last executing test programs: 1m29.066434986s ago: executing program 3 (id=372): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x6004, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$kcm(0x2, 0x3, 0x2) write$tun(r0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') socket(0x2, 0x3, 0xff) pread64(r1, &(0x7f0000000080)=""/59, 0x63, 0x73) 1m29.025614478s ago: executing program 3 (id=374): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x17, &(0x7f0000000100)=r1, 0x4) sendmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000080)=@in6={0xa, 0x4e22, 0x0, @mcast2}, 0x80, 0x0}, 0xb80b) sendmsg$kcm(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x80) 1m29.024983788s ago: executing program 3 (id=377): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000003280)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r0, 0x4) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000180)="0b03feff4f12021202004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14) 1m28.98823957s ago: executing program 3 (id=378): lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x5c, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000100)={[{@dioread_nolock}, {@norecovery}, {@resgid}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@grpid}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@grpid}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}], [{@subj_user={'subj_user', 0x3d, '('}}, {@measure}, {@smackfsfloor}, {@appraise_type}]}, 0xfd, 0x588, &(0x7f0000000680)="$eJzs3d9rW1UcAPDvTZP96rQdjKE+yGAPTsbStfXHBGHzUXQ40PcZ2qyMpsto0rHWgduDe/FFhiDiQPwDfN/j8B/wrxi4wZBR9EGFyk1vuq7Nj7bLTF0+H8h2Ts5Nzv3m3u/NOfcmTQAD62j6Ty7i1Yj4JokYWdeWj6zx6Opyy4+vT6W3JFZWPv09iTMbnivJ/h/OKq9ExC9fRZzIbe63trg0W6pUyvNZfaw+d2Wstrh08tJcaaY8U748MTl5+u3Jiffefadnsb55/s/vP7n34emvjy1/9/PDQ7eTOBsHs7Y0rh50cWN95Wjpn6xUiLMbFhzvQWe7SdLvFWBHhrI8L0R6DBiJoSzrgRfflxGxAgyoRP7DgGqOA5pz+x7Ng/83Hn2wOgHaHH9+9dxI7GvMjQ4sJ0/NjNL57mgP+k/7GH1w5/bdB3duR+fzEPu71AG25cbNiDiVz28+/iXZ8W/nTjVOHne2sY9Be/+BfrqXjn+SGxGb8j+3Nv6JFuOf4Ra5uxPd8z/3sAfdtJWO/95vOf5dO3SNDmW1lxpjvkJy8VKlfCoiXo6I41HYm9Y7Xc85vXx/pV1bGv/dbPyX3tL+m2PBbD0e5vc+/ZjpUr30LDGv9+hmxGstx7/J2vZPWmz/9PU4v8U+jpTvvN6urXv8z9fKTxFvtNz+T65oJZ2vT4419oex5l6x2R+3jvzarv9+x59u/wOd4x9N1l+vrW2/jx/3/VVu17bT/X9P8lmjvCe771qpXp8fj9iTfJwf3nj/xJPHNuvN5dP4jx9rnf+d9v908vX5FuO/dfhW20W7xv/3ukn6U25usffO0vint7X9t1+4/9EXP+w4/sb2f6tROp7ds5Xj31ZX8FleOwAAAAAAANhtchFxMJJcca2cyxWLhUbb4TiQq1Rr9RMXqwuXp6PxXdnRKOSaV7pH1n0eYjz7PGyzPrGhPhkRhyLi26H9jXpxqlqZ7nfwAAAAAAAAAAAAAAAAAAAAsEsMt/z+/2rbb0P9XjvguWv8sMHefq8F0A9df/K/F7/0BOxKXfMfeGFtP/+dGYAXhfd/GFzyHwaX/IfBtdX8L4w85xUB/nPe/2FwyX8AAAAAAAAAAAAAAAAAAAAAAAAAAADoqfPnzqW3leXH16fS+vTVxYXZ6tWT0+XabHFuYao4VZ2/UpypVmcq5eJUda7b81Wq1SvjE7FwbaxertXHaotLF+aqC5frFy7NlWbKF8oFf2wYAAAAAAAAAAAAAAAAAAAANqktLs2WKpXyvELbwpno5RMmu++VP5Ot0o4ent8tUSj0tNDHgxIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAbPBvAAAA///YBDOu") renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000001240)='./file1\x00', 0x4) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x42) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) fspick(r0, &(0x7f0000000580)='./file0/file0\x00', 0x1) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r0, 0x8008330e, &(0x7f00000005c0)) 1m28.744193334s ago: executing program 3 (id=384): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000080)='configfs\x00', 0x200, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x6) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) pivot_root(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='./file0/file0\x00') 1m28.608059852s ago: executing program 3 (id=387): perf_event_open(&(0x7f0000000a00)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x650b9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800004, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x804) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 1m28.32031767s ago: executing program 32 (id=387): perf_event_open(&(0x7f0000000a00)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x650b9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800004, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x804) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 1m19.519636093s ago: executing program 4 (id=534): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f00000002c0)=r0}, 0x20) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvmsg$unix(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000001780)=""/4096, 0x1000}], 0x1}, 0x40000002) 1m19.432103208s ago: executing program 4 (id=536): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10) readv(r0, &(0x7f0000000fc0)=[{&(0x7f0000003880)=""/4102, 0x1006}], 0x1) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000200)=0xd, 0x4) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4) sendmsg$can_raw(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@can={{}, 0x7, 0x1, 0x0, 0x0, "0000000000000003"}, 0x10}}, 0x20000000) 1m19.372157001s ago: executing program 4 (id=540): perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0xc64}, 0x10014, 0x0, 0x800000, 0x0, 0x4, 0x2, 0x6, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00'}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80400, 0x0) ioctl$TUNSETIFF(r1, 0x400454da, &(0x7f00000002c0)={'bond0\x00', 0x4000}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'nicvf0\x00', 0x1432}) 1m19.257241308s ago: executing program 4 (id=543): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000180)='ramfs\x00', 0x2014050, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)='./file0/../file0\x00') 1m19.193564162s ago: executing program 4 (id=545): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000002004e21ac1414aa000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000006401010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x210) r2 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') preadv(r2, &(0x7f0000000400)=[{&(0x7f0000000480)=""/72, 0x48}, {&(0x7f0000000800)=""/69, 0x45}, {&(0x7f0000000500)=""/142, 0x8e}], 0x3, 0x2, 0x5) 1m19.012564182s ago: executing program 4 (id=549): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x3, 0x8}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x54, 0x2c, 0xd27, 0x170bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {}, {0x1, 0xe}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_PERTURB={0x8, 0xc, 0x1}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0x5, 0x10}}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x18c49}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40004}, 0x4000800) 1m18.979280384s ago: executing program 33 (id=549): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x3, 0x8}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x54, 0x2c, 0xd27, 0x170bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {}, {0x1, 0xe}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_PERTURB={0x8, 0xc, 0x1}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0x5, 0x10}}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x18c49}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40004}, 0x4000800) 1m7.958731147s ago: executing program 5 (id=740): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth1_virt_wifi\x00', 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x7}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r1 = dup(r0) sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000000)="be39", 0xffeb}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}], 0xf}, 0x0) 1m7.841984204s ago: executing program 5 (id=741): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x10011, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0x9, 0x7}, 0x100, 0xa88, 0x8406, 0x4, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0x2ee0}], 0x13, 0x0, 0x0, 0x10000000}, 0x12cd) 1m7.784420107s ago: executing program 5 (id=742): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f00000000c0)="91b8a91fd3108691bbc4173c3d6f357d027273117b3d0f171ba4ac4703cad036e68907e50e9997cd9c07bd75e6ff", 0x2e}, {&(0x7f0000001c00)="4490137c227c56ee66c372f3105eb186dd8062fad2d5b5bfb0ba068e74a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9afda48e71255a747b6d03097385fb05cf8db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61210c410d799168ffc4b64677af924affd442035db81e18c2d2462d0bb25fff9d3b1ce903597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97ce54164c1942b25686866f6b53fe7e75cf6854284d50", 0xdf}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c844221841a232932fc2e37e327de21450df098", 0x29}], 0x3}}, {{0x0, 0x0, &(0x7f0000000340)=[{0x0}, {0x0}, {&(0x7f00000021c0)="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", 0x285}], 0x3}}], 0x2, 0x2090) 1m7.763605679s ago: executing program 5 (id=743): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000080)='configfs\x00', 0x200, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x6) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) pivot_root(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='./file0/file0\x00') 1m7.72891447s ago: executing program 5 (id=745): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4, 0x2}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8848}, 0x80) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r3, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 1m7.516606923s ago: executing program 5 (id=749): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x8000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000011c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4, 0xc}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8849}, 0x448d4) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff2, 0xffe0}, {0x0, 0xfff1}, {0x7, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 1m7.491448924s ago: executing program 34 (id=749): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x8000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000011c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4, 0xc}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8849}, 0x448d4) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff2, 0xffe0}, {0x0, 0xfff1}, {0x7, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 57.348212775s ago: executing program 7 (id=909): request_key(0x0, 0x0, &(0x7f0000000240)='(\\.\x03/\']\\\x81\xac5\x17+.-![\a\x00^\'$9\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = syz_io_uring_setup(0x8d6, &(0x7f00000000c0)={0x0, 0x0, 0x400, 0x0, 0x379}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x47ba, 0x3e82, 0x60, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 57.209247764s ago: executing program 7 (id=916): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r3, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000500)={@remote, @multicast, @void, {@mpls_uc={0x8847, {[], @ipv6=@generic={0x5, 0x6, "7843c8", 0x0, 0x2f, 0xff, @remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x30}}}}}}}, 0x0) 57.081631281s ago: executing program 7 (id=921): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$inet_udplite(0x2, 0x2, 0x88) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000d88000/0x1000)=nil, &(0x7f00007f2000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24058041) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 57.008256995s ago: executing program 7 (id=922): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x10000, 0xffffffffffffffff, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x12d7498, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0) open_tree(r0, &(0x7f0000000640)='\x00', 0x89901) 56.817779366s ago: executing program 7 (id=925): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000640)='./bus\x00', 0x0, &(0x7f0000000440)=ANY=[], 0x1, 0x1273, &(0x7f0000003780)="$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") ftruncate(0xffffffffffffffff, 0xc17a) socketpair$unix(0x1, 0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000000)={[{@minixdf}, {@resuid}, {@jqfmt_vfsv1}, {@errors_remount}, {@nobh}, {@grpquota, 0x2e}], [], 0x2e}, 0x1, 0x472, &(0x7f0000000580)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x48041, 0x0) rename(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000000)='./file1\x00') 56.531540853s ago: executing program 7 (id=928): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000000500000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x0, 0x35, 0x0, &(0x7f0000000000)="c1188e19b95d02ff4284860186dd8b62769e0ec203c3f333dbdce81fc5fdaf97bdbdaf6235d6bd04778f917ca011bc31ef56005e00", 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r1, 0xa, 0x13) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x4c}}, 0x0) fcntl$setlease(r1, 0x400, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'wg1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r4}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x19, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x80}, [@ldst={0x1, 0x2, 0x1, 0x8145176d001dc6de, 0xc, 0x40}, @map_idx={0x18, 0x4, 0x5, 0x0, 0xa}, @generic={0x6f, 0x7, 0x2, 0x4a, 0x9}, @call={0x85, 0x0, 0x0, 0x6c}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x6}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffff9}, @map_val={0x18, 0xe, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000140)='GPL\x00', 0xb, 0x2e, &(0x7f0000000180)=""/46, 0x0, 0x8, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x2, 0x5, 0x5, 0xfffffffc}, 0x10, 0x0, 0x0, 0x7, 0x0, &(0x7f0000000480)=[{0x3, 0x4, 0x0, 0xb}, {0x0, 0x2, 0x10, 0x5}, {0x3, 0x2}, {0x3, 0x2, 0x5, 0xb}, {0x5, 0x3, 0xc}, {0x0, 0x3, 0xe, 0xa}, {0x3, 0x2, 0x0, 0xc}], 0x10, 0x80}, 0x94) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x44010}, 0x4000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000010900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a32"], 0xa8}, 0x1, 0x0, 0x0, 0x800}, 0x24000840) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @remote, 0x401}, 0x1c) listen(r5, 0x3) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x8}, 0x10, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) 56.531213733s ago: executing program 35 (id=928): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000000500000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x0, 0x35, 0x0, &(0x7f0000000000)="c1188e19b95d02ff4284860186dd8b62769e0ec203c3f333dbdce81fc5fdaf97bdbdaf6235d6bd04778f917ca011bc31ef56005e00", 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r1, 0xa, 0x13) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x4c}}, 0x0) fcntl$setlease(r1, 0x400, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'wg1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r4}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x19, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x80}, [@ldst={0x1, 0x2, 0x1, 0x8145176d001dc6de, 0xc, 0x40}, @map_idx={0x18, 0x4, 0x5, 0x0, 0xa}, @generic={0x6f, 0x7, 0x2, 0x4a, 0x9}, @call={0x85, 0x0, 0x0, 0x6c}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x6}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffff9}, @map_val={0x18, 0xe, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000140)='GPL\x00', 0xb, 0x2e, &(0x7f0000000180)=""/46, 0x0, 0x8, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x2, 0x5, 0x5, 0xfffffffc}, 0x10, 0x0, 0x0, 0x7, 0x0, &(0x7f0000000480)=[{0x3, 0x4, 0x0, 0xb}, {0x0, 0x2, 0x10, 0x5}, {0x3, 0x2}, {0x3, 0x2, 0x5, 0xb}, {0x5, 0x3, 0xc}, {0x0, 0x3, 0xe, 0xa}, {0x3, 0x2, 0x0, 0xc}], 0x10, 0x80}, 0x94) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x44010}, 0x4000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000010900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a32"], 0xa8}, 0x1, 0x0, 0x0, 0x800}, 0x24000840) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @remote, 0x401}, 0x1c) listen(r5, 0x3) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x8}, 0x10, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) 55.539268201s ago: executing program 6 (id=945): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000000500000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x0, 0x35, 0x0, &(0x7f0000000000)="c1188e19b95d02ff4284860186dd8b62769e0ec203c3f333dbdce81fc5fdaf97bdbdaf6235d6bd04778f917ca011bc31ef56005e00", 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r1, 0xa, 0x13) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x4c}}, 0x0) fcntl$setlease(r1, 0x400, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'wg1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r4}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x19, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x80}, [@ldst={0x1, 0x2, 0x1, 0x8145176d001dc6de, 0xc, 0x40}, @map_idx={0x18, 0x4, 0x5, 0x0, 0xa}, @generic={0x6f, 0x7, 0x2, 0x4a, 0x9}, @call={0x85, 0x0, 0x0, 0x6c}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x6}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffff9}, @map_val={0x18, 0xe, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000140)='GPL\x00', 0xb, 0x2e, &(0x7f0000000180)=""/46, 0x0, 0x8, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x2, 0x5, 0x5, 0xfffffffc}, 0x10, 0x0, 0x0, 0x7, 0x0, &(0x7f0000000480)=[{0x3, 0x4, 0x0, 0xb}, {0x0, 0x2, 0x10, 0x5}, {0x3, 0x2}, {0x3, 0x2, 0x5, 0xb}, {0x5, 0x3, 0xc}, {0x0, 0x3, 0xe, 0xa}, {0x3, 0x2, 0x0, 0xc}], 0x10, 0x80}, 0x94) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x44010}, 0x4000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000010900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a32"], 0xa8}, 0x1, 0x0, 0x0, 0x800}, 0x24000840) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @remote, 0x401}, 0x1c) listen(r5, 0x3) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x8}, 0x10, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) 54.53320429s ago: executing program 6 (id=955): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x6) r1 = memfd_create(&(0x7f0000000580)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc5\x1d\xe7jDf\x87@\x8fg\x15RJw\x82\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7g\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05', 0x0) ftruncate(r1, 0x80079a0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x201, 0x0, 0x0) shutdown(r0, 0x1) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 54.404783197s ago: executing program 6 (id=956): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x3000c81c) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="e0"], 0x33fe0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) 54.324312502s ago: executing program 6 (id=960): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x9c9046, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x205) 54.252303586s ago: executing program 6 (id=961): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x31, &(0x7f0000000040)=0x9eb6, 0x4) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x1, 0xbfdffffc}, &(0x7f00000000c0)=0x0, &(0x7f00000003c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x85c3}}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f00000001c0)={0x0, @in={{0xa, 0x4, @rand_addr=0x64010102}}, 0xffff, 0x4}, 0x90) syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), 0xffffffffffffffff) sendto$inet6(r0, &(0x7f0000000280)="ba", 0x1, 0x40, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}, 0x1}, 0x1c) 54.026683809s ago: executing program 6 (id=962): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000480)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff1, 0xfff3}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x7}}, @filter_kind_options=@f_fw={{0x7}, {0xfffffffffffffc8a}}]}, 