last executing test programs: 2m1.107141158s ago: executing program 0 (id=1731): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1e, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x2d, 0x8, 0x2, 0x3d}, {0x4}, {0x3, 0xfd}, {0x0, 0x0, 0x0, 0x10000000}, {}, {0x0, 0xe, 0xf8}, {0x6, 0x0, 0x1}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0xfffffffc}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x1e, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000080)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x70bd2b, 0x25dfdbfb, {0xa, 0x80, 0x80}, [@RTA_MARK={0x8, 0x10, 0xc}]}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x2404c8c0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xe, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={0xffffffffffffffff, &(0x7f0000000800)="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", 0x0}, 0x20) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000001000010025bdff00ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="3a2906000300000008001b0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x40845}, 0x4000000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000040)={'syztnl1\x00', 0x0}) r4 = socket(0x1, 0x2, 0x0) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_config_ext={0x8000000000000001, 0xf980}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x94e4, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfffffffa, 0x4, @perf_bp={0x0, 0x6}, 0x19183, 0x1, 0x5, 0xb, 0xa, 0x904813a5, 0x4, 0x0, 0x0, 0x0, 0xffffffffffff0000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="380000000b0601020000000000000000010000030900020073797a31000000000500010007000000100007800c000180080001400a010102"], 0x38}, 0x1, 0x1000000, 0x0, 0x24004800}, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r5) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c0002"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0xf8546, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={0x0, 0x8}, 0x292, 0xa7, 0x2, 0x5, 0x6, 0x9b9a, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r7, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r4}, 0x20) 2m1.04165548s ago: executing program 0 (id=1732): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1e, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x2d, 0x8, 0x2, 0x3d}, {0x4}, {0x3, 0xfd}, {0x0, 0x0, 0x0, 0x10000000}, {}, {0x0, 0xe, 0xf8}, {0x6, 0x0, 0x1}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0xfffffffc}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x1e, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000080)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x70bd2b, 0x25dfdbfb, {0xa, 0x80, 0x80}, [@RTA_MARK={0x8, 0x10, 0xc}]}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x2404c8c0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xe, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r2], 0x4c}}, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={0xffffffffffffffff, &(0x7f0000000800)="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", 0x0}, 0x20) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000001000010025bdff00ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="3a2906000300000008001b0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x40845}, 0x4000000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000040)={'syztnl1\x00', 0x0}) r5 = socket(0x1, 0x2, 0x0) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_config_ext={0x8000000000000001, 0xf980}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x94e4, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfffffffa, 0x4, @perf_bp={0x0, 0x6}, 0x19183, 0x1, 0x5, 0xb, 0xa, 0x904813a5, 0x4, 0x0, 0x0, 0x0, 0xffffffffffff0000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="380000000b0601020000000000000000010000030900020073797a31000000000500010007000000100007800c000180080001400a010102"], 0x38}, 0x1, 0x1000000, 0x0, 0x24004800}, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r6) sendmsg$ETHTOOL_MSG_DEBUG_SET(r6, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c0002"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0xf8546, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={0x0, 0x8}, 0x292, 0xa7, 0x2, 0x5, 0x6, 0x9b9a, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r8, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r5}, 0x20) 2m0.816153297s ago: executing program 0 (id=1736): syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file1\x00', 0x2000c12, &(0x7f0000000240)={[{@check_relaxed}, {@gid}, {@map_normal}, {@overriderock}, {@check_strict}, {@session={'session', 0x3d, 0x3b}}, {@sbsector={'sbsector', 0x3d, 0x1}}, {@iocharset={'iocharset', 0x3d, 'macroman'}}, {@check_relaxed}, {@nojoliet}, {@hide}, {@session={'session', 0x3d, 0x5d}}]}, 0x4, 0xa24, &(0x7f0000001380)="$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") r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x22}}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xd}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmmsg$inet6(r1, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="cd", 0x1}], 0x1}}], 0x4000000000000ec, 0x8001) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/165, 0xa5, 0x1, 0x0}, &(0x7f0000000180)=0x40) tkill(0x0, 0x7) 1m59.769020979s ago: executing program 0 (id=1742): socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f00000000c0)={[{@bh}]}, 0x83, 0x4bc, &(0x7f00000007c0)="$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") chdir(&(0x7f0000000140)='./file0\x00') socketpair$unix(0x1, 0x5, 0x0, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0xd0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) openat2$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/file0\x00', &(0x7f0000000380)={0x40, 0x182, 0x2}, 0x18) 1m58.08468838s ago: executing program 0 (id=1749): acct(0x0) r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x3, 0x710, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x30e600, 0x1000, 0x40, 0x0, 0x7, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) write$char_usb(r2, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4810) 1m57.340808122s ago: executing program 0 (id=1755): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x1001, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0xc2240edb8ac75ac9}, @TCA_TBF_BURST={0x8, 0x6, 0xff}, @TCA_TBF_PARMS={0x28, 0x1, {{0x59, 0x2, 0x84a, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x4, 0xb}, 0x5, 0x34, 0x91f}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x24, 0x2a, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r3, {0x10}, {}, {0xe, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) 1m57.297665063s ago: executing program 32 (id=1755): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x1001, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0xc2240edb8ac75ac9}, @TCA_TBF_BURST={0x8, 0x6, 0xff}, @TCA_TBF_PARMS={0x28, 0x1, {{0x59, 0x2, 0x84a, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x4, 0xb}, 0x5, 0x34, 0x91f}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x24, 0x2a, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r3, {0x10}, {}, {0xe, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) 19.56693542s ago: executing program 2 (id=2304): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x2, 0xfffffffe, 0xf, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1802000080ffffff0000000000000000850000005600000085000000080000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0xb) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x3}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r4 = openat$cgroup_devices(r3, &(0x7f0000000480)='devices.deny\x00', 0x2, 0x0) mkdirat$cgroup(r3, &(0x7f0000000100)='syz0\x00', 0x1ff) write$cgroup_devices(r4, &(0x7f0000000180)={'c', ' *:* ', 'rwm\x00'}, 0xa) syz_usb_connect$uac1(0x1, 0xc3, &(0x7f0000000540)=ANY=[@ANYBLOB="12010003000000ffcc178d0d4000010203010902b10003010d80070904000000010100000a2401070035000201020924030305040106ff1324060303060a0003000300040009000700030f240606020403000800040007009e0904010000010200000904010101010200000b2402017f040c016af71a09240201001004039b09240201070302049109240201020709018309050109ff030740031025010c2df7ff090402004cca4067f0272c8be8000001020000090402010101020000090500eb080725010402010000000000"], &(0x7f0000000500)={0xa, &(0x7f0000000440)={0xa, 0x6, 0x110, 0x0, 0x5, 0x9, 0x8, 0x9}, 0x5, &(0x7f0000000480)={0x5, 0xf, 0x5}, 0x1, [{0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x4c0a}}]}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000100)='(()}^+&)\x00') ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r5], 0x68}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x1, 0x2}, {0xd, 0x10}, {0x1, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0) 14.678325728s ago: executing program 2 (id=2313): r0 = socket$inet6(0xa, 0x2, 0x0) close(0x3) socket$key(0xf, 0x3, 0x2) socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) r1 = socket$key(0xf, 0x3, 0x2) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x5fa) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r2 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000180)={{{@in=@local, @in=@rand_addr=0x64010100, 0x4e22, 0x0, 0x0, 0x48, 0x2, 0x0, 0x0, 0x1}, {0xfffffffffffffffd, 0x0, 0x3, 0x2, 0x5, 0x5, 0x5, 0xfffffffffffffffd}, {0x2, 0xffffffffffff90df, 0x0, 0x20000000000000}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x4d4, 0x6c}, 0x2, @in=@broadcast, 0x3502, 0x4, 0x3, 0x0, 0x0, 0x0, 0x200000}}, 0xe8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r3 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x2005, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)=@generic={&(0x7f0000000080)='./file1\x00', 0x0, 0x10}, 0x18) accept4(r3, &(0x7f0000000200)=@ieee802154={0x24, @short}, &(0x7f0000000280)=0x80, 0x9bd24579ac7c443) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x3214, 0x521041) r5 = open$dir(&(0x7f0000000180)='./file1\x00', 0x300, 0x0) openat(r5, &(0x7f00000001c0)='./file1\x00', 0x109000, 0x13) syz_usb_disconnect(r4) syz_usb_connect(0xae83530651280f4b, 0x36, 0x0, 0x0) ioctl$EVIOCRMFF(r4, 0xc0085504, &(0x7f00000002c0)=0x7) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0xa, 0x4e21, 0x80000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xfffffffb}, 0x1c, 0x0, 0x0, 0x0, 0xffffffffffffff2b}, 0x0) 13.965910379s ago: executing program 5 (id=2316): setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x108) r0 = socket$netlink(0x10, 0x3, 0x0) write(r0, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB=' '], 0x20}], 0x1}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x1, 0x0) sync_file_range(0xffffffffffffffff, 0x2, 0x9, 0x2) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, 0x0, 0x4000000) mount$9p_unix(0x0, 0x0, 0x0, 0x32c9498, 0x0) mount$cgroup(0x0, 0x0, 0x0, 0x20040ac, 0x0) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) ioctl$TCSETAF(r1, 0x5408, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) write$binfmt_aout(r1, 0x0, 0xff2e) ioctl$TCSETS(r1, 0x40045431, 0x0) syz_open_pts(r1, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0xf, 0x0, 0x0) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x2200890, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='mountinfo\x00') r3 = openat$tun(0xffffffffffffff9c, 0x0, 0xa2f01, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) sendfile(r2, r2, &(0x7f0000000000)=0x2eb4, 0x2000007ff) 13.845344383s ago: executing program 5 (id=2318): perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0xfffffffe, 0xdd5}, 0x0, 0x0, 0xfffc, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, 0x0, 0x421647, 0x160) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000480)='./bus\x00', 0x0, &(0x7f00000000c0)={[{@noload}, {@noload}, {@lazytime}, {@noload}, {@resgid}, {@auto_da_alloc}]}, 0xff, 0x451, &(0x7f0000000940)="$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") syz_open_procfs(0x0, &(0x7f0000002080)='pagemap\x00') close(0x3) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x33) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000088) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x12902, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f00000000c0)={0xffffffd1, 0x1, 0xffffffff, 0x831a, 0x1, "030000000000000000049dd0ffd76d7fcb0b0e", 0x1, 0x201}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000240)=0x98) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0xff) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xe, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x40f00, 0x39, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x2, 0x200008, 0x5, 0x1ffff}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a09040000000000000000020000004c000480300001800e000100696d6d6564696174650000001c000280100002800c00028008000180000000000800014000000000180001800d00010073796e70726f787900000000040002800900010073797a30000000000900020073797a320000000014000000110001"], 0xa0}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a14000000020aff0100000000000000000200000114000000110001"], 0x3c}, 0x1, 0x0, 0x0, 0x4011}, 0x4000094) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, 0x0) 12.357318488s ago: executing program 5 (id=2324): socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0xfd, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x11004, 0x20d9, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000200)) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180), 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x7, &(0x7f00000009c0)=ANY=[@ANYBLOB="852000000000000018600000100000000000000001000000181100006745fee465b3c5e47801c65e76d5078cda5bfadc5ab968f39e88d82276271eb1a31c0e8dde21122182fb3fd72d2783fe3f25397d3a82ff85db08628843d907a172c3e00a740e5e0a5ce491d8d70cdba02ff76dedaf369cf57cb64e4a0d485e9317d9d1a552fec1d6dc57d6b724cc3839cd728dfdbd9bcbf203b4315c18a3765324cc8abb1c6aeec3e4816792a4bc13a62e", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000000000008500000086"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r2}, &(0x7f0000000200), &(0x7f00000003c0)=r3}, 0x20) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'veth0_to_team\x00', 0x0}) sendmsg$IPCTNL_MSG_CT_GET_STATS(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, 0x5, 0x1, 0x3, 0x0, 0x0, {0x5, 0x0, 0xa}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) sigaltstack(&(0x7f0000000000)={0x0, 0x0, 0xef79a02a762ea6f1}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="120000001d000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r7}, &(0x7f0000000340), &(0x7f0000000780)=r6}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000500)={r7, &(0x7f0000000400), 0x0}, 0x20) sigaltstack(0x0, &(0x7f0000000480)={0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_BETA={0x8, 0x5, 0x3}, @TCA_PIE_ECN={0x8}]}}]}, 0x40}}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x14, r8, 0x2, 0x70bd2b, 0x25dfdbfb, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48c1}, 0x4) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) r9 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$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") ioctl$EXT4_IOC_GROUP_ADD(r9, 0x40e8662e, &(0x7f00000000c0)={0x43a0, 0x100000000, 0x7ffffffffff00002, 0x1, 0xffffdeff}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x38, r8, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xf, 0x22}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040000) 12.356378518s ago: executing program 3 (id=2325): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) socket$inet(0x2, 0x3, 0x2) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") r0 = creat(&(0x7f0000000000)='./file0\x00', 0x6b) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r0, 0x15, 0x0, @void}, 0x10) setpgid(r1, r1) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401e, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x4, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x7, 0x8, 0x3, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) tkill(r1, 0x7) wait4(r1, 0x0, 0x0, 0x0) syz_emit_ethernet(0x22, &(0x7f0000000180)=ANY=[@ANYBLOB="d10000a7579c0a730a9d94abfa00000800000000e9ff00002c00000c0200"], 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x20, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) r2 = io_uring_setup(0x41000a71, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0xba01, 0x0, 0x4000}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) prlimit64(r1, 0x1, 0x0, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000025c0), 0x0, 0x0, 0x0) write$binfmt_elf32(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="c18a02a9fd9d33e060d30000000000000300060009dc0a00", @ANYRESDEC=0x0, @ANYRES32], 0x58) close(r0) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f0000000280)="39000000140081ae0000dc676f97daf01effffff0521018701546fabca1b4e8a06a6580e88370200c5090000009c40ebb37b4b49abc51245e7", 0x39}], 0x1}, 0x0) 11.440832526s ago: executing program 1 (id=2327): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, 0x0, 0x110) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f00000006c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x108) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={0x0}, 0x80, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './bus\x00'}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000040) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$unix(r2, 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f00000003c0)=0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x8040}, 0x4000) getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000b40)=@delchain={0x34, 0x2e, 0x1, 0x70bd2f, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffe9, 0xffff}, {0x0, 0x1a}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x44080) r7 = open(0x0, 0x400141042, 0x0) ioctl$FS_IOC_FSSETXATTR(r7, 0x401c5820, &(0x7f00000002c0)={0xfaa8, 0x401, 0x5, 0x8, 0x101}) socket$can_bcm(0x1d, 0x2, 0x2) 11.416100286s ago: executing program 5 (id=2329): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000440)={[{@resgid={'resgid', 0x3d, 0xee00}}, {}, {@grpquota}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@delalloc}, {@nogrpid}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f00000006c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwIF6kCCIWxD/Au8fiH6B/RUELRUrQg5fIbGbbbZLNJunWbJ3PB6Z9b2ayb96++b79zs4uG0BhjWT/lCJejoivk4iDbdsGI984srLf0sNrk9mSxPLyJ38mkeTrWvsn+f/788pLEfHLFxHHS2vbrS8szlSq1XQur482Zi+P1hcWT1ycrUyn0+ml8YmJU29NjL/7zts96+vr5/7+7uO7H5z66ujStz/dP3Q7iTNxIN/W3o+ncKO9MhIj+XMyFGdW7TjWg8b6SbLTB8C2DORxPhTZHHAwBvKoB/7/rkfEMlBQifiHgmrlAa1r+x5dBz83Hry/cgG0tv+DK++NxJ7mtdG+peSJK6Psene4B+1nbfz8x53b2RJd3oe43oP2AFpu3IyIk4ODa+e/JJ//tu9k883jja1uo2ivP7CT7mb5zxvr5T+lR/lPrJP/7F8ndreje/yX7vegmY6y/O+9dfPfR1PX8EBee6GZ8w0lFy5W05MR8WJEHIuh3Vl9o/s5p5buLXfa1p7/ZUvWfisXzI/j/uDuJ/9mqtKoPE2f2z24GfHK4/w3iTXz/55mrrt6/LPn41xW+PXLrm0cSe+82mlb9/63630GvPxjxGvrjv/jO1rJxvcnR5vnw2jrrFjrr1tHfuvU/tb633vZ+O/buP/DSfv92vrW2/hhzz9pp23bPf93JZ82y7vydVcrjcbcWMSu5KO168cf/22r3to/6/+xoxvPf+ud/3sj4rNN9v/W4Vsdd+2H8Z/a0vhvvXDvw8+/79T+5sb/zWbpWL5mM/PfZg/waZ47AAAAAAAA6DeliDgQSan8qFwqlcsrn+84HPtK1Vq9cfxCbf7SVDS/KzscQ6XWne6DbZ+HGMs/D9uqj6+qT0TEoYj4ZmBvs16erFWndrrzAAAAAAAAAAAAAAAAAAAA0Cf2d/j+f+b3gZ0+OuCZ85PfUFxd478Xv/QE9CWv/1Bc4h+KS/xDcYl/KC7xD8Ul/qG4xD8Ul/gHAAAAAAAAAAAAAAAAAAAAAAAAAACAnjp39my2LC89vDaZ1aeuLMzP1K6cmErrM+XZ+cnyZG3ucnm6VpuupuXJ2my3x6vWapfHxmP+6mgjrTdG6wuL52dr85ca5y/OVqbT8+nQf9IrAAAAAAAAAAAAAAAAAAAAeL7UFxZnKtVqOqfQsXA6+uIwtl1Iuo3y6fxk2NIjR14Y3PkOKjyDwg5PTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQ5t8AAAD//8nLNLM=") setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) r3 = creat(&(0x7f0000000240)='./file0/file0\x00', 0x20) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000080), &(0x7f0000001400)=ANY=[], 0x835, 0x2) syz_clone(0x400b000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f00000013c0)=""/4096, 0x5}], 0x3f, 0x0, 0x0) setsockopt$inet_opts(r4, 0x0, 0x4, 0x0, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r3, 0x29, 0x41, &(0x7f0000000c40)={'mangle\x00', 