last executing test programs: 3m52.679964654s ago: executing program 4 (id=743): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0x80552, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xa}, 0x102260, 0x10000, 0x0, 0x1, 0x5, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x2000000020000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="54020000170001000000000020000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff000000000000000000000000000000000000000002"], 0x254}}, 0x0) 3m52.331154124s ago: executing program 4 (id=749): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0x80552, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x10}, 0x102260, 0x10000, 0x0, 0x1, 0x5, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x2000000020000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff000000000000000000000000000000000000000002"], 0x254}}, 0x0) 3m50.990856123s ago: executing program 4 (id=755): munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) r0 = socket(0x10, 0x2, 0x0) sendto$inet6(r0, &(0x7f0000000000)="7800000018002507b9409b14ffff00000204be04020506050e0204094300080004000000040010000d0068d0bf46d32345653600648d0a0012000200000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160018000a0000000000e000e218d1ddf66ed538f25232500000", 0x78, 0x0, 0x0, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x6}, 0x204, 0x1, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = socket$rxrpc(0x21, 0x2, 0xa) syz_emit_ethernet(0x40, &(0x7f00000004c0)={@broadcast, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x32, 0x0, 0x0, 0x2, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x5, 0x3, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, {0x5, 0x4, 0x3, 0x8, 0x8, 0x66, 0x0, 0x5, 0x8, 0xec4, @multicast2, @multicast1}, "a2bc"}}}}}, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000040)) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000002280)={0x3, &(0x7f0000000180)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x48}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10) syz_emit_ethernet(0x56, &(0x7f0000000fc0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa04000d00007a193513c77ca23bec8006b2b259c81dae15210f13dd81d2213173b4bcfdb933a6138941c3ccc94891fc2f11789060353eea91dc8c00"/86], 0x0) ioctl$TIOCGPTPEER(r3, 0x5441, 0x9) readv(r3, &(0x7f0000000640)=[{&(0x7f00000004c0)=""/125, 0x7d}], 0x1) close_range(r2, 0xffffffffffffffff, 0x0) r5 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r5, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e20, @loopback}}, 0x24) listen(r1, 0x4) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x579, &(0x7f0000000a40)="$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") r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x100080, 0x0) read(r6, 0x0, 0x0) r7 = inotify_init1(0x0) inotify_add_watch(r7, &(0x7f0000000000)='.\x00', 0x52000775) setxattr$incfs_metadata(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x1) recvfrom(r1, 0x0, 0x0, 0x40, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000000000000000000008500000023000000850000002300000095"], &(0x7f0000000280)='GPL\x00', 0xc, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) listen(r5, 0x4de29d29) ioctl$EXT4_IOC_MIGRATE(r5, 0x6609) 3m50.254882958s ago: executing program 1 (id=765): recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x10, 0x3, 0x0) setresuid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000012edfffebfa30000000000000703000028feffff620af0fff8ffffff61a4f0ff000000003e040000000000003f000080ffff0000b604000001ede0ff2500000017ffffffcc040000000000007b0a00fe000000006e04000000000000c6000000000000009500000000000000023bc065b7a379d17cf9333379fc9e84af69912435f1b6a693002e7f3be3619184e50b91f32050e436fe275daf51efd601b6482a0800000098efd2a102ee010400006e7a1de4a21f379dbf01de00b1b564fef3bef70548aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc532ef58de3c1b7646cb7798b3e6440c2fbdb00a3e35208b0bbf12cd8dff095edc710e4000000000000009fbe4b61a615c6c57a2b649dc74a1a610643b08d9e104d4d91af25b8123deda8a3658d42ecbf28bf6d8e8afcb913466aaa7f6df70252e79166d8582755a314d31a76e42f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0800000000000000d5f728d236619074d6ebdf098bc908f50ae728a40f9411fe7226a4040b96e37c4f46010400000000c3da29faf75ddd1aa96960bca97af133824b881cc1f62c0f8f8f0e8d76b86f9c45636614786f5a2cb77230a874640dcbe0b20bb77c022d4cab080078fce8c5c81b7037181fc2f18f781aaa6e2957d7e39cc1baddcb7ec6667e699f24e41697ee7ea23e4b29a8b6cc9a1f5a7b3caae05f1300010000949b3aab06b1e042ff2164d80c8ab1c156b97e5889685a96949e4cb40df77b8bb84b0e733a63784ccc214d930cbb7e090df9a2867b3acec439c163fc8706869ada11390d4dbcf840fa68e7d7071b53ac29df826f8ae6d6e18c1e0600bf870768d5217e9bb5a05d9e224e67f1231bd236ed200073824d93c4e1a0f50a74bb4850486727d970acc546087acbf30f2f8165b47ba56dfadd14b306e98931485747292c6fe6e188750cf4f87cce2aa7d67c7133a9f05954cde298a35ea6d715ba80aee6330000000000000000000000000000000000004000000000000000038600008fb854adb4f8080064e8407c6bdb37114c80fbaa4a0ec5aaf4b0ac6f2128668279eb6fc144344e2d461c9a1be8fa0061ea9d55ee4716bea8e1cebf9ed39325ab4c5530dd6ee9fffc00000000000000d7c5af73c683625aaad5eda5004a76c9f8975ed4c5e4eb3e77e9885f69754932609f19e2f615a01cb6d17fbf5cb539403cb0572534f054d5514ad8264f7b029b2bdf2ca4958a62a6e744f9a4c1e646e1dd2ca19583f0f8b0dc53debd7d44f334e6ed7445a9580f970e483b307c4b3c018bc194b23d37e6a2e52d8265e5aab6fec586d52386e8c07a88c88e8faec5f1b16b2014f6952ce7d6be12c6bdb9651ca6fc907061be311d1354e6295698594a73136237bee068d3819400e43544830a3f74b7942f22336953978a5b2032da4238cc61162c04c1297395b73e18c9387615a2bc87d9e2445f3d323d3fac347926a4bac694c55fe9d145906d410f58f1951405d10504efe402cae085afef5dbd617e87ddbd239e4a50d7eb8e327fb5db12cbd6a9efe8e671c4f251cafffe3400a670d14b9b3cd8d86e492997a0168c022ef3536bd1dc731f4f9f8cb66701f4578ba4cb9b706e605a88c3857fb8aaaa95024f8da775f72950212b84fc6133ae14d1429cd4905dabb52e43af7e65acf97b4951fa1e967d16a5ed642efc855a4a46b85cd079934ad3188276efae9387eaa232697526e24b5d4fded86c3811ccd00520150b16000080122965558074956da5e4c3bbefcb64aa8be4456ed2caf0f467b6bbf3aa4371f5e76ab3f6a20278a3c779e03afd9a6af6fd518e5dce030f88ec5a5cb7601a161da0f80893220800c523040d13e1f1300c2c6555bce60d95dd3288e53435713f03add23f14c8db5555c62de4f626483632a2ab547f88dd6efec73a0271a19ca3aa860aa4dcaeeb9bd91a0cb429efae2a5fcc08b3a572969bbe917d1767e38ba49e3e57fafea83e495a6a1d1a4ebf83434986091dd66ffe3ffed0c39552a312e2db596d9c827e02f6fc13c8ddbb50bfd7dd8aa2f35f259fc83e007fe79d2d25e30830b92fca00a292dd3b856faa4b7e66e1b64505f65900839df71a97d4d07d37f7ecf8ed9a22da26ae674bba16c204f6b2f8f74fc56b7126d7c11ece6e88ec41192aaee75415c58d264a2b6adae02c821b62428902aad499825ab85a348638384cd12e61dbde5c47056f0a20b4e2a2328d5db5cf026657a129e6be231acf5f57995c60d9fca5f63a0dfd18054717120bda466d04774b53208ad8b022719ca77a4e0a66b4708f791d849a5e2aaa0074a9560ede2600df5a5c41392fe9460080fcb1e65233fb8dbeec4c86dbcf6a0673e38d2d3615e5bfbde44afe0fa7564231fff7e7f1f3ad68492dd2cccb15b5d7d3e37e8b7d28921c4b9280979521173f322df408d9818b6cc400090300000021911480a876fbba698801937e8b4264eb6f5137bdaa075f1488d22230592a79000000000000000000000000000000000000000000110000000000000000000000000000000000000000000000000000000000000000002f316aa0886c174b73decb46c1c85edf50d8fcbac5ff76b365611666da86a8e65b308706bd7c000000000000003f7cd4d5cb9076b81b7741ec03877afb5237ea1694addebc14c3ae49f88c462ea2050acf2d9a97d3be29a5614d1eba2c98cf0236401e02d7c445e50f76419ab4f78f67a09e63dd4faa2e7b59399f055f2fa278783f26d0a52aefb0a5ef0b41e14a6fe6ba306206670b84894e901a523fcbadfeff535f2514bc834e876810d9a6a78e70a9e22860c36a724770b4185de44db6bf21fef32a8d5b36d9014f38fee012365f963b2a85e7d8075c333475b9f0284405e3127dde7e41285fbe0bdd370c06c6a41744c3d24eab511317f97b7b4a1c2ec33fedc46e9bf0fa640eebd3d58f0ebdb7cb8ccffd6d6ab7e0e843591d2618e2d2cdc7081c8fafffe9c3500800000087de4ee7aac6478d99de7dd82bef044a6d33c789d566c90c46ad581aa22f910547a77d55e26bf19f1d4661550b177ef53933a305e69b8a95119dcf5bda599d625054776151b2cd1fcde238bdc527594a6c17aa9728af24e2bb7a3830e7092b01b119ea4e7e7f0e21527d622cc29c9f0c8720195368f8374337ab4d130619d93c5ef37e7ddd0b2da147e6e513455b88753452de959a6cbfa1ffbc7ad5d8c3b48017fd31dcf72f337b639253f44cb27a12174bc4c191e21015d0c431a71906eb9c6a14c8a060459ef26787ce3d1cbfd5cc459f0048b5d06f6cbd3e9b34c89f3fb2f951ae81d7fcc8bc0000000000000000000000000000000000000000009231feef3117197c796369f776c8b2ea3970f358107945d9e74e9bdfa58e68b65a8f01bc4b73cc31df5aa29f363917f90e3fa1eaf553db1c761dd9b634a9c4d7c21c24fe6d953ed9438cad0f8dfe03e5e2f73019352f1fb682a5a6ebbf24ebc49e3d7058e696eb3f4b642f36c9006c0067e24a64aa8c53dd824a3c08bfda74a143c855030ae004ac797c575c202d8091eb77565212548ead770d68000000000099347593f67da85d1c962bfb320d1553a74ec3bf003ba62b1784dbf0168a7e85f28b77bdebce96bf386a6dd5df162a16f2b7e8a4de0ffc464a87f91f81866d2ef0af71ebb07a739c3cb1b7000000000000"], &(0x7f00000001c0)='GPL\x00'}, 0x48) unshare(0x64000600) 3m48.711176935s ago: executing program 4 (id=771): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200404, &(0x7f0000000280)={[{@noblock_validity}, {@nodelalloc}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@debug}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f0000000700)="$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") r0 = creat(&(0x7f0000000380)='./bus\x00', 0x4a) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) listen(r0, 0x6) ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000100)) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) open(0x0, 0x8000, 0x112) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000002380)={0x0, 0x0, 0x0, 0x1, 0x8008, 0x0, 0x0, 0x19, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8, 0x4]}) mknod$loop(&(0x7f0000000680)='./file0\x00', 0x80, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f0000000080)={[{@grpquota}, {@data_ordered}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x6}}, {@grpid}, {@dioread_nolock}, {}, {@debug}, {@noauto_da_alloc}]}, 0x1, 0x5f7, &(0x7f00000016c0)="$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") lseek(0xffffffffffffffff, 0xfffffffffffffffc, 0x2) getdents(0xffffffffffffffff, 0x0, 0x58) 3m47.378463313s ago: executing program 1 (id=772): r0 = syz_io_uring_setup(0x5acd, &(0x7f0000000000)={0x0, 0x9e82, 0x1000, 0x2, 0x35d}, &(0x7f0000000080), &(0x7f00000000c0)) mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'ip6_vti0\x00', 0x0, 0x2f, 0x1, 0xfd, 0x9, 0x0, @mcast1, @remote, 0x40, 0x8, 0xd56, 0x2}}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x8, &(0x7f0000000100)=@raw=[@jmp={0x5, 0x1, 0x6, 0x2, 0x0, 0xfffffffffffffff4}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x7f}, @generic={0xff, 0xb, 0x5, 0xea8c, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3}, @map_fd={0x18, 0x3, 0x1, 0x0, 0x1}], &(0x7f0000000140)='syzkaller\x00', 0x8, 0x58, &(0x7f0000000180)=""/88, 0x40f00, 0xe, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000300)={0x10, 0x2, 0x800, 0x5}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000340)=[0xffffffffffffffff], &(0x7f0000000380)=[{0x4, 0x1, 0x8, 0x5}, {0x4, 0x5, 0x10, 0x16}, {0x3, 0x4, 0xd, 0x3}], 0x10, 0x5ca}, 0x94) getresuid(&(0x7f0000000480)=0x0, &(0x7f00000004c0)=0x0, &(0x7f0000000500)) setuid(r4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)=@ipv4_newaddr={0x3c, 0x14, 0x2, 0x70bd29, 0x25dfdbfe, {0x2, 0x0, 0x1, 0x6c96bc48ac829f72, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x9, 0x4, 0x7, 0x7}}, @IFA_FLAGS={0x8, 0x8, 0x520}, @IFA_ADDRESS={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x3e}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x810}, 0x20000001) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = accept(r5, &(0x7f0000000640)=@caif=@rfm, &(0x7f00000006c0)=0x80) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000007c0)={&(0x7f0000000700)=""/183, 0x20000, 0x5aebb041f627d072, 0x300000, 0x1}, 0x20) r7 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000800)) ioctl$PAGEMAP_SCAN(r7, 0xc0606610, &(0x7f0000000940)={0x60, 0x1, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0xf, &(0x7f0000000840)=[{0x441d, 0xfffffffffffffffa, 0x8}, {0x6, 0x62a, 0x5}, {0x280000000000, 0x8001}, {0x8, 0x4, 0x7}, {0x2, 0x0, 0x8}, {0x5, 0x8, 0x6}, {0x8, 0x826b, 0x5}, {0x3, 0x8000000000000001, 0x8f3}, {0x1000, 0x7, 0x81}], 0x9, 0x2, 0x15, 0x0, 0x0, 0x1b}) io_uring_register$IORING_UNREGISTER_PBUF_RING(r0, 0x17, &(0x7f0000000b00)={&(0x7f0000001000)={[{&(0x7f00000009c0)="2e88aeea4f2add15d269cc8d8395c42ef4d15e03fde4146d5afe3940f5cc2514eba76fa0d427c9d43f2f087a4f7cfc0745ed041024660777114773a2ca92161cbe7e014b5bd35c0d134e7a7c02733d8ae623e5aca3d7cda388c88e4d914fb9fb7d78b002ee1f63f3c0085f153042433dc2d76d8f43f85e19dfa74ace3435533600cd1ae93cfccd7baf230c9ae6d26f49751419d5ac626960b57fbac327e9ea1f6fc6039ef21de598836da23ff131cdda78a127ba0e539bb66cb4821b9d829926aa98827e0cf2c1c50a90a7cfad95979a976f77dd63de85ff14bfcd8145c75f39fb3ff5bdcd46c729f48dbf7c71f25db290b6754cfc4b6907", 0xf8}, {&(0x7f0000000ac0)="ccd72f29e936abdee94c653c8e3aaca35ee9eb8c794625eebabf48684c92ad", 0x1f, 0x2}]}, 0x2}, 0x1) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000d40)={0x0}, &(0x7f0000000d80)=0xc) r9 = getpgrp(0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000e00)={&(0x7f0000000b40)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000d00)=[{&(0x7f0000000bc0)="9dd4ca96a87a4e1dda56bc8e55e469a0afe0746412ca53c3e4c7714a7430646d6e848a607fa118c13dd67e9aee8f026bb3b02629f91c2212406d456e5fcf08d2fa3302883deb4bd437c28502bacc3f3fc37c480780983ba047531f66983cda365a8388bec68ab62c654872143cce28e44af74d0bf595c761bc574eb005e7a7a458cb460422931eafdf7b7f006a71eb4a1294d4ab05daee0d0892d18849ab2d3445deee698b72c2626b84d4d78b22eb26aee807d4", 0xb4}, {&(0x7f0000000c80)="682de81decf668f9a0f9eade6c958434f02071910d52136b72d3488f94e9c62cdebb22c8167a66fd11090f0afa5c5024d31b71e7c63407b3b0841ee66d26182ef4f67bda47cd6df5a0d74e747abdaec321cbf3bb24", 0x55}], 0x2, &(0x7f0000000dc0)=[@cred={{0x1c, 0x1, 0x2, {r8, r3, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r9, r4, 0xee01}}}], 0x40, 0x20004000}, 0x24000000) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000e40)) setreuid(r4, r4) socket$nl_sock_diag(0x10, 0x3, 0x4) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x5, 0x1ff, &(0x7f0000000e80)) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r10, 0x84, 0x20, &(0x7f0000000ec0)=0x7b, 0x4) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xa, 0x400, &(0x7f0000000f00)) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r6, 0x111, 0x2, 0x0, 0x4) ioctl$SNDRV_TIMER_IOCTL_CREATE(r0, 0xc02054a5, &(0x7f0000000f40)={0x4, r2, 'id1\x00'}) r12 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000002080), 0x181103, 0x0) r13 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000002140), 0x4) r14 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x4, '\x00', r1, 0xffffffffffffffff, 0x1, 0x1}, 0x50) r15 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002200)={0x1b, 0x0, 0x0, 0x4, 0x0, 0x1, 0x5, '\x00', r1, 0xffffffffffffffff, 0x4, 0x1, 0x5}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002400)=@bpf_ext={0x1c, 0xb, &(0x7f0000002000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1d}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @alu={0x0, 0x0, 0xb, 0x5, 0x0, 0xfffffffffffffff4, 0x1}, @ringbuf_query, @map_fd={0x18, 0x7, 0x1, 0x0, r11}]}, &(0x7f0000000fc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', r1, 0x0, r12, 0x8, &(0x7f00000020c0)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000002100)={0x2, 0x3, 0x2}, 0x10, 0xea11, r13, 0x6, &(0x7f0000002340)=[r14, r15, 0xffffffffffffffff], &(0x7f0000002380)=[{0x3, 0x5, 0xb, 0xb}, {0x1, 0x4, 0x5, 0x7}, {0x0, 0x5, 0xe, 0x4}, {0x4, 0x4, 0x6, 0xa}, {0x0, 0x5, 0x2, 0x9}, {0x5, 0x5, 0xa, 0x7}], 0x10, 0x8000}, 0x94) 3m47.378138663s ago: executing program 1 (id=773): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0x80552, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xa}, 0x102260, 0x10000, 0x0, 0x1, 0x5, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x2000000020000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="54020000170001000000000000000020200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff000000000000000000000000000000000000000002"], 0x254}}, 0x0) 3m47.375200823s ago: executing program 1 (id=776): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200404, &(0x7f0000000280)={[{@noblock_validity}, {@nodelalloc}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@debug}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f0000000700)="$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") r0 = creat(&(0x7f0000000380)='./bus\x00', 0x4a) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) listen(r0, 0x6) ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000100)) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) open(0x0, 0x8000, 0x112) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000002380)={0x0, 0x0, 0x0, 0x1, 0x8008, 0x0, 0x0, 0x19, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8, 0x4]}) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x0) lseek(r2, 0xfffffffffffffffc, 0x2) getdents(r2, 0x0, 0x58) 3m46.538536137s ago: executing program 4 (id=779): r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3m46.471502133s ago: executing program 1 (id=780): socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1e000000f71d0207c3004e3ab0a0663f28000100fda3d087ec5eb738c48e8002c8945e58ef7318292cb7206ef76038d02bb9549d6e5bf219c358f5574bf54e732853cfbef330d446b0139b57f9adb82d58a150436fd8aafedbfd13e86c3d439f173bb4d3c0581f6759f984860a1230d8da4087d33b62550df4a7a573df5682a735ba95e63c59f8e0f468ffb802347c8fde", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r0 = socket$rxrpc(0x21, 0x2, 0x2) sendmsg$inet(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x20000051) syz_open_dev$tty20(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x7ad82179598b3c, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c) listen(r5, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r7 = accept(r4, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r6, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b40200000000000061114800"], &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r8 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r8, &(0x7f0000000100)=ANY=[], 0xd) socket(0x11, 0x3, 0x10001) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xa98, 0x3}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) 3m45.629023808s ago: executing program 1 (id=788): timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x0, @thr={&(0x7f00000000c0), 0x0}}, &(0x7f0000bbdffc)=0x0) timer_settime(r0, 0x1, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) ioctl$USBDEVFS_CLAIMINTERFACE(r1, 0x8004550f, &(0x7f0000000040)=0xfffffff7) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000280)='./file0\x00', 0x8080, &(0x7f0000000140)=ANY=[@ANYRESHEX=r1, @ANYRESHEX=0x0], 0x3, 0x232, &(0x7f0000000880)="$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") r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0xe9) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x8c, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0xff, 0x0}}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) getdents(r2, 0xfffffffffffffffd, 0xbb) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = syz_io_uring_setup(0xec4, &(0x7f0000000540)={0x0, 0x91d, 0x800, 0x3, 0x34a}, &(0x7f0000000240)=0x0, &(0x7f0000000200)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) io_uring_enter(r7, 0x5fb, 0xe876, 0x3, &(0x7f0000000040)={[0xfffffffffffffffc]}, 0x8) r9 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, 0x0, 0x0) signalfd(r2, &(0x7f00000001c0)={[0x9]}, 0x8) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r4, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 3m45.616578979s ago: executing program 4 (id=789): r0 = syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file1\x00', 0x2008000, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2bc, &(0x7f0000000440)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x20846, 0x2) fcntl$dupfd(r0, 0x406, r1) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) write$P9_RLINK(r1, &(0x7f0000000140)={0x7, 0x47, 0x1}, 0x7) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000000)={0x8a58, r2, 'id0\x00'}) ioctl$SIOCX25SCUDMATCHLEN(r3, 0x89e7, &(0x7f0000000080)={0x5d}) sendmsg$nl_xfrm(r2, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180100001a0001002bbd7000fbdbdf25e0000001000000000000000000000000e00000010000000000000000000000004e24fff74e2200000200200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff010000000000000000000000000001000004d33c000000e000000100000000000000000000000001000000000000000800000000000000060000000000000096676a00000000005b22000000000000020000000000000008000000000000006106000000000000e60000000000000001000000000000800400000000000000ff0700000000000006000000000000800500000025bd7000033500000200020f000000000000000008001d000500000014000e00ffffffff0000000000000000000000000c0015"], 