last executing test programs: 53.868595701s ago: executing program 3 (id=332): r0 = openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) setresuid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff) write$UHID_CREATE(r0, &(0x7f0000000240)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000040)=""/2, 0x2}}, 0x11c) 53.867230971s ago: executing program 3 (id=334): mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0xf132, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000018) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000018) r1 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0x6, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a80000000090a010400000000000000000ae7ff040900020073797a310000000008000a40ffffffff0900010073797a3100000000080005400000000d3c00128014000180090001006c6173740000000004000280140001800c000100636f756e7465720004000280fb0001800a000100696e6e657200000008000340000001"], 0xa8}, 0x1, 0x0, 0x0, 0x4044050}, 0x4000000) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a80000000090a010400000000000000000ae7ff040900020073797a310000000008000a40ffffffff0900010073797a3100000000080005400000000d3c00128014000180090001006c6173740000000004000280140001800c000100636f756e7465720004000280fb0001800a000100696e6e657200000008000340000001"], 0xa8}, 0x1, 0x0, 0x0, 0x4044050}, 0x4000000) r2 = socket(0x840000000002, 0x80000, 0x100) syz_open_dev$loop(&(0x7f0000000040), 0x40000000008d, 0x20001) (async) r3 = syz_open_dev$loop(&(0x7f0000000040), 0x40000000008d, 0x20001) ioctl$LOOP_GET_STATUS(r3, 0x4c03, &(0x7f0000000200)) (async) ioctl$LOOP_GET_STATUS(r3, 0x4c03, &(0x7f0000000200)) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10) sendmmsg$inet(r2, &(0x7f0000000780)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000027c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x2}}], 0x18}}], 0x1, 0x0) 53.764243558s ago: executing program 3 (id=336): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x8080, &(0x7f0000000040)={[{@jqfmt_vfsv0}, {@journal_dev}]}, 0x80, 0x63c, &(0x7f0000001bc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x100, 0x0) open_by_handle_at(r0, &(0x7f0000000240)=@reiserfs_2={0x8, 0x2, {0xb}}, 0x1) 53.624461522s ago: executing program 3 (id=337): socketpair$tipc(0x1e, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x2220c0, 0x0, 0x6, 0x0, &(0x7f0000000000)=0x5}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) poll(0x0, 0x0, 0x9) syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000000)='./file1\x00', 0x40, &(0x7f0000000940)={[{@noblock_validity}, {@auto_da_alloc}, {@noacl}, {@noinit_itable}, {@inlinecrypt}, {@jqfmt_vfsv0}, {@sb={'sb', 0x3d, 0x2}}, {@noquota}, {@mb_optimize_scan}, {@usrquota}, {@dioread_nolock}]}, 0xfd, 0x5a3, &(0x7f00000002c0)="$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") mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x1, 0x8}, &(0x7f00000003c0)=0x90) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="80400100000001000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000639810afd9f68e7e2d378816ddc963c93e558d5c5285d55158f162781b3bb804a02c1409529deb529f5de6"], 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0xc, 0x8b112, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={0x0, 0x5}, 0x105902, 0x10003, 0x33f8, 0x1, 0x8, 0x20007, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x80001, 0x0) 52.534077015s ago: executing program 3 (id=342): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0x74, r1, {0x0, 0x7}, {0x0, 0x4}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020200090d0000000000000000000000030006000000000002000000ac1414bb000000000000000002000100000000000000000200000000030005000000000002000000ac1414aa000000000000000001001500000000000100140000000000010016"], 0x68}, 0x1, 0x7}, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0x0}, 0x10) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x4, 0x0, 0x0, 0x7, 0x34f0, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x30000000000000, 0xf}, 0x117e20, 0x10004, 0x30da, 0x5, 0x2, 0x5, 0xb, 0x0, 0x0, 0x0, 0x20080008}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r3 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffa}, 0xffffffffffffff04) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000100)={0x4, 0x1d, 0x4, 0x4, "49c1732dfe57b2f39937d46fe0dfc0f37e29972e33103be64f5f9b4ccacafdd8"}) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_udp_int(r3, 0x11, 0xb, &(0x7f0000000000), 0x0) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) 52.233245625s ago: executing program 3 (id=347): bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext={0x288}, 0xa216, 0x6, 0x11000, 0x4, 0x9484, 0x2001, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) ioctl$FIONCLEX(r0, 0x5450) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreq(r2, 0x0, 0x24, &(0x7f00000000c0)={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback}, 0x8) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) syz_emit_ethernet(0x3e, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd606410a600080000fc020000000000000000000000000000ff0200000000000000000000000000212900000000000000"], 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'team_slave_1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd00001100"], 0xfce) r4 = syz_io_uring_setup(0x4b6, &(0x7f0000000100)={0x0, 0x0, 0x400, 0x1, 0x20e}, &(0x7f0000ff0000), &(0x7f0000000000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2) mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r4, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000006311bfc2f8543d076dc5918b2ab2830000050000009500"/48], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0200000004000000040000000900000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000050e73f5688774d2fca832900"/39], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r5) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet6(r6, &(0x7f0000000580)={&(0x7f0000000100)={0xa, 0x4e22, 0x8a49, @local, 0x4}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1}, 0x4050) sendto$inet6(r6, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r6, 0x1) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x20000c4, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESDEC=r6]) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x7, 0x2) 36.994409056s ago: executing program 32 (id=347): bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext={0x288}, 0xa216, 0x6, 0x11000, 0x4, 0x9484, 0x2001, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) ioctl$FIONCLEX(r0, 0x5450) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreq(r2, 0x0, 0x24, &(0x7f00000000c0)={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback}, 0x8) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) syz_emit_ethernet(0x3e, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd606410a600080000fc020000000000000000000000000000ff0200000000000000000000000000212900000000000000"], 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'team_slave_1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd00001100"], 0xfce) r4 = syz_io_uring_setup(0x4b6, &(0x7f0000000100)={0x0, 0x0, 0x400, 0x1, 0x20e}, &(0x7f0000ff0000), &(0x7f0000000000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2) mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r4, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000006311bfc2f8543d076dc5918b2ab2830000050000009500"/48], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0200000004000000040000000900000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000050e73f5688774d2fca832900"/39], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r5) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet6(r6, &(0x7f0000000580)={&(0x7f0000000100)={0xa, 0x4e22, 0x8a49, @local, 0x4}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1}, 0x4050) sendto$inet6(r6, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r6, 0x1) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x20000c4, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESDEC=r6]) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x7, 0x2) 25.556101342s ago: executing program 0 (id=609): r0 = syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x80078b, &(0x7f00000000c0)={[{@usrjquota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@delalloc}, {@nobh}, {@min_batch_time={'min_batch_time', 0x3d, 0xb656}}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x46f, &(0x7f0000000bc0)="$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") pwrite64(r0, &(0x7f0000001040)="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", 0x1192, 0x100000005) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7fff, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x6340, 0x1000, 0x3, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0xfffffffc, 0x5, 0x0, 'queue0\x00', 0x10000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000380)) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0xffffffffffffff2e, &(0x7f0000000180)={&(0x7f0000002200)=ANY=[@ANYBLOB="3c00000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="03040000000000000f0012800a000100767863617e0000000400028008001c0080d5ce4185f6e70f7c2cbe1a4475b9ce621330138fd5f47aa9a3a2a63f6a5b4a0c649ef4a9d71654eecbf5672da307fc45d36705bf12ed4244a05bf89db815a7d634e84c27c24ce72eb550d3d480c9e7d01c3bec42e90dfb46b319372547f0f40263198a8db92d281e99caa09c90130e43d90602510f00eb65f5220c763b1ee2604b523f333aaa4635b32cae458b02d275ec7131ec5d145f5bcd09f4c2d262d77c", @ANYRES32=r3, @ANYBLOB], 0x3c}}, 0x4080) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000fc0), &(0x7f0000000000)='./file1\x00', 0x8800, &(0x7f0000000d80)=ANY=[], 0x2b, 0x80e, &(0x7f0000000480)="$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") openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x80642, 0x150) r4 = socket$kcm(0x10, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0x1e, &(0x7f0000000000)=0x2565, 0x4) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x18, &(0x7f00000009c0)=[{&(0x7f0000000140)="d800000018007b29e00212ba0d8105040a601800fe0f040b067c55a1bc000900b80006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ccd40dd601edef3d93452a92307ff0ff0e97031e9f05e9f16e9cb500"/216, 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) 24.748476517s ago: executing program 0 (id=614): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r1, 0x114, 0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000002080)='pagemap\x00') close(0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000006000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000300000085000000a500000095"], &(0x7f0000000300)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x21}, 0x94) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f00000000c0)={0xffffffffffffffff, 0x8, 0x3, 0x84, @vifc_lcl_addr=@private=0xa010102, @broadcast}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) (async) socket$rds(0x15, 0x5, 0x0) (async) setsockopt$RDS_CANCEL_SENT_TO(r1, 0x114, 0x1, 0x0, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000002080)='pagemap\x00') (async) close(0x3) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000006000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000300000085000000a500000095"], &(0x7f0000000300)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x21}, 0x94) (async) socket$igmp(0x2, 0x3, 0x2) (async) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f00000000c0)={0xffffffffffffffff, 0x8, 0x3, 0x84, @vifc_lcl_addr=@private=0xa010102, @broadcast}, 0x10) (async) 24.700318425s ago: executing program 0 (id=615): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@deltaction={0x44, 0x18, 0x1, 0x70bd2c, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x30, 0x1, [{0xc, 0x8d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x978dddbdcfeb1f33}, 0x20040844) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xc, 0x6, &(0x7f00000002c0)=ANY=[@ANYBLOB="18120000703afaa91db2f923d8275400f18eeeab6ef276678c51f4c1901bbb1fe915f7daafda2ec444fba31f2ac123edad36", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x109141, 0xdf) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005fc0)=[{{0x0, 0x0, &(0x7f0000004700)=[{&(0x7f00000012c0)='\\', 0x1}], 0x1, 0x0, 0x0, 0x20000004}}], 0x1, 0x40440c4) r3 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r3, &(0x7f0000005f40)=[{{&(0x7f0000000d00)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000003400)=ANY=[@ANYBLOB="20000000000000000000000007000000440cd1700000000700000e0f940401001400000000000000000600000200000002000000000000001100000000000000000000000100000009000000000000001400000000000000eaffffff0100000006000000000000001400000000000000000000000200000006"], 0x80}}, {{&(0x7f00000010c0)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f00000012c0)=ANY=[], 0x28}}], 0x2, 0x4000004) fgetxattr(r2, &(0x7f0000000080)=@known='user.syz\x00', 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x24, &(0x7f0000009b00)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x401, 0xf5ffffff, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x2c, 0x3, "9ac420002e61afb9fdd672bad09dfb78c7699c74e891a0c700"/40}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xe, 0x1, 'IDLETIMER\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x1c, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r1, 0x58}, 0x10) 24.644289264s ago: executing program 0 (id=616): syz_mount_image$ext4(&(0x7f0000000880)='ext4\x00', &(0x7f00000008c0)='./file0\x00', 0x0, &(0x7f0000000900), 0x1, 0x84d, &(0x7f0000000940)="$eJzs3V9oZFcdB/DfnSRNdnfaZMUHK5aKFleQTjIT6dQ/YIr2wUprsQqCld2wO5mEncmEzCxuQqHpmw8+uA+rgihbCqIIkgef7MMGBUFooSyKqBCh+KDFRdGCPjlyZybZ0E6a0Gxzl97PB27u+TN3vufMZO6ZeToB5NYH0z+FiHvTchIxOWhPImKsVxqNmOs/7srs5mJ6JNHtPvWPpPeYZ2Y3F2PPNalTEbERERMR8cvxJE6Ovzm3vbZ+cb7RqK0O6tOd5sp0e239waXmfL1Wry1XqtXZcqVafqh62+Z698LzP3/1hUefffEX116/7wu/+lkSc1Ec9O2dx+3Uf03G4sk9baNJxBffibAMjPT/Q3rnHclohgPi0D537sRWISLeExEf6p0nYyT6b96F5af/NRn/e2K/ax/+wA//dpxjBQBun+5nIroAQK5k/f0DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADuRN1uYv9/AMiZrL9/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAneyZ2c3FneO4Mu/7WsTNRyJiop9/ZXD0e0djrneeiLGIOPnvJEb3XJtExMwR8xduRGw8FxHvGzb/pJc/lQ5uSP5IRJw7Yv6L14+Wv3LE/K9+54hPcESnf5pt/rU/ZZt/7iPZ5v/l1WzzH7g/2/yrrYit9P4zN+zzV9i9/8SQz99E/7IjeeTrt+5/V950/7uVP7LP/W/jkDkv3fjz5LD2wpcibj4X8f7RYfnJbn6yT/63D5n/5Ud/9Klh7c++FtF9PuJMDM/fmzXdaa5Mt9fWH1xqztdr9dpypVqdLVeq5Yeq0wtLjdpM/+/Q/HsaTzw2rP3l7f78T+6TvzGY/36v/7VDzv8rv746tTmk/Te/7ed/9MNv/f4Pe/3TNXHrkPnXt7/19LD23326n39hn/kf9P6/csj8V6Y+//Fh7TczXn8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4O0qREQxkkJpt1wolEoRpyLivXGy0Gi1Ox9baF1avpD2RUzFWGFnp6XJfj1J6+Ve+Va98ob6bEScjohvjp/o1UvnW40LWU8eAHKmGLH9x5nPHnYLQwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAyJVTb9j//6/j/f3/AYB3n2LE9taNF36Sll8fz3o0AMBxSNf/s5d/cDWs/wCQG9Z/AMgf6z8A5I/1HwDyx/oPAPlj/QeA/Nm7/gMAAAAAAAAAAAAAAAAAAADZevLxx9Oje2V2czGtL7fqSxcXVz5RmSk1L50vnW+trpTqrVa9USudbzUPfr5Gq7VSrsSly9OdWrsz3V5bP9tsXVrunF1qztdrZ2tjxzAn4GCVx/7z+6zHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHeS0/dv/SGJiI1PnugdqbsGffbqh3e3QtYDADIzkvUAgMyMZj0AIDN+4wPJAf0T+/b4BgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQH6cudf+/5BX9v+H/LL/P+SX3Xshv/zGB+z/DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAByv2jqRQGuwFXoxCoVSKuDsipmIsWVhq1GYi4p6IeGl8bDytl7MeNADwthQjtrfnlh/OehwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHAnaq+tX5xvNGqrCgoKCruFrO9MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcPxubfqd9UgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIEuF15KISI8zkw8Ur//9xy/v7b0r+e947xwR3/j+U9+9PN/prJbT9n/utne+N2ivZDUHAOCt7KzTO+s4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAzTXlu/ON9o1FbfwULWcwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALgd/h8AAP//WEsF2g==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) r1 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x214802, &(0x7f0000000980)={[{@nojournal_checksum}, {@nombcache}, {@barrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}, {@bh}, {@init_itable}]}, 0xff, 0x551, &(0x7f0000000cc0)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x100}}, './file2\x00'}) fsync(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x3, 0x110, r0, 0x0) read(r0, &(0x7f0000001400)=""/4096, 0x1000) 24.304529011s ago: executing program 0 (id=619): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) socket$nl_route(0x10, 0x3, 0x0) ptrace$cont(0x7, r0, 0x7ff, 0xd) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) syz_io_uring_setup(0x4e8e, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r3, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62", 0xe}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f00000005c0)="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", 0xfe}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce90bfdb", 0x4}, {&(0x7f00000007c0)="f2e659", 0x3}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2964dd1", 0x4}, {&(0x7f0000000580)="b8a2f6", 0x3}, {&(0x7f00000002c0)="7940e900e0377757a9edc0d9376c21328ad2f7584fe4c8b712b3e5e08ecff5258151bd9eea7b4ce21f67ab51922ce035987127fda5812df903188e321419610f4beb6cdf6fa073876157c4f1d2054439d8db3f4d937872de928b62741fd60e6b56979ad883f89a02e24a577275bfb498b7a127abd0eb099e704d18d63dad611b45acfc3b8dc5457c8383d7d8621942e8e2ce6e4017dd6e5ed9732e739be6593c3b033524669ce17c3b822a6953eb11a20921220000000000000000", 0xbb}, {&(0x7f0000000280)="87", 0xfe}], 0x7}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000880)="87", 0x1}, {&(0x7f0000000900)="11e09017", 0xfffffec4}], 0x2}}], 0x4, 0x4000000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)) setsockopt$sock_int(r3, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) set_mempolicy(0x6005, 0x0, 0x4) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, 0x0, 0x0) 23.777426959s ago: executing program 0 (id=622): mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8082, 0x103) r0 = inotify_init1(0x80000) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000001240)='./file2\x00', 0x2000080, &(0x7f00000003c0)=ANY=[@ANYRES64=0x0, @ANYRESHEX, @ANYBLOB="9a6c01d97557fe6fa6988edac9d750c94e48f976693942dbd85f5342631026fe6514a89d2be1c8a436a3d448a663e5cb279167517537bcca85df16b7ad217b1352e9d15a66f775a6414e474da9cfa1691c9f79e9c64646bed6b343173ebb53187320bfa4e3958b65bb0bafc5add4"], 0xfb, 0x11ff, &(0x7f0000002480)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x145042, 0x52) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100000b, 0x2013, r1, 0x0) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000040)) setreuid(0xee01, 0x0) unlinkat(r0, &(0x7f0000000140)='./file0\x00', 0x0) getgroups(0x2, &(0x7f0000000000)=[0xffffffffffffffff, 0x0]) syz_mount_image$ext4(&(0x7f00000009c0)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x804718, &(0x7f0000000080), 0x0, 0x492, &(0x7f0000000ec0)="$eJzs289rHGUfAPDvTLKb9u2P5O3bV22tGi1CUEyatGoPXpQKIhUFPdRjTLYldNtIE8XWYlMRT4IU9CweRf8CbyKIehK8evIkhVJ7aespMpOZZJNuftBssmn384GZfZ6ZZ3ae787MM8/OsxtAx+rPZknEzoj4IyJ657KLC/TPvdy6cXHs9o2LY0nMzr55PcnL3bxxcawsWm63o8gMpBHpJ0mxk8Wmzl84PVqv184V+aHpM+8OTZ2/8Mz7Z0ZP1U7Vzo4cPXrk8PDzz40825I4s7hu7v9o8sC+V96+8trYiSvv/PJdVt+dxfrGOFqlPwv879nc0nVPtnpnbbYrn/fk86S7zZVhzboiIjtclfz6742uWDh4vfHyx22tHLChsntTz6IFi1bPzAL3sSTWWrLS0GYA977yRp99/y2nTep6bAnXXpz7ApTFfauY5tZ0R1qUqcx/v229/og4MfPPV9kUG/QcAgCg0WdjXx6vRk98ePvbV7O+R+/8mjQeyF//zOe7izGUvoj4b0TsiYj/RcTeiPh/RF72wYh4aJ31ubP/k15d51uuKOv/vVCMbS3u/5W9v+jrKnK78vgrycmJeu1Q8ZkMRKUnyw+vsI8fjv3++XLrGvt/2ZTtv+wLFvW42t2zeJvx0enRqKwn6gXXLkfs724WfzI/EpBExL6I2D+/1ZoGeHaXiYmnvjmwXKHV419BC8aZZr/OwpvJ4p+JJfGXksbxyYk7xieHtkW9dmioPCvu9Otvn76x3P7XFX8LXKvNvTYc/6VF+pLG8dqp1u7/Ls//tJq8lbVH16vFmOMHo9PT54YjqsnxPF8tyubLRxa2LfNl+ez8HzjY/PrfU2yTxf9wRGQn8SMR8WhEPFbU/fGIeCIiDq4Q488vrR5/pG06/pcjxpu2f/Pn/5Ljf/7C6bJpXFiyYqLr9E/fL7f/tR3/I3lqoFiSt3+raFad7iZVvtvPDQAAAO4laf4b+CQdnE+n6eDg3G/498Z/0vrk1PTTJyffOzs+91v5vqik5ZOu3uJ5aH2iXhtOZop3rCTHol4bKZ4Vl89LDxfPjb/o2p7nB8cm6+Ntjh063Y5lrv/MX13trh2wwbY3XTpS3fSKAG2wdBw9XZy99HpoDOB+5f/a0LlWuf7TzaoHsPnc/6FzNbv+Ly3JGwuA+5P7P3Qu1z90qPTHdtcAaCP3f+hIq/55vz2JbY1LqisXrm6ROrcssVUPSp6IKBPplqiPxAYl2t0yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAtMa/AQAA//8qedvA") 23.726631868s ago: executing program 33 (id=622): mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8082, 0x103) r0 = inotify_init1(0x80000) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000001240)='./file2\x00', 0x2000080, &(0x7f00000003c0)=ANY=[@ANYRES64=0x0, @ANYRESHEX, @ANYBLOB="9a6c01d97557fe6fa6988edac9d750c94e48f976693942dbd85f5342631026fe6514a89d2be1c8a436a3d448a663e5cb279167517537bcca85df16b7ad217b1352e9d15a66f775a6414e474da9cfa1691c9f79e9c64646bed6b343173ebb53187320bfa4e3958b65bb0bafc5add4"], 0xfb, 0x11ff, &(0x7f0000002480)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x145042, 0x52) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100000b, 0x2013, r1, 0x0) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000040)) setreuid(0xee01, 0x0) unlinkat(r0, &(0x7f0000000140)='./file0\x00', 0x0) getgroups(0x2, &(0x7f0000000000)=[0xffffffffffffffff, 0x0]) syz_mount_image$ext4(&(0x7f00000009c0)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x804718, &(0x7f0000000080), 0x0, 0x492, &(0x7f0000000ec0)="$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") 3.974606225s ago: executing program 6 (id=832): r0 = request_key(&(0x7f0000000040)='dns_resolver\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='y\xa9n::e\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00', 0xfffffffffffffffe) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000080)='./bus/file0\x00', 0x2000414, &(0x7f0000000640)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRES64=0xffffffffffffffff, @ANYRES32=r0, @ANYBLOB="929cb718d040a784cfbe6686e6cdf5c650f7d687b34b39d5e5916d7175b1ba298c759bb03d7adf998974c1a5407cd4b49210264b3310339916da668be0d43e7b8ca5a68495f21267917556ac9174aa3080afa53685eee03f0cc5121eb48f1eb98fb9301eb365e80399117c936f0f1e3e7b8e601036dab6b0729ca71d06f7b7f2880defd232e2fd183f8f2241c9b1af5128c346e753cf6470156692e1af081cf96346f0", @ANYRES8], 0x1, 0x2ba, &(0x7f0000000ac0)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000a40)=ANY=[@ANYRESHEX=r0, @ANYRES64], &(0x7f0000000a80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000e40)=ANY=[@ANYBLOB="240000001c0001002cbd7000fddbdf2502000000", @ANYRES64=r1, @ANYBLOB="000000000c3acbb3cb34f4213968"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000c00)=ANY=[], 0x110) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x4, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0x8000, 0x10000, 0x8008, 0x1, 0x8, 0xfffffffe, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r4, &(0x7f0000006b80)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @local}, 0x1c, 0x0}}, {{&(0x7f0000000340)={0xa, 0x4e24, 0xfff, @remote}, 0x1c, 0x0, 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="e8020000000000002900000004000000005a"], 0x2e8}}], 