last executing test programs: 22.051177264s ago: executing program 3 (id=165): r0 = socket$igmp(0x2, 0x3, 0x2) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet_int(r0, 0xffffffff, 0xc, &(0x7f0000000100)=0x1, 0x3) 21.994789308s ago: executing program 3 (id=168): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x40010, 0xffffffffffffffff, 0xcd0b3000) mkdir(0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setitimer(0x1, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = dup(r2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r2, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000840)='{', 0x1}], 0x1}, 0x20048843) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000010c0)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000080)={r4}, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000200)={0xff, 0x0, 0x8200, 0x6, 0x0, 0xda22, 0x10, 0x7, r4}, &(0x7f0000000240)=0x20) 21.903037423s ago: executing program 3 (id=172): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f00000002c0)={0x0, 'syzkaller0\x00', {0x1}, 0xb5}) (async) r2 = syz_open_dev$mouse(&(0x7f0000000040), 0x3, 0x20040) (async, rerun: 64) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={0x1, 0xffffffffffffffff}, 0x4) (async, rerun: 64) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x9c, 0x9c, 0x3, [@union={0x2, 0x5, 0x0, 0x5, 0x1, 0x8001, [{0x0, 0x2, 0xc}, {0x9, 0x1, 0x9}, {0x5, 0x2, 0x9}, {0x4, 0x2, 0x401}, {0x0, 0x3, 0x7}]}, @enum64={0xe, 0x6, 0x0, 0x13, 0x1, 0x2, [{0x2, 0x1, 0x8ba}, {0x8, 0x4, 0x8}, {0x9, 0x4, 0x5}, {0xc, 0x0, 0x8}, {0xe, 0x1, 0x10}, {0x9, 0xfffffffd}]}]}, {0x0, [0x2e]}}, &(0x7f0000000540)=""/188, 0xb7, 0xbc, 0x1, 0x2}, 0x28) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x13, &(0x7f00000006c0)=@raw=[@ldst={0x3, 0x2, 0x1, 0x2, 0x9, 0xfffffffffffffff0, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8000}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ldst={0x1, 0x3, 0x2, 0x6, 0x7, 0xfffffffffffffffc, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @btf_id={0x18, 0x88072bc369f8d325, 0x3, 0x0, 0x3}], &(0x7f0000000780)='GPL\x00', 0x10, 0x34, &(0x7f00000007c0)=""/52, 0x41000, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x6, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000840)=[{0x4, 0x5, 0x7, 0x1}, {0x1, 0x5, 0x2, 0xb}, {0x3, 0x2, 0x6, 0x7}], 0x10, 0x2}, 0x94) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000940)={{0x1, 0x1, 0x18, r0, {0x80000001}}, './file0\x00'}) (async) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) pwrite64(r7, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) (async, rerun: 64) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000009c0)=@generic={&(0x7f0000000980)='./file0\x00', 0x0, 0x10}, 0x18) (rerun: 64) r9 = open(&(0x7f0000000a00)='./file0\x00', 0x2800, 0xe8) (async) r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x94) r11 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r10}, 0x8) close(0x3) (async) close(r11) r12 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r12) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) (async, rerun: 64) close(0x3) (async, rerun: 64) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r14}, &(0x7f0000000000), &(0x7f0000000080)=r12}, 0x20) (async) recvmsg$unix(r13, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0) (async, rerun: 32) write$cgroup_int(r11, 0x0, 0x0) (rerun: 32) r15 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@base={0xf, 0x5, 0x2, 0xd, 0x9408, 0xffffffffffffffff, 0xb92, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x3}, 0x50) r16 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x4, 0x1f, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xd846}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x44}, @jmp={0x5, 0x0, 0xd, 0x2, 0x4, 0x0, 