last executing test programs: 13m33.009408455s ago: executing program 3 (id=1376): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote, 0x0, 0x0, 0x0, 0x3}, 0x20) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x20700, 0x2000000, {0x0, 0x0, 0x0, 0x0, 0x8203}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x67}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r5, 0x0, 0x17, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffa}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, 0x0, 0x44040880) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x884) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10) r9 = socket(0xa, 0x1, 0x0) getsockopt(r9, 0x1, 0x2f, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000004c0)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@bh}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000900)="$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") madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) 13m32.469208103s ago: executing program 3 (id=1381): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000001000000000000000000008500000075000000"], 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x100, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x2}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_pid(r3, &(0x7f0000000880), 0x12) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x7d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() r4 = getpid() r5 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r4, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r5, 0x2401, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) close(0x3) ioctl$TUNSETOFFLOAD(r6, 0x4004743d, 0x110e22fff6) syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = add_key$fscrypt_v1(0x0, &(0x7f0000000a40)={'fscrypt:', @desc4}, 0x0, 0x0, 0xffffffffffffffff) keyctl$describe(0x6, r7, &(0x7f0000001000)=""/61, 0x3d) r8 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$restrict_keyring(0x1d, r8, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000280)='batadv0\x00') perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x3}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) 13m32.030722727s ago: executing program 3 (id=1392): madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) 13m31.969165229s ago: executing program 3 (id=1393): r0 = syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$eJzs3M1rXOUaAPDnnEy+c5v0crn3tggGpCqK07QpFbpqXYsKunDZmExKyPTDJIIJXaR1ry5EXBSkf4Lg3m5cCS7qQutfUMQiRTdtFyNnPtKxk5nGdGaOSX8/eHPe97wn8zxPTmfOe2BOA3hqTWc/0ohDEXE2iZis708jYqjaG4nYrB13/+7l+awlUam8/VsSSUTcu3t5vvFaSX07Xh+MRMTN15L490etcVfXN5bnyuXSSn18dO38paOr6xuvLJ2fO1c6V7pwYvbVE7MnZ2e7WOvtS+998cwPbzx/9frHM29+fuC7JE7HRH2uuY5umY7prb9Js0JEzHU7WE4G6vU015kUckwIAICO0qY13H9jMgbi4eJtMr79MdfkAAAAgK6oDERUAAAAgH0ucf8PAAAA+1zjewD37l6eb7R8v5HQX3fORMRUrf7G8821mUJsVrcjMRgRY78n0fxYa1L7tSc2nUX6+vtS1qJHzyF3snklIv6/3flPqvVPVZ/ibq0/jYiZLsSffmS8l+o/3YX4edcPwNPpxpnahaz1+pdurX9im+tfYZtr127kff1rrP/ut6z/HtY/0Gb999YOYxx+8NLNdnPN6793P/l5IYufbZ+oqL/hzpWIw4Xt6k+26k/a1H92hzHG529fazeX1Z/V22j9rr9yPeJIdTXXWn9D0un/Jzq6uFQuzdR+bvP66yc7x28+/1nL4jfuBfohO/9jsbvzf2mHMab+9+uhdnOPrz/9ZSh5p9obqu/5cG5tbeVYxFDyeuv+451zaRzTeI2s/hef6/z+367+7DNhs/53yP71XKlvs/HVR2KOHzn+1e7r762s/oVdnv9Pdxjjy2+uvd9uLu/6AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANgb0oiYiCQtbvXTtFiMGI+I/8RYWr64uvby4sUPLixkcxFTMZguLpVLMxExWRsn2fhYtf9wfPyR8WxEHIyIzyZHq+Pi/MXyQt7FAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsGU8IiYiSYsRkUbEH5NpWizmnRUAAADQdVN5JwAAAAD0nPt/AAAA2P9a7v8LfxmN9DMXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9qWDz964lUTE5qnRassM1ecGc80M6LV0Z4eN9ToPoP8G8k4AyE2hqV+pVCo5pgL0mXt8IHnM/EjbmeGu5wIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAP9cLh27cSiJi89RotWWG6nODuWYG9FqadwJAbgY6TSaP3QHsYYW8EwBy4x4fqK3sH1RqWudH2v7m8BNHBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDvmKi2JC1GRFrtp2mxGPGviJiKwWRxqVyaiYgDEfHT5OBwNj6Wd9IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB03er6xvJcuVxa0dHR6WJnNPoWa7T+Zm5zzHD7qQ6dnD+YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADIxer6xvJcuVxaWc07EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACBvq+sby3Plcmmlh528awQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID9/BgAA///GyAmy") r1 = memfd_create(&(0x7f0000000040)='\x02A\xbb\xcc\x96\x0e\x00\x00\x00\x00\x00\x00', 0x6) mmap(&(0x7f0000008000/0x2000)=nil, 0x2000, 0x1, 0x12, r0, 0x0) r2 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x22) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1f, 0x15, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000fcffffff000000000900000018010000", @ANYRES32=r5, @ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000ff7f00007b8af8ff00000000bfa200000000000007020000f8fffff7b703000008000000b704000001000000850000008200000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r2, 0x0, 0x0) syz_clone3(&(0x7f0000000300)={0x281802000, 0x0, 0x0, 0x0, {0x38}, 0x0, 0x0, 0x0, 0x0, 0x0, {r7}}, 0x58) bind$inet6(r7, &(0x7f0000000100)={0xa, 0x4e23, 0x4, @mcast2, 0x1}, 0x1c) ftruncate(r1, 0x0) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) r8 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) r9 = openat(r8, &(0x7f0000000180)='./file0\x00', 0xc042, 0x8) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0100, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000200)={'vlan0\x00', 0x101}) ioctl$TUNSETDEBUG(r10, 0x400454c9, 0xffffffffffffffff) ioctl$TUNSETLINK(r10, 0x400454cd, 0x10e) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e22, 0x7, @loopback={0x0, 0xffffffffffffffe0}, 0xc}, 0x1c, 0x0, 0x0, 0x0, 0x20, 0x4855}, 0x40000d3) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setitimer(0x2, &(0x7f0000000000)={{}, {0x77359400}}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r11 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r11, 0x0, 0x19, 0x0, 0x0) sendfile(r9, r8, 0x0, 0xe3aa6e6) 13m31.776884825s ago: executing program 3 (id=1394): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@allocspi={0x110, 0x16, 0x401, 0xfffffffd, 0x1, {{{@in6=@private2={0xfc, 0x2, '\x00', 0x4}, @in=@remote, 0x204, 0x0, 0x0, 0x0, 0x0, 0x80, 0x20, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@dev={0xfe, 0x80, '\x00', 0x10}, 0x20000000, 0x33}, @in=@local, {0x4, 0xfffffffffffffffe, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {0x4, 0x0, 0x0, 0x7}, {0x0, 0x0, 0x3}, 0xf7fffffe, 0x0, 0x0, 0x1, 0x0, 0x90}, 0x8, 0xfffffffd}, [@migrate={0x4, 0x1b}, @coaddr={0x14, 0xe, @in6=@loopback}]}, 0x110}, 0x1, 0x0, 0x0, 0x804}, 0x4808) 13m30.840196794s ago: executing program 3 (id=1408): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="580000000206efffffffffffffff0000070000000c000780080012400000ffff0500010006000000050005000a00000005000400000000000900020073797a310000000011000300686173683a6970"], 0x58}, 0x1, 0x0, 0x0, 0x810}, 0x8000000) 13m30.769841297s ago: executing program 32 (id=1408): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="580000000206efffffffffffffff0000070000000c000780080012400000ffff0500010006000000050005000a00000005000400000000000900020073797a310000000011000300686173683a6970"], 0x58}, 0x1, 0x0, 0x0, 0x810}, 0x8000000) 8m23.388860639s ago: executing program 5 (id=2544): prlimit64(0x0, 0xa, &(0x7f0000000240)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x4) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r3 = socket$inet6(0xa, 0x5, 0x0) socket$kcm(0x2, 0x1, 0x84) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000800", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000b800"/28], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0xf, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900008000f1e93014908a67621534a31e173b15000055090100000000009500000000000000bf9100086f7cf50000000000b7020000000000008500000084000000b7000000000000ef9400000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r6 = io_uring_setup(0x64a, &(0x7f0000000040)={0x0, 0x8835c, 0xc000, 0x20000a, 0x33c}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x4}, {0xe, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x24040005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) setsockopt$sock_int(r3, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x2, 0x4) listen(r3, 0xfffefffa) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xb, 0x2000000000000216, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000002000000000000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600eae5ebce289d8bc1d7b1b703c5c77874d7b4c3d8810b900ca6c8ae7a01194a926b9ddde4e7deda8b74ba9ecdc2857eb21d62ea1759050f133f82e21e5fee306a6c80d7d0abd113befd44f17d24951607f28ddb2f18a5127bac7f08e84af70000000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000800000000000000bcc0ea4870b51ac620000000950000000019410e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x105}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0) r9 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r8) 8m18.793695945s ago: executing program 5 (id=2559): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000012c0), 0xb00, 0x0) ioctl$TIOCMBIC(r3, 0x5417, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x2, 0x4}}}]}, 0x3c}}, 0x4000010) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) ioctl$FITRIM(r4, 0x40e8662e, &(0x7f0000000080)={0xbe, 0xd000007}) sendmsg$can_raw(r4, &(0x7f00000001c0)={&(0x7f00000000c0)={0x1d, r2}, 0x10, &(0x7f0000000180)={&(0x7f0000000100)=@canfd={{0x0, 0x0, 0x1}, 0x11, 0x3, 0x0, 0x0, "8e42e51ea8d3deff6af4784252372e9b53bf58177c528496d794dba643375b6600521cb3a51df1d4ceed67a453827448d17a7de1357cf2d8b157e71715c3683f"}, 0x48}, 0x1, 0x0, 0x0, 0x20004010}, 0x80) mmap(&(0x7f0000ff4000/0x9000)=nil, 0x9000, 0xb635773f06ebbee7, 0x10010, 0xffffffffffffffff, 0x6e5ec000) 8m18.610693551s ago: executing program 5 (id=2561): perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x200, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {r1, 0x0, 0x0, 0x30, 0x0, @in={0x1b, 0x0, @loopback}, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x0, 0x0, 0x3fe}}}, 0x118) write$RDMA_USER_CM_CMD_QUERY(r0, 0x0, 0x0) 8m18.438309556s ago: executing program 5 (id=2564): syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./bus\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x376, &(0x7f0000000280)="$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") perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x5100, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x2, 0x4}, 0x102260, 0x10000, 0x4, 0x1, 0x8, 0x20005, 0xa48, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000300)={0x2}) epoll_pwait2(r1, &(0x7f0000000000)=[{}, {}], 0x2, 0x0, 0x0, 0x26) epoll_pwait(r1, &(0x7f00000002c0)=[{}], 0x1, 0xfffffffb, 0x0, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000100)={0xaee, 0x0, 0x20000081, 0x7a9, 0x4f, "0d418107009188b791e15bc7d2b31475f01d5d", 0x4, 0x100025}) r3 = syz_clone(0x600, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$getregset(0x4204, r3, 0x202, &(0x7f0000000080)={0x0}) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000002440)=0xd) setuid(0xee00) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages(r4, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r5, &(0x7f0000006140)=[{&(0x7f00000002c0)=@in={0x2, 0x4e24, @remote}, 0x10, &(0x7f00000007c0)=[{&(0x7f00000005c0)='_', 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="2000000000000000840000000200000002000a00ffff000000000040c82217037e2b88e041ab8dbb3f6aa439", @ANYRES32=0x0], 0x20, 0x800}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect(r6, &(0x7f0000000080)=@rc={0x1f, @any, 0xca}, 0x80) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000400)={0x800001f}) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000540)='./file0\x00', 0x40, &(0x7f0000000100)={[{@showassoc}, {@cruft}, {}], [{@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}]}, 0x1, 0x57e, &(0x7f0000000580)="$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") r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000000f80)={'gretap0\x00', &(0x7f0000000f00)={'sit0\x00', 0x0, 0x8, 0x7800, 0xfffff9bd, 0x7eaa, {{0xc, 0x4, 0x0, 0x6, 0x30, 0x65, 0x0, 0x5, 0x4, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x21}, {[@rr={0x7, 0x13, 0x90, [@broadcast, @dev={0xac, 0x14, 0x14, 0x22}, @private=0xa010100, @remote]}, @generic={0x82, 0x6, "880eedad"}]}}}}}) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'dummy0\x00'}) r9 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r10, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x10, 0x3, 0x1, 0x2, 0x400, 0x85b8}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x7, 0xad, 0x0, 0x0, 0x200237f, 0x10000}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840) 8m17.885059503s ago: executing program 5 (id=2569): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r4) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="0100000000000000000004000000080002"], 0x1c}}, 0x200000000000000) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x54, 0x10, 0xffffff1f, 0x70bd26, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1605, 0xf74}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_REMOTE={0x8, 0x7, @multicast1}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e23}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x54}}, 0x4000) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x0, &(0x7f0000000880)={[{@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@barrier_val={'barrier', 0x3d, 0x100}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@errors_continue}, {@bh}, {@resuid}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x0) lseek(r6, 0x0, 0x4) 8m17.176393706s ago: executing program 5 (id=2575): write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x80c8d0, &(0x7f0000000140)=ANY=[], 0x9, 0x34f, &(0x7f00000004c0)="$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") creat(&(0x7f0000000380)='./bus\x00', 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000680)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000840)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0xa, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780800d1cbf7966d61f53dc17769048b0000fd0cfffffffffffffffb000000000000000002000000000000000000000000000080000000000100", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) 8m17.105860018s ago: executing program 33 (id=2575): write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x80c8d0, &(0x7f0000000140)=ANY=[], 0x9, 0x34f, &(0x7f00000004c0)="$eJzs3M1vG0UYx/FfjO04qZr1AYE4oD4SF7isknDigrBQKyEiUYUa8SIhts0GrCx25LWCjBBpT1w4IP4IDlWPvVWC/gO5cOOAuHDLBYkDPSAWed+8bpzEdes2L9+PVO00M8/ubGazemalmf0Pf/hyazN0N72eSjXTnCQ9kOoqKTOXHktxuaq6hm7qtQt///by+x99/G5jbe3yutmVxrXXV81s6dLPX32zkDa7N6+9+qf7f63+uffC3kv7/137ohVaK7R2p2eeXe/80fOuB75ttMIt1+xq4Huhb6126HeT+mhXCnzbDDrb233z2gsXF7e7fhia1+7blt+3Xsd63b55n3uttrmuaxcXdbz5CdqcZc3b6+teI/3PG889WvCNWfQIjyca80h3uw1vMLYLB2qat59OrwAAwEmS5v95tl8apPTH5P9Fef5fTvL/3yUV8v879fu9Cx/cXUrz/3vVQf4vFfL/z/JT1WQbpTz/r0ka5v+dZH6Q5/8bTyb/P5gRnW7fjw6OoigvVse1H8n/cUYN8v/F9O83duuTO8txgfwfAAAAAAAAAAAAAAAAAAAAAIDT4EEUOVEUOckxWwEeOfPxghwpSusPCX/EJeM4aUbHf/hvwvHHKTfcuKO8JAXf7TR3mskxbXBfUiBfy3L0b/w8pAbl6k0rrqL7JdhN43d3msmrobGpVhy/Ikf1h+Oj6Mo7a5dXzLJdCwrxFS0W41fl6Hlpfkz8qiXy61cGx6pefaUQ78rRrzfUUaCNdGVcFv/titnb763ZaP8X4nYAAAAAAJwFruXq2fy3uIWg6x6sT+bHSX0yvy5r/PeBZH69/PD8PI4vq1R+VncNAAAAAMD5Eva/3vKCwO/OqHBL0lFtyprN1YffMCaNyjbIPaTNnOaefFdrkuJCdvHpzjPo2xRXr4ytqkz0GytN1dVL1ckHpXpoVfbZ6LBwXZ1mLCInHYvHGNMXf/zpn6PbJF/GpElO+Obd2jF3esQjUT6qTfW4O62MvCRKs30HAQAAAHg6hkl/9pO3pMqz7RMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOfNrPf/K+4sAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJx3/wcAAP//QOD4ig==") creat(&(0x7f0000000380)='./bus\x00', 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000680)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000840)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0xa, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780800d1cbf7966d61f53dc17769048b0000fd0cfffffffffffffffb000000000000000002000000000000000000000000000080000000000100", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) 8m17.090484039s ago: executing program 1 (id=2577): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000000)={0x81, 0x51, 0x0, 0xe05, 0x1fffd, 0x2028ef}) (async) gettid() (async, rerun: 64) timer_create(0x0, 0x0, 0x0) (rerun: 64) timer_settime(0x0, 0x0, 0x0, 0x0) (async) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='fd', 0x0, r1) (async) write$tun(r1, &(0x7f0000000380)=ANY=[], 0xfdef) (async) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x10) (async, rerun: 64) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) (rerun: 64) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c0000b0c31831b35a43ebe261574b00200025a729bd7000fddbee250a0000cdff0000010200010008000600"], 0x2c}, 0x1, 0x0, 0x0, 0x20008081}, 0x0) fsmount(r2, 0x0, 0x0) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r4, r4) (async, rerun: 64) setpgid(0x0, r4) (async, rerun: 64) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4810, &(0x7f00000000c0)={[{@nobh}]}, 0x1, 0x507, &(0x7f0000000a00)="$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") (async) socket$nl_netfilter(0x10, 0x3, 0xc) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r5 = creat(&(0x7f0000000280)='./file1\x00', 0x4) ioctl$IOC_PR_PREEMPT_ABORT(r5, 0x401870cc, 0x0) (async, rerun: 64) r6 = shmget$private(0x0, 0x400000, 0x100, &(0x7f0000c00000/0x400000)=nil) (rerun: 64) shmat(r6, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r6, &(0x7f0000ffc000/0x2000)=nil, 0x5000) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) (async, rerun: 32) timer_settime(0x0, 0x1, 0x0, 0x0) (async, rerun: 32) r7 = syz_clone(0x81248080, 0x0, 0x4c, 0x0, 0x0, 0x0) ptrace(0x10, r7) 8m16.970382772s ago: executing program 1 (id=2579): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=@newtaction={0x64, 0x30, 0x9e54f29ff072a93b, 0x0, 0x25dfdbfc, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x60, 0x0, 0x0, 0x400}, 0x2d}}]}, {0x4}, {0xc, 0x7, {0xffffffff}}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 8m16.840945657s ago: executing program 1 (id=2580): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = add_key$fscrypt_v1(&(0x7f0000000a00), 0x0, &(0x7f0000000a80)={0x0, "301971b48944577edae8c7bb32ad7ca1829e0922e71e334cf9101b3de25d35a38d11e1bf4f564e4379ac8b8e76076a335e6307bf7572aa1f72d48d2385170c0f", 0x18}, 0x48, 0xffffffffffffffff) keyctl$describe(0x6, r1, 0x0, 0x0) r2 = add_key$keyring(&(0x7f0000000100), 0x0, 0x0, 0x0, 0xfffffffffffffffc) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x8004587d, 0x0) stat(&(0x7f0000000100)='./file1\x00', &(0x7f0000000240)) syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="e706f2ff011f391e7dd7a2d786dd609907a600302c03cb697a653e336f000000500000000000ff02000000000000000000000000000102009078"], 0x0) syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="69e1629b6174391e7dd7a2d786dd60b6000000302c03cb697a653e336f000000500000000000ff02000000000000000000000000000102000003"], 0x0) keyctl$restrict_keyring(0x1d, r2, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000280)='batadv0\x00') perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x3}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) socket(0xc, 0x4, 0x1) capset(0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0xfffffffb}) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5603, 0x10000000000004) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket(0x2b, 0x80801, 0x1) listen(r4, 0x10) recvfrom$unix(r4, 0x0, 0x0, 0x10000, 0x0, 0xfe9a) r5 = socket(0x10, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r5) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x4, 0xfb, 0x53, 0x3, 0x7a, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2={0xff, 0x5}, 0x8, 0x10, 0xe3e1, 0xcfe}}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000002000)=""/4082) 8m16.618388744s ago: executing program 1 (id=2581): syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./bus\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x376, &(0x7f0000000280)="$eJzs3c9rK1UUwPGTNEmTPF4nC1EUpBffRjdDG12LQd4DIeCj70V8TxCm7URDxqTMhGpEbLtyK+5dCS5KdxZcFLT/QDfudCOCu24EF3ahjsyvZJJM0hhTo+33AyU3994zc+/MLZxJmMz5m5++16w7et3oSDqvJCUiciFSkrREUuFr2i/nJG5fXrj16/fPPnhUywcV6l7l4YtlpdTK6jfvf1QIu50sy1np7fNfyj+fPXn29PmfD99tOKrhqFa7owy12f6xY2xaptpuOE1dqfuWaTimarQc0w7avwq3Y7V3drrKaG3fLu7YpuMoo9VVTbOrOm3VsbvKeMdotJSu6+p2USbJTmy9KWqHGxtGZcbgrTkPBlfEtl1jSUQKIy21w4UMCAAALNRw/p/2UvpZ8v/HslKt3t1QXud+/n/03Gnn1hvHK2H+f5JLyv9f+iHY1kD+711O9PP/dnB9UL88//9cpsr/A6MZ0c0yc/5fuoLBYDaruZGq1MA7264YxfD/13fw1tGaXyD/BwAAAAAAAAAAAAAAAAAAAADg/+DCdTXXdbXoNfrr30IQvse1lB9z/pe9Nu/su5z/6+zBo8eS92/c886x9clubbcWvIYdTkXEEvMPN+WthRhvbUR3HilPSb619sL4vd3akt9SqUvDi5d10aQkMhjvuvdeq95dV4EwvnebUjEeXxZNnojHf+2vTi++PBgf7j8nz9+JxeuiyXdb0hZLtv3I/v4/Xlfq1derQ/EFv5+I/PSvnxQAAAAAAOZMVz2J1++6Pq49+JWRSt3/mMiUNdHk9+Tr+7XE6/OM9kxm0bMHAAAAAOBmcLofNg1Jm7ZfsKykQkEGa6Jv/RM7e4VC8naSC5mBmqyIJHbODdVkJ215KTbDKYdh5CR4gslUnScUvoiO6t+Jig6pN/BeU/6y4zyxEM3fr0llZp2OZaX2xV8A+/GmtEwRnhke/KpXoRI73xm7nYNwIr2a6GOj3JjjLPeHa5bDiORdZEdq3NRsC+Cpz7787Z+un37h5eNwBXxweecDy3T3xk1wUiGfeFh4PA4AAABwDfWT/qjmlXhz/EEi8Yfl8M09AAAAAAAAAAAAAAAAAAAAAAAAAAAAAABzNJcfKvMLrjauadFzBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP4r/goAAP//Di7sEA==") perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x5100, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x2, 0x4}, 0x102260, 0x10000, 0x4, 0x1, 0x8, 0x20005, 