last executing test programs: 3m5.402459325s ago: executing program 0 (id=1): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2000, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x6, 0x8000}, 0x100, 0x8000000, 0x0, 0x2, 0xfff, 0xa001, 0x5, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x23, 0x0, 0x1) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x240, 0x0) ioctl$SIOCGSKNS(r1, 0x894c, &(0x7f0000000100)={'virt_wifi0\x00', 0xe00}) chmod(&(0x7f0000000740)='./cgroup.cpu/cgroup.procs\x00', 0x30) writev(0xffffffffffffffff, &(0x7f0000000040), 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYRES16=r1], 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x862b01) ioctl$EVIOCSFF(r2, 0x40304580, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/key-users\x00', 0x0, 0x0) r4 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendfile(r4, r3, 0x0, 0x2) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d41b1b"]) r5 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000004700)) syz_usb_connect$cdc_ncm(0x2, 0x92, &(0x7f00000002c0)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x80, 0x2, 0x1, 0x8, 0x80, 0xa, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x8, 0xe, 0x240, 0x59}, {0x6, 0x24, 0x1a, 0xbb, 0x4}, [@country_functional={0x8, 0x24, 0x7, 0x6, 0x3, [0x5]}, @acm={0x4, 0x24, 0x2, 0x1}, @acm={0x4}, @mbim={0xc, 0x24, 0x1b, 0x9, 0x6, 0xf, 0x3, 0x5, 0x8}, @mbim_extended={0x8, 0x24, 0x1c, 0x3, 0x3, 0x9}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x6, 0x4, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x7, 0xb, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x9, 0x4, 0x1}}}}}}}]}}, 0x0) 3m2.65195465s ago: executing program 0 (id=7): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @ipv4={'\x00', '\xff\xff', @local}, 0x4}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @mcast2, 0x5}, 0x1c) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x6}, 0x1c) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000000000)={0xa, 0xe20, 0x0, @mcast2, 0x7}, 0x1c) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000080)=0x5, 0x4) bind$inet6(r8, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r9 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r9, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) r10 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r10, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @mcast2, 0x2}, 0x1c) r11 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r11, &(0x7f0000000040)={0xa, 0x4e20, 0x100000, @mcast2, 0x3}, 0x1c) 3m2.566179053s ago: executing program 0 (id=11): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000840)={'veth1_to_bond\x00', 0x0}) bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=@newtaction={0x14, 0x30, 0xb}, 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x10000000) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40442, 0x1) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x1, 0x40, 0x5, 0x41}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={r7, &(0x7f00000002c0), &(0x7f0000000380)=@tcp6, 0x2}, 0x20) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000a40)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x1000, 0x5, 0x3, 0x1, 0x9}, 0x9, 0x1, 0x1, 0x6, 0x41, 0x11, 0x12, 0x6, 0x4, 0xfffffff8, {0xe61a, 0x8000, 0x10006, 0x1, 0x6, 0xbf5}}}}]}, 0x78}}, 0x0) 2m47.474026945s ago: executing program 32 (id=11): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000840)={'veth1_to_bond\x00', 0x0}) bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=@newtaction={0x14, 0x30, 0xb}, 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x10000000) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40442, 0x1) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x1, 0x40, 0x5, 0x41}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={r7, &(0x7f00000002c0), &(0x7f0000000380)=@tcp6, 0x2}, 0x20) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000a40)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x1000, 0x5, 0x3, 0x1, 0x9}, 0x9, 0x1, 0x1, 0x6, 0x41, 0x11, 0x12, 0x6, 0x4, 0xfffffff8, {0xe61a, 0x8000, 0x10006, 0x1, 0x6, 0xbf5}}}}]}, 0x78}}, 0x0) 2m5.188066084s ago: executing program 5 (id=136): socket$inet_sctp(0x2, 0x1, 0x84) epoll_create1(0x80000) perf_event_open(&(0x7f0000000340)={0x2, 0xbd, 0x2a, 0x1, 0xfc, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) dup(0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000480)={0x4, &(0x7f00000004c0)=[{0x40, 0x3, 0x7, 0x2}, {0x9, 0x3, 0x7f, 0xf7}, {0x4, 0x1, 0x4, 0x3}, {0x8, 0x0, 0x3, 0x2}]}) unshare(0x20000680) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x40180, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000580)={0x0, 0x8}, 0x8) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x10b, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000000)=0x28, 0x4) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001ec0), 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000009c0)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x800718, &(0x7f0000000200)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x48d, &(0x7f0000000a00)="$eJzs281rHOUfAPDvTLKb9teX5FfrS2vVaBGCYtKkVXvwolQQqSjooR5jsi2h20aaKLYWm4p4EqSgZ/Eo+hd4E0HUk+DVkycpFO2lrafITGaSTbp5odlk0+7nAzP7PDPP7Dzfnbdnn2c3gI7Vn82SiJ0R8UdE9M5lFxfon3u5ef3i2K3rF8eSmJ198+8kL3fj+sWxsmi53Y4iM5BGpJ8kxU4Wmzp/4fRovV47V+SHps+8OzR1/sIz758ZPVU7VTs7cvTokcPDzz838mxL4sziurH/o8kD+155+8prYyeuvPPLd1l9dxbrG+Nolf4s8H9mc0vXPdnqnbXZrnzek8+T7jZXhjXriojscFXy6783umLh4PXGyx+3tXLAhsqeTT3Lr56ZBe5hSay1ZKXhngHc/coHffb9t5w2odmxZVx7ce4LUBb3zWKaW9MdaVGmMv/9tvX6I+LEzL9fZVNsUD8EAECjz8a+PF6Nnvjw1revZm2P3vk1aTyQv/6Zz3cXYyh9EfH/iNgTEfdFxN6IuD8iL/tgRDy0zvrc3v5Jr67zLVeUtf9eKMa2Frf/ytZf9HUVuV15/JXk5ES9dqj4TAai0pPlh1fYxw/Hfv98uXWN7b9syvZftgWLelztXtJBNz46PRqV9US94NrliP3dzeJP5kcCkojYFxH757da0wDP7jIx8dQ3B5YrtHr8K2jBONPs11l4M1n8M7Ek/lLSOD45cdv45NC2qNcODZVnxe1+/e3TN5bb/7rib4FrtbnXhuO/tEhf0jheO9Xa/d/h+Z9Wk7fyceZqMeb4wej09LnhiGpyPM9Xi7L58pGFbct8WT47/wcONr/+9xTbZPE/HBHZSfxIRDwaEY8VdX88Ip6IiIMrxPjzS6vHH2mbjv/liPGm97/583/J8T9/4XR5a1xYsmKi6/RP3y+3/7Ud/yN5aqBYkt//VtGsOt1NqnynnxsAAADcTdL8N/BJOjifTtPBwbnf8O+N/6X1yanpp09Ovnd2fO638n1RScuert6iP7Q+Ua8NJzPFO1aSY1GvjRR9xWV/6eGi3/iLru15fnBssj7e5tih0+1Y5vrP/NXV7toBG2x706Uj1U2vCNAGS8fR08XZS6+HmwHcq/xfGzrXKtd/uln1ADaf5z90rmbX/6UleWMBcG/y/IfO5fqHDpX+2O4aAG3k+Q8dadU/77cnsa1xSXXlwtUtUueWJbbqQckTEWUi3RL1kdigRLvvTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAK3xXwAAAP//uIXZzg==") getsockopt$inet_mptcp_buf(r1, 0x6, 0x1e, 0xfffffffffffffffd, &(0x7f0000000000)=0x2000000) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000001c0)={0xb, 0x8, 0xb1, 0x4, 0x3}) bind$rxrpc(r0, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000009, 0x46031, 0xffffffffffffffff, 0x0) syz_clone3(&(0x7f0000007040)={0x400, &(0x7f0000006e40), 0x0, 0x0, {0x18}, 0x0, 0x0, 0x0, &(0x7f0000007000)=[0xffffffffffffffff], 0x1}, 0x58) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) unshare(0x10000000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'veth0_to_bond\x00'}) 2m1.882350228s ago: executing program 5 (id=142): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4) socket$kcm(0x11, 0x200000000000002, 0x300) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000300), 0xc) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000fc07ffff00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x3, @remote, 0x5, 0x3}, 0x80, 0x0}, 0x2600c055) close(r3) r4 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r4, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0xfdef}], 0x1}, 0x0) r5 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=0xffffffffffffffff, 0x4) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r5}, 0x8) sendmsg$kcm(r4, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r8, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x89e1, &(0x7f0000000080)={r7}) recvmsg$kcm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000580)=""/179, 0xb3}], 0x1, &(0x7f0000000340)=""/193, 0xc1}, 0x40010103) r9 = perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0xa2, 0x4, 0x3, 0x9, 0x0, 0xbf18, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x3c, 0x2}, 0x201be30867a0b654, 0x5, 0x10001, 0x0, 0x6, 0x8, 0x0, 0x0, 0x7, 0x0, 0x6}, 0x0, 0xb, r6, 0x3) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x40082406, &(0x7f0000001040)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12t\x02\x006\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x01\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x828_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x04.\x9aL\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5\xdc,]R\xcc\xb2O\xdb\xed-\x87$\xeb\xde\x10*\xd9\xc6\xe7\x10\xd9rY\x0f\xa1d\x96\x03\x99\xa6.o4g\xc9+j\xd5\x9a-\x90\xfc1\xa0|\xe5\xf2\xe99\xa8zJ\xdb\x1c\x0e\x8b\x1e\x96\xa5?\xffv\x1f\x00\xd4\xfc\x04\x95\xfb\r\"\x86\x0f\xc9d\xa2\xef\x16\x030\x8a\x18(\xca\xfc\x11O4\x9aZ\xf8\xf6\xfc*q\xff\x16\xfe{@W$H\x9d\xfe\v\x93\x04u\x93\x920e\x11\x0e\xe9\x06\xc2\xd7\xcc\x18U\xd5\x80\xef\xbda\x82\b\a\xd4\xefU\x92|\xcfX-\xddoSh\x81*\x03T\x87\xf3_Jp\x18cA\xccc\x9e\"\n\xc9\x17\xaf\xdd\xe8aa\xb0\xf5\'U\xb6 \xa0O\xab)\xe5Un\xcb\x95\xe4\xcb\xccX\xee\xa4\x81\xc6\xb7\xd0c\xfc[P\xe1\xa5\xd8\xf9u\xab\x91\xccT<\t\xe6\x1f\xc6\xf6\xd0\x18b\x9e\x8e\xe3\xe3\xa2\xe9/\xcb\x11u5~\'\xbb\x85\xd2\xaafTp^\x85\xdc\x1c\xe1d6\xf8e\xd8\xe1\xdcg\x1c \xb19\x1ey#>z\x9e') 2m1.537907469s ago: executing program 5 (id=144): mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) msync(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x6) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f00000001c0)=0x80000000) r3 = syz_socket_connect_nvme_tcp() r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="340000001a00010028bd70000000000002202000000000070000000008000300", @ANYRES32=r5, @ANYBLOB="08090000ac1414bb080002000a010100613db2d2249b78bbb22d1520efbb0264f23355c3841a61c54fb8dda48fd3588e5f46486cb41335e4617b8fd52fa3e13f2602ef893b3f207ab7f27bba23eb77"], 0x34}}, 0xea5bc50b6199d77e) sendto$inet_nvme_pdu(r3, &(0x7f00000001c0)=@data_h2c={{}, 0x0, 0x0, 0x1, 0x0, "cfbf3586"}, 0x80, 0x0, 0x0, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000000540)=ANY=[@ANYBLOB="38000000480021032cbd7000fbdbdf250a000000", @ANYRES32=0x0, @ANYBLOB="0400000008000200bcd763e3c8684294da761b26"], 0x38}, 0x1, 0x0, 0x0, 0x4010}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000040)=0x4) socket$key(0xf, 0x3, 0x2) r8 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000280)={@rand_addr=0x64010102, @loopback}, 0x8) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x38, 0x10, 0x801, 0x4000020, 0xfffffffc, {0x0, 0x0, 0x4c, 0x0, 0x204e9, 0x500}, [@IFLA_TXQLEN={0x8, 0xd, 0x40}, @IFLA_OPERSTATE={0x5, 0x10, 0x8}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x4529}]}, 0x38}, 0x1, 0xffffa888}, 0x20000801) 1m59.005287146s ago: executing program 5 (id=152): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pwritev(r2, &(0x7f00000007c0)=[{&(0x7f0000000040)='b', 0x1}], 0x100000000000020e, 0x1, 0x1f5) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") write(0xffffffffffffffff, 0x0, 0x0) r3 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x80) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(0x0, &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x28, 0x11, 0x0, 0x1, @quota={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0xe4e}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xac}}, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000440)='attr\x00') getdents(r7, &(0x7f0000000000)=""/34, 0x22) getdents(r7, 0xffffffffffffffff, 0x5a) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) mount$bind(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2243005, 0x0) setns(r5, 0x24020000) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/191, 0xbf}, 0x5}], 0x1, 0x2000, &(0x7f0000003700)={0x77359400}) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) preadv2(r3, &(0x7f0000000280), 0x0, 0x0, 0x0, 0x0) 1m55.859946015s ago: executing program 5 (id=155): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) io_uring_enter(0xffffffffffffffff, 0x3516, 0x7e76, 0x0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x8c, &(0x7f00000004c0)={{0x12, 0x1, 0x141, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7a, 0x2, 0x1, 0x6, 0x50, 0x45, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x5, 0xd, 0xd}, {0x6, 0x24, 0x1a, 0x8, 0x13}, [@mbim_extended={0x8, 0x24, 0x1c, 0xc, 0x3, 0x9}, @network_terminal={0x7, 0x24, 0xa, 0xff, 0xf2, 0xfd, 0x1}, @network_terminal={0x7, 0x24, 0xa, 0x7, 0x3, 0x8}, @mbim_extended={0x8, 0x24, 0x1c, 0x6, 0x0, 0x100}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x8, 0x54, 0x1b}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x2, 0xe, 0xfa}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x4, 0x0, 0xf}}}}}}}]}}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000540)=0x1, 0x4) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r2, &(0x7f00000060c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000140)='@', 0x1}, {&(0x7f00000007c0)='y', 0x1}, {&(0x7f0000000340)="b9", 0x1}, {&(0x7f0000000940)="99", 0x1}, {&(0x7f00000008c0)='z', 0x1}, {&(0x7f00000009c0)='~', 0x1}, {&(0x7f0000000a00)='x', 0x1}, {&(0x7f0000000440)="06", 0x1}, {&(0x7f0000000580)='k', 0xffffffc6}, {&(0x7f00000006c0)="1d", 0x1}, {&(0x7f0000000800)='a', 0x1}, {&(0x7f0000000280)='$', 0x1}], 0xc}}, {{0x0, 0x0, &(0x7f00000035c0)=[{&(0x7f0000001040)="fc"}, {&(0x7f0000001080)="c9", 0x1}, {&(0x7f0000002180)='-', 0x1}, {&(0x7f0000002240)='R', 0x1}, {&(0x7f00000033c0)="c4", 0x1}], 0x5}}], 0x2, 0x4000000) setsockopt$sock_int(r2, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) r3 = socket(0x2, 0x3, 0xff) r4 = socket(0x28, 0x5, 0x0) r5 = socket(0x28, 0x5, 0x0) r6 = socket(0x10, 0x3, 0x0) bind$netlink(r6, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r6, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r6, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_timeval(r6, 0x1, 0x15, &(0x7f0000000200)={0x0, 0x2710}, 0x10) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000b4bffc), 0x4) write(r6, &(0x7f0000000000)='\"', 0xfdef) bind$vsock_stream(r5, 0x0, 0x0) listen(r5, 0x1) writev(0xffffffffffffffff, &(0x7f00000002c0), 0x0) connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r4, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x4e23, @multicast1}, 0x10) 1m53.381127451s ago: executing program 5 (id=160): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x1, 0x5, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0xfffffffd, 0x0, 0x1}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) socket$l2tp(0x2, 0x2, 0x73) socket$kcm(0x2, 0x2, 0x73) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x39001, 0x0) splice(r1, 0x0, r0, 0x0, 0xe5d8, 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="500000000206010300000000000000000500000005000100070000000900020073797a31000000000500040000000000050005000a00000015000300686173683a69602c706f72742c6e657400000000"], 0x50}}, 0x24008090) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x3, 0xd, &(0x7f0000000400)=ANY=[@ANYRES32=0x0, @ANYRESDEC=r5, @ANYBLOB="0000000000000000b708000008ea00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000095"], &(0x7f0000000100)='syzkaller\x00', 0xc9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe9f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)) 1m38.181590955s ago: executing program 33 (id=160): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x1, 0x5, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0xfffffffd, 0x0, 0x1}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) socket$l2tp(0x2, 0x2, 0x73) socket$kcm(0x2, 0x2, 0x73) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x39001, 0x0) splice(r1, 0x0, r0, 0x0, 0xe5d8, 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="500000000206010300000000000000000500000005000100070000000900020073797a31000000000500040000000000050005000a00000015000300686173683a69602c706f72742c6e657400000000"], 0x50}}, 0x24008090) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x3, 0xd, &(0x7f0000000400)=ANY=[@ANYRES32=0x0, @ANYRESDEC=r5, @ANYBLOB="0000000000000000b708000008ea00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000095"], &(0x7f0000000100)='syzkaller\x00', 0xc9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe9f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)) 6.820559776s ago: executing program 3 (id=835): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pwritev(r2, &(0x7f00000007c0)=[{&(0x7f0000000040)='b', 0x1}], 0x100000000000020e, 0x1, 0x1f5) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") write(0xffffffffffffffff, 0x0, 0x0) r3 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x80) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x28, 0x11, 0x0, 0x1, @quota={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0xe4e}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x8c}}, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000440)='attr\x00') getdents(r7, &(0x7f0000000000)=""/34, 0x22) getdents(r7, 0xffffffffffffffff, 0x5a) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) mount$bind(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2243005, 0x0) setns(r5, 0x24020000) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/191, 0xbf}, 0x5}], 0x1, 0x2000, &(0x7f0000003700)={0x77359400}) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) preadv2(r3, &(0x7f0000000280), 0x0, 0x0, 0x0, 0x0) 6.710754479s ago: executing program 2 (id=836): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, 0x0, 0x0, 0x9000) 6.480122107s ago: executing program 2 (id=837): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="0500000003"], 0x48}}, 0x0) close(0xffffffffffffffff) socket(0x10, 0x803, 0x2) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x68180, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x3fffffffb}, 0xc0c8, 0x0, 0x0, 0x3, 0x9, 0x8001, 0x7fff}, 0x0, 0xff6fffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0xcf, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x3, 0x6}, 0x1004, 0x0, 0x10000, 0x3, 0x2, 0x80004001, 0x0, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = add_key$fscrypt_v1(&(0x7f0000000200), &(0x7f0000000240)={'fscrypt:', @auto=[0x34, 0x6b, 0x30, 0x66, 0x31, 0x65, 0x39, 0x30, 0x30, 0x33, 0x62, 0x66, 0x61, 0x3a, 0x38, 0x62]}, &(0x7f0000000280)={0x0, "02802b06cb753e36a42414a4cb9f432da0932a47c390b0d7d234f0af8770c83068309db4f2270a7db01b6653a5c3eaba703f8dc853de176b3c6837c8d8841c93", 0x3d}, 0x48, 0xfffffffffffffffc) socket(0x10, 0x2, 0x0) fsopen(&(0x7f0000000000)='devpts\x00', 