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x9) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x14445, &(0x7f0000000140)={[{@jqfmt_vfsold}, {@nogrpid}, {@journal_path={'journal_path', 0x3d, './file2'}}, {@nobh}, {@data_err_abort}]}, 0x3, 0x43b, &(0x7f0000000200)="$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") r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x2, 0x5, &(0x7f0000001d80)=ANY=[@ANYRES8=r1], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) getresuid(&(0x7f0000000780), &(0x7f00000007c0), &(0x7f0000000800)) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a310000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a310000000088000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000500004801400030076657468315f6d6163767461700000000800014000000005"], 0x124}, 0x1, 0x0, 0x0, 0xd4}, 0x800) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r9, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="020a000207000000000000000000000005001a"], 0x38}}, 0x0) connect$inet6(r9, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) sendmsg$NL80211_CMD_STOP_AP(r8, &(0x7f0000000e00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000940)=ANY=[@ANYRES64, @ANYRES16=0x0, @ANYBLOB="040026bd7000fedbdf251000000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x440c0}, 0x0) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYRES16=r1, @ANYRES16, @ANYRES16=r11], 0x3c}, 0x1, 0x2, 0x0, 0x40}, 0x20008000) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x4002) 3.725031817s ago: executing program 1 (id=835): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) r3 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) syz_emit_ethernet(0x33, &(0x7f00000001c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x8, 0x25, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e21, 0x0, 0x11, 0x0, @gue={{0x1, 0x1, 0x1, 0x24, 0x0, @void}, "3fe2f04000"}}}}}}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000240)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2, 0x1, 0x3, 0x6}}}}}}}, 0x0) r4 = openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000180)={0x40, 0x1a0, 0x14}, 0x18) close_range(0xffffffffffffffff, r4, 0x2) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r5, 0x0, 0x0, 0x4}, 0x20) readv(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2000081, &(0x7f0000000480)=ANY=[@ANYRESHEX, @ANYRES8, @ANYRES64, @ANYRES8, @ANYRESDEC, @ANYRES64], 0x2, 0x245, &(0x7f00000007c0)="$eJzs3b9qU2EYB+A3/9pUh2RwEsEDOjiVtleQIhXETkoGddBiW5AkFCwEWsXQySvwSrwOF+/ACxC66VA4cnJS00JqG0yaUp9n6Qvn+/V9T/KFTOfL6zud1ubO7vbBh+9RrRai2IhG4TCiHsXIzAcAcN38StM4THPjJcvFac0EAEzXBb//Fy5xJABgyp49f/FkdX197WmSVCM6n7rNQuR/8+ur2/E22rEVS1GLo4j0j7x+9Hh9LcpJph73O71uM0t2Xn2NSp7/EdHPL0ct6qPzy0nuRL7XbVbixqB/I8uvRC1ujc6vjMhHcy4e3Dsx/2LU4tub2Il2bEaWHeY/LifJw/Tzz/cvs4mzfKHXbc731w2lpRm8PQAAAAAAAAAAAAAAAAAAAAAAXFOLSZIkafolTdO0d+r8ndJR//picqx++nyePH/W+UC9E+frLCVJcnxY8DBfjtvlKM/w1gEAAAAAAAAAAAAAAAAAAODK2N3bb22021vvJlocP9Y/+f/8r0WUBqO1CxFXYJ5+sZDNczm97saYvRpjtoji3n4ra5LtgdZGIc5JVae0SdIR2690ZmpuQt3nbl5scem8l2VQFCKiMtixf19cjMqEPykAAAAAAAAAAAAAAAAAAMAlGz70O+LiwQwGAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAZGP7+/xhFbxC+YGrGtwgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMB/4HcAAAD//+xqeWQ=") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r6 = socket$can_raw(0x1d, 0x3, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r6, 0x65, 0x7, &(0x7f0000000100)=0x6, 0x4) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r7, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x0, 0x0, 0x130, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 3.518338412s ago: executing program 6 (id=838): unshare(0x6a040000) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = getpid() sendmsg$netlink(0xffffffffffffffff, 0x0, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4040080) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) fsopen(0x0, 0x0) fchdir(0xffffffffffffffff) r4 = open(0x0, 0x143142, 0x80) bpf$MAP_CREATE(0x0, 0x0, 0x0) capset(&(0x7f0000000000)={0x19980330, r3}, &(0x7f0000000040)={0x6, 0x80000000, 0x0, 0x1, 0x4, 0x2}) openat(r4, &(0x7f0000000080)='./file0\x00', 0x18000, 0x68) unshare(0x64000800) socket$kcm(0x29, 0x7, 0x0) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x2, 0x1, 0x0, 0x1, @vifc_lcl_addr=@rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0xfd}}, 0x10) 3.208511643s ago: executing program 4 (id=840): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) (async) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0x9}, 0x2000, 0x0, 0x10000, 0x8, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0x9}, 0x2000, 0x0, 0x10000, 0x8, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) set_mempolicy(0x4005, 0x0, 0x4) (async) set_mempolicy(0x4005, 0x0, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c00100004060103000000000000000000000006e5ffff0000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) recvmmsg(0xffffffffffffffff, &(0x7f0000006980), 0x0, 0x45833af92e4b39ff, 0x0) (async) recvmmsg(0xffffffffffffffff, &(0x7f0000006980), 0x0, 0x45833af92e4b39ff, 0x0) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x41, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1d}, 0x0, 0x3fffff, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000280)) memfd_create(&(0x7f0000000200)='}-@\'$-\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, 0x0) bind$can_j1939(r2, &(0x7f00000001c0)={0x1d, 0x0, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) (async) bind$can_j1939(r2, &(0x7f00000001c0)={0x1d, 0x0, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) shutdown(r3, 0x1) (async) shutdown(r3, 0x1) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000300)="d035744442", 0x5}], 0x1}, 0x4048081) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) (async) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0d00000004000000040000"], 0x50) timer_create(0x0, 0x0, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x403, 0x2, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0xfa}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x8044) (async) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x403, 0x2, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0xfa}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x8044) fcntl$lock(r0, 0x26, &(0x7f00000000c0)={0x1, 0x2, 0x8, 0x73f5}) 3.121981187s ago: executing program 5 (id=841): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="2c000000190a01020000000000000000000000030900020073797a32000000000900010073797a3000000000be04000000000000009b32b301f61585315b5c"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x5, 0x0, 0x0, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r2 = socket(0x1e, 0x4, 0x0) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmmsg(r2, &(0x7f0000002b40)=[{{&(0x7f0000000000)=@tipc=@name={0x1e, 0x2, 0x2, {{0x43, 0x3}, 0x1}}, 0x80, 0x0, 0x0, 0x0, 0xfffffffffffffe2d}}], 0x1, 0x8000) recvmmsg$unix(r2, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000780)=""/223, 0xdf}], 0x1}}], 0x1, 0x40000140, 0x0) (async) socketpair(0x26, 0x800, 0x6, &(0x7f0000000000)={0xffffffffffffffff}) (async) r4 = socket$inet_sctp(0x2, 0x5, 0x84) close(r4) (async) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) (async, rerun: 32) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) (rerun: 32) sendmsg$inet_sctp(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000440)="be6f88e904006dd2bd0117c586023380ec289d6c15d3fc0fb99d7337093227523ac2fe6bc9040e01b630dcecf43a9dc2ec73ca8323adbd5e3a0b91ebec615dfb1a23c01b1977a0b14dc32cafe1a70aaa8fb8a3683c7a114b56dd7f22da4178ffd809abddedaa6dfd4637286f12610033f3a62b203f7432b1ce1d701f3b38d77f0fd821733693a34566fd7aba12f7c8f6ff8092e2028fafa4bf4fa980508d371217af62f17c4eac6032968e543fd5a565b8efc372aa05a1b5add6c58ac7d8f828a9bfcb1081ffaecb10e29000"/219, 0xdb}], 0x1, &(0x7f0000000640)=ANY=[], 0x20, 0x6044}, 0x6) (async) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000540)={0x0, 0x4401}, &(0x7f0000000600)=0x8) (async, rerun: 32) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) (async, rerun: 32) close(r0) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110e22fff7) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="bc00"], 0x50) ioctl$TUNGETVNETLE(r6, 0x40047451, &(0x7f0000000180)) (async) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r7, &(0x7f0000002640)={0x0, 0x0, &(0x7f0000002600)={&(0x7f0000000400)=ANY=[@ANYBLOB="060000000214010026bd7000fb03000000000100020000000900020073867a3200000000"], 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x4850) (async) close(r6) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 3.072448056s ago: executing program 5 (id=842): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0], 0x50}}, 0x884) 2.324805791s ago: executing program 5 (id=844): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x8000, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newqdisc={0x140, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0xffff}, {0x1, 0xffff}, {0x5, 0xa}}, [@TCA_STAB={0x11c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x5, 0x2, 0x358c, 0x1, 0x8ce8, 0x3, 0x6}}, {0x10, 0x2, [0x3, 0x8f5, 0x8, 0x1, 0x7, 0x9]}}, {{0x1c, 0x1, {0x8, 0xe3, 0x0, 0x1, 0x2, 0x74f3, 0xd, 0x3}}, {0xa, 0x2, [0x0, 0x4, 0xb]}}, {{0x1c, 0x1, {0x0, 0xff, 0x9, 0x2e6, 0x0, 0x0, 0x200, 0x3}}, {0xa, 0x2, [0x8, 0x15, 0x3]}}, {{0x1c, 0x1, {0x1, 0x63, 0x9, 0x800, 0x0, 0x9, 0xc29c, 0x1}}, {0x6, 0x2, [0x9]}}, {{0x1c, 0x1, {0x4, 0x6, 0x1, 0x8, 0x2, 0x9, 0x0, 0x1}}, {0x6, 0x2, [0xfff0]}}, {{0x1c, 0x1, {0x0, 0xf, 0xcce, 0x9, 0x1, 0x3, 0x7, 0x1}}, {0x6, 0x2, [0x0]}}, {{0x1c, 0x1, {0x66, 0x17, 0x800, 0x1, 0x2, 0x5, 0x800, 0x7}}, {0x12, 0x2, [0x5, 0x0, 0x2, 0xd, 0x0, 0x0, 0x6]}}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x400dc}, 0x44011) socket$netlink(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r8) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r8, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r9, 0x0) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r10, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r11, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000780)=ANY=[], 0x38}}, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1c, 0x3, &(0x7f0000000180)=ANY=[@ANYRESHEX=0x0], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) 2.099778639s ago: executing program 4 (id=845): socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) r1 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'wlc\x00', 0x1, 0x80005, 0x6f}, 0x2c) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000300), &(0x7f0000000340)=0x4) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) clock_gettime(0x0, &(0x7f0000000000)) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r1, 0x111, 0x3, 0x1, 0x4) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20421}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024) socket(0x10, 0x2, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="18080000d0ffffff000000000200000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7060000000000008500000005000000bf0900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000ae8900000000000007080000f8ffffffbf8400000000000007040000f0ffffffc70200000800000018260000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf980000000000005608f8ffffff00008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000)='cgroup\x00', 0x101, 0x0, 0xf, 0x0, 0x0}) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) preadv(r6, &(0x7f00000004c0)=[{&(0x7f0000000280)=""/96, 0x60}], 0x1, 0xa, 0x6c8) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 1.900379792s ago: executing program 5 (id=847): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000fd0020851000000600000018000000", @ANYRES32, @ANYBLOB="00000010000000016608fffffff3f800180000000000000000000000001000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x1e}, 0x94) 1.862337979s ago: executing program 5 (id=848): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) syz_mount_image$ext4(&(0x7f0000002180)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008802, &(0x7f0000000140)={[{@jqfmt_vfsv1}, {@data_ordered}, {@stripe}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@data_ordered}, {@mblk_io_submit}, {@usrquota}, {@nodioread_nolock}, {@errors_remount}, {@init_itable}, {@auto_da_alloc}]}, 0x1, 0x606, &(0x7f0000000600)="$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") syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x40000007, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xc}, 0x0, 0x10001, 0xda, 0x4, 0x8, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x300000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) shmctl$SHM_LOCK(0x0, 0xb) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="3183000000010000000019000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x4886) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 1.711917694s ago: executing program 6 (id=851): r0 = perf_event_open$cgroup(&(0x7f00000001c0)={0x5, 0x80, 0x7, 0x49, 0x5, 0x3, 0x0, 0x6c, 0x104, 0xa, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x2, @perf_bp={0x0, 0x8}, 0x8004, 0x9, 0x7, 0x1, 0x4, 0x81, 0x7, 0x0, 0x40, 0x0, 0x7fffffff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) r1 = perf_event_open$cgroup(&(0x7f0000000000)={0x5, 0x80, 0x0, 0x6, 0xd, 0x2, 0x0, 0x9, 0x202, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x96, 0x2, @perf_config_ext={0x17a0000000000000, 0x200}, 0x10000, 0x588cf598, 0x6, 0x5, 0x8001, 0x81, 0xfffd, 0x0, 0xac2, 0x0, 0x800000000000000}, 0xffffffffffffffff, 0x9, r0, 0x9) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0600000004000000040000000600000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=r0, @ANYRES32, @ANYBLOB="000000000000000000000000000000008fe06907dd00000000000000"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x14, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r2], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_getoverrun(r5) setreuid(0x0, 0x0) r6 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x1, 0x0) fchdir(r7) setresuid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000040)=""/2, 0x2}}, 0x11c) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) setsockopt$inet6_group_source_req(r7, 0x29, 0x2f, &(0x7f0000000440)={0x8, {{0xa, 0x4e23, 0x1, @local, 0x4}}, {{0xa, 0x4e24, 0xbc, @dev={0xfe, 0x80, '\x00', 0xd}, 0x4}}}, 0x108) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000080)=""/155, 0x9b}, {0x0, 0x4}], 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) 1.657357643s ago: executing program 1 (id=852): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) socket$nl_route(0x10, 0x3, 0x0) ptrace$cont(0x7, r0, 0x7ff, 0xd) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) syz_io_uring_setup(0x4e8e, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r3, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62", 0xe}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f00000005c0)="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", 0xfe}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce90bfdb", 0x4}, {&(0x7f00000007c0)="f2e659", 0x3}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2964dd1", 0x4}, {&(0x7f0000000580)="b8a2f6", 0x3}, {&(0x7f00000002c0)="7940e900e0377757a9edc0d9376c21328ad2f7584fe4c8b712b3e5e08ecff5258151bd9eea7b4ce21f67ab51922ce035987127fda5812df903188e321419610f4beb6cdf6fa073876157c4f1d2054439d8db3f4d937872de928b62741fd60e6b56979ad883f89a02e24a577275bfb498b7a127abd0eb099e704d18d63dad611b45acfc3b8dc5457c8383d7d8621942e8e2ce6e4017dd6e5ed9732e739be6593c3b033524669ce17c3b822a6953eb11a20921220000000000000000", 0xbb}, {&(0x7f0000000280)="87", 0x1}], 0x7, 0x0, 0xbffe}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000880)="87", 0x1}, {&(0x7f0000000900)="11e09017", 0xfffffec4}], 0x2}}], 0x4, 0x4000000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)) setsockopt$sock_int(r3, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) set_mempolicy(0x6005, 0x0, 0x4) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, 0x0, 0x0) 1.579186806s ago: executing program 6 (id=853): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x100000001}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r2, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @rand_addr, @broadcast}, &(0x7f0000000100)=0xc) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x16, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="3fe40244b36d1969afd15e544d1ed7dcd48cc1fa934d30535507b9a0fbc7f779464a952cba15bc33a151e99685bad9f1f97feb036db0feea2afe9492a785a75d8fdb9f0f651824821d904b4cb8b316202124165a81b53365ba96b84cf0adfa9a37db603d38176e9bdb6610f7005a84d951f8a38607c633d44eec15c799ac2dc5f4225227da01fd0cf5ec520e13972da2cffbfd3cc2dccbcd6be8264739d7197d0e27ab2955612c296344bca2d2a547e82625ed3d495d1aa80fd5d9438110b1eade1be581c74a5d89785724f055e05e482294"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1f, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000009400000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x5, 0xe, 0x0, &(0x7f0000000380)="2eb33d2ab87cded491710d000000", 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x3c) 1.544069552s ago: executing program 2 (id=854): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb87, &(0x7f00000017c0)="$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") r0 = open(&(0x7f0000000100)='./bus\x00', 0x6c840, 0x50) sigaltstack(&(0x7f0000000240)={&(0x7f0000000140)=""/229, 0x3a2bbc3f12b47676, 0xe5}, &(0x7f0000000380)={&(0x7f0000000280)=""/208, 0x0, 0xd0}) truncate(&(0x7f0000000000)='./bus\x00', 0x86) finit_module(r0, 0x0, 0x5) 980.042776ms ago: executing program 4 (id=855): ioprio_set$uid(0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) getpid() r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x100) socket(0x10, 0x2, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000800000000000061"], 0x0, 0x28}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000000000000000000009500a500000000003e62782f6b62fe583a205a2a93679f78609d6ca7f05ba88e8460d0693a8e47c2857ff1c02f24ca929b6aec07a02b58cbd88131bb0d547c9bab43442e4535f88409162afd1ed8ff5a113677be48432632a733fb0c58fcdba24799f692860f292f268d00eac7dd739212a24e74fef584daca158d64b64536a0c21a0ab5a3e038038aaef7bd2ea0621eb7be6fc89005be16748d73f3a1887006e10ed1fb7d9eb609d12ae5bcfd530400e18f6ad05fe15db26a4951f34aa257313b453b"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, r2, 0x8, 0x0, 0x0, 0x14, 0x0, 0xff3d}, 0x80) socketpair(0x1, 0x1, 0x0, &(0x7f00000002c0)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) close(r3) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="030000000400000004000000b5"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r5, 0x0, 0xb, 0x0, &(0x7f0000000140)="c1dfb082cd21d308098ee6", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNGETVNETLE(r3, 0x40047451, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x93, &(0x7f0000000100)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000000000100bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000000404000001000000b7050000220000006a0a00fe00000000850000000b000000b7000000592000009500000000000000a3028cb5af6c8f5d76781dcb7729f01726a067818b990b13bfddb7e78270010720596bb3b4d821d976f5843061cc2e3afbae82d7932d192321fa3b3042f100"/187], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0xa002a0, 0x10, 0x18, &(0x7f0000000000)="5ae02efc441a80536af0d1d905c723fa", &(0x7f0000000040)=""/24, 0x6414}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x28}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x24}, 0x94) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x8020, 0xc6, 0x0, 0x1, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000180)=@base={0xa, 0x2, 0x5006, 0xff, 0x42, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb01001800000000000000380000003800000004000000020000000000001104000000ee682e4e000000120000000200000000020000000000001202000000020000000000000e030000000000000000006100"], 0x0, 0x54}, 0x28) 938.883413ms ago: executing program 6 (id=856): syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') (async) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') ftruncate(r0, 0x7fffffffffffffff) r1 = socket(0x23, 0x40006, 0x3) socket$can_raw(0x1d, 0x3, 0x1) (async) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r2, &(0x7f00000001c0)={0x1d, r3}, 0x10) setsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4) ioctl$SIOCGSTAMP(r2, 0x8906, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a090400000000000000000200000034000480300001800e000100696d6d6564696174650000001c000280100002800c00028008000180fffffffe08000140000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x88}}, 0x0) close(0x3) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAPCLR(r5, 0x4b68, 0x0) (async) ioctl$PIO_UNIMAPCLR(r5, 0x4b68, 0x0) sendmsg$can_raw(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@can={{}, 0x0, 0x3, 0x0, 0x0, "00000010000300"}, 0x10}}, 0x20000000) read(r2, &(0x7f0000000240)=""/229, 0xe5) (async) read(r2, &(0x7f0000000240)=""/229, 0xe5) connect$vsock_stream(r1, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(r1, 0x2) sendto$packet(r1, 0x0, 0xfffffffffffffc5c, 0x804, 0x0, 0x0) (async) sendto$packet(r1, 0x0, 0xfffffffffffffc5c, 0x804, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x12, 0x6, &(0x7f0000000000)=ANY=[@ANYRES64=r0], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x12, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x6}, 0x94) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f00000000c0)=""/164, &(0x7f00000001c0)=0xa4) 896.67473ms ago: executing program 2 (id=857): modify_ldt$write2(0x11, &(0x7f0000000100)={0x810, 0x100000, 0x4000, 0x1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x804, 0x2, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) close(0xffffffffffffffff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000001340)={'#! ', './bus', [{0x20, 'io.stat\x00'}], 0xa, "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"}, 0x1012) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r2 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) move_mount(r2, 0x0, r2, &(0x7f0000000100)='./file0/../file0\x00', 0x122) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r3 = socket(0x1d, 0x2, 0x6) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x6a, 0x10, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280), 0xff, 0x25e, &(0x7f0000000e80)="$eJzs3U1IHGcYB/BnZndr1aXY9lIo/YBSSiuIvRV6sZcWhCJSSqEtWErppUULVulNe8olh+QYkuApFwm5xeQYvEguCYGcTOLBXAKJ5BDJIQnZsDsr+JVo3HUnZH4/WOfDd97nHWb+74g4GEBh9UXEUESUIqI/IioRkWxu8HH26WtuznUvjUXUaj/cTxrtsu3MxnG9ETEbEV9FxGKaxF/liOmFX1YfLn/32dGpyqdnFn7u7uhJNq2trny/fnrkyPnhL6evXr87ksRQVLecV/slu+wrJxHvHEaxV0RSznsE7Mfof+du1HP/bkR80sh/JdLILt6xyTcWK/HFqecde/zetfc7OVag/Wq1Sv0ZOFsDCieNiGok6UBEZOtpOjCQ/Qx/s9ST/j0x+W//nxNT43/kPVMB7VKNWPn2YteF3m35v1PK8g+8prJfSq38ODp/q76yXsp7QEBHfJAt6s///t9mPg/5h8KRfygu+Yfikn8oLvmH4pJ/KC75h4J42vxjv0275B+KS/6huA6c/xNPDm9QQEdszj8AUCy1rgO9Ndzel5CBXOQ9/wAAAAAAAAAAAAAAAAAAADvNdS+NbXza02N5zxaXT0asfZM13Vm/1Ph/xBFvNr72PEi29Jjsq8KL/fpRix206GzOb1+/dTvf+lc+zLf+zHjE7P8RMVgu77z/kub9d3Bv7/H9yu8tFnhJybbtr3/qbP3tHs/nW394OeJSff4Z3G3+SeO9xnL3+adav34t1v/nUYsdAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0DHPAgAA///B2nXP") mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x4d) rename(&(0x7f0000000180)='./bus\x00', 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='io.stat\x00', 0x275a, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6a}, 0x2c) socket$inet_smc(0x2b, 0x1, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x84, @local, 0x4e21, 0x3, 'lc\x00', 0x34, 0x83, 0x5}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0x1bd, 0x12d5c, 0x12d5c}}, 0x44) r7 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$IP_VS_SO_SET_EDITDEST(r6, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'ovf\x00', 0x0, 0x60000000, 0xb}, {@rand_addr=0x64010102, 0x4e23, 0x2000, 0x8, 0x10001}}, 0x44) write$binfmt_script(r4, &(0x7f0000000040), 0x208e24b) 844.145349ms ago: executing program 5 (id=858): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CONTROL(r1, 0xc0105500, &(0x7f0000000000)={0x80, 0x6, 0xf00, 0xfe, 0x2, 0x0, 0x0}) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r2 = syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x567, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, 0x0, &(0x7f0000000300)) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2, &(0x7f0000000780)={[{@bh}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@nodiscard}, {@noload}, {@delalloc}, {@mblk_io_submit}, {@commit}, {@noblock_validity}, {@noload}, {@block_validity}]}, 0xfa, 0x481, &(0x7f0000003380)="$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") prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r7) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0xd, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) kcmp(r2, r2, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) 573.144604ms ago: executing program 1 (id=859): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="5401000010000100feffffbf00010000ac1414aa0000000000000000000000060000000000000000a800000000000000000107944e2300010000bd2d7a1dc095", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff000000000000000000000000000004d46c0000007f000001000000000000000000000000000000000000000009000000000000000600000000000000ffff0000002800001c250800000000002a00000000000000f8ffffffffffffff0200000000000000ffffffffffffffff00000000000000001f00000000000000ff01000000000000fffffffffcffffff000000002abd700004350000020001fd2000000000000000480003006c7a73"], 0x154}, 0x1, 0x0, 0x0, 0x8801}, 0x10) 499.634327ms ago: executing program 1 (id=860): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000fd0020851000000600000018000000", @ANYRES32, @ANYBLOB="00000020000000016608fffffff3f800180000000000000000000000001000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x1e}, 0x94) 447.621866ms ago: executing program 1 (id=861): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000140)="08001efbb07d5a6e", 0x8}], 0x1, &(0x7f00000000c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x1000003}}], 0x18}, 0x4840) r1 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) r3 = openat(r2, &(0x7f0000000040)='.