0xa48, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000300)={0x2}) epoll_pwait2(r1, &(0x7f0000000000)=[{}, {}], 0x2, 0x0, 0x0, 0x26) epoll_pwait(r1, &(0x7f00000002c0)=[{}], 0x1, 0xfffffffb, 0x0, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000100)={0xaee, 0x0, 0x20000081, 0x7a9, 0x4f, "0d418107009188b791e15bc7d2b31475f01d5d", 0x4, 0x100025}) r3 = syz_clone(0x600, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$getregset(0x4204, r3, 0x202, &(0x7f0000000080)={0x0}) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000002440)=0xd) setuid(0xee00) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages(r4, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r5, &(0x7f0000006140)=[{&(0x7f00000002c0)=@in={0x2, 0x4e24, @remote}, 0x10, &(0x7f00000007c0)=[{&(0x7f00000005c0)='_', 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="2000000000000000840000000200000002000a00ffff000000000040c82217037e2b88e041ab8dbb3f6aa439", @ANYRES32=0x0], 0x20, 0x800}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect(r6, &(0x7f0000000080)=@rc={0x1f, @any, 0xca}, 0x80) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000400)={0x800001f}) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000540)='./file0\x00', 0x40, &(0x7f0000000100)={[{@showassoc}, {@cruft}, {}], [{@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}]}, 0x1, 0x57e, &(0x7f0000000580)="$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") r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000000f80)={'gretap0\x00', &(0x7f0000000f00)={'sit0\x00', 0x0, 0x8, 0x7800, 0xfffff9bd, 0x7eaa, {{0xc, 0x4, 0x0, 0x6, 0x30, 0x65, 0x0, 0x5, 0x4, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x21}, {[@rr={0x7, 0x13, 0x90, [@broadcast, @dev={0xac, 0x14, 0x14, 0x22}, @private=0xa010100, @remote]}, @generic={0x82, 0x6, "880eedad"}]}}}}}) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'dummy0\x00'}) r9 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r10, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x10, 0x3, 0x1, 0x2, 0x400, 0x85b8}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x7, 0xad, 0x0, 0x0, 0x200237f, 0x10000}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840) 8m16.222196336s ago: executing program 1 (id=2582): socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6(0xa, 0x80002, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000cea000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000257000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4004005) io_uring_setup(0x7f9, &(0x7f0000000040)={0x0, 0xc8df, 0xfc00, 0x1, 0x20002f9}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x44c000, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000000c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001640)=ANY=[@ANYBLOB='D\n\x00\x00', @ANYRES16=r2, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="240003"], 0xa44}, 0x1, 0x0, 0x0, 0x4000}, 0x40) semget$private(0x0, 0x4, 0x1a) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 8m15.841084799s ago: executing program 1 (id=2583): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x5, [@float={0x3, 0x0, 0x0, 0x10, 0x8}, @decl_tag={0x3, 0x0, 0x0, 0x11, 0x3}, @struct={0x0, 0x0, 0x0, 0x4, 0x0, 0x4}]}, {0x0, [0x61, 0x61, 0x2e]}}, 0x0, 0x45, 0x0, 0x0, 0x0, 0x0, @void, @value=0x8000000}, 0x28) 8m15.814531849s ago: executing program 34 (id=2583): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x5, [@float={0x3, 0x0, 0x0, 0x10, 0x8}, @decl_tag={0x3, 0x0, 0x0, 0x11, 0x3}, @struct={0x0, 0x0, 0x0, 0x4, 0x0, 0x4}]}, {0x0, [0x61, 0x61, 0x2e]}}, 0x0, 0x45, 0x0, 0x0, 0x0, 0x0, @void, @value=0x8000000}, 0x28) 13.318531707s ago: executing program 6 (id=5218): ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, &(0x7f0000000000)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdf\x85\xaac{\x8c\x8ffp`-\xcd\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\t\xed\x13q2\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\xcb\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca\x04\x00\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x03\x00\x00\x00\x00\x00\x00\x00\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\xf3\xcf\x17\xf5\x86\xae\xa5\xea?\xc5E\x00\xb2e\xa8\xf1<\xb2\xc82\xbf=o\x00\x00\x00\x00E\x00\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x922A\x95\x8e\xbc\xc80xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x64, 0x3, 0x218, 0x6e, 0xffffffad, 0x190, 0x190, 0x190, 0x268, 0x268, 0x268, 0x268, 0x268, 0x3, 0x0, {[{{@ip={@remote, @local={0xac, 0x14, 0xd}, 0x600, 0x0, 'caif0\x00', 'ip6tnl0\x00'}, 0x0, 0x70, 0xd0, 0xffffffc5}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'team0\x00', 'team0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x278) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xc, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x480}, 0x94) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="2c6f624a5f726f6c653d80006173682ca8ea26de004d22080834ec21408c1cbd571f6191519244adb50f367988fb2727cc32238fac4fbdc332b1719e340000000004f23246a8d5ec9c21dd657ad6d91f895438297d5da5a51f2163a3aefc9a13608114683a6be3371b75c707284241970a8159ba2bec7414c90ddbdd8218b3ce593b992196b6a3cd4bc2bb6754b654ba0fa3821193cdf866d2630a60f040d612f358308919f24bccb430ad754832a2402e3b7240e7eec9ad32c333f3dca7ab50db1f0415a70ece849f03e8441be2c1c54491c7428bbfdcea758eb7de27821cbc79a45c11b52ff4b704fefa01987a8fa8be2756414f8d10f022600574c68d130d46301ff52bbd08cf61190205"], 0x25, 0x359, &(0x7f0000000bc0)="$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") 11.95884691s ago: executing program 6 (id=5221): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000380)='./file0\x00', 0x22000011, &(0x7f0000000000)={[{@commit}, {@noblock_validity}, {@user_xattr}]}, 0x86, 0x48e, &(0x7f0000000400)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) 11.708455518s ago: executing program 6 (id=5222): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000d00)=@mangle={'mangle\x00', 0x44, 0x6, 0xc80, 0x0, 0x138, 0x9b0, 0x98, 0x138, 0xbe8, 0xbe8, 0xbe8, 0xbe8, 0xbe8, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x11000000, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x11, 0x0, @local}}}, {{@uncond, 0x0, 0x850, 0x878, 0x0, {}, [@common=@unspec=@u32={{0x7e0}, {[{[{0x10, 0x3}, {0xffffffff, 0x1}, {0x1, 0x3}, {0x7, 0x2}, {0x6, 0x2}, {0x6, 0x2}, {0x1, 0x3}, {0x7, 0x2}, {0x6, 0x2}, {0x9, 0x3}, {0x9, 0x1}], [{0x6, 0x80000001}, {0xffffffc7, 0x4}, {0x7, 0x2}, {0x8, 0xffff}, {0x7, 0x81}, {0x3, 0x3}, {0x5}, {0x7, 0x3}, {0x7, 0x2}, {0x5, 0xfff}, {0x800, 0x1}], 0x9, 0x3}, {[{0x19008000}, {0x26bb, 0x2}, {0x7b3, 0x3}, {0x1}, {0xe, 0x2}, {}, {0x9, 0x2}, {0x10000, 0x1}, {0x0, 0x2}, {0x2fab, 0x1}, {0x597, 0x1}], [{0x7, 0x1}, {0x1, 0x5}, {0x7, 0x401}, {0x8, 0x9}, {0x8, 0x8}, {0x0, 0x4}, {0xfff, 0x4}, {0xd, 0x7ff}, {0x2, 0x6}, {0x3d, 0x5}, {0x942f}], 0x8, 0xa}, {[{0x5}, {0x4, 0x3}, {0x6, 0x2}, {0x0, 0x3}, {0x4, 0x3}, {0x7}, {0x4, 0x2}, {0x7, 0x2}, {0xffff, 0x1}, {0x4, 0x1}, {0xfffffff7, 0x2}], [{0xe547, 0x10000}, {0x4, 0xf78}, {0x81, 0x1c10}, {0x3}, {0x8000200, 0x5}, {0x4, 0x9}, {0x80000001, 0xffff}, {0xaf3d, 0x12}, {0x3c, 0xc}, {0x3e, 0x9}, {0x3, 0x4}], 0x0, 0x3}, {[{0x6, 0x2}, {0x5, 0x1}, {0x5}, {0x1, 0x1}, {0xdeca, 0x1}, {0xfd}, {0x401, 0x3}, {0x1, 0x2}, {0x0, 0x2}, {0x8, 0x2}, {0x81}], [{0x1, 0xfd0d}, {0x9, 0x4}, {0x80000001}, {0x4, 0x400}, {0x9, 0x3}, {0xa, 0xfffffff0}, {0x9, 0x4}, {0x4, 0x2}, {0x10, 0x59d}, {0x9, 0x1ff}, {0x4}], 0x8, 0xb}, {[{0xffffff11, 0x2}, {0x6, 0x2}, {0x902, 0x1}, {0xffffff00}, {0x9}, {0x1, 0x2}, {0xffff, 0x1}, {0x9, 0x3}, {0x4, 0x2}, {0x70c8}, {0x7, 0x3}], [{0x3b8a6dc3, 0x9}, {0x9, 0x2}, {0x8, 0x2}, {0xf, 0x3}, {0x5, 0xffffffff}, {0x1ff, 0xff}, {0x3, 0x96e}, {0xffffffff, 0x400}, {0xffffffff}, {0x3, 0x935}, {0x5, 0x7}], 0xb, 0x9}, {[{0x20c, 0x2}, {0x72, 0x1}, {0x2, 0x2}, {0xfffffff3, 0x1}, {0x7, 0x3}, {0x8, 0x1}, {0x5}, {0xffffbc3b, 0x1}, {0x7fffffff, 0x3}, {0x42, 0x2}, {0x8, 0x1}], [{0xe43}, {0xb, 0x8000}, {0x2, 0x5}, {0x3, 0xe9c0}, {0x5, 0x7f}, {0x9, 0x3}, {0x6, 0x40}, {0x11f, 0xffffffe9}, {0xc35a, 0xd16}, {0x6, 0x4}, {0x9, 0x18a}], 0x8, 0x3}, {[{0x7, 0x3}, {}, {0x9}, {0x0, 0x3}, {0x6, 0x2}, {0x6, 0x2}, {0x401, 0x2}, {0x6, 0x3}, {0x9, 0x2}, {0x7c42, 0x3}, {0x40000000, 0x2}], [{0xdff, 0x4e}, {0x3, 0x7}, {0x1000, 0x1}, {0xfffffff8, 0x8001}, {0x9, 0xb34}, {0xfffffffa, 0xa}, {0xae9c, 0x7}, {0xe, 0x8}, {0x8, 0x7}, {0x6, 0x3}, {0x9, 0x92b}], 0xc, 0x7}, {[{0xfff}, {0x1, 0x2}, {0x2, 0x2}, {0xa640}, {0x0, 0x2}, {0x9}, {0x4, 0x1}, {0x0, 0x3}, {0x80000001, 0x3}, {0x0, 0x1}, {0x8}], [{0x1, 0x73}, {0x10000, 0x9}, {0xc, 0x3}, {0x8, 0xffffffff}, {0x7, 0x5}, {0x86, 0xf}, {0x3, 0x2fc3}, {0xf65, 0xa2f}, {0x15064f6, 0xede}, {0x8a2}, {0x2, 0x6}], 0x7}, {[{0x80000001}, {0x5, 0x2}, {0x687, 0x2}, {0x20000, 0x1}, {0xab50, 0x2}, {0x0, 0x3}, {0x7}, {}, {0x5, 0x1}, {0x5, 0x2}, {0x7}], [{0x64d, 0x3}, {0x9, 0x7}, {0x10001, 0x2}, {0x1, 0x6}, {0x5, 0x9}, {0x0, 0xcba}, {0x4, 0x4}, {0x2, 0x4}, {0x2ca6, 0x9}, {0x80000000, 0xc9}, {0x6, 0x7}], 0x9, 0x3}, {[{0x9, 0x1}, {0xe35, 0x1}, {0xffffffab, 0x1}, {0x401, 0x3}, {0x4, 0x2}, {0xa}, {0xfffffeff, 0x3}, {0xc9, 0x2}, {0x6, 0x1}, {0x8, 0x1}, {0x3, 0x1}], [{0xb6f2, 0x80000000}, {0x0, 0x9}, {0x65, 0x4}, {0x3, 0x982}, {0x5, 0x7f}, {0x7, 0x9}, {0x6, 0x4}, {0x3ff, 0x4}, {0x1, 0x7ff}, {0x7, 0xffff}, {0x3, 0x1}], 0xe, 0x1}, {[{0x6cd8867f, 0x1}, {0xb42}, {0x7fff}, {0x4}, {0x65b, 0x1}, {0x61, 0x3}, {0x78a8}, {0x4, 0x3}, {0x8001, 0x2}, {0x3, 0x2}, {0x5, 0x3}], [{0x4, 0xff6}, {0x0, 0x3}, {0x4, 0xe8aa}, {0x7, 0x4}, {0x1, 0x2}, {0x5, 0x3}, {0xfffffdfc, 0x3}, {0x15c, 0x80000000}, {0x9, 0x3}, {0x91, 0x80000001}, {0xfffffff6, 0xbd}], 0x0, 0x5}], 0x9, 0x1}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x11, 0x2, 0x3}}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00', {}, {}, 0x89, 0x3}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xce0) 11.475867766s ago: executing program 6 (id=5223): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x540, 0x2b8, 0x1b8, 0x388, 0x0, 0xd0, 0x470, 0x470, 0x470, 0x470, 0x470, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x8000, 0x3}}}, {{@ipv6={@mcast1, @local, [0x70040000], [], 'macvtap0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [0x0, 0xff], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@unspec=@connmark={{0x30}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0xd, 0xd, 0x3}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a0) 7.933627428s ago: executing program 4 (id=5240): setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) ptrace(0x10, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) syz_usbip_server_init(0x3) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x27, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2, {0xf00a}}, './file0\x00'}) sendto$packet(r0, &(0x7f00000001c0)="11eb03", 0x3, 0x2404c081, &(0x7f0000000200)={0x11, 0x88a8, 0x0, 0x1, 0x4}, 0x14) mincore(&(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f00000000c0)=""/216) 6.148217165s ago: executing program 4 (id=5247): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x1efb0, 0x1002, 0x20da, 0x0, 0xa, 0x20005, 0x8a6, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x6a) close(r0) r1 = socket$tipc(0x1e, 0x5, 0x0) mount$9p_fd(0x8001000000000000, &(0x7f0000000040)='./file0\x00', &(0x7f00000002c0), 0x200480, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 4.276202064s ago: executing program 4 (id=5251): r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0xb) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, 0x0, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000002000)={0x0, 0x0, &(0x7f0000001fc0)={&(0x7f0000001e40)=ANY=[@ANYBLOB="100000"], 0x10}, 0x1, 0x0, 0x0, 0x10}, 0x24040000) getsockname$unix(0xffffffffffffffff, 0x0, &(0x7f0000000140)) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010000000000070000000000000a3c000000120a090000000000f50000000200000009000200200000010000000008000440000000000900010073797a30000000000800034000000001"], 0x64}}, 0x0) ppoll(&(0x7f00000000c0)=[{r0, 0x844a}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) openat$null(0xffffffffffffff9c, 0x0, 0x188202, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x2300000000000000, &(0x7f00000002c0)=[{0x0}], 0x1) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000004c0)={[{@noload}, {@stripe={'stripe', 0x3d, 0xdc}}, {@data_err_abort}, {@noload}, {@data_err_ignore}, {@auto_da_alloc}], [{@smackfsroot={'smackfsroot', 0x3d, 'stripe'}}, {@obj_user={'obj_user', 0x3d, 'GPL\x00'}}]}, 0xff, 0x451, &(0x7f0000000940)="$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") mq_open(&(0x7f0000000a00)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!T\xeeux\x00\xbf@\xf4\x1c\xbce\xca\x97\xd5pkv\x88L\xe8$\xef\xfeI\xdaW1\xfcg\xa1\xdb$,0y$\xcd{zl.\xae\x805\xa8\xd6\x85\x15\xd2\x0e~\xcc\x90\x97\xe8h\v\x1a9X\a\xca{\x11#\x95m{U\xe5-\xabRw\xcafy\xe6\aNhX4Ll[\x14\x150x0}) syz_open_dev$tty1(0xc, 0x4, 0x1) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6c, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x5, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) socket$nl_route(0x10, 0x3, 0x0) pread64(0xffffffffffffffff, &(0x7f0000001880)=""/102363, 0x18fdb, 0x673) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x64, 0x6, 0x0, 0x0, 0x0, 0xb, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x3}, 0xd, 0x0, 0x11000, 0x4, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x8) r6 = socket(0x10, 0x80002, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000009c0)=@newsa={0x184, 0x10, 0x713, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@local}, {@in6=@private1, 0x4d5, 0x33}, @in=@multicast1, {0x3, 0xfffffffffffffffd, 0x10}, {}, {0x0, 0x22}, 0x70bd27, 0x0, 0x2}, [@algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00'}}}, @algo_comp={0x48, 0x3, {{'lzjh\x00'}}}]}, 0x184}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r5, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r6, @ANYRES32=r6], 0x44}}, 0x2000800) 2.786327931s ago: executing program 2 (id=5256): ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={'\x00', 0x3, 0x7, 0x1, 0x6, 0x406e, 0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) creat(0x0, 0xf4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x6da7, 0x400000002}, 0x6d82, 0x0, 0x800000, 0x0, 0x3, 0x2, 0x39, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$9p_unix(0x0, &(0x7f0000003600)='.\x00', 0x0, 0x2002010, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000060000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 2.773922842s ago: executing program 4 (id=5257): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0xcf, 0x41404, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x2}, 0x40, 0xfffffffffffffffe, 0x10000, 0x3, 0x6, 0x80004001, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) msgget(0x2, 0x624) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x6, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x11e210, 0x10004, 0x20da, 0x6, 0xd, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x5, 0x81, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x5, 0x2, @perf_config_ext={0x8, 0x8}, 0x100882, 0x7fe, 0x6, 0x7, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x6, 0x830b}, 0x8100, 0x2, 0xfffffffe, 0x2, 0x9, 0x0, 0xc000, 0x0, 0x0, 0x0, 0x800000100000000}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) fsopen(&(0x7f00000001c0)='binder\x00', 0x0) getpgid(0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x48085) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0xa82, 0x0) write$cgroup_int(r3, &(0x7f0000000000)=0x922, 0x12) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000ec0)={'wpan0\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r5) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002ebd7000fddbdf252000000008000300", @ANYRES32=r6, @ANYBLOB="3c002d80080003000000000008000200030000000500040001000000050001"], 0x58}, 0x1, 0x0, 0x0, 0x4000004}, 0x20004000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0xa, 0x2, 0x0) socket(0x2, 0x80805, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_EDITDEST(r8, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'ovf\x00', 0x0, 0x60000000, 0xc}, {@rand_addr=0x64010102, 0x4e23, 0x2000, 0x8, 0x48001}}, 0x44) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0, {0x8, 0xd993}}, './file0\x00'}) mknodat$loop(r9, &(0x7f0000000300)='./file0\x00', 0xc000, 0x1) sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYRES64=0x0, @ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x811}, 0x4000080) 2.336791236s ago: executing program 7 (id=5259): setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) ptrace(0x10, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) syz_usbip_server_init(0x3) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x27, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2, {0xf00a}}, './file0\x00'}) sendto$packet(r0, &(0x7f00000001c0)="11eb03", 0x3, 0x2404c081, &(0x7f0000000200)={0x11, 0x88a8, 0x0, 0x1, 0x4}, 0x14) mincore(&(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f00000000c0)=""/216) 2.060507094s ago: executing program 4 (id=5260): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0xf9, 0x1, 0x0, 0x0, 0x0, 0x7fffffffd, 0x1000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x2, @perf_bp={0x0, 0xa}, 0x800, 0x400, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r1, &(0x7f0000000300)=ANY=[@ANYRESHEX], 0x10) write$9p(r1, &(0x7f0000000540)="eb", 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x174}, 0x1, 0x0, 0x0, 0x404c850}, 0x0) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2022, 0x36, 0x100, 0x5, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = fsopen(&(0x7f0000000300)='tracefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x300, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="9c010000100001002cbc700000000000ff020000000000000000000000000001200100000000000000000000000000000000ecdf000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe80000000000000000000000000000f000000003200000000000000000000000000000000000000feffffffffffffff0100000000000000030000000000000000000000000000000000000000000000fcffffffffffffff04000000000000000900000000000000ffffffffffffff7f000840000000000009000000000000009202000000000000001087ac000000000000000000000000000000000a0004002c00000000000000600002006362632863616d656c6c696129"], 0x19c}}, 0x44050) 1.934520048s ago: executing program 0 (id=5261): socket$inet(0x2, 0xa, 0x262) r0 = socket(0x200000000000011, 0x2, 0xd) r1 = getpgrp(0x0) r2 = syz_pidfd_open(r1, 0x0) pidfd_send_signal(r2, 0x0, &(0x7f0000000140)={0x0, 0x0, 0xd2000000}, 0x4) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r3, 0x0) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_emit_ethernet(0xfe, &(0x7f00000000c0)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @void, {@ipv4={0x800, @icmp={{0x37, 0x4, 0x0, 0x3f, 0xf0, 0x64, 0x0, 0x1, 0x1, 0x0, @local, @multicast1, {[@timestamp_prespec={0x44, 0x24, 0x9f, 0x3, 0x3, [{@empty, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@dev={0xac, 0x14, 0x14, 0x27}, 0x9}, {@multicast2, 0xfc6b}]}, @ssrr={0x89, 0x1b, 0xad, [@rand_addr=0x64010101, @remote, @local, @broadcast, @broadcast, @rand_addr=0x64010101]}, @end, @cipso={0x86, 0x61, 0x3, [{0x6, 0x12, "546247d9dfce1d949511aac6cbe6ee82"}, {0x7, 0x8, "926ade010eed"}, {0x7, 0x8, "fd14967c49d3"}, {0x0, 0x11, "55be4602b74cb02ff7d12fa748dfbf"}, {0x0, 0xf, "4b90065655c05652fb1f9f075a"}, {0x5, 0xa, "9acec8777d8aacc1"}, {0x5, 0x7, "c194c0c61e"}, {0x1, 0x8, "b1b6446d5614"}]}, @timestamp_addr={0x44, 0x24, 0xe7, 0x1, 0x4, [{@broadcast}, {@local, 0x7fff}, {@multicast2, 0xe22c}, {@remote, 0x9}]}]}}, @timestamp={0xd, 0x0, 0x0, 0x3, 0x5, 0x7, 0xb7d, 0x400}}}}}, 0x0) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000000)='./file0\x00', 0x18688ba, &(0x7f0000000000)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) 1.850498781s ago: executing program 6 (id=5225): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1010, 0x89}, 0x50) unshare(0x8040580) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x406, r1) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRES16=r1, @ANYRES32=r1, @ANYBLOB="0000000000000000200012800e0001006970366772657461700000000c00028008000100", @ANYRES32=r1, @ANYBLOB="81cf278d", @ANYRES32=r1], 0x48}}, 0x80) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = io_uring_setup(0x6f4e, &(0x7f0000000340)={0x0, 0xd623, 0x800, 0x1, 0x1ef, 0x0, r2}) io_uring_register$IORING_REGISTER_BUFFERS2(r4, 0xf, &(0x7f0000001000)={0x7, 0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000a80)=""/175, 0xaf}, {&(0x7f0000000b40)=""/139, 0x8b}, {&(0x7f0000000c00)=""/99, 0x63}, {&(0x7f0000000c80)=""/66, 0x42}, {&(0x7f0000000d00)=""/111, 0x6f}, {&(0x7f0000000d80)=""/68, 0x44}, {&(0x7f0000000e00)=""/211, 0xd3}], &(0x7f0000000f80)=[0xfffffffffffffff9, 0x4b8, 0xc0e0, 0x2, 0x3e1f0f92, 0x0, 0x4, 0x2, 0x4, 0x469]}, 0x20) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x0, 0x0, 0x4000000}, 0x0) creat(&(0x7f0000000080)='./bus\x00', 0x154) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={0x0, &(0x7f0000000100)=""/151, 0x0, 0x97, 0x1}, 0x28) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r5) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r6, 0x701, 0x70bd2d, 0x25dfdbff}, 0x14}}, 0x10044880) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r5) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000a40)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000500)=ANY=[@ANYBLOB="d4040000", @ANYRES16=r7, @ANYBLOB="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"], 