0xf4, "81952e831f5f34f1eafc40c6ce02f2787be8e0b75f55827d8a8ac7458d4428352524e9f65b98abe2f98c8d0c8b26aaf99199b0f5f15f2ebc8cb061e42ce04b0eb378030462b40d4b09ad24beb0c4d0ad49d975f7620a4b05b501592406a724896443e89686eccdfba5c48efae3909ea30e15c44f53f7e67a6f86c3ee51ddff3d7ddfe4609d3bc7179842fefda939b35acb2e940f2eb516df1bee18141014825d0e89b9a6ae7b12d7ab8acf9338ef9d05addb43e18a66fc2e7b4210d662a1eaff68b2ae9c59c56acf896c113a4f03cbfde8638a11181659c2a320909049c5267db4c62f9c9ed8e1737ebcf224598b3cdf128de295"}, &(0x7f0000000d80)=0x118) setsockopt$inet_opts(r4, 0x0, 0x4, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f00000005c0)='syz_tun\x00', 0x10) sendto$inet(r5, 0x0, 0x0, 0x24000840, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x84, &(0x7f0000000340)={@local, @random="3747e76de379", @void, {@ipv4={0x800, @icmp={{0xf, 0x4, 0x2, 0x1, 0x76, 0x67, 0x0, 0x4, 0x1, 0x0, @loopback, @empty, {[@ssrr={0x89, 0xb, 0xb9, [@loopback, @multicast1]}, @timestamp={0x44, 0x14, 0x69, 0x0, 0x5, [0xfffffff8, 0x3739, 0xe, 0x8]}, @timestamp={0x44, 0x8, 0xbb, 0x0, 0xa, [0x9]}]}}, @dest_unreach={0x3, 0xf, 0x0, 0x0, 0x31, 0x9, {0xb, 0x4, 0x0, 0x0, 0x7, 0x67, 0x2, 0xb5, 0x5e, 0x0, @broadcast, @local, {[@noop, @timestamp_prespec={0x44, 0x14, 0x8c, 0x3, 0x4, [{@multicast2, 0x6}, {@multicast2, 0x7ff}]}]}}, "9baf4fbb5694"}}}}}, 0x0) 11.415488006s ago: executing program 2 (id=2330): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000340)=ANY=[@ANYRES32], 0x20}, 0x1, 0x0, 0x0, 0x20000814}, 0x14) r1 = socket$inet6(0xa, 0x80003, 0x6) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) sendmmsg$inet6(r2, &(0x7f0000000140)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4db, @local, 0x3}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000100)='{', 0x1}], 0x1}}], 0x1, 0x4c040) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0xff00) close(r0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r5 = accept(r3, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x8004}, 0x1) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) unshare(0x6a040000) socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xb, 0x0, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) 11.340158728s ago: executing program 3 (id=2331): socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x0, 0x0}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, 0x0, {0xc, 0xc}, {0x0, 0xfff1}, {0x0, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4041080) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() r2 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {0x0, 0x1}, 0x3f, 0x0, &(0x7f0000000080)={0x1, 0x30, 0x0, 0x2c5, 0x4}, 0xfffffffffffffd7a, 0x8, 0x7, 0x0, 0x2000, 0x200001, 0x0}) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005000100040000000600180000100000060019"], 0x4c}}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r7) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000030000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="180800000000f9710e4c00002000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000014000000b70300002bb91a008500000008000000bc0900000000000045090100002000009500000000000000850000000c000000bf9800000000000056090000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x6b, '\x00', 0x0, @sock_ops=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) io_setup(0x325, 0x0) 10.239006602s ago: executing program 1 (id=2332): madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000010c0)={@fallback, 0xffffffffffffffff, 0x18, 0x34}, 0x20) r0 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x80000, 0x0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x5c}}, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c00)=@delsa={0x48, 0x11, 0x1, 0x70bd25, 0x25dfdbfd, {@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d3, 0xa, 0x3c}, [@srcaddr={0x14, 0xd, @in6=@mcast2}, @mark={0xc, 0x15, {0x35075d, 0x8}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8801}, 0x0) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfc}, 0xc) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'dummy0\x00', 0x0}) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000140)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, r7}) r9 = socket(0x10, 0x3, 0x0) write(r9, &(0x7f0000000040), 0x0) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x10) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) sendmsg$kcm(r9, &(0x7f00000024c0)={&(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0x0, 0x4000}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000001100)}, {0x0}, {&(0x7f0000000500)="22b0b749cc1646452f91ae4d5e969cac4e8034b6b10dff0d6d002cc443d4b72cd31cfa62216925b2fdf9ae5ae7c2d1bc7912dea6a895a19f652e1f1865ca4853f5e3dc12a8f93afb7aa58045d4bd7017b68ff7ee69203731d9d66809ebf01fd0711e1a8cd43c7d14b0703e32f02a983a93c17b2ddc43db39ae7f3281bcb0aa5994e7011a889621e1c2cda277ab3198888a9e305d76575aa690654bf0f7b5df770d1a58bb", 0xa4}], 0x3, &(0x7f0000002140)=[{0x10, 0x10f, 0x3ff}, {0x58, 0x117, 0x5, "8ac9ef3db41276b95f04ffe7bd5e2da34680a5cfc46b95fef2feeefdffac6aae212bc6f03f180bacc17f482070e7173a7ea6f156d5ab18fdc0d03e95f7e3eec01262f8"}, {0x88, 0x109, 0x5, "3178f829e256f4ff4bf874694a829ea6571e78aaef162b3c85391d1f0f94806627d116339802e11edab6e3c89efa0356706617051f7de24cf18676e4d4be59a8db2c5f2a7ec1a1b25248ef95a83c0b7a60b95632be0d0699f3b7da31113c4046e560a9a2a284b4b3d738b4b2af149e1340"}, {0x78, 0x0, 0x2a, "a7e338fd789a5219cd5d5ce14fa534c0169b2f8a478a082a30bacecd08c5c6730f4b21a91f2cdc4e4059a35f63c05d9bc6224f29c2d20517fb415758c53cf6cd8f563f21512dca2365b41859b10cc015b7edd8c24c5ed4fc02b8e30cffb96fdc652c71724ed5"}, {0x40, 0x102, 0x9, "df3abeea7dc00e6bc479fa605ca93395abccc490d19b8f83f8eb562912824646103ead4e7c4140a2ac"}, {0xd0, 0x0, 0x63f6, "bad03c4aca1e5db035c78f63f7c8c23362350da220f8219e90ca8dc46e55fe5d0a8727ced324110426d75c18c6888c5cdce7ab72f4f378304edc9e32976c8d719c485bf0c4f4be320a3a17efbf86f2c1541a909e55e481e06b746242d6724e46e70ba7a142733c6130f70ea96beb6d27200b53e462845670649ae36c263e55429c2462fb7499c525a603ae669c37476604666c2fd5bc5810d6126cea0d60f658af130986ed954b977c2ab7c42c840f0103db49444e9adf5d022049fa3af9bc98"}], 0x278}, 0x20000800) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=@ipv6_getnexthop={0x20, 0x6a, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NHA_ID={0x8, 0x1, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x4010}, 0x0) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) 8.101901356s ago: executing program 4 (id=2334): getresuid(0x0, 0x0, 0x0) clock_gettime(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000001b00)=@generic={&(0x7f0000000540)='./file0\x00'}, 0x18) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b9ac9ff, 0x0, 0x0, 0x0, 0x800000, 0x5a6c903, 0x1000000000000001, 0xec, 0xfffffffffffffffe, 0x8, 0x0, 0x1, 0x1}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1f}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x11}]}, 0x24}}, 0x44004) r1 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) write$selinux_create(r1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x80078b, &(0x7f00000000c0)={[{@usrjquota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@delalloc}, {@nobh}, {@min_batch_time={'min_batch_time', 0x3d, 0xb656}}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x46f, &(0x7f0000000bc0)="$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") r2 = io_uring_setup(0x40000a71, &(0x7f0000000240)={0x0, 0x86a1, 0x10, 0x3, 0x277}) r3 = socket$kcm(0x29, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r5, &(0x7f0000000300)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x20000015) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000180)={0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000040)={r5, r4}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f0000000100)={r5}) close_range(r2, 0xffffffffffffffff, 0x0) 7.701776498s ago: executing program 1 (id=2335): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x7}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, r3, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x400b000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) splice(r6, 0x0, r7, 0x0, 0x38f9, 0x0) ioctl$TCSETSF(r7, 0x5404, &(0x7f0000000140)={0xbf, 0x8, 0x5, 0xd6b9, 0x4, "8c1acc79271dc754cd3d305ce67bee5e26fe75"}) ptrace$cont(0x1f, r5, 0x245, 0x5) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3000010, &(0x7f0000000000), 0x3e, 0x51a, &(0x7f0000001200)="$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") socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x10, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @exit, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa, 0x0, 0xfffd}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xc}, 0x94) syz_io_uring_setup(0x110, &(0x7f0000000400)={0x0, 0xd386, 0x0, 0x80000003, 0x7f}, 0x0, 0x0, 0x0) 7.558453342s ago: executing program 3 (id=2336): openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) getpid() r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRESDEC], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x1c, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000004000000850000008200000018", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000208500000017000000bf91000000000000b7020000210000008500000084000000b70000000000"], 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mknod(0x0, 0x8001420, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x11, 0x8d}, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x80000001) poll(0x0, 0x0, 0x9) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002c80)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r6 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) r8 = openat$cgroup_subtree(r7, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x10, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000100018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100013800002c09000000000000b7020000000000007b2af8fe00000000b509000000000000dbaaf8fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffc70200000800000018220000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6.679197089s ago: executing program 2 (id=2337): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x20, 0x400000, 0x0, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) eventfd2(0x8, 0x0) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb801b, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0xb093, 0x9, 0x5, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x9) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x380000c, &(0x7f0000000340)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@debug}, {@data_journal}]}, 0x1, 0x437, &(0x7f0000000900)="$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") r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r5, 0x0) recvmmsg(r5, &(0x7f0000000080), 0x72a, 0x0, 0x0) sendmmsg(r5, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24000001) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) fsopen(&(0x7f0000000000)='debugfs\x00', 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r6 = fsopen(&(0x7f00000000c0)='tmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x128}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 4.752941007s ago: executing program 5 (id=2338): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x2, 0xa, 0x5, 0x2, 0xb, 0x0, 0x70bd2c, 0x25dfdbfd, [@sadb_key={0x1, 0xfe84b3a254e2cdb9}, @sadb_x_policy={0x8, 0x12, 0x2, 0x0, 0x0, 0x6e6bb1, 0xfffffff9, {0x6, 0x6c, 0x2, 0x9, 0x0, 0x8, 0x0, @in6=@mcast1, @in6=@private1={0xfc, 0x1, '\x00', 0x1}}}]}, 0x58}}, 0x40004) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000040154220a9055015bbe4010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3a00052, &(0x7f00000000c0)={[{@abort}, {@jqfmt_vfsold}, {@lazytime}]}, 0x5, 0x7e5, &(0x7f00000018c0)="$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") r2 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r2, 0x5, &(0x7f0000001bc0)='sync\x00', 0x0, 0x4) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000040)=0x716, 0x4) sendmmsg$inet6(r3, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x4004000) recvfrom$inet6(r3, 0x0, 0x0, 0x2020, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_control_io$uac3(0xffffffffffffffff, &(0x7f0000000440)={0x14, &(0x7f00000003c0)={0x0, 0x23, 0x38, {0x38, 0x4, "bc02b5ce9217bc3d3de1432ba2958c078899dc31e7c84d986ee8b5f3953449817b432607957b756251e23347962af775cc340d478709"}}, &(0x7f0000000400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x180c}}}, &(0x7f00000006c0)={0x44, &(0x7f0000000480)={0xe0, 0xa, 0x20, "206236f1f8e3d0bcf357349324b427354f30280ca879b2867dd73044b4ad5246"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000580)={0x20, 0x81, 0x2, '7U'}, &(0x7f00000005c0)={0x20, 0x82, 0x1, "c3"}, &(0x7f0000000600)={0x20, 0x83, 0x1, 'N'}, &(0x7f0000000640)={0x20, 0x84, 0x2, "f853"}, &(0x7f0000000680)={0x20, 0x85, 0x3, "fbd955"}}) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000023c0)=@newlink={0x38, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x41000, 0x1}, [@IFLA_GROUP={0x8}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x10000}, @IFLA_TXQLEN={0x8, 0xd, 0x80}]}, 0x38}, 0x1, 0x0, 0x0, 0x24040051}, 0x24008080) 4.752405837s ago: executing program 3 (id=2339): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./mnt\x00', 0x208000, &(0x7f0000000c80)={[{@block_validity}, {}, {@data_err_ignore}, {}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@usrquota}, {@noauto_da_alloc}, {@init_itable_val={'init_itable', 0x3d, 0x6}}]}, 0x3, 0x572, &(0x7f0000000380)="$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") openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) socket$inet(0x2, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@file={0x0, './mnt\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1f, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) ioctl$sock_ifreq(0xffffffffffffffff, 0x8993, &(0x7f00000003c0)={'ip_vti0\x00', @ifru_ivalue=0x9}) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa420, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) syz_pidfd_open(r0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000000bc0)=[{&(0x7f0000000900)=""/193, 0xc1}, {&(0x7f0000000ac0)=""/213, 0xd5}], 0x2, 0x9be1, 0x8, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00', @ANYRES16, @ANYBLOB="01002dbd7000fcdbdf25010000001400020077673100000000000000000000000000240000000053e2fd7a70ae0fb20fa152600cb00845174f0807862cdd2a8ca005eae847"], 0x4c}, 0x1, 0x0, 0x0, 0x40090}, 0x44000) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = syz_open_procfs$pagemap(0x0, &(0x7f00000000c0)) ioctl$PAGEMAP_SCAN(r7, 0xc0606610, &(0x7f0000000340)={0x60, 0x3, &(0x7f0000002000/0x4000)=nil, &(0x7f0000000000/0x2000)=nil, 0x6, &(0x7f0000000200)=[{0x1ff, 0xc116, 0x29dc0bc3}, {0x0, 0x40, 0x8}, {0x4, 0x7, 0x1}, {0x4, 0x2, 0x9}, {0xfffffffffffffffe, 0x3ff, 0x8}, {0x80000001, 0x6c6805ed, 0x5}], 0x6, 0x4, 0x76, 0x10, 0x58, 0x1}) getsockopt$inet6_tcp_buf(r6, 0x6, 0x1a, 0x0, &(0x7f0000000140)) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) 4.738660307s ago: executing program 4 (id=2340): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40810) epoll_create1(0x0) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xff, 0x7fff0000}]}) pivot_root(0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r7) socket$inet6_tcp(0xa, 0x1, 0x0) 3.096884807s ago: executing program 4 (id=2341): getresuid(&(0x7f0000000100), 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0xb6ac, @local, 0x10}, 0x1c) clock_gettime(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001a40)={0x18, 0xe, &(0x7f0000001840)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x1}, @alu={0x4, 0x0, 0xd, 0x6, 0x5, 0x10, 0x8}, @tail_call, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @call={0x85, 0x0, 0x0, 0xd0}]}, &(0x7f00000018c0)='syzkaller\x00', 0x101, 0xd4, &(0x7f0000001900)=""/212, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001a00)={0x4, 0x8, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000001}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000001b00)=@generic={&(0x7f0000000540)='./file0\x00', r1}, 0x18) r2 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_adjtime(0x0, &(0x7f00000006c0)={0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b9ac9ff, 0x0, 0x0, 0x0, 0x800000, 0x5a6c903, 0x1000000000000001, 0xec, 0xfffffffffffffffe, 0x8, 0x0, 0x1, 0x1}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005500e50226bd70000100000007000000", @ANYRES32=r4, @ANYBLOB="200001"], 0x38}}, 0x20000100) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1f}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x11}]}, 0x24}}, 0x44004) r6 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) write$selinux_create(r6, &(0x7f00000005c0)=@access={'system_u:object_r:root_t:s0', 0x20, '/usr/sbin/cups-browsed', 0x20, 0x5}, 0x48) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x80078b, &(0x7f00000000c0)={[{@usrjquota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@delalloc}, {@nobh}, {@min_batch_time={'min_batch_time', 0x3d, 0xb656}}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x46f, &(0x7f0000000bc0)="$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") socket(0x2, 0x3, 0xff) r7 = socket(0x40000000015, 0x5, 0x0) connect$inet(r7, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r7, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[], 0x1a000}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2.393700048s ago: executing program 4 (id=2342): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400001, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x80000, 0x0) umount2(&(0x7f0000000040)='./file0/file0\x00', 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x4000000) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000880)=ANY=[@ANYBLOB], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000140)={0x1, 0xfffffffe}, 0x10}, 0x94) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r1 = socket(0x1d, 0x2, 0x6) setsockopt$inet_pktinfo(r1, 0x0, 0x8, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000003c0)={'veth1_to_bond\x00', &(0x7f0000000340)=@ethtool_pauseparam={0x13, 0x7f, 0x4, 0x9}}) r4 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x12, r4, 0x0) io_submit(0x0, 0x0, 0x0) write$selinux_load(r2, &(0x7f0000000000)=ANY=[], 0x2000) 2.101151447s ago: executing program 1 (id=2343): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000240), 0x1, 0x4ff, &(0x7f0000000ac0)="$eJzs3cFvG1kZAPDPTpw4aXaTXfYACHbL7kJBVZ3E3Y1We4DlhBBaCbFHkNqQuFEUO45ipzShh/TMFYlKnODIH8C5J+5cENy4lANSgQjUIHEwmvEkdVO7iZrEzsa/nzSa9+ZN/L3XdN6rvyZ+AQytqxGxGxFjEXE7Iqaz67nsiE/aR3Lf0737S/t795dy0Wp99s9c2p5ci46vSVzJXrMYET/6XsRPcy/GbWzvrC1Wq5XNrD7brG3MNrZ3bqzWFlcqK5X1cnlhfmHuo5sfls9srO/UxrLSVx//cfdbP0+6NZVd6RzHWWoPvXAYJzEaET84j2ADMJKNZ2zQHeGV5CPizYh4N33+p2Mk/W4CAJdZqzUdrenOOgBw2eXTHFguX8pyAVORz5dK7RzeWzGZr9Ybzet36lvry+1c2UwU8ndWq5W5LFc4E4VcUp9Py8/q5SP1mxHxRkT8cnwirZeW6tXlQf7DBwCG2JUj6/9/xtvrPwBwyRUH3QEAoO+s/wAwfKz/ADB8rP8AMHza6//EoLsBAPSR9/8AMHys/wAwVH746afJ0drPPv96+e721lr97o3lSmOtVNtaKi3VNzdKK/X6SvqZPbXjXq9ar2/MfxBb92a+vdFozja2d27V6lvrzVvp53rfqhTSu3b7MDIAoJc33nn0l1yyIn88kR7RsZdDYaA9A85bftAdAAZmZNAdAAbGbl8wvE7xHl96AD7vuuzN202x2y8ItVqt1jl0CeiPa1+S/4dh1ZH/91PAMGTk/2F4yf/D8Gq1cifd8z9OeiMAcLHJ8QM9fgzgzez8u+w/B36yfPSOh+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwWETNRyN1ZrVbmIuL1iPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3+1HNNb185LI5FxM9+/dmv7i02m5t/ihjL/Wv84HrzYXa93P/eAwDHO1in03PHG/mne/eXDo5+9ufJdyOi2I6/vzcW+4fxR2M0PRejEBGT/85l9bZcR+7iNHYfRMQXu40/F1NpDqS98+nR+Ens1/oaP/9c/Hza1j4nfxZfOIO+wLB5lMw/n3R7/vJxNT13f/6L6Qx1etn8l7zU0n46Bz6LfzD/jfSY/66eNMYHf/h+uzSRffGz3Z6fPIj48mjEQez9jvnnIH6uR/z3Txj/r195+91eba3fRFyL7vE7Y802axuzje2dG6u1xZXKSmW9XF6YX5j76OaH5dk0Rz3bezX4x8fXX+/Vlox/skf84jHj//oJx//b/93+8ddeEv+b73WLn4+3XhI/WRO/ccL4i5O/L/ZqS+Iv9xj/cd//6yeM//hvOy9sGw4ADE5je2dtsVqtbCooXPxC8lf2AnSja+E7/Yo1Ft2bfvFe+5k+0tRqvVKsXjPGWWTdgIvg8KGPiP8OujMAAAAAAAAAAAAAAEBX/fiNpUGPEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgMvr/wEAAP//M+fPJQ==") r0 = creat(&(0x7f0000000040)='./file1\x00', 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x80) r5 = openat$cgroup_procs(r4, 0x0, 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000001c00), 