0x118}, 0x1, 0x0, 0x0, 0xc008040}, 0x4000010) 3m45.572958892s ago: executing program 32 (id=789): r0 = syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file1\x00', 0x2008000, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2bc, &(0x7f0000000440)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x20846, 0x2) fcntl$dupfd(r0, 0x406, r1) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) write$P9_RLINK(r1, &(0x7f0000000140)={0x7, 0x47, 0x1}, 0x7) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000000)={0x8a58, r2, 'id0\x00'}) ioctl$SIOCX25SCUDMATCHLEN(r3, 0x89e7, &(0x7f0000000080)={0x5d}) sendmsg$nl_xfrm(r2, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180100001a0001002bbd7000fbdbdf25e0000001000000000000000000000000e00000010000000000000000000000004e24fff74e2200000200200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff010000000000000000000000000001000004d33c000000e000000100000000000000000000000001000000000000000800000000000000060000000000000096676a00000000005b22000000000000020000000000000008000000000000006106000000000000e60000000000000001000000000000800400000000000000ff0700000000000006000000000000800500000025bd7000033500000200020f000000000000000008001d000500000014000e00ffffffff0000000000000000000000000c0015"], 0x118}, 0x1, 0x0, 0x0, 0xc008040}, 0x4000010) 3m45.530873256s ago: executing program 33 (id=788): timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x0, @thr={&(0x7f00000000c0), 0x0}}, &(0x7f0000bbdffc)=0x0) timer_settime(r0, 0x1, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) ioctl$USBDEVFS_CLAIMINTERFACE(r1, 0x8004550f, &(0x7f0000000040)=0xfffffff7) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000280)='./file0\x00', 0x8080, &(0x7f0000000140)=ANY=[@ANYRESHEX=r1, @ANYRESHEX=0x0], 0x3, 0x232, &(0x7f0000000880)="$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") r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0xe9) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x8c, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0xff, 0x0}}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) getdents(r2, 0xfffffffffffffffd, 0xbb) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = syz_io_uring_setup(0xec4, &(0x7f0000000540)={0x0, 0x91d, 0x800, 0x3, 0x34a}, &(0x7f0000000240)=0x0, &(0x7f0000000200)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) io_uring_enter(r7, 0x5fb, 0xe876, 0x3, &(0x7f0000000040)={[0xfffffffffffffffc]}, 0x8) r9 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, 0x0, 0x0) signalfd(r2, &(0x7f00000001c0)={[0x9]}, 0x8) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r4, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 5.386512543s ago: executing program 0 (id=2470): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xa00, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd00}, 0x48) 4.731042121s ago: executing program 0 (id=2473): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000018c0)=@raw={'raw\x00', 0x8, 0x3, 0x540, 0x0, 0x11, 0x148, 0x340, 0x0, 0x4a8, 0x2a8, 0x2a8, 0x4a8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @fd={0x2, 0x0, r1}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, '\x00', {0x7}}}}, {{@uncond, 0x0, 0x128, 0x168, 0x0, {}, [@common=@unspec=@physdev={{0x68}, {'veth1_to_bridge\x00', {}, 'erspan0\x00', {0xff}, 0x4, 0x1e}}, @common=@osf={{0x50}, {'syz0\x00', 0x0, 0xd, 0x0, 0x2}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x5, 0x3, {0xff}}}}], {{'\x00', 0x0, 0x70, 0x98, 0x0, {0x100000000000}}, {0x28}}}}, 0x5a0) 4.567808536s ago: executing program 3 (id=2474): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f0000000200)=0x8) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) mount_setattr(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x1b62016ae2503652, &(0x7f0000000300)={0x0, 0xa9aecef1f21cb6c2, 0xa0000}, 0x20) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x1, @loopback, 0x3ff}, 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) unshare(0xc000400) socket$unix(0x1, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r2 = syz_io_uring_setup(0x10d2, &(0x7f0000000340)={0x0, 0x6bf6, 0x100, 0x5, 0x12}, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r2, 0x47bc, 0x0, 0x0, 0x0, 0x0) 4.470710504s ago: executing program 0 (id=2476): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0xe8) getdents(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5b67000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0x9, 0x3}, 0x0, 0xa88, 0x8406, 0x9, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0xfffffffc, 0x0, 0x2}, 0x10) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2, 0x4}, 0x10) recvmmsg(r5, 0x0, 0x0, 0x40, &(0x7f00000005c0)={0x0, 0x989680}) r6 = syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x2010410, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r6, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x220, 0x0, 0x43, 0xa0, 0xd8, 0x98, 0x188, 0x178, 0x178, 0x188, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0xffffffff, 'veth0_vlan\x00', 'bond0\x00', {0xff}, {}, 0x0, 0x2}, 0x12a, 0xb8, 0xd8, 0x0, {0x0, 0x7a010000}, [@common=@socket0={{0x20}}, @inet=@rpfilter={{0x28}, {0x3}}]}, @unspec=@TRACE={0x20}}, {{@ip={@loopback, @multicast1, 0xffffffff, 0xffffff00, 'bond0\x00', 'syzkaller1\x00', {}, {0xff}, 0x1d, 0x1, 0xe}, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x3, 0x1, "7a7d0d9452729a5afa385120281f126a6bc52700"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280) r8 = creat(&(0x7f0000000040)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000001c0)=0x0) io_submit(r9, 0x2, &(0x7f00000003c0)=[0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xe, r3, 0x0, 0x0, 0xc, 0x0, 0x0, r8}]) r10 = socket(0x10, 0x3, 0x0) write(r10, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000020000000000000800040001000000", 0x24) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="180200000000000000000000000000008510000001000000950000000000000018010000202073250000000000202020731af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000002885000000c700000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0xa1, &(0x7f0000000500)=""/161, 0x0, 0x9}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) 3.820816501s ago: executing program 5 (id=2478): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x404a0c4}, 0x0) 3.766993646s ago: executing program 2 (id=2479): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000100)={@private0, 0x74, r1}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000180)={[{@data_err_ignore}]}, 0x1, 0x50d, &(0x7f0000001bc0)="$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") socket$inet6_udplite(0xa, 0x2, 0x88) lsetxattr$security_capability(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080), &(0x7f0000000000)=@v3={0x3000000, [{0x7fffffff, 0xabda}, {0x3, 0x2}], 0xee00}, 0x18, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0xa2242, 0x4c) 3.687260233s ago: executing program 5 (id=2480): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x3, 0x0, &(0x7f0000000280)="9e36d4", 0x0, 0xffffffff, 0xe8030000, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x4004090) 3.652534517s ago: executing program 2 (id=2481): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x60}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) syz_open_dev$usbmon(&(0x7f0000000000), 0x6, 0x200) syz_io_uring_setup(0x88d, &(0x7f0000000300)={0x0, 0xbfc1, 0x8, 0xfefffffd, 0x1a6}, &(0x7f0000000000), &(0x7f0000000280)) r0 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) r2 = socket(0x200000000000011, 0x2, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000480), 0x11, 0x5aa, &(0x7f00000007c0)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x51) fallocate(r4, 0x0, 0x9, 0x10001) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r5, 0x0) r6 = epoll_create1(0x0) r7 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x1003ffffffc]}, 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000140)={0x10000001}) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21}, &(0x7f0000bbdffc)=0x0) timer_settime(r8, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) copy_file_range(r4, 0x0, r4, &(0x7f00000000c0)=0x863, 0x863, 0x0) sendmsg$NL80211_CMD_START_SCHED_SCAN(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9c000000", @ANYRES16=r3, @ANYBLOB="000025bd7000fddbdf254b00000034002c800800000004000000250000000900000008000000050000000800000004000000080000000400000008000000030000004c002d800a00000001010101010100000a00000001010101010100001600000200cb9a05b182fcbf53d609075108da9a0792a00004e410df0a0000000a020202020200000a00000002020202020200000500f60003"], 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x4000) bind$packet(r2, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x86, &(0x7f0000000180)=ANY=[@ANYBLOB="0180c241dc0ebbbbbbbbbbbb08004500007800000002"], 0x0) 3.530452297s ago: executing program 5 (id=2483): socket$packet(0x11, 0x2, 0x300) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b82, 0x0, @perf_bp={0x0, 0x1}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x6, 0x7, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf40000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4040001) recvmsg$unix(0xffffffffffffffff, 0x0, 0x10102) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f00000000c0)={r3, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}}, 0x10) 3.444846255s ago: executing program 2 (id=2484): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="6400000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e657400000014000780080006400000000008001340"], 0x64}}, 0x24000800) 3.38564426s ago: executing program 0 (id=2485): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000100)=ANY=[], 0x14}}, 0x0) getpgrp(0xffffffffffffffff) gettid() getpgrp(0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000028c0)) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) set_mempolicy(0x4005, 0x0, 0x9) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_io_uring_setup(0x88d, &(0x7f0000000300)={0x0, 0xd54b, 0x8, 0xfefffffd, 0x1a6}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0xc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1000, 0x8, 0x100, 0x3, 0x0, 0x3}) io_submit(0x0, 0x0, 0x0) r8 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x25, 0x5, 0x0, 0x0, 0x0, 0x1000000009, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xef, 0x3d27}, 0x400, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x8, 0xffffffffffffffff, 0x3) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0x47f6, 0x0, 0x4, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x20040000) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000e80)=@filter={'filter\x00', 0x42, 0x4, 0x460, 0xffffffff, 0x260, 0x0, 0x2f8, 0xffffffff, 0xffffffff, 0x3c8, 0x3c8, 0x3c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, '\x00', 'wlan0\x00', {}, {0xff}, 0x84, 0x2, 0x2}, 0x0, 0x220, 0x260, 0x0, {0x100000000000000}, [@common=@inet=@sctp={{0x148}, {[0x4e20, 0x4e22], [0x4e21, 0x4e24], [0x4, 0x8, 0x7f, 0x7, 0x1, 0x7, 0x1ff, 0x9, 0xab2, 0x2, 0x300000, 0x5, 0x9, 0x1, 0x9, 0xcd4, 0x7, 0xc59, 0x4, 0x3, 0xffffffff, 0xb87d, 0x5b000000, 0x6, 0x1, 0x6c7f, 0x9, 0x0, 0x9, 0x9, 0x8, 0x0, 0x80000001, 0x9, 0x200, 0x71e5e785, 0xfffffbff, 0x19, 0xf6b, 0xab19, 0x81, 0x9, 0xf4, 0x9, 0x2, 0x2, 0x3, 0x1, 0x7, 0x5, 0xcd, 0x6, 0x8f, 0x9, 0x5, 0x4b7d, 0x9, 0x1, 0x7, 0x6, 0x4, 0x6, 0x2, 0xfaa0], 0x0, [{0x5, 0x2, 0xf8}, {0x29, 0x7f, 0x1}, {0x4, 0x9, 0x10}, {0xf, 0x5, 0x1}], 0x4000000, 0x7, 0x1}}, @common=@unspec=@physdev={{0x68}, {'vlan1\x00', {0xff}, 'ip6gre0\x00', {}, 0x17}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x7, 0xd0, {0x9}}}}, {{@ip={@loopback, @rand_addr=0x64010101, 0xffffff00, 0xff000000, 'geneve0\x00', 'macvlan0\x00', {0xff}, {}, 0x2e, 0x0, 0x4}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}, {{@ip={@private=0xa010101, @loopback, 0xffffff00, 0xff000000, 'dvmrp1\x00', 'dvmrp0\x00', {}, {}, 0x5c, 0x0, 0x21}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xd, 0x8, [0x35, 0x27, 0x3d, 0x16, 0x13, 0xe, 0x33, 0x2f, 0x2d, 0x39, 0x3f, 0x20, 0x28, 0x18, 0x22, 0x12], 0x0, 0x0, 0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4c0) syz_clone3(&(0x7f0000002940)={0x0, &(0x7f0000000580), &(0x7f0000002740), &(0x7f0000002780), {0x2a}, &(0x7f00000027c0)=""/149, 0x95, &(0x7f0000002880)=""/27, &(0x7f0000002900), 0x0, {r0}}, 0x58) socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) 3.371294662s ago: executing program 3 (id=2486): openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x80000000000008, &(0x7f0000000180)="8c", 0x1) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xc, 0x0, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, 0x0, &(0x7f00000000c0)) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0xa310, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="6c0100001000130700000000fcdbdf25640101010000000000000000000000007f00000100000000000000000000000000000020001d00"/64, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffff7f000001000000fe320000000000000000000000000000000000000000000000000080ffffff000000000000fdffffffffffffff080000000000000001000000000000000900000000000000ffffff7f0000000042050000000000003b00000000000000fdffffffffffff7ffcffffffffffffffe2eb0000000000000200000000000000010000002cbd7000003500000a00040050000000000000001c00040007004e244e200000ac14142e00000000000000000000000060001200726663343130362867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000060"], 0x16c}, 0x1, 0x0, 0x0, 0x4000880}, 0x0) 3.353913953s ago: executing program 5 (id=2487): r0 = socket(0x28, 0x801, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv4_newroute={0x34, 0x1a, 0x1, 0x70bd2c, 0x0, {0x2, 0x20, 0x20, 0x0, 0x0, 0x4, 0x0, 0x7}, [@RTA_IIF={0x8, 0x3, r3}, @RTA_DST={0x8, 0x1, @multicast1}, @RTA_SRC={0x8, 0x2, @loopback}]}, 0x34}, 0x1, 0x0, 0x0, 0x24048000}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtaction={0x78, 0x30, 0x51b, 0x0, 0x0, {}, [{0x64, 0x1, [@m_skbmod={0x60, 0x1, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_SMAC={0x9, 0x4, @multicast}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}]}]}, 0x78}}, 0x0) connect$vsock_stream(r0, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r5, &(0x7f0000000140)=[{{&(0x7f0000000080)={0xa, 0x4e22, 0x8, @dev={0xfe, 0x80, '\x00', 0xc}, 0x6}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000100)='\n', 0x1}], 0x1}}], 0x1, 0x4002000) sendmsg$inet(r5, &(0x7f0000000700)={&(0x7f0000000c80)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10, &(0x7f0000000740)=[{&(0x7f0000000040)='#', 0x1}], 0x1}, 0xc851) shutdown(r5, 0x1) syz_open_dev$usbfs(0x0, 0x2, 0x0) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_DEV(r9, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002dbd7000fddbdf251b00000008000300", @ANYRES32=r8], 0x2c}, 0x1, 0x0, 0x0, 0x4005}, 0x4008044) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000200)={0x0, 0x6, 0x10}, 0xc) shutdown(r0, 0x1) syz_emit_ethernet(0x3e, &(0x7f0000000080)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}, @void, {@ipv6={0x86dd, @generic={0xc, 0x6, "370c89", 0x8, 0x2b, 0x1, @dev={0xfe, 0x80, '\x00', 0x25}, @local, {[@dstopts={0x2c}]}}}}}, 0x0) connect$inet(r0, &(0x7f00000004c0)={0x2, 0x4e20, @local}, 0x10) 3.227511024s ago: executing program 2 (id=2488): write(0xffffffffffffffff, &(0x7f00000000c0)="29000000140005b7", 0x8) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r1], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 3.026655472s ago: executing program 5 (id=2489): r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000000)={&(0x7f0000000100), 0x0}) r2 = dup3(r0, r1, 0x0) ioctl$MON_IOCX_GETX(r2, 0x4018920a, &(0x7f00000001c0)={&(0x7f00000012c0), &(0x7f0000003940)=""/4095, 0xfff}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x7, 0x34328, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0x2}, 0x10026, 0x10003, 0xfffffff8, 0x3, 0x100008, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sync() syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x800718, &(0x7f00000003c0)={[{@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x60}}, {@nobh}, {@resgid}, {@resuid}, {@nombcache}, {@noblock_validity}, {@usrquota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}]}, 0x22, 0x4a3, &(0x7f0000000980)="$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") 2.122939182s ago: executing program 0 (id=2490): bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) socket(0xa, 0x3, 0xff) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r3 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$IPSET_CMD_LIST(r3, 0x0, 0x4054) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) r4 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x8086e1, 0x0, 0x1, 0xfffffffd}, &(0x7f0000000500), &(0x7f0000000180)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x400, 0x1) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r4, 0x10, 0x0, 0x0) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="020300091b0000000000000000000000040003000000000000000000000000000000000000000000000000000000000005000600000000000a00000000000000fe8000000000000000000000000000bb00000000000000000400040000000000000000000000000000000000000000000000000000000000020001000000000000000000000000ff05000500000000000a00000000000000fe8896380000000000000001000000010000000000000000030007000000000002004e24ac14141f0000000000000000020013"], 0xd8}}, 0x0) 1.964597026s ago: executing program 2 (id=2491): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100595c0008000540000000020900020073797a310000000008000a40fffffffc3c002890454687e6f8fa84d700000100000000000000000000000a0000060900020073795cbf203fd8a0e82537bca5747a310000000009100003800c00008004000180040002805400000008000100"/172], 0xa0}, 0x1, 0x0, 0x0, 0x4000854}, 0x40) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f00000003c0)={0xfff9, 0xe388, 0xffff, 0x1}, 0x8) sendmsg$inet_sctp(r2, &(0x7f0000000140)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x4000891) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, 0x0, &(0x7f0000000040)) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r6, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEV(r3, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00032abd7000fbdbdf252b0000000a0001007770616e330000000a0001007770616e3000000008000200", @ANYRES32=r6, @ANYBLOB="0a00010400000000000000aaaaaaaaaaaa0800020000000000004000", @ANYRES32=r7, @ANYBLOB="0c0005000203aaaaaaaaaaaa0c0005000200aaaaaaaaaaaa08000200", @ANYRES32=r8, @ANYBLOB="08000200", @ANYRES32=r9, @ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x20004840}, 0x4814) r10 = socket(0x2a, 0x2, 0x0) getsockname$packet(r10, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newtfilter={0x2c, 0x2c, 0xd27, 0x0, 0x1000000, {0x0, 0x0, 0x0, r11, {0xfffa}, {}, {0x1c, 0xa}}, [@TCA_CHAIN={0x8, 0xb, 0x4}]}, 0x2c}}, 0x24000000) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.836022737s ago: executing program 6 (id=2492): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r3, 0x0, 0x0, 0x40002002, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000040)=0x9938) write$binfmt_misc(r2, &(0x7f0000000040), 0xffc1) 1.298456955s ago: executing program 6 (id=2493): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 64) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x154, r1, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x154}, 0x1, 0x0, 0x0, 0x4000}, 0x4) (async) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x6}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x814}, 0x4000) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4bad3c67e59e17e4}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r2, 0x400, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4000004) r3 = signalfd4(r0, &(0x7f00000004c0)={[0x8f2]}, 0x8, 0x80800) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r3, 0xc058534b, &(0x7f0000000500)={0xec5, 0x9, 0x8, 0x3, 0x7fffffff, 0x7}) (async, rerun: 64) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000580)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) (rerun: 64) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r4, &(0x7f0000000840)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000800)={&(0x7f0000000600)={0x200, r1, 0x8, 0x70bd2a, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xb2}, {0x6, 0x16, 0x1}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x80000000}, {0x6, 