0x4d4}, 0x1, 0x0, 0x0, 0x44}, 0x20000000) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x8c, &(0x7f0000000300)='trans=rdma,') bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x15, 0x6, &(0x7f0000001040)=ANY=[@ANYBLOB="050000000000000069111200000000008510000002000000858000001a00000095000000000000009500a505000000002c67ad51418b7acee543f21be364b19660e240b9331a933a6ffd370e538bebc74f2869af58d662b6e62cff9733fe1cff65167d160efa1e66630257285f75791ea784d97f34915d551e32685ca4d2ed841369fdd65794015deedad0dc1764b49e8658aaf31a49d8eb9ad405bb938d85f127244799583003a9ad82b90e6ed4d6ef8efd8fc458f6dbb55cc56396cb52d3f73c6ba2b8e7cb155582a2"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x6}, 0x70) 1.793139003s ago: executing program 0 (id=5262): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8001, 0x0, 0x0, 0x6, 0x0, 0x0, 0x72}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x4, &(0x7f0000000840)=ANY=[@ANYBLOB="660a0000feffffff7b112f0000000000850041005600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) io_uring_setup(0x1b7b, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8800) socket$inet_tcp(0x2, 0x1, 0x0) 1.775373153s ago: executing program 2 (id=5263): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x91}, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x4, &(0x7f0000006680)) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000200), 0x6000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x4000, &(0x7f0000000600), 0xfd, 0x571, &(0x7f0000000bc0)="$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") (async) timer_getoverrun(r2) (async, rerun: 32) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) (rerun: 32) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000001f40)=ANY=[@ANYBLOB="000000004c900200060000000300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000020000000000000ffffffffffd9ffff00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff"]) 1.58679086s ago: executing program 7 (id=5264): syz_emit_ethernet(0x2a, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) perf_event_open(0x0, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000280), 0x7, 0x684201) r1 = socket$kcm(0x29, 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, 0xfffffffffffffffc) fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000480)={@in6={{0xa, 0x4e21, 0x20000000, @private1, 0x4}}, 0x0, 0x0, 0x25, 0x0, "ddfd3b7ed7c6a1c172a987ae5ce3cafd64c9a736831a5912d606798fb75c9981c4b3ac0e06891ff18bc5543ed57215a3c45f9154dfa319e52a15a2b9acf80c07fb1a854dad742eef6187f2304844c296"}, 0xd8) openat$nci(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_dev$sg(&(0x7f00000002c0), 0x80000000010e6, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000f, 0x11, r3, 0x0) ioctl$SG_GET_SG_TABLESIZE(r3, 0x227f, &(0x7f00000000c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x9, 0x11}, 0x400, 0x0, 0x7, 0x4, 0x1, 0x8000, 0x7fff}, 0x0, 0xe, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x2, 0x3, 0x106) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0900000018000000080000004000000042000000", @ANYRES32=0x1, @ANYRES16=r6, @ANYRESDEC=r4, @ANYRESDEC=r5, @ANYBLOB="000000000054e900000000000000e47ee80755c9795a094dd795d180feffff000000000000dbd1cf0004555033c56248eaf6d936110addcd332aa6dea996edebd27d7eadca69af469f81aeff55e977"], 0x48) sendmsg$NFT_BATCH(r7, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048001}, 0x20006800) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r8, 0x400454d9, &(0x7f0000000380)={'pimreg1\x00'}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x10081, 0x0) close(r9) 1.401105465s ago: executing program 0 (id=5265): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x0, 0x3}, {0xfffe, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x1c, 0x2, [@TCA_GRED_LIMIT={0x8, 0x5, 0x2}, @TCA_GRED_DPS={0x10, 0x3, {0x7, 0x10}}]}}]}, 0x4c}}, 0x4000) 1.400771015s ago: executing program 2 (id=5266): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f00000001c0)={0x2, 0x6}) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffbddc, {0x0, 0x0, 0x0, r3, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x6, 0x40, 0x2, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa101, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x3, 0x0, 0x15, "0062ba7d82000000000000000000f7fffeff00"}) (async) r6 = syz_open_pts(r5, 0x8182) r7 = dup3(r6, r5, 0x0) ioctl$TCFLSH(r7, 0x540b, 0x2) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_GET(r7, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0xe8, r8, 0x20, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x10}, 0x1) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002940)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffff7dfc, {0x0, 0x0, 0x0, r11, {0x10}, {0xfff3}, {0x2, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x9, 0x4f0d, 0x5, 0x10001, 0x8, 0x10000, 0x80, 0x288, 0x20000005, 0x9, 0x2, 0xfff, 0x0, 0x1, 0x7887, 0x5, 0xdd16, 0x392, 0x31aa, 0x7fff, 0x2, 0xfffff98c, 0x4, 0x4e, 0x100, 0xa, 0x9, 0x2, 0x11, 0xffffffff, 0x3, 0x4, 0x1000, 0x800, 0x7, 0x1, 0x9, 0xd, 0x7, 0xa4f, 0x2, 0xc, 0x3, 0x0, 0xfffffffd, 0x74, 0x4, 0x4, 0xffffffff, 0x6, 0x3, 0x1000, 0x6, 0x5, 0x71d, 0x2, 0xffff, 0x6, 0x6, 0x80000000, 0xce0, 0x9, 0xea5, 0x8, 0x200, 0x4, 0x8001, 0x2, 0x9, 0x10, 0x9, 0x10000, 0x2, 0x7fff, 0xc, 0x7, 0x4800, 0x6, 0x6, 0xe87, 0x27f, 0x6, 0x0, 0x4800, 0x1, 0x12, 0x18b, 0x6, 0x2, 0x5, 0x1, 0x40, 0x5, 0x1, 0x0, 0x1da35084, 0x4, 0x1, 0x9, 0x7, 0x0, 0x4, 0x8, 0x4, 0x2, 0x0, 0x7, 0x200, 0x80000003, 0x8001, 0xa000, 0x0, 0x7a69, 0x764064d2, 0x92, 0x2, 0xbdc9, 0x3, 0xff, 0x2, 0x10, 0x5, 0x10000, 0x100, 0x5, 0x1022075d, 0x8, 0x5, 0x5, 0xfffffffe, 0x7f, 0x101, 0x4, 0xb, 0x9, 0x27, 0xff, 0x1, 0xf64a, 0xa78c, 0x5, 0x6, 0x7, 0xffff4fc5, 0x8, 0x77, 0x385, 0x3ff, 0x100, 0xbc22, 0x5, 0x4, 0x7, 0xb9, 0x7, 0x1, 0xb8, 0xffffff2a, 0x6, 0x8001, 0x6, 0x9, 0x3ff, 0x2, 0x6, 0x0, 0x6, 0x7fff, 0x80, 0x2, 0x1, 0xe, 0x80000001, 0x39, 0x5, 0xa05, 0x3, 0x9, 0x72, 0x5, 0x4, 0x5, 0xba, 0x3, 0x7ff, 0x8, 0x6, 0x7f, 0x5, 0xe8f0, 0x55, 0x8, 0x0, 0x400, 0x0, 0x8, 0x410, 0xffff03a4, 0xa8, 0x39b5, 0x8, 0xf3, 0x4, 0x10001, 0x0, 0x2007f, 0x2, 0x7fff, 0x7, 0x401, 0x4, 0x1, 0x8, 0x2, 0x7, 0x2, 0x1, 0x1, 0x8, 0xffff, 0x0, 0x9, 0xc0e, 0x5, 0xf, 0xffff, 0xfffffff7, 0xfff7ff29, 0x7, 0x32a, 0xad95, 0x776, 0x9, 0xfffffffd, 0x8, 0x3, 0xa4c9, 0x1, 0x0, 0xb, 0x3, 0x101, 0x1, 0x0, 0x2, 0x1, 0x4, 0x0, 0x80000000, 0xfffffff8, 0x400, 0x5, 0x2, 0x40, 0xfffeffff, 0x541b]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0xb3538085985bb3d6}, 0x0) 1.400292215s ago: executing program 0 (id=5267): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001500)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="9b0f2bbd7000ffdbdf25010000801c000280070001800c0001800800010008000000a0e4bfb272ad4e19e98b455dfdba4ad33d09fb9cbd8e1867bfa2605bbbe1364aded6c6120ce949c28f72801215a3512fb84cb251c383265e2caccf74b09f8f0baad4030e0eea57c3f403fca4bd27e1014418812069f38256d7912da71da5bb6f4997fe4b2f5500397477e150233e73ca966128c2a7ece4be54b46b9d15f19687d884dc9e3ee1e8a39beb77"], 0x30}, 0x1, 0x0, 0x0, 0x6051}, 0x4000) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000240)={'syztnl1\x00', &(0x7f0000000180)={'gre0\x00', 0x0, 0x20, 0x700, 0x80000001, 0x101, {{0x15, 0x4, 0x3, 0x2, 0x54, 0x66, 0x0, 0x80, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x15}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x7, 0x1b, 0x5c, [@empty, @dev={0xac, 0x14, 0x14, 0x36}, @dev={0xac, 0x14, 0x14, 0x2e}, @private=0xa010100, @local, @empty]}, @cipso={0x86, 0x1d, 0x3, [{0x2, 0x5, ':\f!'}, {0x2, 0x2}, {0x5, 0x5, "834cc9"}, {0x7, 0xb, "496cd04d87e37ef222"}]}, @noop, @ra={0x94, 0x4, 0x1}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001840)={'syztnl2\x00', &(0x7f00000017c0)={'ip6_vti0\x00', 0x0, 0x4, 0xa, 0x7, 0x4, 0x0, @local, @local, 0x40, 0x20, 0xd4f5, 0x80}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001900)={'ip6gre0\x00', &(0x7f0000001880)={'ip6gre0\x00', 0x0, 0x29, 0x9, 0x1, 0x101, 0x1, @mcast1, @loopback, 0x1, 0x0, 0x8, 0x7fff}}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00'}) sendmsg$nl_route(r4, 0x0, 0x40040d4) futex(&(0x7f000000cffc), 0x9, 0x0, 0x0, 0x0, 0x1) futex(&(0x7f000000cffc), 0x9, 0x0, 0x0, 0x0, 0xfffffffe) futex(&(0x7f000000cffc), 0xa, 0x801, 0x0, 0x0, 0xfffffffc) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) prctl$PR_SET_THP_DISABLE(0x19, 0x10000000000001) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x1}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), 0xffffffffffffffff) r6 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x174491, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_config_ext={0x9}, 0x6025, 0x4005, 0xb, 0x3, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x200000b, 0x4000011, r6, 0x0) sendmsg$MPTCP_PM_CMD_REMOVE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f00000015c0)=ANY=[@ANYBLOB="bc000000", @ANYRES16=0x0, @ANYBLOB="040029bd7000fddbdf250900000008000300080000000500050004000000300001800500020080000000060001000200000014000400ff010000000000000000000000000001060001000200000008000200070000000800030002000000080003000200000038000180080006001800000008000700cebaee47df993294ed9069e0b53331d3df6fa7be053e64f079c3ebabbe360ae2efb33539b38d373fb47a7039b782f9a583d2a22759712e0fcb47a9cf230a", @ANYRES32=r3, @ANYBLOB="060005004e240000140004000000000000000000000000000000000008000300ffffffff050005000500000008000200040000000800040000100000"], 0xbc}, 0x1, 0x0, 0x0, 0x4008000}, 0x4004094) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0) r7 = mq_open(&(0x7f0000000440)='-\x00', 0x40, 0x102, &(0x7f0000000480)={0xcc4f, 0x6, 0x7fffffffffffffff, 0x9}) mq_timedreceive(r7, &(0x7f00000004c0)=""/4096, 0x1000, 0x3, &(0x7f00000014c0)) 1.365376316s ago: executing program 4 (id=5268): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote, 0x0, 0x0, 0x0, 0x3}, 0x20) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_audit(0x10, 0x3, 0x9) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x20700, 0x2000000, {0x0, 0x0, 0x0, 0x0, 0x8203}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x67}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r3, 0x0, 0x17, 0x0, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffa}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, 0x0, 0x44040880) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x884) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10) r8 = socket(0xa, 0x1, 0x0) getsockopt(r8, 0x1, 0x2f, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000004c0)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@bh}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000900)="$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") madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) setsockopt$inet_tcp_TLS_TX(r4, 0x6, 0x17, &(0x7f0000000140)=@gcm_128={{0x303}, "60000100", "9de66ebc3914c06f0f109088d190e700", "000e3102", "f8dd000000000092"}, 0x28) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000386dd648e96020010210000000000000000000000ffff64010102ff020000000000000000000000000001"], 0x0) 1.284731969s ago: executing program 6 (id=5269): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$setsig(r0, 0xa, 0x28) (async) fcntl$setsig(r0, 0xa, 0x28) socket$inet6(0xa, 0x80002, 0x0) (async) socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x9) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r1, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$inet(0x2, 0x4000000000000001, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c040}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c040}, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)) (async) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000003702000020febfff7a0af0fff8ff00f869a4f0ff00000000b70600001218d1fe2d640500000000001404000000ffffffdc04000040000000b704000010000020620700fe00000000850000002f000000b70000000a00000095"], &(0x7f0000000280)='GPL\x00'}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, 0x3b) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, 0x3b) socket$nl_rdma(0x10, 0x3, 0x14) (async) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x38, 0x1403, 0x1, 0x70bd21, 0x25dfdbff, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'virt_wifi0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24044070}, 0x810) (async) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x38, 0x1403, 0x1, 0x70bd21, 0x25dfdbff, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'virt_wifi0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24044070}, 0x810) syz_usb_connect(0x5, 0x24, 0x0, 0x0) getpid() (async) r5 = getpid() syz_pidfd_open(r5, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r6, 0x541b, 0x0) 1.181039532s ago: executing program 7 (id=5270): signalfd4(0xffffffffffffffff, &(0x7f0000000200)={[0xf9a]}, 0x8, 0x80000) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x3f}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$eJzs3M1rXOUaAPDnnEy+c5v0crn3tggGpCqK07QpFbpqXYsKunDZmExKyPTDJIIJXaR1ry5EXBSkf4Lg3m5cCS7qQutfUMQiRTdtFyNnPtKxk5nGdGaOSX8/eHPe97wn8zxPTmfOe2BOA3hqTWc/0ohDEXE2iZis708jYqjaG4nYrB13/+7l+awlUam8/VsSSUTcu3t5vvFaSX07Xh+MRMTN15L490etcVfXN5bnyuXSSn18dO38paOr6xuvLJ2fO1c6V7pwYvbVE7MnZ2e7WOvtS+998cwPbzx/9frHM29+fuC7JE7HRH2uuY5umY7prb9Js0JEzHU7WE4G6vU015kUckwIAICO0qY13H9jMgbi4eJtMr79MdfkAAAAgK6oDERUAAAAgH0ucf8PAAAA+1zjewD37l6eb7R8v5HQX3fORMRUrf7G8821mUJsVrcjMRgRY78n0fxYa1L7tSc2nUX6+vtS1qJHzyF3snklIv6/3flPqvVPVZ/ibq0/jYiZLsSffmS8l+o/3YX4edcPwNPpxpnahaz1+pdurX9im+tfYZtr127kff1rrP/ut6z/HtY/0Gb999YOYxx+8NLNdnPN6793P/l5IYufbZ+oqL/hzpWIw4Xt6k+26k/a1H92hzHG529fazeX1Z/V22j9rr9yPeJIdTXXWn9D0un/Jzq6uFQuzdR+bvP66yc7x28+/1nL4jfuBfohO/9jsbvzf2mHMab+9+uhdnOPrz/9ZSh5p9obqu/5cG5tbeVYxFDyeuv+451zaRzTeI2s/hef6/z+367+7DNhs/53yP71XKlvs/HVR2KOHzn+1e7r762s/oVdnv9Pdxjjy2+uvd9uLu/6AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANgb0oiYiCQtbvXTtFiMGI+I/8RYWr64uvby4sUPLixkcxFTMZguLpVLMxExWRsn2fhYtf9wfPyR8WxEHIyIzyZHq+Pi/MXyQt7FAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsGU8IiYiSYsRkUbEH5NpWizmnRUAAADQdVN5JwAAAAD0nPt/AAAA2P9a7v8LfxmN9DMXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9qWDz964lUTE5qnRassM1ecGc80M6LV0Z4eN9ToPoP8G8k4AyE2hqV+pVCo5pgL0mXt8IHnM/EjbmeGu5wIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAP9cLh27cSiJi89RotWWG6nODuWYG9FqadwJAbgY6TSaP3QHsYYW8EwBy4x4fqK3sH1RqWudH2v7m8BNHBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDvmKi2JC1GRFrtp2mxGPGviJiKwWRxqVyaiYgDEfHT5OBwNj6Wd9IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB03er6xvJcuVxa0dHR6WJnNPoWa7T+Zm5zzHD7qQ6dnD+YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADIxer6xvJcuVxaWc07EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACBvq+sby3Plcmmlh528awQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID9/BgAA///GyAmy") r5 = open(&(0x7f00000001c0)='./file0/file0\x00', 0xecb42, 0x83) pwritev2(r5, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x14, 0x6400, 0x2000, 0x3) 1.171476823s ago: executing program 2 (id=5271): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=@newtaction={0x64, 0x30, 0x9e54f29ff072a93b, 0x0, 0x25dfdbfc, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x0, 0x0, 0xf0ffffff, 0x400}, 0x2d}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 1.065370126s ago: executing program 2 (id=5272): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a90000000060a0b0400000000000000000200000064000480240001800b000100736f636b657400001400028008000240000000030800014000000002240001800b0001007470726f787900001400028008000140000000020800024000000003180001800d00010073796e70726f787900000000040002900900010073797a30000000000900020073797a320000000014000000110001"], 0xb8}}, 0x40880) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)) close(r0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r3, 0xd, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000000c0), ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f00000002c0)=[0x0], &(0x7f00000001c0)=[0x0], 0x0, 0x3e, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x5, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0x7f, 0x8, 0x8, &(0x7f0000000140)}}, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000440)={'pim6reg0\x00'}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) r9 = dup(r8) write$UHID_INPUT(r9, &(0x7f0000002080)={0x200f, {"20e30a30ed0d09f91b5e070987f70e06d038e7ff7fc6e5539b0d3e0e8b089b3f363063030890e0879b0af8c6e70a9b334a959b669a240d0a0af3988f7ef319520100ffe8d178708c526db51b1b5b31070d0773090acd3b78130daa61d8e8040001000000b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19300305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f6709000000a141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a027d5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf050000008000000000f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b3f3f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7af1d0e54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c01008e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2f5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d21488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e1a63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e09d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a603336c00000077cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046ca5b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe6531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e6586df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59555e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0d8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb601203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f900000930dedf800", 0x1000}}, 0x1006) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x1703}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@bridge_delvlan={0x30, 0x71, 0x1, 0x70bd28, 0x80, {0x7, 0x0, 0x0, r11}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x42, 0x2}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xa}}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0x58, &(0x7f0000000480)}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000005c0)={'sit0\x00', &(0x7f0000000540)={'gretap0\x00', 0x0, 0x8000, 0x7800, 0x10, 0x9, {{0xe, 0x4, 0x3, 0x2f, 0x38, 0x65, 0x0, 0x6, 0x4, 0x0, @multicast1, @broadcast, {[@ra={0x94, 0x4, 0x1}, @rr={0x7, 0x1b, 0x99, [@multicast1, @broadcast, @multicast1, @remote, @multicast2, @local]}, @ra={0x94, 0x4, 0x1}]}}}}}) 142.714525ms ago: executing program 0 (id=5273): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x5}, 0x2022, 0x37, 0x100, 0x5, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x16bfc9754559bcb9) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000d40)=@raw={'raw\x00', 0x3c1, 0x3, 0xb18, 0x0, 0x12, 0x600, 0x0, 0x202, 0xa48, 0x2e8, 0x2e8, 0xa48, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private0={0xfc, 0x0, '\x00', 0x4}, @mcast2, [], [], 'veth1_to_bond\x00', 'geneve1\x00', {0xff}}, 0x0, 0x948, 0x978, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "0000000000000019b5115c2aee68d23a465cd431e150c3234e082555f67222476147864fa0318236000000c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baeb8989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b50700", 0x2, 0x0, {0x3}}}, @common=@unspec=@u32={{0x7e0}, {[{[{0x5, 0x1}, {0x4, 0x1}, {0x6, 0x2}, {0xffff8001, 0x2}, {0x3}, {0x7, 0x3}, {0x7, 0x2}, {0x65, 0x3}, {0x9, 0x1}, {0x33d8786a, 0x1}, {0x2, 0x2}], [{0x7, 0x8c}, {0x1, 0x5}, {0x3ff, 0xda}, {0x5, 0x80000000}, {0x6, 0x1}, {0x5, 0x3}, {0x9037, 0x8}, {0x1000, 0x1}, {0x7, 0x7ff}, {0x7}, {0x7, 0x4}], 0x7, 0x1}, {[{0x1, 0x3}, {0x80000000, 0x2}, {0x81, 0x3}, {0x8, 0x1}, {0x3}, {0x8, 0x1}, {0x5, 0x3}, {0x6ec7, 0x1}, {0x1, 0x2}, {0x9}, {0xffffffff}], [{0x0, 0x8000}, {0x1, 0x51}, {0x800, 0x1}, {0x40, 0xfffffffe}, {0x1, 0x400}, {0xffffffff, 0x4}, {0x1, 0x2f}, {0x6, 0xe3}, {0x5, 0x2336}, {0x2, 0x7fffffff}, {0x3, 0x100}], 0x2, 0x5}, {[{0x0, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x401}, {0xffff, 0x2}, {0x80, 0x3}, {0xc, 0x1}, {0x7, 0x2}, {0x4}, {0x8, 0x1}, {0x84, 0x2}], [{0x2, 0x48ea5d6a}, {0x6, 0x1}, {0x5, 0xf7}, {0xc}, {0xab, 0x5}, {0x2, 0x9}, {0x6, 0x6}, {0x67, 0x5}, {0x40, 0x6}, {0x1800, 0xd}, {0x1ff, 0x8d6}], 0x7}, {[{0x6, 0x2}, {0xfffffff9}, {0xc}, {0x8, 0x1}, {0x8, 0x3}, {0xf, 0x1}, {0xe00}, {0x7fffffff}, {0x7, 0x2}, {0x5, 0x1}], [{0xe, 0x80000000}, {0x1, 0x9}, {0xea, 0x5}, {0x6, 0x5}, {0xa, 0x1}, {0x8, 0x8}, {0x8, 0x1}, {0x401, 0x2}, {0xfff, 0x9}, {0xb, 0x9}, {0x9, 0xffff}], 0xb, 0x4}, {[{0x585b, 0x2}, {0x800, 0x2}, {0x80, 0x1}, {0x6, 0x1}, {0x8001, 0x3}, {0x1, 0x1}, {0x2, 0x3}, {0x100}, {0xfff, 0x3}, {0x1}, {0x8001, 0x1}], [{0x6, 0x8}, {0x7f, 0x5}, {0x6, 0xf}, {0x3, 0x4000000}, {0x2}, {0x80000000, 0x4}, {0x400, 0x6de0}, {0x8, 0x9}, {0x7, 0x800}, {0x98f, 0x10000}, {0xa9, 0x7}], 0x6, 0x9}, {[{0x8}, {0x81}, {0x0, 0x3}, {0xb, 0x3}, {0x2, 0x1}, {0xd7, 0x1}, {0x8, 0x3}, {0xf8a9, 0x3}, {0x5}, {0x0, 0x3}, {0x8, 0x2}], [{0x67c4, 0x8b}, {0xeb2, 0x1}, {0x0, 0x7ff}, {0x2, 0x9}, {0x3, 0x3}, {0x81, 0x8cc2}, {0xd, 0x200}, {0x2, 0x7}, {0x4, 0x800}, {0x7, 0x1d}, {0x9, 0x40}], 0x7, 0xb}, {[{0x6, 0x2}, {0x207, 0x2}, {0x0, 0x1b385c99f5cbecae}, {0x10000, 0x1}, {0x65593b7e, 0x2}, {0xdd}, {0x1, 0x2}, {0x4, 0x3}, {0x8, 0x1}, {0x6, 0x2}, {0x4, 0x2}], [{0x2, 0x2}, {0x5, 0x8}, {0x478f, 0x6}, {0x5cc0, 0x3}, {0x967, 0x3}, {0x0, 0x9}, {0x4, 0xfffffffb}, {0x800, 0xffffffff}, {0x81, 0xffff}, {0x6, 0xc}, {0x101, 