0xfffffffffffffffc}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x7ff, 0x5f, &(0x7f0000000400)=""/95, 0x41000, 0x29, '\x00', 0x0, @fallback=0x11, r4, 0x8, &(0x7f0000000640)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000680)={0x4, 0x2, 0x947, 0x8b}, 0x10, 0xffffffffffffffff, r5, 0x1, &(0x7f0000000b00)=[r6, r1, r7, r8, r9, r15, r16], &(0x7f0000000b40)=[{0x5, 0x1, 0x4, 0xb}], 0x10, 0x6}, 0x94) (async) socket$netlink(0x10, 0x3, 0x8) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=""/17, 0x11}, {&(0x7f0000000140)=""/230, 0xe6}], 0x2, 0x400003, 0x80000000) 21.847683926s ago: executing program 3 (id=174): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x6, 0x290000) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f00000002c0)=""/180) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f0000000000)='./file0\x00') 21.826184547s ago: executing program 3 (id=175): r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000080)={0x0, 0x8, 0x4, [0x6, 0x3, 0x4, 0x1]}, &(0x7f00000000c0)=0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000180)=@assoc_value={0x0, 0xb}, 0x8) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000100)={r1, 0x5, 0xb, "aa9a56a8bb1c27f754ee78"}, 0x13) r2 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x26020480) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000002500)=@raw={'raw\x00', 0x3c1, 0x3, 0x5f0, 0x3b8, 0xffffff80, 0x178, 0x3b8, 0x178, 0x520, 0x22b, 0x258, 0x520, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x398, 0x3b8, 0x340, {0x1e0002a8, 0x7203000000000000}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x1a, 0x64, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xa}]}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "e22e50439abb066265e088a63e13552b8b2fec412753ac647d17d2ebca69d17a9722bd2f5be411676d5993fb4cc74168209fb9f43b63bab2a88206d7dd8158d916b865d0f713f772c59ad6e6b572e9a6c498fb6459888a281e8c071a9a7229f9fe02cb8e9ba7637a2591a5367c770c87034734be6eda195ce135517efa85da52"}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1_to_bridge\x00', 'geneve1\x00'}, 0x0, 0x100, 0x168, 0x0, {}, [@common=@ah={{0x30}}, @common=@ipv6header={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x12, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x650) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) socket$tipc(0x1e, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40082104, &(0x7f0000000140)={0x0, 0x0, r2, 0x1}) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, r4, 0x301, 0x0, 0x0, {0x34}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000080)={0x0, 0x8, 0x4, [0x6, 0x3, 0x4, 0x1]}, &(0x7f00000000c0)=0x10) (async) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000180)=@assoc_value={0x0, 0xb}, 0x8) (async) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000100)={r1, 0x5, 0xb, "aa9a56a8bb1c27f754ee78"}, 0x13) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) unshare(0x26020480) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000002500)=@raw={'raw\x00', 0x3c1, 0x3, 0x5f0, 0x3b8, 0xffffff80, 0x178, 0x3b8, 0x178, 0x520, 0x22b, 0x258, 0x520, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x398, 0x3b8, 0x340, {0x1e0002a8, 0x7203000000000000}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x1a, 0x64, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xa}]}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "e22e50439abb066265e088a63e13552b8b2fec412753ac647d17d2ebca69d17a9722bd2f5be411676d5993fb4cc74168209fb9f43b63bab2a88206d7dd8158d916b865d0f713f772c59ad6e6b572e9a6c498fb6459888a281e8c071a9a7229f9fe02cb8e9ba7637a2591a5367c770c87034734be6eda195ce135517efa85da52"}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1_to_bridge\x00', 'geneve1\x00'}, 0x0, 0x100, 0x168, 