0x12) write$P9_RREADLINK(r0, &(0x7f0000000140)={0x10, 0x17, 0x2, {0x7, './file2'}}, 0xffffffac) syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/timers\x00', 0x0, 0x0) fstatfs(0xffffffffffffffff, &(0x7f0000000440)=""/169) socket$can_raw(0x1d, 0x3, 0x1) 1.601831752s ago: executing program 4 (id=2344): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x8, 0x4, 0x806, 0x7f, 0x7ffc}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$binfmt_format(r1, &(0x7f0000000100)='0\x00', 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x78, '\x00', 0x0, @fallback=0x30, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) ioctl$sock_SIOCGPGRP(r0, 0x8904, 0x0) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x24}}}}, 0x108) epoll_create1(0x80000) close(r2) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote, 0x1000}}}, 0x108) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) sendmsg$nl_xfrm(r0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=r4, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x40) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000080), &(0x7f00000000c0)=0x4) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000000) 1.553534843s ago: executing program 2 (id=2345): openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={&(0x7f00000003c0), 0x9}, 0x4580, 0x0, 0x800003, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_open_dev$sg(&(0x7f0000000280), 0x5dc, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) clock_adjtime(0x0, &(0x7f0000000340)={0x136db, 0x80000000002f423f, 0xfffffffffffffffe, 0x9, 0xd, 0x7, 0x2000008, 0x4, 0x80000000, 0xffffd, 0x3, 0x1, 0x100, 0x7, 0x0, 0x2000000000000, 0x3, 0xc5b, 0xfffffffffffffffe, 0x4000000000200, 0x80000, 0x0, 0x816, 0x80000001, 0x37, 0x6}) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) socket$inet6(0xa, 0x1, 0x8010000000000084) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)}, &(0x7f0000000100)=0x10) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) epoll_create1(0x80000) socket$netlink(0x10, 0x3, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) io_uring_setup(0x7, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d30, 0x10222, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x80, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r2, &(0x7f0000001ac0)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000001a80)=""/24, 0x18, 0x103, 0x4, 0x0, 0x5, 0xc04}}, 0x11c) readv(r2, &(0x7f0000000140)=[{&(0x7f0000000080)=""/155, 0x9b}, {0x0, 0x4}], 0x2) write$UHID_DESTROY(r2, &(0x7f0000000040), 0x4) r3 = semget$private(0x0, 0x6, 0x0) semtimedop(r3, &(0x7f0000000500)=[{0x0, 0xffff, 0x1000}], 0x1, &(0x7f0000000540)={0x0, 0x3938700}) semctl$SETALL(r3, 0x0, 0x11, &(0x7f0000000300)=[0x6]) 1.509738045s ago: executing program 4 (id=2346): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x2000400}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x80) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(0xffffffffffffffff, 0x0, r5, 0x0, 0x8001, 0x0) r6 = openat$cgroup_procs(r4, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000001c00), 0x12) epoll_create1(0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000001340)=ANY=[@ANYBLOB="73686f72746e616d653d6c6f7765722c756e695f786c6174653d312c636f6465706167653d3933362c73686f72746e616d653d77696e6e742c6e6f6e756d7461696c3d302c697f636821727365743d6370313235302c756e695f786c6174653d312c726f6419ad2c6e6f636173652c726f6469722c00"], 0x1, 0x227, &(0x7f0000001100)="$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") sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x176}}], 0x400000000000172, 0x4000000) ioctl$USBDEVFS_CONTROL(r5, 0xc0185500, 0x0) 1.311013171s ago: executing program 3 (id=2347): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc}, 0x0, 0x4, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) read$msr(r1, &(0x7f00000002c0)=""/108, 0x6c) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000)) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCBRDELBR(r2, 0x89a2, &(0x7f0000000000)='bridge0\x00') sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x3c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000400000000000000000000850000002c000000850000002a00000095"], &(0x7f0000000680)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x4b, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x724}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001680)={r6, r5, 0x25, 0x4, @void}, 0x10) connect$can_bcm(0xffffffffffffffff, &(0x7f00000006c0), 0x10) syz_emit_ethernet(0xfcbb, &(0x7f00000002c0)=ANY=[], 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x24048014}, 0x4000) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd7000fedbdf2500000000000000000000000000000001fe800000896c000000000000000000bb00000000000000000a00200000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000800000000000000400000000000000fdffffffffffff7ffeffffffff7f40000200000000000008030000000100000001000201000000004400050000000000000000000000000000000000000000002b00000000000000fc0200"], 0xfc}}, 0x0) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001cc0)=ANY=[], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000000105000300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a30000000000900020073797a32"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x0) 1.280264881s ago: executing program 5 (id=2348): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) lseek(0xffffffffffffffff, 0x9, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioprio_set$pid(0x2, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet(0x2, 0x1, 0x100) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfffffffffffffc01}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000980)={0x2c, 0x0, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x2}, 0x0, &(0x7f0000000300)=ANY=[], 0x0}) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x800) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4c0c8) 680.058359ms ago: executing program 2 (id=2349): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="280000000914010046bd2f5d0001000100000008000100020000000000000000000000000000000083672e6590221caa85f17c4a14ca77823b156c9fe56129cf598aa1014dbf2c8366a629bf718155c02a64198ec010c49da74b77fa9812f287777d482a41c93f3d6f825f95ae9306bef1e0f56c554981b4815a4b85a46b306db8311906354967a79410d3d1d8b676479493456d322e819f74e5e29be1323ec587e0dc5e3757a66ac70c49205513e87b1b"], 0x28}}, 0x0) ioctl$int_out(0xffffffffffffffff, 0x0, &(0x7f0000000040)) syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1818e58, &(0x7f00000003c0), 0x2a, 0x63f, &(0x7f0000000d80)="$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") r2 = socket$kcm(0xa, 0x5, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000004c0)=ANY=[@ANYBLOB="7f000000"], 0x10}], 0x1}, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r3, &(0x7f0000000000)={0x1d, r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x19, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0, 0x26}, 0x28) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x3, 0x0, &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x5f, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r8}, 0x94) setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x2, &(0x7f0000000040)=0x10001, 0x4) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f00000000c0), 0xf00) bind$can_raw(r3, &(0x7f0000000080), 0x10) setsockopt$sock_attach_bpf(r2, 0x29, 0x46, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x80, 0x0}, 0x44) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x8914, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r5, 0x40086607, 0x0) 291.728112ms ago: executing program 3 (id=2350): r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x16, &(0x7f0000000140)={[{@resuid}, {@noauto_da_alloc}, {@auto_da_alloc_val}, {@stripe={'stripe', 0x3d, 0x4}}, {@bsdgroups}, {@noblock_validity}, {@minixdf}, {@nouid32}, {@dioread_lock}, {@nolazytime}, {@oldalloc}, {@usrquota}]}, 0x0, 0x515, &(0x7f0000000c40)="$eJzs3d9rm2sdAPDvmzZru/Wc9qgXxwMei+dId9Al7eq24sWcIHo1UOf9LG1aStOmNGm3liEd/gGCiApeeeWN4B8gyP4EEQZ6LyqKuM1deKORJG+2Nkvarkua0Xw+8O59nvdHv98na9+8T56HvAEMrKmIuBURQxHxSURMpNsz6RL7jaV23LOnDxZrSxLV6p1/JZGk25o/K0nXl9LTRiPiu9+KiCfVamvc8u7e2kKxWNhK6/nK+ma+vLt3ZXV9YaWwUtiYm5u9Pn9j/tr8zKnbthNJM6WYjIib3/jbT3/0q2/e/N2X7/357j8u/6C2czzdf7Ad3dRIIFt/LZqGI2KrF8H6YChtT7bfiQAAcCK1+9NPRcQX6vf/EzFUv5s7ytgZZQYAAAB0S/Vr45GN6kgVAAAAOLcy9TmwSSaXzvcdj0wml2vM4f1MXMwUS+XKl5ZL2xtLjbmyk5HNLK8WCzPpXOHJyCa1+mw6x7ZZv9pSn4uI9yLiJxNj9XpusVRc6veHHwAAADAgLrX0/59PNPr/AAAAwDkz2e8EAAAAgJ7T/wcAAIDzT/8fAAAAzrVv375dW6rN518v7exur5V2riwVymu59e3F3GJpazO3Uiqt1L+zb/24n1cslTa/Ehvb9/OVQrmSL+/u3V0vbW9U7q4eegQ2AAAAcIbe+/yjPyURsf/VsfoSScSFdF+2z7kBvZV5nYP/2rs8gLM31O8EgL4Z7ncCQN/o4wPJMfs7Tt75ffdzAQAAemP6sy3j/2H8HwbFa43/A+eK8X8YXG3G/00JgAGRdQcAA6/34//V6mslBAAAdN14fUkyuXQscDwymVwu4p36YwGyyfJqsTATEe9GxB8nsiO1+mz9zOTYPgMAAAAAAAAAAAAAAAAAAAAAAAAA0FCtJlE9heenOQkAAADoi4jM35P0+V/TEx+Pt34+cCH5z0R9HRH3fnHnZ/cXKpWt2dr2Jy+2V36ebr968Mz9Vz9s8LBxAAAAOBPNfnqzHw8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3fTs6YPF5hLZs4v7z69HxGRL/LrhGK2vR+vpXPx3EsMHzksiYqgL8fcfRsT77eIntbRiMs2iNX4mIsb6HP9SF+LDIHtUu/7cavf3l4mp+rr9399wurypg9e/2uXgYPzm9W+ow/XvnRPG+ODxb/Id4z+M+GC4/fWnGT/pEP+jjhFHDtW+/729vU5HVn8ZMd36/vMiwstSvrK+mS/v7l1ZXV9YKawUNubmZq/P35i/Nj+TX14tFtJ/28b48ed++7+j2n+xQ/zJY9r/ccf2H/bfx/effrpRfOWdtRb/8keH40+l+97vED+Tvvd9MS3X9k83y/uN8kEf/voPH75Iuk38pQ7tP+7//3KzMnp0+z/5zg//csxLBACcofLu3tpCsVjYOmVhJ0568FT7Xc07opMH3Y83zFnhLSsMxeEtzfvULsfKnvB3fvQteVlOUHj3wJYLafO6FKIPFyMAAKCnXt70n+DgQwPuI71LCgAAAAAAAAAAAAAAAAAAAAbMWXxRWWvM/f40FQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgSP8PAAD//22Dxkw=") quotactl_fd$Q_SYNC(r0, 0xffffffff80000102, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) r3 = dup(r2) write$UHID_INPUT(r3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) clock_adjtime(0x0, &(0x7f0000000600)={0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0xfffffffffffffffc}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) set_mempolicy(0x8006, 0x0, 0x5) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) creat(0x0, 0x75) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000001c0)={0xfffffffc, 0x5, 0x0, 'queue1\x00', 0x10000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r6, 0x404c534a, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r6, 0x404c534a, &(0x7f0000000ac0)={0x0, 0x2d, 0xe}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000000), 0x1, 0x4e9, &(0x7f00000000c0)="$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") mount(&(0x7f0000000480)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x801400, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x4600, 0xe898d2275f586838) 261.361952ms ago: executing program 1 (id=2351): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = gettid() bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$kcm(0x2a, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/keys\x00', 0x0, 0x0) preadv(r4, &(0x7f00000001c0)=[{&(0x7f0000000380)=""/4086, 0xff6}], 0x1, 0x176, 0x402) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x20, r3, 0x6a98047402e98331, 0x0, 0x25dfdbfe, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x841}, 0x4080084) sendmsg$ETHTOOL_MSG_EEE_SET(r1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r7, &(0x7f00000002c0)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x0, &(0x7f0000000100)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r8, 0xc0502100, &(0x7f0000000500)) 0s ago: executing program 1 (id=2352): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x8, &(0x7f00000000c0)={[{@lazytime}, {@init_itable_val={'init_itable', 0x3d, 0x2}}]}, 0x2, 0x548, &(0x7f00000011c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x800c4, 0x0) inotify_init() write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x20) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) syz_open_dev$rtc(&(0x7f0000000140), 0x8, 0x109202) timer_create(0xfffffffd, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f00000001c0)={{0x0, 0x989680}}, 0x0) timer_gettime(0x0, 0x0) ioctl$XFS_IOC_ERROR_INJECTION(r0, 0x40085874, 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x64) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000280)=0x52, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x10c}, 0x1, 0x0, 0x0, 0x20008004}, 0x4) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) kernel console output (not intermixed with test programs): 00 r/w without journal. Quota mode: writeback. [ 237.859087][ T8347] ext4 filesystem being mounted at /345/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 237.872105][ T28] audit: type=1400 audit(2000000011.860:962): avc: denied { write } for pid=8346 comm="syz.4.1740" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 238.268314][ T8354] loop0: detected capacity change from 0 to 512 [ 238.641432][ T8358] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1741'. [ 238.673977][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.745731][ T8354] EXT4-fs: Ignoring removed bh option [ 238.835294][ T8354] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 238.896491][ T28] audit: type=1400 audit(2000000012.870:963): avc: denied { setopt } for pid=8359 comm="syz.3.1744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 238.947378][ T8354] EXT4-fs (loop0): 1 truncate cleaned up [ 239.005200][ T8354] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 239.049362][ T8363] syzkaller0: entered promiscuous mode [ 239.074295][ T28] audit: type=1400 audit(2000000013.060:964): avc: denied { write } for pid=8353 comm="syz.0.1742" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 239.098930][ T8363] syzkaller0: entered allmulticast mode [ 239.142321][ T8354] loop0: detected capacity change from 512 to 0 [ 239.150198][ T8354] EXT4-fs error (device loop0): ext4_get_inode_loc:5023: inode #12: block 7: comm syz.0.1742: unable to read itable block [ 239.181297][ T28] audit: type=1400 audit(2000000013.090:965): avc: denied { mounton } for pid=8353 comm="syz.0.1742" path="/323/file1/file0/bus" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 239.238409][ T8354] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 239.249109][ T8369] loop3: detected capacity change from 0 to 1024 [ 239.269440][ T8354] EXT4-fs (loop0): I/O error while writing superblock [ 239.281291][ T8369] EXT4-fs: test_dummy_encryption option not supported [ 239.529942][ T8369] loop3: detected capacity change from 0 to 512 [ 239.595522][ T3297] EXT4-fs warning (device loop0): htree_dirblock_to_tree:1051: inode #2: lblock 0: comm syz-executor: error -5 reading directory block [ 239.637877][ T8369] EXT4-fs (loop3): 1 orphan inode deleted [ 239.652547][ T8369] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 239.671396][ T8369] ext4 filesystem being mounted at /363/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 239.901565][ T56] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 239.931880][ T56] EXT4-fs error (device loop3): ext4_release_dquot:7070: comm kworker/u8:4: Failed to release dquot type 1 [ 239.998794][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.011318][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.050923][ T3297] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 240.091650][ T3297] EXT4-fs (loop0): I/O error while writing superblock [ 240.273408][ T8387] loop1: detected capacity change from 0 to 512 [ 240.364885][ T8387] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 240.386509][ T8387] ext4 filesystem being mounted at /364/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 240.409942][ T28] audit: type=1400 audit(2000000014.390:966): avc: denied { write } for pid=8386 comm="syz.1.1753" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 240.989292][ T28] audit: type=1400 audit(2000000014.970:967): avc: denied { mount } for pid=8409 comm="syz.3.1759" name="/" dev="configfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 241.036279][ T28] audit: type=1400 audit(2000000015.000:968): avc: denied { search } for pid=8409 comm="syz.3.1759" name="/" dev="configfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 241.090673][ T56] bridge_slave_1: left allmulticast mode [ 241.112362][ T56] bridge_slave_1: left promiscuous mode [ 241.123208][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.140803][ T56] bridge_slave_0: left allmulticast mode [ 241.152076][ T56] bridge_slave_0: left promiscuous mode [ 241.158439][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.190383][ T7981] smc: removing ib device syz0 [ 241.316942][ T8425] sg_write: data in/out 37854/658 bytes for SCSI command 0x0-- guessing data in; [ 241.316942][ T8425] program syz.2.1762 not setting count and/or reply_len properly [ 241.367286][ T56] bond4 (unregistering): (slave bridge2): Releasing active interface [ 241.445577][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 241.469219][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 241.497084][ T56] bond0 (unregistering): Released all slaves [ 241.522762][ T56] bond1 (unregistering): (slave lo): Releasing backup interface [ 241.530848][ T56] bond1 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 241.542091][ T56] bond1 (unregistering): Released all slaves [ 241.550558][ T56] bond2 (unregistering): Released all slaves [ 241.558779][ T56] bond3 (unregistering): Released all slaves [ 241.567507][ T56] bond4 (unregistering): Released all slaves [ 241.622838][ T3018] 8021q: adding VLAN 0 to HW filter on device eth1 [ 241.632852][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.716791][ T56] hsr_slave_0: left promiscuous mode [ 241.724433][ T8462] loop4: detected capacity change from 0 to 256 [ 241.731804][ T56] hsr_slave_1: left promiscuous mode [ 241.743424][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 241.756400][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 241.844146][ T8469] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.855116][ T8469] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.899843][ T56] team0 (unregistering): Port device team_slave_1 removed [ 241.912665][ T56] team0 (unregistering): Port device team_slave_0 removed [ 242.529558][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 242.529576][ T28] audit: type=1400 audit(2000000016.510:980): avc: denied { write } for pid=8479 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 242.582361][ T8396] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.604313][ T8396] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.626926][ T8396] bridge_slave_0: entered allmulticast mode [ 242.634983][ T8505] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1778'. [ 242.647185][ T28] audit: type=1400 audit(2000000016.630:981): avc: denied { write } for pid=8503 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 242.670051][ T8396] bridge_slave_0: entered promiscuous mode [ 242.684402][ T8396] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.715573][ T8396] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.732740][ T28] audit: type=1400 audit(2000000016.660:982): avc: denied { getopt } for pid=8504 comm="syz.1.1778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 242.754218][ T8396] bridge_slave_1: entered allmulticast mode [ 242.760927][ T8396] bridge_slave_1: entered promiscuous mode [ 242.768099][ T3018] 8021q: adding VLAN 0 to HW filter on device eth2 [ 242.819774][ T8396] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 242.833979][ T8510] geneve2: entered promiscuous mode [ 242.839406][ T8510] geneve2: entered allmulticast mode [ 242.859469][ T8396] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 242.886549][ T8396] team0: Port device team_slave_0 added [ 242.894506][ T8396] team0: Port device team_slave_1 added [ 242.919353][ T8396] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 242.934787][ T8396] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 242.979342][ T8396] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 242.995476][ T8396] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 243.024381][ T8522] netlink: 'syz.1.1782': attribute type 3 has an invalid length. [ 