0x7}], 0x7, 0x5}, {[{0xfffffffd, 0x3}, {0x3, 0x2}, {0xfffffffd, 0x3}, {0x9}, {0x5e84, 0x2}, {0x0, 0x1}, {0x4c2}, {0x8b6a, 0x2}, {0x10, 0x3}, {0x8001, 0x3}, {0x5, 0x3}], [{0x1, 0xc}, {0xf33, 0x8}, {0x6, 0xffffff01}, {0x3, 0x4}, {0x9, 0x66}, {0xb, 0x5}, {0x0, 0xf6c9}, {0x0, 0x4}, {0x2, 0x1000000}, {0x7, 0x4}, {0x40, 0x5d55}], 0xa, 0x5}, {[{}, {0xfff, 0x3}, {0xfffffff7, 0x2}, {0x5, 0x3}, {0x1}, {0x4, 0x1}, {0xae0, 0x3}, {0xffffffc0}, {0x8, 0x1}, {0x4}, {0x7, 0x3}], [{0x1, 0xfffffffc}, {0x1000, 0x7}, {0x2, 0xffffffff}, {0x80, 0x2}, {0x4, 0x6}, {0x3, 0x8}, {0x4, 0x8}, {0x4, 0x7}, {0x4, 0x1}, {0x8, 0x80}, {0xfffff802, 0x34a16896}], 0x6, 0x9}, {[{0x88, 0x3}, {0x9, 0x1}, {0xa610000, 0x1}, {0x0, 0x2}, {0x3, 0x2}, {0x44, 0x2}, {0x9}, {0x3, 0x1}, {0x2}, {0x9, 0x1}, {0x9}], [{0x80000000, 0x6}, {0x7fffffff}, {0x382, 0x3ff}, {0x1, 0x8}, {0xbd, 0x2c8}, {0x7}, {0x10000, 0x5ff}, {0x7, 0x6}, {0x1fd, 0x2}, {0x7, 0xffffffff}, {0x4, 0xe6}], 0x0, 0x3}, {[{0x3, 0x1}, {0x1, 0x2}, {0x4}, {0x36, 0x3}, {0xe1}, {0x9, 0x6}, {0x1}, {0x101, 0x2}, {0x23, 0x3}, {0x6}, {0xffffffff, 0x2}], [{0x7, 0x8}, {0x84b, 0x4}, {0x9, 0x1}, {0x18d, 0x75091ebd}, {0x2, 0xf9}, {0x4, 0xfffffff5}, {0xa, 0x4}, {0x2, 0x3}, {0x0, 0x9}, {0x1ff, 0x3ff}, {0x12505a58, 0x9}], 0x0, 0x4}], 0x2}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0xb78) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) 13.095499ms ago: executing program 7 (id=5274): setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) ptrace(0x10, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) syz_usbip_server_init(0x3) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x27, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2, {0xf00a}}, './file0\x00'}) sendto$packet(r0, &(0x7f00000001c0)="11eb03", 0x3, 0x2404c081, &(0x7f0000000200)={0x11, 0x88a8, 0x0, 0x1, 0x4}, 0x14) mincore(&(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f00000000c0)=""/216) 0s ago: executing program 0 (id=5275): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x15, &(0x7f0000000200)=ANY=[], 0x0, 0x3}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48080}, 0x40010) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x24008080) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x83, 0x0, &(0x7f0000000080)) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="1400000010000500000000fff50000000000000a20000000000a01000000000000000000010000000900010073797a300000000040000000030a01020000000000000000010010000900010073797a30000000000900030073797a3000000000140004800800024000000000080001400000000571000000060a010400000008000000000100080008000b4000000000400004803c0001800a0001006d617463680000002c0002800800010065636e000c000300e4edf2b75cc7c0a308000240000000000c000100706b7474797065000900010073797a30"], 0xf0}, 0x1, 0x0, 0x0, 0x90}, 0x4000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010400000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) kernel console output (not intermixed with test programs): n table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 984.167867][ T68] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 984.286465][T21467] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 984.367678][ T28] audit: type=1400 audit(1779998385.313:38553): avc: denied { bpf } for pid=21463 comm="syz.2.4777" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 984.573924][ T28] audit: type=1400 audit(1779998385.313:38554): avc: denied { map_create } for pid=21463 comm="syz.2.4777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 984.737993][ T28] audit: type=1400 audit(1779998385.313:38555): avc: denied { perfmon } for pid=21463 comm="syz.2.4777" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 984.759311][ C1] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:1a [ 984.759530][ C1] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:1a [ 985.013996][ T6442] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 985.028362][ T6442] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 985.132060][T21489] audit: audit_backlog=65 > audit_backlog_limit=64 [ 985.144992][ T28] audit: type=1400 audit(1779998385.313:38556): avc: denied { map_read map_write } for pid=21463 comm="syz.2.4777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 985.188546][T21491] audit: audit_backlog=65 > audit_backlog_limit=64 [ 985.199219][T21489] audit: audit_lost=264 audit_rate_limit=0 audit_backlog_limit=64 [ 985.211917][T21488] audit: audit_backlog=65 > audit_backlog_limit=64 [ 985.233898][T21488] audit: audit_lost=265 audit_rate_limit=0 audit_backlog_limit=64 [ 985.269187][T21488] loop4: detected capacity change from 0 to 2048 [ 985.408273][T21488] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 985.679963][T15851] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 985.695116][T15613] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 985.756821][ T5123] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 985.771207][ T5123] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 985.869646][T21509] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4791'. [ 985.908560][T21509] netlink: 'syz.0.4791': attribute type 3 has an invalid length. [ 985.924981][T21509] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4791'. [ 985.946797][T21509] netlink: 'syz.0.4791': attribute type 3 has an invalid length. [ 986.081451][T21515] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4791'. [ 986.129057][T21512] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4793'. [ 986.215125][T21519] netlink: 9 bytes leftover after parsing attributes in process `syz.4.4792'. [ 986.607665][T21516] loop2: detected capacity change from 0 to 512 [ 986.647404][T21519] netlink: 9 bytes leftover after parsing attributes in process `syz.4.4792'. [ 986.650448][T21516] EXT4-fs: Ignoring removed bh option [ 986.669037][T21516] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 986.686230][T21516] EXT4-fs (loop2): 1 truncate cleaned up [ 986.699448][T21516] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 986.808849][T21527] loop7: detected capacity change from 0 to 2048 [ 986.921360][T21527] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 986.942779][T15613] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 986.990597][T21533] netlink: 160 bytes leftover after parsing attributes in process `syz.0.4799'. [ 987.220606][T13476] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 987.283956][T21545] loop4: detected capacity change from 0 to 512 [ 987.465155][T21547] loop2: detected capacity change from 0 to 512 [ 987.476917][T21547] EXT4-fs: Ignoring removed nobh option [ 987.486951][T21547] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 987.504239][T21547] EXT4-fs (loop2): 1 truncate cleaned up [ 987.511153][T21547] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 987.568621][T21545] EXT4-fs: dax option not supported [ 988.412228][T21547] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 988.946763][ T6442] net_ratelimit: 10 callbacks suppressed [ 988.946780][ T6442] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 988.966816][ T6442] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 989.106238][T21577] loop4: detected capacity change from 0 to 1024 [ 989.188647][ C1] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:1a [ 989.203217][ C1] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:1a [ 989.227042][T21577] EXT4-fs (loop4): unsupported inode size: 0 [ 989.308889][T21577] EXT4-fs (loop4): blocksize: 1024 [ 989.547229][ T28] kauditd_printk_skb: 419 callbacks suppressed [ 989.547252][ T28] audit: type=1400 audit(1779998390.533:38957): avc: denied { prog_load } for pid=21580 comm="syz.7.4813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 989.793206][ T28] audit: type=1400 audit(1779998390.570:38958): avc: denied { prog_load } for pid=21580 comm="syz.7.4813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 990.013686][ T6442] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 990.028074][ T6442] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 990.628804][ T28] audit: type=1400 audit(1779998390.729:38959): avc: denied { read write } for pid=13476 comm="syz-executor" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 990.939311][ T28] audit: type=1400 audit(1779998390.729:38960): avc: denied { read write open } for pid=13476 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 991.028982][ T28] audit: type=1400 audit(1779998390.729:38961): avc: denied { ioctl } for pid=13476 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=107 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 991.056258][ T28] audit: type=1400 audit(1779998390.748:38962): avc: denied { read write } for pid=15851 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 991.081803][ T28] audit: type=1400 audit(1779998390.748:38963): avc: denied { open } for pid=15851 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 991.107323][ T28] audit: type=1400 audit(1779998390.795:38964): avc: denied { ioctl } for pid=15851 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 991.133814][ T28] audit: type=1400 audit(1779998390.823:38965): avc: denied { write } for pid=21584 comm="syz.7.4815" name="ipv6_route" dev="proc" ino=4026533672 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 991.158134][ T28] audit: type=1400 audit(1779998390.841:38966): avc: denied { execmem } for pid=21584 comm="syz.7.4815" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 991.324953][T21572] loop2: detected capacity change from 0 to 512 [ 991.333203][T21572] EXT4-fs: Ignoring removed bh option [ 991.338990][T21572] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 991.349157][T21572] EXT4-fs (loop2): 1 truncate cleaned up [ 991.355327][T21572] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 991.391025][T21599] Cannot find set identified by id 0 to match [ 991.416099][ C1] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:1a [ 991.430667][ C1] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:1a [ 991.476662][T15486] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 991.491085][T15486] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 992.565140][T15613] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 992.716930][T21611] loop2: detected capacity change from 0 to 512 [ 992.762116][T21611] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 992.777460][T21612] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 992.817509][T21614] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4824'. [ 992.826917][T21612] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 992.848022][T21611] EXT4-fs (loop2): 1 truncate cleaned up [ 992.860600][T21611] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 992.929105][T21611] netlink: 131740 bytes leftover after parsing attributes in process `syz.2.4823'. [ 992.988514][T21611] EXT4-fs warning (device loop2): ext4_group_extend:1861: can't shrink FS - resize aborted [ 993.085272][T15613] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 993.125886][T21606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 993.139709][T21620] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4826'. [ 993.165077][T21606] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 993.394440][T21628] netlink: 'syz.0.4830': attribute type 8 has an invalid length. [ 993.418644][T21628] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4830'. [ 993.564461][T21630] loop2: detected capacity change from 0 to 8192 [ 993.606456][T21630] loop2: p3 p4 < > [ 993.613317][T21630] loop2: p3 size 83886080 extends beyond EOD, truncated [ 993.650026][ T2981] loop2: p3 p4 < > [ 993.659796][ T2981] loop2: p3 size 83886080 extends beyond EOD, truncated [ 994.240636][T21655] loop7: detected capacity change from 0 to 1024 [ 994.283934][T21655] EXT4-fs (loop7): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 994.342632][T21655] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 994.647521][T21660] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4841'. [ 994.833182][ T5121] net_ratelimit: 109 callbacks suppressed [ 994.833203][ T5121] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 994.853366][ T5121] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 994.897423][ T28] kauditd_printk_skb: 293 callbacks suppressed [ 994.897441][ T28] audit: type=1400 audit(1779998395.528:39260): avc: denied { open } for pid=21661 comm="syz.6.4842" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 994.933069][T21654] loop4: detected capacity change from 0 to 512 [ 994.994988][T21654] EXT4-fs: Ignoring removed bh option [ 995.021529][T21654] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 995.039807][ T28] audit: type=1400 audit(1779998395.528:39261): avc: denied { perfmon } for pid=21661 comm="syz.6.4842" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 995.103691][ T28] audit: type=1400 audit(1779998395.528:39262): avc: denied { kernel } for pid=21661 comm="syz.6.4842" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 995.163035][T21654] EXT4-fs (loop4): 1 truncate cleaned up [ 995.175115][T21654] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 995.195314][ T28] audit: type=1400 audit(1779998395.556:39263): avc: denied { perfmon } for pid=21661 comm="syz.6.4842" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 995.250594][T21668] pimreg: entered allmulticast mode [ 995.269302][ T28] audit: type=1400 audit(1779998395.574:39264): avc: denied { kernel } for pid=21661 comm="syz.6.4842" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 995.338710][ T28] audit: type=1400 audit(1779998395.574:39265): avc: denied { read write } for pid=21634 comm="syz.4.4833" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 995.429461][T21668] veth1_to_bond: entered allmulticast mode [ 995.446024][ T28] audit: type=1400 audit(1779998395.574:39266): avc: denied { read write open } for pid=21634 comm="syz.4.4833" path="/dev/loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 995.499984][T21671] pimreg: left allmulticast mode [ 995.513376][T15851] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 995.534970][ T28] audit: type=1400 audit(1779998395.574:39267): avc: denied { ioctl } for pid=21634 comm="syz.4.4833" path="/dev/loop4" dev="devtmpfs" ino=104 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 995.560867][ T68] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 995.575362][ T68] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 995.626406][T21667] veth1_to_bond: left allmulticast mode [ 995.640527][ T28] audit: type=1400 audit(1779998395.584:39268): avc: denied { prog_load } for pid=21661 comm="syz.6.4842" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 995.697729][ T28] audit: type=1400 audit(1779998395.584:39269): avc: denied { bpf } for pid=21661 comm="syz.6.4842" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 995.859507][ C1] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:1a [ 995.874031][ C1] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:1a [ 995.943084][T13476] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 996.024247][T21684] IPv6: addrconf: prefix option has invalid lifetime [ 996.136120][T21688] loop2: detected capacity change from 0 to 164 [ 996.154094][T21688] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 996.170011][T21688] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 996.201794][T15486] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 996.216131][T15486] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 996.489364][T21706] netlink: 'syz.7.4858': attribute type 10 has an invalid length. [ 996.502789][T21700] loop2: detected capacity change from 0 to 8192 [ 996.569206][T21706] wg2: entered promiscuous mode [ 996.658584][T21714] netlink: 9 bytes leftover after parsing attributes in process `syz.0.4857'. [ 996.698759][T21714] netlink: 9 bytes leftover after parsing attributes in process `syz.0.4857'. [ 996.751095][T21706] team0: Device wg2 is of different type [ 996.843290][ T5121] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 997.364700][T21726] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4863'. [ 998.224953][T21735] loop2: detected capacity change from 0 to 1024 [ 998.298224][T21735] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 998.383287][T21735] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.4864: Invalid block bitmap block 0 in block_group 0 [ 998.470396][T21719] loop7: detected capacity change from 0 to 512 [ 998.478302][T21719] EXT4-fs: Ignoring removed bh option [ 998.487109][T21735] loop2: lost filesystem error report for type 5 error -117 [ 998.487273][T21735] EXT4-fs error (device loop2): ext4_acquire_dquot:7034: comm syz.2.4864: Failed to acquire dquot type 0 [ 998.506162][T21735] loop2: lost filesystem error report for type 5 error -117 [ 998.517629][T21719] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 998.555694][ C1] EXT4-fs (loop2): error count since last fsck: 2 [ 998.562187][ C1] EXT4-fs (loop2): initial error at time 1779998398: ext4_read_block_bitmap_nowait:483 [ 998.571901][ C1] EXT4-fs (loop2): last error at time 1779998398: ext4_acquire_dquot:7034 [ 998.584172][T21735] EXT4-fs error (device loop2): ext4_free_blocks:6718: comm syz.2.4864: Freeing blocks not in datazone - block = 0, count = 4096 [ 998.610938][T21735] loop2: lost filesystem error report for type 5 error -117 [ 998.611260][T21735] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.4864: Invalid inode bitmap blk 0 in block_group 0 [ 998.631356][T21735] loop2: lost filesystem error report for type 5 error -117 [ 998.713601][ T5123] EXT4-fs error (device loop2): ext4_release_dquot:7070: comm kworker/u8:11: Failed to release dquot type 0 [ 998.732416][ T5123] loop2: lost filesystem error report for type 5 error -117 [ 998.734291][T21735] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 998.750135][T21735] loop2: lost filesystem error report for type 5 error -117 [ 998.750785][T21719] EXT4-fs (loop7): 1 truncate cleaned up [ 998.764204][T21719] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 998.776645][T21735] EXT4-fs (loop2): 1 orphan inode deleted [ 998.782857][T21735] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 999.176368][T21745] loop4: detected capacity change from 0 to 4096 [ 999.200974][T13476] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 999.235845][T21745] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 999.425172][T21750] loop7: detected capacity change from 0 to 512 [ 999.435994][T15613] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 999.505079][T21750] EXT4-fs error (device loop7): ext4_ext_check_inode:521: inode #2: comm syz.7.4867: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 999.562282][T21750] loop7: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 999.562506][T21750] EXT4-fs (loop7): get root inode failed [ 999.571718][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 999.571741][ C0] EXT4-fs (loop7): initial error at time 1779998399: ext4_ext_check_inode:521: inode 2 [ 999.571784][ C0] EXT4-fs (loop7): last error at time 1779998399: ext4_ext_check_inode:521: inode 2 [ 999.746930][T21750] EXT4-fs (loop7): mount failed [ 1000.023044][T21771] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4877'. [ 1000.060874][T21771] veth0_to_bridge: entered promiscuous mode [ 1000.086838][T21771] macvtap1: entered allmulticast mode [ 1000.124290][T21771] veth0_to_bridge: entered allmulticast mode [ 1000.176168][T21771] veth0_to_bridge: left allmulticast mode [ 1000.204097][T21771] veth0_to_bridge: left promiscuous mode [ 1000.297692][ T28] kauditd_printk_skb: 527 callbacks suppressed [ 1000.297712][ T28] audit: type=1400 audit(1779998400.523:39794): avc: denied { execmem } for pid=21782 comm="syz.6.4879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1000.323538][ C1] net_ratelimit: 13 callbacks suppressed [ 1000.323573][ C1] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:1a [ 1000.323760][ C1] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:1a [ 1000.363506][ T1557] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1000.377887][ T1557] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1000.959454][T21833] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1000.973948][T21833] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1001.181919][T21838] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4880'. [ 1001.404787][T15851] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1001.514905][ T28] audit: type=1400 audit(1779998400.663:39796): avc: denied { read write } for pid=15613 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1001.580060][ T28] audit: type=1400 audit(1779998400.663:39797): avc: denied { open } for pid=15613 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1001.616119][T21846] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1001.630883][T21846] audit: audit_lost=272 audit_rate_limit=0 audit_backlog_limit=64 [ 1001.648217][T21846] audit: backlog limit exceeded [ 1001.656189][T21843] netlink: 'syz.7.4883': attribute type 10 has an invalid length. [ 1001.666558][ T28] audit: type=1400 audit(1779998400.663:39798): avc: denied { ioctl } for pid=15613 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1001.700564][T21847] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1001.715854][T21847] audit: audit_lost=273 audit_rate_limit=0 audit_backlog_limit=64 [ 