0x38}, 0x1, 0x0, 0x0, 0xe8728ce82d5df8ab}, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r4, 0xffffffffffffffff, 0x100000000000000) 53.988061641s ago: executing program 36 (id=962): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000480)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff1, 0xfff3}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x7}}, @filter_kind_options=@f_fw={{0x7}, {0xfffffffffffffc8a}}]}, 0x38}, 0x1, 0x0, 0x0, 0xe8728ce82d5df8ab}, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r4, 0xffffffffffffffff, 0x100000000000000) 4.585840523s ago: executing program 2 (id=1651): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) listen(r1, 0x100) r2 = socket$inet(0xa, 0x801, 0x84) listen(r2, 0x8) r3 = socket$inet(0xa, 0x5, 0x0) listen(r3, 0x1) r4 = socket$inet(0xa, 0x801, 0x84) listen(r4, 0x8) r5 = socket$inet(0xa, 0x801, 0x84) listen(r5, 0x8) r6 = socket$netlink(0x10, 0x3, 0x4) writev(r6, &(0x7f0000000040)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 4.565775114s ago: executing program 2 (id=1652): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) close(r1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080)) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000200)=0x1) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random='\x00\a\x00'}) 4.488088898s ago: executing program 2 (id=1653): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x80, 0x0, 0x7ffc1ffb}]}) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x8}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@migrate={0x50, 0x21, 0x1, 0x0, 0x1, {{@in, @in6=@remote}}}, 0x50}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) chmod(0x0, 0x12) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port1\x00', 0x511e36599023629, 0x100040, 0xe, 0x2, 0x2, 0x2, 0x0, 0x0, 0x5, 0x21}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r4, 0x40a85321, &(0x7f0000000580)={{0x80}, 'port0\x00', 0x71, 0x100c75, 0x7, 0x4, 0x1ff, 0x3, 0xb597, 0x0, 0x1}) r5 = dup(r3) write$UHID_INPUT(r5, &(0x7f00000027c0)={0xfc, {"a2e3ad0e180d07f9505e1a1887f7071ad038e7fd7fc6e5539b203c0a8b089b3f32356c030890e0879b0af8c6e70a9b334a959b6696048ed30af3988f7ef31952013fffe8d178708c523c921b1b5b31070d0773180acd3b78130daa61d8e8048001005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2ff7949d1f416e56c71b1931870262f5e801119242ca026bfcc21e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee707775e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc18892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae1b9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd48561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fd733a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982c04000000000000005c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80c1ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d5062c59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843ddbd8db411d8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227fff72de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434fd860f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e240100c0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f7524e2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e842729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ed3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458ffff5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a898a33a6d88e7cfe0e0000000000d80a4fe654578376e599aff3565b1d531f30912b9945fc83d38a155d5284edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295bf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e542ccea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c524ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f90000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000b78400", 0x1000}}, 0x1006) 4.11195274s ago: executing program 2 (id=1655): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000400)={{0x1, 0x0, 0xfffffffe}}) keyctl$set_reqkey_keyring(0xe, 0x5) request_key(&(0x7f0000000240)='asymmetric\x00', &(0x7f0000000280)={'syz', 0x2}, &(0x7f00000002c0)='logon\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5422) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000040)={0x2, 0x1, 0x0, 0x0, 0x1}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x1004, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f00000006c0)={0x2, 0xf, 0x4, 0xff81, 0x3f00, 0x5, 0x0}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x0, 0x18c, 0x203, 0x320, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) syz_usb_disconnect(0xffffffffffffffff) 3.276882089s ago: executing program 2 (id=1667): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21}, &(0x7f0000000300)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x100000000000009, 0x3c033, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x8312, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x400000000, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000240)={@random="9d3e485beb27", @random="78a4e8c9ab61", @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x38, 0x3a, 0x0, @private1, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0xadd, {0x0, 0x6, "6b329f", 0x0, 0x3a, 0x0, @empty, @local, [@hopopts]}}}}}}}, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x20, 0x1411, 0x1, 0x4, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000006f40), 0x2002, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000000c0)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r3, {}, {}, {0x6}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x40d5}, 0x0) 2.156334484s ago: executing program 1 (id=1686): perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x44, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4050, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x528, 0x0, @perf_config_ext={0xe, 0xfffffffffffffffe}, 0x0, 0x40000000, 0xd2, 0x9, 0x103fb, 0x1ff, 0x1ff, 0x0, 0x0, 0x0, 0x400000000000007}, 0x0, 0x1, 0xffffffffffffffff, 0x9) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f00000001c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x7}}]}, 0x1, 0x5fd, &(0x7f00000006c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x9, 0x1, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x32}, 0x94) r1 = socket$key(0xf, 0x3, 0x2) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r2, 0x29, 0xb, 0x0, &(0x7f0000000000)) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020100030a0000000000000000000000030006002b20000002004e24ac1414aa0000000000000000030005000000000002000a01000000000000000000000000020013"], 0x50}, 0x1, 0x7}, 0x20000000) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000380)={0xb0, 0xf, '\x00', [@calipso={0x7, 0x10, {0x2, 0x2, 0x0, 0xe000, [0x6]}}, @generic={0x53, 0x35, "9b63337eed2ddf344e597a6dbe74cf127d41f9fd6c7909b633864836c60fba2d50849e7fe725bcf11b6fac398f2b37cbb2c1107721"}, @calipso={0x7, 0x18, {0x2, 0x4, 0x9, 0x4, [0x0, 0x7ff]}}, @hao={0xc9, 0x10, @remote}, @jumbo={0xc2, 0x4, 0x81}]}, 0x88) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffffffff, 0xfd}, 0x0, 0x0, 0x1, 0x0, 0x2, 0xff, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff8000000000001, 0xffffffffffffffff, 0x9) sendfile(r3, r0, 0x0, 0x3ffff) sendfile(r3, r0, 0x0, 0x7ffff000) 1.778583526s ago: executing program 0 (id=1698): perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)=@in6={0xa, 0x4e23, 0x10, @remote, 0x5}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)}], 0x1, &(0x7f0000000000)=[{0x18, 0x10d, 0x1000, "438e3e"}, {0x10, 0x10e, 0x6488}], 0x28}, 0x40) r0 = socket$kcm(0x29, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000200), 0x0, 0xa0, &(0x7f0000000240), 0x0, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0x93, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) r1 = socket$kcm(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x8000) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') ioctl$TUNSETIFF(r3, 0xb702, 0x0) sendmsg$inet(r2, 0x0, 0x0) sendmsg$inet(r2, 0x0, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r1}) sendmsg(r0, 0x0, 0x20000000) setsockopt$sock_attach_bpf(r1, 0x1, 0x7, &(0x7f0000000000), 0x4) 1.701216701s ago: executing program 8 (id=1689): write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x50, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7f, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffc00, 0x3, 0x2, 0xfffffffd, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x28011, r0, 0x0) syz_clone3(&(0x7f0000000440)={0x21000000, 0x0, 0x0, 0x0, {0xf}, 0x0, 0x0, 0x0, 0x0}, 0x58) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={0xffffffffffffffff}, 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r3) syz_clone(0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.695061881s ago: executing program 0 (id=1690): timer_create(0x0, &(0x7f00000014c0)={0x0, 0x21, 0x2}, &(0x7f0000000340)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x40000) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x74, 0x4745d7f32fab0666) 1.479677064s ago: executing program 8 (id=1691): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000140)=0x40, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) bind$xdp(r0, &(0x7f0000000240)={0x2c, 0x1, r2, 0x0, r3}, 0x60) 1.477757494s ago: executing program 0 (id=1702): syz_io_uring_setup(0x24fd, &(0x7f0000000180)={0x0, 0x0, 0x10100}, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x97}, 0x22008081) bpf$PROG_LOAD(0x5, 0x0, 0x0) semop(0x0, 0x0, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000240)) syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x2004000, &(0x7f0000000180)=ANY=[@ANYRES64=0x0], 0xfe, 0x1227, &(0x7f00000024c0)="$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") r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_ADD_TX_TS(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x164) mknodat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file2\x00', 0x100, 0xfffbfffe) 1.431285257s ago: executing program 0 (id=1693): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0xfbf, @empty}, 0x1c) listen(r0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) accept4(r0, 0x0, 0x0, 0x80800) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mount$9p_tcp(&(0x7f0000000640), &(0x7f0000000680)='.\x00', &(0x7f00000006c0), 0x8010, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22']) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) 1.431055307s ago: executing program 9 (id=1694): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x3, 0x6361, 0x5, 0xfffffffd, 0x40000006}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x30004811}, 0x20000804) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r6, {}, {0xd, 0xb}, {0xb, 0x5}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x4010006) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.400247878s ago: executing program 8 (id=1695): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000540), 0x1, 0x783, &(0x7f0000001000)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8000c61) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) sendfile(r2, r2, 0x0, 0xe3aa6ea) creat(&(0x7f00000003c0)='./file1\x00', 0x11) write$UHID_INPUT(r2, &(0x7f00000017c0)={0x8, {"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", 0x1000}}, 0x1006) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x200000000000000) 1.300063674s ago: executing program 9 (id=1696): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000d"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000080)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETSTEERINGEBPF(r3, 0x800454e0, &(0x7f0000000200)=r2) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 1.285126965s ago: executing program 9 (id=1697): socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x2, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x143f02) socket$kcm(0x21, 0x2, 0xa) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x10, 0x803, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0x3, 0x1) socket$inet_mptcp(0x2, 0x1, 0x106) pipe2$9p(&(0x7f0000001900), 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0xa00, 0x0, 0x303, 0x300}}) 1.20247076s ago: executing program 8 (id=1699): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = io_uring_setup(0x6e1e, &(0x7f0000000100)={0x0, 0x23d4, 0x800, 0xfffffffc, 0x87}) r1 = eventfd2(0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000000)=r1, 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000001580)={0x3, 0x0, 0x0, &(0x7f00000014c0)=[{0x0}, {0x0}, {&(0x7f0000000280)=""/4094, 0xffe}], &(0x7f0000001540)=[0x0, 0x0, 0x4]}, 0x20) read$eventfd(r1, &(0x7f0000000040), 0x8) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001a80)=[{0x0}, {0x0}, {0x0}], 0x0, 0x3}, 0x20) 1.20223305s ago: executing program 9 (id=1700): ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) r0 = getpid() bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3c, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000800)="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", 0x3fe, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0xfffffd24, 0x0}, 0xa248}], 0x1, 0x40000000, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000080)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, 0x0, 0x80) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) 1.132172264s ago: executing program 1 (id=1701): perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)=@in6={0xa, 0x4e23, 0x10, @remote, 0x5}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)}], 0x1, &(0x7f0000000000)=[{0x18, 0x10d, 0x1000, "438e3e"}, {0x10, 0x10e, 0x6488}], 0x28}, 0x40) r0 = socket$kcm(0x29, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000200), 0x0, 0xa0, &(0x7f0000000240), 0x0, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0x93, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) r1 = socket$kcm(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x8000) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') ioctl$TUNSETIFF(r3, 0xb702, 0x0) sendmsg$inet(r2, 0x0, 0x0) sendmsg$inet(r2, 0x0, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r1}) sendmsg(r0, 0x0, 0x20000000) setsockopt$sock_attach_bpf(r1, 0x1, 0x7, &(0x7f0000000000), 0x4) 1.128547905s ago: executing program 1 (id=1703): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$cont(0x7, r0, 0x1000000fffdffff, 0xfffffffffffffff7) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, 0x0, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r2, 0x0, 0x4, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000740)='bridge0\x00', 0x10) connect$inet(r2, &(0x7f0000000140)={0x2, 0xc000, @local}, 0x10) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000000)={'lo\x00', {0x2, 0x4e20, @empty}}) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000000c0), 0x4) 1.068833248s ago: executing program 1 (id=1704): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "bd88818314ff7d84", "877dab43c700", '\x00', "0100"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r0) r1 = gettid() timer_create(0x0, &(0x7f00000014c0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000200)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) recvfrom(r0, 0x0, 0x0, 0x1, 0x0, 0x0) shutdown(r0, 0x0) 1.03337437s ago: executing program 8 (id=1705): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$eJzs3cFvG1kZAPBvnLhJs+mmC3sABGxZFgqq6iTubrTqhfYCQlUlRMWJQxsSN4pi11Hsiib0kB65V6ISJ+A/4MYBqScO3LjBjUs5IBWoQA0SB6MZT1I3sZNAnbiJfz9pMvPeTP29F/e953mR5wUwtC5ExGZEnImIOxExlecn+RbX2lt63csXDxe2XjxcSKLVuvX3JDuf5kXHv0m9k7/meER8/zsRP0r2xm2sb6zMV6uVtTw93aytTjfWNy4vF/Kc8tzs3MynVz4p962uH9R+/fzbyzd+8NvffOnZHza/+ZO0WJM/PZed66xHP7WrXozJjrzRiLhxFMEGZDT//8PJk7a2z0TEh1n7n4qR7N0EAE6zVmsqWlOdaQDgtEvv/ycjKZTyuYDJKBRKpfYc3vsxUajWG81LU/X79xYjm8M6H8XC3eVqZSafKzwfxSRNz2bHr9Ll19KPK1ci4r2IeDx2NjtfWqhXFwf5wQcAhtg7u8b/f421x/9OxUEVDgA4OuODLgAAcOyM/wAwfIz/ADB8/ofx37cDAeCUcP8PAMPH+A8Aw+fA8f/R8ZQDADgW37t5M91aW+3nX28/qfvyYqWxUqrdXygt1NdWS0v1+lK1UlpotQ56vWq9vjr78U6ysb5xu1a/f695e7k2v1S5XfEsAQAYvPc+ePqndNDfvHo226JjLQdjNZxuhUEXABiYkUEXABgY3+eB4XWIe3zTAHDKdVmity2fIEh6XfDE4q9wUl38vPl/GFZvMv9v7gBOtv9v/v9bfS8HcPyM4TC8Wq3Emv8AMGTM8QM9//6f6/mIkCf9LwsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACcFJPZlhRK2Vrgm+nPQqkUcS4izkcxubtcrcxExLsR8cex4lianh10oQGAN1T4a5Kv/3Vx6qPJ3WfPJP8ey/YR8eOf3/rZg/lmc202zf/HTn7zSZp/trlWPjOICgAAna7tzcrG73K+77iRf/ni4cL2dpxFfH69vbhoGncr39pnRmM0249HMSIm/pnk6bb088pIH+JvPoqIz23XfzwedESYzOZA2iuf7o6fxj7X9/idv//d8Quv1beQnUv3xex38dnYVTjgQE+vt/vJvO2lTTxvf4W4kO27t//xrId6c2n/lzbXrT39X2Gn/xvZEz/J2vyFnfT+JXn+8e++uyezNdU+9yjiC6Pd4ic78ZPu/W/xo0PW8c9f/PKHvc61fhFxsWv9t1ekrmXd7HSztjrdWN+4vFybX6osVe6Vy3OzczOfXvmkPJ3NUbd//r5bjL9dvfRur/hp/Sd6xB/fv/7xtUPW/5f/ufPDr+wT/xtf7f7+v79P/HRM/Poh489PXOu5fHcaf7FH/Q94/+PSIeM/+8vG4iEvBQCOQWN9Y2W+Wq2sHXCQftY86BoHhz9I7+3fgmJkB7EZ0a8XzCYlIqLrNekn6rejykd1kAws+q/6/YKD7pmAo/aq0Q+6JAAAAAAAAAAAAAAAQC+N9Y2Vse7f1urbwaDrCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwOn13wAAAP//KHnENg==") openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107042, 0x1) r0 = add_key$keyring(&(0x7f0000000200), 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000540), 0x1, 0x783, &(0x7f0000001000)="$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") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000480), 0x11, 0x5aa, &(0x7f00000007c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xc00) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) pwrite64(r2, &(0x7f0000000140)='2', 0x1, 0x8000c61) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) sendfile(r3, r3, 0x0, 0xe3aa6ea) 895.886948ms ago: executing program 1 (id=1706): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0xc0, 0x45) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) inotify_init() r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = eventfd2(0xffffffff, 0x80000) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) 892.497438ms ago: executing program 1 (id=1707): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/mdstat\x00', 0x0, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f000000affb)=[{}], 0x1, 0x7fff) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0xe0000003}) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000000000)=0xd0a, 0x4) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), r2) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xef, 0x3d27}, 0x400, 0x32, 0x43a1bd76, 0x7, 0x203, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x18, 0x30, 0xb, 0x0, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000940)={0x2c, r3, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_CHANNEL={0x5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0x64000) 839.764171ms ago: executing program 9 (id=1708): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x300, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x0) 729.776938ms ago: executing program 9 (id=1709): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000000500000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x0, 0x35, 0x0, &(0x7f0000000000)="c1188e19b95d02ff4284860186dd8b62769e0ec203c3f333dbdce81fc5fdaf97bdbdaf6235d6bd04778f917ca011bc31ef56005e00", 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r1, 0xa, 0x13) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x4c}}, 0x0) fcntl$setlease(r1, 0x400, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'wg1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r4}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x19, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x80}, [@ldst={0x1, 