0x0) request_key(&(0x7f00000000c0)='dns_resolver\x00', &(0x7f0000000140)={'syz', 0x2}, &(0x7f00000001c0)='-&)(-.,\x00', r2) keyctl$restrict_keyring(0x3, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={0x0}}, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x2208840, &(0x7f0000000400)=ANY=[@ANYRESHEX, @ANYBLOB, @ANYRESHEX, @ANYBLOB]) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='attr\x00') bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000006c0)='net/dev\x00') preadv(r4, &(0x7f0000000240)=[{&(0x7f00000004c0)=""/152, 0x98}, {&(0x7f0000000580)=""/142, 0x2000060e}], 0x2, 0x0, 0x0) lseek(r3, 0x87, 0x1) getdents64(r3, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r3) syslog(0x4, &(0x7f0000000000)=""/19, 0xb12288e90d7c8384) 5.915943886s ago: executing program 4 (id=841): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newrule={0x44, 0x20, 0x1, 0x0, 0x25dfdbfe, {0xa, 0x80, 0x14, 0x4, 0x0, 0x0, 0x0, 0x6}, [@FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x44}, 0x1, 0x0, 0x0, 0x4c005}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0) 5.579111029s ago: executing program 2 (id=842): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c000000100001041000"/20, @ANYRES32=0x0, @ANYBLOB="21000000000000002c001280080001"], 0x4c}}, 0x40) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x4, [{0x11}, {0x0, 0x100000000000000}]}, 0x68) 5.494192741s ago: executing program 3 (id=843): unshare(0x26020480) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f00000000c0), &(0x7f0000000100)=0x40) 5.386673265s ago: executing program 2 (id=844): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x2) creat(&(0x7f0000000040)='./file0\x00', 0x21) 5.386238985s ago: executing program 3 (id=845): openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/bus/input/devices\x00', 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x200000000000000) 5.381114365s ago: executing program 4 (id=847): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x10) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0xfffffffffffffffa, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x48, 0x2, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x48}}, 0x0) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x44, 0x9, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @random="1e9e8f928a71"}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f00000003c0)={0x1, [0x5]}, &(0x7f0000000400)=0x6) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r5) syz_read_part_table(0x105f, &(0x7f0000001080)="$eJzsz7FtwkAYBeDnS2z5lCJVRoiyQTZJnRKJEhZwQ0XBHLAJkzCGEbLNCEDxfc09vSed9Ienarqs/99+ktQkw72e3/exSUoOm4/fNttVkm4aalLLd5LyeWlvRb+fhvNx+aOrS+qbccpD+uy+Ms59+Ts94EQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeHnXAAAA//8SNwwv") mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x20000000000002, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x45, 0x1, 0x1, 0x0, 0x0, 0x4, 0x350, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xff, 0x30000000000}, 0x12122, 0x10000, 0xfffffffe, 0x5, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x1, 0x38, 0x3, 0x6, 0x0, 0x1ff, 0x1, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xff, 0x2, @perf_config_ext={0x5f, 0x200}, 0x6080, 0x9, 0xe6, 0x1, 0x0, 0x4a, 0x0, 0x0, 0x8, 0x0, 0x10}, 0x0, 0x10, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 5.269306549s ago: executing program 3 (id=848): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xa, 0x3, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xe88, 0x3}, 0x106200, 0x7, 0x20da, 0x0, 0x2, 0x20005, 0x3, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)={0x6, 0x1000000e, 0x9, 0x10000189, 0xfffffffb, 0x7}) syz_open_procfs(0x0, &(0x7f0000000180)='uid_map\x00') perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x40000007, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8006, 0x6}, 0x0, 0x10001, 0xda, 0x4, 0xa, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) 5.142756683s ago: executing program 2 (id=849): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) madvise(&(0x7f00000fe000/0x4000)=nil, 0x4000, 0xb) migrate_pages(0x0, 0xfc, 0x0, &(0x7f0000000240)=0x1) 4.518537715s ago: executing program 2 (id=852): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r3) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xa, 0x3, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xe88, 0x3}, 0x106200, 0x7, 0x20da, 0x0, 0x2, 0x20005, 0x3, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)={0x6, 0x1000000e, 0x9, 0x10000189, 0xfffffffb, 0x7}) 4.37676235s ago: executing program 4 (id=854): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) io_uring_enter(0xffffffffffffffff, 0x3516, 0x7e76, 0x0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x8c, &(0x7f00000004c0)={{0x12, 0x1, 0x141, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7a, 0x2, 0x1, 0x6, 0x50, 0x45, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x5, 0xd, 0xd}, {0x6, 0x24, 0x1a, 0x8, 0x13}, [@mbim_extended={0x8, 0x24, 0x1c, 0xc, 0x3, 0x9}, @network_terminal={0x7, 0x24, 0xa, 0xff, 0xf2, 0xfd, 0x1}, @network_terminal={0x7, 0x24, 0xa, 0x7, 0x3, 0x8}, @mbim_extended={0x8, 0x24, 0x1c, 0x6, 0x0, 0x100}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x8, 0x54, 0x1b}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x2, 0xe, 0xfa}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x4, 0x0, 0xf}}}}}}}]}}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000540)=0x1, 0x4) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r2, &(0x7f00000060c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000140)='@', 0x1}, {&(0x7f00000007c0)='y', 0x1}, {&(0x7f0000000340)="b9", 0x1}, {&(0x7f0000000940)="99", 0x1}, {&(0x7f00000008c0)='z', 0x1}, {&(0x7f00000009c0)='~', 0x1}, {&(0x7f0000000a00)='x', 0x1}, {&(0x7f0000000440)="06", 0x1}, {&(0x7f0000000580)='k', 0xffffffc6}, {&(0x7f00000006c0)="1d", 0x1}, {&(0x7f0000000800)='a', 0x1}, {&(0x7f0000000280)='$', 0x1}], 0xc}}, {{0x0, 0x0, &(0x7f00000035c0)=[{&(0x7f0000001040)="fc"}, {&(0x7f0000001080)="c9", 0x1}, {&(0x7f0000002180)='-', 0x1}, {&(0x7f0000002240)='R', 0x1}, {&(0x7f00000033c0)="c4", 0x1}], 0x5}}], 0x2, 0x4000000) setsockopt$sock_int(r2, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) r3 = socket(0x2, 0x3, 0xff) r4 = socket(0x28, 0x5, 0x0) r5 = socket(0x28, 0x5, 0x0) r6 = socket(0x10, 0x3, 0x0) bind$netlink(r6, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r6, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r6, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_timeval(r6, 0x1, 0x15, &(0x7f0000000200)={0x0, 0x2710}, 0x10) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000b4bffc), 0x4) write(r6, &(0x7f0000000000)='\"', 0xfdef) bind$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r5, 0x1) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x2) connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r4, 0x0, 0x0, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x4e23, @multicast1}, 0x10) 3.21963627s ago: executing program 6 (id=856): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r1, 0x83625fc5352ba305}, 0x14}}, 0x2000040) 3.21931539s ago: executing program 6 (id=857): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f00000003c0)={[{@nombcache}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@nouid32}]}, 0x1, 0x441, &(0x7f0000000580)="$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") keyctl$KEYCTL_MOVE(0x4, 0x0, 0x0, 0x0, 0x0) quotactl$Q_SETINFO(0xffffffff80000601, &(0x7f00000001c0)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 3.20951363s ago: executing program 6 (id=858): syz_emit_ethernet(0x22, &(0x7f0000000080)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, @local, @void, {@ipv4={0x4305, @generic={{0x5, 0x4, 0x3, 0x3, 0x14, 0x65, 0x0, 0x8, 0x2e, 0x0, @private=0xa010101, @rand_addr=0x64010102}}}}}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0xfeffff, 0x680, 0x3f000002, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40) 3.188484141s ago: executing program 6 (id=859): syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000240)={[{@nouid32}, {@nodioread_nolock}, {@noquota}, {@jqfmt_vfsv1}, {@journal_dev={'journal_dev', 0x3d, 0x9}}, {@commit}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$eJzs3T1sG3UbAPDnznHTj7xv+krvK72gDhUgFamqk/QDClO7IipV6oDEApHjRlWcuIodaKJIpHuF6IAAdSkbDIwgBgbEwsjKwseMVNEIpKYDGDk+p2nqFCfEMcS/n3TJ/3939vP8fX7OvtOdHEDfOtr4k0Y8EREXk4jhdcsGIlt4tLneyvJi8f7yYjGJev3Sz0kkEXFvebHYWj/J/h+KiKWI+H9EfJWPOJ6uPeW+VqM6vzA1Xi6XZrP+SG366kh1fuHElenxydJkaebU8y+cOXv6zNjJsfXp3q+v7+W3NtYb3998+8Y3L92++fEnR5aK744ncS6GsmXrx7GTmq9JPs5tmH+6G8F6KOl1AmxLLqvzRin9L4Yjl1V9O/X1O4fBXUkP6KL6YER9zbom0AcSRQ99qvU9oHH825p28/vHnfPNA5BG3JXlxeJb0Yo/0Dw3EftXj00O/pI8dGTSON48vJuJsictXY+I0YGBR9//Sfb+277RnUiQrvryfHNDPbr907X9T7TZ/wy1zp3+Ra3930q2/1tpEz+3yf7vYocxfnv1xw82jX99MJ5sGz9Zi5+0iZ9GxOsdxr/1yudnN1tW/zDiWLSP35I8/vzwyOUr5dJo82/bGF8cO/Li5uOPOLhJ/OY52/2riawf/74sp7TD8X/29adPLT0m/rNPP377t3v9D0TEOx3G/8+9j17ebNmd68ndxreArW7/JPJxu8P4z507+l3WdNYQAAAAAAAAAAB2ULp6LVuSFtbaaVooNO/h/W8cTMuVau345crczETzmrfDkU9bV1oNN/tJoz+WXY/b6p/c0D+VywLmDqz2C8VKeaLHYwcAAAAAAAAAAAAAAAAAAIC/i0Mb7v//Nbd6///Gn6sG9qrNf/Ib2OvUP/Svh+s/6VkewO7z+Q99q67+oX+pf+hf6h/6l/qH/tW2/g/sfh7A7vP5D/1L/QMAAAAAAAAAAAAAAAAAAAAAAAAAQFdcvHChMdXvLy8WG/2Jgfm5qcobJyZK1anC9FyxUKzMXi1MViqT5VKhWJn+s+dLKpWrozEzd22kVqrWRqrzC69NV+ZmWr8pWsp3fUQAAAAAAAAAAAAAAAAAAADwzzO0OiVpISLf7KdpoRDxr4g4nERy+Uq5NBoR/46Ib3P5wUZ/rNdJAwAAAAAAAAAAAAAAAAAAwB5TnV+YGi+XS7PdawxkoTp71A+1ruYzsJWVI2JpZ9NoPOOWH5XPXsDubqY+aeQ6fB/2faOHOyUAAAAAAAAAAAAAAAAAAOhTD2767fQRv3c3IQAAAAAAAAAAAAAAAAAAAOhL6U9JRDSmY8PPDG1cui9Zya3+j4g3b11679p4rTY71ph/d21+7f1s/sle5A90qlWnaUQ06hgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4oDq/MDVeLpdmt9kY7GCdXo8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYDv+CAAA//9bQM66") prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="6e0da88d0e580000140003d36e62ba640e000000c400000000000000"], 0x34}}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x5, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x100}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) connect$inet6(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) rt_sigtimedwait(&(0x7f0000000880)={[0x9]}, 0x0, &(0x7f0000000180)={0x0, 0x989680}, 0x8) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x104046, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x1, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, r3, 0x8) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, r3, 0x0) r4 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x208, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, r3, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x600, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x8000}, 0x0, 0xffffffffffffffff, r3, 0x0) close(r4) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) 2.740195576s ago: executing program 1 (id=860): unshare(0x28000600) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_debug_messages', 0x42, 0x0) copy_file_range(r0, 0x0, r0, &(0x7f00000000c0)=0xc, 0x3, 0x0) 2.498529024s ago: executing program 1 (id=861): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xa, 0x3, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xe88, 0x3}, 0x106200, 0x7, 0x20da, 0x0, 0x2, 0x20005, 0x3, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)={0x6, 0x1000000e, 0x9, 0x10000189, 0xfffffffb, 0x7}) syz_open_procfs(0x0, &(0x7f0000000180)='uid_map\x00') perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x40000007, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8006, 0x6}, 0x0, 0x10001, 0xda, 0x4, 0xa, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) 1.391326153s ago: executing program 3 (id=862): setresuid(0xee01, 0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x18) setuid(0xee00) 825.847392ms ago: executing program 4 (id=863): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fcntl$F_SET_RW_HINT(r0, 0x40c, 0x0) 701.307197ms ago: executing program 3 (id=864): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x10) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0xfffffffffffffffa, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x59, &(0x7f0000000080)={&(0x7f0000000140)={0x50, 0x2, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x50}}, 0x0) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f00000003c0)={0x1, [0x5]}, &(0x7f0000000400)=0x6) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r5) syz_read_part_table(0x105f, &(0x7f0000001080)="$eJzsz7FtwkAYBeDnS2z5lCJVRoiyQTZJnRKJEhZwQ0XBHLAJkzCGEbLNCEDxfc09vSed9Ienarqs/99+ktQkw72e3/exSUoOm4/fNttVkm4aalLLd5LyeWlvRb+fhvNx+aOrS+qbccpD+uy+Ms59+Ts94EQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeHnXAAAA//8SNwwv") mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x66) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x20000000000002, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x45, 0x1, 0x1, 0x0, 0x0, 0x4, 0x350, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xff, 0x30000000000}, 0x12122, 0x10000, 0xfffffffe, 0x5, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x1, 0x38, 0x3, 0x6, 0x0, 0x1ff, 0x1, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xff, 0x2, @perf_config_ext={0x5f, 0x200}, 0x6080, 0x9, 0xe6, 0x1, 0x0, 0x4a, 0x0, 0x0, 0x8, 0x0, 0x10}, 0x0, 0x10, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 619.365839ms ago: executing program 6 (id=865): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pwritev(r2, &(0x7f00000007c0)=[{&(0x7f0000000040)='b', 0x1}], 0x100000000000020e, 0x1, 0x1f5) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$eJzs3E1rE10UwPGTNEnTlHayeHhEQXrRjW6GNu7FIC2IAUttxBcQp81EQ8akZEIlIrZduXEhfggXpcvuCtov0I07V27cdSO4sAtxJDOTl7aJrWnSWPv/QZlD7j0z9+Y24dyBzPbdN0/zWVvPGmUJRpUERER2ROISlJqAfwy6cUSaLcvl4W+fzt++d/9mMpWanFFqKjl7JaGUGh17/+zFkN9tY1C24g+3vya+bP2/dXb75+yTnK1ytioUy8pQc8XPZWPOMlUmZ+d1paYt07BNlSvYZslrd5ZELFNlreLCQkUZhcxIbKFk2rYyChWVNyuqXFTlUkUZj41cQem6rkZigoOkV2dmjGSHyfNdHgx6pFRKGgMiMrSvJb3alwEBAIC+8uv/erUfrJb0ndT/oZb1/9qFzfLwnfVRv/7fiFTrf5Gm+v9R41ymygTr9X9URBr1f9HbH3S7/t9fEZ1sr3cvjjhOPYy06n+k+h8nRLX+j/mfX9fKg7VxN6D+BwAAAAAAAAAAAAAAAAAAAADgJNhxHM1xHM07DvivOtqgiETdX5B47X0eJnpk9/o3/lj/06Hx4I7QqIj1ajG9mPaOfodNEbHElHHR5If7/+CrxpFl5XZSVXH5YC35+UuLae+7JJmVnJs/IZrE9+Y7ztSN1OSE8uzOD0usOT8hmvzXOj+xNz9cPUbk0sWmfF00+TgvRbEk4/8yrpb/ckKp67dSe64/5PYDAAAAAOBfoKu6+v59sLld39/u7Y+9dm9/HZLW9we8/fV4y/19SM6F+jVrAAAAAABOF7vyPG9YllnqUbAiIj2+RJugNsPDZtUekNumT0AC7Zq6ENQu3ll6dWxdG0/4UO9YsKOhjkX+cFFaBrXbRu36yHQnZ3Y0kaO+h2fevvv++z7enTGRw5zw6nr0gJl2GkQOmmn42L6AAAAAABybRtFfe+VafwcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMApdByP4uv3HAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC/xa8AAAD//46ZAFE=") write(0xffffffffffffffff, 0x0, 0x0) r3 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x80) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x28, 0x11, 0x0, 0x1, @quota={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0xe4e}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xa4}}, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000440)='attr\x00') getdents(r7, &(0x7f0000000000)=""/34, 0x22) getdents(r7, 0xffffffffffffffff, 0x5a) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) mount$bind(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2243005, 0x0) setns(r5, 0x24020000) preadv2(r3, &(0x7f0000000280), 0x0, 0x0, 0x0, 0x0) 618.891389ms ago: executing program 1 (id=866): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) mount_setattr(r0, 0x0, 0x9800, &(0x7f0000000040)={0x100002, 0xf4, 0x0, {r0}}, 0x20) 618.79617ms ago: executing program 4 (id=867): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f00000000c0)=0x7) ioctl$TIOCVHANGUP(r0, 0x5437, 0x200000000000000) 436.239746ms ago: executing program 1 (id=868): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, 0x0) 314.71614ms ago: executing program 1 (id=869): bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x4, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000061188a000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x3, 0x0, 0x0, 0x0, 0xda4, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) 314.13879ms ago: executing program 4 (id=870): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) io_uring_enter(0xffffffffffffffff, 0x3516, 0x7e76, 0x0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x8c, &(0x7f00000004c0)={{0x12, 0x1, 0x141, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7a, 0x2, 0x1, 0x6, 0x50, 0x45, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x5, 0xd, 0xd}, {0x6, 0x24, 0x1a, 0x8, 0x13}, [@mbim_extended={0x8, 0x24, 0x1c, 0xc, 0x3, 0x9}, @network_terminal={0x7, 0x24, 0xa, 0xff, 0xf2, 0xfd, 0x1}, @network_terminal={0x7, 0x24, 0xa, 0x7, 0x3, 0x8}, @mbim_extended={0x8, 0x24, 0x1c, 0x6, 0x0, 0x100}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x8, 0x54, 0x1b}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x2, 0xe, 0xfa}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x4, 0x0, 0xf}}}}}}}]}}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000540)=0x1, 0x4) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r2, &(0x7f00000060c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000140)='@', 0x1}, {&(0x7f00000007c0)='y', 0x1}, {&(0x7f0000000340)="b9", 0x1}, {&(0x7f0000000940)="99", 0x1}, {&(0x7f00000008c0)='z', 0x1}, {&(0x7f00000009c0)='~', 0x1}, {&(0x7f0000000a00)='x', 0x1}, {&(0x7f0000000440)="06", 0x1}, {&(0x7f0000000580)='k', 0xffffffc6}, {&(0x7f00000006c0)="1d", 0x1}, {&(0x7f0000000800)='a', 0x1}, {&(0x7f0000000280)='$', 0x1}], 0xc}}, {{0x0, 0x0, &(0x7f00000035c0)=[{&(0x7f0000001040)="fc"}, {&(0x7f0000001080)="c9", 0x1}, {&(0x7f0000002180)='-', 0x1}, {&(0x7f0000002240)='R', 0x1}, {&(0x7f00000033c0)="c4", 0x1}], 0x5}}], 0x2, 0x4000000) setsockopt$sock_int(r2, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) r3 = socket(0x2, 0x3, 0xff) r4 = socket(0x28, 0x5, 0x0) r5 = socket(0x28, 0x5, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(0xffffffffffffffff, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(0xffffffffffffffff, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000200)={0x0, 0x2710}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000b4bffc), 0x4) write(0xffffffffffffffff, &(0x7f0000000000)='\"', 0xfdef) bind$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r5, 0x1) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x2) connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r4, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) bind$inet(r3, 0x0, 0x0) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x4e23, @multicast1}, 