243.037347][ T8522] netlink: 13435 bytes leftover after parsing attributes in process `syz.1.1782'. [ 243.063700][ T8396] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 243.096761][ T8396] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 243.109346][ T56] IPVS: stop unused estimator thread 0... [ 243.118627][ T28] audit: type=1400 audit(2000000017.100:983): avc: denied { write } for pid=8512 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 243.192382][ T8396] hsr_slave_0: entered promiscuous mode [ 243.210626][ T8396] hsr_slave_1: entered promiscuous mode [ 243.212286][ T28] audit: type=1400 audit(2000000017.180:984): avc: denied { write } for pid=8530 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 243.230163][ T8396] debugfs: 'hsr0' already exists in 'hsr' [ 243.271823][ T8396] Cannot create hsr debugfs directory [ 243.273922][ T8541] Set syz1 is full, maxelem 14 reached [ 243.289483][ T3018] 8021q: adding VLAN 0 to HW filter on device eth3 [ 243.302782][ T8535] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1786'. [ 243.404783][ T8535] bond0: ARP target 8.4.0.0 is already present [ 243.432491][ T8550] loop1: detected capacity change from 0 to 512 [ 243.468832][ T8535] bond0: option arp_ip_target: invalid value (1032) [ 243.490167][ T8550] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 243.514414][ T8550] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 243.548141][ T8550] EXT4-fs (loop1): 1 truncate cleaned up [ 243.563973][ T8550] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 243.593025][ T8396] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 243.602541][ T8396] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 243.611975][ T8396] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 243.631145][ T8396] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 243.641208][ T8396] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 243.652995][ T8396] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 243.660925][ T8396] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 243.672331][ T8396] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 243.739797][ T28] audit: type=1400 audit(2000000017.720:985): avc: denied { write } for pid=8552 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 243.814415][ T28] audit: type=1400 audit(2000000017.780:986): avc: denied { write } for pid=8573 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 243.839087][ T8396] 8021q: adding VLAN 0 to HW filter on device bond0 [ 243.853667][ T3018] 8021q: adding VLAN 0 to HW filter on device eth4 [ 243.868210][ T8396] 8021q: adding VLAN 0 to HW filter on device team0 [ 243.887834][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.894956][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 243.913750][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.920914][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 244.126815][ T8396] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 244.816486][ T8554] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 244.882542][ T8396] veth0_vlan: entered promiscuous mode [ 244.921808][ T8396] veth1_vlan: entered promiscuous mode [ 244.994254][ T8396] veth0_macvtap: entered promiscuous mode [ 245.040663][ T8396] veth1_macvtap: entered promiscuous mode [ 245.058873][ T8613] loop4: detected capacity change from 0 to 1024 [ 245.088569][ T8613] EXT4-fs: test_dummy_encryption option not supported [ 245.100971][ T8396] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 245.155055][ T28] audit: type=1400 audit(2000000019.140:987): avc: denied { accept } for pid=8614 comm="syz.3.1796" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 245.178305][ T8396] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 245.244106][ T7981] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.258120][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.273699][ T7981] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.309625][ T7981] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.324836][ T7981] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.385032][ T28] audit: type=1400 audit(2000000019.350:988): avc: denied { mount } for pid=8620 comm="syz.1.1798" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 245.413230][ T28] audit: type=1400 audit(2000000019.350:989): avc: denied { create } for pid=8620 comm="syz.1.1798" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 245.433344][ T8624] loop3: detected capacity change from 0 to 1024 [ 245.463103][ T8624] EXT4-fs: test_dummy_encryption option not supported [ 245.692200][ T8628] loop4: detected capacity change from 0 to 512 [ 246.509361][ T8628] EXT4-fs (loop4): 1 orphan inode deleted [ 246.542312][ T8628] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 246.560486][ T8628] ext4 filesystem being mounted at /354/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 246.688745][ T7982] EXT4-fs error (device loop4): ext4_release_dquot:7070: comm kworker/u8:26: Failed to release dquot type 1 [ 246.935389][ T8653] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.951683][ T8652] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1756'. [ 246.990066][ T8653] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.137763][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.211141][ T8638] loop3: detected capacity change from 0 to 512 [ 247.331422][ T8668] sctp: [Deprecated]: syz.4.1811 (pid 8668) Use of int in maxseg socket option. [ 247.331422][ T8668] Use struct sctp_assoc_value instead [ 247.477983][ T8675] syzkaller0: entered promiscuous mode [ 247.496450][ T8675] syzkaller0: entered allmulticast mode [ 247.514200][ T8679] 9pnet: p9_errstr2errno: server reported unknown error 0x00000000 [ 247.572088][ T8638] EXT4-fs (loop3): 1 orphan inode deleted [ 247.592448][ T56] __quota_error: 6 callbacks suppressed [ 247.592469][ T56] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 247.609175][ T8638] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 247.658855][ T56] EXT4-fs error (device loop3): ext4_release_dquot:7070: comm kworker/u8:4: Failed to release dquot type 1 [ 247.662633][ T8638] ext4 filesystem being mounted at /377/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 247.776580][ T8694] loop4: detected capacity change from 0 to 1024 [ 247.873584][ T8694] EXT4-fs: test_dummy_encryption option not supported [ 247.905884][ T28] audit: type=1400 audit(2000000021.890:995): avc: denied { open } for pid=8698 comm="syz.1.1820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 248.001774][ T28] audit: type=1400 audit(2000000021.910:996): avc: denied { kernel } for pid=8698 comm="syz.1.1820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 248.071743][ T8706] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1823'. [ 248.122578][ T28] audit: type=1400 audit(2000000022.040:997): avc: denied { write } for pid=8695 comm="syz.5.1823" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 248.596266][ T8713] sctp: [Deprecated]: syz.2.1825 (pid 8713) Use of int in maxseg socket option. [ 248.596266][ T8713] Use struct sctp_assoc_value instead [ 248.681713][ T8715] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1826'. [ 248.691655][ T8715] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1826'. [ 248.842388][ T28] audit: type=1400 audit(2000000022.820:998): avc: denied { create } for pid=8718 comm="syz.1.1828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 249.110781][ T8721] loop4: detected capacity change from 0 to 512 [ 249.281070][ T8721] EXT4-fs (loop4): 1 orphan inode deleted [ 249.296853][ T8721] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 249.316586][ T8721] ext4 filesystem being mounted at /358/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 249.568563][ T7977] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 249.599039][ T7977] EXT4-fs error (device loop4): ext4_release_dquot:7070: comm kworker/u8:22: Failed to release dquot type 1 [ 249.863381][ T8734] loop5: detected capacity change from 0 to 512 [ 249.908656][ T8734] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 249.952371][ T8734] ext4 filesystem being mounted at /7/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 249.988141][ T8739] syzkaller0: entered promiscuous mode [ 249.993852][ T8739] syzkaller0: entered allmulticast mode [ 250.000509][ T8717] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.024392][ T28] audit: type=1400 audit(2000000024.000:999): avc: denied { write } for pid=8733 comm="syz.5.1832" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 250.056674][ T8717] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.116838][ T28] audit: type=1400 audit(2000000024.000:1000): avc: denied { write } for pid=8733 comm="syz.5.1832" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 250.139849][ T28] audit: type=1400 audit(2000000024.000:1001): avc: denied { open } for pid=8733 comm="syz.5.1832" path="/7/bus/file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 250.745123][ T8745] loop1: detected capacity change from 0 to 128 [ 251.330081][ T8396] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.353566][ T8760] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1839'. [ 251.372719][ T8760] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1839'. [ 251.405720][ T7977] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 251.431814][ T7977] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 251.444847][ T8762] sctp: [Deprecated]: syz.5.1838 (pid 8762) Use of int in maxseg socket option. [ 251.444847][ T8762] Use struct sctp_assoc_value instead [ 251.459789][ T7977] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 251.476316][ T7977] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 251.494867][ T28] audit: type=1400 audit(2000000025.480:1002): avc: denied { write } for pid=8763 comm="syz.1.1840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 251.538876][ T8766] syzkaller1: entered promiscuous mode [ 251.562425][ T8766] syzkaller1: entered allmulticast mode [ 251.706687][ T8764] infiniband syz1: set down [ 251.723637][ T8764] infiniband syz1: added syz_tun [ 251.760078][ T8764] RDS/IB: syz1: added [ 251.772243][ T8764] smc: adding ib device syz1 with port count 1 [ 251.782233][ T8764] smc: ib device syz1 port 1 has no pnetid [ 252.287836][ T8769] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1840'. [ 252.366041][ T8783] netlink: 'syz.5.1846': attribute type 12 has an invalid length. [ 252.668996][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.693871][ T7981] smc: removing ib device syz1 [ 253.370830][ T8794] loop5: detected capacity change from 0 to 512 [ 253.397487][ T8794] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 253.421325][ T8794] ext4 filesystem being mounted at /12/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 253.528330][ T28] audit: type=1400 audit(2000000027.420:1003): avc: denied { write } for pid=8793 comm="syz.5.1850" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 253.617610][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.652388][ T8808] loop4: detected capacity change from 0 to 128 [ 253.761259][ T8808] FAT-fs (loop4): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 253.795915][ T8812] syzkaller0: left promiscuous mode [ 253.810963][ T8812] syzkaller0: left allmulticast mode [ 253.839020][ T8808] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 253.871604][ T8808] FAT-fs (loop4): Filesystem has been set read-only [ 253.897867][ T8808] syz.4.1854: attempt to access beyond end of device [ 253.897867][ T8808] loop4: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 253.961728][ T8808] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 254.000662][ T8808] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 254.043222][ T8808] syz.4.1854: attempt to access beyond end of device [ 254.043222][ T8808] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 254.083810][ T8808] syz.4.1854: attempt to access beyond end of device [ 254.083810][ T8808] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 254.097206][ T8808] syz.4.1854: attempt to access beyond end of device [ 254.097206][ T8808] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 254.110945][ T8808] syz.4.1854: attempt to access beyond end of device [ 254.110945][ T8808] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 254.137242][ T8808] syz.4.1854: attempt to access beyond end of device [ 254.137242][ T8808] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 254.151180][ T8808] syz.4.1854: attempt to access beyond end of device [ 254.151180][ T8808] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 254.172857][ T8808] syz.4.1854: attempt to access beyond end of device [ 254.172857][ T8808] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 254.186794][ T8808] syz.4.1854: attempt to access beyond end of device [ 254.186794][ T8808] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 254.200791][ T8808] syz.4.1854: attempt to access beyond end of device [ 254.200791][ T8808] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 254.644382][ T8823] syzkaller0: entered promiscuous mode [ 254.649986][ T8823] syzkaller0: entered allmulticast mode [ 254.937730][ T28] audit: type=1400 audit(2000000028.920:1004): avc: denied { ioctl } for pid=8831 comm="syz.4.1863" path="/dev/usbmon0" dev="devtmpfs" ino=141 ioctlcmd=0x920a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 254.972308][ T8396] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.990356][ T8836] syzkaller0: entered promiscuous mode [ 255.040729][ T8836] syzkaller0: entered allmulticast mode [ 255.158703][ T28] audit: type=1400 audit(2000000029.140:1005): avc: denied { write } for pid=8834 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 255.188470][ T8841] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.195706][ T8841] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.214565][ T28] audit: type=1400 audit(2000000029.200:1006): avc: denied { write } for pid=8862 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 255.260086][ T28] audit: type=1400 audit(2000000029.240:1007): avc: denied { sys_module } for pid=8857 comm="syz.2.1870" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 255.320885][ T8841] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 255.334636][ T8841] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 255.446959][ T7977] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.456245][ T7977] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.465893][ T7977] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.474938][ T7977] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.509328][ T8883] tipc: Failed to remove unknown binding: 66,0,0/0:2374548050/2374548051 [ 255.525362][ T8883] tipc: Failed to remove unknown binding: 66,0,0/0:2374548050/2374548051 [ 255.566846][ T8885] syzkaller0: entered promiscuous mode [ 255.572634][ T8885] syzkaller0: entered allmulticast mode [ 255.979606][ T8899] loop4: detected capacity change from 0 to 512 [ 256.024865][ T8899] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 256.053310][ T8899] ext4 filesystem being mounted at /365/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 256.107956][ T28] audit: type=1400 audit(2000000030.090:1008): avc: denied { write } for pid=8897 comm="syz.4.1877" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 256.192610][ T28] audit: type=1400 audit(2000000030.170:1009): avc: denied { write } for pid=8896 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 256.274840][ T28] audit: type=1400 audit(2000000030.260:1010): avc: denied { write } for pid=8913 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 256.367077][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.437403][ T8920] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 256.461476][ T8920] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 256.472327][ T8920] vhci_hcd vhci_hcd.4: invalid port number 55 [ 256.494784][ T8920] vhci_hcd vhci_hcd.4: default hub control req: 0007 v0014 i0037 l0 [ 256.515909][ T28] audit: type=1400 audit(2000000030.500:1011): avc: denied { write } for pid=8916 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 256.541461][ T8924] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1879'. [ 256.628165][ T28] audit: type=1400 audit(2000000030.610:1012): avc: denied { write } for pid=8939 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 256.698826][ T8950] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 256.736292][ T8950] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 256.779041][ T8950] syzkaller1: entered promiscuous mode [ 256.786827][ T8957] loop3: detected capacity change from 0 to 512 [ 256.795057][ T8950] syzkaller1: entered allmulticast mode [ 256.849803][ T8957] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 256.872409][ T8957] ext4 filesystem being mounted at /385/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 256.914336][ T8944] netlink: 'syz.2.1885': attribute type 4 has an invalid length. [ 256.922379][ T8944] netlink: 'syz.2.1885': attribute type 4 has an invalid length. [ 257.020803][ T7981] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 257.047664][ T7981] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 257.058213][ T7981] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 257.067742][ T7981] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 257.126681][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.139775][ T8976] syzkaller0: entered promiscuous mode [ 257.145432][ T8976] syzkaller0: entered allmulticast mode [ 257.503394][ T8985] syzkaller0: entered promiscuous mode [ 257.509126][ T8985] syzkaller0: entered allmulticast mode [ 257.560796][ T8987] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1895'. [ 257.853747][ T8990] loop3: detected capacity change from 0 to 1024 [ 257.985759][ T8999] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1898'. [ 258.039744][ T9001] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1898'. [ 258.112725][ T8990] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 258.682273][ T3772] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 258.691442][ T9012] syzkaller0: entered promiscuous mode [ 258.705721][ T9012] syzkaller0: entered allmulticast mode [ 258.810940][ T8990] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 258.895176][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.991414][ T9020] loop3: detected capacity change from 0 to 512 [ 259.000308][ T9018] netem: change failed [ 259.036558][ T9020] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 259.103739][ T9020] ext4 filesystem being mounted at /390/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 259.144190][ T9025] netem: change failed [ 259.162284][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 259.162303][ T28] audit: type=1400 audit(2000000033.140:1021): avc: denied { write } for pid=9019 comm="syz.3.1906" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 259.685843][ T9030] syzkaller0: entered promiscuous mode [ 259.685867][ T9030] syzkaller0: entered allmulticast mode [ 260.077499][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.121119][ T9037] syzkaller0: entered promiscuous mode [ 260.141318][ T9037] syzkaller0: entered allmulticast mode [ 260.147900][ T9039] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1915'. [ 260.156983][ T28] audit: type=1400 audit(2000000034.120:1022): avc: denied { write } for pid=9038 comm="syz.1.1915" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 260.287526][ T9043] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1914'. [ 260.360001][ T9046] sg_write: data in/out 28672/136 bytes for SCSI command 0x0-- guessing data in; [ 260.360001][ T9046] program syz.4.1916 not setting count and/or reply_len properly [ 260.403119][ T28] audit: type=1400 audit(2000000034.380:1023): avc: denied { tracepoint } for pid=9044 comm="syz.4.1916" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 260.838441][ T9052] loop4: detected capacity change from 0 to 512 [ 260.895025][ T9059] syzkaller0: entered promiscuous mode [ 261.008719][ T9059] syzkaller0: entered allmulticast mode [ 261.016516][ T9052] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 261.106717][ T9052] Quota error (device loop4): do_check_range: Getting block 196613 out of range 1-5 [ 261.124824][ T9052] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 261.149812][ T9052] EXT4-fs error (device loop4): ext4_acquire_dquot:7034: comm syz.4.1916: Failed to acquire dquot type 1 [ 261.172319][ T9052] loop4: lost filesystem error report for type 5 error -117 [ 261.173165][ T9052] EXT4-fs (loop4): 1 truncate cleaned up [ 261.186336][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 261.186359][ C1] EXT4-fs (loop4): last error at time 2000000035: ext4_acquire_dquot:7034 [ 261.253894][ T9052] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 261.327577][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 263.127351][ T9108] vlan2 (unregistering): left allmulticast mode [ 263.142261][ T9108] geneve0 (unregistering): left allmulticast mode [ 263.150278][ T9108] bridge0: port 3(vlan2) entered disabled state [ 263.322857][ T9119] loop5: detected capacity change from 0 to 512 [ 263.348995][ T9119] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 263.379360][ T9119] EXT4-fs (loop5): 1 truncate cleaned up [ 263.409136][ T9119] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 263.566160][ T28] audit: type=1400 audit(2000000037.550:1024): avc: denied { write } for pid=9118 comm="syz.5.1935" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 263.588205][ T28] audit: type=1400 audit(2000000037.550:1025): avc: denied { read } for pid=9118 comm="syz.5.1935" name="file2" dev="loop5" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 264.194722][ T8396] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.223383][ T9136] loop4: detected capacity change from 0 to 128 [ 264.329407][ T9138] syzkaller0: entered promiscuous mode [ 264.352319][ T9138] syzkaller0: entered allmulticast mode [ 264.385214][ T9142] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1942'. [ 264.401633][ T9083] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 264.411970][ T9083] FAT-fs (loop4): Filesystem has been set read-only [ 264.522032][ T9149] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1945'. [ 264.587157][ T9153] syzkaller0: entered promiscuous mode [ 264.602614][ T9153] syzkaller0: entered allmulticast mode [ 264.748143][ T9160] veth0_vlan: entered allmulticast mode [ 264.947252][ T9171] syzkaller0: entered promiscuous mode [ 264.963230][ T9171] syzkaller0: entered allmulticast mode [ 265.052602][ T9175] tipc: Started in network mode [ 265.063665][ T9175] tipc: Node identity 927bf6d0d0d1, cluster identity 4711 [ 265.088178][ T9175] tipc: Enabled bearer , priority 0 [ 265.102215][ T28] audit: type=1400 audit(2000000039.080:1026): avc: denied { setopt } for pid=9176 comm="syz.4.1958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 265.129628][ T9177] gtp1: entered allmulticast mode [ 265.139882][ T9177] gtp1: entered promiscuous mode [ 265.152409][ T9177] team0: Refused to change device type [ 265.192538][ T9180] 0: reclassify loop, rule prio 0, protocol 700 [ 265.594111][ T9198] loop5: detected capacity change from 0 to 128 [ 265.724418][ T9204] syzkaller0: entered promiscuous mode [ 265.729990][ T9204] syzkaller0: entered allmulticast mode [ 265.911349][ T9212] syzkaller0: entered promiscuous mode [ 265.926361][ T9212] syzkaller0: entered allmulticast mode [ 266.023723][ T28] audit: type=1400 audit(2000000040.000:1027): avc: denied { getopt } for pid=9216 comm="syz.5.1970" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 266.102201][ T3401] tipc: Node number set to 1118500560 [ 266.118623][ T9219] syzkaller0: entered promiscuous mode [ 266.128837][ T9219] syzkaller0: entered allmulticast mode [ 266.185093][ T9224] loop5: detected capacity change from 0 to 1024 [ 266.346331][ T9224] EXT4-fs: test_dummy_encryption option not supported [ 266.758182][ T9237] syzkaller0: left promiscuous mode [ 266.767945][ T9237] syzkaller0: left allmulticast mode [ 266.952221][ T9238] loop5: detected capacity change from 0 to 512 [ 267.082177][ T9238] EXT4-fs (loop5): 1 orphan inode deleted [ 267.103555][ T9238] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 267.122075][ T9238] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 267.396696][ T850] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 267.415960][ T3378] IPVS: starting estimator thread 0... [ 267.428872][ T850] EXT4-fs error (device loop5): ext4_release_dquot:7070: comm kworker/u8:6: Failed to release dquot type 1 [ 267.512249][ T9246] IPVS: using max 2736 ests per chain, 136800 per kthread [ 267.734952][ T9256] syzkaller0: entered promiscuous mode [ 267.753931][ T9256] syzkaller0: entered allmulticast mode [ 268.051716][ T9266] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1984'. [ 268.264487][ T8396] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.280128][ T9271] loop3: detected capacity change from 0 to 1024 [ 268.292565][ T9271] EXT4-fs: test_dummy_encryption option not supported [ 268.366177][ T9275] syzkaller0: entered promiscuous mode [ 268.378857][ T9275] syzkaller0: entered allmulticast mode [ 268.415521][ T9277] syzkaller0: entered promiscuous mode [ 268.421065][ T9277] syzkaller0: entered allmulticast mode [ 268.489643][ T9280] syzkaller0: entered promiscuous mode [ 268.495344][ T9280] syzkaller0: entered allmulticast mode [ 268.759742][ T9289] capability: warning: `syz.1.1994' uses 32-bit capabilities (legacy support in use) [ 268.868140][ T9287] syzkaller0: entered promiscuous mode [ 268.885031][ T9287] syzkaller0: entered allmulticast mode [ 268.984431][ T9281] loop3: detected capacity change from 0 to 512 [ 269.352682][ T9301] syzkaller0: entered promiscuous mode [ 269.460546][ T9301] syzkaller0: entered allmulticast mode [ 269.685223][ T9311] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1999'. [ 269.864675][ T9281] EXT4-fs (loop3): 1 orphan inode deleted [ 269.893272][ T7965] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 269.917913][ T7965] EXT4-fs error (device loop3): ext4_release_dquot:7070: comm kworker/u8:13: Failed to release dquot type 1 [ 269.941120][ T7965] loop3: lost filesystem error report for type 5 error -117 [ 270.031637][ T9316] syzkaller0: entered promiscuous mode [ 270.071733][ T9316] syzkaller0: entered allmulticast mode [ 270.170496][ T9281] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 270.281161][ T9321] syzkaller0: entered promiscuous mode [ 270.309937][ T9321] syzkaller0: entered allmulticast mode [ 270.338537][ T9281] ext4 filesystem being mounted at /417/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 270.558443][ T9336] loop5: detected capacity change from 0 to 512 [ 270.567817][ T28] audit: type=1326 audit(2000000044.550:1028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9332 comm="syz.4.2006" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f0aa5ce59 code=0x7ffc0000 [ 270.618137][ T28] audit: type=1326 audit(2000000044.550:1029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9332 comm="syz.4.2006" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f0aa5ce59 code=0x7ffc0000 [ 270.657900][ T9336] EXT4-fs error (device loop5): ext4_quota_enable:7221: comm syz.5.2007: Bad quota inum: 2, type: 1 [ 270.680183][ T9336] loop5: lost filesystem error report for type 5 error -117 [ 270.682152][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 270.695940][ C1] EXT4-fs (loop5): initial error at time 2000000044: ext4_quota_enable:7221 [ 270.702546][ T28] audit: type=1326 audit(2000000044.550:1030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9332 comm="syz.4.2006" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f0aa5ce59 code=0x7ffc0000 [ 270.704761][ C1] EXT4-fs (loop5): last error at time 2000000044: ext4_quota_enable:7221 [ 270.739179][ T9336] EXT4-fs warning (device loop5): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix. [ 270.747690][ T9340] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 270.767094][ T9340] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 270.800461][ T9336] EXT4-fs (loop5): mount failed [ 270.805519][ T28] audit: type=1326 audit(2000000044.550:1031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9332 comm="syz.4.2006" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f0aa5ce59 code=0x7ffc0000 [ 270.833238][ T28] audit: type=1326 audit(2000000044.550:1032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9332 comm="syz.4.2006" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f0aa5ce59 code=0x7ffc0000 [ 270.858950][ T28] audit: type=1326 audit(2000000044.550:1033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9332 comm="syz.4.2006" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f1f0aa5ce59 code=0x7ffc0000 [ 270.996039][ T28] audit: type=1326 audit(2000000044.550:1034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9332 comm="syz.4.2006" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f0aa5ce59 code=0x7ffc0000 [ 270.996118][ T28] audit: type=1326 audit(2000000044.550:1035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9332 comm="syz.4.2006" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f0aa5ce59 code=0x7ffc0000 [ 270.996242][ T28] audit: type=1326 audit(2000000044.550:1036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9332 comm="syz.4.2006" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f0aa5ce59 code=0x7ffc0000 [ 270.996333][ T28] audit: type=1326 audit(2000000044.580:1037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9332 comm="syz.4.2006" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=244 compat=0 ip=0x7f1f0aa5ce59 code=0x7ffc0000 [ 271.577875][ T9353] syzkaller0: entered promiscuous mode [ 271.577942][ T9353] syzkaller0: entered allmulticast mode [ 271.821266][ T9358] tipc: Enabling of bearer rejected, already enabled [ 272.643058][ T9382] loop2: detected capacity change from 0 to 512 [ 273.281827][ T9382] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 273.310556][ T9382] EXT4-fs (loop2): 1 truncate cleaned up [ 273.319216][ T9382] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 273.780727][ T9378] can0: slcan on ttyS3. [ 273.942258][ T9390] can0 (unregistered): slcan off ttyS3. [ 274.136698][ T9397] loop5: detected capacity change from 0 to 512 [ 274.292417][ T9397] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 274.326473][ T3296] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.339539][ T9400] syzkaller0: entered promiscuous mode [ 274.361355][ T9397] ext4 filesystem being mounted at /51/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 274.376751][ T9400] syzkaller0: entered allmulticast mode [ 274.673389][ T9413] syzkaller0: entered promiscuous mode [ 274.997585][ T9413] syzkaller0: entered allmulticast mode [ 275.192088][ T8396] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.229644][ T9432] tipc: Started in network mode [ 275.246656][ T9432] tipc: Node identity 8ee812232539, cluster identity 4711 [ 275.275207][ T9432] tipc: Enabled bearer , priority 0 [ 275.295697][ T9432] syzkaller0: entered promiscuous mode [ 275.308209][ T9432] syzkaller0: entered allmulticast mode [ 275.333733][ T9432] tipc: Resetting bearer [ 275.361233][ T9430] tipc: Resetting bearer [ 275.374593][ T9430] tipc: Disabling bearer [ 275.397366][ T9447] syzkaller0: entered promiscuous mode [ 275.404216][ T9447] syzkaller0: entered allmulticast mode [ 275.578259][ T9450] syzkaller0: entered promiscuous mode [ 275.603888][ T9450] syzkaller0: entered allmulticast mode [ 276.359258][ T9453] loop5: detected capacity change from 0 to 512 [ 276.395670][ T9472] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2041'. [ 276.427124][ T9471] gtp0: entered allmulticast mode [ 276.458405][ T9471] team0: Port device gtp0 added [ 276.476332][ T9472] hsr_slave_0: left promiscuous mode [ 276.491507][ T9472] hsr_slave_1: left promiscuous mode [ 276.524421][ T9453] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 276.550531][ T9474] tipc: Enabling of bearer rejected, already enabled [ 276.581124][ T9474] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2042'. [ 276.616308][ T9474] tipc: Resetting bearer [ 276.782108][ T9482] loop4: detected capacity change from 0 to 256 [ 276.808118][ T9482] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 276.836365][ T9453] __quota_error: 49 callbacks suppressed [ 276.836457][ T9453] Quota error (device loop5): do_check_range: Getting block 196613 out of range 1-5 [ 276.876509][ T9453] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 276.876773][ T9483] loop2: detected capacity change from 0 to 128 [ 276.931268][ T9453] EXT4-fs error (device loop5): ext4_acquire_dquot:7034: comm syz.5.2034: Failed to acquire dquot type 1 [ 276.965684][ T9453] loop5: lost filesystem error report for type 5 error -117 [ 276.972934][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 276.981687][ T9480] loop1: detected capacity change from 0 to 764 [ 276.983462][ C1] EXT4-fs (loop5): last error at time 2000000050: ext4_acquire_dquot:7034 [ 276.986987][ T9482] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2045'. [ 277.051312][ T9482] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2045'. [ 277.069492][ T9461] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 277.094179][ T9461] FAT-fs (loop2): Filesystem has been set read-only [ 277.108713][ T9453] EXT4-fs (loop5): 1 truncate cleaned up [ 277.186772][ T9453] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 277.252977][ T9486] syzkaller0: entered promiscuous mode [ 277.265348][ T9486] syzkaller0: entered allmulticast mode [ 277.597264][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.952211][ T28] audit: type=1400 audit(2000000051.910:1087): avc: denied { write } for pid=9488 comm="syz.1.2057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 278.453285][ T8396] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 278.513156][ T9511] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2054'. [ 278.578503][ T9518] syzkaller0: entered promiscuous mode [ 278.591843][ T9518] syzkaller0: entered allmulticast mode [ 278.646502][ T9515] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 278.667414][ T9515] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 278.737534][ T9523] syzkaller0: entered promiscuous mode [ 278.744173][ T9523] syzkaller0: entered allmulticast mode [ 278.751485][ T9524] syzkaller0: entered promiscuous mode [ 278.758086][ T9524] syzkaller0: entered allmulticast mode [ 278.957237][ T9527] tipc: Enabled bearer , priority 0 [ 278.978974][ T9527] syzkaller0: entered promiscuous mode [ 278.989632][ T9527] syzkaller0: entered allmulticast mode [ 278.997001][ T9528] syzkaller0: entered promiscuous mode [ 279.003345][ T9528] syzkaller0: entered allmulticast mode [ 279.010693][ T9527] tipc: Resetting bearer [ 279.017419][ T9525] tipc: Resetting bearer [ 279.024047][ T9525] tipc: Disabling bearer [ 279.211673][ T9536] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2066'. [ 279.427508][ T9548] loop3: detected capacity change from 0 to 128 [ 279.500490][ T9547] sg_write: data in/out 28672/136 bytes for SCSI command 0x0-- guessing data in; [ 279.500490][ T9547] program syz.2.2067 not setting count and/or reply_len properly [ 279.551207][ T9520] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 279.551253][ T9520] FAT-fs (loop3): Filesystem has been set read-only [ 279.554788][ T9552] tipc: Resetting bearer [ 279.597928][ T9553] loop2: detected capacity change from 0 to 512 [ 279.624666][ T9553] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 279.651612][ T9553] Quota error (device loop2): do_check_range: Getting block 196613 out of range 1-5 [ 279.662919][ T9556] loop4: detected capacity change from 0 to 128 [ 279.704553][ T9553] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 279.826204][ T9553] EXT4-fs error (device loop2): ext4_acquire_dquot:7034: comm syz.2.2067: Failed to acquire dquot type 1 [ 280.328442][ T9553] loop2: lost filesystem error report for type 5 error -117 [ 280.329100][ T9553] EXT4-fs (loop2): 1 truncate cleaned up [ 280.336470][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 280.336493][ C1] EXT4-fs (loop2): last error at time 2000000054: ext4_acquire_dquot:7034 [ 280.376940][ T9562] tipc: Enabling of bearer rejected, already enabled [ 280.458953][ T9553] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 280.488013][ T9566] loop1: detected capacity change from 0 to 512 [ 280.516749][ T9566] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 280.554753][ T9478] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 248: padding at end of block bitmap is not set [ 280.574103][ T9566] ext4 filesystem being mounted at /447/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 280.587556][ T28] audit: type=1400 audit(2000000054.570:1088): avc: denied { write } for pid=9565 comm="syz.1.2073" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 280.727379][ T3296] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 281.493451][ T9575] loop2: detected capacity change from 0 to 2048 [ 281.524283][ T9575] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 281.554395][ T9575] ext4 filesystem being mounted at /409/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 281.605218][ T28] audit: type=1400 audit(2000000055.580:1089): avc: denied { write } for pid=9573 comm="syz.2.2074" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 281.672198][ T9582] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2074: bg 0: block 345: padding at end of block bitmap is not set [ 281.728063][ T9582] EXT4-fs (loop2): Remounting filesystem read-only [ 281.775149][ T850] EXT4-fs warning (device loop2): ext4_convert_unwritten_extents:5075: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 282.317451][ T9593] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2087'. [ 282.475748][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.839334][ T3296] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.905632][ T9602] loop3: detected capacity change from 0 to 1024 [ 282.917743][ T9604] loop4: detected capacity change from 0 to 256 [ 282.936715][ T9602] EXT4-fs: test_dummy_encryption option not supported [ 282.975982][ T9604] FAT-fs (loop4): Directory bread(block 64) failed [ 283.013181][ T9605] loop1: detected capacity change from 0 to 512 [ 283.022651][ T9604] FAT-fs (loop4): Directory bread(block 65) failed [ 283.060316][ T9604] FAT-fs (loop4): Directory bread(block 66) failed [ 283.067363][ T9605] EXT4-fs: Ignoring removed nomblk_io_submit option [ 283.105912][ T9604] FAT-fs (loop4): Directory bread(block 67) failed [ 283.121684][ T9605] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 283.142548][ T9604] FAT-fs (loop4): Directory bread(block 68) failed [ 283.154970][ T9607] tipc: New replicast peer: 255.255.255.255 [ 283.161180][ T9605] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 283.180811][ T9604] FAT-fs (loop4): Directory bread(block 69) failed [ 283.188298][ T9607] tipc: Enabled bearer , priority 10 [ 283.195220][ T9604] FAT-fs (loop4): Directory bread(block 70) failed [ 283.209164][ T9605] EXT4-fs (loop1): failed to initialize system zone (-117) [ 283.220188][ T9604] FAT-fs (loop4): Directory bread(block 71) failed [ 283.232232][ T9605] EXT4-fs (loop1): mount failed [ 283.249037][ T9604] FAT-fs (loop4): Directory bread(block 72) failed [ 283.282480][ T9604] FAT-fs (loop4): Directory bread(block 73) failed [ 283.357667][ T9613] syzkaller0: entered promiscuous mode [ 283.366443][ T9604] bio_check_eod: 8308 callbacks suppressed [ 283.366460][ T9604] syz.4.2083: attempt to access beyond end of device [ 283.366460][ T9604] loop4: rw=524288, sector=1192, nr_sectors = 4 limit=256 [ 283.395430][ T9613] syzkaller0: entered allmulticast mode [ 283.435150][ T9604] syz.4.2083: attempt to access beyond end of device [ 283.435150][ T9604] loop4: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 283.469854][ T9604] syz.4.2083: attempt to