\x00', 0x0, 0x0) utimensat(r3, 0x0, 0x0, 0x0) 384.089786ms ago: executing program 1 (id=862): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KIOCSOUND(r1, 0x4b2f, 0xb00000000) r2 = socket$igmp(0x2, 0x3, 0x2) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r4, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000015c0), 0x0, 0x0, 0x10, 0x8, 0xffffffffffffff5a, 0x0}}, 0x10) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'bond0\x00', &(0x7f0000000000)=@ethtool_link_settings={0x4b, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, [0x1000, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x4]}}) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000140)=0x1, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='lp', 0x2) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) r5 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x34b, 0x391402) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', 0x0}) sendmsg$nl_xfrm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="5c0100001000130700000000fcdbdf25e0000001000000000000000000000000ff02000000000000000000000000000100040b6e4e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fc010000000000000000000000000000000004d632000000e0000002000000000000000000000000000000000000000000000000000000000100008000000000010000000000008001000000ffffffff0000000000000000010000800000000043050000000000000400000000000000ffffffffffffff7f0000000000000000fdffffffffffffff0000000000000000000000002cbd70000035000002000000500000000000000060001200726663343130362867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000060000000210466d38547aa140db9a200000000c538c7cb7a0c001c00", @ANYRES32=r7], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000340)={'ip_vti0\x00', &(0x7f00000002c0)={'syztnl0\x00', r7, 0x8000, 0x8781, 0x0, 0x80, {{0x16, 0x4, 0x3, 0x5, 0x58, 0x67, 0x1, 0x2, 0x2f, 0x0, @private=0xa010102, @local, {[@ra={0x94, 0x4, 0x1}, @generic={0x88, 0x12, "1c2bec9ed58f8a7ff6336d4f2ea407d3"}, @lsrr={0x83, 0x13, 0xe5, [@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101, @multicast1]}, @timestamp={0x44, 0x14, 0xab, 0x0, 0xf, [0x8, 0x8000, 0x7, 0x7]}, @rr={0x7, 0x7, 0xce, [@dev={0xac, 0x14, 0x14, 0x15}]}]}}}}}) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x70, 0x0, 0x1, 0x101, 0x0, 0x0, {0x2}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x3}, @CTA_NAT_DST={0x40, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @remote}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast1}, @CTA_NAT_V4_MINIP={0x8, 0x1, @loopback}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast2}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private0}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @broadcast}]}, @CTA_LABELS_MASK={0xc, 0x17, [0x8, 0xe]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x401}]}, 0x70}, 0x1, 0x0, 0x0, 0x48015}, 0x20) 382.847786ms ago: executing program 4 (id=863): r0 = perf_event_open$cgroup(&(0x7f00000001c0)={0x5, 0x80, 0x7, 0x49, 0x5, 0x3, 0x0, 0x6c, 0x104, 0xa, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x2, @perf_bp={0x0, 0x8}, 0x8004, 0x9, 0x7, 0x1, 0x4, 0x81, 0x7, 0x0, 0x40, 0x0, 0x7fffffff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) r1 = perf_event_open$cgroup(&(0x7f0000000000)={0x5, 0x80, 0x0, 0x6, 0xd, 0x2, 0x0, 0x9, 0x202, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x96, 0x2, @perf_config_ext={0x17a0000000000000, 0x200}, 0x10000, 0x588cf598, 0x6, 0x5, 0x8001, 0x81, 0xfffd, 0x0, 0xac2, 0x0, 0x800000000000000}, 0xffffffffffffffff, 0x9, r0, 0x9) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0600000004000000040000000600000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=r0, @ANYRES32, @ANYBLOB="000000000000000000000000000000008fe06907dd00000000000000"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x14, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r2], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_getoverrun(r5) setreuid(0x0, 0x0) r6 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x1, 0x0) fchdir(r7) setresuid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000040)=""/2, 0x2}}, 0x11c) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) setsockopt$inet6_group_source_req(r7, 0x29, 0x2f, &(0x7f0000000440)={0x8, {{0xa, 0x4e23, 0x1, @local, 0x4}}, {{0xa, 0x4e24, 0xbc, @dev={0xfe, 0x80, '\x00', 0xd}, 0x4}}}, 0x108) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000080)=""/155, 0x9b}, {0x0, 0x4}], 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) 359.60714ms ago: executing program 2 (id=864): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000040)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRES64, @ANYRES16], 0x1, 0x374, &(0x7f0000000f80)="$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") r1 = socket$inet6(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000010000100"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000300012800b00010065727370616e000020000280040012000500160002"], 0x50}}, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) (async) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f00000005c0), 0x10) recvmmsg(r4, &(0x7f0000001e00)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000001c40)=[{&(0x7f0000000800)=""/4096, 0x1000}, {0x0}], 0x2}, 0x6}], 0x2, 0x122, 0x0) (async) sendmsg$can_bcm(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}, 0x1, 0x0, 0x0, 0x4044080}, 0x20008800) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x46, 0x1, 0x0, 0x0, 0x0, 0xb0f7, 0x30040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x182, 0x6}, 0x6025, 0x4005, 0x4, 0x0, 0x80000000, 0x1, 0xa, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000480)='[\v\xdbX\xae[5\xa9\x90\xffc\x1f\x1a\xa9\xfd\xfa\xad\xd1md\xe7\xe2\x7f\x9b\xd5R\x10\xf3\xb6\xffT\xbf\xd1\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\x9fc\xda\xa9\x83r\xd8\x98\x00\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9', 0x0) r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f0000000040)={r5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x6, 0xff, 0x400, 0x2003, 0x3, 0x0, 0x0, 'syz1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000ec0)={'wpan0\x00'}) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000050000000200000004"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r7) close(0x3) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f0000001200000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r8}, &(0x7f0000000000), &(0x7f0000000080)=r7}, 0x20) (async, rerun: 64) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70200000100000085000000a000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r10, 0x1, 0x32, &(0x7f00000000c0), 0x4) (async, rerun: 64) sendmsg$unix(r11, &(0x7f00000006c0)={0x0, 0x41, 0x0}, 0x10) (rerun: 64) 238.632011ms ago: executing program 4 (id=865): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020200090d0000000000000000000000030006000000000002000000ac1414bb000000000000000002000100000000000000000200000000030005000000000002000000ac1414aa000000000000000001001500000000000100140000000000010016"], 0x68}, 0x1, 0x7}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffa}, 0xffffffffffffff04) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000100)={0x4, 0x1d, 0x4, 0x4, "49c1732dfe57b2f39937d46fe0dfc0f37e29972e33103be64f5f9b4ccacafdd8"}) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xb, &(0x7f0000000000), 0x0) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) 148.061776ms ago: executing program 2 (id=866): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r4 = fcntl$dupfd(r2, 0x406, r3) setsockopt(r4, 0x1, 0x1a81, &(0x7f0000000040)="43768b6f86dff571de9213703f634484a51947cd4f1f852cb934ac0f2d8e72b9c4525b2b9a3d2a2650d147f49777c7e0cb6b5cfed08d6645772dee3249426181d4ffa8aa1ec52ee915a1bf44031440336ad0f644df0a19", 0x57) ioctl$PPPOEIOCSFWD(r4, 0x4008b100, &(0x7f00000000c0)={0x18, 0x0, {0x2, @random="aed1cf9278d8", 'rose0\x00'}}) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x440a01, 0x42) linkat(r4, &(0x7f0000000100)='./file0\x00', r5, &(0x7f0000000180)='./file0\x00', 0x400) syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x54, r1, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x1e}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x8004) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) futex(&(0x7f0000000340)=0x2, 0x5, 0x1, &(0x7f00000003c0)={r6, r7+60000000}, &(0x7f0000000400), 0x2) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000480), r0) sendmsg$NFC_CMD_GET_SE(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, r8, 0x1, 0x70bd28, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000004}, 0x8000) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000580)) r9 = socket(0x2b, 0x6, 0x2) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f00000005c0)) recvmmsg(r4, &(0x7f0000004e40)=[{{&(0x7f0000000600)=@ll, 0x80, &(0x7f0000001940)=[{&(0x7f0000000680)=""/137, 0x89}, {&(0x7f0000000740)=""/235, 0xeb}, {&(0x7f0000000840)=""/119, 0x77}, {&(0x7f00000008c0)=""/100, 0x64}, {&(0x7f0000000940)=""/4096, 0x1000}], 0x5, &(0x7f00000019c0)=""/18, 0x12}, 0x6}, {{0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000001a00)=""/177, 0xb1}, {&(0x7f0000001ac0)=""/111, 0x6f}, {&(0x7f0000001b40)=""/245, 0xf5}, {&(0x7f0000001c40)=""/137, 0x89}, {&(0x7f0000001d00)=""/255, 0xff}, {&(0x7f0000001e00)=""/16, 0x10}, {&(0x7f0000001e40)=""/93, 0x5d}, {&(0x7f0000001ec0)=""/88, 0x58}, {&(0x7f0000001f40)=""/144, 0x90}], 0x9, &(0x7f00000020c0)=""/4096, 0x1000}, 0x7}, {{&(0x7f00000030c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f00000032c0)=[{&(0x7f0000003140)=""/242, 0xf2}, {&(0x7f0000003240)=""/26, 0x1a}, {&(0x7f0000003280)=""/48, 0x30}], 0x3, &(0x7f0000003300)=""/24, 0x18}, 0x9}, {{0x0, 0x0, &(0x7f0000003500)=[{&(0x7f0000003340)=""/39, 0x27}, {&(0x7f0000003380)=""/151, 0x97}, {&(0x7f0000003440)=""/95, 0x5f}, {&(0x7f00000034c0)=""/56, 0x38}], 0x4, &(0x7f0000003540)=""/171, 0xab}, 0x8}, {{&(0x7f0000003600), 0x80, &(0x7f0000003800)=[{&(0x7f0000003680)=""/229, 0xe5}, {&(0x7f0000003780)=""/122, 0x7a}], 0x2, &(0x7f0000003840)=""/252, 0xfc}, 0x57b1}, {{&(0x7f0000003940)=@ethernet={0x0, @broadcast}, 0x80, &(0x7f0000004d00)=[{&(0x7f00000039c0)=""/250, 0xfa}, {&(0x7f0000003ac0)=""/233, 0xe9}, {&(0x7f0000003bc0)=""/62, 0x3e}, {&(0x7f0000003c00)=""/24, 0x18}, {&(0x7f0000003c40)=""/4096, 0x1000}, {&(0x7f0000004c40)=""/170, 0xaa}], 0x6, &(0x7f0000004d80)=""/146, 0x92}, 0x6}], 0x6, 0x61, &(0x7f0000004fc0)={0x0, 0x989680}) ioctl$EXT4_IOC_GET_ES_CACHE(r9, 0xc020662a, &(0x7f0000005000)={0x7, 0x1, 0x0, 0x0, 0xa, 0x0, [{0x65, 0x3, 0x9, '\x00', 0x280}, {0x2f261fd0, 0x47176e54, 0xb88, '\x00', 0x900}, {0x5, 0x35a, 0x3abb260e}, {0xffffffff, 0x8, 0xe, '\x00', 0x2a80}, {0x5, 0x1, 0x3}, {0x230e, 0x5, 0x3, '\x00', 0x481}, {0x0, 0x50, 0x7, '\x00', 0x80}, {0x0, 0x6, 0x8, '\x00', 0x1481}, {0x2, 0x80000001, 0xfffffffffffffeff, '\x00', 0x400}, {0x7, 0x4, 0x1, '\x00', 0x2504}]}) setsockopt$MRT_ADD_MFC(r9, 0x0, 0xcc, &(0x7f0000005280)={@rand_addr=0x64010100, @rand_addr=0x64010102, 0x0, "576b901c56edb86e0b7f31633780adfcdd7d1552034cfa6eabd59aba4c8ab6be", 0x3ff, 0x2ee, 0x0, 0x2f5}, 0x3c) socket$inet_icmp_raw(0x2, 0x3, 0x1) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000005300), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000005340)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f0000005400)={&(0x7f00000052c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000053c0)={&(0x7f0000005380)={0x3c, r10, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0x8}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x90}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r11}, @IEEE802154_ATTR_CSMA_MIN_BE={0x5, 0x26, 0x8}, @IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0x7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000004}, 0x8901) setsockopt$packet_int(r9, 0x107, 0x11, &(0x7f0000005440)=0x7ff, 0x4) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000005480)) r12 = gettid() syz_open_procfs(r12, &(0x7f00000054c0)='net/ip6_tables_names\x00') mount_setattr(0xffffffffffffff9c, &(0x7f0000005500)='./file0\x00', 0x900, &(0x7f0000005540)={0x2, 0x8, 0x40000, {r4}}, 0x20) 147.702186ms ago: executing program 2 (id=867): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hzcpouowmHWsduD24F19kCCIOxD/Adx+H/4B/xUAHQ0bRBxEiN73psjZp2i4z2fL5wG3Pyb23535z7vf2nNyEBDC0jqU/chEvR8Q3ScShlnX5yFYeW9tu9eH1mXRJol7/9M8kkuyx5vZJ9vtAVnkpIn79KuJkbnO71eWV+WK5XFrM6hO1hSsT1eWVU5cWinOludLlqenpM29NT737zts9i/X1839//8ndD898fXz1u5/vH76dxNk4mK1rjeMJ3GitHCv+m5VG4+yGDSd70NggSfp9AOzKSJbno5FeAw7FSJb1wPPvy4ioA0Mqkf8wpJrjgObcvkfz4GfGgw/WJkCN2Mda48+vvTYSextzo/2ryWMzo3S+O96D9tM2fvnjzu10ia1fh9jXpQ6wIzduRsTpfH7z9T/Jrn+7d7rx4vHWNrYxbP9/oJ/upuOfN9qN/3Lr459oM/450CZ3d6N7/ufu96CZjtLx33ttx7/rl67xkaz2QmPMN5pcvFQunY6IFyPiRNS73vo4s3qv3mld6/gvXdL2m2PB7Dju5/c8vs9ssVaMiLFdhvyYBzcjXsm3iz9Z7/+kTf+nz8f5bbZxtHTn1U7rusf/dNV/initbf8/6tZk6/uTE43zYaJ5Vmz2162jv3Vqv9/xp/2/f+v4x5PW+7XVnbfx495/Sp3W7fb8H0s+a5SbSXCtWKstTkaMJR9vfnzq0b7NenP7NP4Tx7e+/rU7/9PJ1+fbjP/WkVsdNx2E/p/dUf/vvHDvoy9+6NT+9vr/zUbpRPZIdv1rLztXtnuAT/r8AQAAAAAAwCDJRcTBSHKF9XIuVyisvb/jSOzPlSvV2smLlaXLs9H4rOx4jOaad7oPtbwfYjJ7P2yzPrWhPh0RhyPi25F9jXphplKe7XfwAAAAAAAAAAAAAAAAAAAAMCAOdPj8f+r3kX4fHfDUNb7YYE+/jwLoh65f+d+Lb3oCBlLX/AeeW/Ifhpf8h+El/2F4yX8YXvIfhpf8h+El/wEAAAAAAAAAAAAAAAAAAAAAAAAAAKCnzp87ly711YfXZ9L67NXlpfnK1VOzpep8YWFppjBTWbxSmKtU5sqlwkxlodvfK1cqVyanYunaRK1UrU1Ul1cuLFSWLtcuXFoozpUulEb/l6gAAAAAAAAAAAAAAAAAAADg2VJdXpkvlsulRYWOhfdjIA7jaQa4Zle75wclCoUOhZtZ9+5srz5elAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgg/8CAAD//4yLMZo=") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_io_uring_setup(0x48a6, &(0x7f00000002c0)={0x0, 0x4260, 0x1, 0x0, 0x114}, &(0x7f0000000340), &(0x7f0000000380), &(0x7f0000000000)) io_uring_register$IORING_UNREGISTER_EVENTFD(r1, 0x5, 0x0, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000060000000500000a58000000060a010400000000000000000a0000012c00048028000180080001006e6174001c0002800800024035cdad78080001400000000008000340000000130900020073797a32080000000900010073797a3100000000140000001100010000000000000000000100000a"], 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x3) ioctl$TCFLSH(r2, 0x541b, 0x7ffffffffffffffe) r3 = socket(0x18, 0x5, 0x0) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x1021, 0x0) 76.706448ms ago: executing program 4 (id=868): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20d6, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, 0x0, 0x4008054) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x0, 0x2}, 0x10) sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f0000000080), 0x10, 0x0}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x8000, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000007c0)=ANY=[@ANYBLOB="ec000000210001000000000004000000ff010000000000000000000000000001fc02000000000000000000000000000000000005000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100fe8000000000000000000000000000bbac1e000100000000000000000000000020010000000000000000000000000000fe8800000000000000000000000001012b0200000135000002000200fc010000000000000000000000000001fe800000000000000000000000000035ac1414aa000000000000000000000000fc0200000000000000000000000000013c000000000000539d"], 0xec}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0040, &(0x7f0000002a00)={[{@noblock_validity}, {@resgid={'resgid', 0x3d, 0xee00}}, {@acl}, {@noload}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@nodiscard}]}, 0xfe, 0x472, &(0x7f0000000940)="$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") 43.407903ms ago: executing program 6 (id=869): r0 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_tables_targets\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0x100000004, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f, 0x8}}, 0x20) readv(r0, &(0x7f0000000280)=[{&(0x7f0000000180)=""/193, 0xc1}], 0x1) file_getattr(0xffffffffffffff9c, 0x0, &(0x7f0000000300), 0x18, 0x1000) r4 = socket(0x840000000002, 0x3, 0x100) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r4, &(0x7f0000005240), 0x4000095, 0x0) getsockopt$ARPT_SO_GET_INFO(r4, 0x0, 0x34, 0x0, &(0x7f0000000280)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r5, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@ipmr_delroute={0x28, 0x19, 0x4, 0x70bd27, 0x25dfdbff, {0x80, 0x14, 0x10, 0x7, 0x7c, 0x0, 0xff, 0x4}, [@RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @ILA_ATTR_HOOK_TYPE={0x5, 0x9, 0x1}}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x8100) 0s ago: executing program 2 (id=870): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210040, &(0x7f00000004c0), 0xfc, 0x59d, &(0x7f00000022c0)="$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") file_getattr(0xffffffffffffff9c, 0x0, &(0x7f0000000300), 0x18, 0x1000) syz_usb_connect(0x3, 0x71e, &(0x7f0000000500)={{0x12, 0x1, 0x201, 0xba, 0x9f, 0xd6, 0x20, 0x19d2, 0x178, 0x3a1c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x70c, 0x4, 0x4, 0x7, 0x20, 0x70, "", [{{0x9, 0x4, 0x3, 0x81, 0x7, 0x5, 0x9d, 0x7, 0xf8, [], [{{0x9, 0x5, 0xf, 0x0, 0x48, 0x29, 0x6, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0xca, 0x6000}]}}, {{0x9, 0x5, 0xe, 0x8, 0x400, 0x1, 0x5, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x33, 0x7ff}, @generic={0x46, 0x24, "7d9e641110c8cd580870bb1fee0ef5615dad937c1518c4583346ac631aba1bdee6ae8da62193316c546949533f874d7dc1859253e20652629a29d1028c5775d90189acbc"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x10, 0x9, 0x8, 0xe}}, {{0x9, 0x5, 0x3, 0x10, 0x10, 0x0, 0xff, 0xaf, [@generic={0x76, 0x24, "e70c81b16dc99a42b0c8cfaed3115a69a188ed40086e062b6934bf246cbb2343d7fe0deccbe6434a697133142ab19b3d49c563fef6df4808a2eb3780f8cfb644ee6fe80614e60768371b43ce76f348b8cb4817bbf0d988503568512b73342a02f91a9a87e7d3eaf68e073250e2621e946541b7be"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x40, 0xff, 0x7, 0x2}}, {{0x9, 0x5, 0x1, 0xc, 0x10, 0x0, 0x4, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x8, 0xbb78}, @generic={0x9a, 0x11, "b8b16e1198360353c5f5da0838f41b84344c01951dc5b57d4a632b526c1078e67275a07e96142e429e5322037e3f5b9e6d40a6542d14b1770f19104269689a1409f00f100a45f2a5ddcd7aee1c8f23a172bbb81efb77e4a20b2477a8ceef97e2a5ffd4d186f9860dbd3174f66b8636868efe7e20f2edf0a767defb89add52cde2b87bb2237950450d86b5896bf11c77f0e6537432a4aac7a"}]}}, {{0x9, 0x5, 0xe, 0x2, 0x3ff, 0x9, 0x7, 0x4}}]}}, {{0x9, 0x4, 0xf2, 0x2e, 0x2, 0xd4, 0xef, 0xa5, 0x10, [@cdc_ncm={{0xb, 0x24, 0x6, 0x0, 0x1, "8f531467593a"}, {0x5, 0x24, 0x0, 0xfff7}, {0xd, 0x24, 0xf, 0x1, 0xfffffffc, 0x2, 0x0, 0x9}, {0x6, 0x24, 0x1a, 0x5, 0x10}, [@network_terminal={0x7, 0x24, 0xa, 0x4, 0x0, 0x5, 0x9}, @mdlm={0x15, 0x24, 0x12, 0x6}]}, @uac_as={[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0xce, 0x3, 0xaa, 0xb, "", "5798"}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0xc, 0x4, 0x9, "ee67b9"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x8, 0x4, 0x3, 0x5}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x1, 0x8, 0x0, 0x8, 0x8}]}], [{{0x9, 0x5, 0xe, 0x3, 0x400, 0x86, 0x7, 0x3, [@generic={0x19, 0x9, "f346d7c880cdaa789af6679705d0bdb65ce7f207e61a4c"}, @generic={0x73, 0x5, "7abfa44e02339c5dd687c2e817e24a92c58bdd43026dab0358f18bf3e7845ac9fd00d38d7620942ac5bc6592cd6e41838b8bdc3513da66b20ba02df6edfe6ad4bc512d9476c356c761a185c31e92b91224976c5b154eab261677bb5cb8e8b76d890be403433b68946cb1e183e15306daca"}]}}, {{0x9, 0x5, 0xd, 0x0, 0xd9f, 0x1, 0x0, 0x5, [@generic={0xc, 0xf, "97e00d402dcefba68427"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x7f, 0x5}]}}]}}, {{0x9, 0x4, 0xce, 0x7, 0x3, 0x7, 0x46, 0xcc, 0xfa, [@uac_control={{0xa, 0x24, 0x1, 0x0, 0x2f}, [@mixer_unit={0xb, 0x24, 0x4, 0x5, 