0x10) 313.32726ms ago: executing program 6 (id=871): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x10) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0xfffffffffffffffa, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x48, 0x2, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x48}}, 0x0) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x44, 0x9, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @random="1e9e8f928a71"}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f00000003c0)={0x1, [0x5]}, &(0x7f0000000400)=0x6) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r5) syz_read_part_table(0x105f, &(0x7f0000001080)="$eJzsz7FtwkAYBeDnS2z5lCJVRoiyQTZJnRKJEhZwQ0XBHLAJkzCGEbLNCEDxfc09vSed9Ienarqs/99+ktQkw72e3/exSUoOm4/fNttVkm4aalLLd5LyeWlvRb+fhvNx+aOrS+qbccpD+uy+Ms59+Ts94EQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeHnXAAAA//8SNwwv") mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x66) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x20000000000002, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x45, 0x1, 0x1, 0x0, 0x0, 0x4, 0x350, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xff, 0x30000000000}, 0x12122, 0x10000, 0xfffffffe, 0x5, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x1, 0x38, 0x3, 0x6, 0x0, 0x1ff, 0x1, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xff, 0x2, @perf_config_ext={0x5f, 0x200}, 0x6080, 0x9, 0xe6, 0x1, 0x0, 0x4a, 0x0, 0x0, 0x8, 0x0, 0x10}, 0x0, 0x10, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 0s ago: executing program 1 (id=872): r0 = syz_open_dev$MSR(&(0x7f0000000740), 0x33, 0x0) r1 = dup2(r0, r0) readv(r1, &(0x7f0000000000)=[{&(0x7f0000002d00)=""/4102, 0x1006}], 0x1) kernel console output (not intermixed with test programs): om eth1 [ 38.079167][ T3326] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 38.088294][ T3326] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 38.103721][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.110917][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.137485][ T3320] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 38.147721][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.154883][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.172878][ T3319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.182091][ T3320] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 38.198306][ T3320] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 38.208985][ T3320] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 38.245201][ T3319] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.263090][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.270457][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.292726][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.300033][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.346570][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.355699][ T3326] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.374176][ T3316] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.390579][ T3320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.406606][ T3318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.424086][ T117] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.431308][ T117] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.446653][ T3320] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.454837][ T117] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.461997][ T117] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.474155][ T3326] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.493333][ T117] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.500504][ T117] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.532083][ T117] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.539205][ T117] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.559107][ T3316] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.572791][ T309] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.579945][ T309] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.597416][ T309] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.604582][ T309] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.654283][ T3318] veth0_vlan: entered promiscuous mode [ 38.685292][ T3319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.697691][ T3326] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.718237][ T3318] veth1_vlan: entered promiscuous mode [ 38.747375][ T3316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.774129][ T3320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.802534][ T3318] veth0_macvtap: entered promiscuous mode [ 38.810756][ T3318] veth1_macvtap: entered promiscuous mode [ 38.841142][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.873943][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.908709][ T117] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.919922][ T117] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.934686][ T3319] veth0_vlan: entered promiscuous mode [ 38.946550][ T117] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.955871][ T117] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.983061][ T3319] veth1_vlan: entered promiscuous mode [ 39.002566][ T3326] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.021290][ T3316] veth0_vlan: entered promiscuous mode [ 39.030620][ T3316] veth1_vlan: entered promiscuous mode [ 39.063772][ T3319] veth0_macvtap: entered promiscuous mode [ 39.098608][ T3318] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 39.105026][ T3316] veth0_macvtap: entered promiscuous mode [ 39.136331][ T3319] veth1_macvtap: entered promiscuous mode [ 39.154185][ T3316] veth1_macvtap: entered promiscuous mode [ 39.167869][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.181809][ T3320] veth0_vlan: entered promiscuous mode [ 39.192949][ T3320] veth1_vlan: entered promiscuous mode [ 39.207941][ T3320] veth0_macvtap: entered promiscuous mode [ 39.215743][ T3320] veth1_macvtap: entered promiscuous mode [ 39.227729][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.236909][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.280519][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.294555][ T30] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.311125][ T30] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.323852][ T30] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.332693][ T30] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.344049][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.379086][ T3326] veth0_vlan: entered promiscuous mode [ 39.393563][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.404958][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.421664][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.430194][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.439166][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.460336][ T3326] veth1_vlan: entered promiscuous mode [ 39.552518][ T3326] veth0_macvtap: entered promiscuous mode [ 39.634431][ T3491] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 39.691909][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.703809][ T28] kauditd_printk_skb: 24 callbacks suppressed [ 39.703823][ T28] audit: type=1400 audit(1774726164.406:104): avc: denied { create } for pid=3492 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 39.735247][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.749129][ T3326] veth1_macvtap: entered promiscuous mode [ 39.760050][ T3326] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.782424][ T3326] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.879261][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.884502][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.903071][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.903184][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.903224][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.903398][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.985801][ T28] audit: type=1400 audit(1774726164.666:105): avc: denied { map_create } for pid=3492 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 39.985863][ T28] audit: type=1400 audit(1774726164.666:106): avc: denied { open } for pid=3492 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 39.985889][ T28] audit: type=1400 audit(1774726164.666:107): avc: denied { perfmon } for pid=3492 comm="syz.4.5" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 39.985916][ T28] audit: type=1400 audit(1774726164.666:108): avc: denied { kernel } for pid=3492 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 39.985990][ T28] audit: type=1400 audit(1774726164.666:109): avc: denied { prog_load } for pid=3492 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 39.986016][ T28] audit: type=1400 audit(1774726164.666:110): avc: denied { bpf } for pid=3492 comm="syz.4.5" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 39.986041][ T28] audit: type=1400 audit(1774726164.666:111): avc: denied { allowed } for pid=3492 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 39.986066][ T28] audit: type=1400 audit(1774726164.666:112): avc: denied { create } for pid=3492 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 39.986142][ T28] audit: type=1400 audit(1774726164.676:113): avc: denied { create } for pid=3492 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 40.219639][ C0] hrtimer: interrupt took 36335 ns [ 40.236461][ T3503] loop1: detected capacity change from 0 to 1024 [ 40.238283][ T3503] ======================================================= [ 40.238283][ T3503] WARNING: The mand mount option has been deprecated and [ 40.238283][ T3503] and is ignored by this kernel. Remove the mand [ 40.238283][ T3503] option from the mount to silence this warning. [ 40.238283][ T3503] ======================================================= [ 40.238422][ T3503] EXT4-fs: test_dummy_encryption option not supported [ 40.398424][ T3494] Set syz1 is full, maxelem 10752 reached [ 40.439252][ T3506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.439338][ T3506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.597845][ T3507] loop1: detected capacity change from 0 to 512 [ 40.649990][ T3507] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 40.743798][ T3507] EXT4-fs (loop1): 1 orphan inode deleted [ 40.753240][ T3507] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.113085][ T3507] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.464775][ T309] EXT4-fs error (device loop1): ext4_release_dquot:7037: comm kworker/u8:7: Failed to release dquot type 1 [ 42.310007][ T3514] syz.2.6 (3514) used greatest stack depth: 8904 bytes left [ 42.451699][ T3426] IPVS: starting estimator thread 0... [ 42.603718][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.662978][ T3520] IPVS: using max 1728 ests per chain, 86400 per kthread [ 43.116979][ T3524] loop3: detected capacity change from 0 to 8192 [ 43.277947][ T3536] process 'syz.1.8' launched '/dev/fd/7' with NULL argv: empty string added [ 43.409009][ T3540] loop4: detected capacity change from 0 to 4096 [ 43.501849][ T3540] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.776125][ T3546] netlink: 'syz.3.10': attribute type 20 has an invalid length. [ 43.984401][ T3540] syz.4.12 (3540) used greatest stack depth: 8760 bytes left [ 44.004160][ T3537] netlink: 40 bytes leftover after parsing attributes in process `syz.2.13'. [ 44.859661][ T28] kauditd_printk_skb: 37 callbacks suppressed [ 44.859680][ T28] audit: type=1400 audit(1774726169.546:150): avc: denied { unmount } for pid=3318 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 45.096530][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.115665][ T28] audit: type=1400 audit(1774726169.546:151): avc: denied { create } for pid=3550 comm="syz.2.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 45.170821][ T28] audit: type=1400 audit(1774726169.556:152): avc: denied { bind } for pid=3550 comm="syz.2.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 45.217034][ T28] audit: type=1400 audit(1774726169.766:153): avc: denied { write } for pid=3549 comm="syz.1.14" name="ptype" dev="proc" ino=4026532640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 45.418292][ T28] audit: type=1400 audit(1774726169.836:154): avc: denied { write } for pid=3549 comm="syz.1.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 45.438183][ T28] audit: type=1400 audit(1774726169.836:155): avc: denied { connect } for pid=3549 comm="syz.1.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 45.470331][ T28] audit: type=1400 audit(1774726169.836:156): avc: denied { name_connect } for pid=3549 comm="syz.1.14" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 45.681674][ T28] audit: type=1400 audit(1774726170.376:157): avc: denied { setopt } for pid=3561 comm="syz.3.16" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 46.041817][ T3571] syz.4.17 uses obsolete (PF_INET,SOCK_PACKET) [ 46.388604][ T3573] loop1: detected capacity change from 0 to 512 [ 46.413276][ T28] audit: type=1400 audit(1774726170.766:158): avc: denied { create } for pid=3563 comm="syz.4.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 46.469688][ T3573] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.482515][ T3573] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.687448][ T28] audit: type=1400 audit(1774726170.776:159): avc: denied { ioctl } for pid=3563 comm="syz.4.17" path="socket:[3889]" dev="sockfs" ino=3889 ioctlcmd=0x8918 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 46.970666][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.196379][ T3584] netlink: 24 bytes leftover after parsing attributes in process `syz.1.21'. [ 47.233576][ T3562] loop3: detected capacity change from 0 to 1024 [ 47.272192][ T3562] EXT4-fs: test_dummy_encryption option not supported [ 47.310932][ T3586] loop1: detected capacity change from 0 to 512 [ 47.317527][ T3586] EXT4-fs: Ignoring removed nobh option [ 47.477426][ T3586] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 47.519812][ T3586] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (33349!=32837) [ 47.637221][ T3586] EXT4-fs (loop1): group descriptors corrupted! [ 47.863943][ T3584] ucma_write: process 21 (syz.1.21) changed security contexts after opening file descriptor, this is not allowed. [ 47.884800][ T3597] IPv6: sit1: Disabled Multicast RS [ 48.060706][ T3589] loop4: detected capacity change from 0 to 1024 [ 48.070693][ T3589] EXT4-fs: inline encryption not supported [ 48.076766][ T3589] EXT4-fs: Ignoring removed bh option [ 48.126425][ T3589] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.137934][ T3600] bridge_slave_0: left allmulticast mode [ 48.202604][ T3600] bridge_slave_0: left promiscuous mode [ 48.208574][ T3600] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.220884][ T3603] 9pnet_fd: p9_fd_create_unix (3603): problem connecting socket: ./file0: -2 [ 48.284815][ T3605] Zero length message leads to an empty skb [ 48.295942][ T3600] bridge_slave_1: left allmulticast mode [ 48.301872][ T3600] bridge_slave_1: left promiscuous mode [ 48.310155][ T3600] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.352356][ T3600] bond0: (slave bond_slave_0): Releasing backup interface [ 48.362871][ T3600] bond0: (slave bond_slave_1): Releasing backup interface [ 48.397831][ T3600] team0: Port device team_slave_0 removed [ 48.406994][ T3600] team0: Port device team_slave_1 removed [ 48.414082][ T3600] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 48.421596][ T3600] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 48.430569][ T3600] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 48.438249][ T3600] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 48.449802][ T3600] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 48.575044][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.731091][ T3616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.741066][ T3616] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.580255][ T3622] netlink: 44 bytes leftover after parsing attributes in process `syz.4.28'. [ 51.071677][ T3621] netlink: 83992 bytes leftover after parsing attributes in process `syz.1.29'. [ 51.082520][ T3621] netlink: zone id is out of range [ 51.089008][ T3621] netlink: zone id is out of range [ 51.097883][ T3621] netlink: zone id is out of range [ 51.381073][ T3621] netlink: set zone limit has 8 unknown bytes [ 51.423294][ T28] kauditd_printk_skb: 24 callbacks suppressed [ 51.423313][ T28] audit: type=1400 audit(1774726176.116:184): avc: denied { shutdown } for pid=3618 comm="syz.1.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 51.487607][ T3626] loop3: detected capacity change from 0 to 512 [ 51.494170][ T28] audit: type=1400 audit(1774726176.126:185): avc: denied { write } for pid=3618 comm="syz.1.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 51.528977][ T3626] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.547405][ T3616] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.554757][ T3616] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.564182][ T3631] loop2: detected capacity change from 0 to 1024 [ 51.567757][ T3626] ext4 filesystem being mounted at /5/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 51.603613][ T3631] EXT4-fs: test_dummy_encryption option not supported [ 51.666868][ T3634] loop1: detected capacity change from 0 to 512 [ 51.687267][ T28] audit: type=1400 audit(1774726176.376:186): avc: denied { bind } for pid=3625 comm="syz.3.