0x0, {}, [@common=@ah={{0x30}}, @common=@ipv6header={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x12, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x650) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) (async) socket$tipc(0x1e, 0x5, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40082104, &(0x7f0000000140)={0x0, 0x0, r2, 0x1}) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) (async) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, r4, 0x301, 0x0, 0x0, {0x34}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) (async) 21.666961347s ago: executing program 3 (id=178): fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:qemu_device_t:s0\x00', 0x23, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) msync(&(0x7f00000d0000/0x2000)=nil, 0x2000, 0x4) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:qemu_device_t:s0\x00', 0x23, 0x2) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) msync(&(0x7f00000d0000/0x2000)=nil, 0x2000, 0x4) (async) 21.638508228s ago: executing program 32 (id=178): fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:qemu_device_t:s0\x00', 0x23, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) msync(&(0x7f00000d0000/0x2000)=nil, 0x2000, 0x4) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:qemu_device_t:s0\x00', 0x23, 0x2) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) msync(&(0x7f00000d0000/0x2000)=nil, 0x2000, 0x4) (async) 12.822249204s ago: executing program 4 (id=335): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x14, 0x4a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x6e80}}, 0x14}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x1f6, 0x4) sendmmsg$inet(r0, &(0x7f0000000ac0)=[{{&(0x7f00000000c0)={0x2, 0x4e2b, @empty}, 0x10, &(0x7f0000000740)=[{&(0x7f0000002080)="c5493c4445957e603f4ad2f5acd4e8454de47d8032cc559370f711cc10c809d0fddcf0ae68cc09b4b9b024eb6a00993f11ef2fe22686b42b23b26739b05fc83aa9c31cf24008aabfd42d70dc7b2eaf9a9e75de4a3002c8412ea1d20eec116d68c9877abace004d990fe36af2827b2192c0745b3f27824411a515ba6a7da97cd11918cd3127cfe0364d70bbf2de0903d0bf9db8135d2c6b2d0726570da311af47c7c4917bb70c130a6e9b9399153e5e7de937e251faec5e8b4a3c50e1efedb34fc245c17b288001fb5ce4c28823422b3f00235f58aabbfb40a39ef6d14808706a5312840ebd7deee3c4ed5272a53b3ce1d4eec7c6f9db4ba7dc20f53e4c738bb514c382466e136b1c89b4b01481fbaa8304d1de230c0a5244f27172cce865816589948b06ec0218f197546115083ff318e707ca6ef258a4a79735b5c26afddedf45afe9a98f539c55498154510fd4d3ab2493b38d46f7ae474a38ca6f2e72c03bd648bc022f433b7fbb323b14eee0b18a5da6a4792d355d4e8bb4f153b6b6dfe2cab5e5fcd432044b49d19ed053bd8a5290da306af3e2bd5a1e7c919a0057e3e03f44298940afff068a8c4c49c609d78efe0cbe82623f101f966329a834bdf8c4687ac83a0d11374d560d839bd95225d5a91887ef9b2e6032a29b9ae1c5be60161a44c49745234001abc7187c161169dc7ebee041f1cbd4ebc20428753c0630792c4989aec44c59a049b0fc160a90b6ecacff6ac05a5560500ef8534821900ea6b6afb8842e6d6d9a6949d0f07185889e24bc2bf53f36b412d3e190ddae33a2021305d904a67fd3772e374045fabb59c556310ee2002aa3e539fd5edc8c9e9699f561d8f822c457ed921c2e764417b70e1f53c9eece85d7ac76ccfe4bdcf7b1af664d540c4637e917ffaf9f5b544ff5f1d2f9970b82895d28fdb10a4f301bf73415accd71739ea191878f590cc8b0f182561d8e598b09f12da85c9a385a3371a11679c68c83b0d91f020156ab23564fb939c4baefbd5122dc621178004556233eed7749aebe7b65aea25e8d78eac88f1fb4d25822c4b051482803d4bc8ec55831a10f39984d05d64286569d3db39b841ab00f9a849b22d8a4dc9991ec04bee078316d7b92415b50bd34d181778a4ccf0fca1607623f2aae1138601b18f9e2f0dcb1a9cae9722d1979ff26543519ea1576f1daccd3e0f226af9824758cb886706d89d8787cf66c472c99e912dfd836219b6bd385e40375084a5e04e916dcc67d40a3ab59b6f0e6776e01d8e2068acf0f98b631bc4665eade804cb4720a59322f3aa0bba2265f1edea6aa5203192303c71bc8c93a136921e5ecca51fe877f89ebc8ca121fbe9dc788ac5fe37188190cbdce47bbf2f4c2e0fe65d3f4550c6103391a6f1fc18f21c19c6cad01e1cbbed0a8b3191ee23d917cd6832a33f98dd0cea9ce64dd5b99d1c4b7dcd4744c9ac56654563d60919bd75e246da