0x1, "d0c3b1852c34"}, @output_terminal={0x9, 0x24, 0x3, 0x4, 0x300, 0x1, 0x5, 0x6}, @extension_unit={0x8, 0x24, 0x8, 0x3, 0x400, 0xb, "b3"}, @output_terminal={0x9, 0x24, 0x3, 0x4, 0x402, 0x4, 0x1, 0xca}]}, @uac_as], [{{0x9, 0x5, 0xb, 0x1, 0x3ff, 0x40, 0x3, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x7, 0x101}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x3, 0x7}]}}, {{0x9, 0x5, 0xa, 0x4, 0x40, 0x0, 0x81, 0xe9, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x5, 0x7fff}, @generic={0x73, 0x3, "2c7c710627b6d97033e38b922942ca9b5b0a12f01223e3eaddd35bc959c71cbbce3c8abbe9a70e7d71ca641989bbc321d2fc86daf62d5dd1a0b5b7dd57ca8fca144afca5789ac47446551be3e4e85cab3707a373f55dbef725be0f4e71b9aa7ea164b00c003dbd2c02d6ba2fba288d9fee"}]}}, {{0x9, 0x5, 0xa, 0x2, 0x8, 0x9, 0x7, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0xe9, 0xaf}]}}]}}, {{0x9, 0x4, 0xa0, 0x4, 0xc, 0x31, 0x2e, 0x5c, 0x2, [], [{{0x9, 0x5, 0x1, 0x3, 0x400, 0x5e, 0x7, 0x6, [@generic={0xa5, 0x2, "8adce57002f9ad073ebdc892febb10fae226ccf098dade478112e2be504a7e65c29364d0a86224625593d24855feb61ec0079db7efd645cd1d126e860de02a937f824cd1f013b5c93da61d052b8a3a5339404964559e838bc20dcdbf8286455e670a8eb855cf950e934b249d421ccfd9367e880fc3616807a23e49f9187726aa218b2a737341489b020a895e6c651b7656ec5dd92a33580906190a54d5ef482e5d6904"}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x8, 0x1}]}}, {{0x9, 0x5, 0x80, 0x0, 0x20, 0x5, 0xa, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x8b, 0xfffd}, @generic={0x9e, 0x2, "68fadf72429d1927082e8eb4ac32e23ffe7c9faa9a5ebca51fd87c4202cad5b91dd9534ab31e2fb679118ae1fdf65bc6127905348710e2d5d22a696c322d552413c51540843e4b25e7da78c613800155ebe8ce175a18fbc5f565f9694ae4770cdfc403aa1f386ef64b6d87f6ae275c3fa61fbc927ac8b61fb0141b8480a2d67dbac52967f8a7f51e0964637a514d4412e1bc9b49a0caa3a31c28b2e1"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x3ff, 0x5, 0x2, 0x1}}, {{0x9, 0x5, 0x8, 0x4, 0x3ff, 0x0, 0x40, 0x4}}, {{0x9, 0x5, 0x8f, 0x0, 0x3ff, 0x7f, 0xa, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x89, 0xfffb}]}}, {{0x9, 0x5, 0x8, 0x2, 0x200, 0x4, 0x20, 0xe3}}, {{0x9, 0x5, 0xd, 0x8, 0x3ff, 0x5, 0x10, 0x1, [@generic={0x68, 0x4, "4efa32794625c1f086a1dbd5fc62f8ecb5caa75701662f32511c185d20d18d6ede5188dd0cdcf82e79b315e5c3e6a5052b108d0d7f66afc5b626a71c5250961b61255043a829ca5d222569faa2f502adb2d244995f56635bfa66d2ab531f40a1d339328ff558"}]}}, {{0x9, 0x5, 0xd, 0x8, 0x400, 0x71, 0x4, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x3, 0x3}, @generic={0xce, 0x7, "60b8bbbf04e695516455f2275a94e7746f5f4faf127129c689c8aacc95372ae35ebfb165fd8542896570e43799d442d69db92f001e45115a7eada10fa3625dcbc99338b85f41a1a09450e51f0162eb52f76bbd185ad3fa7d3a3f87683d0d750bc281214160d465ebed1cb1b03acf2653db164b7c2e9e1ca63d86ca99dd13a5e2660f5e1d1dd8c637b2098f1ef10b2095e6ac62a6f95a162d53805756bd641dbfce01a41d8217f03cc918f025cd92bdb1d4ad919e6e30d352ec064af4679ec1258f53881fd244866d0e8c77d6"}]}}, {{0x9, 0x5, 0x2, 0x3, 0x20, 0x8, 0x1, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x5, 0x5}]}}, {{0x9, 0x5, 0x1, 0x8, 0x10, 0x6, 0x40, 0x9, [@generic={0x3b, 0xc, "f9ca25a5f92879a25ba43d1608315a25b8d45fe033df74663b648049307dd036ee5a02363ba844f51e08f821ed0183e0a4044cbf9b2bbef31a"}]}}, {{0x9, 0x5, 0x3, 0x10, 0x3ff, 0x3, 0xd}}, {{0x9, 0x5, 0x9, 0x4, 0x240, 0xf, 0x4, 0x7}}]}}]}}]}}, &(0x7f0000000e40)={0xa, &(0x7f0000000c40)={0xa, 0x6, 0x250, 0x8, 0x5, 0x2, 0x40, 0xd}, 0x16, &(0x7f0000000cc0)={0x5, 0xf, 0x16, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x0, 0x1, 0x2ca0}, @ext_cap={0x7, 0x10, 0x2, 0x1d, 0x4, 0x4, 0x7}]}, 0x2, [{0xee, &(0x7f0000000d00)=@string={0xee, 0x3, "b55b518014ca88704b4ad6cd199796fe89e2c1e361cc00e739dd733483f315de2aa11c41da4b2bdf442e7d3a46338b0db88b9f81ad7756eac2daafaa01456cd8b138ffa3124c88510b50ee71a312e1a3edf0d8b2d019afe6730460833fc3ba6f1ff555cdfbb265592e96d6a5358490aec9502aade8148cd4937d3843f2afb4b089929514ff75efa8cef04d11edacc505f7ac4c105f883e8733d04dbfddc2a34a194dd45a22e21a3f5622a4d86be36b8116d7e06ec6c10a4e4b36e26def7cb2f725dbf8ebd077781db82025c73a69b2288d341f60d0ee2da538365deec1676ddbf1e5f44cabd845f2209d5725"}}, {0x4, &(0x7f0000000e00)=@lang_id={0x4, 0x3, 0x42b}}]}) kernel console output (not intermixed with test programs): [ 84.256219][ T4982] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.672467][ T4990] set_capacity_and_notify: 1 callbacks suppressed [ 84.672483][ T4990] loop4: detected capacity change from 0 to 1024 [ 84.701751][ T4990] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.724951][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.920265][ T5001] loop0: detected capacity change from 0 to 2048 [ 85.615165][ T5008] loop4: detected capacity change from 0 to 1024 [ 85.623381][ T5008] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 85.634986][ T5008] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 85.683673][ T5008] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 85.706750][ T5024] xfrm0 speed is unknown, defaulting to 1000 [ 85.779716][ T5008] EXT4-fs (loop4): orphan cleanup on readonly fs [ 85.786313][ T5008] EXT4-fs error (device loop4): ext4_free_blocks:6724: comm syz.4.367: Freeing blocks not in datazone - block = 0, count = 4096 [ 85.799980][ T5008] loop4: lost filesystem error report for type 5 error -117 [ 85.803672][ T5028] netlink: 8 bytes leftover after parsing attributes in process `syz.0.371'. [ 85.811141][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 85.811165][ C1] EXT4-fs (loop4): initial error at time 85: ext4_free_blocks:6724 [ 85.811207][ C1] EXT4-fs (loop4): last error at time 85: ext4_free_blocks:6724 [ 85.832257][ T5008] EXT4-fs (loop4): 1 orphan inode deleted [ 85.834628][ T5028] netlink: 12 bytes leftover after parsing attributes in process `syz.0.371'. [ 85.843134][ T5008] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 85.873596][ T5008] netlink: 24 bytes leftover after parsing attributes in process `syz.4.367'. [ 85.955247][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.046412][ T5034] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 86.076588][ T5044] loop4: detected capacity change from 0 to 512 [ 86.083260][ T5040] netlink: 28 bytes leftover after parsing attributes in process `syz.0.375'. [ 86.092290][ T5040] netlink: 28 bytes leftover after parsing attributes in process `syz.0.375'. [ 86.102055][ T5044] EXT4-fs: Ignoring removed mblk_io_submit option [ 86.111812][ T5044] ext4: Unknown parameter 'func' [ 86.140331][ T5040] netlink: 'syz.0.375': attribute type 6 has an invalid length. [ 86.188734][ T5047] netlink: 'syz.0.377': attribute type 10 has an invalid length. [ 86.247478][ T5047] team0: entered promiscuous mode [ 86.274755][ T5047] team0: entered allmulticast mode [ 86.307936][ T5047] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.362041][ T5047] bridge0: port 1(team0) entered blocking state [ 86.378952][ T5047] bridge0: port 1(team0) entered disabled state [ 86.399921][ T5051] xfrm0 speed is unknown, defaulting to 1000 [ 86.654811][ T5048] loop4: detected capacity change from 0 to 32768 [ 86.824695][ T28] kauditd_printk_skb: 407 callbacks suppressed [ 86.824712][ T28] audit: type=1400 audit(86.788:4174): avc: denied { write } for pid=5067 comm="syz.0.380" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 86.824865][ T5068] netlink: 'syz.0.380': attribute type 2 has an invalid length. [ 86.946020][ T5070] loop0: detected capacity change from 0 to 1024 [ 86.994964][ T5070] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.102863][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.290412][ T5083] loop4: detected capacity change from 0 to 1024 [ 87.299148][ T5083] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 87.311663][ T5084] loop0: detected capacity change from 0 to 512 [ 87.318474][ T5084] msdos: Unknown parameter '' [ 87.334121][ T28] audit: type=1326 audit(87.298:4175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5080 comm="syz.0.385" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd68b21c819 code=0x0 [ 87.389401][ T28] audit: type=1400 audit(87.328:4176): avc: denied { create } for pid=5082 comm="syz.4.384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 87.418976][ T28] audit: type=1326 audit(87.348:4177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5080 comm="syz.0.385" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd68b21c819 code=0x0 [ 87.671618][ T28] audit: type=1326 audit(87.628:4178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5080 comm="syz.0.385" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd68b21c819 code=0x0 [ 87.897445][ T28] audit: type=1400 audit(87.858:4179): avc: denied { create } for pid=5102 comm="syz.1.389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 87.950645][ T28] audit: type=1400 audit(87.878:4180): avc: denied { write } for pid=5102 comm="syz.1.389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 88.275570][ T28] audit: type=1400 audit(88.238:4181): avc: denied { create } for pid=5109 comm="syz.4.391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 88.317211][ T28] audit: type=1400 audit(88.258:4182): avc: denied { connect } for pid=5109 comm="syz.4.391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 88.356414][ T28] audit: type=1326 audit(88.278:4183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5109 comm="syz.4.391" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7c6d6ec819 code=0x0 [ 88.389108][ T5113] loop1: detected capacity change from 0 to 4096 [ 88.396931][ T5113] EXT4-fs: Ignoring removed nomblk_io_submit option [ 88.414081][ T5113] EXT4-fs (loop1): stripe (97) is not aligned with cluster size (16), stripe is disabled [ 88.430448][ T5113] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.496801][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.629842][ T5119] loop1: detected capacity change from 0 to 512 [ 88.653432][ T5119] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 88.686552][ T5119] EXT4-fs (loop1): can't mount with journal_checksum, fs mounted w/o journal [ 88.698324][ T5119] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 88.740986][ T5125] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 88.769134][ T5125] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 88.791552][ T5125] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 88.816205][ T5125] EXT4-fs (loop2): orphan cleanup on readonly fs [ 88.834472][ T5125] EXT4-fs error (device loop2): ext4_free_blocks:6724: comm syz.2.396: Freeing blocks not in datazone - block = 0, count = 4096 [ 88.860884][ T5125] loop2: lost filesystem error report for type 5 error -117 [ 88.869515][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 88.883399][ C0] EXT4-fs (loop2): initial error at time 88: ext4_free_blocks:6724 [ 88.891350][ C0] EXT4-fs (loop2): last error at time 88: ext4_free_blocks:6724 [ 88.902397][ T5125] EXT4-fs (loop2): 1 orphan inode deleted [ 88.908761][ T5125] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 88.962044][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.050142][ T5144] journal_path: Non-blockdev passed as './file2' [ 89.061865][ T5144] EXT4-fs: error: could not find journal device path [ 89.095961][ T5144] __nla_validate_parse: 11 callbacks suppressed [ 89.095979][ T5144] netlink: 12 bytes leftover after parsing attributes in process `syz.0.399'. [ 89.131135][ T5144] netlink: 48 bytes leftover after parsing attributes in process `syz.0.399'. [ 89.199768][ T5148] netlink: 8 bytes leftover after parsing attributes in process `syz.0.399'. [ 89.983845][ T5153] netlink: 8 bytes leftover after parsing attributes in process `syz.1.407'. [ 90.015632][ T5153] netlink: 24 bytes leftover after parsing attributes in process `syz.1.407'. [ 90.029939][ T5153] netlink: 8 bytes leftover after parsing attributes in process `syz.1.407'. [ 90.038855][ T5153] netlink: 24 bytes leftover after parsing attributes in process `syz.1.407'. [ 90.051223][ T5153] set_capacity_and_notify: 3 callbacks suppressed [ 90.051238][ T5153] loop1: detected capacity change from 0 to 128 [ 90.111016][ T5153] /dev/loop1: Can't open blockdev [ 90.153906][ T5172] netlink: 'syz.4.411': attribute type 27 has an invalid length. [ 90.202507][ T5156] vhci_hcd vhci_hcd.0: invalid port number 236 [ 90.208743][ T5156] vhci_hcd vhci_hcd.0: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 90.553376][ T5201] loop2: detected capacity change from 0 to 512 [ 90.560683][ T5201] msdos: Unknown parameter 'useree' [ 90.717420][ T5205] netlink: 32 bytes leftover after parsing attributes in process `syz.2.420'. [ 91.389917][ T5224] loop1: detected capacity change from 0 to 1024 [ 91.402829][ T5224] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 91.416428][ T5224] EXT4-fs (loop1): required journal recovery suppressed and not mounted read-only [ 91.473112][ T5229] loop0: detected capacity change from 0 to 128 [ 91.481496][ T5229] netlink: 8 bytes leftover after parsing attributes in process `syz.0.425'. [ 91.504485][ T5229] loop0: detected capacity change from 0 to 512 [ 91.511503][ T5229] journal_path: Non-blockdev passed as './file2' [ 91.517974][ T5229] EXT4-fs: error: could not find journal device path [ 91.534987][ T5229] netlink: 12 bytes leftover after parsing attributes in process `syz.0.425'. [ 91.621461][ T5240] 9p: Bad value for 'rfdno' [ 91.648282][ T5243] loop1: detected capacity change from 0 to 1024 [ 91.664554][ T5243] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 91.680112][ T5243] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.429: bg 0: block 112: padding at end of block bitmap is not set [ 91.703620][ T5243] bond1: entered promiscuous mode [ 91.709042][ T5243] 8021q: adding VLAN 0 to HW filter on device bond1 [ 91.723053][ T5243] 8021q: adding VLAN 0 to HW filter on device bond1 [ 91.730520][ T5243] bond1: (slave sit1): The slave device specified does not support setting the MAC address [ 91.743192][ T5243] bond1: (slave sit1): Error -95 calling set_mac_address [ 91.780868][ T5250] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28 [ 91.793403][ T5250] EXT4-fs (loop1): This should not happen!! Data will be lost [ 91.793403][ T5250] [ 91.803148][ T5250] EXT4-fs (loop1): Total free blocks count 0 [ 91.809431][ T5250] EXT4-fs (loop1): Free/Dirty block details [ 91.816299][ T5250] EXT4-fs (loop1): free_blocks=0 [ 91.821878][ T5250] EXT4-fs (loop1): dirty_blocks=16 [ 91.826993][ T5250] EXT4-fs (loop1): Block reservation details [ 91.833056][ T5250] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 91.846739][ T28] kauditd_printk_skb: 262 callbacks suppressed [ 91.846767][ T28] audit: type=1400 audit(91.808:4446): avc: denied { unmount } for pid=3318 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 91.850104][ T3318] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 91.883675][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 91.914540][ T5253] loop1: detected capacity change from 0 to 1024 [ 91.921861][ T5253] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 91.931377][ T5253] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 91.942412][ T5253] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 91.950648][ T5253] EXT4-fs (loop1): orphan cleanup on readonly fs [ 91.957113][ T5253] EXT4-fs error (device loop1): ext4_free_blocks:6724: comm syz.1.430: Freeing blocks not in datazone - block = 0, count = 4096 [ 91.970989][ T5253] loop1: lost filesystem error report for type 5 error -117 [ 91.971211][ T5253] EXT4-fs (loop1): 1 orphan inode deleted [ 91.984252][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 91.984267][ C0] EXT4-fs (loop1): initial error at time 91: ext4_free_blocks:6724 [ 91.984282][ C0] EXT4-fs (loop1): last error at time 91: ext4_free_blocks:6724 [ 92.006845][ T5253] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 92.024355][ T5253] xt_hashlimit: size too large, truncated to 1048576 [ 92.083993][ T28] audit: type=1400 audit(92.048:4447): avc: denied { connect } for pid=5252 comm="syz.1.430" lport=256 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 92.115780][ T5258] syzkaller0: entered promiscuous mode [ 92.121691][ T5258] syzkaller0: entered allmulticast mode [ 92.132445][ T28] audit: type=1400 audit(92.098:4448): avc: denied { create } for pid=5256 comm="syz.4.431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 92.154907][ T28] audit: type=1400 audit(92.098:4449): avc: denied { write } for pid=5256 comm="syz.4.431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 92.174262][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.321139][ T5262] loop0: detected capacity change from 0 to 512 [ 92.328152][ T28] audit: type=1400 audit(92.288:4450): avc: denied { remount } for pid=5261 comm="syz.0.433" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 92.374978][ T28] audit: type=1400 audit(92.338:4451): avc: denied { create } for pid=5263 comm="syz.0.434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 92.399435][ T28] audit: type=1400 audit(92.338:4452): avc: denied { setopt } for pid=5263 comm="syz.0.434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 92.430894][ T28] audit: type=1400 audit(92.388:4453): avc: denied { create } for pid=5267 comm="syz.0.436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 92.451416][ T28] audit: type=1400 audit(92.388:4454): avc: denied { read } for pid=5267 comm="syz.0.436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 92.490069][ T28] audit: type=1400 audit(92.438:4455): avc: denied { shutdown } for pid=5267 comm="syz.0.436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 92.574859][ T5279] loop4: detected capacity change from 0 to 4096 [ 92.589619][ T5279] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 92.604936][ T5284] loop1: detected capacity change from 0 to 512 [ 92.621935][ T5284] EXT4-fs: Ignoring removed nobh option [ 92.633142][ T5284] EXT4-fs: Ignoring removed mblk_io_submit option [ 92.715082][ T5284] EXT4-fs (loop1): orphan cleanup on readonly fs [ 92.725341][ T5284] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 92.735660][ T5287] EXT4-fs: Ignoring removed nobh option [ 92.747225][ T5284] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #13: comm syz.1.441: attempt to clear invalid blocks 2 len 1 [ 92.754389][ T5287] EXT4-fs: Ignoring removed mblk_io_submit option [ 92.767505][ T5284] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 92.768212][ T5284] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, [ 92.768250][ T5287] EXT4-fs (loop4): orphan cleanup on readonly fs [ 92.777394][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 92.777433][ C0] EXT4-fs (loop1): initial error at time 92: ext4_clear_blocks:876: inode 13 [ 92.807542][ C0] EXT4-fs (loop1): last error at time 92: ext4_clear_blocks:876: inode 13 [ 92.816160][ T5284] block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 92.824748][ T5284] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.441: invalid indirect mapped block 1819239214 (level 0) [ 92.838715][ T5284] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 92.838995][ T5284] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.441: invalid indirect mapped block 1819239214 (level 1) [ 92.842506][ T5287] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 92.857722][ T5284] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 92.870853][ T5284] EXT4-fs (loop1): 1 truncate cleaned up [ 92.886273][ T5284] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 92.892962][ T5287] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.442: attempt to clear invalid blocks 2 len 1 [ 92.914834][ T5278] veth0_to_team: entered promiscuous mode [ 92.919679][ T5287] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 92.925302][ T5287] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, [ 92.934489][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 92.934523][ C0] EXT4-fs (loop4): initial error at time 92: ext4_clear_blocks:876: inode 13 [ 92.934584][ C0] EXT4-fs (loop4): last error at time 92: ext4_clear_blocks:876: inode 13 [ 92.966976][ T5287] block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 92.975566][ T5278] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 92.975852][ T5287] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.442: invalid indirect mapped block 1819239214 (level 0) [ 92.985841][ T5278] block device autoloading is deprecated and will be removed. [ 93.003357][ T5287] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 93.012034][ T5287] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.442: invalid indirect mapped block 1819239214 (level 1) [ 93.012757][ T5278] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 93.021272][ T5287] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 93.036151][ T5278] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 93.060259][ T5278] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 93.067803][ T5278] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 93.075272][ T5287] EXT4-fs (loop4): 1 truncate cleaned up [ 93.084993][ T5287] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 93.309938][ T5296] vfat: Unknown parameter '30M3ު# &ǝk#p`6y78xPBXZ' [ 93.334016][ T5294] netlink: 'syz.2.444': attribute type 1 has an invalid length. [ 93.346836][ T5294] FAT-fs (loop2): bogus sectors per cluster 223 [ 93.363723][ T5294] FAT-fs (loop2): Can't find a valid FAT filesystem [ 93.537930][ T5299] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 93.647750][ T5284] Set syz1 is full, maxelem 65536 reached [ 93.997920][ T5291] Set syz1 is full, maxelem 65536 reached [ 94.178259][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.210898][ T5308] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.228674][ T5305] __nla_validate_parse: 8 callbacks suppressed [ 94.228690][ T5305] netlink: 16 bytes leftover after parsing attributes in process `syz.0.447'. [ 94.281010][ T5314] EXT4-fs: Ignoring removed mblk_io_submit option [ 94.287927][ T5314] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 94.298790][ T5314] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.418120][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.463459][ T5320] netlink: 'syz.0.451': attribute type 12 has an invalid length. [ 94.471311][ T5320] netlink: 4 bytes leftover after parsing attributes in process `syz.0.451'. [ 94.483333][ T3866] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 94.483388][ T5320] netlink: 'syz.0.451': attribute type 12 has an invalid length. [ 94.492309][ T3866] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 94.500211][ T5320] netlink: 4 bytes leftover after parsing attributes in process `syz.0.451'. [ 94.509199][ T3866] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 94.526796][ T3866] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 94.528709][ T5321] EXT4-fs: dax option not supported [ 94.547845][ T5321] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 