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 51.698176][ T3634] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 51.737122][ T3616] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 51.748745][ T3634] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 51.758892][ T3616] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 51.769496][ T3634] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.32: bad orphan inode 4 [ 51.779517][ T3634] loop1: lost filesystem error report for type 5 error -117 [ 51.779584][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 51.793378][ C0] EXT4-fs (loop1): initial error at time 1774726176: ext4_orphan_get:1417 [ 51.801981][ C0] EXT4-fs (loop1): last error at time 1774726176: ext4_orphan_get:1417 [ 51.817325][ T3634] EXT4-fs (loop1): 1 orphan inode deleted [ 51.824520][ T3634] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.847497][ T3635] netlink: 8 bytes leftover after parsing attributes in process `syz.3.30'. [ 52.037860][ T3639] loop2: detected capacity change from 0 to 512 [ 52.689731][ T3640] netlink: 8 bytes leftover after parsing attributes in process `syz.1.32'. [ 52.698582][ T3640] netlink: 60 bytes leftover after parsing attributes in process `syz.1.32'. [ 53.140595][ T3639] EXT4-fs (loop2): 1 orphan inode deleted [ 53.156684][ T3639] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.252032][ T62] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 53.284951][ T3639] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.612563][ T62] EXT4-fs error (device loop2): ext4_release_dquot:7037: comm kworker/u8:4: Failed to release dquot type 1 [ 53.680949][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.733181][ T117] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.743865][ T117] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.774621][ T117] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.939968][ T117] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.423941][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.604881][ T28] audit: type=1400 audit(1774726179.016:187): avc: denied { getopt } for pid=3645 comm="syz.4.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 54.847675][ T3653] loop1: detected capacity change from 0 to 256 [ 55.578881][ T28] audit: type=1400 audit(1774726179.026:188): avc: denied { write } for pid=3645 comm="syz.4.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 55.598772][ T28] audit: type=1400 audit(1774726179.076:189): avc: denied { setopt } for pid=3645 comm="syz.4.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 56.168175][ T3652] ipvlan2: entered allmulticast mode [ 56.173650][ T3652] dummy0: entered allmulticast mode [ 56.309356][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.548605][ T28] audit: type=1400 audit(1774726181.246:190): avc: denied { write } for pid=3660 comm="syz.3.37" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 56.735451][ T28] audit: type=1400 audit(1774726181.426:191): avc: denied { read write } for pid=3660 comm="syz.3.37" name="uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 56.830453][ T28] audit: type=1400 audit(1774726181.436:192): avc: denied { open } for pid=3660 comm="syz.3.37" path="/dev/uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 56.874963][ T28] audit: type=1400 audit(1774726181.576:193): avc: denied { create } for pid=3660 comm="syz.3.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 56.908136][ T3657] loop4: detected capacity change from 0 to 1024 [ 57.292254][ T28] audit: type=1400 audit(1774726181.866:194): avc: denied { perfmon } for pid=3662 comm="syz.1.38" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 57.292389][ T28] audit: type=1400 audit(1774726181.936:195): avc: denied { bpf } for pid=3662 comm="syz.1.38" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 57.347887][ T3657] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.540561][ T3657] netlink: 28 bytes leftover after parsing attributes in process `syz.4.36'. [ 57.622520][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.972299][ T28] audit: type=1400 audit(1774726182.676:196): avc: denied { mount } for pid=3672 comm="syz.3.40" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 58.165032][ T3676] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.234450][ T3676] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.885382][ T3686] loop3: detected capacity change from 0 to 512 [ 58.960742][ T3686] EXT4-fs (loop3): 1 orphan inode deleted [ 58.976775][ T3686] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.993772][ T3686] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.070559][ T12] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 59.096361][ T28] audit: type=1400 audit(1774726183.746:197): avc: denied { setopt } for pid=3675 comm="syz.4.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 59.335409][ T12] EXT4-fs error (device loop3): ext4_release_dquot:7037: comm kworker/u8:0: Failed to release dquot type 1 [ 59.364939][ T28] audit: type=1400 audit(1774726183.796:198): avc: denied { watch watch_reads } for pid=3675 comm="syz.4.39" path="/7" dev="tmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 59.474487][ T3679] loop2: detected capacity change from 0 to 1024 [ 59.507902][ T3679] EXT4-fs: Ignoring removed orlov option [ 59.516541][ T3679] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.712249][ T3700] loop4: detected capacity change from 0 to 32768 [ 60.820552][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.869526][ T3308] loop4: p1 p3 < > [ 60.996394][ T3700] loop4: p1 p3 < > [ 61.003740][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.260772][ T3716] loop1: detected capacity change from 0 to 256 [ 62.042561][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 62.042578][ T28] audit: type=1400 audit(1774726186.746:202): avc: denied { shutdown } for pid=3705 comm="syz.3.45" lport=42282 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 62.074632][ T3721] loop4: detected capacity change from 0 to 128 [ 62.401471][ T3721] msdos: Bad value for 'gid' [ 62.443307][ T3716] FAT-fs (loop1): Directory bread(block 64) failed [ 62.450012][ T3716] FAT-fs (loop1): Directory bread(block 65) failed [ 62.456785][ T3716] FAT-fs (loop1): Directory bread(block 66) failed [ 62.463634][ T3716] FAT-fs (loop1): Directory bread(block 67) failed [ 62.470353][ T3716] FAT-fs (loop1): Directory bread(block 68) failed [ 62.477135][ T3716] FAT-fs (loop1): Directory bread(block 69) failed [ 62.484127][ T3716] FAT-fs (loop1): Directory bread(block 70) failed [ 62.490750][ T3716] FAT-fs (loop1): Directory bread(block 71) failed [ 62.497384][ T3716] FAT-fs (loop1): Directory bread(block 72) failed [ 62.504064][ T3716] FAT-fs (loop1): Directory bread(block 73) failed [ 62.636145][ T3721] msdos: Bad value for 'gid' [ 62.667833][ T28] audit: type=1400 audit(1774726187.366:203): avc: denied { bind } for pid=3718 comm="syz.4.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 62.695328][ T3721] netlink: 8 bytes leftover after parsing attributes in process `syz.4.48'. [ 62.825912][ T28] audit: type=1326 audit(1774726187.456:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3724 comm="syz.3.49" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69e705c819 code=0x7ffc0000 [ 62.863499][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 62.875490][ T28] audit: type=1326 audit(1774726187.456:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3724 comm="syz.3.49" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f69e705c819 code=0x7ffc0000 [ 62.882018][ T3310] udevd[3310]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 62.910125][ T28] audit: type=1326 audit(1774726187.456:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3724 comm="syz.3.49" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69e705c819 code=0x7ffc0000 [ 62.984284][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 62.995670][ T3310] udevd[3310]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 63.039750][ T28] audit: type=1326 audit(1774726187.456:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3724 comm="syz.3.49" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f69e705c819 code=0x7ffc0000 [ 63.075622][ T28] audit: type=1326 audit(1774726187.456:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3724 comm="syz.3.49" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69e705c819 code=0x7ffc0000 [ 63.139845][ T28] audit: type=1326 audit(1774726187.456:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3724 comm="syz.3.49" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69e705c819 code=0x7ffc0000 [ 63.196339][ T28] audit: type=1326 audit(1774726187.456:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3724 comm="syz.3.49" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f69e705c819 code=0x7ffc0000 [ 63.219678][ T28] audit: type=1326 audit(1774726187.566:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3724 comm="syz.3.49" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69e705c819 code=0x7ffc0000 [ 63.335444][ T3683] chnl_net:caif_netlink_parms(): no params data found [ 63.350413][ T2151] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.420216][ T2151] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.634680][ T3683] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.747273][ T3683] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.833369][ T3683] bridge_slave_0: entered allmulticast mode [ 63.888488][ T3742] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 63.895314][ T3742] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 63.914036][ T3683] bridge_slave_0: entered promiscuous mode [ 63.921260][ T3683] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.928631][ T3683] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.935952][ T3683] bridge_slave_1: entered allmulticast mode [ 63.942581][ T3683] bridge_slave_1: entered promiscuous mode [ 63.960579][ T3683] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.991915][ T2151] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.034818][ T3742] vhci_hcd vhci_hcd.0: Device attached [ 64.089156][ T3727] loop2: detected capacity change from 0 to 8192 [ 64.133316][ T3683] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.145409][ T3308] loop2: p1 < > p2 p4 < p5 > [ 64.158142][ T3308] loop2: partition table partially beyond EOD, truncated [ 64.181800][ T3308] loop2: p1 start 134217728 is beyond EOD, truncated [ 64.237422][ T3308] loop2: p2 size 591360 extends beyond EOD, truncated [ 64.289332][ T3683] team0: Port device team_slave_0 added [ 64.298768][ T3308] loop2: p5 size 591360 extends beyond EOD, truncated [ 64.320810][ T3683] team0: Port device team_slave_1 added [ 64.504241][ T2151] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.813302][ T2151] bridge_slave_1: left allmulticast mode [ 64.834697][ T3556] usb 7-1: new low-speed USB device number 2 using vhci_hcd [ 64.842236][ T2151] bridge_slave_1: left promiscuous mode [ 64.847980][ T2151] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.870510][ T2151] bridge_slave_0: left allmulticast mode [ 64.876219][ T2151] bridge_slave_0: left promiscuous mode [ 64.903818][ T3747] vhci_hcd: connection reset by peer [ 64.909331][ T50] vhci_hcd vhci_hcd.3: stop threads [ 64.914959][ T2151] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.925761][ T3727] loop2: p1 < > p2 p4 < p5 > [ 64.931753][ T50] vhci_hcd vhci_hcd.3: release socket [ 64.951822][ T50] vhci_hcd vhci_hcd.3: disconnect device [ 64.969841][ T3727] loop2: partition table partially beyond EOD, truncated [ 65.038086][ T3727] loop2: p1 start 134217728 is beyond EOD, truncated [ 65.099355][ T3727] loop2: p2 size 591360 extends beyond EOD, truncated [ 65.134893][ T3727] loop2: p5 size 591360 extends beyond EOD, truncated [ 65.161324][ T3777] loop1: detected capacity change from 0 to 1024 [ 65.174602][ T2151] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 65.186197][ T3768] 9pnet_fd: p9_fd_create_unix (3768): problem connecting socket: ./file0: -2 [ 65.217276][ T2151] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 65.222035][ T3777] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.244891][ T2151] bond0 (unregistering): Released all slaves [ 65.297245][ T3683] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.373156][ T3774] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.382748][ T3683] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.382813][ T3683] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.383389][ T3763] bridge_slave_0: left allmulticast mode [ 65.383411][ T3763] bridge_slave_0: left promiscuous mode [ 65.383539][ T3763] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.472459][ T3774] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.489363][ T3763] bridge_slave_1: left allmulticast mode [ 65.510153][ T3763] bridge_slave_1: left promiscuous mode [ 65.539774][ T3763] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.558645][ T3763] bond0: (slave bond_slave_0): Releasing backup interface [ 65.578728][ T3763] bond0: (slave bond_slave_1): Releasing backup interface [ 65.599415][ T3763] team0: Port device team_slave_0 removed [ 65.620472][ T3763] team0: Port device team_slave_1 removed [ 65.626595][ T3763] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 65.650368][ T3763] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 65.668144][ T3763] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 65.694501][ T3683] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.701788][ T3683] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.728746][ T3683] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.772297][ T3683] hsr_slave_0: entered promiscuous mode [ 65.789948][ T3683] hsr_slave_1: entered promiscuous mode [ 65.796178][ T3683] debugfs: 'hsr0' already exists in 'hsr' [ 65.802318][ T3683] Cannot create hsr debugfs directory [ 65.809839][ T2151] hsr_slave_0: left promiscuous mode [ 65.820144][ T2151] hsr_slave_1: left promiscuous mode [ 65.830197][ T2151] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 65.837730][ T2151] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 65.845324][ T2151] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 65.852889][ T2151] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 65.863857][ T2151] veth1_macvtap: left promiscuous mode [ 65.869377][ T2151] veth0_macvtap: left promiscuous mode [ 65.874977][ T2151] veth1_vlan: left promiscuous mode [ 65.880434][ T2151] veth0_vlan: left promiscuous mode [ 65.886635][ T3789] 9pnet_fd: p9_fd_create_unix (3789): problem connecting socket: ./file0: -2 [ 65.945348][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory [ 65.957140][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 65.968599][ T3310] udevd[3310]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 66.233739][ T3793] loop2: detected capacity change from 0 to 8192 [ 66.272798][ T3308] loop2: p1 < > p2 p4 < p5 > [ 66.277611][ T3308] loop2: partition table partially beyond EOD, truncated [ 66.288007][ T3308] loop2: p1 start 134217728 is beyond EOD, truncated [ 66.295175][ T3308] loop2: p2 size 591360 extends beyond EOD, truncated [ 66.355304][ T3308] loop2: p5 size 591360 extends beyond EOD, truncated [ 66.610978][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.695061][ T2151] team0 (unregistering): Port device team_slave_1 removed [ 66.719377][ T2151] team0 (unregistering): Port device team_slave_0 removed [ 66.867416][ T3788] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 66.884869][ T3793] loop2: p1 < > p2 p4 < p5 > [ 66.889645][ T3793] loop2: partition table partially beyond EOD, truncated [ 66.896844][ T3793] loop2: p1 start 134217728 is beyond EOD, truncated [ 66.903663][ T3793] loop2: p2 size 591360 extends beyond EOD, truncated [ 66.911691][ T3793] loop2: p5 size 591360 extends beyond EOD, truncated [ 66.941200][ T3804] loop1: detected capacity change from 0 to 128 [ 66.960968][ T3800] loop3: detected capacity change from 0 to 1024 [ 66.967756][ T3800] EXT4-fs: Ignoring removed orlov option [ 67.061549][ T3812] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3812 comm=syz.2.59 [ 67.112820][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 67.112838][ T28] audit: type=1326 audit(1774726191.816:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3806 comm="syz.2.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0251aec819 code=0x7ffc0000 [ 67.196974][ T28] audit: type=1326 audit(1774726191.846:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3806 comm="syz.2.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=255 compat=0 ip=0x7f0251aec819 code=0x7ffc0000 [ 67.233796][ T3800] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.259763][ T28] audit: type=1326 audit(1774726191.846:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3806 comm="syz.2.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0251aec819 code=0x7ffc0000 [ 67.283218][ T28] audit: type=1326 audit(1774726191.846:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3806 comm="syz.2.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0251aec819 code=0x7ffc0000 [ 67.306835][ T28] audit: type=1326 audit(1774726191.846:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3806 comm="syz.2.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0251aec819 code=0x7ffc0000 [ 67.314229][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 67.341127][ T3310] udevd[3310]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 67.352128][ T3817] udevd[3817]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory [ 67.375750][ T28] audit: type=1326 audit(1774726191.846:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3806 comm="syz.2.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0251aec819 code=0x7ffc0000 [ 67.453246][ T28] audit: type=1326 audit(1774726191.846:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3806 comm="syz.2.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f0251aec819 code=0x7ffc0000 [ 67.530233][ T3683] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 67.539744][ T28] audit: type=1400 audit(1774726191.846:234): avc: denied { bind } for pid=3806 comm="syz.2.