0x2, 0x1, 0x8145176d001dc6de, 0xc, 0x40}, @map_idx={0x18, 0x4, 0x5, 0x0, 0xa}, @generic={0x6f, 0x7, 0x2, 0x4a, 0x9}, @call={0x85, 0x0, 0x0, 0x6c}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x6}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffff9}, @map_val={0x18, 0xe, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000140)='GPL\x00', 0xb, 0x2e, &(0x7f0000000180)=""/46, 0x0, 0x8, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x2, 0x5, 0x5, 0xfffffffc}, 0x10, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000480)=[{0x3, 0x4, 0x0, 0xb}, {0x0, 0x2, 0x10, 0x5}, {0x3, 0x2}, {0x5, 0x3, 0x3, 0x1}, {0x3, 0x2, 0x5, 0xb}, {0x5, 0x3, 0xc}, {0x0, 0x3, 0xe, 0xa}, {0x3, 0x2, 0x0, 0xc}], 0x10, 0x80}, 0x94) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a00000709000100"], 0x7c}, 0x1, 0x0, 0x0, 0x44010}, 0x4000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000010900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a32"], 0xa8}, 0x1, 0x0, 0x0, 0x800}, 0x24000840) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @remote, 0x401}, 0x1c) listen(r5, 0x3) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x8}, 0x10, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) 729.216348ms ago: executing program 2 (id=1710): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r1 = syz_io_uring_setup(0x10d4, &(0x7f0000000000)={0x0, 0x7f36, 0x0, 0x4, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x32, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0xa, 0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80800, 0x1}) io_uring_enter(r1, 0x47bc, 0x0, 0x40, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x30000000) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) 573.948027ms ago: executing program 0 (id=1711): syz_mount_image$msdos(&(0x7f0000000380), &(0x7f0000000500)='./file1\x00', 0x8084, &(0x7f0000000900)=ANY=[@ANYBLOB="616c6c6f775f7574696d653d30303030303030303030303030303030303030303030372c646f74732c646f74732c6e6f636173652c646f74732c636865636b3d72656c617865642c646f74732c6e6f646f74732c646f74732c0032884758edd2e7a17e3c116a014262927783807ed4e210440ddebdf7d64a629cc9e873202c6d1e1d7dbabad279cb290d8a6c81b9ee715a035afdc5af3e15b932174f56cf4f009847fbc0e187d20fe47e50595251e835b306e05bc51afba211073e289eb499be4d726e3efbbeb1eb175e92b262c4ee4cee83e529784e53c874b73bb376876e2f3b2e667330e12c337d3a8b8cacccd9d86bc4c2f3b8971a79fb8f69af7b1d19592bf6a7186f7d4322045a99eaa207c407ab52aeadaaf1d089c278fccfb2138f"], 0x1, 0x170, &(0x7f0000000780)="$eJzs2z+LE0EYB+B3Tdy70+ZqsViwsQpqZanICeKCoqTQSuG0uZMDr1mt8ims/YKCpErlSLIh0ZAQgmY3XJ6nyQs/knkn7B9mYN7d/nR2enH58eLlMA6zLLqPoohfWRzHtehEbRAAwFUySil+ppTSwSCOvkdKqe2OAIBtG+XTwvsfAPbG2vX/w5YaAwC2xv4/AOyf12/ePn9clieviuIw4seg6lf9+rPOnz4rT+4VE8fzbw2rqt+Z5ffrvPg7vx43pvmDpXked+/U+Th78qJcyG/G6fanDwAAAHuhV8wsXd/3eqvyuvpjf2Bh/d6NW93GpgEAbODyy9ez9+fnHz43UBxNRsyaHXSz4lsLf8vOFp3YiTYUa4vxJfu/f7nNpxLQhPlN33YnAAAAAAAAAAAAAADAKv94VCiPiCVRRL7uZMFB41MFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAmd8BAAD//27zPto=") syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000008c0)={[{@noblock_validity}, {}, {@auto_da_alloc}, {@jqfmt_vfsv1}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@discard}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") r0 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x26) fallocate(r0, 0x0, 0x0, 0x1001f0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0xc64}, 0x10014, 0x0, 0x800000, 0x0, 0x4, 0x2, 0x6, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bind$unix(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000200)=0x9b, 0x4) socket$packet(0x11, 0x3, 0x300) syz_clone(0x80201000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) munlockall() io_uring_setup(0x16e2, 0x0) 46.270807ms ago: executing program 0 (id=1712): timer_create(0x1, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) quotactl$Q_SYNC(0xffffffff80000102, 0x110e22ffff, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000240)={[{@dioread_lock}, {@resgid}, {@mblk_io_submit}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resgid}, {@errors_remount}, {@grpid}, {@block_validity}]}, 0xfc, 0x58f, &(0x7f0000002d00)="$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") chdir(&(0x7f0000000400)='./file0\x00') r0 = open(&(0x7f00000000c0)='.\x00', 0x80100, 0x8) rename(0x0, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 0s ago: executing program 8 (id=1713): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x3fff, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x4}, {0xffff, 0xffff}, {0xfff1, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0xdc}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r3, {0x4}, {0xffff, 0xffff}, {0xe, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) kernel console output (not intermixed with test programs): ch could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.881595][ T5740] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.899826][ T10] usb 13-1: enqueue for inactive port 0 [ 68.913508][ T10] usb 13-1: enqueue for inactive port 0 [ 68.944779][ T5740] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.951762][ T5740] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.971275][ T5834] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 68.977826][ T5740] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.024108][ T10] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 69.046672][ T5834] EXT4-fs (loop1): 1 truncate cleaned up [ 69.065037][ T5847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.074650][ T5834] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.089450][ T5839] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.091344][ T5740] hsr_slave_0: entered promiscuous mode [ 69.102308][ T5847] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.129894][ T5740] hsr_slave_1: entered promiscuous mode [ 69.135861][ T5740] debugfs: 'hsr0' already exists in 'hsr' [ 69.141603][ T5740] Cannot create hsr debugfs directory [ 69.175731][ T3328] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.191574][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.331773][ T5740] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 69.341661][ T5740] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 69.350959][ T5740] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 69.360057][ T5740] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 69.531394][ T5898] set_capacity_and_notify: 6 callbacks suppressed [ 69.531411][ T5898] loop2: detected capacity change from 0 to 512 [ 69.545143][ T5740] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.578795][ T5898] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.605241][ T5740] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.616583][ T5898] ext4 filesystem being mounted at /202/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 69.648625][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.655733][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.679266][ T5898] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #2: comm syz.2.788: corrupted inode contents [ 69.696636][ T5918] netlink: 4 bytes leftover after parsing attributes in process `syz.6.793'. [ 69.710696][ T5898] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #2: comm syz.2.788: mark_inode_dirty error [ 69.734922][ T5918] team0: Port device team_slave_0 removed [ 69.750535][ T5898] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #2: comm syz.2.788: corrupted inode contents [ 69.763591][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.764414][ T5916] loop0: detected capacity change from 0 to 2048 [ 69.770753][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.787591][ T5898] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #2: comm syz.2.788: mark_inode_dirty error [ 69.857274][ T5916] Alternate GPT is invalid, using primary GPT. [ 69.863606][ T5916] loop0: p1 p2 p3 [ 69.867402][ T5916] loop0: partition table partially beyond EOD, truncated [ 69.890487][ T29] kauditd_printk_skb: 33 callbacks suppressed [ 69.890502][ T29] audit: type=1326 audit(1769014690.513:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5928 comm="syz.6.795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c7ffdacb9 code=0x7ffc0000 [ 69.920003][ T29] audit: type=1326 audit(1769014690.513:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5928 comm="syz.6.795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c7ffdacb9 code=0x7ffc0000 [ 70.008166][ T5740] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.047781][ T29] audit: type=1326 audit(1769014690.513:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5928 comm="syz.6.795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3c7ffdacb9 code=0x7ffc0000 [ 70.071158][ T29] audit: type=1326 audit(1769014690.513:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5928 comm="syz.6.795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c7ffdacb9 code=0x7ffc0000 [ 70.094500][ T29] audit: type=1326 audit(1769014690.523:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5928 comm="syz.6.795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c7ffdacb9 code=0x7ffc0000 [ 70.117737][ T29] audit: type=1326 audit(1769014690.533:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5928 comm="syz.6.795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f3c7ffdacb9 code=0x7ffc0000 [ 70.141393][ T29] audit: type=1400 audit(1769014690.583:623): avc: denied { connect } for pid=5927 comm="syz.1.794" lport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 70.161750][ T29] audit: type=1326 audit(1769014690.593:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5928 comm="syz.6.795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c7ffdacb9 code=0x7ffc0000 [ 70.185255][ T29] audit: type=1326 audit(1769014690.593:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5928 comm="syz.6.795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c7ffdacb9 code=0x7ffc0000 [ 70.505232][ T5740] veth0_vlan: entered promiscuous mode [ 70.533009][ T5740] veth1_vlan: entered promiscuous mode [ 70.560067][ T5740] veth0_macvtap: entered promiscuous mode [ 70.572455][ T3332] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.585682][ T5740] veth1_macvtap: entered promiscuous mode [ 70.625581][ T5740] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.653627][ T5990] netlink: 60 bytes leftover after parsing attributes in process `syz.2.805'. [ 70.675711][ T5740] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.699672][ T52] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.710809][ T29] audit: type=1400 audit(1769014691.333:626): avc: denied { execute_no_trans } for pid=5994 comm="syz.6.807" path="/36/file1" dev="tmpfs" ino=211 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 70.759501][ T52] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.785346][ T3513] hid-generic 0003:0003:0000.0003: unknown main item tag 0x0 [ 70.792776][ T3513] hid-generic 0003:0003:0000.0003: unknown main item tag 0x0 [ 70.800254][ T3513] hid-generic 0003:0003:0000.0003: unknown main item tag 0x0 [ 70.825240][ T3513] hid-generic 0003:0003:0000.0003: hidraw0: USB HID v0.00 Device [syz1] on syz1 [ 70.836879][ T52] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.847197][ T6002] syzkaller1: entered promiscuous mode [ 70.852796][ T6002] syzkaller1: entered allmulticast mode [ 70.902664][ T6006] fido_id[6006]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 70.952233][ T52] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.028703][ T6012] SELinux: failed to load policy [ 71.281061][ T6048] syzkaller0: entered promiscuous mode [ 71.286659][ T6048] syzkaller0: entered allmulticast mode [ 71.437238][ T6060] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 71.529244][ T6065] loop0: detected capacity change from 0 to 1024 [ 71.554673][ T6065] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.623478][ T6070] loop6: detected capacity change from 0 to 1024 [ 71.653150][ T3328] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.670115][ T6070] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.733864][ T6070] EXT4-fs (loop6): shut down requested (0) [ 71.752812][ T6081] loop0: detected capacity change from 0 to 1024 [ 71.775500][ T6081] ext4: Unknown parameter 'func' [ 71.834169][ T4994] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.888355][ T6087] netlink: 12 bytes leftover after parsing attributes in process `syz.6.825'. [ 71.897314][ T6087] netlink: 12 bytes leftover after parsing attributes in process `syz.6.825'. [ 71.940280][ T6087] netlink: 12 bytes leftover after parsing attributes in process `syz.6.825'. [ 71.949186][ T6087] netlink: 12 bytes leftover after parsing attributes in process `syz.6.825'. [ 72.078975][ T6092] loop1: detected capacity change from 0 to 128 [ 72.123756][ T6092] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 72.148247][ T6092] ext4 filesystem being mounted at /184/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 72.166663][ T6097] loop6: detected capacity change from 0 to 512 [ 72.190216][ T6097] EXT4-fs: Ignoring removed oldalloc option [ 72.243636][ T6108] loop7: detected capacity change from 0 to 1024 [ 72.255065][ T6097] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.269165][ T3318] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 72.298762][ T6097] ext4 filesystem being mounted at /46/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 72.299633][ T6108] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.333159][ T6097] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.830: bg 0: block 217: padding at end of block bitmap is not set [ 72.361633][ T6097] EXT4-fs (loop6): Remounting filesystem read-only [ 72.381860][ T6108] EXT4-fs error (device loop7): ext4_xattr_inode_iget:441: inode #11: comm syz.7.832: missing EA_INODE flag [ 72.412693][ T6108] EXT4-fs (loop7): Remounting filesystem read-only [ 72.423665][ T6108] EXT4-fs (loop7): shut down requested (1) [ 72.447977][ T4994] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.458844][ T6108] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000. [ 72.490695][ T5740] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.630856][ T6129] loop7: detected capacity change from 0 to 512 [ 72.661336][ T6129] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.686860][ T6135] loop2: detected capacity change from 0 to 7 [ 72.697317][ T6129] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.712994][ T6135] loop2: [ 72.762411][ T6140] netlink: 4 bytes leftover after parsing attributes in process `syz.6.845'. [ 72.780635][ T6141] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 73.121672][ T5740] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.269436][ T6146] EXT4-fs: Ignoring removed bh option [ 73.301297][ T6159] EXT4-fs: Ignoring removed i_version option [ 73.307408][ T6159] EXT4-fs: Ignoring removed nobh option [ 73.314246][ T6159] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 73.330440][ T6159] EXT4-fs (loop0): 1 truncate cleaned up [ 73.341374][ T6159] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.354662][ T6146] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.426955][ T3328] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.442856][ T3332] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.483833][ T6171] syzkaller1: entered promiscuous mode [ 73.489363][ T6171] syzkaller1: entered allmulticast mode [ 73.629629][ T6182] netlink: 4 bytes leftover after parsing attributes in process `syz.7.859'. [ 73.679980][ T6188] pimreg: entered allmulticast mode [ 73.790431][ T6188] pimreg: left allmulticast mode [ 73.822624][ T6196] EXT4-fs: Ignoring removed oldalloc option [ 73.839708][ T6196] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.852452][ T6196] ext4 filesystem being mounted at /179/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 73.896410][ T3328] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.967876][ T6204] program syz.0.865 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 74.045223][ T6201] bio_check_eod: 44 callbacks suppressed [ 74.045241][ T6201] syz.6.866: attempt to access beyond end of device [ 74.045241][ T6201] loop6: rw=2049, sector=129, nr_sectors = 8 limit=128 [ 74.065728][ T6206] syz.6.866: attempt to access beyond end of device [ 74.065728][ T6206] loop6: rw=2049, sector=585, nr_sectors = 24 limit=128 [ 74.096322][ T6206] syz.6.866: attempt to access beyond end of device [ 74.096322][ T6206] loop6: rw=2049, sector=617, nr_sectors = 48 limit=128 [ 74.111455][ T6201] syz.6.866: attempt to access beyond end of device [ 74.111455][ T6201] loop6: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 74.136554][ T6206] syz.6.866: attempt to access beyond end of device [ 74.136554][ T6206] loop6: rw=2049, sector=673, nr_sectors = 24 limit=128 [ 74.157508][ T6201] syz.6.866: attempt to access beyond end of device [ 74.157508][ T6201] loop6: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 74.180876][ T6206] syz.6.866: attempt to access beyond end of device [ 74.180876][ T6206] loop6: rw=2049, sector=705, nr_sectors = 16 limit=128 [ 74.197330][ T6206] syz.6.866: attempt to access beyond end of device [ 74.197330][ T6206] loop6: rw=2049, sector=729, nr_sectors = 16 limit=128 [ 74.208106][ T6201] syz.6.866: attempt to access beyond end of device [ 74.208106][ T6201] loop6: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 74.211804][ T6206] syz.6.866: attempt to access beyond end of device [ 74.211804][ T6206] loop6: rw=2049, sector=753, nr_sectors = 8 limit=128 [ 74.240311][ T6214] EXT4-fs: Ignoring removed oldalloc option [ 74.248796][ T6214] EXT4-fs: Ignoring removed nobh option [ 74.271664][ T6214] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=6064e02c, mo2=0002] [ 74.279862][ T6214] System zones: 1-12 [ 74.284464][ T6214] EXT4-fs (loop0): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.310991][ T6214] EXT4-fs (loop0): shut down requested (1) [ 74.427059][ T6219] netlink: 4 bytes leftover after parsing attributes in process `syz.1.871'. [ 74.853179][ T6232] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 74.860449][ T6232] IPv6: NLM_F_CREATE should be set when creating new route [ 75.046820][ T3328] EXT4-fs (loop0): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 75.077119][ T6237] netlink: 8 bytes leftover after parsing attributes in process `syz.7.879'. [ 75.117838][ T6242] netlink: 20 bytes leftover after parsing attributes in process `syz.2.881'. [ 75.177416][ T6250] set_capacity_and_notify: 7 callbacks suppressed [ 75.177429][ T6250] loop0: detected capacity change from 0 to 256 [ 75.217188][ T6250] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 75.237644][ T6252] loop7: detected capacity change from 0 to 2048 [ 75.316285][ T6257] loop6: detected capacity change from 0 to 512 [ 75.328410][ T6252] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.343677][ T29] kauditd_printk_skb: 37 callbacks suppressed [ 75.343688][ T29] audit: type=1326 audit(1769014695.963:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6262 comm="syz.1.888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc484c7acb9 code=0x7ffc0000 [ 75.347755][ T6257] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.351175][ T29] audit: type=1326 audit(1769014695.973:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6262 comm="syz.1.888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc484c7acb9 