6b0ffd2fbac60ed957849a795d26f2fb160356b3e29938991b95c16c1a18df358cfb34636eb63e9538ead4d867f2b5ad851dc312a62bf6e9a91eabcb54619dc7d279c913b4a6442c07b89902039926f5f953a801d6f721c6df399d2d157bc5624ed313370e6ddd84a2357b351710f72932ef55a9b6565a1fdcfa099eca5f84b5091b6903a2cd2229e903663c538620db88dfa6dc5b2f8856cae9ea351030417a4082e8fb8ba9dbc7ca0c15dd7c10f7709f8c8439f36980a1b9400ed447474ff785d2e4e7fcbbc241c9bc8392babf8fe157350aa5c57f40b13062b43187eea9a1db75112e7b504be60e68f55db320e5d128440c23dc251ffecf336e7a2c2f15f386fada7ce36086acf04ec154bb17d276ffc5b22284b6699b24f6807f9b7aed2402a617ac162688001db681b92264f3051e6479e0fc50a17bcabb072fdd8c8545dac0d6bf68293607dd32a38c18b899f331a65502dbf6414515aff24b3f9dd6f09f1813e3efde8a489e886da2e2215f128a564bc8040f5a8ef528697deff8247d2af47ee3c8b41164ac7b812c7061ef871a4c6cf7a4fa3c4fd6b641655ece7fb312e19b3f33520815ee52a950f982f9d01b6e807c6da5508900185c5d2e00b6e7bf20fa5091c773bb6754af1d4bbe376d75b64b91e8f637356d8e22d24092c45b2877da9dc8c9294c7b62d8b62f72594ec20d17416aed1cd879afaf977c11fd8af110cbf4b298a1c110bb2d3af2a6f5042aaf8c7b38b055025c2f8aef64a16511cc409bd256165d5b973df89c896245cd422f51f4a6915819fe318f99768aa7a644b74186db8946ff518448136b4b49dc8aa47d2d14ad8d1c00f6f0196e6f82f4f32ed61fd8dacf98d9b0294f623288fcf3e5cc068d2877a5de6ff477cbc156dc0dbec9aa7e42a49369c9f0d1709595a99afe07151fbf9dba835846d59e0e39b200e360219de91633f86fc854fe75c47906cae362366518e75f8b8fcecccee548a32ea59eda4b2a02ce8b5d636e1529e9d714caa0a6ebd740a560e3796cd0633078deb9ee6f0b202048d3ba8658617e5d2adf5435bd412ff42655a7e8e660eca9d1bb0892fb36b4e6d49f7d2ba863828d17855abf6e434a6b011f9f648242ae7ae71f878926fb021ecedfb245aee492bc46c6e6515196d79dce4b6f808b23141132534ddd44f2875682e39f42ca5c6bdfea40db2dabeb780622c00e7442813ed0d76511509d9b5a8d6ad24bbb2140e682cab5415ac63275f49f6a2fb4ca5f668b930b91d22d0528855c502926ecced6754087afb60b2fce6f4e70f9de5df5db707a61ad7f4e55b76afd26e46f9e38016b6855f63c17ef3e3be3eabb07f2d57653812aaed330b0adb77fbd3e71e01be16faefef6a99e34ca1f2b27f93d6b929254de55f89364c85083cc369d53eb5c678d8ce5d66ee89b5af6e68a391944d824813eb60e9787c5670e56dfa6916be0410808622766384bcfc50f30fc9b2c5f5b41ae01d5ec76d1fea1bfa03ceb22c9a0143122a1607f6e307face1b1f2d8733fbb242154bf2a8ae342f096f18ef2d471d62e59a4a8ba61caf106327b0b54b7e76cf0a6359db65dac88b14ffb012b3785697053e05a10e29db6ace5c1a06c8652a2c35697a771239e0d2297f6a927001ca8baf4f03873852f16b6ebe9afb184751b3c821e7b3f422f1ff396946519a7c26614e79ec22cdb61c851fd4042df213d049a3e65cf06e78817ec0d2a1d3a7bc26a495d213bfba8568c276434fa4346f7ff2e68a964fc32c823e91bf969d3013c2d42e57b08430282d3dc130c3b62151e6870fd0774580edf4366aeef379f09413b4c222834fca0acb699d69e73605128e426bdf101a1625e8e406c946aa04649225678b28cd85e22a412a319a9bb860a18f2eb11007b9f9e794367681a6446d05a9a886702004a8f19a8a88fe7ffef8e439126fc9fef7f58af90735e237ee734fee24b65a3d0f0b8bda850b48d43c9b27c7907dd175513015c966f3b7084ff42a969b9b7e94e58b16c58821871dc3b215efbf8c2452afadbb20a462eb40c1d645f5c07afba56a74841dff20ad6e65878a9db36382c6d7758cc9a9db86193c5a3f7b9eb993c018cdc17720bc1f47c91076575db3f5e31243db2ec409b11b919bc3876ce2ea494baa21694e2ea576fbe81a69ef054b95e0a7d800ab072aa63638086ce67291f53963ab33e21b6d20d056cd255fb0558f5aa681c73c8487e8f41c0d7e31d679f367b8179a6499a0ffd429b27785f1c275538e1fedaa006f4f62313870ec949f9abc69675037c70ace298d80f10991feec77758d5e95f49fbd830e796b5c89d24ebaf3457d08d0e7a72ca38e300c837ec75cfa2685dd53bd746f3ede39f2a685c858592ae4e486203e3c4ba66dabe68d274319bb1f35a110b565e114fb890a18cb6e5fbd1f48551836be38a55059195661803300991daf3361e7bb1f8fdcb80491f0b3e05b25c4e14f7e668674e51831a5f9f99febf78b4f8f48939b25a7613a2d3604ae49ec5f04ca62e24e8ca85395de6b3ca95ad295803ff3224a68e2dc27184cfc2cf7d4b0351cb90682ac524263006dbbe16c0683ef15ddf7fb62f872701015c268f80a8b28bb57730ff308c8253c20e9f7a95afb37d11296fee0ce3575f29d81cbe01e6eb691a148b8484063da1f87b1a0d23e2b40fb633