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 67.592964][ T28] audit: type=1400 audit(1774726191.846:235): avc: denied { name_bind } for pid=3806 comm="syz.2.59" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 67.649690][ T28] audit: type=1400 audit(1774726191.846:236): avc: denied { node_bind } for pid=3806 comm="syz.2.59" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 67.710031][ T3683] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 67.841673][ T3830] loop2: detected capacity change from 0 to 4096 [ 67.929038][ T3830] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.688568][ T3683] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 68.769697][ T3683] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 68.771124][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.807016][ T3836] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.847548][ T3836] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.035486][ T3683] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.091024][ T3683] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.167236][ T2151] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.174490][ T2151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.213519][ T2151] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.220670][ T2151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.299428][ T3683] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 69.345528][ T3683] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.524965][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.547591][ T3683] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.729890][ T3875] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.774134][ T3875] bridge_slave_1: left allmulticast mode [ 69.781113][ T3875] bridge_slave_1: left promiscuous mode [ 69.792818][ T3875] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.858590][ T3875] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 69.904421][ T3556] usb 7-1: enqueue for inactive port 0 [ 69.919844][ T3556] usb 7-1: enqueue for inactive port 0 [ 70.010311][ T3556] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 70.339924][ T3892] bridge_slave_0: left allmulticast mode [ 70.357982][ T3898] 9pnet_fd: p9_fd_create_unix (3898): problem connecting socket: ./file0: -2 [ 70.383644][ T3892] bridge_slave_0: left promiscuous mode [ 70.389427][ T3892] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.404689][ T3892] bond0: (slave bridge_slave_1): Releasing backup interface [ 70.416110][ T3892] bond0: (slave bond_slave_0): Releasing backup interface [ 70.427092][ T3892] bond0: (slave bond_slave_1): Releasing backup interface [ 70.441151][ T3892] team0: Port device team_slave_0 removed [ 70.450824][ T3892] team0: Port device team_slave_1 removed [ 70.457873][ T3892] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 70.472349][ T3892] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 70.481825][ T3892] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 70.489375][ T3892] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 70.499462][ T3892] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 70.561486][ T3683] veth0_vlan: entered promiscuous mode [ 70.585250][ T3683] veth1_vlan: entered promiscuous mode [ 70.600187][ T3683] veth0_macvtap: entered promiscuous mode [ 70.687250][ T3683] veth1_macvtap: entered promiscuous mode [ 70.698815][ T3683] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.716440][ T3683] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.763898][ T3897] loop1: detected capacity change from 0 to 1024 [ 70.788673][ T30] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.805037][ T3897] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 70.813225][ T30] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.813268][ T30] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.813313][ T30] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.840117][ T3897] System zones: 0-1, 3-36 [ 70.876755][ T3897] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.66: bad orphan inode 134217728 [ 70.890490][ T3897] loop1: lost filesystem error report for type 5 error -117 [ 70.895983][ T3897] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.108806][ T3915] loop3: detected capacity change from 0 to 8192 [ 71.170879][ T3915] loop3: p1 < > p2 p4 < p5 > [ 71.175748][ T3915] loop3: partition table partially beyond EOD, truncated [ 71.183565][ T3915] loop3: p1 start 134217728 is beyond EOD, truncated [ 71.190521][ T3915] loop3: p2 size 591360 extends beyond EOD, truncated [ 71.233539][ T3915] loop3: p5 size 591360 extends beyond EOD, truncated [ 71.385450][ T3004] loop3: p1 < > p2 p4 < p5 > [ 71.405121][ T3004] loop3: partition table partially beyond EOD, truncated [ 71.465027][ T3004] loop3: p1 start 134217728 is beyond EOD, truncated [ 71.499058][ T3004] loop3: p2 size 591360 extends beyond EOD, truncated [ 71.702183][ T3004] loop3: p5 size 591360 extends beyond EOD, truncated [ 71.811062][ T3924] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.228357][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 72.242077][ T3310] udevd[3310]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 72.269838][ T3919] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 72.276688][ T3919] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 72.289999][ T3924] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.299100][ T3817] udevd[3817]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory [ 72.391750][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.401841][ T3938] netlink: 44 bytes leftover after parsing attributes in process `syz.3.69'. [ 72.420147][ T3919] vhci_hcd vhci_hcd.0: Device attached [ 72.439625][ T3817] udevd[3817]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory [ 72.450689][ T3310] udevd[3310]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 72.461956][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 72.578252][ T28] kauditd_printk_skb: 52 callbacks suppressed [ 72.578270][ T28] audit: type=1400 audit(1774726197.276:289): avc: denied { mounton } for pid=3930 comm="syz.5.41" path="/0/file0" dev="tmpfs" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 72.598869][ T3945] loop1: detected capacity change from 0 to 1024 [ 72.629962][ T3927] vhci_hcd: connection closed [ 72.638900][ T50] vhci_hcd vhci_hcd.2: stop threads [ 72.649227][ T50] vhci_hcd vhci_hcd.2: release socket [ 72.659439][ T50] vhci_hcd vhci_hcd.2: disconnect device [ 72.692223][ T35] usb 5-1: new low-speed USB device number 2 using vhci_hcd [ 72.701521][ T35] usb 5-1: enqueue for inactive port 0 [ 72.710460][ T35] usb 5-1: enqueue for inactive port 0 [ 72.743799][ T35] usb 5-1: enqueue for inactive port 0 [ 72.760190][ T3945] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 72.783893][ T3945] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.926044][ T3952] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 72.932650][ T3952] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 72.960403][ T35] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 72.985283][ T3952] vhci_hcd vhci_hcd.0: Device attached [ 73.017408][ T3957] loop5: detected capacity change from 0 to 1024 [ 73.026885][ T3957] EXT4-fs: test_dummy_encryption option not supported [ 73.035805][ T309] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.187202][ T309] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.196262][ T3397] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 73.275367][ T309] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.284532][ T309] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.179391][ T3397] usb 9-1: new full-speed USB device number 2 using vhci_hcd [ 74.390169][ T3953] vhci_hcd: connection reset by peer [ 74.586208][ T3960] loop5: detected capacity change from 0 to 512 [ 75.189689][ T3950] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 75.208727][ T30] vhci_hcd vhci_hcd.4: stop threads [ 76.178131][ T30] vhci_hcd vhci_hcd.4: release socket [ 76.183841][ T30] vhci_hcd vhci_hcd.4: disconnect device [ 76.367065][ T3960] EXT4-fs warning (device loop5): ext4_multi_mount_protect:394: Unable to create kmmpd thread for loop5. [ 76.607056][ T3966] loop3: detected capacity change from 0 to 1024 [ 76.700895][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 76.770175][ T3966] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.797031][ T3978] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.826749][ T3978] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.848003][ T3966] netlink: 28 bytes leftover after parsing attributes in process `syz.3.74'. [ 77.054527][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.224512][ T3989] loop4: detected capacity change from 0 to 512 [ 77.352223][ T3989] EXT4-fs (loop4): 1 orphan inode deleted [ 77.369872][ T3989] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.386816][ T3989] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.034637][ T2151] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 78.036185][ T3990] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.056910][ T3990] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.490568][ T3984] loop5: detected capacity change from 0 to 256 [ 78.517619][ T2151] EXT4-fs error (device loop4): ext4_release_dquot:7037: comm kworker/u8:8: Failed to release dquot type 1 [ 78.539149][ T28] audit: type=1400 audit(1774726203.236:290): avc: denied { getopt } for pid=3994 comm="syz.3.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 78.596411][ T3984] vfat: Unknown parameter '@' [ 78.933792][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.982675][ T28] audit: type=1326 audit(1774726203.676:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3983 comm="syz.5.78" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb1a4fc819 code=0x7ffc0000 [ 79.027716][ T28] audit: type=1326 audit(1774726203.716:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3983 comm="syz.5.78" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7fcb1a4fc819 code=0x7ffc0000 [ 79.087648][ T28] audit: type=1326 audit(1774726203.716:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3983 comm="syz.5.78" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb1a4fc819 code=0x7ffc0000 [ 79.139233][ T28] audit: type=1326 audit(1774726203.716:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3983 comm="syz.5.78" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcb1a4fc819 code=0x7ffc0000 [ 79.269655][ T3397] usb 9-1: enqueue for inactive port 0 [ 79.279321][ T4007] loop4: detected capacity change from 0 to 512 [ 79.286631][ T3397] usb 9-1: enqueue for inactive port 0 [ 79.292648][ T28] audit: type=1326 audit(1774726203.726:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3983 comm="syz.5.78" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb1a4fc819 code=0x7ffc0000 [ 79.316708][ T28] audit: type=1326 audit(1774726203.726:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3983 comm="syz.5.78" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb1a4fc819 code=0x7ffc0000 [ 79.340984][ T28] audit: type=1326 audit(1774726203.726:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3983 comm="syz.5.78" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fcb1a4fc819 code=0x7ffc0000 [ 79.364811][ T3397] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 79.371878][ T28] audit: type=1326 audit(1774726203.756:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3983 comm="syz.5.78" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb1a4fc819 code=0x7ffc0000 [ 79.422023][ T4007] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.435655][ T4007] ext4 filesystem being mounted at /18/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 79.510487][ T4007] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #2: comm syz.4.83: corrupted inode contents [ 79.543135][ T4007] EXT4-fs error (device loop4): ext4_dirty_inode:6450: inode #2: comm syz.4.83: mark_inode_dirty error [ 79.635360][ T4007] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #2: comm syz.4.83: corrupted inode contents [ 79.647683][ T4007] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #2: comm syz.4.83: mark_inode_dirty error [ 79.660210][ T4013] EXT4-fs warning (device loop4): ext4_es_cache_extent:1082: inode #2: comm syz.4.83: ES cache extent failed: add [0,1,21,0x1] conflict with existing [0,8,576460752303423487,0x18] [ 79.660210][ T4013] [ 80.191263][ T4006] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.428441][ T4021] loop1: detected capacity change from 0 to 128 [ 80.557042][ T4027] capability: warning: `syz.2.87' uses deprecated v2 capabilities in a way that may be insecure [ 81.934814][ T4046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.030596][ T4046] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.089627][ T4055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.130378][ T4055] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.564005][ T4083] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 82.570618][ T4083] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 82.624513][ T4086] lo: Caught tx_queue_len zero misconfig [ 82.682043][ T4083] vhci_hcd vhci_hcd.0: Device attached [ 82.909672][ T10] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 83.069374][ T4084] vhci_hcd: connection closed [ 83.070101][ T12] vhci_hcd vhci_hcd.3: stop threads [ 83.102144][ T12] vhci_hcd vhci_hcd.3: release socket [ 83.119653][ T10] usb 7-1: new full-speed USB device number 3 using vhci_hcd [ 83.138785][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 83.355632][ T4051] netlink: 28 bytes leftover after parsing attributes in process `syz.1.90'. [ 84.038522][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 84.038539][ T28] audit: type=1400 audit(1774726208.736:309): avc: denied { mount } for pid=4111 comm="syz.5.94" name="/" dev="ramfs" ino=6759 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 84.134125][ T4112] sctp: [Deprecated]: syz.5.94 (pid 4112) Use of int in maxseg socket option. [ 84.134125][ T4112] Use struct sctp_assoc_value instead [ 84.160247][ T28] audit: type=1400 audit(1774726208.816:310): avc: denied { watch } for pid=4111 comm="syz.5.94" path="/" dev="ramfs" ino=6759 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 84.581913][ T28] audit: type=1400 audit(1774726209.166:311): avc: denied { create } for pid=4111 comm="syz.5.94" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 84.656270][ T4119] 8021q: VLANs not supported on wg2 [ 84.665209][ T4119] loop5: detected capacity change from 0 to 512 [ 84.671986][ T28] audit: type=1400 audit(1774726209.356:312): avc: denied { ioctl } for pid=4118 comm="syz.5.95" path="socket:[7197]" dev="sockfs" ino=7197 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 84.697089][ T4119] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 84.727524][ T4119] EXT4-fs (loop5): 1 truncate cleaned up [ 84.770197][ T4119] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.834340][ T28] audit: type=1400 audit(1774726209.536:313): avc: denied { add_name } for pid=4118 comm="syz.5.95" name="memory.events.local" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 84.960330][ T4127] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.002817][ T4127] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.098536][ T4119] mmap: syz.5.95 (4119) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 86.505461][ T4141] loop3: detected capacity change from 0 to 128 [ 86.697267][ T28] audit: type=1400 audit(1774726211.396:314): avc: denied { write } for pid=4144 comm="syz.4.101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 86.767197][ T28] audit: type=1400 audit(1774726211.466:315): avc: denied { create } for pid=4144 comm="syz.4.101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 87.016786][ T3683] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.263275][ T4159] loop2: detected capacity change from 0 to 1024 [ 88.724786][ T4162] lo speed is unknown, defaulting to 1000 [ 88.730761][ T4162] lo speed is unknown, defaulting to 1000 [ 88.736991][ T4162] lo speed is unknown, defaulting to 1000 [ 88.743665][ T4162] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 88.751734][ T4162] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 88.765916][ T4162] lo speed is unknown, defaulting to 1000 [ 88.772427][ T4162] lo speed is unknown, defaulting to 1000 [ 88.778912][ T4162] lo speed is unknown, defaulting to 1000 [ 88.785705][ T4162] lo speed is unknown, defaulting to 1000 [ 88.792388][ T4162] lo speed is unknown, defaulting to 1000 [ 88.844185][ T28] audit: type=1400 audit(1774726213.426:316): avc: denied { write } for pid=4155 comm="syz.5.104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 88.965881][ T10] usb 7-1: enqueue for inactive port 0 [ 88.971544][ T10] usb 7-1: enqueue for inactive port 0 [ 89.000762][ T28] audit: type=1400 audit(1774726213.526:317): avc: denied { name_bind } for pid=4155 comm="syz.5.104" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 89.097018][ T10] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 89.128628][ T4159] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 89.168461][ T4171] ŞŞŞŞŞŞ: renamed from vlan0 [ 89.179740][ T4159] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.302985][ T4173] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.386900][ T4173] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.617185][ T4181] openvswitch: netlink: Key 23 has unexpected len 4 expected 2 [ 89.832208][ T4183] lo speed is unknown, defaulting to 1000 [ 91.109630][ T4170] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 91.172809][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 91.554610][ T28] audit: type=1400 audit(1774726216.246:318): avc: denied { create } for pid=4194 comm="syz.2.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 91.580575][ T4197] veth0_vlan: entered allmulticast mode [ 91.598448][ T28] audit: type=1400 audit(1774726216.256:319): avc: denied { write } for pid=4194 comm="syz.2.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 91.631026][ T28] audit: type=1400 audit(1774726216.336:320): avc: denied { ioctl } for pid=4194 comm="syz.2.113" path="socket:[7351]" dev="sockfs" ino=7351 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 91.791296][ T4196] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=4196 comm=syz.1.114 [ 91.791523][ T28] audit: type=1400 audit(1774726216.356:321): avc: denied { read } for pid=4194 comm="syz.2.