code=0x7ffc0000 [ 75.386476][ T6257] ext4 filesystem being mounted at /57/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 75.422619][ T29] audit: type=1326 audit(1769014696.033:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6262 comm="syz.1.888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc484c7acb9 code=0x7ffc0000 [ 75.446004][ T29] audit: type=1326 audit(1769014696.033:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6262 comm="syz.1.888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc484c7acb9 code=0x7ffc0000 [ 75.469309][ T29] audit: type=1326 audit(1769014696.033:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6262 comm="syz.1.888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc484c7acb9 code=0x7ffc0000 [ 75.492452][ T29] audit: type=1326 audit(1769014696.043:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6262 comm="syz.1.888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc484c7acb9 code=0x7ffc0000 [ 75.508257][ T6268] netlink: 12 bytes leftover after parsing attributes in process `syz.1.889'. [ 75.515870][ T29] audit: type=1326 audit(1769014696.043:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6262 comm="syz.1.888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc484c7acb9 code=0x7ffc0000 [ 75.547999][ T29] audit: type=1326 audit(1769014696.043:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6262 comm="syz.1.888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc484c7acb9 code=0x7ffc0000 [ 75.571220][ T29] audit: type=1326 audit(1769014696.043:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6262 comm="syz.1.888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc484c7acb9 code=0x7ffc0000 [ 75.583328][ T6268] 8021q: adding VLAN 0 to HW filter on device bond2 [ 75.594567][ T29] audit: type=1326 audit(1769014696.043:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6262 comm="syz.1.888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fc484c7acb9 code=0x7ffc0000 [ 75.635099][ T6268] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 75.644743][ T6268] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 75.662913][ T6257] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #18: comm syz.6.887: corrupted inode contents [ 75.675874][ T6257] EXT4-fs error (device loop6): ext4_dirty_inode:6502: inode #18: comm syz.6.887: mark_inode_dirty error [ 75.687409][ T6257] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #18: comm syz.6.887: corrupted inode contents [ 75.700076][ T6257] EXT4-fs error (device loop6): ext4_xattr_delete_inode:3001: inode #18: comm syz.6.887: mark_inode_dirty error [ 75.722247][ T6257] EXT4-fs error (device loop6): ext4_xattr_delete_inode:3004: inode #18: comm syz.6.887: mark inode dirty (error -117) [ 75.735478][ T6257] EXT4-fs warning (device loop6): ext4_evict_inode:273: xattr delete (err -117) [ 75.752739][ T5740] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.775914][ T4994] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.818909][ T6282] loop1: detected capacity change from 0 to 1024 [ 75.827105][ T6278] netlink: 4 bytes leftover after parsing attributes in process `syz.6.893'. [ 75.836651][ T6282] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 75.845450][ T6282] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 75.856364][ T6282] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 75.868906][ T6282] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 75.879592][ T6282] EXT4-fs (loop1): invalid journal inode [ 75.885431][ T6282] EXT4-fs (loop1): can't get journal size [ 75.891861][ T6282] EXT4-fs error (device loop1): ext4_protect_reserved_inode:182: inode #3: comm syz.1.892: blocks 2-2 from inode overlap system zone [ 75.905989][ T6282] EXT4-fs (loop1): failed to initialize system zone (-117) [ 75.913310][ T6282] EXT4-fs (loop1): mount failed [ 75.921596][ T6286] loop7: detected capacity change from 0 to 512 [ 75.945397][ T6286] EXT4-fs warning (device loop7): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 75.976724][ T6286] EXT4-fs (loop7): mount failed [ 75.989726][ T6290] netlink: 4 bytes leftover after parsing attributes in process `syz.0.894'. [ 75.999490][ T6290] netlink: 8 bytes leftover after parsing attributes in process `syz.0.894'. [ 76.386373][ T6301] loop0: detected capacity change from 0 to 8192 [ 76.425612][ T6308] netlink: 4 bytes leftover after parsing attributes in process `syz.1.899'. [ 76.502220][ T6293] loop7: detected capacity change from 0 to 4096 [ 76.575277][ T6301] FAT-fs (loop0): error, clusters badly computed (2 != 1) [ 76.582545][ T6301] FAT-fs (loop0): Filesystem has been set read-only [ 76.930186][ T6293] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 76.945550][ T6293] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.029990][ T6328] syzkaller1: entered promiscuous mode [ 77.035686][ T6328] syzkaller1: entered allmulticast mode [ 77.096239][ T5740] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.251013][ T6345] netlink: 4 bytes leftover after parsing attributes in process `syz.0.914'. [ 77.645726][ T6370] loop1: detected capacity change from 0 to 512 [ 77.655438][ T6370] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 77.693057][ T6370] EXT4-fs (loop1): 1 orphan inode deleted [ 77.698965][ T6370] EXT4-fs (loop1): 1 truncate cleaned up [ 77.709549][ T6370] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.728644][ T6370] EXT4-fs (loop1): shut down requested (2) [ 77.761225][ T6370] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.955454][ T1598] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.016655][ T1598] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.069435][ T6395] loop2: detected capacity change from 0 to 256 [ 78.086428][ T1598] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.102293][ T6395] Invalid ELF header len 1 [ 78.185954][ T6403] loop2: detected capacity change from 0 to 512 [ 78.187811][ T1598] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.203905][ T6403] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 78.215520][ T6403] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 78.225678][ T6403] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.936: Corrupt directory, running e2fsck is recommended [ 78.239474][ T6403] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 78.247824][ T6403] EXT4-fs error (device loop2): ext4_iget_extra_inode:5073: inode #15: comm syz.2.936: corrupted in-inode xattr: e_name out of bounds [ 78.262907][ T6403] EXT4-fs (loop2): Remounting filesystem read-only [ 78.271034][ T6403] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.283758][ T6401] tipc: Started in network mode [ 78.287525][ T6403] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 78.288683][ T6401] tipc: Node identity 66992490604c, cluster identity 4711 [ 78.288812][ T6401] tipc: Enabled bearer , priority 0 [ 78.300196][ T6403] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 78.324068][ T6403] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.936: Corrupt directory, running e2fsck is recommended [ 78.338360][ T6406] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 78.349868][ T6406] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 78.359996][ T6406] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.936: Corrupt directory, running e2fsck is recommended [ 78.378361][ T6403] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 78.389939][ T6403] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 78.400045][ T6403] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.936: Corrupt directory, running e2fsck is recommended [ 78.414120][ T6403] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 78.441383][ T6405] syzkaller0: entered promiscuous mode [ 78.447062][ T6405] syzkaller0: entered allmulticast mode [ 78.453621][ T6405] tipc: Resetting bearer [ 78.460432][ T3332] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.527827][ T6400] tipc: Resetting bearer [ 78.550874][ T6400] tipc: Disabling bearer [ 78.563177][ T1598] bridge_slave_1: left allmulticast mode [ 78.568935][ T1598] bridge_slave_1: left promiscuous mode [ 78.574790][ T1598] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.583154][ T1598] bridge_slave_0: left allmulticast mode [ 78.589049][ T1598] bridge_slave_0: left promiscuous mode [ 78.594940][ T1598] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.716945][ T1598] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 78.727100][ T1598] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 78.736870][ T1598] bond0 (unregistering): Released all slaves [ 78.749671][ T6383] chnl_net:caif_netlink_parms(): no params data found [ 78.779086][ T3400] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 78.800832][ T1598] hsr_slave_0: left promiscuous mode [ 78.814427][ T3400] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 78.825606][ T1598] hsr_slave_1: left promiscuous mode [ 78.831344][ T1598] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 78.838828][ T1598] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 78.854527][ T6432] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.866972][ T1598] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 78.874406][ T1598] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 78.905250][ T1598] veth1_macvtap: left promiscuous mode [ 78.919333][ T6440] fido_id[6440]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 78.932885][ T1598] veth0_macvtap: left promiscuous mode [ 78.939564][ T1598] veth1_vlan: left promiscuous mode [ 78.944822][ T1598] veth0_vlan: left promiscuous mode [ 78.946419][ T4994] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.021739][ T6446] netlink: 4 bytes leftover after parsing attributes in process `syz.6.945'. [ 79.061070][ T1598] team0 (unregistering): Port device team_slave_1 removed [ 79.071327][ T1598] team0 (unregistering): Port device team_slave_0 removed [ 79.179940][ T6461] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.216650][ T6383] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.223735][ T6383] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.231433][ T6383] bridge_slave_0: entered allmulticast mode [ 79.238048][ T6383] bridge_slave_0: entered promiscuous mode [ 79.253215][ T6383] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.260404][ T6383] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.297777][ T6383] bridge_slave_1: entered allmulticast mode [ 79.314734][ T6383] bridge_slave_1: entered promiscuous mode [ 79.342437][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.419581][ T6383] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.480421][ T6383] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.572085][ T6383] team0: Port device team_slave_0 added [ 79.601275][ T6383] team0: Port device team_slave_1 added [ 79.629545][ T6383] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.636544][ T6383] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.662635][ T6383] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.695410][ T6383] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.702397][ T6383] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.728462][ T6383] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.764888][ T6383] hsr_slave_0: entered promiscuous mode [ 79.777503][ T6383] hsr_slave_1: entered promiscuous mode [ 79.786778][ T6383] debugfs: 'hsr0' already exists in 'hsr' [ 79.792549][ T6383] Cannot create hsr debugfs directory [ 80.033634][ T6383] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 80.066993][ T6520] netlink: 188 bytes leftover after parsing attributes in process `syz.6.956'. [ 80.079566][ T6383] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 80.091617][ T6383] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 80.111411][ T6383] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 80.307461][ T6383] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.336393][ T6383] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.390717][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.397821][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.412578][ T1708] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.419713][ T1708] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.472766][ T1598] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.569124][ T1598] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.635189][ T6525] bio_check_eod: 149 callbacks suppressed [ 80.635203][ T6525] syz.0.958: attempt to access beyond end of device [ 80.635203][ T6525] loop0: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 80.654682][ T6525] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 80.663935][ T6533] syz.0.958: attempt to access beyond end of device [ 80.663935][ T6533] loop0: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 80.674294][ T1598] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.677704][ T6533] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 80.706902][ T6383] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.712498][ T6533] syz.0.958: attempt to access beyond end of device [ 80.712498][ T6533] loop0: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 80.727299][ T6533] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 80.747633][ T1598] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.839252][ T1598] bridge_slave_1: left allmulticast mode [ 80.844976][ T1598] bridge_slave_1: left promiscuous mode [ 80.850666][ T1598] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.858887][ T1598] bridge_slave_0: left allmulticast mode [ 80.864606][ T1598] bridge_slave_0: left promiscuous mode [ 80.870389][ T1598] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.926933][ T6576] netlink: 4 bytes leftover after parsing attributes in process `syz.2.966'. [ 81.043037][ T1598] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 81.078865][ T1598] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 81.088437][ T1598] bond0 (unregistering): Released all slaves [ 81.146908][ T1598] hsr_slave_0: left promiscuous mode [ 81.166455][ T1598] hsr_slave_1: left promiscuous mode [ 81.172173][ T1598] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 81.179599][ T1598] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 81.209382][ T1598] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 81.216891][ T1598] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 81.267253][ T1598] veth1_macvtap: left promiscuous mode [ 81.281137][ T1598] veth0_macvtap: left promiscuous mode [ 81.302669][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 81.302684][ T29] audit: type=1400 audit(1769014701.923:691): avc: denied { bind } for pid=6604 comm="syz.1.971" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 81.334351][ T1598] veth1_vlan: left promiscuous mode [ 81.344551][ T1598] veth0_vlan: left promiscuous mode [ 81.491548][ T1598] team0 (unregistering): Port device team_slave_1 removed [ 81.646111][ T6383] veth0_vlan: entered promiscuous mode [ 81.673760][ T6383] veth1_vlan: entered promiscuous mode [ 81.734670][ T6383] veth0_macvtap: entered promiscuous mode [ 81.760601][ T6552] chnl_net:caif_netlink_parms(): no params data found [ 81.779157][ T6383] veth1_macvtap: entered promiscuous mode [ 81.814403][ T6383] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.878177][ T6383] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.916039][ T37] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.954222][ T37] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.968334][ T6552] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.975489][ T6552] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.990240][ T6552] bridge_slave_0: entered allmulticast mode [ 81.996895][ T6552] bridge_slave_0: entered promiscuous mode [ 82.003850][ T37] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.014414][ T6552] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.021550][ T6552] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.029646][ T6552] bridge_slave_1: entered allmulticast mode [ 82.036267][ T6552] bridge_slave_1: entered promiscuous mode [ 82.042900][ T37] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.085439][ T6552] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.102148][ T6552] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.190637][ T6552] team0: Port device team_slave_0 added [ 82.210377][ T6552] team0: Port device team_slave_1 added [ 82.235673][ T6552] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.242807][ T6552] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.268959][ T6552] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.286069][ T6552] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.293174][ T6552] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.319110][ T6552] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.376900][ T6552] hsr_slave_0: entered promiscuous mode [ 82.383064][ T6552] hsr_slave_1: entered promiscuous mode [ 82.433029][ T6678] netlink: 4 bytes leftover after parsing attributes in process `syz.1.990'. [ 82.434869][ T6552] debugfs: 'hsr0' already exists in 'hsr' [ 82.447733][ T6552] Cannot create hsr debugfs directory [ 82.588397][ T6552] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 82.600084][ T6552] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 82.613287][ T6695] set_capacity_and_notify: 5 callbacks suppressed [ 82.613299][ T6695] loop2: detected capacity change from 0 to 1024 [ 82.744628][ T6695] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 82.777801][ T6705] loop0: detected capacity change from 0 to 512 [ 82.784504][ T6695] ext4 filesystem being mounted at /236/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.811616][ T6705] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.833891][ T6695] EXT4-fs error (device loop2): ext4_map_blocks:825: inode #15: comm syz.2.984: lblock 0 mapped to illegal pblock 0 (length 6) [ 82.849981][ T6695] EXT4-fs error (device loop2): ext4_map_blocks:825: inode #15: comm syz.2.984: lblock 0 mapped to illegal pblock 0 (length 1) [ 82.864306][ T6695] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 82.876714][ T6695] EXT4-fs (loop2): This should not happen!! Data will be lost [ 82.876714][ T6695] [ 82.887053][ T6705] ext4 filesystem being mounted at /211/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.903914][ T6695] EXT4-fs error (device loop2): ext4_map_blocks:825: inode #15: block 3: comm syz.2.984: lblock 3 mapped to illegal pblock 3 (length 3) [ 82.924755][ T6695] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 82.937062][ T6695] EXT4-fs (loop2): This should not happen!! Data will be lost [ 82.937062][ T6695] [ 83.092464][ T1753] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm kworker/u8:12: bg 0: block 112: padding at end of block bitmap is not set [ 83.107353][ T1753] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 28 [ 83.119560][ T1753] EXT4-fs (loop2): This should not happen!! Data will be lost [ 83.119560][ T1753] [ 83.125516][ T6552] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 83.129249][ T1753] EXT4-fs (loop2): Total free blocks count 0 [ 83.141869][ T1753] EXT4-fs (loop2): Free/Dirty block details [ 83.147891][ T1753] EXT4-fs (loop2): free_blocks=0 [ 83.182603][ T6552] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 83.201420][ T6713] loop2: detected capacity change from 0 to 1024 [ 83.299744][ T6552] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.321796][ T6709] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #18: comm syz.0.985: corrupted inode contents [ 83.339099][ T6713] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.352993][ T6729] loop1: detected capacity change from 0 to 128 [ 83.354911][ T6552] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.382493][ T6709] EXT4-fs (loop0): Remounting filesystem read-only [ 83.389975][ T6729] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 83.413001][ T6709] EXT4-fs warning (device loop0): ext4_evict_inode:273: xattr delete (err -30) [ 83.427695][ T1708] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.434793][ T1708] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.455178][ T6552] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 83.465580][ T6552] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 83.477574][ T6729] ext4 filesystem being mounted at /223/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 83.486065][ T1708] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.516416][ T1708] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.534884][ T3332] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.551510][ T3328] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.602335][ T6745] loop2: detected capacity change from 0 to 128 [ 83.615559][ T3318] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 83.629629][ T3469] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 83.647223][ T3469] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 83.661108][ T6747] loop0: detected capacity change from 0 to 2048 [ 83.670220][ T6739] syzkaller0: entered promiscuous mode [ 83.675751][ T6739] syzkaller0: entered allmulticast mode [ 83.686434][ T6745] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 83.733227][ T6745] ext4 filesystem being mounted at /238/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.754273][ T6747] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.786467][ T6552] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.886805][ T3328] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.898076][ T3332] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 83.936875][ T6774] loop2: detected capacity change from 0 to 1024 [ 83.991054][ T6786] loop8: detected capacity change from 0 to 512 [ 84.007393][ T6786] EXT4-fs warning (device loop8): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 84.019141][ T6786] EXT4-fs warning (device loop8): dx_probe:849: Enable large directory feature to access it [ 84.029264][ T6786] EXT4-fs warning (device loop8): dx_probe:934: inode #2: comm syz.8.1000: Corrupt directory, running e2fsck is recommended [ 84.031416][ T6774] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 84.044345][ T6786] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -117 [ 84.062434][ T6786] EXT4-fs error (device loop8): ext4_iget_extra_inode:5073: inode #15: comm syz.8.1000: corrupted in-inode xattr: e_name out of bounds [ 84.081421][ T6786] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.1000: couldn't read orphan inode 15 (err -117) [ 84.094109][ T6786] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.108260][ T6786] EXT4-fs warning (device loop8): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 84.119841][ T6786] EXT4-fs warning (device loop8): dx_probe:849: Enable large directory feature to access it [ 84.129994][ T6786] EXT4-fs warning (device loop8): dx_probe:934: inode #2: comm syz.8.1000: Corrupt directory, running e2fsck is recommended [ 84.136825][ T6774] ext4 filesystem being mounted at /239/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.142929][ T6786] EXT4-fs error (device loop8): ext4_readdir:264: inode #2: block 3: comm syz.8.1000: path /9/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0 [ 84.174283][ T6786] EXT4-fs error (device loop8): ext4_readdir:264: inode #2: block 8: comm syz.8.1000: path /9/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0 [ 84.179139][ T6793] loop1: detected capacity change from 0 to 512 [ 84.222296][ T6774] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.996: bg 0: block 112: padding at end of block bitmap is not set [ 84.223039][ T6383] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.283057][ T6774] EXT4-fs error (device loop2): ext4_map_blocks:825: inode #15: comm syz.2.996: lblock 0 mapped to illegal pblock 0 (length 1) [ 84.297343][ T6793] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.339242][ T6810] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #15: comm syz.2.996: lblock 0 mapped to illegal pblock 0 (length 1) [ 84.342359][ T6793] ext4 filesystem being mounted at /225/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.366830][ T6552] veth0_vlan: entered promiscuous mode [ 84.375065][ T6552] veth1_vlan: entered promiscuous mode [ 84.400022][ T6552] veth0_macvtap: entered promiscuous mode [ 84.417706][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.430327][ T6552] veth1_macvtap: entered promiscuous mode [ 84.457198][ T6552] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.465354][ T29] audit: type=1326 audit(1769014705.093:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6816 comm="syz.0.1013" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0c21d7acb9 code=0x0 [ 84.470060][ T6552] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.500417][ T6819] loop1: detected capacity change from 0 to 512 [ 84.521440][ T6819] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.536648][ T3332] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 84.550366][ T6819] ext4 filesystem being mounted at /226/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.591629][ T37] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.615393][ T3370] IPVS: starting estimator thread 0... [ 84.642020][ T37] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.694529][ T37] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.703376][ T37] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.712336][ T29] audit: type=1400 audit(1769014705.343:693): avc: denied { watch } for pid=6840 comm="syz.8.1007" path="/12" dev="tmpfs" ino=75 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 84.714492][ T6829] IPVS: using max 2640 ests per chain, 132000 per kthread [ 84.746666][ T29] audit: type=1400 audit(1769014705.373:694): avc: denied { watch_reads } for pid=6840 comm="syz.8.1007" path="/12" dev="tmpfs" ino=75 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 84.800168][ T6833] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #18: comm syz.1.1004: corrupted inode contents [ 84.866868][ T29] audit: type=1400 audit(1769014705.493:695): avc: denied { connect } for pid=6853 comm="syz.8.1010" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 84.887914][ T6833] EXT4-fs (loop1): Remounting filesystem read-only [ 84.905736][ T6833] EXT4-fs warning (device loop1): ext4_evict_inode:273: xattr delete (err -30) [ 84.907049][ T29] audit: type=1400 audit(1769014705.523:696): avc: denied { setopt } for pid=6853 comm="syz.8.1010" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 85.007817][ T29] audit: type=1326 audit(1769014705.633:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6868 comm="syz.9.1017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b4f32acb9 code=0x7ffc0000 [ 85.031229][ T29] audit: type=1326 audit(1769014705.633:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6868 comm="syz.9.1017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b4f32acb9 code=0x7ffc0000 [ 85.054609][ T29] audit: type=1326 audit(1769014705.633:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6868 comm="syz.9.1017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b4f32acb9 code=0x7ffc0000 [ 85.077916][ T29] audit: type=1326 audit(1769014705.633:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6868 comm="syz.9.1017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b4f32acb9 code=0x7ffc0000 [ 85.199173][ T6891] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 85.209636][ T6891] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.269872][ T6897] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1021'. [ 85.278935][ T6897] bridge_slave_0: default FDB implementation only supports local addresses [ 85.310190][ T6891] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 85.320587][ T6891] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.408156][ T6891] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 85.418517][ T6891] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.466978][ T6891] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 85.477406][ T6891] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.595935][ T12] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.604175][ T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.650560][ T12] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.658892][ T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.678350][ T6914] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.693181][ T12] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.701631][ T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.738932][ T6902] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.747789][ T6902] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.786869][ T12] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.795102][ T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.863393][ T6932] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1025'. [ 85.997251][ T6941] ext4 filesystem being mounted at /245/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.066920][ T53] Bluetooth: hci0: Frame reassembly failed (-84) [ 86.306668][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 86.306686][ T29] audit: type=1326 audit(1769014706.933:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6955 comm="syz.8.1033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe8d47acb9 code=0x7ffc0000 [ 86.340926][ T29] audit: type=1326 audit(1769014706.963:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6955 comm="syz.8.1033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe8d47acb9 code=0x7ffc0000 [ 86.364417][ T29] audit: type=1326 audit(1769014706.963:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6955 comm="syz.8.1033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fbe8d47acb9 code=0x7ffc0000 [ 86.387768][ T29] audit: type=1326 audit(1769014706.963:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6955 comm="syz.8.1033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe8d47acb9 code=0x7ffc0000 [ 86.411125][ T29] audit: type=1326 audit(1769014706.963:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6955 comm="syz.8.1033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe8d47acb9 code=0x7ffc0000 [ 86.434496][ T29] audit: type=1326 audit(1769014706.963:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6955 comm="syz.8.1033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbe8d47acb9 code=0x7ffc0000 [ 86.457920][ T29] audit: type=1326 audit(1769014706.963:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6955 comm="syz.8.1033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe8d47acb9 code=0x7ffc0000 [ 86.481230][ T29] audit: type=1326 audit(1769014706.963:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6955 comm="syz.8.1033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe8d47acb9 code=0x7ffc0000 [ 86.504739][ T29] audit: type=1326 audit(1769014706.963:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6955 comm="syz.8.1033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=33 compat=0 ip=0x7fbe8d47acb9 code=0x7ffc0000 [ 86.518009][ T6958] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.527962][ T29] audit: type=1326 audit(1769014706.963:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6955 comm="syz.8.1033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe8d47acb9 code=0x7ffc0000 [ 86.551253][ T6958] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.1035: bg 0: block 112: padding at end of block bitmap is not set [ 86.582803][ T6958] EXT4-fs error (device loop8): ext4_map_blocks:825: inode #15: comm syz.8.1035: lblock 0 mapped to illegal pblock 0 (length 1) [ 86.598073][ T6958] EXT4-fs error (device loop8): ext4_map_blocks:783: inode #15: comm syz.8.1035: lblock 0 mapped to illegal pblock 0 (length 1) [ 86.851116][ T6987] EXT4-fs: inline encryption not supported [ 87.140529][ T7006] IPv6: addrconf: prefix option has invalid lifetime [ 87.296109][ T7009] ext4 filesystem being mounted at /235/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.322447][ T7009] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1050: bg 0: block 112: padding at end of block bitmap is not set [ 87.364241][ T7009] EXT4-fs error (device loop1): ext4_map_blocks:825: inode #15: comm syz.1.1050: lblock 0 mapped to illegal pblock 0 (length 1) [ 87.430598][ T7009] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #15: comm syz.1.1050: lblock 0 mapped to illegal pblock 0 (length 1) [ 87.546474][ T7015] netlink: 'syz.0.1051': attribute type 1 has an invalid length. [ 87.554372][ T7015] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1051'. [ 87.645918][ T7020] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 87.700601][ T7022] set_capacity_and_notify: 9 callbacks suppressed [ 87.700617][ T7022] loop1: detected capacity change from 0 to 1024 [ 87.738778][ T7024] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.746027][ T7024] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.989634][ T7028] loop0: detected capacity change from 0 to 1024 [ 88.018461][ T7028] EXT4-fs: Ignoring removed bh option [ 88.028662][ T7030] netlink: 48 bytes leftover after parsing attributes in process `syz.9.1056'. [ 88.090186][ T7028] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4215: comm syz.0.1066: Allocating blocks 385-513 which overlap fs metadata [ 88.105475][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 88.157301][ T7033] SELinux: policydb magic number 0x2 does not match expected magic number 0xf97cff8c [ 88.180921][ T7033] SELinux: failed to load policy [ 88.193633][ T6827] EXT4-fs (loop0): pa ffff888107a13620: logic 16, phys. 129, len 24 [ 88.201669][ T6827] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 88.219165][ T7040] loop2: detected capacity change from 0 to 7 [ 88.248169][ T7040] loop2: [ 88.263977][ T6996] syz.8.1046 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 88.278210][ T6996] CPU: 0 UID: 0 PID: 6996 Comm: syz.8.1046 Not tainted syzkaller #0 PREEMPT(voluntary) [ 88.278241][ T6996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 88.278346][ T6996] Call Trace: [ 88.278357][ T6996] [ 88.278364][ T6996] __dump_stack+0x1d/0x30 [ 88.278385][ T6996] dump_stack_lvl+0x95/0xd0 [ 88.278407][ T6996] dump_stack+0x15/0x1b [ 88.278424][ T6996] dump_header+0x80/0x240 [ 88.278460][ T6996] oom_kill_process+0x295/0x350 [ 88.278479][ T6996] out_of_memory+0x97d/0xb80 [ 88.278498][ T6996] try_charge_memcg+0x62e/0xa10 [ 88.278543][ T6996] obj_cgroup_charge_pages+0xa6/0x150 [ 88.278636][ T6996] __memcg_kmem_charge_page+0x9e/0x170 [ 88.278671][ T6996] __alloc_frozen_pages_noprof+0x18a/0x350 [ 88.278701][ T6996] alloc_pages_mpol+0xb3/0x260 [ 88.278789][ T6996] alloc_pages_noprof+0x8f/0x130 [ 88.278814][ T6996] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 88.278892][ T6996] __kvmalloc_node_noprof+0x471/0x680 [ 88.278913][ T6996] ? ip_set_alloc+0x24/0x30 [ 88.278935][ T6996] ? ip_set_alloc+0x24/0x30 [ 88.278961][ T6996] ip_set_alloc+0x24/0x30 [ 88.279021][ T6996] hash_netiface_create+0x282/0x740 [ 88.279074][ T6996] ? __pfx_hash_netiface_create+0x10/0x10 [ 88.279099][ T6996] ip_set_create+0x3cf/0x970 [ 88.279131][ T6996] ? __nla_parse+0x40/0x60 [ 88.279157][ T6996] nfnetlink_rcv_msg+0x509/0x5d0 [ 88.279199][ T6996] netlink_rcv_skb+0x123/0x220 [ 88.279269][ T6996] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 88.279300][ T6996] nfnetlink_rcv+0x167/0x1720 [ 88.279371][ T6996] ? __kfree_skb+0x109/0x150 [ 88.279389][ T6996] ? nlmon_xmit+0x4f/0x60 [ 88.279492][ T6996] ? consume_skb+0x49/0x140 [ 88.279513][ T6996] ? nlmon_xmit+0x4f/0x60 [ 88.279528][ T6996] ? dev_hard_start_xmit+0x3a8/0x3e0 [ 88.279551][ T6996] ? __dev_queue_xmit+0x139a/0x1f20 [ 88.279585][ T6996] ? __dev_queue_xmit+0x148/0x1f20 [ 88.279669][ T6996] ? ref_tracker_free+0x37d/0x3e0 [ 88.279734][ T6996] ? __netlink_deliver_tap+0x4dc/0x500 [ 88.279801][ T6996] netlink_unicast+0x5c0/0x690 [ 88.279824][ T6996] netlink_sendmsg+0x5c8/0x6f0 [ 88.279851][ T6996] ? __pfx_netlink_sendmsg+0x10/0x10 [ 88.279962][ T6996] __sock_sendmsg+0x145/0x170 [ 88.280020][ T6996] ____sys_sendmsg+0x31e/0x4a0 [ 88.280042][ T6996] ___sys_sendmsg+0x195/0x1e0 [ 88.280090][ T6996] __x64_sys_sendmsg+0xd4/0x160 [ 88.280118][ T6996] x64_sys_call+0x17ba/0x3000 [ 88.280139][ T6996] do_syscall_64+0xc0/0x2a0 [ 88.280231][ T6996] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.280250][ T6996] RIP: 0033:0x7fbe8d47acb9 [ 88.280295][ T6996] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 88.280317][ T6996] RSP: 002b:00007fbe8bed7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 88.280337][ T6996] RAX: ffffffffffffffda RBX: 00007fbe8d6f5fa0 RCX: 00007fbe8d47acb9 [ 88.280352][ T6996] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003 [ 88.280363][ T6996] RBP: 00007fbe8d4e8bf7 R08: 0000000000000000 R09: 0000000000000000 [ 88.280374][ T6996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 88.280455][ T6996] R13: 00007fbe8d6f6038 R14: 00007fbe8d6f5fa0 R15: 00007ffcf5dc3b48 [ 88.280471][ T6996] [ 88.280514][ T6996] memory: usage 307200kB, limit 307200kB, failcnt 221 [ 88.604539][ T6996] memory+swap: usage 307392kB, limit 9007199254740988kB, failcnt 0 [ 88.612505][ T6996] kmem: usage 303504kB, limit 9007199254740988kB, failcnt 0 [ 88.619811][ T6996] Memory cgroup stats for /syz8: [ 88.620624][ T6996] cache 0 [ 88.628558][ T6996] rss 3784704 [ 88.631853][ T6996] shmem 0 [ 88.634829][ T6996] mapped_file 0 [ 88.638292][ T6996] dirty 0 [ 88.641245][ T6996] writeback 0 [ 88.644592][ T6996] workingset_refault_anon 34 [ 88.649190][ T6996] workingset_refault_file 0 [ 88.653700][ T6996] swap 196608 [ 88.657074][ T6996] swapcached 0 [ 88.660473][ T6996] pgpgin 11712 [ 88.663858][ T6996] pgpgout 10788 [ 88.667366][ T6996] pgfault 12902 [ 88.670858][ T6996] pgmajfault 17 [ 88.674369][ T6996] inactive_anon 0 [ 88.678035][ T6996] active_anon 0 [ 88.681507][ T6996] inactive_file 3784704 [ 88.685695][ T6996] active_file 0 [ 88.689263][ T6996] unevictable 0 [ 88.692743][ T6996] hierarchical_memory_limit 314572800 [ 88.698299][ T6996] hierarchical_memsw_limit 9223372036854771712 [ 88.704502][ T6996] total_cache 0 [ 88.707980][ T6996] total_rss 3784704 [ 88.711796][ T6996] total_shmem 0 [ 88.715289][ T6996] total_mapped_file 0 [ 88.719284][ T6996] total_dirty 0 [ 88.722762][ T6996] total_writeback 0 [ 88.726627][ T6996] total_workingset_refault_anon 34 [ 88.731761][ T6996] total_workingset_refault_file 0 [ 88.736907][ T6996] total_swap 196608 [ 88.740727][ T6996] total_swapcached 0 [ 88.744710][ T6996] total_pgpgin 11712 [ 88.748618][ T6996] total_pgpgout 10788 [ 88.752604][ T6996] total_pgfault 12902 [ 88.756628][ T6996] total_pgmajfault 17 [ 88.760625][ T6996] total_inactive_anon 0 [ 88.764823][ T6996] total_active_anon 0 [ 88.768820][ T6996] total_inactive_file 3784704 [ 88.773505][ T6996] total_active_file 0 [ 88.777522][ T6996] total_unevictable 