0x16, 0x9d}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x2}, {0x6, 0x16, 0xfff}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x8}, {0x6, 0x16, 0xfff7}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xb9cd}, {0x6, 0x16, 0x5}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x200}, {0x6, 0x16, 0x3}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1}, {0x6, 0x16, 0xff7f}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xd}, {0x6, 0x16, 0x8}, {0x5}}]}, 0x200}, 0x1, 0x0, 0x0, 0x8000}, 0x80) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000a40)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c00)={0x6, 0x1f, &(0x7f0000000880)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@jmp={0x5, 0x0, 0x8, 0x0, 0x5, 0x0, 0x10}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @jmp={0x5, 0x0, 0xb, 0x6, 0xa, 0xffffffffffffffc0, 0xfffffffffffffff0}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x2, 0x41, &(0x7f00000009c0)=""/65, 0x41000, 0x2, '\x00', r5, 0x25, r3, 0x8, &(0x7f0000000a80)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000ac0)={0x0, 0xf, 0x8000, 0x1}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000000b00)=[r4, r3, r4, r4], &(0x7f0000000b40)=[{0x5, 0x4, 0x2, 0x7}, {0x5, 0x5, 0x9}, {0x0, 0x3, 0xd, 0xa}, {0x4, 0x1, 0x0, 0x1}, {0x2, 0x3, 0xe, 0x1}, {0x1, 0x1, 0x2, 0xb}, {0x0, 0x4, 0xf, 0x6}, {0x2, 0x4, 0xd, 0x8}, {0x4, 0x4, 0x0, 0x1}], 0x10, 0x6}, 0x94) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000cc0), r4) (async, rerun: 64) r7 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (rerun: 64) getsockopt$IP_VS_SO_GET_DAEMON(r7, 0x0, 0x487, &(0x7f0000000d00), &(0x7f0000000d40)=0x30) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000d80)=[@in={0x2, 0x4e23, @local}, @in6={0xa, 0x4e24, 0x658d, @mcast1}, @in6={0xa, 0x4e23, 0x10000, @empty, 0x8001}, @in={0x2, 0x4e23, @multicast1}], 0x58) newfstatat(0xffffffffffffff9c, &(0x7f0000000e00)='./file0\x00', &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) fchown(r7, 0xee01, r8) ioctl$AUTOFS_DEV_IOCTL_VERSION(r4, 0xc0189371, &(0x7f0000000ec0)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x4010, r9, 0x56343000) (async) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, r0, 0xcc01e000) (async, rerun: 32) r10 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000f40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r10, &(0x7f0000001040)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001000)={&(0x7f0000000f80)={0x6c, r2, 0x20, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x6c}}, 0xc085) getpid() (async) sendmsg$NL80211_CMD_GET_MPP(r3, &(0x7f0000001180)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001140)={&(0x7f00000010c0)={0x44, r2, 0x8, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7f, 0x73}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x8081}, 0x44000) (async) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r10, &(0x7f0000001280)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x34, r2, 0x20, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x5f}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x7}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r11}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x200408c4) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_INFO(r12, &(0x7f0000001400)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x4b2875176714084d}, 0xc, &(0x7f00000013c0)={&(0x7f0000001300)={0xa8, r6, 0x300, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3ff}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_DEST={0x58, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@remote}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xa}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x20000000}, 0x2000c000) (async) setns(r9, 0x10000000) 1.297988775s ago: executing program 3 (id=2494): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x60}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) syz_open_dev$usbmon(&(0x7f0000000000), 0x6, 0x200) syz_io_uring_setup(0x88d, &(0x7f0000000300)={0x0, 0xbfc1, 0x8, 0xfefffffd, 0x1a6}, &(0x7f0000000000), &(0x7f0000000280)) r0 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) r2 = socket(0x200000000000011, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000480), 0x11, 0x5aa, &(0x7f00000007c0)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x51) fallocate(r3, 0x0, 0x9, 0x10001) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r4, 0x0) r5 = epoll_create1(0x0) r6 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x1003ffffffc]}, 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000140)={0x10000001}) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21}, &(0x7f0000bbdffc)=0x0) timer_settime(r7, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) copy_file_range(r3, 0x0, r3, &(0x7f00000000c0)=0x863, 0x863, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000080)={0x11, 0x800, r8, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x86, &(0x7f0000000180)=ANY=[@ANYBLOB="0180c241dc0ebbbbbbbbbbbb08004500007800000002"], 0x0) 1.250408929s ago: executing program 5 (id=2495): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0xe8) getdents(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5b67000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0x9, 0x3}, 0x0, 0xa88, 0x8406, 0x9, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0xfffffffc, 0x0, 0x2}, 0x10) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2, 0x4}, 0x10) recvmmsg(r5, 0x0, 0x0, 0x40, &(0x7f00000005c0)={0x0, 0x989680}) r6 = syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x2010410, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$eJzs3D1rW1cYB/AjWa6tlhZPhXbpoV3a5bb10qVDS3GhVNCSRCEv0zWWEyFFAl8NksmgOVM+RwhkCWQL+QL+DFmymYDx5Ck3OJKs2NixE0dy4vx+ix6e/z1X5+jARVy9bP5+91ZjNUtW004ozRdC8Y/QDzuFsBCKYaQffnpwZfvOxavX/v2zUlm6MDvsx/jVd4+v377//ZPOF5cf7nYKIYStxWcbX298s/ni0s16FutZbLU7MY3L7XYnXW7W4ko9ayQx/t+spVkt1ltZbW1fvtpsj5861LIspq1ebNR6sdOOnbVeTG+k9VZMkiTOB06lem8nz8NWnuf5XD/kef62JyhMZl5Myyn3n4/c3kU97l5Nn/e71W518DjI//6nsvRLfGVhPGq7263O7OW/DvK4P58Nnw/zxUPzz8KPPwzy3eyv/yoH8nJYmfzyAQAAAADgXErinkPv7yfJUfmgeu3zgQP370vh29K4MzP5pQAAAABHyHrrjbS5Mrs2KJq1Myvmwv7Ob4+GUzxu+M9Pjz9mQsWXwyK843nKIYSjjymGM9+U6RSj75EPO6PfF5xseOl9TaP8gbwao2I+HBaVw3pjbjqbAgAAnC/jN/0nHlKc6IQAAAAAAAAAAAAAAAAAAADgEzSNPzM76zUCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALzJywAAAP//ixdW4w==") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r6, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x220, 0x0, 0x43, 0xa0, 0xd8, 0x98, 0x188, 0x178, 0x178, 0x188, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0xffffffff, 'veth0_vlan\x00', 'bond0\x00', {0xff}, {}, 0x0, 0x2}, 0x12a, 0xb8, 0xd8, 0x0, {0x0, 0x7a010000}, [@common=@socket0={{0x20}}, @inet=@rpfilter={{0x28}, {0x3}}]}, @unspec=@TRACE={0x20}}, {{@ip={@loopback, @multicast1, 0xffffffff, 0xffffff00, 'bond0\x00', 'syzkaller1\x00', {}, {0xff}, 0x1d, 0x1, 0xe}, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x3, 0x1, "7a7d0d9452729a5afa385120281f126a6bc52700"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280) r8 = creat(&(0x7f0000000040)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000001c0)=0x0) io_submit(r9, 0x2, &(0x7f00000003c0)=[0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xe, r3, &(0x7f0000000340), 0x0, 0xc, 0x0, 0x0, r8}]) r10 = socket(0x10, 0x3, 0x0) write(r10, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000020000000000000800040001000000", 0x24) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="180200000000000000000000000000008510000001000000950000000000000018010000202073250000000000202020731af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000002885000000c700000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0xa1, &(0x7f0000000500)=""/161, 0x0, 0x9}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) 1.204117643s ago: executing program 0 (id=2496): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f0000000200)=0x8) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) mount_setattr(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x1b62016ae2503652, &(0x7f0000000300)={0x0, 0xa9aecef1f21cb6c2, 0xa0000}, 0x20) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x1, @loopback, 0x3ff}, 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) unshare(0xc000400) socket$unix(0x1, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r2 = syz_io_uring_setup(0x10d2, &(0x7f0000000340)={0x0, 0x6bf6, 0x100, 0x5, 0x12}, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r2, 0x47bc, 0x0, 0x0, 0x0, 0x0) 1.201310963s ago: executing program 6 (id=2497): socket$packet(0x11, 0x2, 0x300) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b82, 0x0, @perf_bp={0x0, 0x1}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x6, 0x7, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf40000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4040001) recvmsg$unix(0xffffffffffffffff, 0x0, 0x10102) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f00000000c0)={r3, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}}, 0x10) 1.200174633s ago: executing program 3 (id=2498): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="6400000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e657400000014000780080006400000000008001340"], 0x64}}, 0x24000800) 1.116591141s ago: executing program 3 (id=2499): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000600)={'#! ', './file0'}, 0xb) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000580), 0x1, 0x55e, &(0x7f0000001bc0)="$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") r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0xa0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000600)={0x23e3, 0x0, 0xd, 0x2}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1b459d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffefffe, 0x1, @perf_bp={0x0, 0x1}, 0x6025, 0x4005, 0xb, 0x0, 0x5, 0x7, 0xb, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x42, 0x62) write$P9_RREADLINK(r2, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) rename(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)='./file0\x00') 1.106888612s ago: executing program 6 (id=2500): getpid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000001200)='./file0\x00', 0x1000000, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x1, 0x11fb, &(0x7f0000002440)="$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") truncate(&(0x7f0000000000)='./file1\x00', 0xffff) 439.3349ms ago: executing program 2 (id=2501): socket(0x10, 0x803, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sigaltstack(&(0x7f0000000000)={0xffffffffffffffff, 0x0, 0xfffffffffffffefa}, &(0x7f0000000080)={&(0x7f0000000040)}) r1 = epoll_create1(0x80000) epoll_pwait2(r1, &(0x7f0000000540)=[{}], 0x1, 0x0, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xff2e) syz_emit_ethernet(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r2 = syz_io_uring_setup(0x8d6, &(0x7f00000000c0)={0x0, 0x0, 0x400, 0x0, 0x379}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x47ba, 0x3e82, 0x60, 0x0, 0x0) 418.046593ms ago: executing program 3 (id=2502): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value=0xfff3}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) 395.410365ms ago: executing program 6 (id=2503): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r3, 0x0, 0x0, 0x40002002, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000040)=0x9938) write$binfmt_misc(r2, &(0x7f0000000040), 0xffc1) 0s ago: executing program 6 (id=2504): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4001a, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) unshare(0x2c040480) r3 = semget$private(0x0, 0x4000, 0xa) semctl$SETALL(r3, 0x0, 0x11, &(0x7f0000000080)) kernel console output (not intermixed with test programs): ct_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 233.972857][ T9778] audit: audit_lost=34 audit_rate_limit=0 audit_backlog_limit=64 [ 234.010777][ T9778] audit: backlog limit exceeded [ 234.015854][ T9778] audit: audit_backlog=65 > audit_backlog_limit=64 [ 234.022433][ T9778] audit: audit_lost=35 audit_rate_limit=0 audit_backlog_limit=64 [ 234.029033][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 234.030541][ T9778] audit: backlog limit exceeded [ 234.119197][ T9649] hsr_slave_0: entered promiscuous mode [ 234.127207][ T9649] hsr_slave_1: entered promiscuous mode [ 234.133708][ T9649] debugfs: 'hsr0' already exists in 'hsr' [ 234.139627][ T9649] Cannot create hsr debugfs directory [ 234.253106][ T9786] loop6: detected capacity change from 0 to 128 [ 234.827462][ T9794] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1728'. [ 234.832728][ T9801] netlink: 'syz.2.1729': attribute type 8 has an invalid length. [ 234.865461][ T9801] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1729'. [ 235.111213][ T9821] batadv_slave_1: entered promiscuous mode [ 235.138563][ T9818] batadv_slave_1: left promiscuous mode [ 235.312470][ T9830] veth0_virt_wifi: entered promiscuous mode [ 235.329162][ T9830] veth0_virt_wifi: left promiscuous mode [ 235.506871][ T9835] loop3: detected capacity change from 0 to 2048 [ 235.539321][ T9839] žÿ: renamed from team_slave_1 (while UP) [ 235.558458][ T9835] EXT4-fs: inline encryption not supported [ 235.620133][ T9835] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 235.797721][ T9649] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 235.806247][ T9875] netlink: 'syz.5.1742': attribute type 8 has an invalid length. [ 235.818837][ T9875] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1742'. [ 235.832726][ T9873] loop6: detected capacity change from 0 to 128 [ 235.848010][ T9649] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 235.922832][ T9873] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 235.952870][ T9649] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 235.954666][ T9873] ext4 filesystem being mounted at /176/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 236.090262][ T9649] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 236.182591][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.236047][ T9649] 8021q: adding VLAN 0 to HW filter on device bond0 [ 236.377705][ T9649] 8021q: adding VLAN 0 to HW filter on device team0 [ 236.409222][ T9907] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9907 comm=syz.5.1744 [ 236.492592][ T9911] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1740'. [ 237.408607][ T5504] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.415761][ T5504] bridge0: port 1(bridge_slave_0) entered forwarding state [ 238.174427][ T5504] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.181705][ T5504] bridge0: port 2(bridge_slave_1) entered forwarding state [ 238.194583][ T9918] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9918 comm=syz.2.1747 [ 238.315335][ T9918] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1747'. [ 238.415410][ T9649] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 238.436885][ T6161] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 238.482581][ T9918] netlink: 'syz.2.1747': attribute type 10 has an invalid length. [ 238.491892][ T9918] team0: Port device netdevsim1 added [ 238.541251][ T9918] veth0_virt_wifi: entered promiscuous mode [ 238.587027][ T9918] veth0_virt_wifi: left promiscuous mode [ 238.606297][ T28] kauditd_printk_skb: 1114 callbacks suppressed [ 238.606311][ T28] audit: type=1400 audit(1771920256.555:10131): avc: denied { search } for pid=9926 comm="sed" name="resolv.conf" dev="tmpfs" ino=489 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 238.666094][ T9928] loop5: detected capacity change from 0 to 2048 [ 238.724411][ T28] audit: type=1400 audit(1771920256.595:10132): avc: denied { read } for pid=9926 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=514 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 238.813071][ T3299] loop5: p1 < > p2 p3 < p5 p6 > p4 [ 238.818296][ T3299] loop5: partition table partially beyond EOD, truncated [ 238.854913][ T28] audit: type=1400 audit(1771920256.595:10133): avc: denied { open } for pid=9926 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=514 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 238.898347][ T3299] loop5: p1 start 4278190080 is beyond EOD, truncated [ 238.923306][ T3299] loop5: p2 start 16908800 is beyond EOD, truncated [ 238.934138][ T9940] netlink: 300 bytes leftover after parsing attributes in process `syz.3.1751'. [ 238.949000][ T9922] audit: audit_backlog=65 > audit_backlog_limit=64 [ 238.965819][ T9922] audit: audit_lost=74 audit_rate_limit=0 audit_backlog_limit=64 [ 238.973994][ T3299] loop5: p5 start 16908800 is beyond EOD, truncated [ 238.989223][ T9649] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 238.996115][ T28] audit: type=1400 audit(1771920256.595:10134): avc: denied { getattr } for pid=9926 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=514 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 239.005347][ T9922] audit: backlog limit exceeded [ 239.039333][ T9941] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=9941 comm=syz.6.1748 [ 239.050472][ T9649] audit: audit_backlog=65 > audit_backlog_limit=64 [ 239.053183][ T9922] audit: audit_backlog=65 > audit_backlog_limit=64 [ 239.060766][ T28] audit: type=1400 audit(1771920256.605:10135): avc: denied { sys_module } for pid=9649 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 239.087275][ T9928] loop5: p1 < > p2 p3 < p5 p6 > p4 [ 239.092558][ T9928] loop5: partition table partially beyond EOD, truncated [ 239.100440][ T9928] loop5: p1 start 4278190080 is beyond EOD, truncated [ 239.132838][ T9928] loop5: p2 start 16908800 is beyond EOD, truncated [ 239.162615][ T9928] loop5: p5 start 16908800 is beyond EOD, truncated [ 239.496539][ T9649] veth0_vlan: entered promiscuous mode [ 239.511228][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 239.528922][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop5p6, 10) failed: No such file or directory [ 239.536969][ T9649] veth1_vlan: entered promiscuous mode [ 239.555416][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 239.755812][ T9649] veth0_macvtap: entered promiscuous mode [ 239.767356][ T9986] loop6: detected capacity change from 0 to 1024 [ 239.791592][ T9986] EXT4-fs: Ignoring removed orlov option [ 239.809968][ T9649] veth1_macvtap: entered promiscuous mode [ 239.861903][ T9986] EXT4-fs: Ignoring removed nobh option [ 239.875606][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 239.893949][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop5p6, 10) failed: No such file or directory [ 239.907359][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 239.956387][ T9649] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 239.975515][ T9986] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 240.049048][ T9649] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 240.081602][ T9997] xt_hashlimit: max too large, truncated to 1048576 [ 240.172487][ T9997] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 240.253225][ T53] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.283695][ T1885] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.368959][ T1885] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.406252][ T1885] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.504290][ T6161] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.118279][T10048] loop0: detected capacity change from 0 to 128 [ 241.560023][ T9971] syz.3.1754 (9971) used greatest stack depth: 7200 bytes left [ 241.958091][T10066] netlink: 'syz.2.1771': attribute type 58 has an invalid length. [ 241.983363][T10066] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1771'. [ 241.983539][T10065] xt_hashlimit: max too large, truncated to 1048576 [ 242.017000][T10062] netlink: 'syz.3.1770': attribute type 1 has an invalid length. [ 242.019350][T10065] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 242.362491][T10073] lo speed is unknown, defaulting to 1000 [ 242.389308][T10073] lo speed is unknown, defaulting to 1000 [ 242.570427][T10079] loop0: detected capacity change from 0 to 256 [ 242.676825][T10079] FAT-fs (loop0): Directory bread(block 64) failed [ 242.683463][T10079] FAT-fs (loop0): Directory bread(block 65) failed [ 242.690751][T10079] FAT-fs (loop0): Directory bread(block 66) failed [ 242.697512][T10079] FAT-fs (loop0): Directory bread(block 67) failed [ 242.704350][T10079] FAT-fs (loop0): Directory bread(block 68) failed [ 242.711024][T10079] FAT-fs (loop0): Directory bread(block 69) failed [ 242.717918][T10079] FAT-fs (loop0): Directory bread(block 70) failed [ 242.724573][T10079] FAT-fs (loop0): Directory bread(block 71) failed [ 242.731220][T10079] FAT-fs (loop0): Directory bread(block 72) failed [ 242.738058][T10079] FAT-fs (loop0): Directory bread(block 73) failed [ 242.936642][T10081] loop6: detected capacity change from 0 to 512 [ 242.950331][T10081] msdos: Unknown parameter '' [ 243.617307][ T28] kauditd_printk_skb: 1274 callbacks suppressed [ 243.617321][ T28] audit: type=1400 audit(1771920517.567:11241): avc: denied { read } for pid=10076 comm="syz.3.1777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 243.656529][T10087] loop5: detected capacity change from 0 to 128 [ 243.802637][T10072] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1775'. [ 243.815356][ T28] audit: type=1400 audit(1771920517.597:11242): avc: denied { module_request } for pid=10076 comm="syz.3.1777" kmod="netdev-wlan1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 244.279421][T10072] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1775'. [ 244.436977][ T28] audit: type=1400 audit(1771920517.607:11243): avc: denied { read write } for pid=10086 comm="syz.5.1778" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 244.648103][ T28] audit: type=1400 audit(1771920517.607:11244): avc: denied { read write open } for pid=10086 comm="syz.5.1778" path="/dev/loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 244.705137][T10095] audit: audit_backlog=65 > audit_backlog_limit=64 [ 244.770011][T10095] audit: audit_lost=132 audit_rate_limit=0 audit_backlog_limit=64 [ 244.810799][T10097] audit: audit_backlog=65 > audit_backlog_limit=64 [ 244.838380][T10095] audit: backlog limit exceeded [ 244.851927][ T28] audit: type=1400 audit(1771920517.607:11245): avc: denied { ioctl } for pid=10086 comm="syz.5.1778" path="/dev/loop5" dev="devtmpfs" ino=105 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 244.911777][T10097] audit: audit_lost=133 audit_rate_limit=0 audit_backlog_limit=64 [ 245.082410][T10102] netlink: 300 bytes leftover after parsing attributes in process `syz.2.1781'. [ 245.419316][T10108] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 245.877343][T10118] loop3: detected capacity change from 0 to 128 [ 246.404952][T10127] xt_hashlimit: max too large, truncated to 1048576 [ 246.443610][T10127] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 246.596122][T10145] sctp: [Deprecated]: syz.2.1790 (pid 10145) Use of int in maxseg socket option. [ 246.596122][T10145] Use struct sctp_assoc_value instead [ 247.220408][T10180] loop0: detected capacity change from 0 to 512 [ 247.270762][T10180] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 247.303242][T10180] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 247.319806][T10169] loop5: detected capacity change from 0 to 2048 [ 247.446060][ T9649] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.510672][T10169] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 247.600872][T10169] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1795'. [ 247.614701][T10193] loop0: detected capacity change from 0 to 256 [ 247.663311][T10193] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 247.674437][T10194] xt_hashlimit: max too large, truncated to 1048576 [ 247.690990][T10193] FAT-fs (loop0): Filesystem has been set read-only [ 247.701875][ T6159] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.706966][T10194] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 248.001069][T10199] 9p: Bad value for 'wfdno' [ 248.049099][T10202] loop5: detected capacity change from 0 to 128 [ 248.624315][ T28] kauditd_printk_skb: 985 callbacks suppressed [ 248.624329][ T28] audit: type=1400 audit(1771920522.577:12167): avc: denied { allowed } for pid=10211 comm="syz.3.1809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 248.691730][ T28] audit: type=1400 audit(1771920522.577:12168): avc: denied { recv } for pid=28 comm="kauditd" saddr=10.128.0.163 src=30036 daddr=10.128.0.192 dest=59620 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 248.717876][ T28] audit: type=1400 audit(1771920522.597:12169): avc: denied { recv } for pid=22 comm="ksoftirqd/1" saddr=10.128.0.163 src=30036 daddr=10.128.0.192 dest=59620 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 248.747612][ T28] audit: type=1400 audit(1771920522.607:12170): avc: denied { read write } for pid=10213 comm="syz.0.1810" name="usbmon6" dev="devtmpfs" ino=160 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 248.772570][ T28] audit: type=1400 audit(1771920522.607:12171): avc: denied { read open } for pid=10213 comm="syz.0.1810" path="/dev/usbmon6" dev="devtmpfs" ino=160 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 248.852936][ T28] audit: type=1400 audit(1771920522.607:12172): avc: denied { allowed } for pid=10213 comm="syz.0.1810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 248.918983][ T28] audit: type=1400 audit(1771920522.607:12173): avc: denied { create } for pid=10213 comm="syz.0.1810" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 248.977725][T10224] lo speed is unknown, defaulting to 1000 [ 249.002255][ T28] audit: type=1400 audit(1771920522.607:12174): avc: denied { map } for pid=10213 comm="syz.0.1810" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=26324 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 249.011094][ T6161] audit: audit_backlog=65 > audit_backlog_limit=64 [ 249.035032][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 249.048051][T10224] lo speed is unknown, defaulting to 1000 [ 249.113009][T10230] loop3: detected capacity change from 0 to 256 [ 249.137324][T10230] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 249.160591][T10230] FAT-fs (loop3): Filesystem has been set read-only [ 249.532725][T10236] dummy0: entered promiscuous mode [ 249.543975][T10236] dummy0: left promiscuous mode [ 249.965674][T10249] loop6: detected capacity change from 0 to 128 [ 250.609207][T10255] loop0: detected capacity change from 0 to 1024 [ 250.943698][T10268] loop5: detected capacity change from 0 to 256 [ 250.972062][T10268] FAT-fs (loop5): error, fat_free_clusters: deleting FAT entry beyond EOF [ 251.001261][T10268] FAT-fs (loop5): Filesystem has been set read-only [ 251.085248][T10270] batadv_slave_1: entered promiscuous mode [ 251.136755][T10260] batadv_slave_1: left promiscuous mode [ 251.254676][T10273] loop6: detected capacity change from 0 to 128 [ 251.891161][T10277] loop5: detected capacity change from 0 to 128 [ 251.919664][T10284] FAULT_INJECTION: forcing a failure. [ 251.919664][T10284] name failslab, interval 1, probability 0, space 0, times 0 [ 251.938487][T10284] CPU: 1 UID: 0 PID: 10284 Comm: syz.0.1832 Tainted: G W syzkaller #0 PREEMPT(full) [ 251.938572][T10284] Tainted: [W]=WARN [ 251.938579][T10284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 251.938599][T10284] Call Trace: [ 251.938607][T10284] [ 251.938616][T10284] __dump_stack+0x1d/0x30 [ 251.938707][T10284] dump_stack_lvl+0x95/0xd0 [ 251.938732][T10284] dump_stack+0x15/0x1b [ 251.938833][T10284] should_fail_ex+0x263/0x280 [ 251.938853][T10284] should_failslab+0x8c/0xb0 [ 251.938958][T10284] __kmalloc_cache_node_noprof+0x6b/0x480 [ 251.939025][T10284] ? init_rescuer+0x93/0x290 [ 251.939124][T10284] init_rescuer+0x93/0x290 [ 251.939148][T10284] ? get_page_from_freelist+0x1180/0x1aa0 [ 251.939196][T10284] alloc_workqueue_noprof+0x142e/0x15c0 [ 251.939276][T10284] nci_register_device+0x11e/0x510 [ 251.939343][T10284] virtual_ncidev_open+0xca/0x130 [ 251.939362][T10284] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 251.939378][T10284] misc_open+0x1df/0x220 [ 251.939402][T10284] chrdev_open+0x2eb/0x3a0 [ 251.939469][T10284] do_dentry_open+0x4ca/0xa90 [ 251.939491][T10284] ? __pfx_chrdev_open+0x10/0x10 [ 251.939508][T10284] vfs_open+0x37/0x1e0 [ 251.939527][T10284] path_openat+0x1b70/0x2050 [ 251.939620][T10284] ? _parse_integer_limit+0x170/0x190 [ 251.939658][T10284] ? kstrtouint+0x76/0xc0 [ 251.939687][T10284] do_file_open+0x16c/0x290 [ 251.939799][T10284] do_sys_openat2+0x94/0x130 [ 251.939900][T10284] __x64_sys_openat+0xf2/0x120 [ 251.939980][T10284] x64_sys_call+0x1e39/0x3020 [ 251.940004][T10284] do_syscall_64+0x12c/0x370 [ 251.940033][T10284] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.940128][T10284] RIP: 0033:0x7fea217bc629 [ 251.940148][T10284] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 251.940166][T10284] RSP: 002b:00007fea20217028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 251.940187][T10284] RAX: ffffffffffffffda RBX: 00007fea21a35fa0 RCX: 00007fea217bc629 [ 251.940202][T10284] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 251.940285][T10284] RBP: 00007fea20217090 R08: 0000000000000000 R09: 0000000000000000 [ 251.940298][T10284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 251.940309][T10284] R13: 00007fea21a36038 R14: 00007fea21a35fa0 R15: 00007fff9fd925e8 [ 251.940361][T10284] [ 251.940370][T10284] workqueue: Failed to allocate a rescuer for wq "nfc2_nci_cmd_wq" [ 252.197339][T10277] FAT-fs (loop5): bogus number of reserved sectors [ 252.263358][T10277] FAT-fs (loop5): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 252.278810][T10277] FAT-fs (loop5): Can't find a valid FAT filesystem [ 252.509937][T10277] netlink: 188 bytes leftover after parsing attributes in process `syz.5.1830'. [ 252.521317][T10277] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1830'. [ 252.543027][T10277] netlink: 'syz.5.1830': attribute type 2 has an invalid length. [ 252.742170][T10277] netlink: 172 bytes leftover after parsing attributes in process `syz.5.1830'. [ 252.854083][T10277] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.028462][T10277] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.092008][T10305] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.094402][T10277] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.138531][T10301] lo speed is unknown, defaulting to 1000 [ 253.172956][T10305] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.181942][T10277] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.232876][T10301] lo speed is unknown, defaulting to 1000 [ 253.262259][T10305] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 253.338731][ T5497] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.350705][ T5497] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.358684][T10316] loop0: detected capacity change from 0 to 512 [ 253.369682][ T5497] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.393613][ T5497] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.422501][T10316] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 253.471626][T10316] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 253.615175][T10332] macsec0: entered promiscuous mode [ 253.633938][ T28] kauditd_printk_skb: 810 callbacks suppressed [ 253.634030][ T28] audit: type=1400 audit(1771920527.587:12909): avc: denied { read } for pid=10312 comm="syz.0.1843" path="socket:[26644]" dev="sockfs" ino=26644 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 253.642552][T10332] macsec0: entered allmulticast mode [ 253.674746][ T28] audit: type=1400 audit(1771920527.617:12910): avc: denied { read } for pid=10312 comm="syz.0.1843" path="socket:[26644]" dev="sockfs" ino=26644 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 253.704618][T10332] veth1_macvtap: entered allmulticast mode [ 253.717416][T10334] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1846'. [ 253.721704][ T28] audit: type=1400 audit(1771920527.627:12911): avc: denied { read } for pid=10312 comm="syz.0.1843" path="socket:[26644]" dev="sockfs" ino=26644 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 253.758524][ T28] audit: type=1400 audit(1771920527.657:12912): avc: denied { read } for pid=10312 comm="syz.0.1843" path="socket:[26644]" dev="sockfs" ino=26644 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 253.787319][ T28] audit: type=1400 audit(1771920527.657:12913): avc: denied { create } for pid=10330 comm="syz.5.1846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 253.861261][ T28] audit: type=1400 audit(1771920527.657:12914): avc: denied { create } for pid=10330 comm="syz.5.1846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 253.892906][ T28] audit: type=1400 audit(1771920527.657:12915): avc: denied { write } for pid=10330 comm="syz.5.1846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 253.914977][ T28] audit: type=1400 audit(1771920527.657:12916): avc: denied { read } for pid=10330 comm="syz.5.1846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 253.944765][ T28] audit: type=1400 audit(1771920527.657:12917): avc: denied { setattr } for pid=10312 comm="syz.0.1843" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 253.984809][ T28] audit: type=1400 audit(1771920527.667:12919): avc: denied { read } for pid=10312 comm="syz.0.1843" path="socket:[26644]" dev="sockfs" ino=26644 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 254.028793][T10349] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1851'. [ 254.039018][T10348] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1850'. [ 254.364238][T10359] loop5: detected capacity change from 0 to 8192 [ 254.424652][T10361] loop6: detected capacity change from 0 to 256 [ 254.424913][ T9649] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.502960][T10361] FAT-fs (loop6): error, fat_free_clusters: deleting FAT entry beyond EOF [ 254.523805][T10361] FAT-fs (loop6): Filesystem has been set read-only [ 254.587766][T10359] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1855'. [ 254.782455][T10378] netlink: 'syz.6.1860': attribute type 1 has an invalid length. [ 254.830571][T10373] geneve2: entered allmulticast mode [ 254.884840][ T6159] FAT-fs (loop5): error, invalid access to FAT (entry 0x0000e1b1) [ 254.905185][ T6159] FAT-fs (loop5): Filesystem has been set read-only [ 255.426685][T10399] xt_hashlimit: max too large, truncated to 1048576 [ 255.453557][T10399] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 255.479502][T10401] batadv_slave_1: entered promiscuous mode [ 255.545140][T10396] batadv_slave_1: left promiscuous mode [ 255.565423][T10365] kexec: Could not allocate control_code_buffer [ 255.646366][T10408] loop0: detected capacity change from 0 to 256 [ 255.664303][T10408] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 255.686304][T10408] FAT-fs (loop0): Filesystem has been set read-only [ 256.014724][T10426] loop5: detected capacity change from 0 to 512 [ 256.042910][T10426] EXT4-fs: Invalid want_extra_isize 56024 [ 256.276531][T10434] loop6: detected capacity change from 0 to 512 [ 256.314319][T10434] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 256.318820][T10435] batman_adv: batadv0: Adding interface: gretap1 [ 256.362824][T10435] batman_adv: batadv0: Interface activated: gretap1 [ 256.627878][T10446] netlink: 220 bytes leftover after parsing attributes in process `syz.3.1882'. [ 257.150629][T10469] loop5: detected capacity change from 0 to 1024 [ 257.173834][T10477] loop3: detected capacity change from 0 to 2048 [ 257.183417][T10476] batadv_slave_1: entered promiscuous mode [ 257.218698][T10469] EXT4-fs: Ignoring removed mblk_io_submit option [ 257.268494][T10469] ext3: Unknown parameter 'subj_type' [ 257.289032][T10477] lo speed is unknown, defaulting to 1000 [ 257.310779][T10460] batadv_slave_1: left promiscuous mode [ 257.317191][T10477] lo speed is unknown, defaulting to 1000 [ 257.518926][T10480] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1889'. [ 257.756566][T10490] netlink: 'syz.6.1891': attribute type 8 has an invalid length. [ 257.794873][T10490] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1891'. [ 257.840867][T10482] lo speed is unknown, defaulting to 1000 [ 258.365251][T10497] netlink: 'syz.0.1893': attribute type 27 has an invalid length. [ 258.437499][T10498] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1893'. [ 258.793984][ T28] kauditd_printk_skb: 841 callbacks suppressed [ 258.793999][ T28] audit: type=1400 audit(1771920532.747:13757): avc: denied { recv } for pid=10485 comm="syz.3.1892" saddr=10.128.0.163 src=30036 daddr=10.128.0.192 dest=59620 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 258.844070][T10482] lo speed is unknown, defaulting to 1000 [ 258.957123][ T28] audit: type=1400 audit(1771920532.747:13758): avc: denied { recv } for pid=10485 comm="syz.3.1892" saddr=10.128.0.163 src=30036 daddr=10.128.0.192 dest=59620 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 259.084365][T10497] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.091671][T10497] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.129454][ T28] audit: type=1400 audit(1771920532.747:13759): avc: denied { recv } for pid=10485 comm="syz.3.1892" saddr=10.128.0.163 src=30036 daddr=10.128.0.192 dest=59620 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 259.233055][ T28] audit: type=1400 audit(1771920532.867:13760): avc: denied { recv } for pid=10485 comm="syz.3.1892" saddr=10.128.0.163 src=30036 daddr=10.128.0.192 dest=59620 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 259.316582][ T28] audit: type=1400 audit(1771920532.867:13761): avc: denied { recv } for pid=10485 comm="syz.3.1892" saddr=10.128.0.163 src=30036 daddr=10.128.0.192 dest=59620 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 259.369724][T10497] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 259.389843][T10497] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 259.404811][ T28] audit: type=1400 audit(1771920532.867:13762): avc: denied { recv } for pid=10485 comm="syz.3.1892" saddr=10.128.0.163 src=30036 daddr=10.128.0.192 dest=59620 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 259.479687][ T28] audit: type=1400 audit(1771920532.877:13763): avc: denied { read write } for pid=6161 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 259.522745][ T28] audit: type=1400 audit(1771920532.877:13764): avc: denied { open } for pid=6161 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 259.552381][ T28] audit: type=1400 audit(1771920532.877:13765): avc: denied { ioctl } for pid=6161 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=106 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 259.580520][ T28] audit: type=1400 audit(1771920533.217:13766): avc: denied { create } for pid=10504 comm="syz.6.1895" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 259.619087][T10499] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1893'. [ 259.648334][T10465] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.669593][T10465] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.736060][T10502] lo speed is unknown, defaulting to 1000 [ 259.741988][T10465] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.767497][T10482] Process accounting resumed [ 259.781953][T10465] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.833713][T10502] lo speed is unknown, defaulting to 1000 [ 259.908657][T10522] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1900'. [ 259.955399][T10522] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1900'. [ 259.973502][T10525] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1902'. [ 259.985799][T10526] batadv_slave_1: entered promiscuous mode [ 259.987668][T10528] loop6: detected capacity change from 0 to 1024 [ 260.059647][T10517] batadv_slave_1: left promiscuous mode [ 260.077496][T10531] netlink: 'syz.3.1904': attribute type 1 has an invalid length. [ 260.100168][T10528] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 260.141463][T10528] ext4 filesystem being mounted at /211/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 260.229272][ T6161] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 260.305730][T10531] 8021q: adding VLAN 0 to HW filter on device bond4 [ 260.319541][T10545] netlink: 'syz.2.1907': attribute type 8 has an invalid length. [ 260.329197][T10545] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1907'. [ 260.963602][T10564] batadv_slave_1: entered promiscuous mode [ 260.970046][T10561] batadv_slave_1: left promiscuous mode [ 261.154351][T10572] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1918'. [ 261.155772][T10574] netlink: 'syz.3.1919': attribute type 58 has an invalid length. [ 261.175090][T10574] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1919'. [ 261.444082][T10581] xt_hashlimit: max too large, truncated to 1048576 [ 261.475267][T10581] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 261.527727][T10588] 9p: Bad value for 'wfdno' [ 261.544442][T10589] 