access beyond end of device [ 283.469854][ T9604] loop4: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 283.499747][ T9603] syz.4.2083: attempt to access beyond end of device [ 283.499747][ T9603] loop4: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 283.564174][ T9603] syz.4.2083: attempt to access beyond end of device [ 283.564174][ T9603] loop4: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 283.735227][ T9616] loop3: detected capacity change from 0 to 512 [ 283.839281][ T9603] syz.4.2083: attempt to access beyond end of device [ 283.839281][ T9603] loop4: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 283.955714][ T9616] EXT4-fs (loop3): 1 orphan inode deleted [ 283.964510][ T9616] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 283.986329][ T9616] ext4 filesystem being mounted at /423/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 284.002300][ T9603] syz.4.2083: attempt to access beyond end of device [ 284.002300][ T9603] loop4: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 284.082790][ T56] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 284.097304][ T9603] syz.4.2083: attempt to access beyond end of device [ 284.097304][ T9603] loop4: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 284.115075][ T56] EXT4-fs error (device loop3): ext4_release_dquot:7070: comm kworker/u8:4: Failed to release dquot type 1 [ 284.157087][ T9603] syz.4.2083: attempt to access beyond end of device [ 284.157087][ T9603] loop4: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 284.171075][ T9603] syz.4.2083: attempt to access beyond end of device [ 284.171075][ T9603] loop4: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 284.302220][ T3378] tipc: Node number set to 2882605603 [ 286.351331][ T9648] syzkaller0: entered promiscuous mode [ 286.357606][ T9648] syzkaller0: entered allmulticast mode [ 286.394351][ T9657] syzkaller0: entered promiscuous mode [ 286.400030][ T9657] syzkaller0: entered allmulticast mode [ 286.757126][ T9660] syzkaller0: entered promiscuous mode [ 286.776534][ T9660] syzkaller0: entered allmulticast mode [ 286.809282][ T9660] TC_ACT_REPEAT abuse ? [ 287.411914][ T9664] syzkaller0: entered promiscuous mode [ 287.417683][ T9664] syzkaller0: entered allmulticast mode [ 288.562351][ T9668] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2098'. [ 289.506230][ T9680] tipc: Resetting bearer [ 289.528314][ T9674] syzkaller0: entered promiscuous mode [ 289.550274][ T9674] syzkaller0: entered allmulticast mode [ 289.681548][ T9686] loop1: detected capacity change from 0 to 1024 [ 289.713883][ T9686] EXT4-fs: Ignoring removed oldalloc option [ 289.792167][ T9686] EXT4-fs: Ignoring removed i_version option [ 289.814868][ T9686] EXT4-fs: Ignoring removed nomblk_io_submit option [ 289.844516][ T9686] EXT4-fs (loop1): stripe (6) is not aligned with cluster size (16), stripe is disabled [ 289.891584][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.901979][ T9686] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 289.908649][ T9692] syzkaller0: entered promiscuous mode [ 289.924559][ T28] audit: type=1400 audit(2000000063.910:1090): avc: denied { write } for pid=9685 comm="syz.1.2104" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 289.966123][ T9692] syzkaller0: entered allmulticast mode [ 289.972313][ T9686] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 290.013947][ T9686] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 290.048933][ T9686] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 290.059117][ T9686] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 290.122015][ T9704] syzkaller0: entered promiscuous mode [ 290.127686][ T9704] syzkaller0: entered allmulticast mode [ 290.138606][ T9707] syzkaller0: left promiscuous mode [ 290.147528][ T9707] syzkaller0: left allmulticast mode [ 290.153167][ T9708] loop2: detected capacity change from 0 to 4096 [ 290.155266][ T9704] tipc: Enabled bearer , priority 0 [ 290.170147][ T9708] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 290.194289][ T9703] tipc: Resetting bearer [ 290.208569][ T9703] tipc: Disabling bearer [ 290.247833][ T28] audit: type=1400 audit(2000000064.230:1091): avc: denied { create } for pid=9712 comm="syz.3.2112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 290.295684][ T28] audit: type=1400 audit(2000000064.260:1092): avc: denied { create } for pid=9712 comm="syz.3.2112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 290.316507][ T28] audit: type=1400 audit(2000000064.260:1093): avc: denied { create } for pid=9712 comm="syz.3.2112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 290.336870][ T28] audit: type=1400 audit(2000000064.260:1094): avc: denied { create } for pid=9712 comm="syz.3.2112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 290.371253][ T28] audit: type=1400 audit(2000000064.260:1095): avc: denied { create } for pid=9712 comm="syz.3.2112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 290.397084][ T28] audit: type=1400 audit(2000000064.260:1096): avc: denied { write } for pid=9712 comm="syz.3.2112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 290.426750][ T28] audit: type=1400 audit(2000000064.260:1097): avc: denied { read } for pid=9712 comm="syz.3.2112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 290.447396][ T28] audit: type=1400 audit(2000000064.260:1098): avc: denied { read write } for pid=3296 comm="syz-executor" name="loop2" dev="devtmpfs" ino=1407 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 290.473166][ T28] audit: type=1400 audit(2000000064.260:1099): avc: denied { open } for pid=3296 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=1407 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 290.488671][ T9718] syzkaller0: entered promiscuous mode [ 290.507837][ T9718] syzkaller0: entered allmulticast mode [ 290.740541][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.382032][ T9738] syzkaller0: entered promiscuous mode [ 291.393995][ T9738] syzkaller0: entered allmulticast mode [ 291.540125][ T9747] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2119'. [ 291.552900][ T9745] loop1: detected capacity change from 0 to 1024 [ 291.565354][ T9742] loop3: detected capacity change from 0 to 2048 [ 291.583949][ T9745] EXT4-fs: test_dummy_encryption option not supported [ 291.649061][ T9742] loop3: p2 p3 p7 [ 292.078618][ T9754] netlink: 'syz.3.2122': attribute type 1 has an invalid length. [ 292.228934][ T9754] 8021q: adding VLAN 0 to HW filter on device bond3 [ 292.354962][ T4190] udevd[4190]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 292.390279][ T9761] loop1: detected capacity change from 0 to 512 [ 292.454575][ T9760] bond3: (slave ip6gretap1): making interface the new active one [ 292.481819][ T9761] EXT4-fs (loop1): 1 orphan inode deleted [ 292.490348][ T9760] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 292.501350][ T9761] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 292.522269][ T9761] ext4 filesystem being mounted at /455/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 292.557805][ T850] EXT4-fs error (device loop1): ext4_release_dquot:7070: comm kworker/u8:6: Failed to release dquot type 1 [ 292.588519][ T9771] loop5: detected capacity change from 0 to 1024 [ 292.654122][ T9771] EXT4-fs: test_dummy_encryption option not supported [ 292.868693][ T9782] loop2: detected capacity change from 0 to 256 [ 292.876900][ T9782] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 292.894545][ T9784] loop3: detected capacity change from 0 to 512 [ 292.916950][ T9784] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 292.952270][ T9784] ext4 filesystem being mounted at /433/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 293.002486][ T9782] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2127'. [ 293.026982][ T9782] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2127'. [ 294.050391][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.069111][ T9795] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2131'. [ 294.115060][ T9795] syzkaller0: entered promiscuous mode [ 294.137961][ T9795] syzkaller0: entered allmulticast mode [ 294.422304][ T9802] syzkaller1: entered promiscuous mode [ 294.432674][ T9802] syzkaller1: entered allmulticast mode [ 294.440027][ T9787] loop5: detected capacity change from 0 to 512 [ 294.462552][ T9804] syzkaller0: entered promiscuous mode [ 294.474533][ T9804] syzkaller0: entered allmulticast mode [ 294.803574][ T9812] vhci_hcd vhci_hcd.3: invalid port number 9 [ 294.828029][ T9812] vhci_hcd vhci_hcd.3: invalid port number 9 [ 294.840028][ T9814] loop4: detected capacity change from 0 to 1024 [ 294.879098][ T9814] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 294.912232][ T9814] ext4 filesystem being mounted at /422/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 294.978855][ T28] kauditd_printk_skb: 57 callbacks suppressed [ 294.978875][ T28] audit: type=1400 audit(2000000068.960:1156): avc: denied { unmount } for pid=9813 comm="syz.4.2136" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 295.041549][ T9813] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 295.137769][ T9787] EXT4-fs (loop5): 1 orphan inode deleted [ 295.156837][ T7982] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 295.184284][ T7982] EXT4-fs error (device loop5): ext4_release_dquot:7070: comm kworker/u8:26: Failed to release dquot type 1 [ 295.221809][ T7982] loop5: lost filesystem error report for type 5 error -117 [ 295.240657][ T9787] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 295.290981][ T9787] ext4 filesystem being mounted at /70/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 295.516031][ T28] audit: type=1400 audit(2000000069.500:1157): avc: denied { create } for pid=9826 comm="syz.4.2139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 295.582040][ T9818] loop3: detected capacity change from 0 to 512 [ 295.584216][ T28] audit: type=1400 audit(2000000069.520:1158): avc: denied { write } for pid=9826 comm="syz.4.2139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 295.659393][ T9818] EXT4-fs: Ignoring removed nomblk_io_submit option [ 295.721558][ T9818] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 295.745387][ T9818] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 295.808116][ T9818] EXT4-fs (loop3): failed to initialize system zone (-117) [ 295.844659][ T9818] EXT4-fs (loop3): mount failed [ 296.004005][ T28] audit: type=1400 audit(2000000069.970:1159): avc: denied { setopt } for pid=9817 comm="syz.3.2137" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 296.223439][ T28] audit: type=1400 audit(2000000070.210:1160): avc: denied { append } for pid=9835 comm="syz.3.2141" name="001" dev="devtmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 296.574197][ T9848] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2141'. [ 296.955305][ T28] audit: type=1400 audit(2000000070.930:1161): avc: denied { create } for pid=9852 comm="syz.4.2143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 299.298441][ T28] audit: type=1400 audit(2000000073.200:1162): avc: denied { create } for pid=9868 comm="syz.3.2149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 299.405504][ T28] audit: type=1400 audit(2000000073.210:1163): avc: denied { setopt } for pid=9868 comm="syz.3.2149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 299.434000][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.152833][ T9879] loop1: detected capacity change from 0 to 1024 [ 300.426524][ T9879] EXT4-fs: test_dummy_encryption option not supported [ 301.148079][ T28] audit: type=1400 audit(2000000075.130:1164): avc: denied { setopt } for pid=9880 comm="syz.3.2153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 301.402236][ C0] tc action pedit offset must be on 32 bit boundaries [ 301.496213][ T9892] loop1: detected capacity change from 0 to 512 [ 301.659622][ T9892] EXT4-fs (loop1): 1 orphan inode deleted [ 301.683282][ T9892] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 301.701280][ T9892] ext4 filesystem being mounted at /456/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 302.248889][ T850] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 302.289575][ T850] EXT4-fs error (device loop1): ext4_release_dquot:7070: comm kworker/u8:6: Failed to release dquot type 1 [ 302.609874][ T28] audit: type=1400 audit(2000000076.590:1165): avc: denied { ioctl } for pid=9902 comm="syz.4.2159" path="socket:[25203]" dev="sockfs" ino=25203 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 302.840532][ T9909] loop3: detected capacity change from 0 to 512 [ 302.884248][ T9919] loop2: detected capacity change from 0 to 128 [ 302.921415][ T9919] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 302.954903][ T9909] EXT4-fs: Ignoring removed bh option [ 302.973811][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.982328][ T9919] ext4 filesystem being mounted at /422/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 303.020075][ T9909] EXT4-fs: Ignoring removed mblk_io_submit option [ 303.037175][ T28] audit: type=1400 audit(2000000077.020:1166): avc: denied { write } for pid=9917 comm="syz.2.2163" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 303.085880][ T9909] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 303.115069][ T28] audit: type=1400 audit(2000000077.100:1167): avc: denied { create } for pid=9917 comm="syz.2.2163" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 303.174163][ T28] audit: type=1400 audit(2000000077.160:1168): avc: denied { write } for pid=9917 comm="syz.2.2163" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 303.200224][ T9909] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 303.223179][ T9909] EXT4-fs (loop3): orphan cleanup on readonly fs [ 303.246738][ T3296] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 303.259237][ T28] audit: type=1400 audit(2000000077.160:1169): avc: denied { write open } for pid=9917 comm="syz.2.2163" path="/422/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 303.325895][ T28] audit: type=1400 audit(2000000077.200:1170): avc: denied { write } for pid=9917 comm="syz.2.2163" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 303.331998][ T9909] Quota error (device loop3): do_insert_tree: Free block already used in tree: block 4 [ 303.347666][ T28] audit: type=1400 audit(2000000077.200:1171): avc: denied { write } for pid=9917 comm="syz.2.2163" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 303.396088][ T9909] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.2160: Failed to acquire dquot type 1 [ 303.413126][ T9909] loop3: lost filesystem error report for type 5 error -5 [ 303.422175][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 303.437152][ C0] EXT4-fs (loop3): last error at time 2000000077: ext4_acquire_dquot:7034 [ 303.473828][ T9940] loop2: detected capacity change from 0 to 512 [ 303.510604][ T9909] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.2160: Invalid block bitmap block 0 in block_group 0 [ 303.542778][ T9940] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 303.546688][ T9909] loop3: lost filesystem error report for type 5 error -117 [ 303.562781][ T9940] ext4 filesystem being mounted at /423/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 303.599149][ T9909] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.2160: Invalid block bitmap block 0 in block_group 0 [ 303.633479][ T9909] loop3: lost filesystem error report for type 5 error -117 [ 303.654758][ T9909] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.2160: Invalid block bitmap block 0 in block_group 0 [ 303.683405][ T9909] loop3: lost filesystem error report for type 5 error -117 [ 303.695515][ T9909] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.2160: Failed to acquire dquot type 1 [ 303.716852][ T9909] loop3: lost filesystem error report for type 5 error -28 [ 303.718514][ T8396] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.724153][ T9909] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.2160: Failed to acquire dquot type 1 [ 303.756229][ T9909] loop3: lost filesystem error report for type 5 error -28 [ 303.761685][ T9909] EXT4-fs (loop3): 1 orphan inode deleted [ 304.271007][ T9909] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 304.343813][ T9909] syz.3.2160 (9909) used greatest stack depth: 7568 bytes left [ 304.416106][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.424466][ T3296] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.571007][ T9970] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 304.597105][ T9970] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 304.610061][ T9968] loop3: detected capacity change from 0 to 256 [ 304.645743][ T9968] FAT-fs (loop3): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 304.670121][ T9976] bridge1: entered promiscuous mode [ 304.683793][ T9976] bridge1: entered allmulticast mode [ 304.717098][ T9978] tmpfs: Unknown parameter 'context' [ 304.741220][ T9976] bridge2: entered promiscuous mode [ 304.762242][ T9970] loop2: detected capacity change from 0 to 128 [ 304.769132][ T9976] bridge2: entered allmulticast mode [ 304.783199][ T9976] team0: Port device bridge2 added [ 304.796674][ T9964] netlink: 'syz.4.2174': attribute type 2 has an invalid length. [ 304.808365][ T9970] msdos: Bad value for 'gid' [ 304.818825][ T9981] bridge0: port 3(team0) entered blocking state [ 304.829633][ T9983] loop3: detected capacity change from 0 to 512 [ 304.836507][ T9983] EXT4-fs: Ignoring removed nobh option [ 304.843322][ T9981] bridge0: port 3(team0) entered disabled state [ 304.846706][ T9970] msdos: Bad value for 'gid' [ 304.861754][ T9983] EXT4-fs (loop3): 1 truncate cleaned up [ 304.867939][ T9983] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 304.880545][ T9981] team0: entered allmulticast mode [ 304.886110][ T9981] team_slave_0: entered allmulticast mode [ 304.892458][ T9981] team_slave_1: entered allmulticast mode [ 304.917453][ T9981] team0: entered promiscuous mode [ 304.932940][ T9981] team_slave_0: entered promiscuous mode [ 304.945329][ T9981] team_slave_1: entered promiscuous mode [ 305.284426][ T9993] loop5: detected capacity change from 0 to 2048 [ 305.314462][ T9993] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 305.368461][ T9993] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.405159][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.620807][T10012] syzkaller0: entered promiscuous mode [ 306.626459][T10012] syzkaller0: entered allmulticast mode [ 306.647835][T10013] loop3: detected capacity change from 0 to 512 [ 306.662699][T10013] EXT4-fs: Ignoring removed bh option [ 306.695947][T10013] EXT4-fs: inline encryption not supported [ 306.706774][T10013] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 306.733693][T10013] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 306.748593][T10013] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2191: bg 0: block 248: padding at end of block bitmap is not set [ 306.763287][T10013] loop3: lost filesystem error report for type 5 error -117 [ 306.763562][T10013] __quota_error: 33 callbacks suppressed [ 306.763577][T10013] Quota error (device loop3): write_blk: dquota write failed [ 306.776574][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 306.776593][ C0] EXT4-fs (loop3): last error at time 2000000080: ext4_validate_block_bitmap:441 [ 306.826062][ T28] audit: type=1400 audit(2000000080.810:1200): avc: denied { create } for pid=10020 comm="syz.5.2193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 306.853435][T10013] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 306.882401][T10013] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.2191: Failed to acquire dquot type 1 [ 306.909528][T10013] loop3: lost filesystem error report for type 5 error -28 [ 306.910186][T10013] EXT4-fs (loop3): 1 truncate cleaned up [ 306.932666][T10013] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 307.083869][T10024] random: crng reseeded on system resumption [ 307.102906][ T28] audit: type=1400 