0 [ 88.781531][ T6996] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz8,task_memcg=/syz8,task=syz.8.1046,pid=6995,uid=0 [ 88.796241][ T6996] Memory cgroup out of memory: Killed process 6995 (syz.8.1046) total-vm:96180kB, anon-rss:5024kB, file-rss:22444kB, shmem-rss:0kB, UID:0 pgtables:144kB oom_score_adj:1000 [ 88.909977][ T7045] loop0: detected capacity change from 0 to 1024 [ 88.963376][ T7051] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 88.970044][ T7051] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 88.977695][ T7051] vhci_hcd vhci_hcd.0: Device attached [ 88.993070][ T7059] netlink: 'syz.9.1064': attribute type 1 has an invalid length. [ 89.000890][ T7059] netlink: 224 bytes leftover after parsing attributes in process `syz.9.1064'. [ 89.022665][ T7057] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(6) [ 89.029204][ T7057] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 89.036731][ T7057] vhci_hcd vhci_hcd.0: Device attached [ 89.084529][ T7051] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(5) [ 89.091098][ T7051] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 89.098777][ T7051] vhci_hcd vhci_hcd.0: Device attached [ 89.114553][ T7051] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(9) [ 89.121084][ T7051] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 89.128618][ T7051] vhci_hcd vhci_hcd.0: Device attached [ 89.174125][ T3469] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 89.190453][ T7071] loop2: detected capacity change from 0 to 1024 [ 89.209661][ T7057] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(12) [ 89.216303][ T7057] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 89.223927][ T7057] vhci_hcd vhci_hcd.0: Device attached [ 89.244119][ T3469] usb 3-1: new full-speed USB device number 2 using vhci_hcd [ 89.286261][ T7051] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 89.295131][ T7051] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 89.358658][ T7051] vhci_hcd vhci_hcd.0: pdev(1) rhport(7) sockfd(17) [ 89.365288][ T7051] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 89.372988][ T7051] vhci_hcd vhci_hcd.0: Device attached [ 89.442748][ T7077] vhci_hcd: connection closed [ 89.442942][ T61] vhci_hcd vhci_hcd.1: stop threads [ 89.452976][ T61] vhci_hcd vhci_hcd.1: release socket [ 89.458482][ T61] vhci_hcd vhci_hcd.1: disconnect device [ 89.466042][ T7070] vhci_hcd: connection closed [ 89.466252][ T7064] vhci_hcd: connection closed [ 89.466256][ T7052] vhci_hcd: connection reset by peer [ 89.481018][ T7062] vhci_hcd: connection closed [ 89.491637][ T7060] vhci_hcd: connection closed [ 89.540141][ T61] vhci_hcd vhci_hcd.1: stop threads [ 89.550205][ T61] vhci_hcd vhci_hcd.1: release socket [ 89.555828][ T61] vhci_hcd vhci_hcd.1: disconnect device [ 89.570671][ T7081] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1070'. [ 89.592108][ T61] vhci_hcd vhci_hcd.1: stop threads [ 89.597374][ T61] vhci_hcd vhci_hcd.1: release socket [ 89.602774][ T61] vhci_hcd vhci_hcd.1: disconnect device [ 89.624531][ T61] vhci_hcd vhci_hcd.1: stop threads [ 89.629770][ T61] vhci_hcd vhci_hcd.1: release socket [ 89.635231][ T61] vhci_hcd vhci_hcd.1: disconnect device [ 89.651779][ T61] vhci_hcd vhci_hcd.1: stop threads [ 89.657101][ T61] vhci_hcd vhci_hcd.1: release socket [ 89.662517][ T61] vhci_hcd vhci_hcd.1: disconnect device [ 89.724204][ T61] vhci_hcd vhci_hcd.1: stop threads [ 89.729595][ T61] vhci_hcd vhci_hcd.1: release socket [ 89.735028][ T61] vhci_hcd vhci_hcd.1: disconnect device [ 90.136670][ T7102] loop2: detected capacity change from 0 to 8192 [ 90.157448][ T7102] syz.2.1078: attempt to access beyond end of device [ 90.157448][ T7102] loop2: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 90.248262][ T3332] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000e1b1) [ 90.256149][ T3332] FAT-fs (loop2): Filesystem has been set read-only [ 90.422397][ T7118] loop0: detected capacity change from 0 to 256 [ 90.432458][ T7118] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 90.454216][ T7118] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 90.598994][ T7123] loop1: detected capacity change from 0 to 1024 [ 90.606032][ T7123] EXT4-fs: Ignoring removed bh option [ 90.625755][ T7123] EXT4-fs error (device loop1): mb_free_blocks:2037: group 0, inode 15: block 273:freeing already freed block (bit 17); block bitmap corrupt. [ 90.650387][ T7123] EXT4-fs (loop1): Remounting filesystem read-only [ 90.670207][ T7123] EXT4-fs warning (device loop1): ext4_convert_unwritten_extents:4984: inode #15: block 64: len 64: ext4_ext_map_blocks returned -30 [ 90.900197][ T7130] loop9: detected capacity change from 0 to 8192 [ 91.072266][ T7145] loop0: detected capacity change from 0 to 2048 [ 91.295735][ T7165] EXT4-fs: inline encryption not supported [ 91.390236][ T7175] EXT4-fs: Ignoring removed nobh option [ 91.425687][ T7175] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 91.483207][ T7165] EXT4-fs error (device loop9): mb_free_blocks:2037: group 0, inode 15: block 225:freeing already freed block (bit 14); block bitmap corrupt. [ 91.517735][ T7175] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2002c018, mo2=0002] [ 91.531623][ T7173] netlink: 'syz.8.1101': attribute type 13 has an invalid length. [ 91.554152][ T7175] System zones: 1-12 [ 91.562628][ T7165] EXT4-fs (loop9): Remounting filesystem read-only [ 91.578977][ T7173] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 91.579669][ T7175] EXT4-fs (loop2): 1 truncate cleaned up [ 91.708081][ T7190] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1108'. [ 91.762933][ T7198] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1108'. [ 91.863365][ T29] kauditd_printk_skb: 55 callbacks suppressed [ 91.863382][ T29] audit: type=1326 audit(1769014712.483:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7205 comm="syz.8.1115" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbe8d47acb9 code=0x0 [ 91.867941][ T7207] Bluetooth: hci0: Frame reassembly failed (-90) [ 92.076628][ T29] audit: type=1400 audit(1769014712.703:772): avc: denied { connect } for pid=7223 comm="syz.8.1116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 92.103167][ T29] audit: type=1400 audit(1769014712.723:773): avc: denied { write } for pid=7223 comm="syz.8.1116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 92.148235][ T29] audit: type=1400 audit(1769014712.773:774): avc: denied { watch watch_reads } for pid=7230 comm="syz.2.1119" path=2F6D656D66643A66642F33202864656C6574656429 dev="tmpfs" ino=1155 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 92.202151][ T7238] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1121'. [ 92.215235][ T7238] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1121'. [ 92.356170][ T29] audit: type=1400 audit(1769014712.983:775): avc: denied { write } for pid=7255 comm="syz.8.1127" path="socket:[18089]" dev="sockfs" ino=18089 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 92.850749][ T7277] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1133'. [ 92.869138][ T7277] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=769 sclass=netlink_route_socket pid=7277 comm=syz.9.1133 [ 93.147389][ T7304] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 93.153932][ T7304] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 93.161539][ T7304] vhci_hcd vhci_hcd.0: Device attached [ 93.200080][ T7304] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(5) [ 93.206639][ T7304] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 93.215050][ T7304] vhci_hcd vhci_hcd.0: Device attached [ 93.240586][ T7304] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(7) [ 93.247120][ T7304] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 93.254750][ T7304] vhci_hcd vhci_hcd.0: Device attached [ 93.299129][ T7304] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(9) [ 93.305675][ T7304] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 93.313307][ T7304] vhci_hcd vhci_hcd.0: Device attached [ 93.334769][ T3400] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 93.341143][ T7304] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(11) [ 93.347809][ T7304] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 93.355417][ T7304] vhci_hcd vhci_hcd.0: Device attached [ 93.392603][ T7304] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 93.411392][ T7304] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 93.424180][ T3400] usb 5-1: new full-speed USB device number 2 using vhci_hcd [ 93.474350][ T7325] vhci_hcd vhci_hcd.0: pdev(2) rhport(7) sockfd(18) [ 93.481013][ T7325] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 93.488654][ T7325] vhci_hcd vhci_hcd.0: Device attached [ 93.526292][ T7326] vhci_hcd: connection closed [ 93.526445][ T6827] vhci_hcd vhci_hcd.2: stop threads [ 93.536384][ T6827] vhci_hcd vhci_hcd.2: release socket [ 93.541832][ T6827] vhci_hcd vhci_hcd.2: disconnect device [ 93.548204][ T7315] vhci_hcd: connection closed [ 93.548217][ T7318] vhci_hcd: connection closed [ 93.548300][ T7312] vhci_hcd: connection closed [ 93.557725][ T7309] vhci_hcd: connection closed [ 93.562705][ T7305] vhci_hcd: connection reset by peer [ 93.581666][ T6827] vhci_hcd vhci_hcd.2: stop threads [ 93.586983][ T6827] vhci_hcd vhci_hcd.2: release socket [ 93.592452][ T6827] vhci_hcd vhci_hcd.2: disconnect device [ 93.618983][ T6827] vhci_hcd vhci_hcd.2: stop threads [ 93.624292][ T6827] vhci_hcd vhci_hcd.2: release socket [ 93.629716][ T6827] vhci_hcd vhci_hcd.2: disconnect device [ 93.650215][ T7339] bridge_slave_0: left allmulticast mode [ 93.655978][ T7339] bridge_slave_0: left promiscuous mode [ 93.661698][ T7339] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.669074][ T6827] vhci_hcd vhci_hcd.2: stop threads [ 93.674330][ T6827] vhci_hcd vhci_hcd.2: release socket [ 93.679747][ T6827] vhci_hcd vhci_hcd.2: disconnect device [ 93.696469][ T7339] bridge_slave_1: left allmulticast mode [ 93.699208][ T6827] vhci_hcd vhci_hcd.2: stop threads [ 93.702149][ T7339] bridge_slave_1: left promiscuous mode [ 93.707409][ T6827] vhci_hcd vhci_hcd.2: release socket [ 93.713273][ T7339] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.718630][ T6827] vhci_hcd vhci_hcd.2: disconnect device [ 93.740507][ T6827] vhci_hcd vhci_hcd.2: stop threads [ 93.745892][ T6827] vhci_hcd vhci_hcd.2: release socket [ 93.751335][ T6827] vhci_hcd vhci_hcd.2: disconnect device [ 93.758723][ T7339] bond0: (slave bond_slave_0): Releasing backup interface [ 93.769137][ T7339] bond0: (slave bond_slave_1): Releasing backup interface [ 93.785231][ T7339] team0: Port device team_slave_0 removed [ 93.793886][ T7339] team0: Port device team_slave_1 removed [ 93.801336][ T7339] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 93.808841][ T7339] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 93.817846][ T7339] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 93.825355][ T7339] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 93.835414][ T7339] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 93.852792][ T7344] team0: Mode changed to "loadbalance" [ 93.934111][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 93.934552][ T3575] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 94.095929][ T7354] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1143'. [ 94.259243][ T29] audit: type=1400 audit(1769014714.863:776): avc: denied { cpu } for pid=7361 comm="syz.8.1147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 94.305296][ T7365] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1148'. [ 94.366788][ T3469] usb 3-1: enqueue for inactive port 0 [ 94.372377][ T3469] usb 3-1: enqueue for inactive port 0 [ 94.495124][ T3469] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 95.277536][ T7380] set_capacity_and_notify: 2 callbacks suppressed [ 95.277552][ T7380] loop2: detected capacity change from 0 to 8192 [ 95.483915][ T3513] Process accounting resumed [ 95.558953][ T29] audit: type=1400 audit(1769014716.183:777): avc: denied { remount } for pid=7379 comm="syz.2.1151" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 95.772699][ T29] audit: type=1400 audit(1769014716.393:778): avc: denied { watch watch_reads } for pid=7400 comm="syz.0.1158" path="pipe:[18230]" dev="pipefs" ino=18230 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 95.893313][ T7414] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.904068][ T29] audit: type=1400 audit(1769014716.513:779): avc: denied { write } for pid=7413 comm="syz.2.1159" name="file0" dev="tmpfs" ino=1400 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 95.926509][ T29] audit: type=1400 audit(1769014716.513:780): avc: denied { open } for pid=7413 comm="syz.2.1159" path="/264/file0" dev="tmpfs" ino=1400 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 95.953166][ T7414] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.963210][ T7416] ªªªªªª: renamed from wg2 (while UP) [ 96.150894][ T7416] loop9: detected capacity change from 0 to 32768 [ 96.187145][ T7424] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1167'. [ 96.199994][ T7416] loop9: p1 p3 < p5 p6 p7 > [ 96.208471][ T7416] loop9: p6 start 117448704 is beyond EOD, truncated [ 96.275527][ T7412] netlink: 'syz.1.1163': attribute type 13 has an invalid length. [ 96.356993][ T7412] gretap0: refused to change device tx_queue_len [ 96.364730][ T7412] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 96.396235][ T4597] udevd[4597]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 96.407575][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop9p5, 10) failed: No such file or directory [ 96.413795][ T5748] udevd[5748]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 96.435363][ T3312] udevd[3312]: inotify_add_watch(7, /dev/loop9p7, 10) failed: No such file or directory [ 96.459872][ T7440] sctp: [Deprecated]: syz.0.1172 (pid 7440) Use of struct sctp_assoc_value in delayed_ack socket option. [ 96.459872][ T7440] Use struct sctp_sack_info instead [ 96.621145][ T7452] loop2: detected capacity change from 0 to 128 [ 96.976618][ T7475] syzkaller1: entered promiscuous mode [ 96.982119][ T7475] syzkaller1: entered allmulticast mode [ 97.205113][ T7485] loop0: detected capacity change from 0 to 512 [ 97.239807][ T7485] ext4 filesystem being mounted at /246/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.564520][ T7519] netlink: 'syz.2.1185': attribute type 1 has an invalid length. [ 97.572311][ T7519] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1185'. [ 97.837328][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 97.837344][ T29] audit: type=1326 audit(1769014718.463:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7545 comm="syz.9.1191" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0b4f32acb9 code=0x0 [ 98.088658][ T7567] loop1: detected capacity change from 0 to 256 [ 98.123711][ T7567] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 98.280970][ T7573] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1197'. [ 98.507202][ T3400] usb 5-1: enqueue for inactive port 0 [ 98.524995][ T3400] usb 5-1: enqueue for inactive port 0 [ 98.634094][ T3400] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 98.888039][ T7588] syzkaller0: entered promiscuous mode [ 98.893564][ T7588] syzkaller0: entered allmulticast mode [ 98.925754][ T29] audit: type=1400 audit(1769014719.553:787): avc: denied { mounton } for pid=7586 comm="syz.2.1201" path="/270/file0" dev="tmpfs" ino=1432 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 99.123284][ T3328] EXT4-fs unmount: 32 callbacks suppressed [ 99.123302][ T3328] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.459645][ T7639] loop0: detected capacity change from 0 to 512 [ 99.503885][ T7642] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1220'. [ 99.522570][ T7639] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.572685][ T7639] ext4 filesystem being mounted at /249/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.644630][ T29] audit: type=1400 audit(1769014720.273:788): avc: denied { mounton } for pid=7638 comm="syz.0.1219" path="/249/file1/file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 99.899566][ T3496] Process accounting resumed [ 100.270599][ T29] audit: type=1326 audit(1769014720.893:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7674 comm="syz.9.1229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b4f32acb9 code=0x7ffc0000 [ 100.317790][ T29] audit: type=1326 audit(1769014720.893:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7674 comm="syz.9.1229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b4f32acb9 code=0x7ffc0000 [ 100.341414][ T29] audit: type=1326 audit(1769014720.923:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7674 comm="syz.9.1229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f0b4f32acb9 code=0x7ffc0000 [ 100.364784][ T29] audit: type=1326 audit(1769014720.923:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7674 comm="syz.9.1229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b4f32acb9 code=0x7ffc0000 [ 100.388154][ T29] audit: type=1326 audit(1769014720.923:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7674 comm="syz.9.1229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b4f32acb9 code=0x7ffc0000 [ 100.411450][ T29] audit: type=1326 audit(1769014720.923:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7674 comm="syz.9.1229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0b4f32acb9 code=0x7ffc0000 [ 100.434868][ T29] audit: type=1326 audit(1769014720.923:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7674 comm="syz.9.1229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b4f32acb9 code=0x7ffc0000 [ 100.504424][ T3328] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.846548][ T7701] loop0: detected capacity change from 0 to 512 [ 100.883065][ T7701] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.919755][ T7701] ext4 filesystem being mounted at /252/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.978688][ T3328] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.124822][ T7720] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 101.132130][ T7720] IPv6: NLM_F_CREATE should be set when creating new route [ 101.255564][ T7725] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1246'. [ 102.362608][ T7718] syz.1.1244 (7718) used greatest stack depth: 7048 bytes left [ 102.647279][ T7792] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1266'. [ 103.014104][ T7801] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1269'. [ 103.364517][ T7821] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1276'. [ 103.443273][ T7823] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 103.718625][ T7835] ip6gre1: entered promiscuous mode [ 103.723871][ T7835] ip6gre1: entered allmulticast mode [ 103.758524][ T7835] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 104.067971][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 104.068057][ T29] audit: type=1326 audit(1769014724.693:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7850 comm="syz.2.1285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b73e2acb9 code=0x7ffc0000 [ 104.070606][ T7849] pimreg: entered allmulticast mode [ 104.077397][ T29] audit: type=1326 audit(1769014724.703:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7850 comm="syz.2.1285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b73e2acb9 