94.554498][ T5321] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 94.563230][ T5321] vhci_hcd vhci_hcd.0: Device attached [ 94.576232][ T5322] vhci_hcd: connection closed [ 94.576371][ T3856] vhci_hcd vhci_hcd.0: stop threads [ 94.586779][ T3856] vhci_hcd vhci_hcd.0: release socket [ 94.592232][ T3856] vhci_hcd vhci_hcd.0: disconnect device [ 94.609356][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.635297][ T5325] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.663322][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.688220][ T5331] EXT4-fs (loop4): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 94.701180][ T5331] EXT4-fs error (device loop4): ext4_map_blocks:786: inode #3: block 2: comm syz.4.453: lblock 2 mapped to illegal pblock 2 (length 1) [ 94.715124][ T5331] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 94.716028][ T5331] EXT4-fs (loop4): Remounting filesystem read-only [ 94.725099][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 94.725122][ C0] EXT4-fs (loop4): initial error at time 94: ext4_map_blocks:786: inode 3: block 2 [ 94.725245][ C0] EXT4-fs (loop4): last error at time 94: ext4_map_blocks:786: inode 3: block 2 [ 94.756773][ T5331] EXT4-fs (loop4): 1 orphan inode deleted [ 94.763140][ T5331] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.849765][ T5333] xt_TCPMSS: Only works on TCP SYN packets [ 94.896966][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.059176][ T5352] vfat: Unknown parameter 'shortnaKe' [ 95.068116][ T5352] set_capacity_and_notify: 9 callbacks suppressed [ 95.068133][ T5352] loop1: detected capacity change from 0 to 512 [ 95.092204][ T5352] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.142743][ T5357] netlink: 4 bytes leftover after parsing attributes in process `syz.0.460'. [ 95.165004][ T5358] xfrm0 speed is unknown, defaulting to 1000 [ 95.280025][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.353938][ T5358] loop2: detected capacity change from 0 to 512 [ 95.391378][ T5358] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.540162][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.541022][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.615358][ T5374] loop1: detected capacity change from 0 to 512 [ 95.683100][ T5374] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.941596][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.972253][ T5384] bond1: option tlb_dynamic_lb: invalid value (255) [ 95.989897][ T5384] bond1 (unregistering): Released all slaves [ 96.227527][ T5399] loop4: detected capacity change from 0 to 1764 [ 96.486512][ T5403] loop1: detected capacity change from 0 to 1764 [ 96.494200][ T5403] iso9660: Unknown parameter 'utF8' [ 96.618060][ T5408] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 96.730387][ T5409] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 96.911762][ T5415] loop4: detected capacity change from 0 to 512 [ 97.027180][ T5411] loop0: detected capacity change from 0 to 8192 [ 97.058500][ T5417] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 97.081488][ T5415] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.147343][ T5417] netlink: 'syz.2.478': attribute type 1 has an invalid length. [ 97.193061][ T5417] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 97.204357][ T5417] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 97.238074][ T28] kauditd_printk_skb: 61 callbacks suppressed [ 97.238091][ T28] audit: type=1400 audit(97.198:4515): avc: denied { bind } for pid=5414 comm="syz.4.477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 97.264003][ T5424] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 97.293866][ T5417] bond1: (slave bridge1): Enslaving as an active interface with a down link [ 97.303223][ T5424] tipc: Failed to remove unknown binding: 66,1,1/0:2531225400/2531225402 [ 97.313947][ T28] audit: type=1400 audit(97.248:4516): avc: denied { setopt } for pid=5414 comm="syz.4.477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 97.353172][ T28] audit: type=1400 audit(97.298:4517): avc: denied { read } for pid=5414 comm="syz.4.477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 97.372602][ T5411] loop0: p1 p2 p3 p4 [ 97.377398][ T5411] loop0: p2 size 262235 extends beyond EOD, truncated [ 97.392859][ T5411] loop0: p3 start 117772289 is beyond EOD, truncated [ 97.404934][ T5411] loop0: p4 size 720896 extends beyond EOD, truncated [ 97.425065][ T28] audit: type=1400 audit(97.298:4518): avc: denied { create } for pid=5416 comm="syz.2.478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 97.513649][ T28] audit: type=1400 audit(97.448:4519): avc: denied { append } for pid=5425 comm="syz.2.479" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 97.545811][ T3518] udevd[3518]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 97.557065][ T3296] udevd[3296]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 97.570981][ T3517] udevd[3517]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 97.632360][ T28] audit: type=1400 audit(97.508:4520): avc: denied { setopt } for pid=5431 comm="syz.2.481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 97.653382][ T5438] loop2: detected capacity change from 0 to 128 [ 97.661201][ T5437] loop0: detected capacity change from 0 to 1024 [ 97.674849][ T5438] netlink: 8 bytes leftover after parsing attributes in process `syz.2.482'. [ 97.708859][ T5437] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.736090][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.755448][ T28] audit: type=1326 audit(97.708:4521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5435 comm="syz.2.482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f480ceec819 code=0x7ffc0000 [ 97.781065][ T5437] FAULT_INJECTION: forcing a failure. [ 97.781065][ T5437] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 97.804445][ T5438] loop2: detected capacity change from 0 to 512 [ 97.812796][ T5438] journal_path: Non-blockdev passed as './file2' [ 97.830715][ T5437] CPU: 0 UID: 0 PID: 5437 Comm: syz.0.483 Not tainted syzkaller #0 PREEMPT(full) [ 97.830784][ T5437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 97.830798][ T5437] Call Trace: [ 97.830807][ T5437] [ 97.830830][ T5437] __dump_stack+0x1d/0x30 [ 97.830861][ T5437] dump_stack_lvl+0x95/0xd0 [ 97.830884][ T5437] dump_stack+0x15/0x1b [ 97.830925][ T5437] should_fail_ex+0x263/0x280 [ 97.830967][ T5437] should_fail+0xb/0x20 [ 97.831053][ T5437] should_fail_usercopy+0x1a/0x20 [ 97.831131][ T5437] _copy_to_user+0x20/0xa0 [ 97.831173][ T5437] __se_sys_file_getattr+0x3b6/0x4b0 [ 97.831201][ T5437] __x64_sys_file_getattr+0x67/0x80 [ 97.831227][ T5437] x64_sys_call+0x2f9d/0x3020 [ 97.831253][ T5437] do_syscall_64+0x12c/0x370 [ 97.831359][ T5437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.831384][ T5437] RIP: 0033:0x7fd68b21c819 [ 97.831401][ T5437] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.831418][ T5437] RSP: 002b:00007fd689c77028 EFLAGS: 00000246 ORIG_RAX: 00000000000001d4 [ 97.831441][ T5437] RAX: ffffffffffffffda RBX: 00007fd68b495fa0 RCX: 00007fd68b21c819 [ 97.831475][ T5437] RDX: 0000200000000300 RSI: 0000000000000000 RDI: ffffffffffffff9c [ 97.831492][ T5437] RBP: 00007fd689c77090 R08: 0000000000001000 R09: 0000000000000000 [ 97.831507][ T5437] R10: 0000000000000018 R11: 0000000000000246 R12: 0000000000000001 [ 97.831561][ T5437] R13: 00007fd68b496038 R14: 00007fd68b495fa0 R15: 00007ffeafbd3838 [ 97.831582][ T5437] [ 97.999850][ T5438] EXT4-fs: error: could not find journal device path [ 98.007096][ T28] audit: type=1326 audit(97.708:4522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5435 comm="syz.2.482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f480ceec819 code=0x7ffc0000 [ 98.032418][ T5438] netlink: 12 bytes leftover after parsing attributes in process `syz.2.482'. [ 98.044305][ T5438] netlink: 48 bytes leftover after parsing attributes in process `syz.2.482'. [ 98.053811][ T28] audit: type=1326 audit(97.738:4523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5435 comm="syz.2.482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f480ceec819 code=0x7ffc0000 [ 98.080085][ T28] audit: type=1326 audit(97.738:4524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5435 comm="syz.2.482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f480ceec819 code=0x7ffc0000 [ 98.152554][ T5438] netlink: 8 bytes leftover after parsing attributes in process `syz.2.482'. [ 98.261569][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.283831][ T5454] netlink: 28 bytes leftover after parsing attributes in process `syz.4.490'. [ 98.302849][ T5455] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 98.473308][ T5483] netlink: 4 bytes leftover after parsing attributes in process `syz.1.495'. [ 98.507183][ T5482] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.520981][ T5482] FAULT_INJECTION: forcing a failure. [ 98.520981][ T5482] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 98.541966][ T5482] CPU: 1 UID: 0 PID: 5482 Comm: syz.2.497 Not tainted syzkaller #0 PREEMPT(full) [ 98.542031][ T5482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 98.542111][ T5482] Call Trace: [ 98.542127][ T5482] [ 98.542134][ T5482] __dump_stack+0x1d/0x30 [ 98.542166][ T5482] dump_stack_lvl+0x95/0xd0 [ 98.542192][ T5482] dump_stack+0x15/0x1b [ 98.542294][ T5482] should_fail_ex+0x263/0x280 [ 98.542323][ T5482] should_fail+0xb/0x20 [ 98.542350][ T5482] should_fail_usercopy+0x1a/0x20 [ 98.542383][ T5482] _copy_to_user+0x20/0xa0 [ 98.542434][ T5482] simple_read_from_buffer+0xb5/0x130 [ 98.542500][ T5482] proc_fail_nth_read+0x10e/0x150 [ 98.542562][ T5482] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 98.542589][ T5482] vfs_read+0x1ab/0x7f0 [ 98.542609][ T5482] ? __rcu_read_unlock+0x4e/0x70 [ 98.542673][ T5482] ? __fget_files+0x184/0x1c0 [ 98.542697][ T5482] ? mutex_lock+0x57/0x90 [ 98.542716][ T5482] ksys_read+0xdc/0x1a0 [ 98.542767][ T5482] __x64_sys_read+0x40/0x50 [ 98.542785][ T5482] x64_sys_call+0x2886/0x3020 [ 98.542813][ T5482] do_syscall_64+0x12c/0x370 [ 98.542863][ T5482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.542883][ T5482] RIP: 0033:0x7f480cead04e [ 98.542899][ T5482] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 98.542927][ T5482] RSP: 002b:00007f480b946fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 98.542993][ T5482] RAX: ffffffffffffffda RBX: 00007f480b9476c0 RCX: 00007f480cead04e [ 98.543007][ T5482] RDX: 000000000000000f RSI: 00007f480b9470a0 RDI: 0000000000000004 [ 98.543067][ T5482] RBP: 00007f480b947090 R08: 0000000000000000 R09: 0000000000000000 [ 98.543079][ T5482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 98.543091][ T5482] R13: 00007f480d166038 R14: 00007f480d165fa0 R15: 00007ffda70a30f8 [ 98.543112][ T5482] [ 98.546314][ T5490] xfrm0 speed is unknown, defaulting to 1000 [ 98.750068][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.781007][ T5459] xfrm0 speed is unknown, defaulting to 1000 [ 98.966086][ T5501] SELinux: ebitmap: truncated map [ 98.966954][ T5459] chnl_net:caif_netlink_parms(): no params data found [ 98.983666][ T5501] SELinux: failed to load policy [ 99.027547][ T5459] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.044274][ T5459] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.050171][ T5512] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 99.052562][ T5459] bridge_slave_0: entered allmulticast mode [ 99.067273][ T5459] bridge_slave_0: entered promiscuous mode [ 99.077094][ T5459] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.084393][ T5459] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.094454][ T5459] bridge_slave_1: entered allmulticast mode [ 99.101421][ T5459] bridge_slave_1: entered promiscuous mode [ 99.119654][ T5459] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.130274][ T5459] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.154619][ T5519] netlink: 'syz.2.505': attribute type 3 has an invalid length. [ 99.180257][ T5459] team0: Port device team_slave_0 added [ 99.187153][ T5459] team0: Port device team_slave_1 added [ 99.217852][ T5459] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.225118][ T5459] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.253331][ T5459] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.264784][ T5459] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.271909][ T5459] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.298352][ T5459] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.439232][ T5521] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 99.459323][ T5538] EXT4-fs: Ignoring removed nobh option [ 99.459903][ T5459] hsr_slave_0: entered promiscuous mode [ 99.469205][ T5521] System zones: [ 99.471237][ T5459] hsr_slave_1: entered promiscuous mode [ 99.471557][ T5521] 0-1 [ 99.475091][ T5459] debugfs: 'hsr0' already exists in 'hsr' [ 99.475109][ T5459] Cannot create hsr debugfs directory [ 99.489567][ T5538] EXT4-fs: Ignoring removed mblk_io_submit option [ 99.518461][ T5521] , 3-36 [ 99.526151][ T5538] EXT4-fs (loop4): orphan cleanup on readonly fs [ 99.569321][ T5538] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 99.582503][ T5538] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.509: attempt to clear invalid blocks 2 len 1 [ 99.605626][ T5521] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.506: bad orphan inode 134217728 [ 99.623080][ T5459] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 99.626475][ T5538] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 99.634087][ T5521] loop1: lost filesystem error report for type 5 error -117 [ 99.636269][ T5459] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 99.649604][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 99.652657][ T5538] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, [ 99.657851][ C1] EXT4-fs (loop1): initial error at time 99: ext4_orphan_get:1423 [ 99.664282][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 99.672530][ C1] [ 99.672538][ C1] EXT4-fs (loop1): last error at time 99: ext4_orphan_get:1423 [ 99.680446][ C0] EXT4-fs (loop4): initial error at time 99: ext4_clear_blocks:876 [ 99.686927][ C1] [ 99.707371][ C0] : inode 13 [ 99.708864][ T5521] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.710612][ C0] EXT4-fs (loop4): last error at time 99: ext4_clear_blocks:876: inode 13 [ 99.710686][ T5538] block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 99.714867][ T5538] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.509: invalid indirect mapped block 1819239214 (level 0) [ 99.754378][ T5521] __nla_validate_parse: 3 callbacks suppressed [ 99.754472][ T5521] netlink: 8 bytes leftover after parsing attributes in process `syz.1.506'. [ 99.765839][ T5538] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 99.772665][ T5538] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.509: invalid indirect mapped block 1819239214 (level 1) [ 99.807023][ T5548] EXT4-fs: dax option not supported [ 99.825009][ T5538] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 99.827817][ T5538] EXT4-fs (loop4): 1 truncate cleaned up [ 99.847679][ T5538] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 99.897702][ T5554] netlink: 4 bytes leftover after parsing attributes in process `syz.0.513'. [ 99.940028][ T5521] ip6gre2: entered promiscuous mode [ 99.946290][ T5521] ip6gre2: entered allmulticast mode [ 99.966013][ T5459] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 99.982708][ T5459] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 100.044159][ T5567] netlink: 28 bytes leftover after parsing attributes in process `syz.0.514'. [ 100.060737][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.093859][ T5459] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.113213][ T5571] set_capacity_and_notify: 6 callbacks suppressed [ 100.113302][ T5571] loop1: detected capacity change from 0 to 128 [ 100.141790][ T5571] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 100.145452][ T5459] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.179332][ T3858] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.186446][ T3858] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.198008][ T3858] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.205223][ T3858] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.232782][ T5459] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 100.296233][ T5459] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.305379][ T5588] netlink: 8 bytes leftover after parsing attributes in process `syz.1.518'. [ 100.343208][ T5588] loop1: detected capacity change from 0 to 128 [ 100.380268][ T5588] 9p: Bad value for 'rfdno' [ 100.385172][ T5588] netlink: 12 bytes leftover after parsing attributes in process `syz.1.518'. [ 100.405588][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.539812][ T5459] veth0_vlan: entered promiscuous mode [ 100.549822][ T5601] netlink: 8 bytes leftover after parsing attributes in process `syz.4.519'. [ 100.558755][ T5601] netlink: 312 bytes leftover after parsing attributes in process `syz.4.519'. [ 100.581641][ T5459] veth1_vlan: entered promiscuous mode [ 100.599855][ T5459] veth0_macvtap: entered promiscuous mode [ 100.607929][ T5459] veth1_macvtap: entered promiscuous mode [ 100.631262][ T5459] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.647114][ T5459] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.659051][ T3862] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.682181][ T3862] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.693043][ T3858] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 100.709206][ T3858] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 100.725876][ T3862] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.734895][ T3379] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 100.750043][ T3862] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.826911][ T5621] netlink: 28 bytes leftover after parsing attributes in process `syz.5.525'. [ 100.873809][ T5630] loop4: detected capacity change from 0 to 128 [ 100.897285][ T5630] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 100.906854][ T10] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 100.931015][ T5632] loop5: detected capacity change from 0 to 512 [ 101.006962][ T5632] EXT4-fs: Ignoring removed nobh option [ 101.029727][ T5632] EXT4-fs: Ignoring removed mblk_io_submit option [ 101.056091][ T5632] EXT4-fs (loop5): orphan cleanup on readonly fs [ 101.067643][ T5642] loop2: detected capacity change from 0 to 2048 [ 101.074037][ T5632] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -13 [ 101.094788][ T5643] loop4: detected capacity change from 0 to 128 [ 101.094865][ T5632] EXT4-fs error (device loop5): ext4_clear_blocks:876: inode #13: comm syz.5.528: attempt to clear invalid blocks 2 len 1 [ 101.120231][ T5643] netlink: 8 bytes leftover after parsing attributes in process `syz.4.531'. [ 101.133981][ T5632] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 101.139521][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 101.155330][ C0] EXT4-fs (loop5): initial error at time 101: ext4_clear_blocks:876: inode 13 [ 101.155775][ T5643] loop4: detected capacity change from 0 to 512 [ 101.164231][ C0] EXT4-fs (loop5): last error at time 101: ext4_clear_blocks:876: inode 13 [ 101.193156][ T5632] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 101.210699][ T5643] journal_path: Non-blockdev passed as './file2' [ 101.217956][ T5632] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.528: invalid indirect mapped block 1819239214 (level 0) [ 101.233661][ T5643] EXT4-fs: error: could not find journal device path [ 101.242512][ T5642] loop2: p2 p3 p7 [ 101.255866][ T5643] netlink: 12 bytes leftover after parsing attributes in process `syz.4.531'. [ 101.281223][ T5632] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 101.284610][ T5632] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.528: invalid indirect mapped block 1819239214 (level 1) [ 101.323551][ T5632] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 101.347192][ T5632] EXT4-fs (loop5): 1 truncate cleaned up [ 101.370197][ T5632] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 101.370435][ T10] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 101.432660][ T3296] udevd[3296]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 101.558212][ T5674] loop2: detected capacity change from 0 to 1024 [ 101.663371][ T5681] loop2: detected capacity change from 0 to 512 [ 101.687080][ T5681] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.715240][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.932274][ T5693] loop4: detected capacity change from 0 to 1024 [ 101.938951][ T5693] EXT4-fs: test_dummy_encryption option not supported [ 102.290545][ T28] kauditd_printk_skb: 306 callbacks suppressed [ 102.290629][ T28] audit: type=1400 audit(102.198:4831): avc: denied { write } for pid=5692 comm="syz.4.545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 102.411084][ T5707] EXT4-fs (loop4): 1 orphan inode deleted [ 102.417905][ T5707] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.548443][ T28] audit: type=1400 audit(102.208:4832): avc: denied { setopt } for pid=5694 comm="syz.2.546" lport=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 102.719007][ T28] audit: type=1400 audit(102.398:4833): avc: denied { map } for pid=5692 comm="syz.4.545" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=11770 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 102.869595][ T28] audit: type=1400 audit(102.398:4834): avc: denied { read write } for pid=5692 comm="syz.4.545" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=11770 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 102.895975][ T5632] Set syz1 is full, maxelem 65536 reached [ 102.959697][ T28] audit: type=1400 audit(102.408:4835): avc: denied { getopt } for pid=5692 comm="syz.4.545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 103.089592][ T3856] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 103.130815][ T3856] EXT4-fs error (device loop4): ext4_release_dquot:7062: comm kworker/u8:10: Failed to release dquot type 1 [ 103.248179][ T28] audit: type=1400 audit(103.208:4836): avc: denied { setopt } for pid=5713 comm="syz.0.549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 103.321104][ T28] audit: type=1400 audit(103.238:4837): avc: denied { ioctl } for pid=5713 comm="syz.0.549" path="socket:[11784]" dev="sockfs" ino=11784 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 103.449953][ T28] audit: type=1400 audit(103.248:4838): avc: denied { read } for pid=5713 comm="syz.0.549" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 103.560074][ T28] audit: type=1400 audit(103.248:4839): avc: denied { open } for pid=5713 comm="syz.0.549" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 