audit(2000000081.040:1201): avc: denied { write } for pid=10015 comm="syz.4.2192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 307.153761][ T28] audit: type=1400 audit(2000000081.070:1202): avc: denied { write } for pid=10008 comm="syz.1.2190" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 307.385381][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 307.405145][ T28] audit: type=1400 audit(2000000081.070:1203): avc: denied { open } for pid=10008 comm="syz.1.2190" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 307.474858][T10028] loop2: detected capacity change from 0 to 256 [ 307.556091][T10028] FAT-fs (loop2): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 307.691695][ T28] audit: type=1400 audit(2000000081.670:1204): avc: denied { kexec_image_load } for pid=10034 comm="syz.3.2197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 307.720839][ T28] audit: type=1400 audit(2000000081.670:1205): avc: denied { read write } for pid=10034 comm="syz.3.2197" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 307.775302][T10044] loop3: detected capacity change from 0 to 512 [ 307.785339][T10040] loop1: detected capacity change from 0 to 512 [ 307.794908][T10044] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 307.811168][ T28] audit: type=1400 audit(2000000081.670:1206): avc: denied { open } for pid=10034 comm="syz.3.2197" path="/dev/sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 307.837421][T10045] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2198'. [ 307.847362][T10040] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 307.861080][T10044] EXT4-fs (loop3): 1 truncate cleaned up [ 307.881341][T10044] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 307.894581][ T28] audit: type=1400 audit(2000000081.670:1207): avc: denied { ioctl } for pid=10034 comm="syz.3.2197" path="/dev/sg0" dev="devtmpfs" ino=137 ioctlcmd=0x2202 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 307.920450][T10040] EXT4-fs (loop1): failed to open journal device unknown-block(0,0) -6 [ 307.948393][T10045] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2198'. [ 308.039335][T10045] bond2: entered promiscuous mode [ 308.074464][T10045] bond2: entered allmulticast mode [ 308.106365][T10045] 8021q: adding VLAN 0 to HW filter on device bond2 [ 308.141534][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 308.163497][T10055] loop1: detected capacity change from 0 to 128 [ 308.197177][T10055] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 308.238954][T10021] loop5: detected capacity change from 0 to 4096 [ 308.245752][T10055] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 308.269781][T10021] EXT4-fs: Ignoring removed nomblk_io_submit option [ 308.290603][ T7982] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 308.303346][T10021] EXT4-fs (loop5): stripe (97) is not aligned with cluster size (16), stripe is disabled [ 308.318844][T10055] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 308.333345][T10021] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 308.407763][T10063] bridge4: entered promiscuous mode [ 308.415451][T10063] bridge4: entered allmulticast mode [ 308.498352][T10063] bridge5: entered promiscuous mode [ 308.503885][T10063] bridge5: entered allmulticast mode [ 308.518596][T10063] team0: Port device bridge5 added [ 308.550647][T10075] bridge0: port 1(team0) entered blocking state [ 308.568519][T10075] bridge0: port 1(team0) entered disabled state [ 308.594612][T10075] team0: entered allmulticast mode [ 308.662434][ T8396] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 308.844346][T10083] loop3: detected capacity change from 0 to 512 [ 308.894906][T10083] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 308.905021][T10087] bridge3: entered promiscuous mode [ 308.924209][T10087] bridge3: entered allmulticast mode [ 308.933377][T10083] EXT4-fs (loop3): orphan cleanup on readonly fs [ 308.949371][T10089] bridge4: entered promiscuous mode [ 308.958916][T10083] EXT4-fs warning (device loop3): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 308.978457][T10089] bridge4: entered allmulticast mode [ 308.990074][T10089] team0: Device bridge4 is of different type [ 308.998338][T10083] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 309.014310][T10083] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2972: inode #16: comm syz.3.2211: corrupted xattr block 31: invalid header [ 309.028618][T10083] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 309.029131][T10083] EXT4-fs warning (device loop3): ext4_evict_inode:287: xattr delete (err -117) [ 309.038624][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 309.038684][ C0] EXT4-fs (loop3): initial error at time 2000000083: ext4_xattr_delete_inode:2972: inode 16 [ 309.038764][ C0] EXT4-fs (loop3): last error at time 2000000083: ext4_xattr_delete_inode:2972: inode 16 [ 309.105493][T10083] EXT4-fs (loop3): 1 orphan inode deleted [ 309.117518][T10083] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 309.232905][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.261438][T10101] tipc: Started in network mode [ 309.266922][T10101] tipc: Node identity 062942a9ec5e, cluster identity 4711 [ 309.284005][T10101] tipc: Enabled bearer , priority 0 [ 309.342226][ C1] tc action pedit offset must be on 32 bit boundaries [ 309.773338][T10101] tipc: Resetting bearer [ 310.520373][T10119] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2221'. [ 310.530974][T10119] 8021q: adding VLAN 0 to HW filter on device bond0 [ 310.818434][ T1038] tipc: Node number set to 3933684393 [ 310.917085][T10134] tipc: Resetting bearer [ 310.987246][T10139] loop2: detected capacity change from 0 to 1024 [ 311.004898][T10139] EXT4-fs: test_dummy_encryption option not supported [ 311.176907][T10144] syzkaller0: left allmulticast mode [ 311.885266][T10147] loop2: detected capacity change from 0 to 512 [ 314.919380][T10147] EXT4-fs warning (device loop2): ext4_multi_mount_protect:394: Unable to create kmmpd thread for loop2. [ 314.962207][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 314.962227][ T28] audit: type=1400 audit(2000000088.920:1215): avc: denied { create } for pid=10154 comm="syz.3.2233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 315.049259][ T28] audit: type=1400 audit(2000000088.920:1216): avc: denied { setopt } for pid=10154 comm="syz.3.2233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 315.176674][ T28] audit: type=1400 audit(2000000089.150:1217): avc: denied { create } for pid=10167 comm="syz.2.2236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 315.199403][ T28] audit: type=1400 audit(2000000089.150:1218): avc: denied { create } for pid=10167 comm="syz.2.2236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 315.225935][ T28] audit: type=1400 audit(2000000089.160:1219): avc: denied { connect } for pid=10167 comm="syz.2.2236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 316.242386][T10182] loop3: detected capacity change from 0 to 512 [ 316.310991][T10182] EXT4-fs: Ignoring removed bh option [ 316.316792][T10182] EXT4-fs: inline encryption not supported [ 316.318584][T10181] loop2: detected capacity change from 0 to 512 [ 316.373544][T10181] EXT4-fs: Ignoring removed bh option [ 316.380143][T10181] EXT4-fs: Ignoring removed mblk_io_submit option [ 316.390329][T10181] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 316.422423][T10182] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 316.466030][T10181] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 316.479509][T10181] EXT4-fs (loop2): orphan cleanup on readonly fs [ 316.495752][T10181] Quota error (device loop2): do_insert_tree: Free block already used in tree: block 4 [ 316.507847][T10181] Quota error (device loop2): qtree_write_dquot: Error -5 occurred while creating quota [ 316.520702][T10181] EXT4-fs error (device loop2): ext4_acquire_dquot:7034: comm syz.2.2237: Failed to acquire dquot type 1 [ 316.559317][T10193] loop5: detected capacity change from 0 to 1024 [ 316.565975][T10182] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 316.589955][T10181] loop2: lost filesystem error report for type 5 error -5 [ 316.592360][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 316.606856][ C0] EXT4-fs (loop2): last error at time 2000000090: ext4_acquire_dquot:7034 [ 316.659115][T10182] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2238: bg 0: block 248: padding at end of block bitmap is not set [ 316.689208][T10181] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.2237: Invalid block bitmap block 0 in block_group 0 [ 316.704166][T10193] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 316.709800][T10181] loop2: lost filesystem error report for type 5 error -117 [ 316.721384][T10182] loop3: lost filesystem error report for type 5 error -117 [ 316.729233][T10193] ext4 filesystem being mounted at /81/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 316.751137][T10181] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.2237: Invalid block bitmap block 0 in block_group 0 [ 316.766682][T10181] loop2: lost filesystem error report for type 5 error -117 [ 316.768982][T10182] Quota error (device loop3): write_blk: dquota write failed [ 316.774455][T10181] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.2237: Invalid block bitmap block 0 in block_group 0 [ 316.776351][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 316.776371][ C1] EXT4-fs (loop3): last error at time 2000000090: ext4_validate_block_bitmap:441 [ 316.776442][T10182] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 316.776480][T10182] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.2238: Failed to acquire dquot type 1 [ 316.776508][T10182] loop3: lost filesystem error report for type 5 error -28 [ 316.811973][T10182] EXT4-fs (loop3): 1 truncate cleaned up [ 316.849389][T10181] loop2: lost filesystem error report for type 5 error -117 [ 316.852888][T10182] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 316.858601][T10181] Quota error (device loop2): write_blk: dquota write failed [ 316.916770][T10181] EXT4-fs error (device loop2): ext4_acquire_dquot:7034: comm syz.2.2237: Failed to acquire dquot type 1 [ 316.955230][T10181] loop2: lost filesystem error report for type 5 error -28 [ 316.964491][T10181] EXT4-fs error (device loop2): ext4_acquire_dquot:7034: comm syz.2.2237: Failed to acquire dquot type 1 [ 316.991387][T10193] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 317.003071][T10181] loop2: lost filesystem error report for type 5 error -28 [ 317.005174][T10181] EXT4-fs (loop2): 1 orphan inode deleted [ 317.028235][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 317.075034][T10208] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2246'. [ 317.158666][T10181] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 318.077521][T10222] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2245'. [ 318.096080][T10181] syz.2.2237 (10181) used greatest stack depth: 7552 bytes left [ 318.129789][T10222] netlink: 34959 bytes leftover after parsing attributes in process `syz.3.2245'. [ 318.149618][T10222] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 318.178661][ T3296] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.197940][T10224] loop5: detected capacity change from 0 to 512 [ 318.258620][T10224] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 318.309197][T10224] ext4 filesystem being mounted at /84/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 318.338337][T10229] loop2: detected capacity change from 0 to 128 [ 318.357026][T10233] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 318.367946][T10229] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 318.380175][T10233] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 318.510763][T10234] loop3: detected capacity change from 0 to 2048 [ 318.531448][T10229] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 319.339441][T10234] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 319.537972][T10234] tipc: Resetting bearer [ 319.758575][ T7982] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 319.820663][T10259] tipc: Enabling of bearer rejected, failed to enable media [ 319.947237][T10264] pim6reg: entered allmulticast mode [ 319.955273][T10264] pim6reg: left allmulticast mode [ 320.059217][ T8396] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.185252][T10270] loop5: detected capacity change from 0 to 512 [ 320.206618][T10270] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 320.227674][T10270] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it [ 320.238220][T10270] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.2261: Corrupt directory, running e2fsck is recommended [ 320.255902][T10270] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 320.269010][T10270] EXT4-fs error (device loop5): ext4_iget_extra_inode:5128: inode #15: comm syz.5.2261: corrupted in-inode xattr: e_name out of bounds [ 320.284461][T10270] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 320.284939][T10270] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.2261: couldn't read orphan inode 15 (err -117) [ 320.294257][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 320.294280][ C1] EXT4-fs (loop5): initial error at time 2000000094: ext4_iget_extra_inode:5128: inode 15 [ 320.294326][ C1] EXT4-fs (loop5): last error at time 2000000094: ext4_iget_extra_inode:5128: inode 15 [ 320.332660][T10270] loop5: lost filesystem error report for type 5 error -117 [ 320.333231][T10270] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 320.357173][T10270] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 320.368998][T10270] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it [ 320.379371][T10270] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.2261: Corrupt directory, running e2fsck is recommended [ 320.405049][T10270] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 320.416897][T10270] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it [ 320.428002][T10270] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.2261: Corrupt directory, running e2fsck is recommended [ 320.457187][T10270] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 320.469448][T10270] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it [ 320.480515][T10270] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.2261: Corrupt directory, running e2fsck is recommended [ 320.502078][T10270] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 320.933511][ T8396] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.017888][T10283] loop5: detected capacity change from 0 to 1024 [ 321.024818][T10283] EXT4-fs: test_dummy_encryption option not supported [ 321.089218][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 321.089238][ T28] audit: type=1400 audit(2000000095.070:1236): avc: denied { setopt } for pid=10284 comm="syz.2.2268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 321.120876][T10285] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 321.151223][T10288] netlink: 'syz.4.2269': attribute type 1 has an invalid length. [ 321.174286][T10288] 8021q: adding VLAN 0 to HW filter on device bond6 [ 321.191045][T10288] team0: left allmulticast mode [ 321.230272][T10288] team0: left promiscuous mode [ 321.390155][T10290] loop5: detected capacity change from 0 to 512 [ 321.446016][T10288] : port 1(team0) entered disabled state [ 321.465026][ T28] audit: type=1400 audit(2000000095.410:1237): avc: denied { write } for pid=10284 comm="syz.2.2268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 321.584703][T10290] EXT4-fs (loop5): 1 orphan inode deleted [ 321.610337][T10290] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 321.627937][T10290] ext4 filesystem being mounted at /86/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 321.864860][ T28] audit: type=1400 audit(2000000095.440:1238): avc: denied { nlmsg_write } for pid=10284 comm="syz.2.2268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 322.012036][ T7982] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 322.044559][ T7982] EXT4-fs error (device loop5): ext4_release_dquot:7070: comm kworker/u8:26: Failed to release dquot type 1 [ 322.125932][T10299] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2270'. [ 322.148562][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.158456][T10288] 8021q: adding VLAN 0 to HW filter on device team0 [ 322.183106][T10288] bond6: (slave team0): Enslaving as a backup interface with a down link [ 322.241049][T10299] tipc: Resetting bearer [ 322.392297][ T28] audit: type=1400 audit(2000000096.340:1239): avc: denied { mount } for pid=10302 comm="syz.3.2271" name="/" dev="rpc_pipefs" ino=26756 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 323.331941][ T28] audit: type=1400 audit(2000000096.350:1240): avc: denied { unmount } for pid=10302 comm="syz.3.2271" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 323.370089][ T8396] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.402684][T10316] syzkaller0: entered promiscuous mode [ 323.408323][T10316] syzkaller0: entered allmulticast mode [ 324.035878][T10323] loop3: detected capacity change from 0 to 764 [ 324.421886][T10324] IPv6: NLM_F_CREATE should be specified when creating new route [ 324.453161][T10323] Symlink component flag not implemented [ 324.459928][T10323] Symlink component flag not implemented [ 324.793146][ T28] audit: type=1400 audit(2000000098.400:1241): avc: denied { mount } for pid=10318 comm="syz.3.2277" name="/" dev="loop3" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 324.829072][T10328] x_tables: duplicate underflow at hook 1 [ 326.044801][ T28] audit: type=1400 audit(2000000100.030:1242): avc: denied { unmount } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 326.217026][T10342] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2281'. [ 327.052507][T10349] random: crng reseeded on system resumption [ 327.927914][T10351] loop2: detected capacity change from 0 to 512 [ 327.969410][T10351] EXT4-fs: Ignoring removed nobh option [ 328.167709][T10351] EXT4-fs (loop2): orphan cleanup on readonly fs [ 328.462075][T10362] loop3: detected capacity change from 0 to 1764 [ 328.680278][ T28] audit: type=1400 audit(2000000103.506:1243): avc: denied { bind } for pid=10356 comm="syz.3.2284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 328.765862][T10351] EXT4-fs warning (device loop2): ext4_xattr_inode_get:560: inode #11: comm syz.2.2283: EA inode hash validation failed [ 328.843753][ T28] audit: type=1400 audit(2000000103.506:1244): avc: denied { name_bind } for pid=10356 comm="syz.3.2284" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 328.876001][T10351] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 328.891303][ T28] audit: type=1400 audit(2000000103.506:1245): avc: denied { node_bind } for pid=10356 comm="syz.3.2284" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 329.100851][T10351] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #15: comm syz.2.2283: corrupted inode contents [ 329.875367][ T28] audit: type=1400 audit(2000000104.856:1246): avc: denied { ioctl } for pid=10364 comm="syz.5.2286" path="socket:[26056]" dev="sockfs" ino=26056 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 329.905609][T10351] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 329.912514][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 329.932864][ C0] EXT4-fs (loop2): initial error at time 2000000104: ext4_do_update_inode:5690: inode 15 [ 329.945175][ C0] EXT4-fs (loop2): last error at time 2000000104: ext4_do_update_inode:5690: inode 15 [ 330.175466][T10351] EXT4-fs error (device loop2): ext4_dirty_inode:6587: inode #15: comm syz.2.2283: mark_inode_dirty error [ 330.191290][T10351] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 330.198764][T10351] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #15: comm syz.2.2283: corrupted inode contents [ 330.389479][T10351] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 330.397958][T10369] kthread_run failed with err -4 [ 