c4143138ce1c9f742de2ac87c2aa4cf1250e44a6ca4e973a3d74b474e7bec0cbec8f6bc355103aa873b51b777ef76d411cd0dea02ae3fc23fed605a662d65ab42f44ff31c0791cf34b345a834210ead4a1b276a52080fc0f958c5542a8d07aa0e26c906b357656c0b0d85a565836ffd0e83b00cae2e56c1057c464eddcc3043a9fd221064ad16300fbe280c7ea912415e835ab2cbb3eadbf22553acd89fc6a0a8d80f06a4f90053f05aa87b8003e6c77dc0fdcc65a2ff8ed9c6d6d35bc97176f8822066e6027cce2f32012925cbb825544e5816ee568253f0f02d01bca7b9571bfb7bd6f21270e7415345d8ff7133b92dffede619cb5699758177e84814edcaa9b49fbad259138233e482eeac4c11523062a1f3691b3b6f78091aaf4f641fc1dd9082bac4600ba28b3e3ce5e84d5016be364ee77eaaa491c974e55127c751a80d81b9a28a9c6aa82a8f2428653456f22c34fde1f2097e075c93483947f1a41c26b577b13da1c302067660963bd2b9aa393f334d847bb35f9391ebd962daf3addc487557917686afecea61cd6f1b097cea17a9099e8bf030ec2ff4ca1c340ef356590c65ca96224999116da8c50e5efe45f932285d057a34538a7758aee2eba1e60c9db6d1f692b26e34ec9ab4ab48d7fd6d6739978bfc756e1a2a8d78b5144cc07af6b9511b8c87023add8c06860a9ca6a7a4cf6bd17ead909b26db583f64550496e2c90e321753c66d55281d64cef34c5507e11ed2c6ce639fea06ddc22a084d935b13637930fed87114a6d70bbc93d0d1994bdf0180f5993498371db960e6149f04835d7047255da9925307b8689a6055c11d7ca9241c49fdce5068619793346f478ac2bb00c1e5875bc464ecc1b76d0b00e456261567da51bdaf1228df78732ffb689e88253b9ae44863c9d8af047ae9337805d039c69c4c44c8fad5c74c703a0ac510305b24e331d728ec2be2580e7ec35f6eda571ba25e659835ccb86c250f00e67fc2728542d92fdddc1ddff92597194be527b8982fb583c967e5eef2d51f7ecbe6aebc0c349727a8368bf772d01b2cc16d3bf77fac55e7b52ccc27b375b5ad49c96c246f073917a7de3e06e2160262476c0dc0f0199c40b1f18edbc7756cbbede49aa0f60165c910d296e77e57a6a94a69e6cd21ef0572d04d9163d78f4ca78c5e50e8c149df0c98a950738de602861e4eb409bda6d591db68f582114f001093768f2b5700cceb7b9c7ab3c8f6d563b1a6fe2b78cbff36aa2983ad9e48f0c5c44562c8a0a51737a5fc623e9eaec1177913421aeeaf80356f2a1b80bc85348bbd1570796355c175aafc51c8f4806e1bfccf8e37b7b72c6b1e199048080d8630000032dd5d9202f5a16bef76f1ab595c8562332205172db292b8cfcbbc429beeabc26bd7a4829182f3e57161d9097e281c57d7dea83c2861", 0xf81}, {&(0x7f0000000240)="8a", 0x1}], 0x2}}], 0x1, 0x4000800) 12.821941294s ago: executing program 4 (id=336): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1b0000001a00010000000000000000001cfb261cca399cb88a40e5b98cdb1d11ff9ff982ae66320c48b9cfaae5dc08267e33ba6db1e6245fb6ff0b7fdf09aec4e26e30e460b7f46107b7de392b2f308067510ea6a0a34a549f25830c05270baa691c7c0b11de631340a98b44db9c72f78b0187e3c55dbd5e3dc257871c3f921c63b7789ccc0ab494eebb9b752a3c111df5f6211a9c97808e498a35c9f6e12954919e2da61a5bdd16"], 0x30}, 0x1, 0x0, 0x0, 0x48000}, 0x2008000) munmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000) 12.819855214s ago: executing program 4 (id=338): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x1, @perf_config_ext={0x700000, 0x136}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) write$binfmt_format(r0, &(0x7f0000000100)='0\x00', 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x78, '\x00', 0x0, @fallback=0x30, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) write$qrtrtun(r0, &(0x7f0000000300)="ca0e808bb35b", 0x6) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x7, 0x5], &(0x7f0000000240), 0x0, 0x2}}, 0x40) 12.771068787s ago: executing program 4 (id=341): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x8, &(0x7f0000000100)={[{@inlinecrypt}, {@errors_remount}]}, 0x21, 0x4f3, &(0x7f0000000f80)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) write$selinux_attr(r0, &(0x7f0000000040)='system_u:object_r:cgroup_t:s0\x00', 0x1e) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x40, 0x1) file_getattr(r1, 0x0, &(0x7f0000000040), 0x18, 0x1000) syz_open_procfs(r2, &(0x7f00000001c0)='wchan\x00') pread64(r3, &(0x7f0000000140)=""/37, 0x5b, 0x6677) write$binfmt_script(r0, &(0x7f00000004c0), 0x208e24b) ftruncate(r0, 