103.615726][ T5459] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.772696][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.956059][ T5720] syzkaller0: entered promiscuous mode [ 103.989538][ T5720] syzkaller0: entered allmulticast mode [ 104.005606][ T5738] journal_path: Non-blockdev passed as './file2' [ 104.015775][ T5740] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5740 comm=syz.4.556 [ 104.050727][ T5740] netlink: 'syz.4.556': attribute type 1 has an invalid length. [ 104.059361][ T5738] EXT4-fs: error: could not find journal device path [ 104.077937][ T5742] tipc: Enabling of bearer rejected, failed to enable media [ 104.133530][ T5743] bond1: (slave bridge1): making interface the new active one [ 104.142185][ T5743] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 104.273569][ T5756] netlink: 'syz.2.558': attribute type 11 has an invalid length. [ 104.311035][ T5753] hsr_slave_1 (unregistering): left promiscuous mode [ 104.769604][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 105.230280][ T5769] set_capacity_and_notify: 3 callbacks suppressed [ 105.230305][ T5769] loop4: detected capacity change from 0 to 512 [ 105.269472][ T5769] EXT4-fs: Ignoring removed mblk_io_submit option [ 105.280758][ T5769] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 105.332498][ T5769] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.390277][ T5769] __nla_validate_parse: 9 callbacks suppressed [ 105.390293][ T5769] netlink: 8 bytes leftover after parsing attributes in process `syz.4.565'. [ 105.863687][ T5778] netlink: 76 bytes leftover after parsing attributes in process `syz.2.566'. [ 105.883855][ T5778] loop2: detected capacity change from 0 to 512 [ 105.911485][ T5778] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 105.926209][ T5778] EXT4-fs (loop2): 1 truncate cleaned up [ 105.934956][ T5778] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.097790][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.751563][ T5791] loop4: detected capacity change from 0 to 1024 [ 106.762898][ T5794] bond1: option downdelay: invalid value (18446744073709551570) [ 106.791204][ T5791] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.798960][ T5794] bond1: option downdelay: allowed values 0 - 2147483647 [ 106.804888][ T5791] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.888817][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.903035][ T5794] bond1 (unregistering): Released all slaves [ 106.952932][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 106.969616][ T23] hid-generic 0000:0000:0000.0001: item fetching failed at offset 1/2 [ 106.981558][ T23] hid-generic 0000:0000:0000.0001: probe with driver hid-generic failed with error -22 [ 106.999662][ T5806] netlink: 'syz.2.573': attribute type 10 has an invalid length. [ 107.040111][ T5806] team0: Port device dummy0 added [ 107.052413][ T5801] netlink: 'syz.2.573': attribute type 10 has an invalid length. [ 107.060930][ T5801] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 107.131643][ T5801] team0: Failed to send options change via netlink (err -105) [ 107.140274][ T5818] loop0: detected capacity change from 0 to 512 [ 107.143003][ T5801] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 107.169784][ T5801] team0: Port device dummy0 removed [ 107.176514][ T5818] EXT4-fs: Ignoring removed nobh option [ 107.178700][ T5801] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 107.189515][ T5818] EXT4-fs: Ignoring removed mblk_io_submit option [ 107.197323][ T5820] loop5: detected capacity change from 0 to 128 [ 107.205773][ T5820] netlink: 8 bytes leftover after parsing attributes in process `syz.5.580'. [ 107.216519][ T5818] EXT4-fs (loop0): orphan cleanup on readonly fs [ 107.229653][ T5818] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 107.238328][ T5818] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #13: comm syz.0.579: attempt to clear invalid blocks 2 len 1 [ 107.249771][ T5820] loop5: detected capacity change from 0 to 512 [ 107.269363][ T5818] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 107.269520][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 107.285177][ C0] EXT4-fs (loop0): initial error at time 107: ext4_clear_blocks:876: inode 13 [ 107.294085][ C0] EXT4-fs (loop0): last error at time 107: ext4_clear_blocks:876: inode 13 [ 107.299893][ T28] kauditd_printk_skb: 106 callbacks suppressed [ 107.299907][ T28] audit: type=1326 audit(107.268:4946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5819 comm="syz.5.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fae5839d04e code=0x7ffc0000 [ 107.302954][ T5818] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, [ 107.309917][ T28] audit: type=1326 audit(107.268:4947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5819 comm="syz.5.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fae5839d04e code=0x7ffc0000 [ 107.331708][ T5818] block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 107.341970][ T5820] journal_path: Non-blockdev passed as './file2' [ 107.363124][ T5818] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.579: invalid indirect mapped block 1819239214 (level 0) [ 107.391949][ T5820] EXT4-fs: error: could not find journal device path [ 107.399159][ T5818] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 107.399406][ T5818] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.579: invalid indirect mapped block 1819239214 (level 1) [ 107.423925][ T28] audit: type=1326 audit(107.308:4948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5819 comm="syz.5.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fae583db687 code=0x7ffc0000 [ 107.446761][ T5820] netlink: 12 bytes leftover after parsing attributes in process `syz.5.580'. [ 107.456062][ T5820] netlink: 48 bytes leftover after parsing attributes in process `syz.5.580'. [ 107.465562][ T5818] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 107.465623][ T5825] netlink: 4 bytes leftover after parsing attributes in process `syz.2.581'. [ 107.469667][ T28] audit: type=1326 audit(107.308:4949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5819 comm="syz.5.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fae583dda8a code=0x7ffc0000 [ 107.507090][ T28] audit: type=1326 audit(107.358:4950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5819 comm="syz.5.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fae5839d04e code=0x7ffc0000 [ 107.511600][ T5818] EXT4-fs (loop0): 1 truncate cleaned up [ 107.530001][ T28] audit: type=1326 audit(107.358:4951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5819 comm="syz.5.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fae583dc4ab code=0x7ffc0000 [ 107.573921][ T5818] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 107.582589][ T5820] netlink: 8 bytes leftover after parsing attributes in process `syz.5.580'. [ 107.624034][ T28] audit: type=1326 audit(107.358:4952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5819 comm="syz.5.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fae5839d04e code=0x7ffc0000 [ 107.647188][ T28] audit: type=1326 audit(107.358:4953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5819 comm="syz.5.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae583dc819 code=0x7ffc0000 [ 107.702112][ T28] audit: type=1326 audit(107.358:4954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5819 comm="syz.5.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae583dc819 code=0x7ffc0000 [ 107.725569][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.727150][ T28] audit: type=1326 audit(107.388:4955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5819 comm="syz.5.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fae583dc819 code=0x7ffc0000 [ 107.758530][ T5834] netlink: 8 bytes leftover after parsing attributes in process `syz.2.583'. [ 107.823792][ T5838] netlink: 20 bytes leftover after parsing attributes in process `syz.0.585'. [ 107.833137][ T5834] netlink: 312 bytes leftover after parsing attributes in process `syz.2.583'. [ 107.833252][ T5838] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5838 comm=syz.0.585 [ 108.111241][ T5855] loop2: detected capacity change from 0 to 1024 [ 108.149942][ T5855] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 108.230768][ T5855] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 108.371799][ T5855] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 108.382211][ T5872] loop0: detected capacity change from 0 to 512 [ 108.392391][ T5855] EXT4-fs (loop2): orphan cleanup on readonly fs [ 108.404521][ T5872] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 108.425080][ T5855] EXT4-fs error (device loop2): ext4_free_blocks:6724: comm syz.2.590: Freeing blocks not in datazone - block = 0, count = 4096 [ 108.469406][ T5855] loop2: lost filesystem error report for type 5 error -117 [ 108.469879][ T5855] EXT4-fs (loop2): 1 orphan inode deleted [ 108.483177][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 108.483235][ C0] EXT4-fs (loop2): initial error at time 108: ext4_free_blocks:6724 [ 108.483261][ C0] EXT4-fs (loop2): last error at time 108: ext4_free_blocks:6724 [ 108.549815][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.590257][ T5855] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 108.634904][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.945059][ T5898] loop4: detected capacity change from 0 to 512 [ 109.029137][ T5898] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.420700][ T5908] sctp: [Deprecated]: syz.2.604 (pid 5908) Use of struct sctp_assoc_value in delayed_ack socket option. [ 109.420700][ T5908] Use struct sctp_sack_info instead [ 109.498290][ T5911] loop2: detected capacity change from 0 to 512 [ 109.541607][ T5909] ext3: Bad value for 'journal_dev' [ 109.720217][ T5921] EXT4-fs: Ignoring removed nobh option [ 109.861794][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.961582][ T5921] EXT4-fs (loop0): orphan cleanup on readonly fs [ 109.988692][ T5921] EXT4-fs warning (device loop0): ext4_xattr_inode_get:546: inode #11: comm syz.0.609: ea_inode file size=4294967295 entry size=6 [ 110.035185][ T5921] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 110.083909][ T5921] EXT4-fs error (device loop0): ext4_do_update_inode:5602: inode #15: comm syz.0.609: corrupted inode contents [ 110.095965][ T5921] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 110.096118][ T5921] EXT4-fs error (device loop0): ext4_dirty_inode:6495: inode #15: comm syz.0.609: mark_inode_dirty error [ 110.105322][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 110.105339][ C1] EXT4-fs (loop0): initial error at time 110: ext4_do_update_inode:5602: inode 15 [ 110.105380][ C1] EXT4-fs (loop0): last error at time 110: ext4_do_update_inode:5602: inode 15 [ 110.141727][ T5921] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 110.141970][ T5921] EXT4-fs error (device loop0): ext4_do_update_inode:5602: inode #15: comm syz.0.609: corrupted inode contents [ 110.163141][ T5921] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 110.180982][ T5921] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2999: inode #15: comm syz.0.609: mark_inode_dirty error [ 110.202072][ T5921] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 110.205629][ T5921] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3002: inode #15: comm syz.0.609: mark inode dirty (error -117) [ 110.319649][ T5932] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1000 sclass=netlink_route_socket pid=5932 comm=syz.4.612 [ 110.332259][ T5921] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 110.337179][ T5921] EXT4-fs warning (device loop0): ext4_evict_inode:285: xattr delete (err -117) [ 110.369553][ T5921] EXT4-fs (loop0): 1 orphan inode deleted [ 110.375823][ T5921] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 110.460697][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.497058][ T5938] set_capacity_and_notify: 3 callbacks suppressed [ 110.497076][ T5938] loop4: detected capacity change from 0 to 512 [ 110.542052][ T5938] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 110.643218][ T5947] loop0: detected capacity change from 0 to 2048 [ 110.695752][ T5947] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.803499][ T5954] loop4: detected capacity change from 0 to 764 [ 110.849755][ T5947] loop0: detected capacity change from 2048 to 64 [ 110.856793][ T5954] __nla_validate_parse: 6 callbacks suppressed [ 110.856812][ T5954] netlink: 8 bytes leftover after parsing attributes in process `syz.4.618'. [ 110.872116][ T5955] syz.0.616: attempt to access beyond end of device [ 110.872116][ T5955] loop0: rw=8423424, sector=640, nr_sectors = 4 limit=64 [ 110.886708][ T5955] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6291: Out of memory [ 110.906298][ T5955] EXT4-fs error (device loop0): ext4_dirty_inode:6495: inode #15: comm syz.0.616: mark_inode_dirty error [ 110.929799][ T5956] netlink: 48 bytes leftover after parsing attributes in process `syz.4.618'. [ 110.938813][ T5956] netlink: 8 bytes leftover after parsing attributes in process `syz.4.618'. [ 110.965781][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.979829][ T5950] kmmpd-loop0: attempt to access beyond end of device [ 110.979829][ T5950] loop0: rw=8402945, sector=320, nr_sectors = 4 limit=64 [ 110.999248][ T5956] bond2: option xmit_hash_policy: invalid value (46) [ 111.006904][ T5956] bond2 (unregistering): Released all slaves [ 111.017085][ T5950] Buffer I/O error on dev loop0, logical block 80, lost sync page write [ 111.041712][ T3858] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 111.079703][ T3858] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.131701][ T3858] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 111.142230][ T3858] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.192075][ T3858] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 111.214965][ T3858] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.272052][ T3858] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 111.290963][ T3858] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.382536][ T3858] bridge0: port 1(team0) entered disabled state [ 111.589838][ T5967] loop4: detected capacity change from 0 to 512 [ 111.623061][ T3858] bond0 (unregistering): Released all slaves [ 111.679623][ T5967] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.696019][ T3858] bond1 (unregistering): Released all slaves [ 111.750225][ T3858] bond2 (unregistering): Released all slaves [ 111.779913][ T5965] netlink: 16 bytes leftover after parsing attributes in process `syz.2.623'. [ 111.901814][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.976317][ T3858] hsr_slave_0: left promiscuous mode [ 111.999989][ T3858] veth1_macvtap: left promiscuous mode [ 112.005667][ T3858] veth0_macvtap: left promiscuous mode [ 112.027953][ T3858] veth1_vlan: left promiscuous mode [ 112.039753][ T3858] veth0_vlan: left promiscuous mode [ 112.241837][ T5990] netlink: 28 bytes leftover after parsing attributes in process `syz.2.627'. [ 112.279535][ T5990] netlink: 28 bytes leftover after parsing attributes in process `syz.2.627'. [ 112.298106][ T5969] xfrm0 speed is unknown, defaulting to 1000 [ 112.393482][ T6015] loop2: detected capacity change from 0 to 164 [ 112.499708][ T6015] Unable to read rock-ridge attributes [ 112.521836][ T6015] isofs_fill_super: root inode is not a directory. Corrupted media? [ 112.582301][ T5969] chnl_net:caif_netlink_parms(): no params data found [ 112.634338][ T3856] Bluetooth: hci0: Frame reassembly failed (-84) [ 112.653648][ T28] kauditd_printk_skb: 237 callbacks suppressed [ 112.653667][ T28] audit: type=1400 audit(112.618:5193): avc: denied { create } for pid=6012 comm="syz.2.631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 112.735687][ T28] audit: type=1400 audit(112.648:5194): avc: denied { bind } for pid=6012 comm="syz.2.631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 112.783698][ T5969] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.804212][ T5969] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.819605][ T28] audit: type=1400 audit(112.668:5195): avc: denied { create } for pid=6012 comm="syz.2.631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 112.858152][ T5969] bridge_slave_0: entered allmulticast mode [ 112.864888][ T5969] bridge_slave_0: entered promiscuous mode [ 112.881830][ T5969] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.889123][ T28] audit: type=1400 audit(112.688:5196): avc: denied { write } for pid=6012 comm="syz.2.631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 112.920154][ T5969] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.927389][ T5969] bridge_slave_1: entered allmulticast mode [ 112.939570][ T28] audit: type=1400 audit(112.688:5197): avc: denied { read } for pid=6012 comm="syz.2.631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 112.959212][ T5969] bridge_slave_1: entered promiscuous mode [ 113.001296][ T28] audit: type=1400 audit(112.738:5198): avc: denied { ioctl } for pid=6012 comm="syz.2.631" path="socket:[12176]" dev="sockfs" ino=12176 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 113.030289][ T6046] netlink: 256 bytes leftover after parsing attributes in process `syz.4.634'. [ 113.030695][ T5969] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 113.069578][ T28] audit: type=1400 audit(112.748:5199): avc: denied { map } for pid=6036 comm="syz.4.632" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=13144 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 113.094842][ T5969] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 113.159032][ T28] audit: type=1400 audit(112.748:5200): avc: denied { read write } for pid=6036 comm="syz.4.632" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=13144 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 113.183579][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 113.184574][ T5969] team0: Port device team_slave_0 added [ 113.196961][ T28] audit: type=1400 audit(112.808:5201): avc: denied { write } for pid=6012 comm="syz.2.631" path="socket:[12173]" dev="sockfs" ino=12173 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 113.223031][ T5969] team0: Port device team_slave_1 added [ 113.244912][ T5969] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 113.251970][ T5969] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 113.283497][ T5969] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 113.601295][ T6050] loop4: detected capacity change from 0 to 1024 [ 113.616975][ T6050] ext4: Unknown parameter 'euid<00000000000000000000' [ 113.665918][ T28] audit: type=1400 audit(113.278:5202): avc: denied { block_suspend } for pid=6045 comm="syz.4.634" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 113.689678][ T6047] loop4: detected capacity change from 0 to 512 [ 113.699773][ T5969] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 113.706941][ T5969] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 113.735669][ T6047] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 113.769739][ T6047] EXT4-fs (loop4): 1 truncate cleaned up [ 113.776080][ T6047] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.815967][ T5969] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 113.880585][ T5969] hsr_slave_0: entered promiscuous mode [ 113.886652][ T5969] hsr_slave_1: entered promiscuous mode [ 113.976326][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.011743][ T6075] loop4: detected capacity change from 0 to 512 [ 114.032292][ T6075] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 114.052981][ T6066] xfrm0 speed is unknown, defaulting to 1000 [ 114.086512][ T6075] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.110640][ T6075] sg_write: data in/out 431069/402 bytes for SCSI command 0x0-- guessing data in; [ 114.110640][ T6075] program syz.4.637 not setting count and/or reply_len properly [ 114.160449][ T5969] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 114.231609][ T5969] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 114.308831][ T5969] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 114.341316][ T5969] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 114.350704][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.399619][ T6094] netlink: 4 bytes leftover after parsing attributes in process `syz.4.638'. [ 114.440016][ T6094] hsr_slave_1 (unregistering): left promiscuous mode [ 114.488365][ T5969] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.525898][ T5969] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.555822][ T3858] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.563067][ T3858] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.578124][ T3858] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.585246][ T3858] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.691948][ T3679] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 114.698412][ T6029] Bluetooth: hci0: command 0x1003 tx timeout [ 114.780230][ T5969] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.835464][ T6123] siw: device registration error -23 [ 114.906342][ T6116] netlink: 1010 bytes leftover after parsing attributes in process `syz.4.641'. [ 114.935773][ T6116] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 115.220899][ T5969] veth0_vlan: entered promiscuous mode [ 115.247524][ T6143] loop4: detected capacity change from 0 to 512 [ 115.257658][ T6143] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 115.273650][ T5969] veth1_vlan: entered promiscuous mode [ 115.282744][ T6143] EXT4-fs (loop4): 1 truncate cleaned up [ 115.290124][ T6143] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.349416][ T3407] Process accounting resumed [ 115.434090][ T5909] syz.1.603 (5909) used greatest stack depth: 6624 bytes left [ 115.510604][ T6148] netlink: 4 bytes leftover after parsing attributes in process `syz.2.645'. [ 115.584284][ T5969] veth0_macvtap: entered promiscuous mode [ 115.709219][ T5969] veth1_macvtap: entered promiscuous mode [ 115.754905][ T6132] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 116.065293][ T5969] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.126948][ T6158] xt_TCPMSS: Only works on TCP SYN packets [ 116.150023][ T5969] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.163611][ T6132] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #15: comm syz.5.643: corrupted xattr block 128: bad e_name length [ 116.176071][ T3866] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.196357][ T3866] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.216508][ T3866] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.235688][ T3866] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.262102][ T6161] set_capacity_and_notify: 1 callbacks suppressed [ 116.262120][ T6161] loop1: detected capacity change from 0 to 1024 [ 116.276073][ T6132] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 116.295256][ T6159] loop2: detected capacity change from 0 to 128 [ 116.304983][ T6132] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #15: comm syz.5.643: corrupted xattr block 128: bad e_name length [ 116.329245][ T6161] EXT4-fs: EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31 [ 116.396328][ T6132] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 116.432631][ T6159] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 116.468960][ T6160] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 116.517353][ T6164] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #15: comm syz.5.643: corrupted xattr block 128: bad e_name length [ 116.579002][ T6132] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #15: comm syz.5.643: corrupted xattr block 128: bad e_name length [ 116.624417][ T6172] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #15: comm syz.5.643: corrupted xattr block 128: bad e_name length [ 116.672232][ T6164] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 116.722835][ T6160] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2573 sclass=netlink_route_socket pid=6160 comm=syz.5.643 [ 116.787785][ T6132] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 116.841667][ T6164] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #15: comm syz.5.643: corrupted xattr block 128: bad e_name length [ 116.879767][ T6178] netlink: 28 bytes leftover after parsing attributes in process `syz.6.624'. [ 116.890453][ T6172] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 116.917772][ T6172] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #15: comm syz.5.643: corrupted xattr block 128: bad e_name length [ 116.975313][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.025959][ T6164] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 117.073877][ T6189] loop4: detected capacity change from 0 to 512 [ 117.081359][ T3317] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 117.095750][ T6189] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 117.112847][ T6172] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #15: comm syz.5.643: corrupted xattr block 128: bad e_name length [ 117.149572][ T6189] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 117.157592][ T6189] System zones: 1-12 [ 117.161958][ T6172] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 117.199389][ T6192] IPv6: NLM_F_CREATE should be specified when creating new route [ 117.207668][ T6189] EXT4-fs (loop4): 1 truncate cleaned up [ 117.239260][ T6189] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.272274][ T6196] loop6: detected capacity change from 0 to 128 [ 117.295628][ T6196] syz.6.654: attempt to access beyond end of device [ 117.295628][ T6196] loop6: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 117.313144][ T6195] syz.6.654: attempt to access beyond end of device [ 117.313144][ T6195] loop6: rw=524288, sector=138, nr_sectors = 112 limit=128 [ 117.319293][ T5459] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 117.327231][ T6195] syz.6.654: attempt to access beyond end of device [ 117.327231][ T6195] loop6: rw=8388608, sector=138, nr_sectors = 8 limit=128 [ 117.336235][ T6189] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 117.359204][ T6199] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=6199 comm=syz.2.655 [ 117.369632][ T6195] syz.6.654: attempt to access beyond end of device [ 117.369632][ T6195] loop6: rw=8388608, sector=138, nr_sectors = 8 limit=128 [ 117.397417][ T6195] syz.6.654: attempt to access beyond end of device [ 117.397417][ T6195] loop6: rw=8388608, sector=138, nr_sectors = 8 limit=128 [ 117.471284][ T6201] loop5: detected capacity change from 0 to 4096 [ 117.487269][ T6195] syz.6.654: attempt to access beyond end of device [ 117.487269][ T6195] loop6: rw=8388608, sector=138, nr_sectors = 8 limit=128 [ 117.505219][ T6205] netlink: 4 bytes leftover after parsing attributes in process `syz.1.658'. [ 117.526292][ T6195] syz.6.654: attempt to access beyond end of device [ 117.526292][ T6195] loop6: rw=8388608, sector=138, nr_sectors = 8 limit=128 [ 117.572187][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.579568][ T6198] loop2: detected capacity change from 0 to 256 [ 117.596981][ T6215] netlink: 8 bytes leftover after parsing attributes in process `syz.5.660'. [ 117.633880][ T6195] syz.6.654: attempt to access beyond end of device [ 117.633880][ T6195] loop6: rw=8388608, sector=138, nr_sectors = 8 limit=128 [ 117.637824][ T6215] netlink: 4 bytes leftover after parsing attributes in process `syz.5.660'. [ 117.653465][ T6195] syz.6.654: attempt to access beyond end of device [ 117.653465][ T6195] loop6: rw=8388608, sector=138, nr_sectors = 8 limit=128 [ 117.668015][ T6215] netlink: 'syz.5.660': attribute type 14 has an invalid length. [ 117.670651][ T6198] FAT-fs (loop2): bogus number of FAT structure [ 117.685667][ T28] kauditd_printk_skb: 113 callbacks suppressed [ 117.685683][ T28] audit: type=1400 audit(117.648:5316): avc: denied { read append } for pid=6213 comm="syz.5.660" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 117.685989][ T6198] FAT-fs (loop2): Can't find a valid FAT filesystem [ 117.694792][ T28] audit: type=1400 audit(117.648:5317): avc: denied { open } for pid=6213 comm="syz.5.660" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 117.718476][ T6195] syz.6.654: attempt to access beyond end of device [ 117.718476][ T6195] loop6: rw=8388608, sector=138, nr_sectors = 8 limit=128 [ 117.734670][ T28] audit: type=1400 audit(117.688:5318): avc: denied { ioctl } for pid=6213 comm="syz.5.660" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x5868 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 117.846809][ T28] audit: type=1400 audit(117.718:5319): avc: denied { read write } for pid=6197 comm="syz.2.655" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 117.872422][ T28] audit: type=1400 audit(117.718:5320): avc: denied { open } for pid=6197 comm="syz.2.655" path="/dev/loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 117.909083][ T28] audit: type=1400 audit(117.728:5321): avc: denied { ioctl } for pid=6197 comm="syz.2.655" path="/dev/loop2" dev="devtmpfs" ino=102 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 117.938013][ T6221] netlink: 28 bytes leftover after parsing attributes in process `syz.4.663'. [ 118.017636][ T6229] loop6: detected capacity change from 0 to 1024 [ 118.031101][ T6229] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 118.038471][ T28] audit: type=1400 audit(117.838:5322): avc: denied { execmem } for pid=6216 comm="syz.1.661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 118.064611][ T28] audit: type=1400 audit(117.868:5323): avc: denied { connect } for pid=6197 comm="syz.2.655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 118.084276][ T28] audit: type=1400 audit(117.898:5324): avc: denied { create } for pid=6220 comm="syz.4.663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 118.104327][ T28] audit: type=1400 audit(117.898:5325): avc: denied { write } for pid=6220 comm="syz.4.663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 118.147766][ T6232] loop1: detected capacity change from 0 to 512 [ 118.163431][ T6232] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 118.194982][ T6232] EXT4-fs (loop1): 1 truncate cleaned up [ 118.202198][ T6232] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.268437][ T3393] Process accounting resumed [ 118.303495][ T6229] EXT4-fs error (device loop6): ext4_map_blocks:828: inode #15: block 3: comm syz.6.666: lblock 3 mapped to illegal pblock 3 (length 3) [ 118.337217][ T6227] netlink: 8 bytes leftover after parsing attributes in process `syz.2.665'. [ 118.488771][ T6229] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 118.565889][ T6227] netlink: 312 bytes leftover after parsing attributes in process `syz.2.665'. [ 118.629772][ T6229] EXT4-fs (loop6): This should not happen!! Data will be lost [ 118.629772][ T6229] [ 118.656581][ T6254] netlink: 36 bytes leftover after parsing attributes in process `syz.4.670'. [ 118.923469][ T6252] EXT4-fs error (device loop6): ext4_map_blocks:828: inode #15: block 8: comm syz.6.666: lblock 8 mapped to illegal pblock 8 (length 8) [ 118.964426][ T6254] netlink: 6 bytes leftover after parsing attributes in process `syz.4.670'. [ 119.007247][ T6261] netlink: 4 bytes leftover after parsing attributes in process `syz.5.671'. [ 119.060754][ T6252] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 119.076567][ T6260] loop2: detected capacity change from 0 to 764 [ 119.163211][ T6252] EXT4-fs (loop6): This should not happen!! Data will be lost [ 119.163211][ T6252] [ 119.213802][ T6272] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=6272 comm=syz.5.674 [ 119.241771][ T6276] loop4: detected capacity change from 0 to 512 [ 119.261959][ T5969] EXT4-fs warning (device loop6): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 119.291401][ T6276] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 119.314078][ T6276] EXT4-fs (loop4): 1 truncate cleaned up [ 119.324508][ T6276] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.354942][ T5969] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 119.439808][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.472477][ T6284] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6284 comm=syz.2.679 [ 119.532311][ T6285] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2824 sclass=netlink_tcpdiag_socket pid=6285 comm=syz.2.679 [ 119.674185][ T6281] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 119.717990][ T6281] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 119.864571][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.916813][ T6293] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 120.004491][ T6304] SELinux: Context system_u:object_r:netutils_exec_t:s0 is not valid (left unmapped). [ 120.039251][ T6301] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 120.066388][ T6301] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 120.281289][ T6319] netlink: 'syz.1.688': attribute type 10 has an invalid length. [ 120.547558][ T6340] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 120.568219][ T6340] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 120.670221][ T6350] program syz.2.700 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 120.692402][ T6350] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.713984][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.984440][ T6371] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.076884][ T6377] xfrm0 speed is unknown, defaulting to 1000 [ 121.159439][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 121.169123][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 121.195564][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 121.205189][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 121.213852][ T6378] loop5: unable to read partition table [ 121.271137][ T6388] EXT4-fs: inline encryption not supported [ 121.282307][ T6378] loop_reread_partitions: partition scan of loop5 (Wý* %4FLQk݊5) failed (rc=-5) [ 121.294222][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 121.303968][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 121.304253][ T6388] EXT4-fs: Ignoring removed bh option [ 121.312648][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 121.327242][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 121.335337][ T3296] loop5: unable to read partition table [ 121.341193][ T6390] set_capacity_and_notify: 6 callbacks suppressed [ 121.341209][ T6390] loop2: detected capacity change from 0 to 2048 [ 121.344682][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 121.363833][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 121.373585][ T6388] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 121.380782][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 121.395131][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 121.404719][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 121.414351][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 121.422764][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 121.432543][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 121.440660][ T3517] loop2: p3 < > p4 < > [ 121.444839][ T3517] loop2: partition table partially beyond EOD, truncated [ 121.452049][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 121.452107][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 121.477825][ T3517] loop2: p3 start 4284289 is beyond EOD, truncated [ 121.491399][ T6393] loop4: detected capacity change from 0 to 1024 [ 121.499866][ T6390] loop2: p3 < > p4 < > [ 121.504200][ T6390] loop2: partition table partially beyond EOD, truncated [ 121.506805][ T6388] EXT4-fs (loop1): orphan cleanup on readonly fs [ 121.516756][ T6390] loop2: p3 start 4284289 is beyond EOD, truncated [ 121.574771][ T3296] udevd[3296]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 121.591736][ T6388] EXT4-fs error (device loop1): ext4_quota_enable:7217: comm syz.1.710: inode #2304: comm syz.1.710: iget: illegal inode # [ 121.608511][ T3296] udevd[3296]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 121.616076][ T6393] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.656088][ T6388] loop1: lost filesystem error report for type 5 error -117 [ 121.656231][ T6388] EXT4-fs (loop1): Remounting filesystem read-only [ 121.663675][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 121.663696][ C0] EXT4-fs (loop1): initial error at time 121: ext4_quota_enable:7217 [ 121.663717][ C0] EXT4-fs (loop1): last error at time 121: ext4_quota_enable:7217 [ 121.732333][ T6388] EXT4-fs warning (device loop1): ext4_enable_quotas:7261: Failed to enable quota tracking (type=2, err=-117, ino=2304). Please run e2fsck to fix. [ 121.747659][ T6388] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 121.758187][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.759894][ T6388] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 121.768144][ T5969] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.795278][ T6407] loop5: detected capacity change from 0 to 128 [ 121.828732][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.892984][ T6412] loop1: detected capacity change from 0 to 512 [ 121.964339][ T6412] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 122.050205][ T6412] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.717: bad orphan inode 131083 [ 122.060632][ T6412] loop1: lost filesystem error report for type 5 error -117 [ 122.061232][ T6412] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.162155][ T6424] EXT4-fs error (device loop1): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.1.717: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 122.304811][ T6407] bio_check_eod: 13 callbacks suppressed [ 122.304833][ T6407] syz.5.716: attempt to access beyond end of device [ 122.304833][ T6407] loop5: rw=2049, sector=138, nr_sectors = 6 limit=128 [ 122.337070][ T6431] loop4: detected capacity change from 0 to 1024 [ 122.352293][ T6431] EXT4-fs: inline encryption not supported [ 122.420595][ T6407] syz.5.716: attempt to access beyond end of device [ 122.420595][ T6407] loop5: rw=8390657, sector=142, nr_sectors = 2 limit=128 [ 122.434836][ T6431] EXT4-fs (loop4): can't mount with journal_checksum, fs mounted w/o journal [ 122.465347][ T6407] Buffer I/O error on dev loop5, logical block 71, lost async page write [ 122.503005][ T6435] loop2: detected capacity change from 0 to 128 [ 122.519676][ T6435] __nla_validate_parse: 9 callbacks suppressed [ 122.519695][ T6435] netlink: 8 bytes leftover after parsing attributes in process `syz.2.722'. [ 122.545928][ T6439] netlink: 20 bytes leftover after parsing attributes in process `syz.4.723'. [ 122.549229][ T6435] loop2: detected capacity change from 0 to 512 [ 122.561960][ T6435] journal_path: Non-blockdev passed as './file2' [ 122.569754][ T6435] EXT4-fs: error: could not find journal device path [ 122.583419][ T6435] netlink: 12 bytes leftover after parsing attributes in process `syz.2.722'. [ 122.593914][ T6435] netlink: 48 bytes leftover after parsing attributes in process `syz.2.722'. [ 122.608504][ T6441] syzkaller0: entered promiscuous mode [ 122.614207][ T6441] syzkaller0: entered allmulticast mode [ 122.666578][ T6444] netlink: 36 bytes leftover after parsing attributes in process `syz.5.725'. [ 122.676491][ T6444] netlink: 36 bytes leftover after parsing attributes in process `syz.5.725'. [ 122.686151][ T6444] netlink: 36 bytes leftover after parsing attributes in process `syz.5.725'. [ 122.698470][ T6444] netlink: 36 bytes leftover after parsing attributes in process `syz.5.725'. [ 122.713287][ T6444] netlink: 36 bytes leftover after parsing attributes in process `syz.5.725'. [ 122.723692][ T6444] netlink: 36 bytes leftover after parsing attributes in process `syz.5.725'. [ 122.743699][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.781618][ T28] kauditd_printk_skb: 257 callbacks suppressed [ 122.781636][ T28] audit: type=1400 audit(122.748:5583): avc: denied { write } for pid=6449 comm="syz.2.729" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 122.808730][ T6452] loop4: detected capacity change from 0 to 1024 [ 122.812824][ T6450] random: crng reseeded on system resumption [ 122.828451][ T28] audit: type=1400 audit(122.778:5584): avc: denied { open } for pid=6449 comm="syz.2.729" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 122.863355][ T28] audit: type=1400 audit(122.808:5585): avc: denied { ioctl } for pid=6449 comm="syz.2.729" path="/dev/snapshot" dev="devtmpfs" ino=90 ioctlcmd=0x3312 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 122.889220][ T6452] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.912400][ T28] audit: type=1400 audit(122.878:5586): avc: denied { ioctl } for pid=6451 comm="syz.4.730" path="socket:[14125]" dev="sockfs" ino=14125 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 122.942673][ T6450] loop2: detected capacity change from 0 to 512 [ 122.966378][ T6450] ext4: Unknown parameter 'dont_hash' [ 122.989925][ T28] audit: type=1400 audit(122.928:5587): avc: denied { write } for pid=6451 comm="syz.4.730" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 123.056980][ T28] audit: type=1400 audit(122.958:5588): avc: denied { read } for pid=6451 comm="syz.4.730" path="socket:[14125]" dev="sockfs" ino=14125 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 123.096711][ T28] audit: type=1400 audit(123.018:5589): avc: denied { create } for pid=6449 comm="syz.2.729" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 123.124949][ T28] audit: type=1400 audit(123.058:5590): avc: denied { connect } for pid=6449 comm="syz.2.729" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 123.148434][ T6474] xt_TPROXY: Can be used only with -p tcp or -p udp [ 123.194281][ T6480] loop5: detected capacity change from 0 to 512 [ 123.212713][ T28] audit: type=1400 audit(123.128:5591): avc: denied { read } for pid=6473 comm="syz.1.736" name="usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 123.241821][ T6480] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 123.268420][ T28] audit: type=1400 audit(123.128:5592): avc: denied { open } for pid=6473 comm="syz.1.736" path="/dev/usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 123.309986][ T6480] EXT4-fs (loop5): 1 truncate cleaned up [ 123.570456][ T6504] EXT4-fs: Ignoring removed mblk_io_submit option [ 123.600625][ T6504] EXT4-fs error (device loop6): __ext4_iget:5393: inode #11: block 1: comm syz.6.745: invalid block [ 123.628376][ T6504] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 123.628531][ T6504] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.745: couldn't read orphan inode 11 (err -117) [ 123.637751][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 123.637777][ C1] EXT4-fs (loop6): initial error at time 123: __ext4_iget:5393: inode 11: block 1 [ 123.637818][ C1] EXT4-fs (loop6): last error at time 123: __ext4_iget:5393: inode 11: block 1 [ 123.729665][ T6504] loop6: lost filesystem error report for type 5 error -117 [ 123.768720][ T6515] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6515 comm=syz.4.747 [ 124.144084][ T6528] syzkaller0: entered promiscuous mode [ 124.159537][ T6528] syzkaller0: entered allmulticast mode [ 124.600400][ T6530] xfrm0 speed is unknown, defaulting to 1000 [ 124.854296][ T6548] xfrm0 speed is unknown, defaulting to 1000 [ 125.028705][ T6555] xfrm0 speed is unknown, defaulting to 1000 [ 125.218089][ T6571] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 125.257559][ T6571] EXT4-fs (loop2): 1 truncate cleaned up [ 125.263603][ T6566] io-wq is not configured for unbound workers [ 125.384706][ T3393] IPVS: starting estimator thread 0... [ 125.499527][ T6576] IPVS: using max 2640 ests per chain, 132000 per kthread [ 125.660721][ T6597] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #17: comm syz.4.764: iget: immutable or append flags not allowed on symlinks [ 125.679002][ T6593] netlink: 'syz.2.763': attribute type 2 has an invalid length. [ 125.709540][ T6597] loop4: lost file I/O error report for ino 17 type 5 pos 0x0 len 0x0 error -117 [ 125.709663][ T6597] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.764: couldn't read orphan inode 17 (err -117) [ 125.730835][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 125.730866][ C1] EXT4-fs (loop4): initial error at time 125: ext4_orphan_get:1397: inode 17 [ 125.730897][ C1] EXT4-fs (loop4): last error at time 125: ext4_orphan_get:1397: inode 17 [ 125.849613][ T6593] netlink: 'syz.2.763': attribute type 1 has an invalid length. [ 125.857423][ T6597] loop4: lost filesystem error report for type 5 error -117 [ 125.859427][ T6593] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.983776][ T6609] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 126.045618][ T6609] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.765: Invalid block bitmap block 0 in block_group 0 [ 126.069523][ T6609] loop2: lost filesystem error report for type 5 error -117 [ 126.069780][ T6609] EXT4-fs error (device loop2): ext4_acquire_dquot:7026: comm syz.2.765: Failed to acquire dquot type 0 [ 126.088558][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 126.088574][ C1] EXT4-fs (loop2): initial error at time 126: ext4_read_block_bitmap_nowait:483 [ 126.088591][ C1] EXT4-fs (loop2): last error at time 126: ext4_read_block_bitmap_nowait:483 [ 126.129019][ T6609] loop2: lost filesystem error report for type 5 error -117 [ 126.129886][ T6609] EXT4-fs error (device loop2): ext4_free_blocks:6724: comm syz.2.765: Freeing blocks not in datazone - block = 0, count = 4096 [ 126.150566][ T6609] loop2: lost filesystem error report for type 5 error -117 [ 126.151243][ T6609] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.765: Invalid inode bitmap blk 0 in block_group 0 [ 126.187137][ T3880] EXT4-fs error (device loop2): ext4_release_dquot:7062: comm kworker/u8:22: Failed to release dquot type 0 [ 126.188604][ T6609] loop2: lost filesystem error report for type 5 error -117 [ 126.201128][ T6609] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 126.222580][ T3880] loop2: lost filesystem error report for type 5 error -117 [ 126.228382][ T6609] loop2: lost filesystem error report for type 5 error -117 [ 126.237197][ T6609] EXT4-fs (loop2): 1 orphan inode deleted [ 126.411782][ T6640] netlink: 'syz.4.771': attribute type 32 has an invalid length. [ 126.515357][ T6654] netlink: 'syz.4.773': attribute type 3 has an invalid length. [ 126.708169][ T6662] : renamed from vlan0 [ 126.944435][ T6671] set_capacity_and_notify: 7 callbacks suppressed [ 126.944566][ T6671] loop2: detected capacity change from 0 to 512 [ 126.971132][ T6671] EXT4-fs: Ignoring removed mblk_io_submit option [ 127.068852][ T6673] loop5: detected capacity change from 0 to 1024 [ 127.133531][ T6671] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.775: invalid indirect mapped block 4294967295 (level 0) [ 127.148749][ T6671] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 127.149504][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 127.165742][ C1] EXT4-fs (loop2): initial error at time 127: ext4_free_branches:1023: inode 16 [ 127.175773][ C1] EXT4-fs (loop2): last error at time 127: ext4_free_branches:1023: inode 16 [ 127.189444][ T6671] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.775: invalid indirect mapped block 4294967295 (level 1) [ 127.205973][ T6671] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 127.214514][ T6671] EXT4-fs (loop2): 1 orphan inode deleted [ 127.232156][ T6671] EXT4-fs (loop2): 1 truncate cleaned up [ 127.421365][ T6681] xfrm0 speed is unknown, defaulting to 1000 [ 127.477913][ T6692] IPVS: set_ctl: invalid protocol: 51 172.30.1.6:20000 [ 127.511583][ T6695] loop1: detected capacity change from 0 to 512 [ 127.583259][ T6701] __nla_validate_parse: 41 callbacks suppressed [ 127.583280][ T6701] netlink: 4 bytes leftover after parsing attributes in process `syz.5.782'. [ 127.611511][ T6704] loop4: detected capacity change from 0 to 1024 [ 127.618318][ T6704] EXT4-fs: inline encryption not supported [ 127.627010][ T6704] EXT4-fs: Ignoring removed bh option [ 127.634868][ T6697] syzkaller0: create flow: hash 3171209282 index 1 [ 127.641694][ T6704] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 127.663805][ T6704] EXT4-fs (loop4): orphan cleanup on readonly fs [ 127.689770][ T6704] EXT4-fs error (device loop4): ext4_quota_enable:7217: comm syz.4.783: inode #2304: comm syz.4.783: iget: illegal inode # [ 127.702935][ T6704] loop4: lost filesystem error report for type 5 error -117 [ 127.703070][ T6704] EXT4-fs error (device loop4): ext4_quota_enable:7220: comm syz.4.783: Bad quota inode: 2304, type: 2 [ 127.710547][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 127.710567][ C0] EXT4-fs (loop4): initial error at time 127: ext4_quota_enable:7217 [ 127.710589][ C0] EXT4-fs (loop4): last error at time 127: ext4_quota_enable:7217 [ 127.744741][ T6704] loop4: lost filesystem error report for type 5 error -117 [ 127.744961][ T6704] EXT4-fs warning (device loop4): ext4_enable_quotas:7261: Failed to enable quota tracking (type=2, err=-117, ino=2304). Please run e2fsck to fix. [ 127.771075][ T6704] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 127.791413][ T3858] syzkaller0: tun_net_xmit 76 [ 127.800101][ T6704] EXT4-fs mount: 21 callbacks suppressed [ 127.800118][ T6704] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 127.800206][ T3858] syzkaller0: tun_net_xmit 48 [ 127.822995][ T28] kauditd_printk_skb: 200 callbacks suppressed [ 127.823029][ T28] audit: type=1400 audit(127.768:5790): avc: denied { mount } for pid=6703 comm="syz.4.783" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 127.850812][ T3407] syzkaller0: tun_net_xmit 76 [ 127.861608][ T28] audit: type=1400 audit(127.818:5791): avc: denied { read write } for pid=6707 comm="syz.6.785" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 127.887839][ T28] audit: type=1400 audit(127.818:5792): avc: denied { open } for pid=6707 comm="syz.6.785" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 127.924072][ T28] audit: type=1400 audit(127.888:5793): avc: denied { read } for pid=6712 comm="syz.6.786" dev="nsfs" ino=4026532508 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 127.950670][ T6697] loop2: detected capacity change from 0 to 512 [ 127.962548][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.974259][ T28] audit: type=1400 audit(127.888:5794): avc: denied { open } for pid=6712 comm="syz.6.786" path="net:[4026532508]" dev="nsfs" ino=4026532508 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 128.003075][ T28] audit: type=1400 audit(127.888:5795): avc: denied { create } for pid=6712 comm="syz.6.786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 128.028179][ T28] audit: type=1400 audit(127.888:5796): avc: denied { ioctl } for pid=6712 comm="syz.6.786" path="socket:[15643]" dev="sockfs" ino=15643 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 128.055923][ T28] audit: type=1400 audit(127.888:5797): avc: denied { setopt } for pid=6712 comm="syz.6.786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 128.079042][ T28] audit: type=1400 audit(127.888:5798): avc: denied { read append } for pid=6714 comm="syz.5.784" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 128.105427][ T28] audit: type=1400 audit(127.888:5799): avc: denied { open } for pid=6714 comm="syz.5.784" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 128.135523][ T6720] xfrm0 speed is unknown, defaulting to 1000 [ 128.176480][ T6697] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.226864][ T6696] syzkaller0: delete flow: hash 3171209282 index 1 [ 128.271779][ T6732] netlink: 4768 bytes leftover after parsing attributes in process `syz.5.790'. [ 128.282494][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.292697][ T6732] netlink: 4768 bytes leftover after parsing attributes in process `syz.5.790'. [ 128.320618][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.322030][ T6736] netlink: 4768 bytes leftover after parsing attributes in process `syz.5.790'. [ 128.385590][ T6744] loop2: detected capacity change from 0 to 1024 [ 128.394419][ T6744] EXT4-fs: Invalid want_extra_isize 7 [ 128.406710][ T6742] netlink: 72 bytes leftover after parsing attributes in process `syz.2.792'. [ 128.418010][ T6742] netlink: 20 bytes leftover after parsing attributes in process `syz.2.792'. [ 128.438260][ T6749] netlink: 4 bytes leftover after parsing attributes in process `syz.6.795'. [ 129.058382][ T6766] loop4: detected capacity change from 0 to 128 [ 129.113694][ T6766] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 129.210948][ T6761] syz.6.796 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 129.235977][ T6761] CPU: 0 UID: 0 PID: 6761 Comm: syz.6.796 Not tainted syzkaller #0 PREEMPT(full) [ 129.236007][ T6761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 129.236022][ T6761] Call Trace: [ 129.236030][ T6761] [ 129.236038][ T6761] __dump_stack+0x1d/0x30 [ 129.236132][ T6761] dump_stack_lvl+0x95/0xd0 [ 129.236236][ T6761] dump_stack+0x15/0x1b [ 129.236297][ T6761] dump_header+0x80/0x240 [ 129.236324][ T6761] oom_kill_process+0x295/0x350 [ 129.236351][ T6761] out_of_memory+0x97d/0xb80 [ 129.236378][ T6761] try_charge_memcg+0x62e/0xa10 [ 129.236463][ T6761] obj_cgroup_charge_pages+0x23/0xc0 [ 129.236498][ T6761] __memcg_kmem_charge_page+0x9e/0x170 [ 129.236602][ T6761] __alloc_frozen_pages_noprof+0x18a/0x360 [ 129.236640][ T6761] alloc_pages_mpol+0xb3/0x260 [ 129.236676][ T6761] alloc_pages_noprof+0x8f/0x140 [ 129.236711][ T6761] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 129.236752][ T6761] __kvmalloc_node_noprof+0x3d4/0x650 [ 129.236785][ T6761] ? futex_hash_allocate+0x190/0x9d0 [ 129.236864][ T6761] ? futex_hash_allocate+0x190/0x9d0 [ 129.236893][ T6761] futex_hash_allocate+0x190/0x9d0 [ 129.236931][ T6761] ? cap_task_prctl+0x13f/0x6e0 [ 129.237022][ T6761] futex_hash_prctl+0xd8/0xf0 [ 129.237054][ T6761] __se_sys_prctl+0x4f4/0x1400 [ 129.237203][ T6761] __x64_sys_prctl+0x67/0x80 [ 129.237235][ T6761] x64_sys_call+0x2533/0x3020 [ 129.237267][ T6761] do_syscall_64+0x12c/0x370 [ 129.237390][ T6761] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.237416][ T6761] RIP: 0033:0x7f96d8dec819 [ 129.237436][ T6761] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 129.237458][ T6761] RSP: 002b:00007f96d781e028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 129.237482][ T6761] RAX: ffffffffffffffda RBX: 00007f96d9066090 RCX: 00007f96d8dec819 [ 129.237500][ T6761] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 129.237583][ T6761] RBP: 00007f96d8e82c91 R08: 0000000000000000 R09: 0000000000000000 [ 129.237598][ T6761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 129.237614][ T6761] R13: 00007f96d9066128 R14: 00007f96d9066090 R15: 00007ffc4c17eb68 [ 129.237634][ T6761] [ 129.237686][ T6761] memory: usage 307200kB, limit 307200kB, failcnt 97 [ 129.470564][ T6761] memory+swap: usage 319228kB, limit 9007199254740988kB, failcnt 0 [ 129.478669][ T6761] kmem: usage 307124kB, limit 9007199254740988kB, failcnt 0 [ 129.486498][ T6761] Memory cgroup stats for /syz6: [ 129.486906][ T6761] cache 4096 [ 129.496967][ T6761] rss 28672 [ 129.509114][ T6761] shmem 0 [ 129.524515][ T6761] mapped_file 0 [ 129.528438][ T6761] dirty 0 [ 129.531656][ T6761] writeback 4096 [ 129.535394][ T6761] workingset_refault_anon 33 [ 129.541093][ T6761] workingset_refault_file 14 [ 129.546471][ T6761] swap 12349440 [ 129.552297][ T6761] swapcached 12525568 [ 129.556823][ T6761] pgpgin 13584 [ 129.560487][ T6761] pgpgout 13573 [ 129.564361][ T6761] pgfault 14850 [ 129.569142][ T6761] pgmajfault 24 [ 129.573058][ T6761] inactive_anon 20480 [ 129.589995][ T6761] active_anon 20480 [ 129.593859][ T6761] inactive_file 4096 [ 129.597810][ T6761] active_file 0 [ 129.601355][ T6761] unevictable 0 [ 129.621832][ T6761] hierarchical_memory_limit 314572800 [ 129.627460][ T6761] hierarchical_memsw_limit 9223372036854771712 [ 129.634094][ T6761] total_cache 4096 [ 129.638025][ T6761] total_rss 28672 [ 129.767594][ T6761] total_shmem 0 [ 129.771366][ T6761] total_mapped_file 0 [ 129.775647][ T6761] total_dirty 0 [ 129.781529][ T6761] total_writeback 4096 [ 129.785730][ T6761] total_workingset_refault_anon 33 [ 129.791155][ T6761] total_workingset_refault_file 14 [ 129.797192][ T6761] total_swap 12349440 [ 129.801371][ T6761] total_swapcached 12525568 [ 129.806003][ T6761] total_pgpgin 13584 [ 129.813213][ T6761] total_pgpgout 13573 [ 129.817322][ T6761] total_pgfault 14850 [ 129.819625][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 129.821546][ T6761] total_pgmajfault 24 [ 129.833861][ T6761] total_inactive_anon 20480 [ 129.838455][ T6761] total_active_anon 20480 [ 129.842857][ T6761] total_inactive_file 4096 [ 129.847449][ T6761] total_active_file 0 [ 129.851551][ T6761] total_unevictable 0 [ 129.855677][ T6761] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.796,pid=6750,uid=0 [ 129.870802][ T6761] Memory cgroup out of memory: Killed process 6750 (syz.6.796) total-vm:94296kB, anon-rss:1228kB, file-rss:22284kB, shmem-rss:0kB, UID:0 pgtables:148kB oom_score_adj:1000 [ 129.871616][ T3315] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 129.945048][ T6791] netlink: 4 bytes leftover after parsing attributes in process `syz.4.806'. [ 130.141109][ T6799] netlink: 'syz.1.809': attribute type 1 has an invalid length. [ 130.187062][ T6798] loop1: detected capacity change from 0 to 2048 [ 130.228628][ T6800] netlink: 28 bytes leftover after parsing attributes in process `syz.1.809'. [ 130.391417][ T6822] netlink: 32 bytes leftover after parsing attributes in process `syz.5.817'. [ 130.416128][ T6822] tipc: Started in network mode [ 130.435333][ T6822] tipc: Node identity 00000000000000004000000000000001, cluster identity 4711 [ 130.459196][ T6822] tipc: Enabling of bearer rejected, failed to enable media [ 130.519383][ T6825] bridge1: entered promiscuous mode [ 130.526198][ T6825] bridge1: port 1(macvtap1) entered blocking state [ 130.533459][ T6825] bridge1: port 1(macvtap1) entered disabled state [ 130.545179][ T23] IPVS: starting estimator thread 0... [ 130.556385][ T6825] macvtap1: entered allmulticast mode [ 130.562132][ T6825] bridge1: entered allmulticast mode [ 130.570224][ T6828] xt_hashlimit: overflow, try lower: 6/0 [ 130.570937][ T6829] xt_hashlimit: overflow, try lower: 6/0 [ 130.584855][ T6825] macvtap1: left allmulticast mode [ 130.602375][ T6825] bridge1: left allmulticast mode [ 130.627916][ T6825] bridge1: left promiscuous mode [ 130.639786][ T6826] IPVS: using max 2400 ests per chain, 120000 per kthread [ 130.659220][ T6835] loop1: detected capacity change from 0 to 1024 [ 130.691562][ T6835] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.855402][ T6849] loop2: detected capacity change from 0 to 764 [ 130.869771][ T6849] netlink: 'syz.2.827': attribute type 4 has an invalid length. [ 130.912078][ T6849] netlink: 'syz.2.827': attribute type 4 has an invalid length. [ 131.166813][ T6862] ipip0: entered promiscuous mode [ 131.548389][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.769563][ T6888] netlink: 'syz.2.837': attribute type 13 has an invalid length. [ 131.785456][ T6888] netlink: 'syz.2.837': attribute type 17 has an invalid length. [ 132.087538][ T6901] set_capacity_and_notify: 1 callbacks suppressed [ 132.087559][ T6901] loop1: detected capacity change from 0 to 256 [ 132.120085][ T6901] vfat: Unknown parameter '0xffffffffffffffff18446744073709551615' [ 132.327287][ T6882] bridge0: port 3(hsr0) entered disabled state [ 132.333654][ T6882] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.340905][ T6882] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.567273][ T6892] Set syz1 is full, maxelem 65536 reached [ 132.684765][ T6882] veth1_vlan: left allmulticast mode [ 132.714318][ T6882] geneve1: left allmulticast mode [ 132.748039][ T6888] 8021q: adding VLAN 0 to HW filter on device bond0 [ 132.757047][ T6888] 8021q: adding VLAN 0 to HW filter on device team0 [ 132.768784][ T6888] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 132.812042][ T6925] loop2: detected capacity change from 0 to 512 [ 132.823424][ T6925] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 132.843614][ T6925] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 132.852046][ T6925] System zones: 1-12 [ 132.857265][ T6925] EXT4-fs (loop2): 1 truncate cleaned up [ 132.864087][ T6925] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.879603][ T28] kauditd_printk_skb: 280 callbacks suppressed [ 132.879701][ T28] audit: type=1400 audit(132.848:6080): avc: denied { add_name } for pid=6924 comm="syz.2.843" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 132.912369][ T6910] dvmrp2: entered allmulticast mode [ 132.920437][ T28] audit: type=1400 audit(132.848:6081): avc: denied { create } for pid=6924 comm="syz.2.843" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 132.940297][ T28] audit: type=1400 audit(132.848:6082): avc: denied { read append } for pid=6924 comm="syz.2.843" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 132.963039][ T6925] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 132.971641][ T28] audit: type=1400 audit(132.848:6083): avc: denied { open } for pid=6924 comm="syz.2.843" path="/190/file2/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 132.994626][ T28] audit: type=1400 audit(132.848:6084): avc: denied { write } for pid=6924 comm="syz.2.843" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 133.019114][ T28] audit: type=1400 audit(132.848:6085): avc: denied { read } for pid=6924 comm="syz.2.843" name="mISDNtimer" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 133.019693][ T3862] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 133.042227][ T28] audit: type=1400 audit(132.848:6086): avc: denied { ioctl } for pid=6924 comm="syz.2.843" path="/dev/mISDNtimer" dev="devtmpfs" ino=250 ioctlcmd=0x4940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 133.054393][ T3862] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.075530][ T28] audit: type=1400 audit(132.848:6087): avc: denied { remount } for pid=6924 comm="syz.2.843" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 133.088243][ T6887] xfrm0 speed is unknown, defaulting to 1000 [ 133.103778][ T28] audit: type=1400 audit(133.018:6088): avc: denied { ioctl } for pid=6924 comm="syz.2.843" path="/190/file2/file1" dev="loop2" ino=15 ioctlcmd=0x6607 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 133.110954][ T3862] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 133.178890][ T3862] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.192399][ T3862] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 133.206627][ T3862] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.216118][ T3862] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 133.216228][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.225033][ T3862] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.244395][ T6932] netlink: 'syz.4.845': attribute type 13 has an invalid length. [ 133.252718][ T6932] netlink: 'syz.4.845': attribute type 17 has an invalid length. [ 133.316936][ T28] audit: type=1400 audit(133.278:6089): avc: denied { tracepoint } for pid=6933 comm="syz.2.846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 133.368652][ T6932] 8021q: adding VLAN 0 to HW filter on device bond0 [ 133.379647][ T6932] 8021q: adding VLAN 0 to HW filter on device team0 [ 133.402186][ T6939] loop5: detected capacity change from 0 to 1024 [ 133.414453][ T6932] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 133.430413][ T6939] EXT4-fs: Ignoring removed mblk_io_submit option [ 133.441705][ T6939] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 133.465397][ T6939] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.550880][ T6944] __nla_validate_parse: 7 callbacks suppressed [ 133.550898][ T6944] netlink: 8 bytes leftover after parsing attributes in process `syz.2.850'. [ 133.595723][ T6944] netlink: 312 bytes leftover after parsing attributes in process `syz.2.850'. [ 133.625295][ T6944] netlink: 8 bytes leftover after parsing attributes in process `syz.2.850'. [ 134.257750][ T6955] loop2: detected capacity change from 0 to 4096 [ 134.293795][ T6955] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.357228][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.369553][ T5459] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.432375][ T6972] vhci_hcd vhci_hcd.3: invalid port number 254 [ 134.449078][ T6972] sctp: [Deprecated]: syz.5.858 (pid 6972) Use of int in max_burst socket option. [ 134.449078][ T6972] Use struct sctp_assoc_value instead [ 134.581911][ T6974] loop2: detected capacity change from 0 to 128 [ 134.682016][ T6979] netlink: 28 bytes leftover after parsing attributes in process `syz.1.859'. [ 134.742182][ T6974] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 134.898113][ T3317] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 134.929261][ T6997] loop2: detected capacity change from 0 to 128 [ 134.948492][ T6997] vfat: Unknown parameter '0xffffffffffffffff' [ 135.110336][ T7009] loop2: detected capacity change from 0 to 1024 [ 135.121350][ T7009] EXT4-fs: Ignoring removed bh option [ 135.143630][ T7009] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.211848][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.245665][ T7013] loop4: detected capacity change from 0 to 512 [ 135.257091][ T7013] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.868: inode has both inline data and extents flags [ 135.270519][ T7013] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 135.270723][ T7013] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.868: couldn't read orphan inode 15 (err -117) [ 135.280331][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 135.280353][ C0] EXT4-fs (loop4): initial error at time 135: ext4_orphan_get:1397: inode 15 [ 135.280404][ C0] EXT4-fs (loop4): last error at time 135: ext4_orphan_get:1397: inode 15 [ 135.290009][ T7017] loop2: detected capacity change from 0 to 1024 [ 135.293853][ T7013] loop4: lost filesystem error report for type 5 error -117 [ 135.335828][ T7013] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.357548][ T7013] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.370520][ T7017] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.409508][ T3296] ================================================================== [ 135.410340][ T7017] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.417646][ T3296] BUG: KCSAN: data-race in __d_drop / fast_dput [ 135.432254][ T3296] [ 135.434487][ T7017] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.434595][ T3296] write to 0xffff88810061eb50 of 8 bytes by task 3000 on cpu 0: [ 135.450029][ T3296] __d_drop+0x14d/0x240 [ 135.454223][ T3296] __dentry_kill+0x122/0x460 [ 135.458846][ T3296] finish_dput+0x2b/0x200 [ 135.463219][ T3296] dput+0x52/0x60 [ 135.466889][ T3296] step_into_slowpath+0x38c/0x4c0 [ 135.471951][ T3296] path_lookupat+0x330/0x500 [ 135.476575][ T3296] filename_lookup+0x32a/0x390 [ 135.481373][ T3296] do_readlinkat+0x74/0x2f0 [ 135.485910][ T3296] __x64_sys_readlink+0x47/0x60 [ 135.490797][ T3296] x64_sys_call+0x2b51/0x3020 [ 135.495517][ T3296] do_syscall_64+0x12c/0x370 [ 135.500138][ T3296] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.506059][ T3296] [ 135.508397][ T3296] read to 0xffff88810061eb50 of 8 bytes by task 3296 on cpu 1: [ 135.515967][ T3296] fast_dput+0x5f/0x2c0 [ 135.520153][ T3296] dput+0x24/0x60 [ 135.523904][ T3296] filename_unlinkat+0x217/0x410 [ 135.528867][ T3296] __se_sys_unlink+0x2b/0xe0 [ 135.533492][ T3296] __x64_sys_unlink+0x1f/0x30 [ 135.538198][ T3296] x64_sys_call+0x2eb6/0x3020 [ 135.543080][ T3296] do_syscall_64+0x12c/0x370 [ 135.547696][ T3296] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.553615][ T3296] [ 135.555957][ T3296] value changed: 0xffff888237bfe248 -> 0x0000000000000000 [ 135.563339][ T3296] [ 135.565688][ T3296] Reported by Kernel Concurrency Sanitizer on: [ 135.571853][ T3296] CPU: 1 UID: 0 PID: 3296 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 135.580729][ T3296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 135.590819][ T3296] ================================================================== [ 135.990510][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.