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 91.791556][ T28] audit: type=1400 audit(1774726216.366:322): avc: denied { setopt } for pid=4195 comm="syz.1.114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 91.791583][ T28] audit: type=1400 audit(1774726216.376:323): avc: denied { map } for pid=4195 comm="syz.1.114" path="socket:[6858]" dev="sockfs" ino=6858 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 91.791617][ T28] audit: type=1400 audit(1774726216.376:324): avc: denied { read write } for pid=4195 comm="syz.1.114" path="socket:[6858]" dev="sockfs" ino=6858 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 92.059841][ T28] audit: type=1400 audit(1774726216.636:325): avc: denied { setopt } for pid=4195 comm="syz.1.114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 92.234013][ T28] audit: type=1400 audit(1774726216.636:326): avc: denied { connect } for pid=4195 comm="syz.1.114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 92.285087][ T28] audit: type=1400 audit(1774726216.986:327): avc: denied { read } for pid=4207 comm="syz.5.117" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 94.221666][ T4216] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.230276][ T4216] bridge_slave_1: left allmulticast mode [ 94.249788][ T4216] bridge_slave_1: left promiscuous mode [ 94.267427][ T4216] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.295549][ T4216] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 95.276478][ T4223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.290136][ T4223] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.940389][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 97.940406][ T28] audit: type=1400 audit(1774726222.386:329): avc: denied { write } for pid=4247 comm="syz.3.129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 97.955598][ T3404] IPVS: starting estimator thread 0... [ 98.061542][ T4262] IPVS: using max 2256 ests per chain, 112800 per kthread [ 98.944898][ T4264] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.994283][ T4264] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.107662][ T28] audit: type=1400 audit(1774726222.596:330): avc: denied { getopt } for pid=4247 comm="syz.3.129" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 99.236108][ T4266] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 99.780487][ T4274] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 100.181693][ T28] audit: type=1400 audit(1774726224.876:331): avc: denied { map } for pid=4269 comm="syz.3.133" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=6987 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 100.213798][ T28] audit: type=1400 audit(1774726224.876:332): avc: denied { read write } for pid=4269 comm="syz.3.133" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=6987 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 100.510200][ T4281] loop5: detected capacity change from 0 to 512 [ 100.688106][ T4292] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 100.953301][ T4281] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 101.100977][ T4281] ------------[ cut here ]------------ [ 101.107236][ T4281] EA inode 11 i_nlink=2 [ 101.107376][ T4281] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x313/0x350, CPU#0: syz.5.136/4281 [ 101.123966][ T4281] Modules linked in: [ 101.129137][ T4281] CPU: 0 UID: 0 PID: 4281 Comm: syz.5.136 Not tainted syzkaller #0 PREEMPT(full) [ 101.139194][ T4281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 101.150016][ T4281] RIP: 0010:ext4_xattr_inode_update_ref+0x332/0x350 [ 101.157255][ T4281] Code: b4 47 99 ff 4c 8d 2d ad b2 5d 05 49 8d 7e 40 e8 34 df b5 ff 49 8b 6e 40 4c 89 e7 e8 68 da b5 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 02 ff ff ff e8 3f b6 dd 03 66 66 66 66 66 66 2e [ 101.178236][ T4281] RSP: 0018:ffffc900016af778 EFLAGS: 00010246 [ 101.185195][ T4281] RAX: ffff8881051a3d08 RBX: ffff888107dce4a8 RCX: ffffffff81c01958 [ 101.193858][ T4281] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff871dcbf0 [ 101.202835][ T4281] RBP: 000000000000000b R08: 0001888107dce45b R09: 0000000000000000 [ 101.211388][ T4281] R10: ffffc900016af6a8 R11: 0001c900016af6a8 R12: ffff888107dce458 [ 101.219504][ T4281] R13: ffffffff871dcbf0 R14: ffff888107dce410 R15: 0000000000000001 [ 101.228236][ T4281] FS: 00007fcb18f4f6c0(0000) GS:ffff8882ae8d8000(0000) knlGS:0000000000000000 [ 101.238505][ T4281] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 101.246234][ T4281] CR2: 0000000034747865 CR3: 000000011b0b6000 CR4: 00000000003506f0 [ 101.254917][ T4281] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 101.263347][ T4281] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 101.271987][ T4281] Call Trace: [ 101.275826][ T4281] [ 101.279713][ T4281] ext4_xattr_inode_dec_ref_all+0x57c/0x880 [ 101.286188][ T4281] ? errseq_check+0x2c/0x50 [ 101.291510][ T4281] ext4_xattr_delete_inode+0x6c1/0x7a0 [ 101.297876][ T4281] ? ext4_truncate+0x92b/0xb00 [ 101.303474][ T4281] ext4_evict_inode+0xa1f/0xd60 [ 101.309163][ T4281] ? __pfx_ext4_evict_inode+0x10/0x10 [ 101.315297][ T4281] evict+0x2af/0x510 [ 101.319747][ T4281] iput+0x41a/0x580 [ 101.324055][ T4281] ext4_process_orphan+0x1a9/0x1c0 [ 101.330396][ T4281] ext4_orphan_cleanup+0x6a8/0xa00 [ 101.336257][ T4281] ext4_fill_super+0x3408/0x37c0 [ 101.344324][ T4281] ? set_blocksize+0x14c/0x270 [ 101.349804][ T4281] ? setup_bdev_super+0x30e/0x370 [ 101.355388][ T4281] ? __pfx_ext4_fill_super+0x10/0x10 [ 101.361182][ T4281] get_tree_bdev_flags+0x291/0x300 [ 101.366905][ T4281] ? __pfx_ext4_fill_super+0x10/0x10 [ 101.373174][ T4281] get_tree_bdev+0x1f/0x30 [ 101.378618][ T4281] ext4_get_tree+0x1c/0x30 [ 101.383607][ T4281] vfs_get_tree+0x57/0x1d0 [ 101.388545][ T4281] do_new_mount+0x288/0x8d0 [ 101.393755][ T4281] path_mount+0x4d0/0xbc0 [ 101.398845][ T4281] __se_sys_mount+0x28c/0x2e0 [ 101.404786][ T4281] __x64_sys_mount+0x67/0x80 [ 101.410367][ T4281] x64_sys_call+0x2d61/0x3020 [ 101.415855][ T4281] do_syscall_64+0x12c/0x370 [ 101.421154][ T4281] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.427605][ T4281] RIP: 0033:0x7fcb1a4fda8a [ 101.432934][ T4281] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.453904][ T4281] RSP: 002b:00007fcb18f4ee58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 101.462726][ T4281] RAX: ffffffffffffffda RBX: 00007fcb18f4eee0 RCX: 00007fcb1a4fda8a [ 101.471407][ T4281] RDX: 00002000000009c0 RSI: 0000200000000540 RDI: 00007fcb18f4eea0 [ 101.480095][ T4281] RBP: 00002000000009c0 R08: 00007fcb18f4eee0 R09: 0000000000800718 [ 101.488697][ T4281] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000540 [ 101.498435][ T4281] R13: 00007fcb18f4eea0 R14: 000000000000048d R15: 0000200000000200 [ 101.507636][ T4281] [ 101.511654][ T4281] ---[ end trace 0000000000000000 ]--- [ 102.763273][ T4281] EXT4-fs (loop5): 1 orphan inode deleted [ 102.785058][ T4281] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.804046][ T4298] siw: device registration error -23 [ 102.854789][ T4298] lo speed is unknown, defaulting to 1000 [ 103.174793][ T4304] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.203813][ T4304] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.651115][ T3683] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.898526][ T4307] veth0_vlan: entered allmulticast mode [ 103.932155][ T4309] xt_CT: You must specify a L4 protocol and not use inversions on it [ 103.950561][ T4309] wireguard0: entered promiscuous mode [ 103.956394][ T4309] wireguard0: entered allmulticast mode [ 104.001367][ T28] audit: type=1326 audit(1774726228.706:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4308 comm="syz.4.143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe91646c819 code=0x7ffc0000 [ 104.042866][ T28] audit: type=1326 audit(1774726228.706:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4308 comm="syz.4.143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7fe91646c819 code=0x7ffc0000 [ 104.068492][ T28] audit: type=1326 audit(1774726228.706:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4308 comm="syz.4.143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe91646c819 code=0x7ffc0000 [ 104.092819][ T28] audit: type=1326 audit(1774726228.726:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4308 comm="syz.4.143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe91646c819 code=0x7ffc0000 [ 104.150197][ T28] audit: type=1326 audit(1774726228.726:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4308 comm="syz.4.143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe91646c819 code=0x7ffc0000 [ 104.173599][ T28] audit: type=1326 audit(1774726228.726:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4308 comm="syz.4.143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fe91646c819 code=0x7ffc0000 [ 104.178789][ T4316] netlink: 16 bytes leftover after parsing attributes in process `syz.5.144'. [ 104.215846][ T4316] netlink: 20 bytes leftover after parsing attributes in process `syz.5.144'. [ 104.243448][ T28] audit: type=1326 audit(1774726228.726:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4308 comm="syz.4.143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe91646c819 code=0x7ffc0000 [ 104.443473][ T28] audit: type=1326 audit(1774726228.726:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4308 comm="syz.4.143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe91646c819 code=0x7ffc0000 [ 104.726426][ T28] audit: type=1326 audit(1774726228.726:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4308 comm="syz.4.143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe91646c819 code=0x7ffc0000 [ 104.753525][ T28] audit: type=1326 audit(1774726228.726:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4308 comm="syz.4.143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7fe91646c819 code=0x7ffc0000 [ 104.758866][ T4320] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 105.171207][ T4323] netlink: 14 bytes leftover after parsing attributes in process `syz.2.146'. [ 105.332343][ T4326] loop2: detected capacity change from 0 to 512 [ 105.393675][ T4326] EXT4-fs (loop2): 1 orphan inode deleted [ 105.421722][ T4326] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.455902][ T4323] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 105.514419][ T4323] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 105.545547][ T4323] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 105.568690][ T4323] bond0 (unregistering): Released all slaves [ 105.597512][ T3556] syz1: Port: 1 Link DOWN [ 105.664649][ T4330] lo speed is unknown, defaulting to 1000 [ 106.175591][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.221491][ T4336] sctp: [Deprecated]: syz.1.149 (pid 4336) Use of int in maxseg socket option. [ 106.221491][ T4336] Use struct sctp_assoc_value instead [ 106.255304][ T4336] netlink: 28 bytes leftover after parsing attributes in process `syz.1.149'. [ 106.493795][ T4340] netlink: 'syz.3.151': attribute type 1 has an invalid length. [ 106.518280][ T4340] bond1: entered promiscuous mode [ 106.771678][ T4340] 8021q: adding VLAN 0 to HW filter on device bond1 [ 107.748969][ T4351] loop5: detected capacity change from 0 to 128 [ 108.703114][ T4340] lo speed is unknown, defaulting to 1000 [ 109.430994][ T28] kauditd_printk_skb: 27 callbacks suppressed [ 109.431047][ T28] audit: type=1400 audit(1774726233.676:370): avc: denied { create } for pid=4339 comm="syz.3.151" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 109.460045][ T4340] lo speed is unknown, defaulting to 1000 [ 109.465975][ T4340] lo speed is unknown, defaulting to 1000 [ 109.540978][ T4340] infiniband syU×: set down [ 109.545735][ T10] lo speed is unknown, defaulting to 1000 [ 109.551780][ T4340] infiniband syU×: added lo [ 109.556907][ T4340] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 109.557148][ T4340] infiniband syU×: Couldn't open port 1 [ 109.582757][ T4340] RDS/IB: syU×: added [ 109.586945][ T4340] smc: adding ib device syU× with port count 1 [ 109.593825][ T4340] smc: ib device syU× port 1 has no pnetid [ 109.603422][ T10] lo speed is unknown, defaulting to 1000 [ 109.618670][ T4340] lo speed is unknown, defaulting to 1000 [ 109.690957][ T4340] lo speed is unknown, defaulting to 1000 [ 109.931786][ T4372] loop2: detected capacity change from 0 to 8192 [ 110.057549][ T3308] loop2: p1 < > p2 p4 < p5 > [ 110.108671][ T3308] loop2: partition table partially beyond EOD, truncated [ 110.224014][ T3308] loop2: p1 start 134217728 is beyond EOD, truncated [ 110.308421][ T3308] loop2: p2 size 591360 extends beyond EOD, truncated [ 110.470506][ T28] audit: type=1400 audit(1774726235.026:371): avc: denied { bind } for pid=4375 comm="syz.1.158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 110.600930][ T3308] loop2: p5 size 591360 extends beyond EOD, truncated [ 110.664181][ T4340] lo speed is unknown, defaulting to 1000 [ 110.676710][ T4372] loop2: p1 < > p2 p4 < p5 > [ 110.681667][ T4372] loop2: partition table partially beyond EOD, truncated [ 110.689086][ T4372] loop2: p1 start 134217728 is beyond EOD, truncated [ 110.695838][ T4372] loop2: p2 size 591360 extends beyond EOD, truncated [ 110.707203][ T4372] loop2: p5 size 591360 extends beyond EOD, truncated [ 110.722680][ T3004] loop2: p1 < > p2 p4 < p5 > [ 110.751386][ T3004] loop2: partition table partially beyond EOD, truncated [ 110.765830][ T28] audit: type=1400 audit(1774726235.026:372): avc: denied { setopt } for pid=4375 comm="syz.1.158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 110.841257][ T3004] loop2: p1 start 134217728 is beyond EOD, truncated [ 110.903913][ T3004] loop2: p2 size 591360 extends beyond EOD, truncated [ 110.969991][ T3004] loop2: p5 size 591360 extends beyond EOD, truncated [ 111.057457][ T4340] lo speed is unknown, defaulting to 1000 [ 111.454753][ T4340] lo speed is unknown, defaulting to 1000 [ 111.632683][ T4340] lo speed is unknown, defaulting to 1000 [ 111.828298][ T28] audit: type=1400 audit(1774726236.526:373): avc: denied { unlink } for pid=3318 comm="syz-executor" name="file0" dev="tmpfs" ino=217 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 115.910456][ T4406] netlink: 16 bytes leftover after parsing attributes in process `syz.3.163'. [ 115.921632][ T4406] netlink: 20 bytes leftover after parsing attributes in process `syz.3.163'. [ 116.035201][ T28] audit: type=1326 audit(1774726240.736:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4407 comm="syz.2.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0251aec819 code=0x7ffc0000 [ 116.123994][ T28] audit: type=1326 audit(1774726240.756:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4407 comm="syz.2.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0251aec819 code=0x7ffc0000 [ 116.241723][ T4408] loop2: detected capacity change from 0 to 2048 [ 116.297721][ T28] audit: type=1326 audit(1774726240.766:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4407 comm="syz.2.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f0251aec819 code=0x7ffc0000 [ 116.336554][ T28] audit: type=1326 audit(1774726240.766:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4407 comm="syz.2.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0251aec819 code=0x7ffc0000 [ 116.515452][ T4413] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 116.546535][ T28] audit: type=1326 audit(1774726240.766:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4407 comm="syz.2.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0251aec819 code=0x7ffc0000 [ 116.570773][ T28] audit: type=1326 audit(1774726240.766:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4407 comm="syz.2.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=442 compat=0 ip=0x7f0251aec819 code=0x7ffc0000 [ 117.347457][ T4408] Alternate GPT is invalid, using primary GPT. [ 117.353455][ T4414] Driver unsupported XDP return value 0 on prog (id 97) dev N/A, expect packet loss! [ 117.356047][ T4408] loop2: p1 p2 p3 [ 117.369390][ T28] audit: type=1326 audit(1774726240.766:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4407 comm="syz.2.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0251aec819 code=0x7ffc0000 [ 117.393126][ T28] audit: type=1326 audit(1774726240.766:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4407 comm="syz.2.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0251aec819 code=0x7ffc0000 [ 117.420480][ T28] audit: type=1326 audit(1774726240.766:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4407 comm="syz.2.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0251aec819 code=0x7ffc0000 [ 117.444190][ T28] audit: type=1326 audit(1774726240.766:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4407 comm="syz.2.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0251aec819 code=0x7ffc0000 [ 117.484288][ T4408] loop2: partition table partially beyond EOD, truncated [ 118.016033][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 118.034135][ T3310] udevd[3310]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 120.146346][ T4453] loop2: detected capacity change from 0 to 1024 [ 120.213759][ T4453] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 120.331006][ T4453] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.619977][ T4463] bond0: (slave bridge_slave_1): Releasing backup interface [ 123.737752][ T4463] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 124.608572][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 124.721778][ T4478] loop2: detected capacity change from 0 to 512 [ 124.746046][ T4478] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 124.779730][ T4478] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 124.820051][ T4478] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.181: bad orphan inode 4 [ 124.856665][ T4478] loop2: lost filesystem error report for type 5 error -117 [ 124.856912][ T4478] EXT4-fs (loop2): 1 orphan inode deleted [ 124.864451][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 124.864470][ C1] EXT4-fs (loop2): initial error at time 1774726249: ext4_orphan_get:1417 [ 124.864521][ C1] EXT4-fs (loop2): last error at time 1774726249: ext4_orphan_get:1417 [ 124.974007][ T28] kauditd_printk_skb: 151 callbacks suppressed [ 124.974023][ T28] audit: type=1400 audit(1774726249.676:535): avc: denied { setopt } for pid=4470 comm="syz.3.178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 125.000203][ T4478] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.718421][ T4491] ipvlan3: entered allmulticast mode [ 126.832106][ T4493] xt_recent: Unsupported userspace flags (000000b1) [ 127.112789][ T4492] lo speed is unknown, defaulting to 1000 [ 127.119020][ T4492] lo speed is unknown, defaulting to 1000 [ 127.191962][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.643873][ T4510] IPVS: length: 1152 != 8 [ 127.655867][ T4510] netlink: 16 bytes leftover after parsing attributes in process `syz.3.184'. [ 127.768376][ T4510] gre1: entered promiscuous mode [ 129.628442][ T4506] lo speed is unknown, defaulting to 1000 [ 129.739832][ T4506] lo speed is unknown, defaulting to 1000 [ 129.886627][ T4528] loop2: detected capacity change from 0 to 256 [ 130.291339][ T4528] FAT-fs (loop2): Directory bread(block 64) failed [ 130.298152][ T4528] FAT-fs (loop2): Directory bread(block 65) failed [ 130.305013][ T4528] FAT-fs (loop2): Directory bread(block 66) failed [ 130.311631][ T4528] FAT-fs (loop2): Directory bread(block 67) failed [ 130.318535][ T4528] FAT-fs (loop2): Directory bread(block 68) failed [ 130.325148][ T4528] FAT-fs (loop2): Directory bread(block 69) failed [ 130.331893][ T4528] FAT-fs (loop2): Directory bread(block 70) failed [ 