code=0x7ffc0000 [ 104.126256][ T29] audit: type=1326 audit(1769014724.703:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7850 comm="syz.2.1285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b73e2acb9 code=0x7ffc0000 [ 104.149637][ T29] audit: type=1326 audit(1769014724.703:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7850 comm="syz.2.1285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6b73e2acb9 code=0x7ffc0000 [ 104.172885][ T29] audit: type=1326 audit(1769014724.703:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7850 comm="syz.2.1285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b73e2acb9 code=0x7ffc0000 [ 104.244121][ T29] audit: type=1326 audit(1769014724.803:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7850 comm="syz.2.1285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b73e2acb9 code=0x7ffc0000 [ 104.260846][ T7853] syzkaller0: entered promiscuous mode [ 104.267502][ T29] audit: type=1326 audit(1769014724.803:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7850 comm="syz.2.1285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b73e2acb9 code=0x7ffc0000 [ 104.267536][ T29] audit: type=1326 audit(1769014724.803:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7850 comm="syz.2.1285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f6b73e2acb9 code=0x7ffc0000 [ 104.273060][ T7853] syzkaller0: entered allmulticast mode [ 104.325020][ T29] audit: type=1326 audit(1769014724.803:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7850 comm="syz.2.1285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b73e2acb9 code=0x7ffc0000 [ 104.341373][ T7854] pimreg: left allmulticast mode [ 104.348425][ T29] audit: type=1326 audit(1769014724.803:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7850 comm="syz.2.1285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b73e2acb9 code=0x7ffc0000 [ 104.422025][ T1598] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 104.429736][ T1598] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 104.444179][ T7387] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 104.460275][ T7861] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1289'. [ 104.623330][ T7868] loop0: detected capacity change from 0 to 256 [ 104.662467][ T7868] syz.0.1291: attempt to access beyond end of device [ 104.662467][ T7868] loop0: rw=2049, sector=256, nr_sectors = 4 limit=256 [ 104.692409][ T7868] Invalid ELF header len 1 [ 104.784137][ T3400] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 105.339215][ T7894] tipc: New replicast peer: 255.255.255.255 [ 105.345469][ T7894] tipc: Enabled bearer , priority 10 [ 105.521483][ T3469] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 105.622284][ T7903] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1305'. [ 105.636021][ T7905] veth3: entered promiscuous mode [ 105.641128][ T7905] veth3: entered allmulticast mode [ 105.658554][ T7907] bridge0: entered promiscuous mode [ 105.666021][ T7907] vlan2: entered promiscuous mode [ 105.689058][ T7909] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1308'. [ 105.892357][ T7916] pimreg: entered allmulticast mode [ 105.899457][ T7920] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1313'. [ 105.929451][ T7916] pimreg: left allmulticast mode [ 105.941876][ T7920] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7920 comm=syz.9.1313 [ 106.020046][ T7928] loop0: detected capacity change from 0 to 512 [ 106.040000][ T7928] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 106.051562][ T7928] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it [ 106.061753][ T7928] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.1325: Corrupt directory, running e2fsck is recommended [ 106.075712][ T7928] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 106.104413][ T7928] EXT4-fs error (device loop0): ext4_iget_extra_inode:5073: inode #15: comm syz.0.1325: corrupted in-inode xattr: e_name out of bounds [ 106.125551][ T7931] tipc: Started in network mode [ 106.130449][ T7931] tipc: Node identity ac14140f, cluster identity 4711 [ 106.160774][ T7928] EXT4-fs (loop0): Remounting filesystem read-only [ 106.173189][ T7931] tipc: New replicast peer: 255.255.255.255 [ 106.179330][ T7931] tipc: Enabled bearer , priority 10 [ 106.191284][ T7928] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.238907][ T7928] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 106.250537][ T7928] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it [ 106.260786][ T7928] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.1325: Corrupt directory, running e2fsck is recommended [ 106.276307][ T7928] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 106.287879][ T7928] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it [ 106.298055][ T7928] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.1325: Corrupt directory, running e2fsck is recommended [ 106.324007][ T7928] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 106.335744][ T7928] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it [ 106.345878][ T7928] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.1325: Corrupt directory, running e2fsck is recommended [ 106.374057][ T4367] tipc: Node number set to 114631824 [ 106.455153][ T7947] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 106.535578][ T3328] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.093305][ T7971] netlink: 444 bytes leftover after parsing attributes in process `syz.1.1331'. [ 107.102579][ T7971] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1331'. [ 107.295177][ T3400] tipc: Node number set to 2886997007 [ 108.174124][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 108.885134][ T8009] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1345'. [ 109.151655][ T8031] ref_ctr increment failed for inode: 0x5f0 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88810d1321c0 [ 109.675893][ T1002] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 109.684418][ T1002] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.727584][ T1002] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 109.736108][ T1002] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.754119][ T1002] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 109.762595][ T1002] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.771689][ T1002] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 109.780098][ T1002] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.353052][ T29] kauditd_printk_skb: 90 callbacks suppressed [ 110.353069][ T29] audit: type=1400 audit(1769014730.973:910): avc: denied { read } for pid=8055 comm="iou-wrk-8056" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 110.397485][ T8060] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 110.434119][ T29] audit: type=1400 audit(1769014731.033:911): avc: denied { read } for pid=8057 comm="syz.8.1366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 110.504803][ T29] audit: type=1400 audit(1769014731.093:912): avc: denied { write } for pid=8057 comm="syz.8.1366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 110.574732][ T29] audit: type=1400 audit(1769014731.163:913): avc: denied { shutdown } for pid=8057 comm="syz.8.1366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 110.799198][ T29] audit: type=1400 audit(1769014731.423:914): avc: denied { sys_module } for pid=8078 comm="syz.1.1373" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 112.749531][ T8130] loop0: detected capacity change from 0 to 512 [ 112.764812][ T29] audit: type=1400 audit(1769014733.393:915): avc: denied { map } for pid=8129 comm="syz.9.1389" path="socket:[21588]" dev="sockfs" ino=21588 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 112.819916][ T8130] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.840679][ T8130] ext4 filesystem being mounted at /288/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.906304][ T3328] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.936711][ T29] audit: type=1400 audit(1769014733.563:916): avc: denied { create } for pid=8141 comm="syz.2.1392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 113.104884][ T29] audit: type=1400 audit(1769014733.583:917): avc: denied { kexec_image_load } for pid=8141 comm="syz.2.1392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 113.336921][ T8155] loop0: detected capacity change from 0 to 512 [ 113.357275][ T8155] EXT4-fs error (device loop0): ext4_iget_extra_inode:5073: inode #15: comm syz.0.1395: corrupted in-inode xattr: e_value size too large [ 113.395139][ T8155] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.1395: couldn't read orphan inode 15 (err -117) [ 113.408382][ T8155] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.777229][ T3328] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.854893][ T8166] syzkaller0: entered promiscuous mode [ 113.860394][ T8166] syzkaller0: entered allmulticast mode [ 113.902949][ T29] audit: type=1400 audit(1769014734.523:918): avc: denied { getopt } for pid=8167 comm="syz.2.1399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 113.925503][ T8170] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1400'. [ 113.968888][ T29] audit: type=1400 audit(1769014734.543:919): avc: denied { connect } for pid=8167 comm="syz.2.1399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 114.181853][ T8187] ref_ctr increment failed for inode: 0x628 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff888113fd06c0 [ 114.415657][ T8181] Set syz1 is full, maxelem 65536 reached [ 114.613583][ T8204] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1411'. [ 114.639983][ T8217] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1417'. [ 115.021256][ T8229] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.129800][ T8229] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.196811][ T8229] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.247664][ T8229] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.322810][ T61] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.339497][ T61] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.361111][ T61] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.381909][ T61] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.464109][ T8258] netlink: 120 bytes leftover after parsing attributes in process `syz.9.1429'. [ 115.563666][ T8258] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 115.614158][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 115.667788][ T8266] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1431'. [ 115.856897][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 115.856944][ T29] audit: type=1326 audit(1769014736.483:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8268 comm="syz.2.1433" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6b73e2acb9 code=0x0 [ 115.894738][ T8273] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1434'. [ 115.906298][ T8273] hsr_slave_1 (unregistering): left promiscuous mode [ 115.945356][ T8275] 9pnet_virtio: no channels available for device 127.0.0.1 [ 116.031661][ T29] audit: type=1326 audit(1769014736.653:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8279 comm="syz.1.1436" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc484c7acb9 code=0x0 [ 116.154565][ T29] audit: type=1400 audit(1769014736.783:930): avc: denied { ioctl } for pid=8285 comm="syz.0.1438" path="socket:[21979]" dev="sockfs" ino=21979 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 116.536652][ T29] audit: type=1400 audit(1769014737.163:931): avc: denied { recv } for pid=8282 comm="syz.8.1437" saddr=10.128.0.163 src=30036 daddr=10.128.0.193 dest=45524 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 116.689335][ T8293] tipc: Enabling of bearer rejected, failed to enable media [ 116.846967][ T8305] syzkaller0: entered promiscuous mode [ 116.852446][ T8305] syzkaller0: entered allmulticast mode [ 116.867233][ T8306] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1446'. [ 117.072566][ T8329] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1455'. [ 117.081588][ T8329] batman_adv: batadv0: Removing interface: macvlan2 [ 117.250298][ T8333] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000 [ 117.278246][ T8337] uprobe: syz.1.1459:8337 failed to unregister, leaking uprobe [ 118.573168][ T8357] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1474'. [ 118.592163][ T8357] hsr_slave_1 (unregistering): left promiscuous mode [ 118.686035][ T8371] 9pnet_virtio: no channels available for device 127.0.0.1 [ 119.083776][ T8379] netlink: 'syz.0.1482': attribute type 1 has an invalid length. [ 119.106131][ T8379] Unknown options in mask 20 [ 119.156632][ T8382] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000 [ 119.315061][ T29] audit: type=1400 audit(1769014739.943:932): avc: denied { cmd } for pid=8396 comm="syz.2.1478" path="socket:[23177]" dev="sockfs" ino=23177 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 119.364830][ T8403] netlink: 'syz.9.1480': attribute type 1 has an invalid length. [ 119.393073][ T8403] 8021q: adding VLAN 0 to HW filter on device bond1 [ 119.413442][ T8403] bond1: (slave dummy0): making interface the new active one [ 119.430084][ T8403] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 119.447287][ T8403] bond1: entered allmulticast mode [ 119.459224][ T8403] dummy0: entered allmulticast mode [ 119.632956][ T29] audit: type=1326 audit(1769014740.253:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8412 comm="syz.8.1485" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbe8d47acb9 code=0x0 [ 119.682906][ T29] audit: type=1400 audit(1769014740.303:934): avc: denied { read } for pid=8422 comm="syz.9.1489" path="socket:[22243]" dev="sockfs" ino=22243 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 119.729673][ T8427] loop0: detected capacity change from 0 to 512 [ 119.739679][ T8427] EXT4-fs: Ignoring removed nobh option [ 119.746186][ T8427] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 119.756701][ T8428] netlink: 240 bytes leftover after parsing attributes in process `syz.9.1489'. [ 119.756688][ T29] audit: type=1400 audit(1769014740.383:935): avc: denied { write } for pid=8422 comm="syz.9.1489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 119.788238][ T8427] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2002c018, mo2=0002] [ 119.796351][ T8427] System zones: 1-12 [ 119.801756][ T8427] EXT4-fs (loop0): 1 truncate cleaned up [ 119.807804][ T8427] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.849570][ T3328] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.862475][ T8435] netlink: 48 bytes leftover after parsing attributes in process `syz.9.1492'. [ 120.068491][ T8454] 9p: Bad value for 'rfdno' [ 120.127632][ T29] audit: type=1326 audit(1769014740.743:936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8458 comm="syz.9.1500" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0b4f32acb9 code=0x0 [ 120.182385][ T29] audit: type=1326 audit(1769014740.803:937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8463 comm="syz.2.1502" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6b73e2acb9 code=0x0 [ 120.307458][ T8466] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1503'. [ 120.967083][ T8484] loop0: detected capacity change from 0 to 1024 [ 120.979929][ T8486] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1510'. [ 120.997423][ T8484] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 121.008396][ T8484] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 121.045085][ T8484] EXT4-fs (loop0): invalid journal inode [ 121.058455][ T8484] EXT4-fs (loop0): can't get journal size [ 121.067167][ T8469] syz.1.1505 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 121.077947][ T8469] CPU: 1 UID: 0 PID: 8469 Comm: syz.1.1505 Not tainted syzkaller #0 PREEMPT(voluntary) [ 121.077970][ T8469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 121.077987][ T8469] Call Trace: [ 121.078033][ T8469] [ 121.078039][ T8469] __dump_stack+0x1d/0x30 [ 121.078061][ T8469] dump_stack_lvl+0x95/0xd0 [ 121.078131][ T8469] dump_stack+0x15/0x1b [ 121.078154][ T8469] dump_header+0x80/0x240 [ 121.078178][ T8469] oom_kill_process+0x295/0x350 [ 121.078202][ T8469] out_of_memory+0x97d/0xb80 [ 121.078303][ T8469] try_charge_memcg+0x62e/0xa10 [ 121.078341][ T8469] charge_memcg+0x51/0xc0 [ 121.078382][ T8469] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 121.078417][ T8469] __read_swap_cache_async+0x17b/0x2d0 [ 121.078449][ T8469] swap_cluster_readahead+0x262/0x3c0 [ 121.078487][ T8469] swapin_readahead+0xde/0x840 [ 121.078671][ T8469] ? __rcu_read_unlock+0x33/0x70 [ 121.078732][ T8469] ? __rcu_read_unlock+0x4e/0x70 [ 121.078753][ T8469] ? swap_cache_get_folio+0x26f/0x280 [ 121.078784][ T8469] do_swap_page+0x2f4/0x2140 [ 121.078826][ T8469] ? css_rstat_updated+0xbb/0x280 [ 121.078884][ T8469] ? __pfx_default_wake_function+0x10/0x10 [ 121.078927][ T8469] handle_mm_fault+0xb40/0x3030 [ 121.078977][ T8469] ? vma_start_read+0x1c7/0x2c0 [ 121.079003][ T8469] do_user_addr_fault+0x62f/0x1050 [ 121.079057][ T8469] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 121.079085][ T8469] ? irqentry_exit+0x3c/0x510 [ 121.079112][ T8469] exc_page_fault+0x62/0xa0 [ 121.079217][ T8469] asm_exc_page_fault+0x26/0x30 [ 121.079253][ T8469] RIP: 0033:0x7fc484c35ebe [ 121.079273][ T8469] Code: 41 51 4c 8d 9b 08 03 00 00 49 89 c9 48 89 f1 41 50 48 8b 74 24 20 49 89 d0 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 <59> 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 [ 121.079295][ T8469] RSP: 002b:00007ffe36de0a60 EFLAGS: 00010246 [ 121.079310][ T8469] RAX: 0000000000000000 RBX: 00005555729c2500 RCX: 00007fc484c3b58e [ 121.079384][ T8469] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 121.079396][ T8469] RBP: 00007fc484ef7da0 R08: 0000000000000000 R09: 0000000000000000 [ 121.079481][ T8469] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000001d936 [ 121.079492][ T8469] R13: 00007fc484ef609c R14: 000000000001d68c R15: 00007fc484ef6090 [ 121.079510][ T8469] [ 121.079523][ T8469] memory: usage 307200kB, limit 307200kB, failcnt 1419 [ 121.152400][ T8484] EXT4-fs (loop0): corrupt root inode, run e2fsck [ 121.153211][ T8469] memory+swap: usage 375056kB, limit 9007199254740988kB, failcnt 0 [ 121.159065][ T8484] EXT4-fs (loop0): mount failed [ 121.163381][ T8469] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 121.336007][ T8469] Memory cgroup stats for /syz1: [ 121.339902][ T8469] cache 0 [ 121.347863][ T8469] rss 0 [ 121.350631][ T8469] shmem 0 [ 121.351093][ T8483] uprobe: syz.0.1509:8483 failed to unregister, leaking uprobe [ 121.353657][ T8469] mapped_file 0 [ 121.364703][ T8469] dirty 0 [ 121.367644][ T8469] writeback 4096 [ 121.371190][ T8469] workingset_refault_anon 88 [ 121.376006][ T8469] workingset_refault_file 743 [ 121.380708][ T8469] swap 69484544 [ 121.384252][ T8469] swapcached 8192 [ 121.388065][ T8469] pgpgin 119586 [ 121.391547][ T8469] pgpgout 119583 [ 121.395151][ T8469] pgfault 128805 [ 121.398701][ T8469] pgmajfault 72 [ 121.402248][ T8469] inactive_anon 4096 [ 121.406177][ T8469] active_anon 4096 [ 121.409931][ T8469] inactive_file 0 [ 121.413570][ T8469] active_file 4096 [ 121.417340][ T8469] unevictable 0 [ 121.420808][ T8469] hierarchical_memory_limit 314572800 [ 121.426304][ T8469] hierarchical_memsw_limit 9223372036854771712 [ 121.432471][ T8469] total_cache 