T6465] loop4: detected capacity change from 0 to 1024 [ 73.255553][ T6467] loop1: detected capacity change from 0 to 256 [ 73.269325][ T6465] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.274902][ T6467] FAT-fs (loop1): codepage cp866 not found [ 73.286351][ T6465] ext4 filesystem being mounted at /86/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.349137][ T6474] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 73.349619][ T4456] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.486794][ T5591] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.606483][ T6492] loop3: detected capacity change from 0 to 1024 [ 73.614459][ T6492] EXT4-fs: Ignoring removed nomblk_io_submit option [ 73.648515][ T6492] EXT4-fs (loop3): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.665453][ T6494] loop0: detected capacity change from 0 to 8192 [ 73.701925][ T4102] EXT4-fs (loop3): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 73.772168][ T6503] loop0: detected capacity change from 0 to 512 [ 73.772302][ T6506] netlink: 24 bytes leftover after parsing attributes in process `syz.3.571'. [ 73.801531][ T6503] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.818102][ T6503] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.843395][ T6512] netlink: 16 bytes leftover after parsing attributes in process `syz.3.572'. [ 73.977289][ T6516] netlink: 830 bytes leftover after parsing attributes in process `syz.0.570'. [ 74.030758][ T6520] xt_CT: You must specify a L4 protocol and not use inversions on it [ 74.143823][ T6538] loop2: detected capacity change from 0 to 256 [ 74.201990][ T6503] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.244247][ T6551] loop3: detected capacity change from 0 to 1024 [ 74.268168][ T6551] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.348130][ T6559] netlink: 8 bytes leftover after parsing attributes in process `syz.0.583'. [ 74.357309][ T6566] loop1: detected capacity change from 0 to 128 [ 74.363952][ T6566] vfat: Unknown parameter '00000000000000000000000' [ 74.374974][ T4102] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.392408][ T6568] loop4: detected capacity change from 0 to 4096 [ 74.431653][ T6568] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.451210][ T6573] loop1: detected capacity change from 0 to 512 [ 74.463842][ T6573] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (3832!=33349) [ 74.477746][ T6573] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002] [ 74.493674][ T6573] System zones: 1-12 [ 74.502901][ T6573] EXT4-fs (loop1): orphan cleanup on readonly fs [ 74.521024][ T6585] loop0: detected capacity change from 0 to 2048 [ 74.525848][ T6573] EXT4-fs error (device loop1): ext4_read_inode_bitmap:168: comm syz.1.587: Inode bitmap for bg 0 marked uninitialized [ 74.542197][ T4456] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.563847][ T6573] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 74.589818][ T6585] loop0: p1 < > p4 [ 74.594490][ T6573] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: none. [ 74.605241][ T6573] netlink: 'syz.1.587': attribute type 4 has an invalid length. [ 74.614289][ T6585] loop0: p4 size 8388608 extends beyond EOD, truncated [ 74.658441][ T6594] netlink: 20 bytes leftover after parsing attributes in process `syz.4.591'. [ 74.674681][ T6588] loop2: detected capacity change from 0 to 8192 [ 74.680507][ T6596] loop3: detected capacity change from 0 to 512 [ 74.696125][ T6596] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 74.696395][ T3735] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.720791][ T5033] udevd[5033]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 74.732997][ T3252] udevd[3252]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 74.746883][ T6596] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 74.768464][ T6588] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 74.779355][ T6596] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a84ec02c, mo2=0002] [ 74.797436][ T6596] System zones: 0-2, 18-18, 34-34 [ 74.804820][ T6596] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 74.820986][ T6596] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.592: bg 0: block 408: padding at end of block bitmap is not set [ 74.821805][ T6608] loop4: detected capacity change from 0 to 256 [ 74.838399][ T6596] EXT4-fs (loop3): Remounting filesystem read-only [ 74.848150][ T6596] EXT4-fs (loop3): 1 truncate cleaned up [ 74.854582][ T6596] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.867531][ T6596] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 74.874936][ T6596] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.896995][ T6609] netlink: 12 bytes leftover after parsing attributes in process `syz.2.590'. [ 74.953587][ T6612] syzkaller0: entered promiscuous mode [ 74.959113][ T6612] syzkaller0: entered allmulticast mode [ 74.966634][ T1638] syzkaller0: tun_net_xmit 48 [ 75.049245][ T6623] loop4: detected capacity change from 0 to 256 [ 75.053829][ T6596] loop3: detected capacity change from 0 to 8192 [ 75.347116][ T6635] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.354396][ T6635] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.400256][ T6645] bridge_slave_1: left allmulticast mode [ 75.406266][ T6645] bridge_slave_1: left promiscuous mode [ 75.411916][ T6645] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.421345][ T6645] bridge_slave_0: left allmulticast mode [ 75.427163][ T6645] bridge_slave_0: left promiscuous mode [ 75.432823][ T6645] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.475519][ T6647] loop2: detected capacity change from 0 to 256 [ 75.488660][ T6647] FAT-fs (loop2): Directory bread(block 64) failed [ 75.495391][ T6647] FAT-fs (loop2): Directory bread(block 65) failed [ 75.503859][ T6647] FAT-fs (loop2): Directory bread(block 66) failed [ 75.511298][ T6647] FAT-fs (loop2): Directory bread(block 67) failed [ 75.518981][ T6647] FAT-fs (loop2): Directory bread(block 68) failed [ 75.525942][ T6647] FAT-fs (loop2): Directory bread(block 69) failed [ 75.533129][ T6647] FAT-fs (loop2): Directory bread(block 70) failed [ 75.540070][ T6647] FAT-fs (loop2): Directory bread(block 71) failed [ 75.561371][ T6647] FAT-fs (loop2): Directory bread(block 72) failed [ 75.570093][ T6647] FAT-fs (loop2): Directory bread(block 73) failed [ 75.680688][ T63] kworker/u8:4: attempt to access beyond end of device [ 75.680688][ T63] loop2: rw=1, sector=1800, nr_sectors = 24 limit=256 [ 75.728005][ T6667] vxcan1: tx drop: invalid sa for name 0x0000000000000003 [ 75.755227][ T6674] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:ac1e:0001 with DS=0xd [ 75.769526][ T6669] loop1: detected capacity change from 0 to 512 [ 75.786904][ T6674] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32784 sclass=netlink_route_socket pid=6674 comm=syz.4.610 [ 75.808104][ T6669] EXT4-fs (loop1): #clusters per group too big: 2498174976 [ 75.940791][ T6693] loop1: detected capacity change from 0 to 1024 [ 75.956014][ T6693] EXT4-fs: Ignoring removed oldalloc option [ 75.971015][ T6693] EXT4-fs (loop1): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 75.998585][ T6693] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.011320][ T6693] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.596623][ T29] kauditd_printk_skb: 435 callbacks suppressed [ 76.596636][ T29] audit: type=1326 audit(1723125017.466:1254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6705 comm="syz.0.620" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4913d579f9 code=0x0 [ 76.651253][ T6711] loop4: detected capacity change from 0 to 1024 [ 76.666026][ T6711] EXT4-fs: Ignoring removed nobh option [ 76.671636][ T6711] EXT4-fs: Ignoring removed orlov option [ 76.677473][ T6711] EXT4-fs: Ignoring removed nomblk_io_submit option [ 76.744051][ T6713] loop0: detected capacity change from 0 to 2048 [ 76.746145][ T6711] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.770821][ T29] audit: type=1400 audit(1723125017.636:1255): avc: denied { append } for pid=6712 comm="syz.0.622" name="virtual_nci" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 76.860167][ T6721] loop2: detected capacity change from 0 to 256 [ 76.887282][ T29] audit: type=1400 