130.338684][ T4528] FAT-fs (loop2): Directory bread(block 71) failed [ 130.345503][ T4528] FAT-fs (loop2): Directory bread(block 72) failed [ 130.352177][ T4528] FAT-fs (loop2): Directory bread(block 73) failed [ 130.499187][ T4528] bridge_slave_0: left allmulticast mode [ 130.505032][ T4528] bridge_slave_0: left promiscuous mode [ 130.510969][ T4528] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.718542][ T4528] team0: Port device team_slave_0 removed [ 130.734779][ T4528] team0: Port device team_slave_1 removed [ 130.743358][ T4528] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 130.750852][ T4528] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 130.761599][ T4528] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 130.769155][ T4528] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 130.780043][ T4528] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 131.410887][ T4506] chnl_net:caif_netlink_parms(): no params data found [ 131.800302][ T4506] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.813883][ T4506] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.826437][ T4506] bridge_slave_0: entered allmulticast mode [ 131.834555][ T4506] bridge_slave_0: entered promiscuous mode [ 131.843719][ T4506] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.851392][ T4506] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.858874][ T4506] bridge_slave_1: entered allmulticast mode [ 131.866502][ T4506] bridge_slave_1: entered promiscuous mode [ 131.979146][ T4506] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 132.019394][ T4506] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 132.084155][ T4506] team0: Port device team_slave_0 added [ 132.107656][ T4506] team0: Port device team_slave_1 added [ 132.161561][ T4506] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 132.184293][ T4506] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 132.257179][ T4506] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 132.285618][ T4506] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 132.300594][ T4506] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 132.354640][ T4506] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 132.783562][ T4506] hsr_slave_0: entered promiscuous mode [ 132.807563][ T4506] hsr_slave_1: entered promiscuous mode [ 132.880386][ T4506] debugfs: 'hsr0' already exists in 'hsr' [ 132.888266][ T4506] Cannot create hsr debugfs directory [ 133.162200][ T4552] SET target dimension over the limit! [ 133.265045][ T4506] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 133.293894][ T4506] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 133.319804][ T4506] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 133.343182][ T4506] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 133.407359][ T28] audit: type=1400 audit(1774726258.106:536): avc: denied { bind } for pid=4564 comm="syz.2.200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 133.481942][ T4563] sctp: [Deprecated]: syz.4.199 (pid 4563) Use of int in maxseg socket option. [ 133.481942][ T4563] Use struct sctp_assoc_value instead [ 133.520533][ T4574] lo speed is unknown, defaulting to 1000 [ 133.526848][ T4574] lo speed is unknown, defaulting to 1000 [ 133.557276][ T4506] 8021q: adding VLAN 0 to HW filter on device bond0 [ 133.575603][ T4578] netlink: 28 bytes leftover after parsing attributes in process `syz.4.199'. [ 133.602910][ T4506] 8021q: adding VLAN 0 to HW filter on device team0 [ 133.622851][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.630046][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 133.795968][ T4506] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 133.806595][ T4506] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 133.838947][ T268] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.846085][ T268] bridge0: port 2(bridge_slave_1) entered forwarding state [ 134.016023][ T4506] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 134.382602][ T4506] veth0_vlan: entered promiscuous mode [ 134.419866][ T4506] veth1_vlan: entered promiscuous mode [ 134.472869][ T4506] veth0_macvtap: entered promiscuous mode [ 134.500221][ T4506] veth1_macvtap: entered promiscuous mode [ 134.543332][ T4506] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 134.593657][ T4506] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 134.624715][ T268] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.639624][ T268] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.648447][ T268] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.694387][ T268] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.823528][ T4610] loop2: detected capacity change from 0 to 256 [ 135.082745][ T4610] FAT-fs (loop2): IO charset cp852 not found [ 135.470968][ T4615] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 135.570774][ T28] audit: type=1400 audit(1774726260.256:537): avc: denied { bind } for pid=4609 comm="syz.2.208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 135.948993][ T28] audit: type=1400 audit(1774726260.256:538): avc: denied { name_bind } for pid=4609 comm="syz.2.208" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 135.999832][ T28] audit: type=1400 audit(1774726260.256:539): avc: denied { node_bind } for pid=4609 comm="syz.2.208" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 136.062418][ T28] audit: type=1400 audit(1774726260.766:540): avc: denied { write } for pid=4614 comm="syz.6.187" name="001" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 136.066187][ T4626] cgroup: Invalid name [ 136.128316][ T4615] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 136.451903][ T4636] loop2: detected capacity change from 0 to 8192 [ 136.520944][ T4476] loop2: p1 < > p2 p4 < p5 > [ 136.598814][ T4476] loop2: partition table partially beyond EOD, truncated [ 136.725301][ T4476] loop2: p1 start 134217728 is beyond EOD, truncated [ 136.813005][ T4476] loop2: p2 size 591360 extends beyond EOD, truncated [ 137.177860][ T4476] loop2: p5 size 591360 extends beyond EOD, truncated [ 137.187564][ T4636] loop2: p1 < > p2 p4 < p5 > [ 137.192393][ T4636] loop2: partition table partially beyond EOD, truncated [ 137.199629][ T4636] loop2: p1 start 134217728 is beyond EOD, truncated [ 137.206334][ T4636] loop2: p2 size 591360 extends beyond EOD, truncated [ 137.214282][ T4636] loop2: p5 size 591360 extends beyond EOD, truncated [ 139.640733][ T28] audit: type=1400 audit(1774726264.346:541): avc: denied { create } for pid=4689 comm="syz.3.229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 139.760692][ T4691] netlink: 4 bytes leftover after parsing attributes in process `syz.2.226'. [ 141.581470][ T3590] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 141.660072][ T4694] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 142.600280][ T4703] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 142.615585][ T4703] ------------[ cut here ]------------ [ 142.621238][ T4703] memcpy: detected field-spanning write (size 32) of single field "&new->sel" at net/sched/cls_u32.c:855 (size 16) [ 142.633548][ T4703] WARNING: net/sched/cls_u32.c:855 at u32_change+0x144c/0x14d0, CPU#0: syz.3.242/4703 [ 142.643205][ T4703] Modules linked in: [ 142.647137][ T4703] CPU: 0 UID: 0 PID: 4703 Comm: syz.3.242 Tainted: G W syzkaller #0 PREEMPT(full) [ 142.658094][ T4703] Tainted: [W]=WARN [ 142.661953][ T4703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 142.672072][ T4703] RIP: 0010:u32_change+0x1463/0x14d0 [ 142.677411][ T4703] Code: 31 ed e9 96 fe ff ff e8 eb f4 c1 fc 48 8d 3d 44 2c 89 02 b9 10 00 00 00 4d 89 f7 4c 8b 74 24 18 4c 89 f6 48 c7 c2 fb 65 7e 86 <67> 48 0f b9 3a 4c 89 f2 4d 89 fe 4c 8b 7c 24 28 e9 36 f1 ff ff e8 [ 142.697115][ T4703] RSP: 0018:ffffc90003f1f5e0 EFLAGS: 00010283 [ 142.703273][ T4703] RAX: ffffffff84976c05 RBX: ffffc90003f1f7f0 RCX: 0000000000000010 [ 142.711394][ T4703] RDX: ffffffff867e65fb RSI: 0000000000000020 RDI: ffffffff87209850 [ 142.719414][ T4703] RBP: ffffc90003f1f6e8 R08: 0001888119a62087 R09: 0000000000000000 [ 142.727576][ T4703] R10: ffff888119a62000 R11: 0000000000000002 R12: ffff888119a61600 [ 142.735693][ T4703] R13: 0000000000000001 R14: 0000000000000020 R15: ffff888119a616c0 [ 142.743795][ T4703] FS: 00007f69e5aaf6c0(0000) GS:ffff8882ae8d8000(0000) knlGS:0000000000000000 [ 142.752786][ T4703] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 142.759406][ T4703] CR2: 0000001b3441dff8 CR3: 000000011b4ba000 CR4: 00000000003506f0 [ 142.767455][ T4703] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 142.775583][ T4703] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 142.783747][ T4703] Call Trace: [ 142.787147][ T4703] [ 142.790172][ T4703] tc_new_tfilter+0xfc0/0x1200 [ 142.795226][ T4703] ? ns_capable+0x7c/0xb0 [ 142.799706][ T4703] ? __pfx_tc_new_tfilter+0x10/0x10 [ 142.805154][ T4703] rtnetlink_rcv_msg+0x64b/0x720 [ 142.810271][ T4703] ? avc_has_perm_noaudit+0xab/0x130 [ 142.815717][ T4703] netlink_rcv_skb+0x123/0x220 [ 142.820619][ T4703] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 142.826156][ T4703] rtnetlink_rcv+0x1c/0x30 [ 142.830635][ T4703] netlink_unicast+0x5c0/0x690 [ 142.835503][ T4703] netlink_sendmsg+0x5c8/0x6f0 [ 142.840402][ T4703] ? __pfx_netlink_sendmsg+0x10/0x10 [ 142.845729][ T4703] ____sys_sendmsg+0x563/0x5b0 [ 142.850577][ T4703] ___sys_sendmsg+0x195/0x1e0 [ 142.855380][ T4703] __sys_sendmmsg+0x185/0x320 [ 142.860246][ T4703] __x64_sys_sendmmsg+0x57/0x70 [ 142.865206][ T4703] x64_sys_call+0x27aa/0x3020 [ 142.870049][ T4703] do_syscall_64+0x12c/0x370 [ 142.874678][ T4703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.880936][ T4703] RIP: 0033:0x7f69e705c819 [ 142.885391][ T4703] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 142.905096][ T4703] RSP: 002b:00007f69e5aaf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 142.913575][ T4703] RAX: ffffffffffffffda RBX: 00007f69e72d5fa0 RCX: 00007f69e705c819 [ 142.921774][ T4703] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000005 [ 142.929815][ T4703] RBP: 00007f69e70f2c91 R08: 0000000000000000 R09: 0000000000000000 [ 142.937887][ T4703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 142.946008][ T4703] R13: 00007f69e72d6038 R14: 00007f69e72d5fa0 R15: 00007ffd7cc5b768 [ 142.954060][ T4703] [ 142.957157][ T4703] ---[ end trace 0000000000000000 ]--- [ 143.653343][ T4717] loop2: detected capacity change from 0 to 1024 [ 143.660666][ T4717] EXT4-fs: test_dummy_encryption option not supported [ 143.981715][ T4724] IPVS: length: 1152 != 8 [ 143.999587][ T4724] netlink: 16 bytes leftover after parsing attributes in process `syz.2.234'. [ 144.099853][ T4724] gre1: entered promiscuous mode [ 145.034879][ T4729] loop6: detected capacity change from 0 to 512 [ 145.050840][ T4729] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 145.080340][ T4729] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 145.088950][ T4729] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz.6.238: bad orphan inode 4 [ 145.119128][ T4729] loop6: lost filesystem error report for type 5 error -117 [ 145.119308][ T4729] EXT4-fs (loop6): 1 orphan inode deleted [ 145.126730][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 145.126746][ C1] EXT4-fs (loop6): initial error at time 1774726269: ext4_orphan_get:1417 [ 145.126770][ C1] EXT4-fs (loop6): last error at time 1774726269: ext4_orphan_get:1417 [ 145.196435][ T4729] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.524202][ T4743] siw: device registration error -23 [ 146.668150][ T4506] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.877105][ T28] audit: type=1400 audit(1774726273.566:542): avc: denied { write } for pid=4782 comm="syz.2.257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 149.003833][ T28] audit: type=1326 audit(1774726273.576:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4782 comm="syz.2.257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0251aec819 code=0x7ffc0000 [ 149.382448][ T28] audit: type=1326 audit(1774726273.576:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4782 comm="syz.2.257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0251aec819 code=0x7ffc0000 [ 149.819650][ T28] audit: type=1326 audit(1774726273.576:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4782 comm="syz.2.257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0251aec819 code=0x7ffc0000 [ 149.843881][ T28] audit: type=1326 audit(1774726273.606:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4782 comm="syz.2.257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f0251aec819 code=0x7ffc0000 [ 150.380453][ T28] audit: type=1326 audit(1774726273.606:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4782 comm="syz.2.257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0251aec819 code=0x7ffc0000 [ 150.452975][ T28] audit: type=1326 audit(1774726273.606:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4782 comm="syz.2.257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0251aec819 code=0x7ffc0000 [ 150.477447][ T28] audit: type=1326 audit(1774726273.606:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4782 comm="syz.2.257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0251aec819 code=0x7ffc0000 [ 150.509562][ T28] audit: type=1326 audit(1774726273.606:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4782 comm="syz.2.257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0251aec819 code=0x7ffc0000 [ 150.569062][ T28] audit: type=1326 audit(1774726273.606:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4782 comm="syz.2.257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0251aec819 code=0x7ffc0000 [ 150.672280][ T4796] loop2: detected capacity change from 0 to 128 [ 150.747673][ T4820] siw: device registration error -23 [ 150.764177][ T4820] netlink: 14 bytes leftover after parsing attributes in process `syz.3.269'. [ 150.813524][ T4833] loop6: detected capacity change from 0 to 128 [ 150.976580][ T4820] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 151.205037][ T4820] bond0 (unregistering): Released all slaves [ 151.752660][ T4874] loop2: detected capacity change from 0 to 8192 [ 151.790271][ T4641] loop2: p1 < > p2 p4 < p5 > [ 151.811488][ T4641] loop2: partition table partially beyond EOD, truncated [ 151.861098][ T4641] loop2: p1 start 134217728 is beyond EOD, truncated [ 151.878825][ T4641] loop2: p2 size 591360 extends beyond EOD, truncated [ 151.894864][ T4641] loop2: p5 size 591360 extends beyond EOD, truncated [ 152.238593][ T4874] loop2: p1 < > p2 p4 < p5 > [ 152.243439][ T4874] loop2: partition table partially beyond EOD, truncated [ 152.250625][ T4874] loop2: p1 start 134217728 is beyond EOD, truncated [ 152.257337][ T4874] loop2: p2 size 591360 extends beyond EOD, truncated [ 152.265716][ T4874] loop2: p5 size 591360 extends beyond EOD, truncated [ 152.768312][ T4880] syz.1.291 (4880) used greatest stack depth: 8136 bytes left [ 153.081480][ T4641] udevd[4641]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 153.178755][ T4909] loop2: detected capacity change from 0 to 1024 [ 153.234451][ T4909] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 153.384010][ T4915] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 155.730278][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.970011][ T28] kauditd_printk_skb: 428 callbacks suppressed [ 155.970029][ T28] audit: type=1400 audit(1774726280.666:980): avc: denied { setopt } for pid=4938 comm="syz.2.311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 156.120499][ T28] audit: type=1326 audit(1774726280.726:981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4941 comm="syz.2.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0251aec819 code=0x7ffc0000 [ 156.151951][ T28] audit: type=1326 audit(1774726280.726:982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4941 comm="syz.2.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0251aec819 code=0x7ffc0000 [ 156.209903][ T28] audit: type=1326 audit(1774726280.726:983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4941 comm="syz.2.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0251aec819 code=0x7ffc0000 [ 156.305249][ T28] audit: type=1326 audit(1774726280.726:984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4941 comm="syz.2.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0251aec819 code=0x7ffc0000 [ 156.466021][ T4957] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.501906][ T4957] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.627624][ T28] audit: type=1326 audit(1774726280.736:985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4941 comm="syz.2.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=93 compat=0 ip=0x7f0251aec819 code=0x7ffc0000 [ 156.712428][ T28] audit: type=1326 audit(1774726280.736:986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4941 comm="syz.2.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0251aec819 code=0x7ffc0000 [ 156.797412][ T28] audit: type=1326 audit(1774726280.736:987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4941 comm="syz.2.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0251aec819 code=0x7ffc0000 [ 156.879325][ T28] audit: type=1326 audit(1774726280.736:988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4941 comm="syz.2.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0251aec819 code=0x7ffc0000 [ 156.964422][ T28] audit: type=1326 audit(1774726280.736:989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4941 comm="syz.2.