9p: Bad value for 'wfdno' [ 261.843402][T10603] batadv_slave_1: entered promiscuous mode [ 261.849644][T10600] batadv_slave_1: left promiscuous mode [ 261.914092][T10602] lo speed is unknown, defaulting to 1000 [ 261.927463][T10572] loop0: detected capacity change from 0 to 1024 [ 261.933309][T10602] lo speed is unknown, defaulting to 1000 [ 262.106630][T10572] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 262.159746][T10572] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 262.245364][ T9649] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 262.790839][T10646] loop0: detected capacity change from 0 to 2048 [ 262.883778][T10646] EXT4-fs (loop0): failed to initialize system zone (-117) [ 262.891665][T10646] EXT4-fs (loop0): mount failed [ 262.956323][T10646] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 262.964944][T10646] SELinux: failed to load policy [ 262.982739][T10633] RDS: rds_bind could not find a transport for 2001::1, load rds_tcp or rds_rdma? [ 263.102544][T10660] __nla_validate_parse: 3 callbacks suppressed [ 263.109100][T10660] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1946'. [ 263.133951][T10660] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1946'. [ 263.158246][T10661] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1945'. [ 263.606379][T10674] batadv_slave_1: entered promiscuous mode [ 263.615648][T10672] batadv_slave_1: left promiscuous mode [ 263.802831][ T28] kauditd_printk_skb: 918 callbacks suppressed [ 263.802847][ T28] audit: type=1400 audit(1771920793.745:14685): avc: denied { prog_load } for pid=10686 comm="syz.3.1954" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 263.840677][ T28] audit: type=1400 audit(1771920793.755:14686): avc: denied { create } for pid=10684 comm="syz.6.1953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 263.860570][ T28] audit: type=1400 audit(1771920793.755:14687): avc: denied { setopt } for pid=10684 comm="syz.6.1953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 263.880492][ T28] audit: type=1400 audit(1771920793.755:14688): avc: denied { read } for pid=10684 comm="syz.6.1953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 263.908202][T10685] netlink: 'syz.6.1953': attribute type 1 has an invalid length. [ 263.920510][T10660] loop0: detected capacity change from 0 to 1024 [ 263.923674][T10685] bond3: entered promiscuous mode [ 263.932494][ T28] audit: type=1400 audit(1771920793.775:14689): avc: denied { bpf } for pid=10686 comm="syz.3.1954" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 263.954054][ T28] audit: type=1326 audit(1771920793.775:14690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10686 comm="syz.3.1954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5ad3cc629 code=0x7ffc0000 [ 263.963413][T10685] 8021q: adding VLAN 0 to HW filter on device bond3 [ 263.978398][ T28] audit: type=1326 audit(1771920793.775:14691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10686 comm="syz.3.1954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fc5ad3cc629 code=0x7ffc0000 [ 264.009217][ T28] audit: type=1326 audit(1771920793.775:14692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10686 comm="syz.3.1954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5ad3cc629 code=0x7ffc0000 [ 264.048865][ T28] audit: type=1326 audit(1771920793.775:14693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10686 comm="syz.3.1954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fc5ad3cc629 code=0x7ffc0000 [ 264.078620][ T28] audit: type=1326 audit(1771920793.775:14694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10686 comm="syz.3.1954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5ad3cc629 code=0x7ffc0000 [ 264.230624][T10660] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 264.265193][T10700] netlink: 'syz.6.1956': attribute type 58 has an invalid length. [ 264.269297][T10703] batadv_slave_1: entered promiscuous mode [ 264.280923][T10699] batadv_slave_1: left promiscuous mode [ 264.287567][T10660] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 264.307470][T10700] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1956'. [ 264.372912][ T9649] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 264.634648][T10716] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 264.641949][T10716] IPv6: NLM_F_CREATE should be set when creating new route [ 264.743246][T10721] loop0: detected capacity change from 0 to 512 [ 264.777618][T10721] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 264.852176][T10723] tipc: Enabling not permitted [ 264.854064][T10721] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 264.858241][T10723] tipc: Enabling of bearer rejected, failed to enable media [ 264.898182][T10721] ext4 filesystem being mounted at /36/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 264.905408][T10727] tipc: Started in network mode [ 264.941579][T10727] tipc: Node identity aabb4e56c16e, cluster identity 4711 [ 265.013038][T10727] tipc: Enabled bearer , priority 0 [ 265.026177][T10730] syzkaller0: entered allmulticast mode [ 265.026828][T10732] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10732 comm=syz.0.1966 [ 265.122269][T10724] tipc: Disabling bearer [ 265.211988][ T9649] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.293833][T10744] loop5: detected capacity change from 0 to 512 [ 265.317719][T10744] EXT4-fs: dax option not supported [ 265.345348][T10741] batadv_slave_1: entered promiscuous mode [ 265.355611][T10738] batadv_slave_1: left promiscuous mode [ 265.359867][T10744] netlink: 108 bytes leftover after parsing attributes in process `syz.5.1973'. [ 265.438827][T10751] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1975'. [ 265.595999][T10760] loop5: detected capacity change from 0 to 1764 [ 265.605103][T10760] ISOFS: Unable to identify CD-ROM format. [ 265.698654][T10762] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1980'. [ 265.751512][T10762] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1980'. [ 265.861511][T10766] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 266.086462][T10786] loop0: detected capacity change from 0 to 128 [ 266.111622][T10786] vfat: Bad value for 'uid' [ 266.136493][T10786] vfat: Bad value for 'uid' [ 266.199905][T10789] batadv_slave_1: entered promiscuous mode [ 266.223357][T10788] batadv_slave_1: left promiscuous mode [ 266.375856][T10799] netlink: 'syz.6.1994': attribute type 8 has an invalid length. [ 266.389051][T10802] loop0: detected capacity change from 0 to 1024 [ 266.394915][T10797] xt_hashlimit: max too large, truncated to 1048576 [ 266.417461][T10802] EXT4-fs: Ignoring removed orlov option [ 266.417553][T10797] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 266.437823][T10799] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1994'. [ 266.620837][T10802] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 266.780594][T10812] batadv0: entered allmulticast mode [ 266.788340][T10813] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1997'. [ 266.805698][T10812] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 266.856035][T10812] loop6: detected capacity change from 0 to 128 [ 267.410722][T10837] loop6: detected capacity change from 0 to 256 [ 267.488175][T10837] FAT-fs (loop6): Directory bread(block 64) failed [ 267.494987][T10837] FAT-fs (loop6): Directory bread(block 65) failed [ 267.501889][T10837] FAT-fs (loop6): Directory bread(block 66) failed [ 267.508564][T10837] FAT-fs (loop6): Directory bread(block 67) failed [ 267.515199][T10837] FAT-fs (loop6): Directory bread(block 68) failed [ 267.522151][T10837] FAT-fs (loop6): Directory bread(block 69) failed [ 267.528901][T10837] FAT-fs (loop6): Directory bread(block 70) failed [ 267.535950][T10837] FAT-fs (loop6): Directory bread(block 71) failed [ 267.542621][T10837] FAT-fs (loop6): Directory bread(block 72) failed [ 267.549514][T10837] FAT-fs (loop6): Directory bread(block 73) failed [ 267.774434][T10836] batadv_slave_1: entered promiscuous mode [ 267.818472][T10835] batadv_slave_1: left promiscuous mode [ 269.106295][ T28] kauditd_printk_skb: 961 callbacks suppressed [ 269.106310][ T28] audit: type=1400 audit(1771920798.515:15656): avc: denied { recv } for pid=10827 comm="syz.6.2003" saddr=10.128.0.163 src=30036 daddr=10.128.0.192 dest=59620 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 269.145527][ T9649] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.155488][ T28] audit: type=1400 audit(1771920799.055:15657): avc: denied { unmount } for pid=6161 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 269.292251][T10849] loop0: detected capacity change from 0 to 512 [ 269.300896][ T28] audit: type=1400 audit(1771920799.095:15658): avc: denied { recv } for pid=2960 comm="jbd2/sda1-8" saddr=10.128.0.163 src=30036 daddr=10.128.0.192 dest=59620 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 269.329438][ T28] audit: type=1400 audit(1771920799.095:15659): avc: denied { recv } for pid=2988 comm="klogd" saddr=10.128.0.163 src=30036 daddr=10.128.0.192 dest=59620 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 269.396261][ T28] audit: type=1400 audit(1771920799.095:15660): avc: denied { recv } for pid=2988 comm="klogd" saddr=10.128.0.163 src=30036 daddr=10.128.0.192 dest=59620 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 269.477804][T10849] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #3: comm syz.0.2007: corrupted inode contents [ 269.508740][ T28] audit: type=1400 audit(1771920799.135:15661): avc: denied { read write } for pid=6161 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 269.533410][ T28] audit: type=1400 audit(1771920799.135:15662): avc: denied { open } for pid=6161 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 269.587151][T10855] loop6: detected capacity change from 0 to 256 [ 269.597825][T10855] vfat: Unknown parameter '00000000000000000009ÿÿÿÿ' [ 269.622545][ T28] audit: type=1400 audit(1771920799.135:15663): avc: denied { ioctl } for pid=6161 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=106 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 269.648752][ T28] audit: type=1400 audit(1771920799.145:15664): avc: denied { read write } for pid=9649 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 269.688571][T10849] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 269.689134][T10849] EXT4-fs error (device loop0): ext4_dirty_inode:6450: inode #3: comm syz.0.2007: mark_inode_dirty error [ 269.698503][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 269.698518][ C1] EXT4-fs (loop0): initial error at time 1771920799: ext4_do_update_inode:5569: inode 3 [ 269.698553][ C1] EXT4-fs (loop0): last error at time 1771920799: ext4_do_update_inode:5569: inode 3 [ 269.790612][ T28] audit: type=1400 audit(1771920799.145:15665): avc: denied { open } for pid=9649 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 270.127280][T10849] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 270.129246][T10849] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #3: comm syz.0.2007: corrupted inode contents [ 270.219085][T10849] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 270.219593][T10849] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #3: comm syz.0.2007: mark_inode_dirty error [ 270.252680][T10849] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 270.253549][T10849] EXT4-fs error (device loop0): ext4_acquire_dquot:7001: comm syz.0.2007: Failed to acquire dquot type 0 [ 270.275589][T10849] loop0: lost filesystem error report for type 5 error -117 [ 270.276445][T10849] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #16: comm syz.0.2007: corrupted inode contents [ 270.299291][T10849] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 270.299715][T10849] EXT4-fs error (device loop0): ext4_dirty_inode:6450: inode #16: comm syz.0.2007: mark_inode_dirty error [ 270.324137][T10849] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 270.324705][T10849] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #16: comm syz.0.2007: corrupted inode contents [ 270.350444][T10849] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 270.350811][T10849] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #16: comm syz.0.2007: mark_inode_dirty error [ 270.375577][T10849] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 270.375819][T10849] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #16: comm syz.0.2007: corrupted inode contents [ 270.404524][T10849] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 270.404847][T10849] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 270.426520][T10849] loop0: lost filesystem error report for type 5 error -117 [ 270.426857][T10849] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #16: comm syz.0.2007: corrupted inode contents [ 270.449126][T10849] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 270.449482][T10849] EXT4-fs error (device loop0): ext4_truncate:4587: inode #16: comm syz.0.2007: mark_inode_dirty error [ 270.472584][T10849] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 270.482418][T10849] loop0: lost filesystem error report for type 5 error -117 [ 270.483508][T10849] EXT4-fs (loop0): 1 truncate cleaned up [ 270.565253][T10849] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 270.613210][T10849] ext4 filesystem being mounted at /42/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 271.463371][T10471] EXT4-fs error (device loop0): ext4_release_dquot:7037: comm kworker/u8:32: Failed to release dquot type 1 [ 271.500209][T10880] xt_hashlimit: max too large, truncated to 1048576 [ 271.533737][T10880] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 271.533918][ T9649] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.705426][T10887] batadv_slave_1: entered promiscuous mode [ 271.712350][T10886] batadv_slave_1: left promiscuous mode [ 271.905224][T10893] lo speed is unknown, defaulting to 1000 [ 271.911765][T10893] lo speed is unknown, defaulting to 1000 [ 272.402470][T10899] netlink: 300 bytes leftover after parsing attributes in process `syz.3.2026'. [ 273.022965][T10909] loop6: detected capacity change from 0 to 128 [ 273.033049][T10910] loop0: detected capacity change from 0 to 1024 [ 273.082692][T10908] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2030'. [ 273.111044][T10908] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2030'. [ 273.235450][T10910] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 273.249733][T10910] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 273.299294][ T9649] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 273.635807][T10930] loop6: detected capacity change from 0 to 128 [ 273.680506][T10930] loop6: detected capacity change from 0 to 2048 [ 273.745042][ T3299] Alternate GPT is invalid, using primary GPT. [ 273.756664][ T3299] loop6: p2 p3 p7 [ 273.816332][T10930] Alternate GPT is invalid, using primary GPT. [ 273.822663][T10930] loop6: p2 p3 p7 [ 273.906730][T10941] loop0: detected capacity change from 0 to 128 [ 273.953483][T10941] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 273.979540][T10941] ext4 filesystem being mounted at /47/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 274.038017][T10930] syzkaller0: entered promiscuous mode [ 274.047186][T10941] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2041'. [ 274.073033][T10930] syzkaller0: entered allmulticast mode [ 274.115969][ T28] kauditd_printk_skb: 523 callbacks suppressed [ 274.115997][ T28] audit: type=1400 audit(1771920804.065:16177): avc: denied { recv } for pid=10896 comm="syz.5.2025" saddr=10.128.0.163 src=30036 daddr=10.128.0.192 dest=59620 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 274.153591][ T9649] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 274.208593][ T28] audit: type=1400 audit(1771920804.065:16178): avc: denied { recv } for pid=10896 comm="syz.5.2025" saddr=10.128.0.163 src=30036 daddr=10.128.0.192 dest=59620 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 274.273631][ T28] audit: type=1400 audit(1771920804.095:16179): avc: denied { perfmon } for pid=10944 comm="syz.2.2042" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 274.296623][ T28] audit: type=1400 audit(1771920804.115:16180): avc: denied { ioctl } for pid=10929 comm="syz.6.2036" path="socket:[29580]" dev="sockfs" ino=29580 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 274.323949][ T28] audit: type=1400 audit(1771920804.115:16181): avc: denied { write } for pid=10929 comm="syz.6.2036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 274.347807][ T28] audit: type=1400 audit(1771920804.115:16182): avc: denied { open } for pid=10929 comm="syz.6.2036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 274.369621][ T28] audit: type=1400 audit(1771920804.125:16183): avc: denied { read write } for pid=9649 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 274.372692][T10950] loop0: detected capacity change from 0 to 1024 [ 274.406169][ T28] audit: type=1400 audit(1771920804.125:16184): avc: denied { open } for pid=9649 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 274.432644][ T28] audit: type=1400 audit(1771920804.125:16185): avc: denied { ioctl } for pid=9649 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 274.461534][ T28] audit: type=1400 audit(1771920804.125:16186): avc: denied { perfmon } for pid=10929 comm="syz.6.2036" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 274.492732][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 274.501714][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 274.538002][T10950] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 274.564363][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop6p7, 10) failed: No such file or directory [ 274.580774][T10950] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 274.636408][T10948] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2043'. [ 274.708421][T10948] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2043'. [ 274.709498][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 274.730744][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop6p7, 10) failed: No such file or directory [ 274.747940][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 274.786061][T10946] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2042'. [ 274.798721][T10946] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2042'. [ 274.911659][ T9649] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 275.286590][T10968] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 276.057668][T10997] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2057'. [ 276.073165][T10997] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2057'. [ 276.147772][T11003] bond4: Removing last ns target with arp_interval on [ 276.435813][T11016] loop5: detected capacity change from 0 to 256 [ 276.595999][T11016] FAT-fs (loop5): Directory bread(block 64) failed [ 276.602676][T11016] FAT-fs (loop5): Directory bread(block 65) failed [ 276.609320][T11016] FAT-fs (loop5): Directory bread(block 66) failed [ 276.616473][T11016] FAT-fs (loop5): Directory bread(block 67) failed [ 276.623183][T11016] FAT-fs (loop5): Directory bread(block 68) failed [ 276.629715][T11016] FAT-fs (loop5): Directory bread(block 69) failed [ 276.636408][T11016] FAT-fs (loop5): Directory bread(block 70) failed [ 276.643152][T11016] FAT-fs (loop5): Directory bread(block 71) failed [ 276.649820][T11016] FAT-fs (loop5): Directory bread(block 72) failed [ 276.656368][T11016] FAT-fs (loop5): Directory bread(block 73) failed [ 277.140334][T10997] loop0: detected capacity change from 0 to 1024 [ 277.271299][T10997] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 277.288812][T10997] ext4 filesystem being mounted at /51/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 277.407706][ T9649] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 277.470224][T11030] netlink: 'syz.6.2065': attribute type 8 has an invalid length. [ 277.478043][T11030] sch_fq: defrate 0 ignored. [ 277.906153][T11034] loop0: detected capacity change from 0 to 2048 [ 278.015090][T11045] __nla_validate_parse: 1 callbacks suppressed [ 278.015103][T11045] netlink: 300 bytes leftover after parsing attributes in process `syz.3.2071'. [ 278.055873][T11041] loop5: detected capacity change from 0 to 512 [ 278.092020][T11041] ext4: Unknown parameter 'nouser_xattr' [ 278.124992][T11041] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2068'. [ 278.158329][T11041] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2068'. [ 278.826685][T11072] loop0: detected capacity