1001.725562][T21847] audit: backlog limit exceeded [ 1001.732287][T21847] loop4: detected capacity change from 0 to 1024 [ 1001.741383][T21847] EXT4-fs (loop4): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 1001.752723][T21847] EXT4-fs error (device loop4): __ext4_fill_super:5596: inode #2: comm syz.4.4884: iget: special inode unallocated [ 1001.766403][T21847] loop4: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 1001.766530][T21847] EXT4-fs (loop4): get root inode failed [ 1001.775629][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 1001.775645][ C0] EXT4-fs (loop4): initial error at time 1779998401: __ext4_fill_super:5596: inode 2 [ 1001.775692][ C0] EXT4-fs (loop4): last error at time 1779998401: __ext4_fill_super:5596: inode 2 [ 1001.808304][T21781] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1001.822610][T21781] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1001.838551][T21847] EXT4-fs (loop4): mount failed [ 1001.917110][T21843] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1001.950760][T21850] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1002.021205][T21843] netdevsim netdevsim7 netdevsim2: entered promiscuous mode [ 1002.091801][T21852] loop2: detected capacity change from 0 to 2048 [ 1002.099064][T21843] bond0: (slave netdevsim2): Enslaving as an active interface with an up link [ 1002.141051][T21852] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1002.178675][T21855] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 1002.226966][T21855] EXT4-fs (loop2): Remounting filesystem read-only [ 1002.238950][T15613] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1002.381301][T21831] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1002.395708][T21831] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1003.057749][T21880] netlink: 9 bytes leftover after parsing attributes in process `syz.4.4894'. [ 1003.072383][T21880] netlink: 9 bytes leftover after parsing attributes in process `syz.4.4894'. [ 1003.086621][T21880] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4894'. [ 1003.368807][T21874] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4893'. [ 1003.780434][T21892] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 1003.787004][T21892] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1003.848946][T21892] vhci_hcd vhci_hcd.0: Device attached [ 1003.949890][T21895] vhci_hcd: connection closed [ 1003.950311][T21832] vhci_hcd vhci_hcd.0: stop threads [ 1003.983358][T21832] vhci_hcd vhci_hcd.0: release socket [ 1004.011116][T21832] vhci_hcd vhci_hcd.0: disconnect device [ 1004.038977][T12962] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 1004.100825][T21901] loop7: detected capacity change from 0 to 512 [ 1004.130928][T21901] EXT4-fs: inline encryption not supported [ 1004.152594][T21901] EXT4-fs: inline encryption not supported [ 1004.174181][T21901] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 1004.203302][T21901] EXT4-fs warning (device loop7): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 1004.235027][T21901] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.4901: bg 0: block 248: padding at end of block bitmap is not set [ 1004.298137][T21901] loop7: lost filesystem error report for type 5 error -117 [ 1004.298453][T21901] EXT4-fs error (device loop7): ext4_acquire_dquot:7034: comm syz.7.4901: Failed to acquire dquot type 1 [ 1004.305939][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 1004.305965][ C1] EXT4-fs (loop7): last error at time 1779998404: ext4_validate_block_bitmap:441 [ 1004.403652][T21901] loop7: lost filesystem error report for type 5 error -28 [ 1004.404207][T21901] EXT4-fs (loop7): 1 truncate cleaned up [ 1004.432282][T21901] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 1004.570953][T13476] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 1004.784889][T21915] netlink: 80 bytes leftover after parsing attributes in process `syz.4.4906'. [ 1004.999258][T21922] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4908'. [ 1005.076408][T21922] veth0_to_bridge: entered promiscuous mode [ 1005.093060][T21922] macvtap1: entered allmulticast mode [ 1005.152308][T21926] netlink: 9 bytes leftover after parsing attributes in process `syz.7.4907'. [ 1005.167120][T21922] veth0_to_bridge: entered allmulticast mode [ 1005.214516][T21926] netlink: 9 bytes leftover after parsing attributes in process `syz.7.4907'. [ 1005.383022][T21922] veth0_to_bridge: left allmulticast mode [ 1005.518599][T21922] veth0_to_bridge: left promiscuous mode [ 1005.654419][ T28] kauditd_printk_skb: 299 callbacks suppressed [ 1005.654512][ T28] audit: type=1400 audit(1779998405.602:40095): avc: denied { read } for pid=21930 comm="syz.0.4913" dev="nsfs" ino=4026532384 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1005.710819][ T28] audit: type=1400 audit(1779998405.602:40096): avc: denied { open } for pid=21930 comm="syz.0.4913" path="net:[4026532384]" dev="nsfs" ino=4026532384 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1005.778829][ T28] audit: type=1400 audit(1779998405.602:40097): avc: denied { create } for pid=21930 comm="syz.0.4913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1005.834198][ T28] audit: type=1400 audit(1779998405.630:40098): avc: denied { create } for pid=21931 comm="syz.6.4912" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1005.835273][T21828] net_ratelimit: 14 callbacks suppressed [ 1005.835314][T21828] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1005.874036][T21828] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1005.955164][ T28] audit: type=1400 audit(1779998405.639:40099): avc: denied { setopt } for pid=21931 comm="syz.6.4912" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1006.041564][ T28] audit: type=1400 audit(1779998405.649:40100): avc: denied { remount } for pid=21930 comm="syz.0.4913" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1006.096246][ T28] audit: type=1400 audit(1779998405.789:40101): avc: denied { read write } for pid=13476 comm="syz-executor" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1006.165620][ T28] audit: type=1400 audit(1779998405.789:40102): avc: denied { open } for pid=13476 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1006.240215][ T28] audit: type=1400 audit(1779998405.789:40103): avc: denied { ioctl } for pid=13476 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=107 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1006.316032][ T28] audit: type=1400 audit(1779998405.864:40104): avc: denied { prog_load } for pid=21935 comm="syz.0.4916" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1006.380372][T21920] loop4: detected capacity change from 0 to 512 [ 1006.464102][T21920] EXT4-fs: Ignoring removed bh option [ 1006.496196][T21920] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 1006.528934][T21831] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1006.543353][T21831] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1006.578244][T21920] EXT4-fs (loop4): 1 truncate cleaned up [ 1006.595417][T21920] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1006.780385][T21951] loop7: detected capacity change from 0 to 512 [ 1006.793449][T21951] EXT4-fs: Ignoring removed bh option [ 1006.817032][T21951] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 1006.842785][T21951] EXT4-fs (loop7): 1 truncate cleaned up [ 1006.848844][T21951] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1006.977785][ C1] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:1a [ 1006.992407][ C1] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:1a [ 1007.035086][T15851] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1007.052716][T21957] loop2: detected capacity change from 0 to 2048 [ 1007.099701][T21957] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1007.138541][T21828] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1007.152933][T21828] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1007.200090][T21963] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4923'. [ 1007.260391][T15613] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1007.267544][T21963] veth0_to_bridge: entered promiscuous mode [ 1007.290697][T13476] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1007.299560][T21963] macvtap1: entered allmulticast mode [ 1007.342810][T21963] veth0_to_bridge: entered allmulticast mode [ 1007.455111][T21963] veth0_to_bridge: left allmulticast mode [ 1007.486301][T21963] veth0_to_bridge: left promiscuous mode [ 1007.796923][T21986] IPv6: addrconf: prefix option has invalid lifetime [ 1007.803893][ T6442] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1007.839848][T21987] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=38 sclass=netlink_tcpdiag_socket pid=21987 comm=syz.7.4929 [ 1007.930295][T21987] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=21987 comm=syz.7.4929 [ 1007.962125][T21987] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=21987 comm=syz.7.4929 [ 1007.965659][T21970] loop4: detected capacity change from 0 to 512 [ 1007.984711][T21970] EXT4-fs: Ignoring removed bh option [ 1008.006259][T21970] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 1008.038494][T21970] EXT4-fs (loop4): 1 truncate cleaned up [ 1008.047449][T21970] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1008.369032][T15851] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1008.478382][T21987] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4929'. [ 1008.819942][T22002] loop7: detected capacity change from 0 to 2048 [ 1008.867238][T22002] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1008.907025][T22006] loop4: detected capacity change from 0 to 8192 [ 1009.009997][T13476] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1009.232568][T22013] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4939'. [ 1009.609681][T22024] 9pnet_fd: Insufficient options for proto=fd [ 1010.049884][T22043] loop4: detected capacity change from 0 to 128 [ 1010.081173][T22043] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1010.131867][T22043] ext4 filesystem being mounted at /334/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1010.276693][T15851] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1010.574361][T22063] loop7: detected capacity change from 0 to 512 [ 1010.615765][T22063] EXT4-fs error (device loop7): ext4_ext_check_inode:521: inode #2: comm syz.7.4956: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 1010.649793][T22063] loop7: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 1010.651414][T22063] EXT4-fs (loop7): get root inode failed [ 1010.660566][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 1010.660588][ C1] EXT4-fs (loop7): initial error at time 1779998410: ext4_ext_check_inode:521: inode 2 [ 1010.660620][ C1] EXT4-fs (loop7): last error at time 1779998410: ext4_ext_check_inode:521: inode 2 [ 1010.837217][T22063] EXT4-fs (loop7): mount failed [ 1011.021049][ T28] kauditd_printk_skb: 766 callbacks suppressed [ 1011.021068][ T28] audit: type=1400 audit(1779998410.606:40871): avc: denied { create } for pid=22075 comm="syz.2.4960" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1011.084413][ T28] audit: type=1400 audit(1779998410.606:40872): avc: denied { write } for pid=22075 comm="syz.2.4960" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1011.148028][ T28] audit: type=1400 audit(1779998410.606:40873): avc: denied { read } for pid=22075 comm="syz.2.4960" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1011.181378][T22079] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4959'. [ 1011.215020][ T28] audit: type=1400 audit(1779998410.653:40874): avc: denied { ioctl } for pid=22075 comm="syz.2.4960" path="socket:[70325]" dev="sockfs" ino=70325 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1011.250239][T22074] pim6reg: entered allmulticast mode [ 1011.306732][ T28] audit: type=1400 audit(1779998410.653:40875): avc: denied { module_request } for pid=22075 comm="syz.2.4960" kmod="netdev-wlan0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1011.396726][ T28] audit: type=1400 audit(1779998410.681:40876): avc: denied { read write } for pid=15851 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1011.425056][ C1] net_ratelimit: 14 callbacks suppressed [ 1011.425074][ C1] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:1a [ 1011.475661][ T28] audit: type=1400 audit(1779998410.681:40877): avc: denied { read write open } for pid=15851 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1011.513626][T22094] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1011.525836][T13476] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1011.538117][T22094] audit: audit_lost=274 audit_rate_limit=0 audit_backlog_limit=64 [ 1011.602108][T22098] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4966'. [ 1011.660444][T21828] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1011.674790][T21828] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1011.800807][T22104] loop4: detected capacity change from 0 to 512 [ 1011.843035][T22104] EXT4-fs: dax option not supported [ 1012.271024][T21832] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1012.285503][T21832] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1012.427521][T22119] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1012.829840][T22115] loop7: detected capacity change from 0 to 512 [ 1012.836923][T22115] EXT4-fs: Ignoring removed bh option [ 1012.855428][T22115] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 1012.870877][T21831] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1012.885561][T21831] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1012.918095][T22135] loop2: detected capacity change from 0 to 512 [ 1012.945450][T22135] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 1012.979400][T22115] EXT4-fs (loop7): 1 truncate cleaned up [ 1013.052270][T22115] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1013.235474][T22149] loop2: detected capacity change from 0 to 128 [ 1013.386983][T13476] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1013.413447][ T6442] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1013.427789][ T6442] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1013.584595][T22154] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 1013.629377][T22154] batman_adv: batadv0: Adding interface: gretap1 [ 1013.646583][T22154] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1013.649188][ C1] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:1a [ 1013.736932][T22154] batman_adv: batadv0: Interface activated: gretap1 [ 1014.066694][T22167] loop7: detected capacity change from 0 to 1024 [ 1014.081348][T22167] EXT4-fs (loop7): unsupported inode size: 143 [ 1014.095043][T22167] EXT4-fs (loop7): blocksize: 1024 [ 1014.273520][T22169] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 1014.280092][T22169] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1014.307717][T22169] vhci_hcd vhci_hcd.0: Device attached [ 1014.367252][T22172] vhci_hcd: connection closed [ 1014.376011][ T6442] vhci_hcd vhci_hcd.0: stop threads [ 1014.407629][ T6442] vhci_hcd vhci_hcd.0: release socket [ 1014.420500][ T6442] vhci_hcd vhci_hcd.0: disconnect device [ 1014.624731][T22187] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4993'. [ 1015.771458][T22201] loop2: detected capacity change from 0 to 1024 [ 1015.779997][T22201] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 1016.001548][T22201] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1016.245400][T22189] loop7: detected capacity change from 0 to 512 [ 1016.259025][T22189] EXT4-fs: Ignoring removed bh option [ 1016.348208][T22189] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 1016.412506][T22189] EXT4-fs (loop7): 1 truncate cleaned up [ 1016.422854][ T28] kauditd_printk_skb: 521 callbacks suppressed [ 1016.422872][ T28] audit: type=1400 audit(1779998415.667:41390): avc: denied { create } for pid=22213 comm="syz.6.4999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1016.440597][T22189] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1016.481657][ T28] audit: type=1400 audit(1779998415.714:41391): avc: denied { write } for pid=22213 comm="syz.6.4999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1016.505939][ T28] audit: type=1400 audit(1779998415.751:41392): avc: denied { mount } for pid=22188 comm="syz.7.4994" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1016.527904][ T28] audit: type=1400 audit(1779998415.760:41393): avc: denied { read write } for pid=22188 comm="syz.7.4994" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1016.552192][ T28] audit: type=1400 audit(1779998415.760:41394): avc: denied { open } for pid=22188 comm="syz.7.4994" path="/dev/loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1016.676253][ T28] audit: type=1400 audit(1779998415.901:41395): avc: denied { create } for pid=22215 comm="syz.6.5000" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1016.680678][T22216] netlink: 'syz.6.5000': attribute type 27 has an invalid length. [ 1016.720313][ T28] audit: type=1400 audit(1779998415.910:41396): avc: denied { create } for pid=22215 comm="syz.6.5000" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1016.756416][T22216] macsec1: entered promiscuous mode [ 1016.775014][T22216] dummy0: entered promiscuous mode [ 1016.780289][T22216] macsec1: entered allmulticast mode [ 1016.788620][T22216] dummy0: entered allmulticast mode [ 1016.791102][ T28] audit: type=1400 audit(1779998415.910:41397): avc: denied { setopt } for pid=22215 comm="syz.6.5000" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1016.803997][T13476] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1016.864954][ T28] audit: type=1400 audit(1779998415.910:41398): avc: denied { bind } for pid=22215 comm="syz.6.5000" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1016.919703][ T28] audit: type=1400 audit(1779998415.910:41399): avc: denied { name_bind } for pid=22215 comm="syz.6.5000" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 1016.947833][ T6442] net_ratelimit: 10 callbacks suppressed [ 1016.947847][ T6442] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1016.967866][ T6442] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1017.287200][T22229] netem: change failed [ 1017.389579][T22233] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 1017.396206][T22233] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1017.415498][T22233] vhci_hcd vhci_hcd.0: Device attached [ 1017.454976][T22237] vhci_hcd: connection closed [ 1017.455258][ T6442] vhci_hcd vhci_hcd.0: stop threads [ 1017.479425][ T6442] vhci_hcd vhci_hcd.0: release socket [ 1017.486588][ T6442] vhci_hcd vhci_hcd.0: disconnect device [ 1017.562982][ T6442] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1017.577362][ T6442] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1018.192125][ T6442] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1018.201480][T22242] loop4: detected capacity change from 0 to 512 [ 1018.206560][ T6442] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1018.286222][T22242] EXT4-fs: Ignoring removed bh option [ 1018.292047][T22242] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 1018.319708][T22242] EXT4-fs (loop4): 1 truncate cleaned up [ 1018.325965][T22242] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1018.634474][T15851] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1018.749113][T21831] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1018.763458][T21831] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1019.357391][ T6442] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1019.371909][ T6442] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1019.532697][T22284] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 1019.539272][T22284] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1019.589052][T22284] vhci_hcd vhci_hcd.0: Device attached [ 1019.597058][T15613] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1019.614614][T22286] vhci_hcd: connection closed [ 1019.614793][T21831] vhci_hcd vhci_hcd.4: stop threads [ 1019.637015][T21831] vhci_hcd vhci_hcd.4: release socket [ 1019.653951][T21831] vhci_hcd vhci_hcd.4: disconnect device [ 1019.790228][T22297] netlink: 108 bytes leftover after parsing attributes in process `syz.2.5026'. [ 1020.259666][T22305] loop4: detected capacity change from 0 to 2048 [ 1020.316714][T22305] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1020.569242][T15851] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1020.758256][T22315] pimreg: entered allmulticast mode [ 1021.051605][T22323] loop2: detected capacity change from 0 to 1024 [ 1021.061645][T22323] EXT4-fs: Ignoring removed bh option [ 1021.167770][T22323] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1021.434427][T22321] veth1_to_bond: entered allmulticast mode [ 1021.783212][T22334] pimreg: left allmulticast mode [ 1021.825047][ T28] kauditd_printk_skb: 473 callbacks suppressed [ 1021.825066][ T28] audit: type=1400 audit(1779998420.643:41873): avc: denied { map_create } for pid=22328 comm="syz.4.5035" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1021.996876][ T28] audit: type=1400 audit(1779998420.643:41874): avc: denied { perfmon } for pid=22328 comm="syz.4.5035" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1022.018039][ T28] audit: type=1400 audit(1779998420.643:41875): avc: denied { map_create } for pid=22328 comm="syz.4.5035" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1022.037370][ T28] audit: type=1400 audit(1779998420.643:41876): avc: denied { map_read map_write } for pid=22328 comm="syz.4.5035" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1022.057372][ T28] audit: type=1400 audit(1779998420.643:41877): avc: denied { read } for pid=22328 comm="syz.4.5035" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1022.084649][T22335] netlink: 1348 bytes leftover after parsing attributes in process `syz.0.5036'. [ 1022.110758][T22314] veth1_to_bond: left allmulticast mode [ 1022.291723][ T28] audit: type=1400 audit(1779998420.643:41878): avc: denied { read open } for pid=22328 comm="syz.4.5035" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1022.354315][T22346] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1022.376399][T22346] audit: audit_lost=278 audit_rate_limit=0 audit_backlog_limit=64 [ 1022.399714][T15851] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1022.406393][T15851] audit: audit_lost=279 audit_rate_limit=0 audit_backlog_limit=64 [ 1022.444953][T22347] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(5) [ 1022.451520][T22347] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1022.498160][T22347] vhci_hcd vhci_hcd.0: Device attached [ 1022.574722][T22348] vhci_hcd: connection closed [ 1022.574999][ T6442] vhci_hcd vhci_hcd.7: stop threads [ 1022.592527][ T6442] vhci_hcd vhci_hcd.7: release socket [ 1022.616852][ T6442] vhci_hcd vhci_hcd.7: disconnect device [ 1022.661624][T15613] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1022.693199][T22354] tipc: Started in network mode [ 1022.698199][T22354] tipc: Node identity aaaaaaaaaa2a, cluster identity 4711 [ 1022.705503][T22354] tipc: Enabled bearer , priority 10 [ 1022.751395][T21831] net_ratelimit: 10 callbacks suppressed [ 1022.751419][T21831] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1022.771449][T21831] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1022.819613][T22360] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5039'. [ 1022.977848][T22362] loop4: detected capacity change from 0 to 128 [ 1022.984323][T22360] bond3: entered promiscuous mode [ 1023.110898][T22360] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1023.148092][T22362] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1023.161820][T22362] ext4 filesystem being mounted at /357/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1023.270960][T22354] EXT4-fs warning (device loop4): verify_group_input:137: Cannot add at group 9 (only 1 groups) [ 1023.347550][T21830] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1023.361958][T21830] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1023.975734][T21828] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1023.990116][T21828] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1024.015148][T22354] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1024.048446][T22354] bond3: (slave sit2): The slave device specified does not support setting the MAC address [ 1024.092999][T22354] bond3: (slave sit2): Error -95 calling set_mac_address [ 1024.138042][ T3402] tipc: Node number set to 8432298 [ 1024.225238][T15851] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1024.424766][T22382] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1024.622492][T22375] loop7: detected capacity change from 0 to 512 [ 1024.636490][T22375] EXT4-fs: Ignoring removed bh option [ 1024.639031][T21828] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1024.656410][T21828] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1024.663163][T22375] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 1024.690243][T22379] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1024.727241][T22375] EXT4-fs (loop7): 1 truncate cleaned up [ 1024.781327][T22375] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1024.915547][T22393] netlink: 'syz.6.5054': attribute type 8 has an invalid length. [ 1024.967697][T22393] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5054'. [ 1024.999178][T22393] bond0: entered promiscuous mode [ 1025.097563][T22393] bond0: left promiscuous mode [ 1025.114218][T13476] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1025.258624][T21830] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1025.273126][T21830] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1025.325489][T22414] netdevsim netdevsim7 netdevsim0: IPsec offload requires 128 bit authentication [ 1025.471053][T22422] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5065'. [ 1025.495934][T22422] veth0_to_bridge: entered promiscuous mode [ 1025.507472][T22420] loop2: detected capacity change from 0 to 512 [ 1025.509425][T22422] macvtap1: entered allmulticast mode [ 1025.533379][T22422] veth0_to_bridge: entered allmulticast mode [ 1025.551332][T22420] EXT4-fs: Ignoring removed mblk_io_submit option [ 1025.577151][T22420] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (43466!=33349) [ 1025.590869][T22422] veth0_to_bridge: left allmulticast mode [ 1025.615513][T22420] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e02c, mo2=0002] [ 1025.617361][T22422] veth0_to_bridge: left promiscuous mode [ 1025.638261][T22420] System zones: 1-12 [ 1025.662880][T22420] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1025.701976][T22420] EXT4-fs error (device loop2): ext4_read_inode_bitmap:167: comm syz.2.5064: Inode bitmap for bg 0 marked uninitialized [ 1025.738167][T22420] loop2: lost filesystem error report for type 5 error -117 [ 1025.739508][T22420] EXT4-fs (loop2): Remounting filesystem read-only [ 1025.746911][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 1025.746939][ C0] EXT4-fs (loop2): initial error at time 1779998424: ext4_read_inode_bitmap:167 [ 1025.746962][ C0] EXT4-fs (loop2): last error at time 1779998424: ext4_read_inode_bitmap:167 [ 1025.779736][T22420] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 1025.799865][T22420] EXT4-fs warning (device loop2): dx_probe:791: inode #2: lblock 0: comm syz.2.5064: error -117 reading directory block [ 1025.836505][T22420] EXT4-fs warning (device loop2): dx_probe:791: inode #2: lblock 0: comm syz.2.5064: error -117 reading directory block [ 1025.903652][T15613] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 1026.096037][T22443] loop2: detected capacity change from 0 to 256 [ 1026.220202][T22452] netlink: 84 bytes leftover after parsing attributes in process `syz.2.5075'. [ 1026.343778][T22455] netlink: 84 bytes leftover after parsing attributes in process `syz.6.5076'. [ 1026.369034][T22425] loop7: detected capacity change from 0 to 512 [ 1026.387718][T22425] EXT4-fs: Ignoring removed bh option [ 1026.402478][T22425] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 1026.428902][T22425] EXT4-fs (loop7): 1 truncate cleaned up [ 1026.442643][T22425] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1026.597264][T13476] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1026.957990][T22475] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5082'. [ 1026.988251][T22480] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1027.133003][T22488] tmpfs: Unknown parameter 'noswap$' [ 1027.198654][ T28] kauditd_printk_skb: 670 callbacks suppressed [ 1027.198673][ T28] audit: type=1400 audit(1779998425.750:42547): avc: denied { prog_load } for pid=22483 comm="syz.7.5086" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1027.227167][ T28] audit: type=1400 audit(1779998425.750:42548): avc: denied { bpf } for pid=22483 comm="syz.7.5086" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1027.308779][ T28] audit: type=1400 audit(1779998425.779:42549): avc: denied { prog_load } for pid=22483 comm="syz.7.5086" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1027.339437][T22491] loop7: detected capacity change from 0 to 512 [ 1027.349338][ T28] audit: type=1400 audit(1779998425.779:42550): avc: denied { bpf } for pid=22483 comm="syz.7.5086" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1027.369022][T22491] EXT4-fs: Ignoring removed bh option [ 1027.375709][ T28] audit: type=1400 audit(1779998425.797:42551): avc: denied { open } for pid=22483 comm="syz.7.5086" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 1027.557800][T22493] loop2: detected capacity change from 0 to 1024 [ 1027.570478][T22491] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 1027.582808][T22493] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 1027.675761][T22491] EXT4-fs (loop7): 1 truncate cleaned up [ 1027.682233][T22491] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1027.721460][T22493] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1028.168999][T21830] net_ratelimit: 8 callbacks suppressed [ 1028.169019][T21830] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1028.188970][T21830] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1028.230957][ T28] audit: type=1400 audit(1779998425.797:42552): avc: denied { perfmon } for pid=22483 comm="syz.7.5086" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1028.252164][ T28] audit: type=1400 audit(1779998425.797:42553): avc: denied { kernel } for pid=22483 comm="syz.7.5086" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 1028.271769][ T28] audit: type=1400 audit(1779998425.797:42554): avc: denied { write } for pid=22483 comm="syz.7.5086" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 1028.492995][ T28] audit: type=1400 audit(1779998425.797:42555): avc: denied { create } for pid=22483 comm="syz.7.5086" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1028.592473][ T28] audit: type=1400 audit(1779998425.881:42556): avc: denied { read write } for pid=22483 comm="syz.7.5086" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1028.828163][T13476] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1029.493736][T22508] loop4: detected capacity change from 0 to 1024 [ 1029.548031][T22504] batadv_slave_1: entered promiscuous mode [ 1029.555330][T21828] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1029.569619][T21828] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1029.825619][T22508] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 1030.123035][T22508] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1030.615324][T21828] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1030.629671][T21828] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1030.768652][T22517] netlink: 84 bytes leftover after parsing attributes in process `syz.7.5094'. [ 1030.790696][T22502] batadv_slave_1: left promiscuous mode [ 1030.797263][T15613] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1031.175567][T15851] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1031.268189][T21827] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1031.282538][T21827] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1031.785721][T22540] loop7: detected capacity change from 0 to 1024 [ 1031.830729][T22540] EXT4-fs (loop7): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 1031.880023][T21828] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1031.894373][T21828] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1031.931244][T22540] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1032.217651][T22541] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1032.570854][ T28] kauditd_printk_skb: 194 callbacks suppressed [ 1032.594825][ T28] audit: type=1400 audit(1779998430.774:42751): avc: denied { read write } for pid=15851 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1032.687477][ T28] audit: type=1400 audit(1779998430.774:42752): avc: denied { open } for pid=15851 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1032.721422][T22555] SET target dimension over the limit! [ 1032.812973][ T28] audit: type=1400 audit(1779998430.792:42753): avc: denied { ioctl } for pid=15851 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1032.948973][ T28] audit: type=1400 audit(1779998430.792:42754): avc: denied { sys_module } for pid=22548 comm="syz.6.5101" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1033.009938][T22558] pimreg: entered allmulticast mode [ 1033.036117][T22561] veth1_to_bond: entered allmulticast mode [ 1033.053721][ T28] audit: type=1400 audit(1779998430.792:42755): avc: denied { module_request } for pid=22548 comm="syz.6.5101" kmod="syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1033.097868][T22557] loop4: detected capacity change from 0 to 512 [ 1033.114731][T22558] pimreg: left allmulticast mode [ 1033.146320][ T28] audit: type=1400 audit(1779998430.961:42756): avc: denied { open } for pid=22553 comm="syz.4.5103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 1033.218655][ T28] audit: type=1400 audit(1779998430.961:42757): avc: denied { perfmon } for pid=22553 comm="syz.4.5103" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1033.254856][T22557] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 1033.275228][T22557] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002] [ 1033.290215][ T28] audit: type=1400 audit(1779998430.961:42758): avc: denied { kernel } for pid=22553 comm="syz.4.5103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 1033.319370][T22557] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1033.342008][T22557] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #13: comm syz.4.5103: iget: bad i_size value: 12154761577498 [ 1033.359148][ T28] audit: type=1400 audit(1779998430.961:42759): avc: denied { perfmon } for pid=22553 comm="syz.4.5103" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1033.393287][T22557] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1033.400533][T22557] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.5103: couldn't read orphan inode 13 (err -117) [ 1033.421652][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 1033.421674][ C0] EXT4-fs (loop4): initial error at time 1779998431: ext4_orphan_get:1397: inode 13 [ 1033.421706][ C0] EXT4-fs (loop4): last error at time 1779998431: ext4_orphan_get:1397: inode 13 [ 1033.475019][ T28] audit: type=1400 audit(1779998430.979:42760): avc: denied { create } for pid=22556 comm="syz.6.5104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1033.534583][T22557] loop4: lost filesystem error report for type 5 error -117 [ 1033.540237][T13476] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1033.567556][T22557] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1033.594671][T22557] EXT4-fs warning (device loop4): dx_probe:861: inode #2: comm syz.4.5103: dx entry: limit 65535 != root limit 120 [ 1033.606805][T22557] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.5103: Corrupt directory, running e2fsck is recommended [ 1033.635275][T22557] EXT4-fs warning (device loop4): dx_probe:861: inode #2: comm syz.4.5103: dx entry: limit 65535 != root limit 120 [ 1033.649184][T22557] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.5103: Corrupt directory, running e2fsck is recommended [ 1033.669100][T22556] veth1_to_bond: left allmulticast mode [ 1033.697326][T22557] EXT4-fs warning (device loop4): dx_probe:861: inode #2: comm syz.4.5103: dx entry: limit 65535 != root limit 120 [ 1033.709526][T22557] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.5103: Corrupt directory, running e2fsck is recommended [ 1033.808203][T15851] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1033.850079][T22575] netlink: 84 bytes leftover after parsing attributes in process `syz.6.5109'. [ 1033.908743][T22577] loop4: detected capacity change from 0 to 164 [ 1033.915276][T21827] net_ratelimit: 4 callbacks suppressed [ 1033.915295][T21827] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1033.935367][T21827] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1033.979310][T22577] program syz.4.5110 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1034.152422][T22591] loop4: detected capacity change from 0 to 512 [ 1034.192256][T22591] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #16: comm syz.4.5115: corrupted inode contents [ 1034.208716][T22591] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1034.208911][T22591] EXT4-fs error (device loop4): ext4_dirty_inode:6587: inode #16: comm syz.4.5115: mark_inode_dirty error [ 1034.218161][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 1034.218187][ C0] EXT4-fs (loop4): initial error at time 1779998432: ext4_do_update_inode:5690: inode 16 [ 1034.218231][ C0] EXT4-fs (loop4): last error at time 1779998432: ext4_do_update_inode:5690: inode 16 [ 1034.270947][T22591] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1034.271189][T22591] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #16: comm syz.4.5115: corrupted inode contents [ 1034.341841][T22591] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1034.342089][T22591] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #16: comm syz.4.5115: mark_inode_dirty error [ 1034.377893][T22591] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1034.379582][T22591] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #16: comm syz.4.5115: corrupted inode contents [ 1034.425791][T22591] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1034.427107][T22591] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 1034.469662][T22591] loop4: lost filesystem error report for type 5 error -117 [ 1034.470001][T22591] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #16: comm syz.4.5115: corrupted inode contents [ 1034.509485][T22591] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1034.510641][T22591] EXT4-fs error (device loop4): ext4_truncate:4690: inode #16: comm syz.4.5115: mark_inode_dirty error [ 1034.521243][T21828] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1034.545418][T21828] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1034.591999][T22591] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1034.607139][T22591] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 1034.658238][T22591] loop4: lost filesystem error report for type 5 error -117 [ 1034.664654][T22591] EXT4-fs (loop4): 1 truncate cleaned up [ 1034.677982][T21830] EXT4-fs error (device loop4): ext4_release_dquot:7070: comm kworker/u8:58: Failed to release dquot type 1 [ 1034.702657][T22608] SET target dimension over the limit! [ 1034.709917][T21830] loop4: lost filesystem error report for type 5 error -117 [ 1034.725262][T22591] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1034.776012][T22591] ext4 filesystem being mounted at /369/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1034.808833][T22591] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1034.973190][T22618] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5122'. [ 1035.002697][T22621] netlink: 84 bytes leftover after parsing attributes in process `syz.0.5124'. [ 1035.126099][T21818] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1035.140603][T21818] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1035.757000][T21827] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1035.771410][T21827] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1036.271561][T22648] loop7: detected capacity change from 0 to 512 [ 1036.289980][T22648] ext4: Unknown parameter 'obj_user' [ 1036.505156][T21828] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1036.519558][T21828] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1037.456919][T22656] netlink: 9 bytes leftover after parsing attributes in process `syz.2.5132'. [ 1037.875550][T22665] SET target dimension over the limit! [ 1037.922879][ T28] kauditd_printk_skb: 408 callbacks suppressed [ 1037.922895][ T28] audit: type=1400 audit(1779998435.778:43168): avc: denied { create } for pid=22666 comm="syz.7.5137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1037.930377][T22663] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 1037.993088][ T28] audit: type=1400 audit(1779998435.815:43169): avc: denied { create } for pid=22666 comm="syz.7.5137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1038.054017][T22670] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 1038.060707][T22670] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1038.065704][ T28] audit: type=1400 audit(1779998435.815:43170): avc: denied { prog_load } for pid=22669 comm="syz.2.5139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1038.093451][T22670] vhci_hcd vhci_hcd.0: Device attached [ 1038.120928][T22677] netlink: 84 bytes leftover after parsing attributes in process `syz.4.5140'. [ 1038.142717][ T28] audit: type=1400 audit(1779998435.815:43171): avc: denied { bpf } for pid=22669 comm="syz.2.5139" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1038.164314][T22679] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1038.189548][T22673] vhci_hcd: connection closed [ 1038.191303][T21828] vhci_hcd vhci_hcd.2: stop threads [ 1038.208611][ T28] audit: type=1400 audit(1779998435.834:43172): avc: denied { prog_load } for pid=22669 comm="syz.2.5139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1038.211345][T21828] vhci_hcd vhci_hcd.2: release socket [ 1038.290497][T21828] vhci_hcd vhci_hcd.2: disconnect device [ 1038.305155][ T28] audit: type=1400 audit(1779998435.834:43173): avc: denied { bpf } for pid=22669 comm="syz.2.5139" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1038.409054][ T28] audit: type=1400 audit(1779998435.834:43174): avc: denied { perfmon } for pid=22669 comm="syz.2.5139" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1038.513651][ T28] audit: type=1400 audit(1779998435.834:43175): avc: denied { read write } for pid=15851 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1039.424643][T22689] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1039.458749][T15851] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1039.660443][ T6442] net_ratelimit: 8 callbacks suppressed [ 1039.660459][ T6442] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1039.680579][ T6442] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1040.284816][T22701] loop2: detected capacity change from 0 to 764 [ 1040.931149][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1040.955911][T21818] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1040.970346][T21818] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1041.862977][T21826] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1041.877555][T21826] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1041.947185][T22719] loop4: detected capacity change from 0 to 256 [ 1042.335255][T22732] netlink: 84 bytes leftover after parsing attributes in process `syz.4.5156'. [ 1042.488812][T22743] netlink: 104 bytes leftover after parsing attributes in process `syz.7.5157'. [ 1042.713984][T22749] tipc: Started in network mode [ 1042.726435][T22750] loop7: detected capacity change from 0 to 512 [ 1042.739129][T22749] tipc: Node identity 2007ff, cluster identity 4711 [ 1042.747166][T22750] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 1043.296899][ T28] kauditd_printk_skb: 276 callbacks suppressed [ 1043.296922][ T28] audit: type=1400 audit(1779998440.782:43445): avc: denied { write } for pid=22745 comm="syz.2.5160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1043.338223][T21827] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1043.352577][T21827] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1043.365532][T22749] tipc: Node number set to 2099199 [ 1043.390027][ T28] audit: type=1400 audit(1779998440.895:43446): avc: denied { write } for pid=22745 comm="syz.2.5160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1043.442442][T22750] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4222: comm syz.7.5161: Allocating blocks 41-42 which overlap fs metadata [ 1043.460722][T22750] loop7: lost filesystem error report for type 5 error -117 [ 1043.464672][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 1043.478522][ C1] EXT4-fs (loop7): initial error at time 1779998440: ext4_mb_mark_diskspace_used:4222 [ 1043.488146][ C1] EXT4-fs (loop7): last error at time 1779998440: ext4_mb_mark_diskspace_used:4222 [ 1043.497913][ T28] audit: type=1400 audit(1779998440.932:43447): avc: denied { write } for pid=22745 comm="syz.2.5160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1043.509130][T22750] Quota error (device loop7): write_blk: dquota write failed [ 1043.521822][ T28] audit: type=1400 audit(1779998440.941:43448): avc: denied { write } for pid=22745 comm="syz.2.5160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1043.545421][ T28] audit: type=1400 audit(1779998440.997:43449): avc: denied { write } for pid=22745 comm="syz.2.5160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1043.566233][ T28] audit: type=1400 audit(1779998441.016:43450): avc: denied { write } for pid=22745 comm="syz.2.5160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1043.587970][ T28] audit: type=1400 audit(1779998441.044:43451): avc: denied { write } for pid=22745 comm="syz.2.5160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1043.600351][T22750] Quota error (device loop7): find_free_dqentry: Can't write quota data block 5 [ 1043.608309][ T28] audit: type=1400 audit(1779998441.063:43452): avc: denied { write } for pid=22745 comm="syz.2.5160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1043.636846][T22750] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4222: comm syz.7.5161: Allocating blocks 41-42 which overlap fs metadata [ 1043.650678][T22750] loop7: lost filesystem error report for type 5 error -117 [ 1043.652346][T22750] EXT4-fs error (device loop7): ext4_acquire_dquot:7034: comm syz.7.5161: Failed to acquire dquot type 1 [ 1043.671206][T22750] loop7: lost filesystem error report for type 5 error -117 [ 1043.712931][T22750] EXT4-fs error (device loop7): mb_free_blocks:2049: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 1043.742907][T22750] EXT4-fs error (device loop7): ext4_do_update_inode:5690: inode #12: comm syz.7.5161: corrupted inode contents [ 1043.803016][T22750] loop7: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 1043.803204][T22750] EXT4-fs error (device loop7): ext4_dirty_inode:6587: inode #12: comm syz.7.5161: mark_inode_dirty error [ 1043.860903][T22750] loop7: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 1043.862425][T22750] EXT4-fs error (device loop7): ext4_do_update_inode:5690: inode #12: comm syz.7.5161: corrupted inode contents [ 1043.892633][T22750] loop7: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 1043.892787][T22750] EXT4-fs error (device loop7): __ext4_ext_dirty:207: inode #12: comm syz.7.5161: mark_inode_dirty error [ 1043.956335][T22750] loop7: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 1043.956767][T22750] EXT4-fs error (device loop7): ext4_do_update_inode:5690: inode #12: comm syz.7.5161: corrupted inode contents [ 1043.977900][T21827] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1043.992256][T21827] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1044.024625][T22750] loop7: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 1044.038469][T22750] EXT4-fs error (device loop7) in ext4_orphan_del:303: Corrupt filesystem [ 1044.123410][T22750] loop7: lost filesystem error report for type 5 error -117 [ 1044.125012][T22750] EXT4-fs error (device loop7): ext4_do_update_inode:5690: inode #12: comm syz.7.5161: corrupted inode contents [ 1044.147909][T22772] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 1044.147909][T22772] The task syz.4.5168 (22772) triggered the difference, watch for misbehavior. [ 1044.239996][T22750] loop7: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 1044.240744][T22750] EXT4-fs error (device loop7): ext4_truncate:4690: inode #12: comm syz.7.5161: mark_inode_dirty error [ 1044.277816][T22750] loop7: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 1044.278314][T22750] EXT4-fs error (device loop7) in ext4_process_orphan:345: Corrupt filesystem [ 1044.309762][T22750] loop7: lost filesystem error report for type 5 error -117 [ 1044.334259][T22750] EXT4-fs (loop7): 1 truncate cleaned up [ 1044.347703][T22750] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1044.349966][T22772] loop4: detected capacity change from 0 to 8192 [ 1044.396605][T22772] vfat: Unknown parameter '0x0000000000000003' [ 1044.449314][T22781] netlink: 84 bytes leftover after parsing attributes in process `syz.0.5172'. [ 1044.596829][T13476] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1045.109263][T22799] loop4: detected capacity change from 0 to 512 [ 1045.128145][T22799] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 1045.136492][T21827] net_ratelimit: 2 callbacks suppressed [ 1045.136508][T21827] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1045.156500][T21827] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1045.191086][T22804] IPv6: addrconf: prefix option has invalid lifetime [ 1045.250046][T22793] loop7: detected capacity change from 0 to 512 [ 1045.296891][T22806] loop2: detected capacity change from 0 to 512 [ 1045.299047][T22793] EXT4-fs: Ignoring removed bh option [ 1045.323277][T22793] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 1045.336269][T22806] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 1045.344220][T22806] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002] [ 1045.352439][T22806] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1045.376496][T22793] EXT4-fs (loop7): 1 truncate cleaned up [ 1045.391270][T22806] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #13: comm syz.2.5182: iget: bad i_size value: 12154761577498 [ 1045.416299][T22806] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1045.421795][T22806] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.5182: couldn't read orphan inode 13 (err -117) [ 1045.431745][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 1045.431769][ C0] EXT4-fs (loop2): initial error at time 1779998442: ext4_orphan_get:1397: inode 13 [ 1045.431801][ C0] EXT4-fs (loop2): last error at time 1779998442: ext4_orphan_get:1397: inode 13 [ 1045.505723][T22793] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1045.534401][T22806] loop2: lost filesystem error report for type 5 error -117 [ 1045.575650][T22806] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1045.577718][T22809] loop4: detected capacity change from 0 to 512 [ 1045.605150][T22806] EXT4-fs warning (device loop2): dx_probe:861: inode #2: comm syz.2.5182: dx entry: limit 65535 != root limit 120 [ 1045.617385][T22806] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.5182: Corrupt directory, running e2fsck is recommended [ 1045.659535][T22806] EXT4-fs warning (device loop2): dx_probe:861: inode #2: comm syz.2.5182: dx entry: limit 65535 != root limit 120 [ 1045.669760][T22809] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 1045.671747][T22806] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.5182: Corrupt directory, running e2fsck is recommended [ 1045.709644][T22809] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002] [ 1045.714485][T22806] EXT4-fs warning (device loop2): dx_probe:861: inode #2: comm syz.2.5182: dx entry: limit 65535 != root limit 120 [ 1045.733236][T22806] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.5182: Corrupt directory, running e2fsck is recommended [ 1045.733950][T22809] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1045.783502][T13476] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1045.791559][T21818] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1045.806871][T21818] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1045.825287][T22809] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #13: comm syz.4.5184: iget: bad i_size value: 12154761577498 [ 1045.838076][T22809] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1045.838393][T22809] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.5184: couldn't read orphan inode 13 (err -117) [ 1045.859360][T22809] loop4: lost filesystem error report for type 5 error -117 [ 1045.886460][T22809] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1045.924289][T15613] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1046.051144][T22809] EXT4-fs warning (device loop4): dx_probe:861: inode #2: comm syz.4.5184: dx entry: limit 65535 != root limit 120 [ 1046.063267][T22809] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.5184: Corrupt directory, running e2fsck is recommended [ 1046.206932][T15851] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1046.347363][T22826] loop4: detected capacity change from 0 to 1024 [ 1046.380776][T21818] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1046.395128][T21818] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1046.438452][T22826] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1046.657272][T22833] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5186'. [ 1046.659914][T22825] EXT4-fs (loop4): resizing filesystem from 512 to 0 blocks [ 1046.700225][T22825] EXT4-fs warning (device loop4): ext4_resize_fs:2041: can't shrink FS - resize aborted [ 1046.989238][T15851] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1047.015102][T21827] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1047.029459][T21827] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1047.582284][T21826] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1047.993618][T22848] veth1: entered promiscuous mode [ 1048.023349][T22848] veth1: entered allmulticast mode [ 1048.757973][ T28] kauditd_printk_skb: 501 callbacks suppressed [ 1048.757992][ T28] audit: type=1400 audit(1779998445.918:43952): avc: denied { execmem } for pid=22854 comm="syz.0.5197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1048.993716][ T28] audit: type=1400 audit(1779998446.142:43953): avc: denied { map_create } for pid=22854 comm="syz.0.5197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1049.057443][ T28] audit: type=1400 audit(1779998446.142:43954): avc: denied { perfmon } for pid=22854 comm="syz.0.5197" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1049.132991][ T28] audit: type=1400 audit(1779998446.170:43955): avc: denied { map_create } for pid=22854 comm="syz.0.5197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1049.199050][ T28] audit: type=1400 audit(1779998446.170:43956): avc: denied { map_read map_write } for pid=22854 comm="syz.0.5197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1049.268887][ T28] audit: type=1400 audit(1779998446.170:43957): avc: denied { read } for pid=22854 comm="syz.0.5197" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1049.355365][ T28] audit: type=1400 audit(1779998446.170:43958): avc: denied { read open } for pid=22854 comm="syz.0.5197" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1049.402931][ T28] audit: type=1400 audit(1779998446.170:43959): avc: denied { ioctl } for pid=22854 comm="syz.0.5197" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1050.446624][ T28] audit: type=1400 audit(1779998446.180:43960): avc: denied { allowed } for pid=22854 comm="syz.0.5197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1050.477744][ T28] audit: type=1400 audit(1779998446.189:43961): avc: denied { create } for pid=22854 comm="syz.0.5197" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1050.671932][T22871] netlink: 11 bytes leftover after parsing attributes in process `syz.7.5201'. [ 1050.958976][ T6442] net_ratelimit: 9 callbacks suppressed [ 1050.958993][ T6442] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1050.979038][ T6442] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1051.579882][T22886] loop4: detected capacity change from 0 to 512 [ 1051.600695][T21826] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1051.615073][T21826] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1051.680036][T22883] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5205'. [ 1051.725099][T22886] EXT4-fs: dax option not supported [ 1051.935315][T22891] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(5) [ 1051.941944][T22891] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1051.974702][T22891] vhci_hcd vhci_hcd.0: Device attached [ 1051.987391][T22897] vhci_hcd: connection closed [ 1051.988268][T21826] vhci_hcd vhci_hcd.7: stop threads [ 1051.998315][T21826] vhci_hcd vhci_hcd.7: release socket [ 1052.003727][T21826] vhci_hcd vhci_hcd.7: disconnect device [ 1052.091129][T22903] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5211'. [ 1052.305919][ T6442] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1052.320265][ T6442] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1053.170720][ T6442] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1053.185072][ T6442] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1054.213476][T21818] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1054.227883][T21818] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1054.243024][ T28] kauditd_printk_skb: 284 callbacks suppressed [ 1054.243042][ T28] audit: type=1400 audit(1779998450.931:44246): avc: denied { execmem } for pid=22931 comm="syz.2.5220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1054.396540][T22937] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1054.423273][ T28] audit: type=1400 audit(1779998451.212:44247): avc: denied { open } for pid=22931 comm="syz.2.5220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 1054.513740][ T28] audit: type=1400 audit(1779998451.212:44248): avc: denied { perfmon } for pid=22931 comm="syz.2.5220" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1054.534826][ T28] audit: type=1400 audit(1779998451.240:44249): avc: denied { kernel } for pid=22931 comm="syz.2.5220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 1054.554588][ T28] audit: type=1400 audit(1779998451.240:44250): avc: denied { perfmon } for pid=22931 comm="syz.2.5220" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1054.575890][ T28] audit: type=1400 audit(1779998451.268:44251): avc: denied { create } for pid=22931 comm="syz.2.5220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1054.614154][ T28] audit: type=1400 audit(1779998451.268:44252): avc: denied { prog_load } for pid=22931 comm="syz.2.5220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1054.628512][T22940] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1054.633552][ T28] audit: type=1400 audit(1779998451.268:44253): avc: denied { bpf } for pid=22931 comm="syz.2.5220" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1054.660794][ T28] audit: type=1400 audit(1779998451.268:44254): avc: denied { prog_load } for pid=22931 comm="syz.2.5220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1054.680175][ T28] audit: type=1400 audit(1779998451.268:44255): avc: denied { perfmon } for pid=22931 comm="syz.2.5220" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1055.132385][T21818] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1055.197720][T21818] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1055.280993][T21818] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1055.349249][T21818] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1055.448699][T21818] bridge_slave_1: left allmulticast mode [ 1055.455823][T21818] bridge_slave_1: left promiscuous mode [ 1055.463062][T21818] bridge0: port 2(bridge_slave_1) entered disabled state [ 1055.483225][T21818] batman_adv: batadv0: Interface deactivated: gretap1 [ 1055.537016][T21818] batman_adv: batadv0: Removing interface: gretap1 [ 1055.560437][T21818] bond5 (unregistering): (slave geneve2): Releasing active interface [ 1055.685752][T22963] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 1055.692408][T22963] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1055.705251][T21818] bond1 (unregistering): Released all slaves [ 1055.716550][T22963] vhci_hcd vhci_hcd.0: Device attached [ 1055.735317][T21818] bond0 (unregistering): (slave veth3): Releasing active interface [ 1055.747894][T21818] bond0 (unregistering): Released all slaves [ 1055.759036][T22964] vhci_hcd: connection closed [ 1055.760135][T21826] vhci_hcd vhci_hcd.0: stop threads [ 1055.771580][T21826] vhci_hcd vhci_hcd.0: release socket [ 1055.782631][T21826] vhci_hcd vhci_hcd.0: disconnect device [ 1055.792114][T21818] bond2 (unregistering): Released all slaves [ 1055.810364][T21818] bond3 (unregistering): Released all slaves [ 1055.836706][T21818] bond4 (unregistering): Released all slaves [ 1055.851131][T21818] bond5 (unregistering): Released all slaves [ 1055.884334][T21818] bond6 (unregistering): Released all slaves [ 1055.894620][T21818] bond7 (unregistering): Released all slaves [ 1055.922416][T21818] bond8 (unregistering): (slave Q6`Ҙ): Releasing backup interface [ 1055.944299][T21818] bond8 (unregistering): (slave Q6`Ҙ): last VLAN challenged slave left bond - VLAN blocking is removed [ 1055.965550][T21818] bond8 (unregistering): Released all slaves [ 1055.991127][T21818] bond9 (unregistering): Released all slaves [ 1056.057267][T21818] tipc: Left network mode [ 1056.079282][T22949] bridge0: port 1(bridge_slave_0) entered blocking state [ 1056.096795][T22949] bridge0: port 1(bridge_slave_0) entered disabled state [ 1056.122604][T22949] bridge_slave_0: entered allmulticast mode [ 1056.129297][T22949] bridge_slave_0: entered promiscuous mode [ 1056.144396][T21818] batadv0: left promiscuous mode [ 1056.154452][T21818] team0: left promiscuous mode [ 1056.159756][T21818] team_slave_0: left promiscuous mode [ 1056.177241][T21818] team_slave_1: left promiscuous mode [ 1056.216664][T21818] hsr_slave_0: left promiscuous mode [ 1056.224605][T22975] netlink: 'syz.7.5229': attribute type 1 has an invalid length. [ 1056.240777][T21818] hsr_slave_1: left promiscuous mode [ 1056.254260][T21818] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1056.280039][T21818] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1056.297139][T21818] dummy0: left allmulticast mode [ 1056.302311][T21818] dummy0: left promiscuous mode [ 1056.335507][T21818] pim6reg (unregistering): left allmulticast mode [ 1056.479027][T21818] team0 (unregistering): Port device team_slave_1 removed [ 1056.490505][T21818] team0 (unregistering): Port device team_slave_0 removed [ 1056.508603][T21827] net_ratelimit: 6 callbacks suppressed [ 1056.508620][T21827] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1056.528629][T21827] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1056.636171][T22949] bridge0: port 2(bridge_slave_1) entered blocking state [ 1056.672601][T22949] bridge0: port 2(bridge_slave_1) entered disabled state [ 1056.682535][T22949] bridge_slave_1: entered allmulticast mode [ 1056.701947][T22949] bridge_slave_1: entered promiscuous mode [ 