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f0251aec819 code=0x7ffc0000 [ 157.403933][ T4965] netlink: 68 bytes leftover after parsing attributes in process `syz.2.323'. [ 157.917399][ T4970] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.929391][ T4970] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.153086][ T4979] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 159.055197][ T4992] netlink: 'syz.4.333': attribute type 32 has an invalid length. [ 160.318367][ T4999] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.360984][ T4999] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.010095][ T5005] netlink: 32 bytes leftover after parsing attributes in process `syz.2.339'. [ 161.095244][ T5007] netlink: 4 bytes leftover after parsing attributes in process `syz.2.340'. [ 161.361595][ T5011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.374872][ T5011] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.823785][ T5026] loop6: detected capacity change from 0 to 8192 [ 163.903551][ T4641] loop6: p1 < > p2 p4 < p5 > [ 163.908414][ T4641] loop6: partition table partially beyond EOD, truncated [ 163.933952][ T4641] loop6: p1 start 134217728 is beyond EOD, truncated [ 163.990270][ T4641] loop6: p2 size 591360 extends beyond EOD, truncated [ 164.141231][ T4641] loop6: p5 size 591360 extends beyond EOD, truncated [ 164.163779][ T5026] loop6: p1 < > p2 p4 < p5 > [ 164.168541][ T5026] loop6: partition table partially beyond EOD, truncated [ 164.175984][ T5026] loop6: p1 start 134217728 is beyond EOD, truncated [ 164.182754][ T5026] loop6: p2 size 591360 extends beyond EOD, truncated [ 164.191006][ T5026] loop6: p5 size 591360 extends beyond EOD, truncated [ 164.683319][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 164.683347][ T28] audit: type=1400 audit(1774726289.336:995): avc: denied { map } for pid=5033 comm="syz.2.347" path="socket:[10279]" dev="sockfs" ino=10279 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 164.763829][ T5037] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.776641][ T5037] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.254780][ T28] audit: type=1400 audit(1774726290.956:996): avc: denied { create } for pid=5077 comm="syz.6.359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 166.301297][ T28] audit: type=1400 audit(1774726290.956:997): avc: denied { ioctl } for pid=5077 comm="syz.6.359" path="socket:[10315]" dev="sockfs" ino=10315 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 166.467180][ T5082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.482907][ T5082] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.519591][ T28] audit: type=1400 audit(1774726291.216:998): avc: denied { bind } for pid=5088 comm="syz.1.363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 166.554158][ T28] audit: type=1400 audit(1774726291.256:999): avc: denied { create } for pid=5081 comm="syz.6.360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 166.582241][ T28] audit: type=1400 audit(1774726291.286:1000): avc: denied { bind } for pid=5081 comm="syz.6.360" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 166.625103][ T28] audit: type=1400 audit(1774726291.286:1001): avc: denied { connect } for pid=5081 comm="syz.6.360" laddr=172.20.20.170 lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 166.871492][ T5113] netlink: 40 bytes leftover after parsing attributes in process `syz.1.374'. [ 167.070850][ T5124] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.379' sets config #-1 [ 167.174001][ T28] audit: type=1400 audit(1774726291.876:1002): avc: denied { setopt } for pid=5130 comm="syz.1.382" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 167.354614][ T28] audit: type=1400 audit(1774726292.046:1003): avc: denied { ioctl } for pid=5137 comm="syz.2.385" path="/dev/input/event2" dev="devtmpfs" ino=245 ioctlcmd=0x4540 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 167.631611][ T5146] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.672654][ T5146] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.416913][ T5154] loop6: detected capacity change from 0 to 128 [ 168.468455][ T28] audit: type=1400 audit(1774726293.166:1004): avc: denied { getopt } for pid=5159 comm="syz.3.394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 168.508582][ T5162] hsr0: entered allmulticast mode [ 168.514273][ T5162] hsr_slave_0: entered allmulticast mode [ 168.520310][ T5162] hsr_slave_1: entered allmulticast mode [ 168.526239][ T5162] A link change request failed with some changes committed already. Interface hsr0 may have been left with an inconsistent configuration, please check. [ 169.728995][ T5199] netlink: 'syz.4.410': attribute type 9 has an invalid length. [ 169.914234][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 169.914254][ T28] audit: type=1400 audit(1774726294.616:1009): avc: denied { ioctl } for pid=5204 comm="syz.2.413" path="socket:[10495]" dev="sockfs" ino=10495 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 170.032460][ T5207] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.044546][ T5207] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.217931][ T28] audit: type=1400 audit(1774726294.916:1010): avc: denied { sqpoll } for pid=5211 comm="syz.4.415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 171.039925][ T5227] 9p: Bad value for 'rfdno' [ 174.759165][ T5264] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.809068][ T5264] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.966866][ T28] audit: type=1400 audit(1774726301.666:1011): avc: denied { write } for pid=5282 comm="syz.6.439" lport=8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 177.006826][ T28] audit: type=1400 audit(1774726301.706:1012): avc: denied { getopt } for pid=5284 comm="syz.6.440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 177.089763][ T28] audit: type=1400 audit(1774726301.746:1013): avc: denied { getopt } for pid=5286 comm="syz.3.441" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 177.226506][ T28] audit: type=1400 audit(1774726301.926:1014): avc: denied { wake_alarm } for pid=5299 comm="syz.3.447" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 177.525968][ T5317] netlink: 'syz.2.453': attribute type 16 has an invalid length. [ 177.550221][ T5317] netlink: 'syz.2.453': attribute type 17 has an invalid length. [ 177.716779][ T5317] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 178.899143][ T5346] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.910720][ T5348] netlink: 36 bytes leftover after parsing attributes in process `syz.4.465'. [ 178.912144][ T5346] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.943957][ T5348] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 178.980789][ T28] audit: type=1400 audit(1774726303.686:1015): avc: denied { write } for pid=5349 comm="syz.4.466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 180.324288][ T5405] netlink: 12 bytes leftover after parsing attributes in process `syz.6.487'. [ 180.384539][ T28] audit: type=1400 audit(1774726305.086:1016): avc: denied { nlmsg_read } for pid=5410 comm="syz.4.490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 180.461519][ T5419] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 180.504219][ T28] audit: type=1400 audit(1774726305.186:1017): avc: denied { ioctl } for pid=5418 comm="syz.6.494" path="socket:[10740]" dev="sockfs" ino=10740 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 180.579370][ T5423] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.626168][ T5423] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.251168][ T5441] netlink: 12 bytes leftover after parsing attributes in process `syz.3.502'. [ 181.453098][ T5445] futex_wake_op: syz.3.504 tries to shift op by -1; fix this program [ 181.963402][ T5476] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.970756][ T5476] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.053455][ T5483] netlink: 12 bytes leftover after parsing attributes in process `syz.4.521'. [ 182.108160][ T5476] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 182.119285][ T5476] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 182.167307][ T5488] syz1: Port: 1 Link DOWN [ 182.172544][ T30] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.200557][ T30] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.259907][ T30] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.302731][ T30] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.753486][ T5521] openvswitch: netlink: Key type 96 is out of range max 32 [ 184.160654][ T5554] netlink: 48 bytes leftover after parsing attributes in process `syz.4.548'. [ 184.325110][ T28] audit: type=1400 audit(1774726309.026:1018): avc: denied { ioctl } for pid=5581 comm="syz.1.561" path="socket:[11672]" dev="sockfs" ino=11672 ioctlcmd=0x7436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 184.896913][ T5602] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 185.040433][ T28] audit: type=1400 audit(1774726309.746:1019): avc: denied { ioctl } for pid=5605 comm="syz.1.571" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=10975 ioctlcmd=0x89f6 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 186.101644][ T5626] netlink: 'syz.4.580': attribute type 3 has an invalid length. [ 186.200628][ T5618] loop2: detected capacity change from 0 to 128 [ 186.414472][ T5640] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5640 comm=syz.4.588 [ 186.479633][ T5640] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5640 comm=syz.4.588 [ 186.539065][ T5646] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 189.836274][ T5711] bridge1: entered promiscuous mode [ 189.851805][ T5711] bridge1: entered allmulticast mode [ 190.271987][ T5743] netlink: 'syz.6.628': attribute type 3 has an invalid length. [ 190.274489][ T28] audit: type=1400 audit(1774726314.966:1020): avc: denied { getopt } for pid=5740 comm="syz.1.627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 190.279899][ T5743] netlink: 132 bytes leftover after parsing attributes in process `syz.6.628'. [ 192.602516][ T5794] netlink: 280 bytes leftover after parsing attributes in process `syz.1.651'. [ 192.835088][ T5811] netlink: 'syz.4.657': attribute type 21 has an invalid length. [ 192.849580][ T5811] IPv6: NLM_F_CREATE should be specified when creating new route [ 192.857792][ T5811] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 192.865135][ T5811] IPv6: NLM_F_CREATE should be set when creating new route [ 192.872572][ T5811] IPv6: NLM_F_CREATE should be set when creating new route [ 192.879914][ T5811] IPv6: NLM_F_CREATE should be set when creating new route [ 193.089221][ T5822] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 193.478509][ T5832] netlink: 'syz.3.666': attribute type 32 has an invalid length. [ 193.636576][ T5834] netlink: 4 bytes leftover after parsing attributes in process `syz.6.667'. [ 194.592023][ T5847] netlink: 8 bytes leftover after parsing attributes in process `syz.1.673'. [ 194.632251][ T5847] netlink: 12 bytes leftover after parsing attributes in process `syz.1.673'. [ 195.032249][ T5865] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 195.158058][ T5865] bond0 (unregistering): Released all slaves [ 196.984424][ T28] audit: type=1326 audit(1774726321.686:1021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5891 comm="syz.2.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0251aec819 code=0x7ffc0000 [ 197.079567][ T28] audit: type=1326 audit(1774726321.686:1022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5891 comm="syz.2.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0251aec819 code=0x7ffc0000 [ 197.143124][ T28] audit: type=1326 audit(1774726321.686:1023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5891 comm="syz.2.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=274 compat=0 ip=0x7f0251aec819 code=0x7ffc0000 [ 197.167056][ T28] audit: type=1326 audit(1774726321.686:1024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5891 comm="syz.2.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0251aec819 code=0x7ffc0000 [ 197.191170][ T28] audit: type=1326 audit(1774726321.686:1025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5891 comm="syz.2.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0251aec819 code=0x7ffc0000 [ 197.214785][ T28] audit: type=1400 audit(1774726321.736:1026): avc: denied { shutdown } for pid=5895 comm="syz.4.693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 199.887261][ T5938] A link change request failed with some changes committed already. Interface veth0_to_hsr may have been left with an inconsistent configuration, please check. [ 206.008629][ T28] audit: type=1400 audit(1774726330.706:1027): avc: denied { getopt } for pid=6056 comm="syz.6.750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 206.341676][ T28] audit: type=1400 audit(1774726331.036:1028): avc: denied { create } for pid=6064 comm="syz.6.754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 206.390072][ T28] audit: type=1400 audit(1774726331.036:1029): avc: denied { setopt } for pid=6064 comm="syz.6.754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 206.568742][ T6084] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bridge, syncid = 0, id = 0 [ 211.575053][ T28] audit: type=1400 audit(1774726336.276:1030): avc: denied { write } for pid=6164 comm="syz.3.792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 218.718323][ T2151] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.832473][ T2151] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.843594][ T28] audit: type=1326 audit(1774726343.546:1031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6285 comm="syz.2.836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0251aec819 code=0x7ffc0000 [ 218.939935][ T28] audit: type=1326 audit(1774726343.566:1032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6285 comm="syz.2.836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0251aec819 code=0x7ffc0000 [ 218.970611][ T2151] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.997913][ T28] audit: type=1326 audit(1774726343.576:1033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6285 comm="syz.2.836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0251aec819 code=0x7ffc0000 [ 219.039546][ T28] audit: type=1326 audit(1774726343.576:1034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6285 comm="syz.2.836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0251aec819 code=0x7ffc0000 [ 219.142240][ T2151] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.149813][ T28] audit: type=1326 audit(1774726343.576:1035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6285 comm="syz.2.836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0251aec819 code=0x7ffc0000 [ 219.229669][ T28] audit: type=1326 audit(1774726343.576:1036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6285 comm="syz.2.836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0251aec819 code=0x7ffc0000 [ 219.336069][ T2151] bridge_slave_1: left allmulticast mode [ 219.352621][ T2151] bridge_slave_1: left promiscuous mode [ 219.358356][ T2151] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.398401][ T2151] bridge_slave_0: left allmulticast mode [ 219.407005][ T2151] bridge_slave_0: left promiscuous mode [ 219.416353][ T28] audit: type=1326 audit(1774726343.576:1037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6285 comm="syz.2.836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0251aec819 code=0x7ffc0000 [ 219.439869][ T2151] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.949167][ T28] audit: type=1326 audit(1774726343.576:1038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6285 comm="syz.2.836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0251aec819 code=0x7ffc0000 [ 219.979437][ T28] audit: type=1326 audit(1774726343.576:1039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6285 comm="syz.2.836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0251aec819 code=0x7ffc0000 [ 220.011107][ T28] audit: type=1326 audit(1774726343.576:1040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6285 comm="syz.2.836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f0251aec819 code=0x7ffc0000 [ 220.038440][ T2151] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 220.055026][ T2151] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 220.075822][ T2151] bond0 (unregistering): Released all slaves [ 220.392633][ T2151] hsr_slave_0: left promiscuous mode [ 220.419008][ T2151] hsr_slave_1: left promiscuous mode [ 220.447082][ T2151] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 220.494831][ T2151] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 220.545603][ T2151] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 220.586046][ T2151] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 220.644718][ T2151] veth1_macvtap: left promiscuous mode [ 220.679628][ T2151] veth0_macvtap: left promiscuous mode [ 220.715762][ T2151] veth1_vlan: left promiscuous mode [ 221.201941][ T2151] team0 (unregistering): Port device team_slave_1 removed [ 221.253404][ T2151] team0 (unregistering): Port device team_slave_0 removed [ 221.522865][ T5484] lo speed is unknown, defaulting to 1000 [ 221.811960][ T5484] infiniband syz0: ib_query_port failed (-19) [ 225.667275][ T4506] ================================================================== [ 225.675455][ T4506] BUG: KCSAN: data-race in shmem_add_to_page_cache / shmem_getattr [ 225.683405][ T4506] [ 225.685948][ T4506] read-write to 0xffff888103dadc70 of 8 bytes by task 6434 on cpu 0: [ 225.694136][ T4506] shmem_add_to_page_cache+0x4b2/0x5b0 [ 225.699659][ T4506] shmem_get_folio_gfp+0x4f3/0xd60 [ 225.704904][ T4506] shmem_write_begin+0xfc/0x1f0 [ 225.709800][ T4506] generic_perform_write+0x183/0x490 [ 225.715314][ T4506] shmem_file_write_iter+0xc5/0xf0 [ 225.720567][ T4506] __kernel_write_iter+0x319/0x590 [ 225.725715][ T4506] dump_user_range+0xa7d/0xdb0 [ 225.730611][ T4506] elf_core_dump+0x21a2/0x2330 [ 225.735439][ T4506] coredump_write+0xacc/0xdd0 [ 225.740193][ T4506] vfs_coredump+0x26c7/0x3130 [ 225.744923][ T4506] get_signal+0xd80/0xf60 [ 225.749508][ T4506] arch_do_signal_or_restart+0x96/0x450 [ 225.755116][ T4506] irqentry_exit+0xf7/0x520 [ 225.759662][ T4506] asm_exc_page_fault+0x26/0x30 [ 225.764541][ T4506] [ 225.766891][ T4506] read to 0xffff888103dadc70 of 8 bytes by task 4506 on cpu 1: [ 225.774477][ T4506] shmem_getattr+0x68/0x200 [ 225.779211][ T4506] vfs_getattr_nosec+0x146/0x1e0 [ 225.784269][ T4506] vfs_getattr+0x48/0x60 [ 225.788559][ T4506] vfs_statx_path+0x28/0x140 [ 225.793182][ T4506] vfs_statx+0xc4/0x170 [ 225.797377][ T4506] vfs_fstatat+0x118/0x170 [ 225.801825][ T4506] __se_sys_newfstatat+0x55/0x3e0 [ 225.806895][ T4506] __x64_sys_newfstatat+0x55/0x70 [ 225.811961][ T4506] x64_sys_call+0x2c64/0x3020 [ 225.816685][ T4506] do_syscall_64+0x12c/0x370 [ 225.821756][ T4506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.827685][ T4506] [ 225.830034][ T4506] value changed: 0x0000000000003267 -> 0x0000000000003269 [ 225.837164][ T4506] [ 225.839526][ T4506] Reported by Kernel Concurrency Sanitizer on: [ 225.845714][ T4506] CPU: 1 UID: 0 PID: 4506 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(full) [ 225.857135][ T4506] Tainted: [W]=WARN [ 225.861067][ T4506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 225.871170][ T4506] ==================================================================