change from 0 to 256 [ 279.685938][ T28] kauditd_printk_skb: 602 callbacks suppressed [ 279.685955][ T28] audit: type=1400 audit(1771920808.665:16789): avc: denied { execmem } for pid=11070 comm="syz.2.2080" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 279.909218][T11072] FAT-fs (loop0): Directory bread(block 64) failed [ 279.915858][T11072] FAT-fs (loop0): Directory bread(block 65) failed [ 279.922679][T11072] FAT-fs (loop0): Directory bread(block 66) failed [ 279.929406][T11072] FAT-fs (loop0): Directory bread(block 67) failed [ 279.936260][T11072] FAT-fs (loop0): Directory bread(block 68) failed [ 279.942982][T11072] FAT-fs (loop0): Directory bread(block 69) failed [ 279.949887][T11072] FAT-fs (loop0): Directory bread(block 70) failed [ 279.956489][T11072] FAT-fs (loop0): Directory bread(block 71) failed [ 279.963145][T11072] FAT-fs (loop0): Directory bread(block 72) failed [ 279.969840][T11072] FAT-fs (loop0): Directory bread(block 73) failed [ 280.074843][ T28] audit: type=1400 audit(1771920808.765:16790): avc: denied { open } for pid=11064 comm="syz.0.2078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 280.312876][ T28] audit: type=1400 audit(1771920808.765:16791): avc: denied { perfmon } for pid=11064 comm="syz.0.2078" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 280.382860][ T28] audit: type=1400 audit(1771920808.765:16792): avc: denied { kernel } for pid=11064 comm="syz.0.2078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 280.409525][ T28] audit: type=1400 audit(1771920808.775:16793): avc: denied { read write } for pid=11064 comm="syz.0.2078" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 280.483082][ T28] audit: type=1400 audit(1771920808.775:16794): avc: denied { open } for pid=11064 comm="syz.0.2078" path="/dev/loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 280.592910][ T28] audit: type=1400 audit(1771920808.775:16795): avc: denied { ioctl } for pid=11064 comm="syz.0.2078" path="/dev/loop0" dev="devtmpfs" ino=100 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 280.621374][T11087] netlink: 'syz.2.2083': attribute type 8 has an invalid length. [ 280.632108][T11086] loop6: detected capacity change from 0 to 256 [ 280.651146][T11087] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2083'. [ 280.742554][ T28] audit: type=1400 audit(1771920808.785:16796): avc: denied { mounton } for pid=11064 comm="syz.0.2078" path="/54/file1" dev="tmpfs" ino=310 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 280.845053][ T28] audit: type=1400 audit(1771920809.025:16797): avc: denied { recv } for pid=11064 comm="syz.0.2078" saddr=10.128.0.163 src=30036 daddr=10.128.0.192 dest=59620 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 280.912555][ T28] audit: type=1400 audit(1771920809.045:16798): avc: denied { open } for pid=11070 comm="syz.2.2080" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 280.928862][T11086] FAT-fs (loop6): Directory bread(block 64) failed [ 280.994346][T11086] FAT-fs (loop6): Directory bread(block 65) failed [ 281.011636][T11086] FAT-fs (loop6): Directory bread(block 66) failed [ 281.034699][T11091] netlink: 300 bytes leftover after parsing attributes in process `syz.2.2085'. [ 281.062952][T11086] FAT-fs (loop6): Directory bread(block 67) failed [ 281.095177][T11086] FAT-fs (loop6): Directory bread(block 68) failed [ 281.152832][T11086] FAT-fs (loop6): Directory bread(block 69) failed [ 281.203420][T11086] FAT-fs (loop6): Directory bread(block 70) failed [ 281.233266][T11086] FAT-fs (loop6): Directory bread(block 71) failed [ 281.240155][T11086] FAT-fs (loop6): Directory bread(block 72) failed [ 281.267008][T11099] lo speed is unknown, defaulting to 1000 [ 281.283320][T11099] lo speed is unknown, defaulting to 1000 [ 281.313631][T11086] FAT-fs (loop6): Directory bread(block 73) failed [ 281.792161][T11113] loop0: detected capacity change from 0 to 128 [ 283.050016][T11127] netlink: 'syz.0.2095': attribute type 8 has an invalid length. [ 283.143005][T11127] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2095'. [ 283.175190][T11127] bond0: entered promiscuous mode [ 283.180352][T11127] bond_slave_0: entered promiscuous mode [ 283.223013][T11127] bond_slave_1: entered promiscuous mode [ 283.233816][T11127] gretap0: entered promiscuous mode [ 283.249166][T11127] debugfs: 'hsr1' already exists in 'hsr' [ 283.267851][T11127] Cannot create hsr debugfs directory [ 283.285196][T11127] hsr1: entered promiscuous mode [ 283.389858][T11131] loop0: detected capacity change from 0 to 1024 [ 283.445403][T11131] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 283.514706][T11131] ext4 filesystem being mounted at /60/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 283.684110][T11131] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2096: bg 0: block 112: padding at end of block bitmap is not set [ 283.733106][T11131] EXT4-fs (loop0): Remounting filesystem read-only [ 283.835742][T11123] Process accounting resumed [ 283.967758][ T9649] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 284.117588][T11142] batadv_slave_1: entered promiscuous mode [ 284.147050][T11140] batadv_slave_1: left promiscuous mode [ 284.502136][T11153] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=22331 sclass=netlink_route_socket pid=11153 comm=syz.0.2101 [ 284.688653][T11157] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2103'. [ 284.743058][T11157] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2103'. [ 284.774618][ T28] kauditd_printk_skb: 320 callbacks suppressed [ 284.774631][ T28] audit: type=1400 audit(1771920814.725:17119): avc: denied { write } for pid=11155 comm="syz.0.2103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 284.809527][T11159] loop0: detected capacity change from 0 to 1024 [ 284.841521][ T28] audit: type=1400 audit(1771920814.755:17120): avc: denied { read write } for pid=11155 comm="syz.0.2103" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 284.894904][T11159] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 284.909148][T11159] ext4 filesystem being mounted at /64/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 284.939599][ T28] audit: type=1400 audit(1771920814.755:17121): avc: denied { open } for pid=11155 comm="syz.0.2103" path="/dev/loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 284.973659][ T28] audit: type=1400 audit(1771920814.755:17122): avc: denied { ioctl } for pid=11155 comm="syz.0.2103" path="/dev/loop0" dev="devtmpfs" ino=100 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 285.004626][ T28] audit: type=1400 audit(1771920814.775:17123): avc: denied { create } for pid=11154 comm="syz.3.2102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 285.026653][ T28] audit: type=1400 audit(1771920814.775:17124): avc: denied { mounton } for pid=11155 comm="syz.0.2103" path="/64/file1" dev="tmpfs" ino=365 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 285.055965][ T28] audit: type=1400 audit(1771920814.785:17125): avc: denied { recv } for pid=3310 comm="syz-executor" saddr=10.128.0.163 src=30036 daddr=10.128.0.192 dest=59620 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 285.061117][ T9649] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 285.085381][ T28] audit: type=1400 audit(1771920814.785:17126): avc: denied { recv } for pid=3310 comm="syz-executor" saddr=10.128.0.163 src=30036 daddr=10.128.0.192 dest=59620 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 285.125903][ T28] audit: type=1400 audit(1771920814.785:17127): avc: denied { recv } for pid=3310 comm="syz-executor" saddr=10.128.0.163 src=30036 daddr=10.128.0.192 dest=59620 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 285.154022][ T28] audit: type=1400 audit(1771920814.845:17128): avc: denied { create } for pid=11160 comm="syz.2.2104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 285.251035][T11169] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2106'. [ 285.273043][T11169] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2106'. [ 286.055569][T11178] Process accounting resumed [ 286.194954][T11185] batadv_slave_1: entered promiscuous mode [ 286.201261][T11184] batadv_slave_1: left promiscuous mode [ 286.454510][T11195] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2113'. [ 286.485872][T11195] loop6: detected capacity change from 0 to 512 [ 286.511224][T11195] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #3: comm syz.6.2113: corrupted inode contents [ 286.529168][T11195] fserror_report: 1 callbacks suppressed [ 286.529326][T11195] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 286.537647][T11195] EXT4-fs (loop6): Remounting filesystem read-only [ 286.547018][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 286.547038][ C0] EXT4-fs (loop6): initial error at time 1771920816: ext4_do_update_inode:5569: inode 3 [ 286.547067][ C0] EXT4-fs (loop6): last error at time 1771920816: ext4_do_update_inode:5569: inode 3 [ 286.582321][T11195] EXT4-fs (loop6): 1 truncate cleaned up [ 286.595360][T11195] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 286.608964][T11195] ext4 filesystem being mounted at /249/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 286.645408][ T6161] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.014182][T11187] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2111'. [ 287.401562][T11220] loop6: detected capacity change from 0 to 128 [ 287.617682][T11222] FAULT_INJECTION: forcing a failure. [ 287.617682][T11222] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 287.767854][T11222] CPU: 0 UID: 0 PID: 11222 Comm: syz.0.2121 Tainted: G W syzkaller #0 PREEMPT(full) [ 287.767889][T11222] Tainted: [W]=WARN [ 287.767896][T11222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 287.767921][T11222] Call Trace: [ 287.767929][T11222] [ 287.767938][T11222] __dump_stack+0x1d/0x30 [ 287.767966][T11222] dump_stack_lvl+0x95/0xd0 [ 287.767988][T11222] dump_stack+0x15/0x1b [ 287.768011][T11222] should_fail_ex+0x263/0x280 [ 287.768100][T11222] should_fail+0xb/0x20 [ 287.768119][T11222] should_fail_usercopy+0x1a/0x20 [ 287.768198][T11222] _copy_from_user+0x1c/0xb0 [ 287.768225][T11222] ___sys_sendmsg+0xc1/0x1e0 [ 287.768260][T11222] ? irqentry_exit+0x91/0x520 [ 287.768301][T11222] __x64_sys_sendmsg+0xd4/0x160 [ 287.768360][T11222] x64_sys_call+0x194c/0x3020 [ 287.768439][T11222] do_syscall_64+0x12c/0x370 [ 287.768474][T11222] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.768569][T11222] RIP: 0033:0x7fea217bc629 [ 287.768587][T11222] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 287.768606][T11222] RSP: 002b:00007fea20217028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 287.768627][T11222] RAX: ffffffffffffffda RBX: 00007fea21a35fa0 RCX: 00007fea217bc629 [ 287.768642][T11222] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 287.768656][T11222] RBP: 00007fea20217090 R08: 0000000000000000 R09: 0000000000000000 [ 287.768707][T11222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 287.768721][T11222] R13: 00007fea21a36038 R14: 00007fea21a35fa0 R15: 00007fff9fd925e8 [ 287.768781][T11222] [ 288.015688][T11224] netlink: 300 bytes leftover after parsing attributes in process `syz.2.2122'. [ 288.053834][T11226] batadv_slave_1: entered promiscuous mode [ 288.073666][T11225] batadv_slave_1: left promiscuous mode [ 288.294661][T11232] loop0: detected capacity change from 0 to 4096 [ 288.312055][T11228] lo speed is unknown, defaulting to 1000 [ 288.324639][T11232] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 288.373951][T11228] lo speed is unknown, defaulting to 1000 [ 288.514082][T11233] pimreg: entered allmulticast mode [ 288.544343][T11233] pimreg: left allmulticast mode [ 289.045043][ T9649] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.601299][T11259] FAULT_INJECTION: forcing a failure. [ 289.601299][T11259] name failslab, interval 1, probability 0, space 0, times 0 [ 289.613976][T11259] CPU: 0 UID: 0 PID: 11259 Comm: syz.0.2134 Tainted: G W syzkaller #0 PREEMPT(full) [ 289.614009][T11259] Tainted: [W]=WARN [ 289.614015][T11259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 289.614025][T11259] Call Trace: [ 289.614040][T11259] [ 289.614049][T11259] __dump_stack+0x1d/0x30 [ 289.614077][T11259] dump_stack_lvl+0x95/0xd0 [ 289.614241][T11259] dump_stack+0x15/0x1b [ 289.614302][T11259] should_fail_ex+0x263/0x280 [ 289.614321][T11259] should_failslab+0x8c/0xb0 [ 289.614340][T11259] kmem_cache_alloc_noprof+0x66/0x400 [ 289.614359][T11259] ? skb_clone+0x151/0x1f0 [ 289.614381][T11259] skb_clone+0x151/0x1f0 [ 289.614491][T11259] bpf_clone_redirect+0xf7/0x290 [ 289.614515][T11259] bpf_prog_3e1cbbed0c4acd81+0x5f/0x68 [ 289.614530][T11259] ? count_memcg_events+0x11f/0x210 [ 289.614550][T11259] ? __rcu_read_unlock+0x4e/0x70 [ 289.614580][T11259] ? handle_mm_fault+0x26b8/0x3020 [ 289.614605][T11259] ? mt_find+0x1a1/0x3d0 [ 289.614630][T11259] ? __rcu_read_unlock+0x4e/0x70 [ 289.614672][T11259] ? is_bpf_text_address+0x141/0x160 [ 289.614691][T11259] ? kernel_text_address+0x94/0xb0 [ 289.614774][T11259] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 289.614802][T11259] ? __kernel_text_address+0xd/0x30 [ 289.614824][T11259] ? unwind_get_return_address+0x16/0x40 [ 289.614846][T11259] ? find_stack+0xda/0x1d0 [ 289.614878][T11259] ? read_tsc+0x9/0x20 [ 289.614929][T11259] ? ktime_get+0x1eb/0x210 [ 289.615035][T11259] bpf_test_run+0x29d/0x620 [ 289.615057][T11259] ? _raw_spin_lock_irqsave+0x57/0xb0 [ 289.615079][T11259] ? bpf_test_run+0x19b/0x620 [ 289.615143][T11259] bpf_prog_test_run_skb+0x9a4/0xef0 [ 289.615169][T11259] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 289.615189][T11259] bpf_prog_test_run+0x204/0x340 [ 289.615285][T11259] __sys_bpf+0x52e/0x7e0 [ 289.615319][T11259] __x64_sys_bpf+0x41/0x50 [ 289.615348][T11259] x64_sys_call+0x10cb/0x3020 [ 289.615387][T11259] do_syscall_64+0x12c/0x370 [ 289.615470][T11259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.615536][T11259] RIP: 0033:0x7fea217bc629 [ 289.615552][T11259] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 289.615568][T11259] RSP: 002b:00007fea20217028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 289.615589][T11259] RAX: ffffffffffffffda RBX: 00007fea21a35fa0 RCX: 00007fea217bc629 [ 289.615601][T11259] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 000000000000000a [ 289.615613][T11259] RBP: 00007fea20217090 R08: 0000000000000000 R09: 0000000000000000 [ 289.615628][T11259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 289.615642][T11259] R13: 00007fea21a36038 R14: 00007fea21a35fa0 R15: 00007fff9fd925e8 [ 289.615661][T11259] [ 290.060412][ T28] kauditd_printk_skb: 614 callbacks suppressed [ 290.060427][ T28] audit: type=1400 audit(1771920819.065:17741): avc: denied { recv } for pid=11250 comm="syz.3.2131" saddr=10.128.0.163 src=30036 daddr=10.128.0.192 dest=59620 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 290.116122][ T28] audit: type=1400 audit(1771920819.065:17742): avc: denied { recv } for pid=11250 comm="syz.3.2131" saddr=10.128.0.163 src=30036 daddr=10.128.0.192 dest=59620 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 290.212538][ T28] audit: type=1400 audit(1771920819.115:17743): avc: denied { open } for pid=11250 comm="syz.3.2131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 290.265719][T11263] batadv_slave_1: entered promiscuous mode [ 290.276294][T11262] batadv_slave_1: left promiscuous mode [ 290.284924][ T28] audit: type=1400 audit(1771920819.115:17744): avc: denied { perfmon } for pid=11250 comm="syz.3.2131" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 290.331351][ T28] audit: type=1400 audit(1771920819.115:17745): avc: denied { kernel } for pid=11250 comm="syz.3.2131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 290.448808][ T6161] audit: audit_backlog=65 > audit_backlog_limit=64 [ 290.466387][T11266] audit: audit_backlog=65 > audit_backlog_limit=64 [ 290.473063][T11266] audit: audit_lost=185 audit_rate_limit=0 audit_backlog_limit=64 [ 290.480914][T11266] audit: backlog limit exceeded [ 290.589824][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 290.762209][T11271] loop0: detected capacity change from 0 to 128 [ 291.215967][T11278] lo speed is unknown, defaulting to 1000 [ 291.222702][T11278] lo speed is unknown, defaulting to 1000 [ 291.388341][T11279] pimreg: entered allmulticast mode [ 291.396940][T11279] pimreg: left allmulticast mode [ 291.463708][T11278] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2141'. [ 291.823640][T11301] batadv_slave_1: entered promiscuous mode [ 291.830808][T11299] batadv_slave_1: left promiscuous mode [ 292.404627][T11332] netlink: 88 bytes leftover after parsing attributes in process `syz.5.2156'. [ 292.503941][T11334] loop6: detected capacity change from 0 to 128 [ 292.959090][T11338] xt_hashlimit: max too large, truncated to 1048576 [ 292.975049][T11338] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 293.222849][T11344] batadv_slave_1: entered promiscuous mode [ 293.243675][T11350] netlink: 'syz.2.2163': attribute type 58 has an invalid length. [ 293.248160][T11342] batadv_slave_1: left promiscuous mode [ 293.251563][T11350] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2163'. [ 293.280583][T11348] loop0: detected capacity change from 0 to 8192 [ 293.886825][T11368] xt_hashlimit: max too large, truncated to 1048576 [ 293.910639][T11368] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 294.941445][T11378] syzkaller1: tun_chr_ioctl cmd 2148553947 [ 295.093771][ T28] kauditd_printk_skb: 726 callbacks suppressed [ 295.093865][ T28] audit: type=1400 audit(1771920825.045:18468): avc: denied { recv } for pid=3298 comm="syz-executor" saddr=10.128.0.163 src=30036 daddr=10.128.0.192 dest=59620 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 295.322115][ T28] audit: type=1400 audit(1771920825.045:18469): avc: denied { recv } for pid=28 comm="kauditd" saddr=10.128.0.163 src=30036 daddr=10.128.0.192 dest=59620 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 295.646630][T11387] loop5: detected capacity change from 0 to 128 [ 296.020462][ T28] audit: type=1400 audit(1771920825.085:18470): avc: denied { read write } for pid=6159 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 296.043683][T11393] netlink: 9 bytes leftover after parsing attributes in process `syz.3.2177'. [ 296.094984][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 296.102703][ C1] audit: audit_lost=188 audit_rate_limit=0 audit_backlog_limit=64 [ 296.111697][ C1] audit: backlog limit exceeded [ 296.119806][ T28] audit: type=1400 audit(1771920825.085:18471): avc: denied { open } for pid=6159 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 296.143007][T11393] netlink: 9 bytes leftover after parsing attributes in process `syz.3.2177'. [ 296.162524][T11403] audit: audit_backlog=65 > audit_backlog_limit=64 [ 296.176694][T11404] audit: audit_backlog=65 > audit_backlog_limit=64 [ 296.191879][T11403] audit: audit_lost=189 audit_rate_limit=0 audit_backlog_limit=64 [ 297.049571][T11432] bond3: Removing last ns target with arp_interval on [ 297.167160][T11421] loop0: detected capacity change from 0 to 764 [ 297.207330][T11442] netlink: 'syz.6.2191': attribute type 8 has an invalid length. [ 297.252872][T11442] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2191'. [ 297.899843][T11451] syzkaller0: entered promiscuous mode [ 297.924801][T11451] syzkaller0: entered allmulticast mode [ 298.013115][T11454] lo speed is unknown, defaulting to 1000 [ 298.073267][T11455] lo speed is unknown, defaulting to 1000 [ 298.100087][T11451] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 298.102858][ T1032] IPVS: starting estimator thread 0... [ 298.117934][T11454] lo speed is unknown, defaulting to 1000 [ 298.185000][T11455] lo speed is unknown, defaulting to 1000 [ 298.250500][T11464] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2198'. [ 298.253455][T11461] IPVS: using max 2208 ests per chain, 110400 per kthread [ 298.260436][T11464] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2198'. [ 298.586472][T11479] tmpfs: Bad value for 'mpol' [ 298.772917][ T35] IPVS: starting estimator thread 0... [ 298.885470][T11483] IPVS: using max 2352 ests per chain, 117600 per kthread [ 298.951033][T11484] 9p: Bad value for 'rfdno' [ 299.227948][T11500] 9p: Invalid gid '0x00000000ffffffff' [ 299.547262][T11514] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2215'. [ 299.557511][T11514] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2215'. [ 299.709554][T11516] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2216'. [ 