0x3) 12.54459069s ago: executing program 4 (id=345): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x3}, 0x2545, 0xfffd, 0x0, 0x6, 0x5, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c00000009060108fffffc0000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd0500070088000000060005"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r2, 0xffffffff}}, 0x10) fsopen(&(0x7f0000000040)='ext3\x00', 0x1) 12.145674823s ago: executing program 4 (id=352): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r0, &(0x7f0000000340)=ANY=[@ANYRES32=r0, @ANYBLOB="814c8d"], 0x13) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000002000010327bd7000a64ab725020000760b"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], 0x0, 0x0, 0x1, 0x1}}, 0x40) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000f10000000000000000000000dd70e5cfe1c6e66da94fd881044555f0e279eec2d083373d894e", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f00000001c0)={0x4, 0x0, {0x1, 0x2, 0x2, 0x1, 0x3}, 0xf5}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r6 = syz_io_uring_setup(0x116c, &(0x7f0000000000)={0x0, 0x7f36, 0x0, 0x1, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x32, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8}) r9 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TCSETAW(r9, 0x5407, &(0x7f0000000180)={0x0, 0xf, 0xc, 0x1000, 0x4, "5a1c966bcd4b7448"}) write$UHID_INPUT(r9, &(0x7f0000001040)={0x9, {"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", 0x35e}}, 0x1015) io_uring_enter(r6, 0x47bc, 0x0, 0x0, 0x0, 0x0) r10 = socket(0x1e, 0x5, 0x0) connect$tipc(r10, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), r10) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r6, 0x18, &(0x7f00000001c0)={0x79c, r5, 0x32, {0xb, 0x100004000}, 0x2}, 0x1) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r4, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000140)='%-5lx \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000540)={r11, r4}, 0x4) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000d000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000200000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r12, 0x0, 0xe, 0x0, &(0x7f0000000340)="c1dfb080cd21d308098e00000000", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 12.129857144s ago: executing program 33 (id=352): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r0, &(0x7f0000000340)=ANY=[@ANYRES32=r0, @ANYBLOB="814c8d"], 0x13) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000002000010327bd7000a64ab725020000760b"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], 0x0, 0x0, 0x1, 0x1}}, 0x40) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000f10000000000000000000000dd70e5cfe1c6e66da94fd881044555f0e279eec2d083373d894e", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f00000001c0)={0x4, 0x0, {0x1, 0x2, 0x2, 0x1, 0x3}, 0xf5}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r6 = syz_io_uring_setup(0x116c, &(0x7f0000000000)={0x0, 0x7f36, 0x0, 0x1, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x32, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8}) r9 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TCSETAW(r9, 0x5407, &(0x7f0000000180)={0x0, 0xf, 0xc, 0x1000, 0x4, "5a1c966bcd4b7448"}) write$UHID_INPUT(r9, &(0x7f0000001040)={0x9, {"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", 0x35e}}, 0x1015) io_uring_enter(r6, 0x47bc, 0x0, 0x0, 0x0, 0x0) r10 = socket(0x1e, 0x5, 0x0) connect$tipc(r10, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), r10) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r6, 0x18, &(0x7f00000001c0)={0x79c, r5, 0x32, {0xb, 0x100004000}, 0x2}, 0x1) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r4, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000140)='%-5lx \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000540)={r11, r4}, 0x4) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000d000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000200000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r12, 0x0, 0xe, 0x0, &(0x7f0000000340)="c1dfb080cd21d308098e00000000", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.227696602s ago: executing program 0 (id=506): ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000900)={@in6={{0xa, 0x4e23, 0xeebf, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x764b}}, 0x0, 0x0, 0x43, 0x0, "49577585d69e7621a49de918dc5d4b775d57a4d8d27fa6af8e6303d149b0dda5dea464b4b8b34072cc4c050c01c0092687fe1d22eb82ada112c4cf039c7d057f2d663a26f17e50505d2cc836ac858ca4"}, 0xfffffffffffffff7) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000ffffffff00000000000000001801000020646c2500000000002020207b1ad8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) epoll_create1(0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000040)='GPL\x00'}, 0x80) r4 = epoll_create1(0x0) r5 = fcntl$dupfd(r4, 0x2, 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000003c0)=ANY=[@ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="11"], 0x14) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000006c0)='./file0\x00', 0x58e, &(0x7f00000001c0)={[{@errors_remount}, {@lazytime}, {@block_validity}, {@block_validity}, {@block_validity}, {@quota}, {@noload}]}, 0x1, 0x459, &(0x7f0000000240)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0xa0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r6, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x434401, 0x58) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r7, @ANYBLOB="0000000002000000b705000008000000850000005e00000095"], &(0x7f0000000300)='GPL\x00', 0x4}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x55, 0x1, 0x0, 0x0, 0x0, 0x619, 0x10000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0xe}, 0x10005, 0x1, 0xfffffc03, 0x3, 0x3, 0x80000000, 0x5, 0x0, 0x0, 0x0, 0x10000000002009}, 0x0, 0xffe0000000000001, 0xffffffffffffffff, 0x9) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000380), 0x3, 0x589, &(0x7f0000001580)="$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") utime(&(0x7f0000000040)='./file0\x00', 0x0) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000540)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="11"], 0x11) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, @fallback=0x1c, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) exit(0x1000) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000200)={r8, 0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x15, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x16}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth0_vlan\x00', 0x800}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x8946, &(0x7f0000000080)) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) 1.598262748s ago: executing program 6 (id=516): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000680)=ANY=[@ANYBLOB="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"/2663], &(0x7f0000000480)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffdb6}, 0x48) 1.583297179s ago: executing program 6 (id=517): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="8800000000010104000000000000000002000000240001801400018008000100ac1e000108000200ac1414e80c0002800500010000000000240002800c0002800500010000000000140001800800010015d001010800020000000000080007400000000024000e8014000180", @ANYRESHEX=r0], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000000280)=ANY=[@ANYRES64=r0], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0), 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x58, &(0x7f00000013c0)}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f00000003c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x68, r5, 