1056.740255][T22949] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1056.768207][T22949] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1056.826092][T22949] team0: Port device team_slave_0 added [ 1056.853546][T22949] team0: Port device team_slave_1 added [ 1056.907190][T22991] loop4: detected capacity change from 0 to 512 [ 1056.925501][T22949] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1056.949304][T22949] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1056.979056][T22991] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 1056.997355][T22991] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002] [ 1057.014252][T22991] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1057.028257][T22949] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1057.041556][T22991] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #13: comm syz.4.5232: iget: bad i_size value: 12154761577498 [ 1057.072812][T21818] IPVS: stop unused estimator thread 0... [ 1057.100982][T22991] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1057.101193][T22991] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.5232: couldn't read orphan inode 13 (err -117) [ 1057.110450][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 1057.110470][ C0] EXT4-fs (loop4): initial error at time 1779998453: ext4_orphan_get:1397: inode 13 [ 1057.110495][ C0] EXT4-fs (loop4): last error at time 1779998453: ext4_orphan_get:1397: inode 13 [ 1057.150043][ T6442] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1057.164441][ T6442] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1057.191948][T22949] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1057.198994][T22949] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1057.232443][T22991] loop4: lost filesystem error report for type 5 error -117 [ 1057.233048][T22991] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1057.268129][T22949] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1057.282881][T22991] EXT4-fs warning (device loop4): dx_probe:861: inode #2: comm syz.4.5232: dx entry: limit 65535 != root limit 120 [ 1057.312703][T22991] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.5232: Corrupt directory, running e2fsck is recommended [ 1057.351992][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1057.352041][T22949] hsr_slave_0: entered promiscuous mode [ 1057.401628][T15851] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1057.406647][T22949] hsr_slave_1: entered promiscuous mode [ 1057.422444][T22949] debugfs: 'hsr0' already exists in 'hsr' [ 1057.428254][T22949] Cannot create hsr debugfs directory [ 1057.599721][T23008] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5238'. [ 1057.780299][T23017] loop4: detected capacity change from 0 to 128 [ 1057.790184][ T6442] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1057.804664][ T6442] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1057.828273][T23017] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1057.935638][T23017] ext4 filesystem being mounted at /392/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1058.060855][T22949] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1058.086345][T22949] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1058.097562][T15851] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1058.111176][T22949] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1058.131336][T22949] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1058.150807][T22949] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1058.172885][T22949] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1058.195069][T22949] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1058.206429][T23021] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 1058.213093][T23021] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1058.227298][T22949] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1058.245402][T23021] vhci_hcd vhci_hcd.0: Device attached [ 1058.268820][T23022] vhci_hcd: connection closed [ 1058.269072][T21818] vhci_hcd vhci_hcd.4: stop threads [ 1058.282767][T21818] vhci_hcd vhci_hcd.4: release socket [ 1058.289539][T21818] vhci_hcd vhci_hcd.4: disconnect device [ 1058.304250][T23031] FAULT_INJECTION: forcing a failure. [ 1058.304250][T23031] name failslab, interval 1, probability 0, space 0, times 0 [ 1058.336304][T23031] CPU: 1 UID: 0 PID: 23031 Comm: syz.2.5241 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 1058.336348][T23031] Tainted: [W]=WARN [ 1058.336403][T23031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1058.336420][T23031] Call Trace: [ 1058.336427][T23031] [ 1058.336437][T23031] __dump_stack+0x1d/0x30 [ 1058.336465][T23031] dump_stack_lvl+0x95/0xd0 [ 1058.336485][T23031] dump_stack+0x15/0x1b [ 1058.336503][T23031] should_fail_ex+0x263/0x280 [ 1058.336562][T23031] should_failslab+0x8c/0xb0 [ 1058.336597][T23031] kmem_cache_alloc_lru_noprof+0x6c/0x400 [ 1058.336649][T23031] ? __d_alloc+0x37/0x340 [ 1058.336772][T23031] __d_alloc+0x37/0x340 [ 1058.336911][T23031] d_alloc_pseudo+0x1e/0x80 [ 1058.336944][T23031] alloc_file_pseudo+0x91/0x190 [ 1058.336999][T23031] ? security_inode_alloc+0x69/0x100 [ 1058.337152][T23031] sock_alloc_file+0x9c/0x1e0 [ 1058.337232][T23031] do_accept+0x1e3/0x390 [ 1058.337258][T23031] __sys_accept4+0xbe/0x170 [ 1058.337323][T23031] __x64_sys_accept4+0x51/0x60 [ 1058.337393][T23031] x64_sys_call+0x48d/0x3020 [ 1058.337423][T23031] do_syscall_64+0x12c/0x3b0 [ 1058.337465][T23031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1058.337557][T23031] RIP: 0033:0x7f9f1dc9ce59 [ 1058.337580][T23031] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1058.337604][T23031] RSP: 002b:00007f9f1c6ef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 1058.337631][T23031] RAX: ffffffffffffffda RBX: 00007f9f1df15fa0 RCX: 00007f9f1dc9ce59 [ 1058.337673][T23031] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 1058.337686][T23031] RBP: 00007f9f1c6ef090 R08: 0000000000000000 R09: 0000000000000000 [ 1058.337698][T23031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1058.337710][T23031] R13: 00007f9f1df16038 R14: 00007f9f1df15fa0 R15: 00007ffefe856848 [ 1058.337786][T23031] [ 1058.550463][T22949] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1058.558451][ T6442] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1058.571204][T22949] 8021q: adding VLAN 0 to HW filter on device team0 [ 1058.572919][ T6442] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1058.598553][T21818] bridge0: port 1(bridge_slave_0) entered blocking state [ 1058.605736][T21818] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1058.630728][T21818] bridge0: port 2(bridge_slave_1) entered blocking state [ 1058.637946][T21818] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1058.824280][T22949] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1059.012143][T23042] netem: unknown loss type 0 [ 1059.017194][T23042] netem: change failed [ 1059.223423][T21818] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1059.237843][T21818] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1059.318022][T23045] loop7: detected capacity change from 0 to 512 [ 1059.410354][T23045] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 1059.465465][T23045] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002] [ 1059.515997][T23045] EXT4-fs (loop7): orphan cleanup on readonly fs [ 1059.560836][T23045] EXT4-fs error (device loop7): ext4_orphan_get:1397: inode #13: comm syz.7.5246: iget: bad i_size value: 12154761577498 [ 1059.679147][T23045] loop7: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1059.680627][T23045] EXT4-fs error (device loop7): ext4_orphan_get:1402: comm syz.7.5246: couldn't read orphan inode 13 (err -117) [ 1059.689858][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 1059.689891][ C0] EXT4-fs (loop7): initial error at time 1779998456: ext4_orphan_get:1397: inode 13 [ 1059.689926][ C0] EXT4-fs (loop7): last error at time 1779998456: ext4_orphan_get:1397: inode 13 [ 1059.868192][ T28] kauditd_printk_skb: 299 callbacks suppressed [ 1059.868313][ T28] audit: type=1400 audit(1779998456.310:44555): avc: denied { ioctl } for pid=23038 comm="syz.2.5244" path="socket:[74271]" dev="sockfs" ino=74271 ioctlcmd=0x671f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1059.977438][T23045] loop7: lost filesystem error report for type 5 error -117 [ 1059.978940][T23045] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1060.085111][ T28] audit: type=1400 audit(1779998456.329:44556): avc: denied { module_request } for pid=22949 comm="syz-executor" kmod="netdev-nicvf0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1060.293188][ T28] audit: type=1400 audit(1779998456.357:44557): avc: denied { sys_module } for pid=22949 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1060.437032][ T28] audit: type=1400 audit(1779998456.357:44558): avc: denied { module_request } for pid=22949 comm="syz-executor" kmod="nicvf0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1060.572910][ T28] audit: type=1400 audit(1779998456.497:44559): avc: denied { open } for pid=23050 comm="syz.4.5247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 1060.703539][ T28] audit: type=1400 audit(1779998456.506:44560): avc: denied { perfmon } for pid=23050 comm="syz.4.5247" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1060.751596][ T28] audit: type=1400 audit(1779998456.544:44561): avc: denied { ioctl } for pid=23038 comm="syz.2.5244" path="socket:[74271]" dev="sockfs" ino=74271 ioctlcmd=0x89a1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1060.777287][ T28] audit: type=1400 audit(1779998456.553:44562): avc: denied { kernel } for pid=23050 comm="syz.4.5247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 1060.804478][ T28] audit: type=1400 audit(1779998456.563:44563): avc: denied { perfmon } for pid=23050 comm="syz.4.5247" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1060.976860][ T28] audit: type=1400 audit(1779998456.609:44564): avc: denied { mount } for pid=23044 comm="syz.7.5246" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1061.141134][T13476] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1061.357271][T23058] loop2: detected capacity change from 0 to 1024 [ 1061.402545][T23058] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 1061.496213][T23058] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1062.322560][T21818] net_ratelimit: 8 callbacks suppressed [ 1062.322579][T21818] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1062.342512][T21818] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1062.402900][T23069] loop7: detected capacity change from 0 to 512 [ 1062.467746][T23069] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1062.517759][T23069] ext4 filesystem being mounted at /539/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1062.580034][T23069] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5248'. [ 1062.602229][T23067] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5251'. [ 1062.685319][T13476] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1062.746957][T23078] loop4: detected capacity change from 0 to 512 [ 1062.764824][T23078] ext3: Unknown parameter 'smackfsroot' [ 1062.918690][T15613] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1063.041945][ T6442] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1063.056383][ T6442] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1063.136826][T22949] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1063.155375][T23091] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5254'. [ 1063.178813][T23091] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1063.597503][T23099] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1063.607262][T23099] block device autoloading is deprecated and will be removed. [ 1063.670601][T21830] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1063.684994][T21830] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1063.750457][T23099] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5257'. [ 1063.822822][T23114] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(5) [ 1063.829474][T23114] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1063.869829][T23114] vhci_hcd vhci_hcd.0: Device attached [ 1063.877606][T22949] veth0_vlan: entered promiscuous mode [ 1063.885564][T23117] vhci_hcd: connection closed [ 1063.886571][T21830] vhci_hcd vhci_hcd.7: stop threads [ 1063.895657][T22949] veth1_vlan: entered promiscuous mode [ 1063.926734][T22949] veth0_macvtap: entered promiscuous mode [ 1063.934536][T22949] veth1_macvtap: entered promiscuous mode [ 1063.936309][T21830] vhci_hcd vhci_hcd.7: release socket [ 1063.952221][T22949] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1063.961262][T21830] vhci_hcd vhci_hcd.7: disconnect device [ 1063.975463][T22949] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1064.006668][T21826] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1064.016059][T21826] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1064.030864][T21826] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1064.048447][T21826] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1064.134747][T23121] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5260'. [ 1064.164804][T23121] netlink: 76 bytes leftover after parsing attributes in process `syz.4.5260'. [ 1064.270338][ T6442] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1064.285065][ T6442] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1064.411177][T23135] loop2: detected capacity change from 0 to 512 [ 1064.455047][T23135] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1064.482191][T23135] ext4 filesystem being mounted at /368/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1064.595868][T15613] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1064.812040][T23161] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5268'. [ 1064.911219][T21830] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1065.363593][T23175] loop7: detected capacity change from 0 to 4096 [ 1065.372686][ T28] kauditd_printk_skb: 434 callbacks suppressed [ 1065.372701][ T28] audit: type=1400 audit(1779998461.286:44999): avc: denied { map_create } for pid=23164 comm="syz.7.5270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1065.449428][T23175] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1065.809613][ T28] audit: type=1400 audit(1779998461.286:45000): avc: denied { perfmon } for pid=23164 comm="syz.7.5270" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1065.809657][ T28] audit: type=1400 audit(1779998461.296:45001): avc: denied { map_create } for pid=23164 comm="syz.7.5270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1065.809746][ T28] audit: type=1400 audit(1779998461.296:45002): avc: denied { map_read map_write } for pid=23164 comm="syz.7.5270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1065.809778][ T28] audit: type=1400 audit(1779998461.296:45003): avc: denied { prog_load } for pid=23164 comm="syz.7.5270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1065.809808][ T28] audit: type=1400 audit(1779998461.296:45004): avc: denied { bpf } for pid=23164 comm="syz.7.5270" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1065.809850][ T28] audit: type=1400 audit(1779998461.296:45005): avc: denied { perfmon } for pid=23164 comm="syz.7.5270" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1065.809882][ T28] audit: type=1400 audit(1779998461.296:45006): avc: denied { prog_run } for pid=23164 comm="syz.7.5270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1065.809913][ T28] audit: type=1400 audit(1779998461.455:45007): avc: denied { read write } for pid=23164 comm="syz.7.5270" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1065.809949][ T28] audit: type=1400 audit(1779998461.455:45008): avc: denied { open } for pid=23164 comm="syz.7.5270" path="/dev/loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1065.984454][T13476] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1065.987082][T23182] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1066.317742][T23187] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(5) [ 1066.317846][T23187] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1066.319736][T23187] vhci_hcd vhci_hcd.0: Device attached [ 1066.409824][T23191] netlink: 9 bytes leftover after parsing attributes in process `syz.0.5275'. [ 1066.439789][T23191] netlink: 9 bytes leftover after parsing attributes in process `syz.0.5275'. [ 1066.482565][T23192] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5275'. [ 1066.545836][ T4843] usb 15-1: new high-speed USB device number 5 using vhci_hcd [ 1066.712691][T23188] vhci_hcd: connection reset by peer [ 1066.713005][T21823] vhci_hcd vhci_hcd.7: stop threads [ 1066.713057][T21823] vhci_hcd vhci_hcd.7: release socket [ 1066.713090][T21823] vhci_hcd vhci_hcd.7: disconnect device [ 1066.759604][ T2981] ================================================================== [ 1066.759649][ T2981] BUG: KCSAN: data-race in ktime_get_ts64 / timekeeping_update_from_shadow [ 1066.759707][ T2981] [ 1066.759712][ T2981] write to 0xffffffff893ab488 of 304 bytes by interrupt on cpu 1: [ 1066.759732][ T2981] timekeeping_update_from_shadow+0x40d/0x440 [ 1066.759764][ T2981] __timekeeping_advance+0xa5d/0xc10 [ 1066.759782][ T2981] update_wall_time+0x21/0x50 [ 1066.759816][ T2981] tick_do_update_jiffies64+0x169/0x1c0 [ 1066.759857][ T2981] tick_nohz_handler+0x8d/0x3d0 [ 1066.759906][ T2981] __hrtimer_run_queues+0x276/0x4f0 [ 1066.759936][ T2981] hrtimer_interrupt+0x261/0x850 [ 1066.759964][ T2981] __sysvec_apic_timer_interrupt+0x5f/0x1c0 [ 1066.759987][ T2981] sysvec_apic_timer_interrupt+0x6f/0x80 [ 1066.760012][ T2981] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1066.760035][ T2981] _raw_spin_unlock_irqrestore+0x1a/0x30 [ 1066.760060][ T2981] __unix_dgram_recvmsg+0x3a7/0x870 [ 1066.760100][ T2981] unix_dgram_recvmsg+0x7e/0x90 [ 1066.760126][ T2981] sock_recvmsg_nosec+0xc2/0xf0 [ 1066.760163][ T2981] ____sys_recvmsg+0x26f/0x280 [ 1066.760195][ T2981] ___sys_recvmsg+0x11f/0x3b0 [ 1066.760235][ T2981] do_recvmmsg+0x1ef/0x560 [ 1066.760259][ T2981] __x64_sys_recvmmsg+0xe5/0x170 [ 1066.760284][ T2981] x64_sys_call+0x80f/0x3020 [ 1066.760309][ T2981] do_syscall_64+0x12c/0x3b0 [ 1066.760342][ T2981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1066.760362][ T2981] [ 1066.760368][ T2981] read to 0xffffffff893ab498 of 8 bytes by task 2981 on cpu 0: [ 1066.760383][ T2981] ktime_get_ts64+0xf0/0x350 [ 1066.760416][ T2981] select_estimate_accuracy+0x6f/0x1d0 [ 1066.760458][ T2981] do_epoll_wait+0x184/0x950 [ 1066.760489][ T2981] __x64_sys_epoll_wait+0x15e/0x190 [ 1066.760514][ T2981] x64_sys_call+0x273e/0x3020 [ 1066.760537][ T2981] do_syscall_64+0x12c/0x3b0 [ 1066.760564][ T2981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1066.760584][ T2981] [ 1066.760588][ T2981] value changed: 0x00000223f57b81bd -> 0x00000223f81ae497 [ 1066.760603][ T2981] [ 1066.760609][ T2981] Reported by Kernel Concurrency Sanitizer on: [ 1066.760627][ T2981] CPU: 0 UID: 0 PID: 2981 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(lazy) [ 1066.760662][ T2981] Tainted: [W]=WARN [ 1066.760669][ T2981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1066.760682][ T2981] ================================================================== [ 1067.013229][T23161] loop4: detected capacity change from 0 to 512 [ 1067.031877][T23161] EXT4-fs: Ignoring removed bh option [ 1067.247635][T23161] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 1067.294536][T23161] EXT4-fs (loop4): 1 truncate cleaned up [ 1067.300945][T23161] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1067.399754][T15851] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1068.031772][T21826] net_ratelimit: 9 callbacks suppressed [ 1068.031794][T21826] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1068.052120][T21826] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1068.310211][ C0] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:20 [ 1068.406516][ C1] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:1a [ 1068.609048][ T6442] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1068.623399][ T6442] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1069.176842][T21826] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1069.192240][T21826] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1069.742258][T21826] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1069.757023][T21826] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1072.051413][ T4843] vhci_hcd vhci_hcd.7: vhci_device speed not set [ 1073.580250][T21818] net_ratelimit: 14 callbacks suppressed [ 1073.580271][T21818] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1073.600367][T21818] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1074.159813][T21818] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1074.174253][T21818] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1074.724225][T21818] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1074.738644][T21818] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1075.055633][ C1] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:1a [ 1075.290688][T21818] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1075.305128][T21818] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1075.857304][T21818] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a