299.720021][T11516] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2216'. [ 299.735679][T11514] loop6: detected capacity change from 0 to 1024 [ 299.948075][T11514] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 300.033531][T11514] ext4 filesystem being mounted at /279/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 300.066310][T11531] netlink: 'syz.3.2219': attribute type 8 has an invalid length. [ 300.103098][ T28] kauditd_printk_skb: 732 callbacks suppressed [ 300.103116][ T28] audit: type=1400 audit(1771920830.045:19201): avc: denied { open } for pid=9649 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 300.132890][T11531] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2219'. [ 300.183059][ T28] audit: type=1400 audit(1771920830.045:19202): avc: denied { ioctl } for pid=9649 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 300.251174][ T28] audit: type=1400 audit(1771920830.045:19203): avc: denied { recv } for pid=11526 comm="syz.2.2218" saddr=10.128.0.163 src=30036 daddr=10.128.0.192 dest=59620 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 300.295997][T11538] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2220'. [ 300.312541][ T28] audit: type=1400 audit(1771920830.055:19204): avc: denied { recv } for pid=28 comm="kauditd" saddr=10.128.0.163 src=30036 daddr=10.128.0.192 dest=59620 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 300.313183][ T6161] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 300.366492][T11516] loop5: detected capacity change from 0 to 1024 [ 300.377581][T11540] netlink: 300 bytes leftover after parsing attributes in process `syz.3.2222'. [ 300.392899][ T28] audit: type=1400 audit(1771920830.085:19205): avc: denied { recv } for pid=22 comm="ksoftirqd/1" saddr=10.128.0.163 src=30036 daddr=10.128.0.192 dest=59620 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 300.434840][ T28] audit: type=1400 audit(1771920830.095:19206): avc: denied { read write } for pid=11513 comm="syz.6.2215" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 300.463506][ T28] audit: type=1400 audit(1771920830.095:19207): avc: denied { open } for pid=11513 comm="syz.6.2215" path="/dev/loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 300.489270][ T28] audit: type=1400 audit(1771920830.125:19208): avc: denied { create } for pid=11532 comm="syz.0.2220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 300.553361][ T28] audit: type=1400 audit(1771920830.175:19209): avc: denied { recv } for pid=11526 comm="syz.2.2218" saddr=10.128.0.163 src=30036 daddr=10.128.0.192 dest=59620 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 300.676278][ T28] audit: type=1400 audit(1771920830.175:19210): avc: denied { recv } for pid=11526 comm="syz.2.2218" saddr=10.128.0.163 src=30036 daddr=10.128.0.192 dest=59620 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 300.737365][T11516] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 300.826612][T11516] ext4 filesystem being mounted at /246/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 300.974627][ T6159] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 301.205437][T11567] bond1: Removing last ns target with arp_interval on [ 301.726980][T11571] sctp: [Deprecated]: syz.3.2231 (pid 11571) Use of struct sctp_assoc_value in delayed_ack socket option. [ 301.726980][T11571] Use struct sctp_sack_info instead [ 302.287739][T11594] __nla_validate_parse: 3 callbacks suppressed [ 302.287802][T11594] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2240'. [ 302.328280][T11594] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2240'. [ 302.354485][T11600] loop5: detected capacity change from 0 to 1024 [ 302.399023][T11600] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 302.451712][T11600] ext4 filesystem being mounted at /249/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 302.560148][ T6159] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 302.721323][T11619] loop5: detected capacity change from 0 to 128 [ 302.752263][T11624] xt_socket: unknown flags 0x48 [ 302.862097][T11626] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 302.903360][T11626] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2245'. [ 303.628401][T11647] loop6: detected capacity change from 0 to 128 [ 304.227156][T11657] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2254'. [ 304.249645][T11663] vcan0: tx drop: invalid da for name 0x0000000000000004 [ 304.284125][T11657] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2254'. [ 304.337860][T11667] loop5: detected capacity change from 0 to 1024 [ 304.483067][T11667] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 304.557058][T11667] ext4 filesystem being mounted at /252/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 304.791809][ T6159] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 305.032406][T11678] loop6: detected capacity change from 0 to 32768 [ 305.081769][T11683] IPv6: addrconf: prefix option has invalid lifetime [ 305.091966][T11683] 9p: Bad value for 'wfdno' [ 305.097912][ T3299] loop6: p1 p2 p3 < p5 p6 > [ 305.108420][ T3299] loop6: p2 size 16775168 extends beyond EOD, truncated [ 305.121293][ T28] kauditd_printk_skb: 675 callbacks suppressed [ 305.121308][ T28] audit: type=1400 audit(1771920835.065:19886): avc: denied { write } for pid=11680 comm="syz.5.2261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 305.153373][T11681] loop5: detected capacity change from 0 to 256 [ 305.162233][ T3299] loop6: p5 start 4294970168 is beyond EOD, truncated [ 305.178448][T11681] msdos: Bad value for 'dmask' [ 305.203754][ T28] audit: type=1400 audit(1771920835.095:19887): avc: denied { write } for pid=11680 comm="syz.5.2261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 305.285108][ T28] audit: type=1400 audit(1771920835.095:19888): avc: denied { read write } for pid=11680 comm="syz.5.2261" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 305.372463][ T28] audit: type=1400 audit(1771920835.095:19889): avc: denied { open } for pid=11680 comm="syz.5.2261" path="/dev/loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 305.496873][ T28] audit: type=1400 audit(1771920835.095:19890): avc: denied { ioctl } for pid=11680 comm="syz.5.2261" path="/dev/loop5" dev="devtmpfs" ino=105 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 305.549779][T11678] loop6: p1 p2 p3 < p5 p6 > [ 305.562909][ T28] audit: type=1400 audit(1771920835.125:19891): avc: denied { mounton } for pid=11680 comm="syz.5.2261" path="/253/file0" dev="tmpfs" ino=1389 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 305.588454][T11678] loop6: p2 size 16775168 extends beyond EOD, truncated [ 305.609330][T11678] loop6: p5 start 4294970168 is beyond EOD, truncated [ 305.637730][ T28] audit: type=1400 audit(1771920835.145:19892): avc: denied { read write } for pid=11680 comm="syz.5.2261" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 305.698399][T11691] audit: audit_backlog=65 > audit_backlog_limit=64 [ 305.703049][ T28] audit: type=1400 audit(1771920835.145:19893): avc: denied { open } for pid=11680 comm="syz.5.2261" path="/dev/loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 305.711005][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 305.809670][T11693] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2263'. [ 305.937381][T11690] program syz.0.2265 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 306.027893][T11699] bond5: Removing last ns target with arp_interval on [ 306.043579][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 306.043621][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 306.058834][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 306.242810][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop6p6, 10) failed: No such file or directory [ 306.628934][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 306.637319][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 306.644717][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 306.652876][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop6p6, 10) failed: No such file or directory [ 306.677924][T11709] bond7: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 306.718298][T11709] bond7 (unregistering): Released all slaves [ 306.789207][T11713] loop0: detected capacity change from 0 to 512 [ 306.798522][T11713] journal_path: Non-blockdev passed as './file2' [ 306.804926][T11713] EXT4-fs: error: could not find journal device path [ 306.832267][T11715] lo speed is unknown, defaulting to 1000 [ 306.838404][T11715] lo speed is unknown, defaulting to 1000 [ 306.973722][T11719] netlink: 'syz.3.2272': attribute type 58 has an invalid length. [ 306.981654][T11719] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2272'. [ 307.114003][T11723] xt_hashlimit: size too large, truncated to 1048576 [ 307.248952][T11729] netlink: 'syz.3.2275': attribute type 58 has an invalid length. [ 307.272967][T11729] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2275'. [ 307.368005][T11731] batadv_slave_1: entered promiscuous mode [ 307.413142][T11730] batadv_slave_1: left promiscuous mode [ 307.430500][T11715] 9p: Bad value for 'dfltuid' [ 307.435346][T11715] 9p: Bad value for 'dfltuid' [ 307.643029][T11721] loop0: detected capacity change from 0 to 512 [ 307.661079][T11721] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 307.701603][T11721] EXT4-fs (loop0): 1 truncate cleaned up [ 307.722561][T11721] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 307.807615][T11747] bond2: Removing last ns target with arp_interval on [ 308.828914][T11775] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2286'. [ 309.041823][T11783] batadv_slave_1: entered promiscuous mode [ 309.055687][T11782] batadv_slave_1: left promiscuous mode [ 309.365680][T11790] sctp: [Deprecated]: syz.6.2292 (pid 11790) Use of struct sctp_assoc_value in delayed_ack socket option. [ 309.365680][T11790] Use struct sctp_sack_info instead [ 310.007464][T11805] loop6: detected capacity change from 0 to 128 [ 310.372594][ T28] kauditd_printk_skb: 934 callbacks suppressed [ 310.372617][ T28] audit: type=1400 audit(1771920840.315:20746): avc: denied { recv } for pid=11798 comm="syz.6.2296" saddr=10.128.0.163 src=30036 daddr=10.128.0.192 dest=59620 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 310.472938][ T28] audit: type=1400 audit(1771920840.375:20747): avc: denied { recv } for pid=3298 comm="syz-executor" saddr=10.128.0.163 src=30036 daddr=10.128.0.192 dest=59620 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 310.500148][ T28] audit: type=1400 audit(1771920840.375:20748): avc: denied { recv } for pid=3298 comm="syz-executor" saddr=10.128.0.163 src=30036 daddr=10.128.0.192 dest=59620 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 310.529021][ T28] audit: type=1400 audit(1771920840.405:20749): avc: denied { open } for pid=11809 comm="syz.2.2299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 310.549612][ T28] audit: type=1400 audit(1771920840.415:20750): avc: denied { perfmon } for pid=11809 comm="syz.2.2299" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 310.603871][ T28] audit: type=1400 audit(1771920840.415:20751): avc: denied { kernel } for pid=11809 comm="syz.2.2299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 310.682932][ T28] audit: type=1400 audit(1771920840.415:20752): avc: denied { perfmon } for pid=11809 comm="syz.2.2299" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 310.746358][ T28] audit: type=1400 audit(1771920840.425:20753): avc: denied { tracepoint } for pid=11809 comm="syz.2.2299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 310.798716][T11811] Process accounting resumed [ 310.805896][ T28] audit: type=1400 audit(1771920840.525:20754): avc: denied { perfmon } for pid=11809 comm="syz.2.2299" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 310.859277][ T28] audit: type=1400 audit(1771920840.575:20755): avc: denied { open } for pid=11809 comm="syz.2.2299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 311.085410][T11818] 8021q: adding VLAN 0 to HW filter on device bond3 [ 311.651551][T11841] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2308'. [ 311.723848][T11842] can: request_module (can-proto-3) failed. [ 311.796109][T11827] loop5: detected capacity change from 0 to 512 [ 312.016837][T11827] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 312.067347][T11827] EXT4-fs (loop5): orphan cleanup on readonly fs [ 312.104353][T11827] EXT4-fs warning (device loop5): ext4_enable_quotas:7236: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 312.124055][T11827] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 312.156062][T11827] EXT4-fs error (device loop5): ext4_ext_check_inode:521: inode #13: comm syz.5.2301: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 312.182621][ T9649] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 312.187021][T11827] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 312.192814][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 312.208563][ C0] EXT4-fs (loop5): last error at time 1771920842: ext4_ext_check_inode:521: inode 13 [ 312.213994][T11827] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.2301: couldn't read orphan inode 13 (err -117) [ 312.288981][T11827] loop5: lost filesystem error report for type 5 error -117 [ 312.328977][T11827] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 312.495982][T11861] loop0: detected capacity change from 0 to 128 [ 312.928261][T11818] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2301'. [ 312.993455][ T6159] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.134147][T11869] Process accounting resumed [ 313.511768][T11881] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2319'. [ 315.007419][T11900] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2325'. [ 315.426625][ T28] kauditd_printk_skb: 553 callbacks suppressed [ 315.426640][ T28] audit: type=1400 audit(1771920845.375:21309): avc: denied { recv } for pid=3298 comm="syz-executor" saddr=10.128.0.163 src=30036 daddr=10.128.0.192 dest=59620 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 315.712876][ T28] audit: type=1400 audit(1771920845.405:21310): avc: denied { accept } for pid=11898 comm="syz.6.2325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 316.080043][ T28] audit: type=1400 audit(1771920845.425:21311): avc: denied { recv } for pid=3298 comm="syz-executor" saddr=10.128.0.163 src=30036 daddr=10.128.0.192 dest=59620 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 316.191892][T11914] audit: audit_backlog=65 > audit_backlog_limit=64 [ 316.206434][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 316.213073][ C1] audit: audit_lost=219 audit_rate_limit=0 audit_backlog_limit=64 [ 316.220885][ C1] audit: backlog limit exceeded [ 316.231021][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 316.233542][T11900] audit: audit_backlog=65 > audit_backlog_limit=64 [ 316.237580][ C1] audit: audit_lost=220 audit_rate_limit=0 audit_backlog_limit=64 [ 316.301045][T11914] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11914 comm=syz.0.2330 [ 316.471071][T11917] lo speed is unknown, defaulting to 1000 [ 316.527670][T11917] lo speed is unknown, defaulting to 1000 [ 316.623312][T11926] xt_hashlimit: max too large, truncated to 1048576 [ 316.638224][T11926] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 316.680352][T11928] bond4: Removing last ns target with arp_interval on [ 317.069304][T11948] loop6: detected capacity change from 0 to 136 [ 317.116372][T11948] Attempt to read inode for relocated directory [ 317.208719][T11948] syz.6.2341: attempt to access beyond end of device [ 317.208719][T11948] loop6: rw=8912896, sector=335544428, nr_sectors = 4 limit=136 [ 317.284641][T11948] syz.6.2341: attempt to access beyond end of device [ 317.284641][T11948] loop6: rw=8388608, sector=335544428, nr_sectors = 4 limit=136 [ 317.327928][T11948] syz.6.2341: attempt to access beyond end of device [ 317.327928][T11948] loop6: rw=8388608, sector=335544428, nr_sectors = 4 limit=136 [ 317.438252][T11960] syz.6.2341: attempt to access beyond end of device [ 317.438252][T11960] loop6: rw=8388608, sector=335544428, nr_sectors = 4 limit=136 [ 317.653665][T11964] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2345'. [ 317.729689][T11948] syz.6.2341: attempt to access beyond end of device [ 317.729689][T11948] loop6: rw=8388608, sector=335544428, nr_sectors = 4 limit=136 [ 317.841725][T11960] syz.6.2341: attempt to access beyond end of device [ 317.841725][T11960] loop6: rw=8388608, sector=335544428, nr_sectors = 4 limit=136 [ 317.880964][T11967] xt_hashlimit: max too large, truncated to 1048576 [ 317.898462][T11967] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 317.911448][T11960] syz.6.2341: attempt to access beyond end of device [ 317.911448][T11960] loop6: rw=8388608, sector=335544428, nr_sectors = 4 limit=136 [ 317.947695][T11948] syz.6.2341: attempt to access beyond end of device [ 317.947695][T11948] loop6: rw=8388608, sector=335544428, nr_sectors = 4 limit=136 [ 318.068338][T11968] bond7: Removing last ns target with arp_interval on [ 318.078660][T11971] netlink: 'syz.5.2348': attribute type 58 has an invalid length. [ 318.088188][T11971] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2348'. [ 318.494617][T11985] loop6: detected capacity change from 0 to 1024 [ 318.553534][T11985] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 318.643418][T11985] ext4 filesystem being mounted at /310/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 318.705873][T11985] EXT4-fs error (device loop6): ext4_map_blocks:818: inode #15: comm syz.6.2353: lblock 0 mapped to illegal pblock 0 (length 6) [ 318.758974][T11985] EXT4-fs error (device loop6): ext4_map_blocks:818: inode #15: comm syz.6.2353: lblock 0 mapped to illegal pblock 0 (length 1) [ 318.792370][T11985] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 318.824865][T11985] EXT4-fs (loop6): This should not happen!! Data will be lost [ 318.824865][T11985] [ 318.896110][T11985] can: request_module (can-proto-3) failed. [ 318.935681][T10468] EXT4-fs error (device loop6): ext4_map_blocks:818: inode #15: comm kworker/u8:30: lblock 0 mapped to illegal pblock 0 (length 3) [ 318.953182][T10468] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 117 [ 318.967393][T10468] EXT4-fs (loop6): This should not happen!! Data will be lost [ 318.967393][T10468] [ 318.978919][ T6161] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 318.992126][T12012] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2361'. [ 319.006615][T12011] bond8: Removing last ns target with arp_interval on [ 319.036437][T12015] netlink: 300 bytes leftover after parsing attributes in process `syz.6.2362'. [ 319.487911][T12036] loop6: detected capacity change from 0 to 2048 [ 319.660093][T12036] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 319.763184][T12036] batadv1: entered promiscuous mode [ 319.797772][T12036] batadv1: entered allmulticast mode [ 319.856217][T12043] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2368'. [ 319.915428][T12036] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 319.964419][T12044] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 320.031018][T12043] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2368'. [ 320.077892][T12036] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 320.123690][T12044] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28 [ 320.171801][T12036] EXT4-fs (loop6): This should not happen!! Data will be lost [ 320.171801][T12036] [ 320.223073][T12044] EXT4-fs (loop6): This should not happen!! Data will be lost [ 320.223073][T12044] [ 320.243979][T12036] EXT4-fs (loop6): Total free blocks count 0 [ 320.260135][T12036] EXT4-fs (loop6): Free/Dirty block details [ 320.272862][T12044] EXT4-fs (loop6): Total free blocks count 0 [ 320.289160][T12036] EXT4-fs (loop6): free_blocks=2415919504 [ 320.299940][T12044] EXT4-fs (loop6): Free/Dirty block details [ 320.443712][ T28] kauditd_printk_skb: 744 callbacks suppressed [ 320.443742][ T28] audit: type=1400 audit(1771920850.395:22039): avc: denied { recv } for pid=6159 comm="syz-executor" saddr=10.128.0.163 src=30036 daddr=10.128.0.192 dest=59620 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 320.507968][ T28] audit: type=1400 audit(1771920850.395:22040): avc: denied { recv } for pid=28 comm="kauditd" saddr=10.128.0.163 src=30036 daddr=10.128.0.192 dest=59620 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 320.626785][ T28] audit: type=1400 audit(1771920850.395:22041): avc: denied { recv } for pid=28 comm="kauditd" saddr=10.128.0.163 src=30036 daddr=10.128.0.192 dest=59620 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 320.764603][ T28] audit: type=1400 audit(1771920850.515:22042): avc: denied { read write } for pid=6161 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 320.895269][ T28] audit: type=1400 audit(1771920850.515:22043): avc: denied { open } for pid=6161 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 320.969606][T12050] loop6: detected capacity change from 0 to 8192 [ 321.023610][ T28] audit: type=1400 audit(1771920850.515:22044): avc: denied { ioctl } for pid=6161 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=106 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 321.138485][ T28] audit: type=1400 audit(1771920850.535:22045): avc: denied { recv } for pid=2999 comm="udevd" saddr=10.128.0.163 src=30036 daddr=10.128.0.192 dest=59620 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 321.164737][ T28] audit: type=1400 audit(1771920850.535:22046): avc: denied { recv } for pid=2999 comm="udevd" saddr=10.128.0.163 src=30036 daddr=10.128.0.192 dest=59620 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 321.198102][ T28] audit: type=1400 audit(1771920850.535:22047): avc: denied { recv } for pid=2999 comm="udevd" saddr=10.128.0.163 src=30036 daddr=10.128.0.192 dest=59620 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 321.309348][ T28] audit: type=1400 audit(1771920850.575:22048): avc: denied { recv } for pid=3310 comm="syz-executor" saddr=10.128.0.163 src=30036 daddr=10.128.0.192 dest=59620 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 321.347344][T12068] loop0: detected capacity change from 0 to 1024 [ 321.381431][T12068] EXT4-fs: Ignoring removed bh option [ 321.415485][T12068] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 321.520712][T12070] Process accounting resumed [ 321.564928][ T9649] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.706057][T12080] batadv_slave_1: entered promiscuous mode [ 321.718145][T12079] batadv_slave_1: left promiscuous mode [ 322.093706][T12093] netlink: 'syz.0.2385': attribute type 2 has an invalid length. [ 322.139657][T12095] netlink: 'syz.0.2385': attribute type 2 has an invalid length. [ 322.148352][T12095] netlink: 'syz.0.2385': attribute type 8 has an invalid length. [ 322.154541][T12093] netlink: 'syz.0.2385': attribute type 8 has an invalid length. [ 322.156406][T12095] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2385'. [ 322.178061][T12093] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2385'. [ 322.222557][T12097] loop6: detected capacity change from 0 to 8192 [ 322.998712][T12106] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2389'. [ 323.238519][T12112] batadv_slave_1: entered promiscuous mode [ 323.451792][T12115] loop5: detected capacity change from 0 to 1024 [ 323.556252][T12115] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 323.581913][T12115] ext4 filesystem being mounted at /275/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 323.611651][T12115] EXT4-fs error (device loop5): ext4_map_blocks:818: inode #15: comm syz.5.2393: lblock 0 mapped to illegal pblock 0 (length 6) [ 323.629829][T12115] EXT4-fs error (device loop5): ext4_map_blocks:818: inode #15: comm syz.5.2393: lblock 0 mapped to illegal pblock 0 (length 1) [ 323.644894][T12115] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 323.658240][T12115] EXT4-fs (loop5): This should not happen!! Data will be lost [ 323.658240][T12115] [ 323.763230][T12108] batadv_slave_1: left promiscuous mode [ 323.781246][T10461] EXT4-fs error (device loop5): ext4_map_blocks:818: inode #15: comm kworker/u8:26: lblock 0 mapped to illegal pblock 0 (length 3) [ 323.850031][T10461] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 117 [ 323.894242][T10461] EXT4-fs (loop5): This should not happen!! Data will be lost [ 323.894242][T10461] [ 323.913405][T12126] lo speed is unknown, defaulting to 1000 [ 323.919733][T12126] lo speed is unknown, defaulting to 1000 [ 323.922472][ T6159] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 324.011362][T12128] lo speed is unknown, defaulting to 1000 [ 324.180220][T12131] loop6: detected capacity change from 0 to 512 [ 324.228932][T12128] lo speed is unknown, defaulting to 1000 [ 324.655728][T12131] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e028, mo2=0002] [ 324.719156][T12131] System zones: 0-2, 18-18, 34-34 [ 324.737641][T12155] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2402'. [ 324.784959][T12146] loop0: detected capacity change from 0 to 8192 [ 324.828289][T12131] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 42 vs 41 free clusters [ 324.878071][T12131] EXT4-fs (loop6): Remounting filesystem read-only [ 324.884989][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 324.885015][ C0] EXT4-fs (loop6): initial error at time 1771920854: ext4_mb_generate_buddy:1315 [ 324.885043][ C0] EXT4-fs (loop6): last error at time 1771920854: ext4_mb_generate_buddy:1315 [ 324.913894][T12131] EXT4-fs (loop6): 1 truncate cleaned up [ 324.927917][T12131] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 324.942022][T10468] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 324.984391][T10468] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 324.997221][T12131] ext4 filesystem being mounted at /322/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 325.032904][T10468] EXT4-fs (loop6): Quota write (off=8, len=24) cancelled because transaction is not started [ 325.084285][T12164] netlink: 'syz.5.2404': attribute type 58 has an invalid length. [ 325.123019][T12164] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2404'. [ 325.632865][ T28] kauditd_printk_skb: 614 callbacks suppressed [ 325.632890][ T28] audit: type=1400 audit(1771920855.525:22571): avc: denied { open } for pid=12170 comm="syz.5.2407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 325.740778][ T28] audit: type=1400 audit(1771920855.525:22572): avc: denied { perfmon } for pid=12170 comm="syz.5.2407" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 325.973039][ T28] audit: type=1400 audit(1771920855.525:22573): avc: denied { kernel } for pid=12170 comm="syz.5.2407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 326.007989][ T6161] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.353368][ T28] audit: type=1400 audit(1771920855.535:22574): avc: denied { create } for pid=12170 comm="syz.5.2407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 326.585897][ T28] audit: type=1400 audit(1771920855.535:22575): avc: denied { write } for pid=12170 comm="syz.5.2407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 326.658432][ T9649] audit: audit_backlog=65 > audit_backlog_limit=64 [ 326.665918][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 326.672527][ C1] audit: audit_lost=255 audit_rate_limit=0 audit_backlog_limit=64 [ 326.680383][ C1] audit: backlog limit exceeded [ 326.751704][ T9649] audit: audit_lost=256 audit_rate_limit=0 audit_backlog_limit=64 [ 327.337470][T12201] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2414'. [ 327.528924][T12203] loop5: detected capacity change from 0 to 8192 [ 327.582224][T12208] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2418'. [ 327.780639][T12216] loop0: detected capacity change from 0 to 128 [ 327.933038][T12215] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.2420'. [ 328.038119][T12215] bridge_slave_1: default FDB implementation only supports local addresses [ 328.214625][T12223] batadv_slave_1: entered promiscuous mode [ 328.277212][T12222] batadv_slave_1: left promiscuous mode [ 328.482347][T12239] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2427'. [ 328.798102][T12254] loop0: detected capacity change from 0 to 512 [ 328.842832][T12254] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 328.877172][T12254] EXT4-fs (loop0): 1 truncate cleaned up [ 328.914291][T12262] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2433'. [ 328.923768][T12254] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 329.022539][T12254] EXT4-fs (loop0): Online defrag not supported for non-extent files [ 329.058137][T12266] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2435'. [ 329.109675][ T9649] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 329.256697][T12277] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2439'. [ 329.505687][T12285] netlink: 'syz.2.2441': attribute type 58 has an invalid length. [ 329.561275][T12285] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2441'. [ 329.594228][T12289] loop5: detected capacity change from 0 to 128 [ 330.179026][T12301] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2445'. [ 330.463887][T12320] loop0: detected capacity change from 0 to 512 [ 330.486417][T12320] EXT4-fs error (device loop0): ext4_init_orphan_info:583: comm syz.0.2448: inode #0: comm syz.0.2448: iget: illegal inode # [ 330.522834][T12320] loop0: lost filesystem error report for type 5 error -117 [ 330.523009][T12320] EXT4-fs (loop0): get orphan inode failed [ 330.536240][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 330.536258][ C1] EXT4-fs (loop0): initial error at time 1771920860: ext4_init_orphan_info:583 [ 330.536279][ C1] EXT4-fs (loop0): last error at time 1771920860: ext4_init_orphan_info:583 [ 330.561466][T12320] EXT4-fs (loop0): mount failed [ 330.664206][ T28] kauditd_printk_skb: 800 callbacks suppressed [ 330.664224][ T28] audit: type=1400 audit(1771920860.565:23339): avc: denied { execmem } for pid=12327 comm="syz.0.2451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 330.763227][ T28] audit: type=1400 audit(1771920860.595:23340): avc: denied { recv } for pid=12327 comm="syz.0.2451" saddr=10.128.0.163 src=30036 daddr=10.128.0.192 dest=59620 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 330.795367][ T28] audit: type=1400 audit(1771920860.655:23341): avc: denied { recv } for pid=3298 comm="syz-executor" saddr=10.128.0.163 src=30036 daddr=10.128.0.192 dest=59620 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 330.795544][T12331] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2452'. [ 330.920968][T12333] loop0: detected capacity change from 0 to 1024 [ 330.931865][T12333] EXT4-fs: inline encryption not supported [ 330.938069][T12333] EXT4-fs: Ignoring removed bh option [ 331.010936][T12333] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 331.069425][T12333] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4222: comm syz.0.2451: Allocating blocks 497-513 which overlap fs metadata [ 331.085937][T12333] EXT4-fs (loop0): Remounting filesystem read-only [ 331.261787][ T28] audit: type=1400 audit(1771920860.665:23342): avc: denied { read write } for pid=12299 comm="syz.2.2444" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=59274 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 331.288813][ T28] audit: type=1400 audit(1771920860.665:23343): avc: denied { recv } for pid=12299 comm="syz.2.2444" saddr=10.128.0.163 src=30036 daddr=10.128.0.192 dest=59620 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 331.321769][ T28] audit: type=1400 audit(1771920860.675:23344): avc: denied { map } for pid=12299 comm="syz.2.2444" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=59274 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 331.361126][ T28] audit: type=1400 audit(1771920860.705:23345): avc: denied { read write } for pid=12299 comm="syz.2.2444" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=59274 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 331.412394][ T28] audit: type=1400 audit(1771920860.795:23346): avc: denied { open } for pid=12327 comm="syz.0.2451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 331.431246][T12341] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2454'. [ 331.449107][T12345] netlink: 'syz.2.2455': attribute type 58 has an invalid length. [ 331.465220][T12345] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2455'. [ 331.470030][T12327] EXT4-fs (loop0): pa ffff888105dae380: logic 256, phys. 385, len 8 [ 331.483117][ T28] audit: type=1400 audit(1771920860.795:23347): avc: denied { perfmon } for pid=12327 comm="syz.0.2451" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 331.532892][ T28] audit: type=1400 audit(1771920860.805:23348): avc: denied { kernel } for pid=12327 comm="syz.0.2451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 331.609536][ T9649] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 331.786086][T12356] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2459'. [ 331.951532][T12363] loop0: detected capacity change from 0 to 128 [ 332.420491][T12370] bridge0: port 3(syz_tun) entered blocking state [ 332.427995][T12370] bridge0: port 3(syz_tun) entered disabled state [ 332.434739][T12370] syz_tun: entered allmulticast mode [ 332.440877][T12370] syz_tun: entered promiscuous mode [ 332.446423][T12370] bridge0: port 3(syz_tun) entered blocking state [ 332.452883][T12370] bridge0: port 3(syz_tun) entered forwarding state [ 332.831018][T12374] loop6: detected capacity change from 0 to 1024 [ 332.834165][T12376] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2464'. [ 332.881773][T12374] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 332.895975][T12374] ext4 filesystem being mounted at /335/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 332.935687][T12374] EXT4-fs error (device loop6): ext4_map_blocks:818: inode #15: comm syz.6.2463: lblock 0 mapped to illegal pblock 0 (length 6) [ 332.952575][T12374] EXT4-fs error (device loop6): ext4_map_blocks:818: inode #15: comm syz.6.2463: lblock 0 mapped to illegal pblock 0 (length 1) [ 332.973095][T12374] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 333.032887][T12374] EXT4-fs (loop6): This should not happen!! Data will be lost [ 333.032887][T12374] [ 333.231773][T10461] EXT4-fs error (device loop6): ext4_map_blocks:818: inode #15: comm kworker/u8:26: lblock 0 mapped to illegal pblock 0 (length 3) [ 333.263329][T10461] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 117 [ 333.279034][T10461] EXT4-fs (loop6): This should not happen!! Data will be lost [ 333.279034][T10461] [ 333.293970][ T6161] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 333.770563][T12403] loop6: detected capacity change from 0 to 512 [ 333.825665][T12403] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c018, mo2=0002] [ 333.850911][T12403] System zones: 1-20 [ 333.863212][T12403] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 333.906814][T12411] xt_hashlimit: max too large, truncated to 1048576 [ 334.017092][T12417] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2472'. [ 334.019629][T12411] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 334.053644][ T6161] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 334.350751][T12428] loop0: detected capacity change from 0 to 128 [ 335.138592][T12446] batadv_slave_1: entered promiscuous mode [ 335.212113][T12444] batadv_slave_1: left promiscuous mode [ 335.448398][T12456] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2487'. [ 335.684819][ T28] kauditd_printk_skb: 715 callbacks suppressed [ 335.684839][ T28] audit: type=1400 audit(1771921121.642:24065): avc: denied { prog_load } for pid=12454 comm="syz.0.2485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 335.723448][T12463] netlink: 'syz.2.2488': attribute type 8 has an invalid length. [ 335.795035][T12463] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2488'. [ 335.941364][ T28] audit: type=1400 audit(1771921121.632:24064): avc: denied { open } for pid=12454 comm="syz.0.2485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 336.058011][ T28] audit: type=1400 audit(1771921121.692:24066): avc: denied { perfmon } for pid=12454 comm="syz.0.2485" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 336.205853][ T28] audit: type=1400 audit(1771921121.722:24067): avc: denied { perfmon } for pid=12454 comm="syz.0.2485" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 336.277969][T12472] loop5: detected capacity change from 0 to 512 [ 336.329365][T12472] EXT4-fs: Ignoring removed nobh option [ 336.354357][ T28] audit: type=1400 audit(1771921121.732:24068): avc: denied { perfmon } for pid=12454 comm="syz.0.2485" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 336.432038][T12472] EXT4-fs (loop5): 1 orphan inode deleted [ 336.535179][T12472] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 336.674627][ T28] audit: type=1400 audit(1771921121.742:24069): avc: denied { perfmon } for pid=12454 comm="syz.0.2485" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 336.871142][T12479] audit: audit_backlog=65 > audit_backlog_limit=64 [ 336.889336][ T28] audit: type=1400 audit(1771921121.742:24070): avc: denied { bpf } for pid=12454 comm="syz.0.2485" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 336.954095][T12479] audit: audit_lost=269 audit_rate_limit=0 audit_backlog_limit=64 [ 337.004891][T12481] audit: audit_backlog=65 > audit_backlog_limit=64 [ 337.365215][ T6159] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 337.441608][T12495] batadv_slave_1: entered promiscuous mode [ 337.447876][T12492] batadv_slave_1: left promiscuous mode [ 337.720617][T12504] loop6: detected capacity change from 0 to 8192 [ 337.753054][T12505] loop5: detected capacity change from 0 to 128 [ 338.712861][ C1] ================================================================== [ 338.721159][ C1] BUG: KCSAN: data-race in wq_worker_tick / wq_worker_tick [ 338.728475][ C1] [ 338.730797][ C1] read-write to 0xffff8881000c5ed8 of 8 bytes by interrupt on cpu 0: [ 338.738956][ C1] wq_worker_tick+0x60/0x230 [ 338.743650][ C1] sched_tick+0xda/0x210 [ 338.748098][ C1] update_process_times+0x15e/0x190 [ 338.753397][ C1] tick_nohz_handler+0x275/0x3d0 [ 338.758620][ C1] __hrtimer_run_queues+0x218/0x4f0 [ 338.763847][ C1] hrtimer_interrupt+0x269/0x810 [ 338.768794][ C1] __sysvec_apic_timer_interrupt+0x5f/0x1f0 [ 338.774698][ C1] sysvec_apic_timer_interrupt+0x6f/0x80 [ 338.780335][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 338.786313][ C1] crng_make_state+0xc1/0x200 [ 338.790987][ C1] _get_random_bytes+0x85/0x1b0 [ 338.795836][ C1] get_random_bytes+0x1d/0x30 [ 338.800505][ C1] nsim_dev_trap_report_work+0x23c/0x630 [ 338.806142][ C1] process_scheduled_works+0x4de/0x9e0 [ 338.811619][ C1] worker_thread+0x581/0x770 [ 338.816325][ C1] kthread+0x22a/0x280 [ 338.820385][ C1] ret_from_fork+0x150/0x360 [ 338.824971][ C1] ret_from_fork_asm+0x1a/0x30 [ 338.829826][ C1] [ 338.832136][ C1] read-write to 0xffff8881000c5ed8 of 8 bytes by interrupt on cpu 1: [ 338.840200][ C1] wq_worker_tick+0x60/0x230 [ 338.844879][ C1] sched_tick+0xda/0x210 [ 338.849118][ C1] update_process_times+0x15e/0x190 [ 338.854345][ C1] tick_nohz_handler+0x275/0x3d0 [ 338.859379][ C1] __hrtimer_run_queues+0x218/0x4f0 [ 338.864582][ C1] hrtimer_interrupt+0x269/0x810 [ 338.869690][ C1] __sysvec_apic_timer_interrupt+0x5f/0x1f0 [ 338.875578][ C1] sysvec_apic_timer_interrupt+0x6f/0x80 [ 338.881218][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 338.887351][ C1] crng_make_state+0xc1/0x200 [ 338.892061][ C1] _get_random_bytes+0x85/0x1b0 [ 338.896905][ C1] get_random_bytes+0x1d/0x30 [ 338.901573][ C1] nsim_dev_trap_report_work+0x216/0x630 [ 338.907206][ C1] process_scheduled_works+0x4de/0x9e0 [ 338.912752][ C1] worker_thread+0x581/0x770 [ 338.917341][ C1] kthread+0x22a/0x280 [ 338.921486][ C1] ret_from_fork+0x150/0x360 [ 338.926164][ C1] ret_from_fork_asm+0x1a/0x30 [ 338.930998][ C1] [ 338.933407][ C1] value changed: 0x0000000000120160 -> 0x0000000000122870 [ 338.940552][ C1] [ 338.942965][ C1] Reported by Kernel Concurrency Sanitizer on: [ 338.949211][ C1] CPU: 1 UID: 0 PID: 53 Comm: kworker/u8:4 Tainted: G W syzkaller #0 PREEMPT(full) [ 338.960067][ C1] Tainted: [W]=WARN [ 338.963858][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 338.973911][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 338.980947][ C1] ================================================================== [ 346.543645][ T28] kauditd_printk_skb: 443 callbacks suppressed [ 346.543658][ T28] audit: type=1400 audit(1771921132.502:24481): avc: denied { egress } for pid=14 comm="ksoftirqd/0" saddr=fe80::a8aa:aaff:feaa:aa1c daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 346.575619][ T28] audit: type=1400 audit(1771921132.502:24482): avc: denied { sendto } for pid=14 comm="ksoftirqd/0" saddr=fe80::a8aa:aaff:feaa:aa1c daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1