0 [ 121.436001][ T8469] total_rss 0 [ 121.439309][ T8469] total_shmem 0 [ 121.443007][ T8469] total_mapped_file 0 [ 121.447060][ T8469] total_dirty 0 [ 121.450537][ T8469] total_writeback 4096 [ 121.454846][ T8469] total_workingset_refault_anon 88 [ 121.459986][ T8469] total_workingset_refault_file 743 [ 121.465291][ T8469] total_swap 69484544 [ 121.469279][ T8469] total_swapcached 8192 [ 121.473436][ T8469] total_pgpgin 119586 [ 121.477498][ T8469] total_pgpgout 119583 [ 121.481565][ T8469] total_pgfault 128805 [ 121.485690][ T8469] total_pgmajfault 72 [ 121.489680][ T8469] total_inactive_anon 4096 [ 121.494112][ T8469] total_active_anon 4096 [ 121.498370][ T8469] total_inactive_file 0 [ 121.502534][ T8469] total_active_file 4096 [ 121.506814][ T8469] total_unevictable 0 [ 121.510869][ T8469] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.1505,pid=8469,uid=0 [ 121.525489][ T8469] Memory cgroup out of memory: Killed process 8469 (syz.1.1505) total-vm:94132kB, anon-rss:1204kB, file-rss:22284kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:0 [ 121.549838][ T8491] netlink: 'syz.9.1511': attribute type 2 has an invalid length. [ 121.575918][ T8471] syz.1.1505 (8471) used greatest stack depth: 5896 bytes left [ 121.674951][ T8504] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1516'. [ 121.702068][ T8504] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1516'. [ 121.734366][ T8496] loop0: detected capacity change from 0 to 512 [ 121.764174][ T8510] 9p: Bad value for 'rfdno' [ 121.784281][ T8506] 9pnet: p9_errstr2errno: server reported unknown error ual_nci [ 121.811779][ T8496] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.843019][ T8496] ext4 filesystem being mounted at /316/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.857243][ T29] audit: type=1400 audit(1769014742.483:938): avc: denied { write } for pid=8516 comm="syz.8.1521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 121.987803][ T3328] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.024715][ T8525] netlink: 240 bytes leftover after parsing attributes in process `syz.8.1522'. [ 122.329381][ T3469] IPVS: starting estimator thread 0... [ 122.426146][ T8542] IPVS: using max 2256 ests per chain, 112800 per kthread [ 122.647314][ T8554] 9p: Bad value for 'rfdno' [ 122.815762][ T8562] netlink: 240 bytes leftover after parsing attributes in process `syz.1.1536'. [ 123.274333][ T8574] syzkaller0: entered promiscuous mode [ 123.279918][ T8574] syzkaller0: entered allmulticast mode [ 123.376644][ T8582] loop0: detected capacity change from 0 to 128 [ 123.589310][ T8593] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1546'. [ 123.696525][ T8593] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1546'. [ 124.024513][ T8617] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.031792][ T8617] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.039718][ T8617] bridge0: entered allmulticast mode [ 124.050893][ T8617] bridge_slave_1: left allmulticast mode [ 124.056596][ T8617] bridge_slave_1: left promiscuous mode [ 124.062292][ T8617] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.071032][ T8617] bridge_slave_0: left allmulticast mode [ 124.076937][ T8617] bridge_slave_0: left promiscuous mode [ 124.082666][ T8617] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.397951][ T8633] netlink: 'syz.8.1562': attribute type 2 has an invalid length. [ 124.551155][ T29] audit: type=1400 audit(1769014745.173:939): avc: denied { create } for pid=8643 comm="syz.0.1566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 124.609375][ T29] audit: type=1400 audit(1769014745.193:940): avc: denied { bind } for pid=8643 comm="syz.0.1566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 124.629111][ T29] audit: type=1400 audit(1769014745.193:941): avc: denied { setopt } for pid=8643 comm="syz.0.1566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 124.655354][ T8648] tipc: Failed to remove unknown binding: 66,0,0/0:903030040/903030041 [ 124.665003][ T8648] tipc: Failed to remove unknown binding: 66,0,0/0:903030040/903030041 [ 124.698937][ T8650] tipc: Enabling of bearer rejected, failed to enable media [ 124.778033][ T29] audit: type=1400 audit(1769014745.403:942): avc: denied { wake_alarm } for pid=8658 comm="syz.2.1571" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 125.649881][ T8695] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1584'. [ 125.666282][ T8697] netlink: 'syz.9.1585': attribute type 1 has an invalid length. [ 125.693555][ T8697] 8021q: adding VLAN 0 to HW filter on device bond2 [ 125.714556][ T8697] veth7: entered promiscuous mode [ 125.720359][ T8702] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 125.725343][ T8697] bond2: (slave veth7): Enslaving as an active interface with a down link [ 125.750022][ T8697] veth9: entered promiscuous mode [ 125.757123][ T8697] bond2: (slave veth9): Enslaving as an active interface with a down link [ 126.336077][ T8731] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1597'. [ 126.574117][ T3575] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 126.722276][ T8742] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.729513][ T8742] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.793898][ T8742] bridge0: entered allmulticast mode [ 126.824900][ T8743] bridge_slave_1: left allmulticast mode [ 126.830593][ T8743] bridge_slave_1: left promiscuous mode [ 126.836312][ T8743] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.918381][ T8743] bridge_slave_0: left allmulticast mode [ 126.924209][ T8743] bridge_slave_0: left promiscuous mode [ 126.930032][ T8743] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.313040][ T8765] lo: entered allmulticast mode [ 127.476635][ T29] audit: type=1326 audit(1769014748.103:943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8772 comm="syz.0.1613" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0c21d7acb9 code=0x0 [ 128.037171][ T8810] bond_slave_0: entered promiscuous mode [ 128.042932][ T8810] bond_slave_1: entered promiscuous mode [ 128.048947][ T8810] vlan2: entered promiscuous mode [ 128.053992][ T8810] bond0: entered promiscuous mode [ 128.061885][ T8811] 9pnet_fd: p9_fd_create_tcp (8811): problem connecting socket to 127.0.0.1 [ 128.071284][ T8811] 9pnet_fd: p9_fd_create_tcp (8811): problem connecting socket to 127.0.0.1 [ 128.080613][ T8811] 9pnet_fd: p9_fd_create_tcp (8811): problem connecting socket to 127.0.0.1 [ 128.089785][ T8811] 9pnet_fd: p9_fd_create_tcp (8811): problem connecting socket to 127.0.0.1 [ 128.099655][ T8811] 9pnet_fd: p9_fd_create_tcp (8811): problem connecting socket to 127.0.0.1 [ 128.108818][ T8811] 9pnet_fd: p9_fd_create_tcp (8811): problem connecting socket to 127.0.0.1 [ 128.119054][ T8811] 9pnet_virtio: no channels available for device 127.0.0.1 [ 128.146401][ T8813] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1626'. [ 128.256884][ T29] audit: type=1400 audit(1769014748.883:944): avc: denied { create } for pid=8823 comm="syz.2.1631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 128.291351][ T8824] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 128.301917][ T8824] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.323696][ T29] audit: type=1400 audit(1769014748.883:945): avc: denied { setopt } for pid=8823 comm="syz.2.1631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 128.343069][ T29] audit: type=1400 audit(1769014748.883:946): avc: denied { write } for pid=8823 comm="syz.2.1631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 128.398811][ T8824] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 128.409237][ T8824] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.426863][ T8826] loop0: detected capacity change from 0 to 128 [ 128.433820][ T29] audit: type=1400 audit(1769014749.053:947): avc: denied { read } for pid=8825 comm="syz.0.1632" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 128.457035][ T29] audit: type=1400 audit(1769014749.053:948): avc: denied { open } for pid=8825 comm="syz.0.1632" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 128.527260][ T8824] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 128.537585][ T8824] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.567104][ T8826] syz.0.1632: attempt to access beyond end of device [ 128.567104][ T8826] loop0: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 128.581874][ T8826] syz.0.1632: attempt to access beyond end of device [ 128.581874][ T8826] loop0: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 128.596603][ T8826] syz.0.1632: attempt to access beyond end of device [ 128.596603][ T8826] loop0: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 128.610477][ T8826] syz.0.1632: attempt to access beyond end of device [ 128.610477][ T8826] loop0: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 128.628473][ T8826] syz.0.1632: attempt to access beyond end of device [ 128.628473][ T8826] loop0: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 128.650318][ T8826] syz.0.1632: attempt to access beyond end of device [ 128.650318][ T8826] loop0: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 128.665620][ T8826] syz.0.1632: attempt to access beyond end of device [ 128.665620][ T8826] loop0: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 128.679355][ T8826] syz.0.1632: attempt to access beyond end of device [ 128.679355][ T8826] loop0: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 128.693637][ T8826] syz.0.1632: attempt to access beyond end of device [ 128.693637][ T8826] loop0: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 128.719549][ T8824] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 128.729923][ T8824] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.743054][ T8826] syz.0.1632: attempt to access beyond end of device [ 128.743054][ T8826] loop0: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 128.833636][ T8656] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.841964][ T8656] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.868555][ T8656] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.876844][ T8656] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.937698][ T8656] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.945921][ T8656] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.988742][ T8656] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.997003][ T8656] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.180713][ T8849] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1639'. [ 129.244442][ T8852] syzkaller0: entered promiscuous mode [ 129.249989][ T8852] syzkaller0: entered allmulticast mode [ 129.392055][ T29] audit: type=1326 audit(1769014750.013:949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8859 comm="syz.9.1644" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0b4f32acb9 code=0x0 [ 129.518001][ T29] audit: type=1400 audit(1769014750.143:950): avc: denied { read } for pid=8874 comm="syz.0.1650" path="socket:[25204]" dev="sockfs" ino=25204 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 129.955997][ T29] audit: type=1326 audit(1769014750.583:951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8883 comm="syz.2.1653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b73e2acb9 code=0x7ffc0000 [ 129.980221][ T29] audit: type=1326 audit(1769014750.583:952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8883 comm="syz.2.1653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b73e2acb9 code=0x7ffc0000 [ 130.875093][ T8912] loop0: detected capacity change from 0 to 1024 [ 130.921179][ T8912] EXT4-fs: Ignoring removed orlov option [ 130.926945][ T8912] EXT4-fs: Ignoring removed nomblk_io_submit option [ 130.974127][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 131.016981][ T8912] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.229708][ T8923] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1667'. [ 131.238739][ T8923] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.246201][ T8923] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 131.254045][ T8923] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.261443][ T8923] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 131.275643][ T8923] batman_adv: batadv0: Removing interface: macvlan2 [ 131.455468][ T8928] tipc: Enabling of bearer rejected, failed to enable media [ 131.573571][ T3328] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.249182][ T8962] tipc: Enabling of bearer rejected, failed to enable media [ 132.309077][ T8973] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.357315][ T8973] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.417276][ T8973] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.490945][ T8973] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.571832][ T31] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.596620][ T31] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.614872][ T31] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.646336][ T31] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.722086][ T29] kauditd_printk_skb: 40 callbacks suppressed [ 132.722101][ T29] audit: type=1400 audit(1769014753.333:993): avc: denied { ioctl } for pid=8983 comm="syz.0.1698" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xb702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 132.753147][ T29] audit: type=1400 audit(1769014753.333:994): avc: denied { ioctl } for pid=8983 comm="syz.0.1698" path="socket:[26010]" dev="sockfs" ino=26010 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 133.059533][ T9003] tipc: Enabling of bearer rejected, failed to enable media [ 133.282954][ T9017] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.326326][ T9017] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.361498][ T29] audit: type=1400 audit(1769014753.983:995): avc: denied { setopt } for pid=9023 comm="syz.1.1703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 133.399147][ T9017] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.475942][ T9017] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.541466][ T9] kernel write not supported for file [eventfd] (pid: 9 comm: kworker/0:0) [ 133.559747][ T8656] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.574861][ T8656] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.592264][ T8656] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.604410][ T8656] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.729982][ T9045] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1709'. [ 133.739710][ T9045] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1709'. [ 133.961005][ T9054] loop0: detected capacity change from 0 to 128 [ 134.120012][ T29] audit: type=1326 audit(1769014754.743:996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9052 comm="syz.0.1711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c21d7acb9 code=0x7ffc0000 [ 134.243521][ T29] audit: type=1326 audit(1769014754.773:997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9052 comm="syz.0.1711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c21d7acb9 code=0x7ffc0000 [ 134.267008][ T29] audit: type=1326 audit(1769014754.773:998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9052 comm="syz.0.1711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7f0c21d7acb9 code=0x7ffc0000 [ 134.290343][ T29] audit: type=1326 audit(1769014754.773:999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9052 comm="syz.0.1711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c21d7acb9 code=0x7ffc0000 [ 134.313642][ T29] audit: type=1326 audit(1769014754.773:1000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9052 comm="syz.0.1711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c21d7acb9 code=0x7ffc0000 [ 134.337298][ T29] audit: type=1326 audit(1769014754.773:1001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9052 comm="syz.0.1711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f0c21d7acb9 code=0x7ffc0000 [ 134.360779][ T29] audit: type=1326 audit(1769014754.773:1002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9052 comm="syz.0.1711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c21d7acb9 code=0x7ffc0000 [ 134.434843][ T3328] ================================================================== [ 134.443057][ T3328] BUG: KCSAN: data-race in __xa_clear_mark / xas_find_marked [ 134.450482][ T3328] [ 134.452823][ T3328] read-write to 0xffff88811a39c908 of 8 bytes by interrupt on cpu 1: [ 134.460914][ T3328] __xa_clear_mark+0xf5/0x1e0 [ 134.465612][ T3328] __folio_end_writeback+0xf4/0x360 [ 134.470834][ T3328] folio_end_writeback_no_dropbehind+0x6d/0x1d0 [ 134.477119][ T3328] folio_end_writeback+0x1c/0x70 [ 134.482099][ T3328] end_buffer_async_write+0x156/0x1f0 [ 134.487492][ T3328] end_bio_bh_io_sync+0x79/0xa0 [ 134.492379][ T3328] bio_endio+0x37a/0x410 [ 134.496651][ T3328] blk_update_request+0x338/0x730 [ 134.501718][ T3328] blk_mq_end_request+0x26/0x50 [ 134.506630][ T3328] lo_complete_rq+0x98/0x140 [ 134.511259][ T3328] blk_done_softirq+0x77/0xb0 [ 134.515954][ T3328] handle_softirqs+0xb9/0x280 [ 134.520664][ T3328] run_ksoftirqd+0x1c/0x30 [ 134.525100][ T3328] smpboot_thread_fn+0x32a/0x510 [ 134.530067][ T3328] kthread+0x488/0x510 [ 134.534162][ T3328] ret_from_fork+0x148/0x280 [ 134.538785][ T3328] ret_from_fork_asm+0x1a/0x30 [ 134.543583][ T3328] [ 134.545928][ T3328] read to 0xffff88811a39c908 of 8 bytes by task 3328 on cpu 0: [ 134.553481][ T3328] xas_find_marked+0x213/0x620 [ 134.558268][ T3328] find_get_entry+0x5d/0x380 [ 134.562879][ T3328] filemap_get_folios_tag+0xb6/0x230 [ 134.568217][ T3328] filemap_write_and_wait_range+0x1f5/0x370 [ 134.574143][ T3328] sync_blockdev+0x35/0x50 [ 134.578588][ T3328] sync_filesystem+0x162/0x190 [ 134.583371][ T3328] generic_shutdown_super+0x44/0x210 [ 134.588690][ T3328] kill_block_super+0x2a/0x70 [ 134.593417][ T3328] deactivate_locked_super+0x75/0x1c0 [ 134.598822][ T3328] deactivate_super+0x97/0xa0 [ 134.603531][ T3328] cleanup_mnt+0x2bb/0x330 [ 134.607968][ T3328] __cleanup_mnt+0x19/0x20 [ 134.612405][ T3328] task_work_run+0x130/0x1a0 [ 134.617041][ T3328] exit_to_user_mode_loop+0x1f7/0x6f0 [ 134.622545][ T3328] do_syscall_64+0x1d3/0x2a0 [ 134.627180][ T3328] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.633094][ T3328] [ 134.635420][ T3328] value changed: 0x0000000000000007 -> 0x0000000000000000 [ 134.642529][ T3328] [ 134.644863][ T3328] Reported by Kernel Concurrency Sanitizer on: [ 134.651019][ T3328] CPU: 0 UID: 0 PID: 3328 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) [ 134.660924][ T3328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 134.670983][ T3328] ================================================================== [ 134.824886][ T9062] loop0: detected capacity change from 0 to 1024 [ 134.839509][ T9062] EXT4-fs: Ignoring removed mblk_io_submit option [ 134.870733][ T9062] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.929078][ T3328] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.214838][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 141.214854][ T29] audit: type=1400 audit(1769014761.843:1004): avc: denied { egress } for pid=22 comm="ksoftirqd/1" saddr=fe80::1b daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 141.244449][ T29] audit: type=1400 audit(1769014761.843:1005): avc: denied { sendto } for pid=22 comm="ksoftirqd/1" saddr=fe80::1b daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1