audit(1723125017.756:1256): avc: denied { watch } for pid=6720 comm="syz.2.623" path="/120" dev="tmpfs" ino=691 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 77.003217][ T4456] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.037971][ T4456] ================================================================== [ 77.046108][ T4456] BUG: KCSAN: data-race in folios_put_refs / need_mlock_drain [ 77.053620][ T4456] [ 77.055959][ T4456] write to 0xffff888237c2b370 of 1 bytes by task 6702 on cpu 0: [ 77.063601][ T4456] folios_put_refs+0x266/0x2b0 [ 77.068401][ T4456] mlock_folio_batch+0x319d/0x31d0 [ 77.073570][ T4456] munlock_folio+0xcd/0x130 [ 77.078115][ T4456] folio_remove_rmap_ptes+0x214/0x220 [ 77.083516][ T4456] unmap_page_range+0x1028/0x2210 [ 77.088552][ T4456] unmap_single_vma+0x142/0x1d0 [ 77.093431][ T4456] unmap_vmas+0x18d/0x2b0 [ 77.097775][ T4456] unmap_region+0x144/0x230 [ 77.102295][ T4456] do_vmi_align_munmap+0x6df/0xa60 [ 77.107451][ T4456] do_vmi_munmap+0x1fb/0x250 [ 77.112153][ T4456] __vm_munmap+0xec/0x210 [ 77.116511][ T4456] __x64_sys_munmap+0x36/0x40 [ 77.121214][ T4456] x64_sys_call+0xd32/0x2d60 [ 77.125828][ T4456] do_syscall_64+0xc9/0x1c0 [ 77.130349][ T4456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.136345][ T4456] [ 77.138693][ T4456] read to 0xffff888237c2b370 of 1 bytes by task 4456 on cpu 1: [ 77.146248][ T4456] need_mlock_drain+0x30/0x50 [ 77.150977][ T4456] __lru_add_drain_all+0x235/0x410 [ 77.156108][ T4456] lru_add_drain_all+0x10/0x20 [ 77.160898][ T4456] invalidate_bdev+0x47/0x70 [ 77.165510][ T4456] ext4_put_super+0x571/0x840 [ 77.170215][ T4456] generic_shutdown_super+0xde/0x210 [ 77.175523][ T4456] kill_block_super+0x2a/0x70 [ 77.180224][ T4456] ext4_kill_sb+0x44/0x80 [ 77.184575][ T4456] deactivate_locked_super+0x7d/0x1c0 [ 77.189983][ T4456] deactivate_super+0x9f/0xb0 [ 77.194695][ T4456] cleanup_mnt+0x268/0x2e0 [ 77.199135][ T4456] __cleanup_mnt+0x19/0x20 [ 77.203568][ T4456] task_work_run+0x13a/0x1a0 [ 77.208183][ T4456] syscall_exit_to_user_mode+0xbe/0x130 [ 77.213753][ T4456] do_syscall_64+0xd6/0x1c0 [ 77.218291][ T4456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.224209][ T4456] [ 77.226533][ T4456] value changed: 0x1f -> 0x00 [ 77.231209][ T4456] [ 77.233532][ T4456] Reported by Kernel Concurrency Sanitizer on: [ 77.239684][ T4456] CPU: 1 UID: 0 PID: 4456 Comm: syz-executor Not tainted 6.11.0-rc2-syzkaller-00027-g6a0e38264012 #0 [ 77.250552][ T4456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 77.260613][ T4456] ================================================================== [ 77.294172][ T6735] loop4: detected capacity change from 0 to 2048 [ 77.316600][ T6735] loop4: p1 < > p4 [ 77.321079][ T6735] loop4: p4 size 8388608 extends beyond EOD, truncated [ 77.334367][ T29] audit: type=1400 audit(1723125018.196:1257): avc: denied { mounton } for pid=6734 comm="syz.4.626" path="/dev/loop4p1" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 77.357820][ T29] audit: type=1400 audit(1723125018.196:1258): avc: denied { write } for pid=6734 comm="syz.4.626" name="loop4p1" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 77.516932][ T3334] udevd[3334]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 77.529115][ T3242] udevd[3242]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 77.571690][ T6702] loop1: detected capacity change from 0 to 512 [ 77.578336][ T6702] EXT4-fs: Ignoring removed nomblk_io_submit option [ 77.587832][ T6702] EXT4-fs (loop1): orphan cleanup on readonly fs [ 77.594845][ T6702] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.618: bg 0: block 248: padding at end of block bitmap is not set [ 77.610480][ T6702] Quota error (device loop1): write_blk: dquota write failed [ 77.617923][ T6702] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 77.627907][ T6702] EXT4-fs error (device loop1): ext4_acquire_dquot:6848: comm syz.1.618: Failed to acquire dquot type 1 [ 77.640213][ T6702] EXT4-fs (loop1): 1 truncate cleaned up [ 77.647740][ T6702] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 77.810005][ T3735] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.