330.415650][T10351] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3001: inode #15: comm syz.2.2283: mark_inode_dirty error [ 330.441269][ T28] audit: type=1400 audit(2000000105.416:1247): avc: denied { write } for pid=10380 comm="syz.1.2288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 330.448904][T10351] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 330.466971][T10351] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3004: inode #15: comm syz.2.2283: mark inode dirty (error -117) [ 330.589484][T10351] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 330.632056][T10351] EXT4-fs warning (device loop2): ext4_evict_inode:287: xattr delete (err -117) [ 330.650207][ T28] audit: type=1400 audit(2000000105.626:1248): avc: denied { ioctl } for pid=10386 comm="syz.3.2290" path="socket:[26068]" dev="sockfs" ino=26068 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 330.650582][ T28] audit: type=1400 audit(2000000105.626:1249): avc: denied { write } for pid=10386 comm="syz.3.2290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 330.651183][ T28] audit: type=1400 audit(2000000105.626:1250): avc: denied { mounton } for pid=10386 comm="syz.3.2290" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 330.651252][ T28] audit: type=1400 audit(2000000105.626:1251): avc: denied { mount } for pid=10386 comm="syz.3.2290" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 330.652018][ T28] audit: type=1400 audit(2000000105.626:1252): avc: denied { getopt } for pid=10386 comm="syz.3.2290" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 330.697899][T10385] xt_hashlimit: size too large, truncated to 1048576 [ 330.715919][T10351] EXT4-fs (loop2): 1 orphan inode deleted [ 330.799244][T10389] tipc: Enabled bearer , priority 0 [ 330.910135][T10391] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2291'. [ 330.928099][T10393] loop3: detected capacity change from 0 to 512 [ 330.941870][T10393] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2292: bg 0: block 169: padding at end of block bitmap is not set [ 330.959704][T10351] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 330.966411][T10393] loop3: lost filesystem error report for type 5 error -117 [ 330.975024][T10393] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.2292: Failed to acquire dquot type 0 [ 330.982459][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 330.982493][ C1] EXT4-fs (loop3): initial error at time 2000000105: ext4_validate_block_bitmap:441 [ 330.982516][ C1] EXT4-fs (loop3): last error at time 2000000105: ext4_validate_block_bitmap:441 [ 331.030968][T10391] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2291'. [ 331.062192][T10393] loop3: lost filesystem error report for type 5 error -117 [ 331.072308][ T3296] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 331.072856][T10393] EXT4-fs (loop3): 1 truncate cleaned up [ 331.135173][T10393] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 331.170628][T10393] ext4 filesystem being mounted at /473/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 331.171345][T10401] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2293'. [ 331.693427][T10409] loop5: detected capacity change from 0 to 512 [ 332.193159][T10393] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.2292: Failed to acquire dquot type 0 [ 332.378667][T10409] EXT4-fs (loop5): 1 orphan inode deleted [ 332.392848][T10409] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 332.419368][T10409] ext4 filesystem being mounted at /91/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 332.835272][ T7982] EXT4-fs error (device loop5): ext4_release_dquot:7070: comm kworker/u8:26: Failed to release dquot type 1 [ 333.230879][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 333.856480][T10420] 9pnet_virtio: no channels available for device syz [ 334.066201][ T8396] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 335.045021][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 335.045063][ T28] audit: type=1400 audit(2000000110.026:1256): avc: denied { create } for pid=10426 comm="syz.3.2297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 335.401738][T10429] loop5: detected capacity change from 0 to 512 [ 336.163610][T10429] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 336.367441][T10429] ext4 filesystem being mounted at /92/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 336.392526][ T28] audit: type=1400 audit(2000000111.366:1257): avc: denied { setopt } for pid=10433 comm="syz.1.2301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 336.648006][ T28] audit: type=1400 audit(2000000111.436:1258): avc: denied { write } for pid=10433 comm="syz.1.2301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 337.186618][ T28] audit: type=1400 audit(2000000111.986:1259): avc: denied { write } for pid=10428 comm="syz.5.2299" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 337.208960][ T28] audit: type=1400 audit(2000000112.016:1260): avc: denied { ioctl } for pid=10428 comm="syz.5.2299" path="/92/file1/file1" dev="loop5" ino=15 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 338.440260][ T7983] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 338.460021][ T7983] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 575 with error 28 [ 338.473526][ T7983] EXT4-fs (loop5): This should not happen!! Data will be lost [ 338.473526][ T7983] [ 338.580332][ T7983] EXT4-fs (loop5): Total free blocks count 0 [ 338.586783][ T7983] EXT4-fs (loop5): Free/Dirty block details [ 338.592816][ T7983] EXT4-fs (loop5): free_blocks=65280 [ 338.598212][ T7983] EXT4-fs (loop5): dirty_blocks=575 [ 338.603719][ T7983] EXT4-fs (loop5): Block reservation details [ 338.608081][T10443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 338.609769][ T7983] EXT4-fs (loop5): i_reserved_data_blocks=575 [ 338.614010][ T8396] EXT4-fs warning (device loop5): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 338.629637][T10443] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 339.588350][ T8396] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.892667][T10451] loop3: detected capacity change from 0 to 512 [ 340.602557][ T28] audit: type=1400 audit(2000000115.316:1261): avc: denied { mount } for pid=10440 comm="syz.4.2306" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 340.633954][T10456] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2304'. [ 341.651612][T10454] loop5: detected capacity change from 0 to 512 [ 341.843390][T10454] EXT4-fs: Ignoring removed bh option [ 341.849614][T10454] EXT4-fs: Ignoring removed mblk_io_submit option [ 341.932011][T10451] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 341.933661][T10451] EXT4-fs: failed to create workqueue [ 341.952272][T10451] EXT4-fs (loop3): mount failed [ 342.483199][T10454] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 342.513236][T10465] loop3: detected capacity change from 0 to 512 [ 342.768893][T10454] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 342.770053][T10454] EXT4-fs: failed to create workqueue [ 342.834780][T10465] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 342.870078][T10465] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 342.892444][T10454] EXT4-fs (loop5): mount failed [ 342.934526][T10465] EXT4-fs (loop3): 1 truncate cleaned up [ 342.969110][T10465] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 343.423847][ T28] audit: type=1400 audit(2000000118.386:1262): avc: denied { setopt } for pid=10479 comm="syz.2.2313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 343.964170][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.057276][T10512] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10512 comm=syz.5.2316 [ 344.190083][ T28] audit: type=1400 audit(2000000119.166:1263): avc: denied { mounton } for pid=10514 comm="syz.3.2315" path="/proc/1234/task" dev="proc" ino=27096 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 344.213918][T10522] loop5: detected capacity change from 0 to 512 [ 344.268510][ T28] audit: type=1400 audit(2000000119.206:1264): avc: denied { write } for pid=10514 comm="syz.3.2315" name="dev" dev="proc" ino=4026532757 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 344.290009][T10522] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 344.317608][ T28] audit: type=1400 audit(2000000119.286:1265): avc: denied { create } for pid=10528 comm="syz.4.2319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 344.337700][ T28] audit: type=1400 audit(2000000119.286:1266): avc: denied { ioctl } for pid=10528 comm="syz.4.2319" path="socket:[27113]" dev="sockfs" ino=27113 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 344.374472][ T28] audit: type=1400 audit(2000000119.296:1267): avc: denied { getopt } for pid=10528 comm="syz.4.2319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 344.485529][T10522] EXT4-fs (loop5): 1 truncate cleaned up [ 344.542263][T10522] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 344.575717][ T28] audit: type=1400 audit(2000000119.556:1268): avc: denied { setattr } for pid=10521 comm="syz.5.2318" path="/96/bus" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 344.616122][ T28] audit: type=1400 audit(2000000119.576:1269): avc: denied { write } for pid=10521 comm="syz.5.2318" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 344.638874][ T28] audit: type=1400 audit(2000000119.586:1270): avc: denied { write } for pid=10521 comm="syz.5.2318" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 345.522376][ T8396] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.806627][T10585] loop3: detected capacity change from 0 to 128 [ 346.104065][T10590] hub 9-0:1.0: USB hub found [ 346.236313][T10590] hub 9-0:1.0: 8 ports detected [ 346.253252][ T28] kauditd_printk_skb: 238 callbacks suppressed [ 346.253271][ T28] audit: type=1400 audit(2000000121.198:1509): avc: denied { ioctl } for pid=10587 comm="syz.5.2324" path="socket:[27134]" dev="sockfs" ino=27134 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 346.288492][T10590] loop5: detected capacity change from 0 to 128 [ 346.295638][T10585] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 346.310185][T10590] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 346.324268][T10585] ext4 filesystem being mounted at /478/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 346.367887][T10590] ext4 filesystem being mounted at /97/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 346.467595][ T28] audit: type=1400 audit(2000000121.411:1510): avc: denied { write } for pid=10583 comm="syz.3.2325" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 346.579029][ T8396] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 346.667202][ T3303] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 346.757045][ T28] audit: type=1400 audit(2000000121.683:1511): avc: denied { bind } for pid=10615 comm="syz.4.2328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 349.160472][T10636] loop5: detected capacity change from 0 to 1024 [ 349.880106][T10636] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 350.351518][T10636] EXT4-fs warning (device loop5): ext4_multi_mount_protect:394: Unable to create kmmpd thread for loop5. [ 351.905724][T10669] xt_hashlimit: size too large, truncated to 1048576 [ 351.923665][ T28] audit: type=1400 audit(2000000127.189:1512): avc: denied { ioctl } for pid=10651 comm="syz.4.2334" path="socket:[27209]" dev="sockfs" ino=27209 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 353.544822][T10673] loop3: detected capacity change from 0 to 1024 [ 353.558088][T10677] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 353.680469][T10671] loop2: detected capacity change from 0 to 512 [ 353.688141][T10673] EXT4-fs: Ignoring removed orlov option [ 353.707017][T10677] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 353.749699][T10673] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 353.833258][T10671] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 353.984788][T10682] loop5: detected capacity change from 0 to 2048 [ 354.883735][T10671] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 355.103787][T10671] System zones: 1-12 [ 355.113898][T10671] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 355.282549][T10682] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 355.366728][ T28] audit: type=1400 audit(2000000132.213:1513): avc: denied { connect } for pid=10687 comm="syz.4.2341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 355.599160][T10671] EXT4-fs (loop2): 1 truncate cleaned up [ 355.624908][T10671] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 355.644922][ T28] audit: type=1400 audit(2000000132.433:1514): avc: denied { write } for pid=10687 comm="syz.4.2341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 356.180632][ T28] audit: type=1400 audit(2000000133.023:1515): avc: denied { setopt } for pid=10691 comm="syz.4.2342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 356.616285][ T3296] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.699818][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.727811][ T8396] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.759082][ T28] audit: type=1400 audit(2000000133.602:1516): avc: denied { read write } for pid=10704 comm="syz.2.2345" name="uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 356.812954][ T3918] hid-generic 0103:0004:0000.0003: unknown main item tag 0x0 [ 356.847404][ T3918] hid-generic 0103:0004:0000.0003: unknown main item tag 0x0 [ 356.856729][ T3918] hid-generic 0103:0004:0000.0003: unknown main item tag 0x0 [ 356.864479][ T28] audit: type=1400 audit(2000000133.602:1517): avc: denied { open } for pid=10704 comm="syz.2.2345" path="/dev/uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 356.888473][ T3918] hid-generic 0103:0004:0000.0003: unknown main item tag 0x0 [ 356.896148][ T3918] hid-generic 0103:0004:0000.0003: unknown main item tag 0x0 [ 356.903617][ T3918] hid-generic 0103:0004:0000.0003: unknown main item tag 0x0 [ 356.911120][ T3918] hid-generic 0103:0004:0000.0003: unknown main item tag 0x0 [ 356.918814][ T28] audit: type=1400 audit(2000000133.732:1518): avc: denied { read } for pid=10710 comm="syz.3.2347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 356.938462][ T3918] hid-generic 0103:0004:0000.0003: unknown main item tag 0x0 [ 356.945934][ T3918] hid-generic 0103:0004:0000.0003: unknown main item tag 0x0 [ 356.953432][ T3918] hid-generic 0103:0004:0000.0003: unknown main item tag 0x0 [ 356.966481][ T3918] hid-generic 0103:0004:0000.0003: hidraw0: HID v0.05 Device [syz0] on syz1 [ 357.248484][T10714] fido_id[10714]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 357.368259][T10720] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2349'. [ 357.409809][T10720] loop2: detected capacity change from 0 to 1024 [ 357.433138][ T28] audit: type=1400 audit(2000000134.196:1519): avc: denied { write } for pid=10719 comm="syz.2.2349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 357.478932][T10720] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 357.527788][T10720] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.2349: Invalid block bitmap block 0 in block_group 0 [ 357.558589][T10720] loop2: lost filesystem error report for type 5 error -117 [ 357.558822][T10720] Quota error (device loop2): write_blk: dquota write failed [ 357.573668][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 357.573689][ C0] EXT4-fs (loop2): initial error at time 2000000134: ext4_read_block_bitmap_nowait:483 [ 357.573717][ C0] EXT4-fs (loop2): last error at time 2000000134: ext4_read_block_bitmap_nowait:483 [ 357.682579][T10720] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 357.693415][T10720] EXT4-fs error (device loop2): ext4_acquire_dquot:7034: comm syz.2.2349: Failed to acquire dquot type 0 [ 357.704911][T10720] loop2: lost filesystem error report for type 5 error -117 [ 357.705182][T10720] EXT4-fs error (device loop2): ext4_free_blocks:6718: comm syz.2.2349: Freeing blocks not in datazone - block = 0, count = 4096 [ 357.737856][T10724] loop3: detected capacity change from 0 to 512 [ 357.742750][T10720] loop2: lost filesystem error report for type 5 error -117 [ 357.756348][T10720] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.2349: Invalid inode bitmap blk 0 in block_group 0 [ 357.764182][T10724] EXT4-fs: Ignoring removed oldalloc option [ 357.782821][ T7975] Quota error (device loop2): do_check_range: Getting block 0 out of range 1-7 [ 357.792039][ T7975] EXT4-fs error (device loop2): ext4_release_dquot:7070: comm kworker/u8:20: Failed to release dquot type 0 [ 357.799395][T10720] loop2: lost filesystem error report for type 5 error -117 [ 357.804072][ T7975] loop2: lost filesystem error report for type 5 error -117 [ 357.808458][T10720] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 357.815240][T10724] EXT4-fs (loop3): filesystem is read-only [ 357.829419][T10720] loop2: lost filesystem error report for type 5 error -117 [ 357.833532][T10724] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 357.852004][T10720] EXT4-fs (loop2): 1 orphan inode deleted [ 357.858847][T10720] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 357.876439][ T28] audit: type=1400 audit(2000000134.699:1520): avc: denied { create } for pid=10725 comm="syz.1.2351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 357.902498][T10724] EXT4-fs (loop3): filesystem is read-only [ 357.918613][T10724] EXT4-fs (loop3): orphan cleanup on readonly fs [ 357.933956][T10724] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2350: bg 0: block 64: padding at end of block bitmap is not set [ 357.964239][T10724] loop3: lost filesystem error report for type 5 error -117 [ 357.964562][T10724] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 357.972182][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 357.972204][ C0] EXT4-fs (loop3): initial error at time 2000000134: ext4_validate_block_bitmap:441 [ 357.972228][ C0] EXT4-fs (loop3): last error at time 2000000134: ext4_validate_block_bitmap:441 [ 358.050072][T10724] loop3: lost filesystem error report for type 5 error -117 [ 358.050402][T10724] EXT4-fs (loop3): 1 orphan inode deleted [ 358.076317][T10731] ================================================================== [ 358.084197][T10724] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 358.084442][T10731] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read [ 358.105345][T10731] [ 358.107706][T10731] write to 0xffff88810db0b3a0 of 8 bytes by task 10729 on cpu 0: [ 358.115443][T10731] shmem_file_splice_read+0x40e/0x5a0 [ 358.120862][T10731] splice_direct_to_actor+0x26e/0x670 [ 358.126268][T10731] do_splice_direct+0x119/0x1a0 [ 358.131152][T10731] do_sendfile+0x382/0x650 [ 358.135598][T10731] __x64_sys_sendfile64+0x105/0x150 [ 358.140822][T10731] x64_sys_call+0x2dc4/0x3020 [ 358.145526][T10731] do_syscall_64+0x12c/0x3b0 [ 358.150157][T10731] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.156168][T10731] [ 358.158512][T10731] write to 0xffff88810db0b3a0 of 8 bytes by task 10731 on cpu 1: [ 358.166248][T10731] shmem_file_splice_read+0x40e/0x5a0 [ 358.171660][T10731] splice_direct_to_actor+0x26e/0x670 [ 358.177077][T10731] do_splice_direct+0x119/0x1a0 [ 358.181957][T10731] do_sendfile+0x382/0x650 [ 358.186491][T10731] __x64_sys_sendfile64+0x105/0x150 [ 358.191708][T10731] x64_sys_call+0x2dc4/0x3020 [ 358.196413][T10731] do_syscall_64+0x12c/0x3b0 [ 358.201032][T10731] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.206943][T10731] [ 358.209279][T10731] value changed: 0x0000000000000b61 -> 0x0000000000000b63 [ 358.216404][T10731] [ 358.218735][T10731] Reported by Kernel Concurrency Sanitizer on: [ 358.224901][T10731] CPU: 1 UID: 0 PID: 10731 Comm: syz.1.2352 Not tainted syzkaller #0 PREEMPT(full) [ 358.234293][T10731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 358.244372][T10731] ================================================================== [ 358.510085][ T3296] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 358.572195][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.