0x1, 0x70bd26, 0x20003, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r6}, @WGDEVICE_A_PEERS={0x4c, 0x8, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x0, @loopback, 0xfffffffd}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}]}]}, 0x68}}, 0x0) recvfrom$packet(r2, &(0x7f0000000240)=""/9, 0x9, 0x10000, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r7, &(0x7f0000000000), 0x2a979d) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x4, 0x4401e, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0xa20a, 0x10000, 0x8, 0x8, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) process_madvise(0xffffffffffffffff, &(0x7f0000001680)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0xfffffffffffffffc}, {0x0}], 0x9, 0x16, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000340)='./file2\x00', 0xa000, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r8, 0x4bfb, &(0x7f0000000000)) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000014c0)={0x2}, 0x8) r9 = io_uring_setup(0x6c0, &(0x7f0000000880)={0x0, 0xd3d5, 0x10000, 0x5, 0x351}) close_range(r9, 0xffffffffffffffff, 0x0) rt_sigtimedwait(&(0x7f0000000200)={[0xffffffffffff7ff9]}, 0x0, 0x0, 0x8) set_mempolicy(0x8003, &(0x7f00000002c0)=0x6, 0xff) syz_usb_connect$cdc_ecm(0x2, 0x7e, &(0x7f0000001780)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6c, 0x1, 0x1, 0xbf, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x1f, 0x3, 0x2, 0x6, 0x0, 0x2, {{0xb, 0x24, 0x6, 0x0, 0x0, "065d3f0d1a70"}, {0x5, 0x24, 0x0, 0xfff9}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x7, 0x3ff, 0x1}, [@mbim_extended={0x8, 0x24, 0x1c, 0x5, 0x42, 0x401}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x5}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0x2}, @country_functional={0x12, 0x24, 0x7, 0x2, 0xc0dd, [0x1, 0x9, 0x9, 0x6, 0x6, 0x1]}, @network_terminal={0x7, 0x24, 0xa, 0x5, 0x4, 0x9, 0x1}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xb, 0x1, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x7, 0x9, 0x9}}}}}]}}]}}, &(0x7f0000001d40)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x250, 0xe2, 0x7, 0x4, 0x0, 0x4}, 0x8, &(0x7f0000001500)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x9, [{0x4, &(0x7f0000001800)=@lang_id={0x4, 0x3, 0x813}}, {0xa, &(0x7f0000001840)=@string={0xa, 0x3, "6774281507f00842"}}, {0x4, &(0x7f0000001880)=@lang_id={0x4, 0x3, 0x3801}}, {0xe6, &(0x7f00000018c0)=@string={0xe6, 0x3, "254bc43f43f78c6747f844742207555c405e341ea9b42294cfdf469977636661e1fd2e4cc5f6b7f9b1ca152f1c503f4c0cb08d009e821345d881160b4730d9e84f535472d5c8c0f0fac4ea366e37dfd6f4296fd2e33f408dafd39656a01bfa192fba169fd96ae9092cd09b4f8b0f8e8dd3a83a6a10c4a92e5e08454a940b30bbef0b094fffda565e9b0de3f0d17f75257b4cecd386e47e520331dc16763f2cdafbc10b56b55550a0809b1d2da0f72d781a3cf71226927162b5c7621535863bee4e95144f5e04c722e66a0db6547d47383389630fa40300ab7d05a1fd31df86ef810378b3"}}, {0x6c, &(0x7f00000019c0)=@string={0x6c, 0x3, "f5374297942c38ef713a113520b997b75c3c215700a4d6781a8f73ba86107135186e0bcdff2a9606761a1edf9521961eeb5621720050a03b6a51d3bd9bdf3a5253dd5d87dc3d3f6c4939fc9746495ccd06c2b6eba1d03097ae8ad5fd3e8821de97ada936290b21eef57c"}}, {0xe1, &(0x7f0000001a40)=@string={0xe1, 0x3, "7407b4d6d21591ffc658ba6bfafc1d2225b7b6b37c56e74c4dc917c4a536aaf6249c7133d2b29a6e5c38ac6f69a094e904e82a34c108b45e7580cf23b671dcb1b0116b58f84ca164cfc64fd733924dd8f607aa076fac188fad3e0c5fff5c4fd09bf7f625f718b819091f38a82143e94d0411d4fd8938c188ae6ecc6ba8a4f61db83f08cb2e73f0ecf0f40edff1e5eed21bc2c568f8471c40024be2ba43d0ba9fda119d1aa9010470c618b961e35b4aa007f105d086338846a4c2e4183ef9cc2bb8a7cd17a6a511b2b1432ffd752e29a7b414195f882ef66c7e750ac54829dc"}}, {0x9b, &(0x7f0000001b40)=@string={0x9b, 0x3, "69d5c2ecdfa28df9e33f310323dcaf191d60cae63787b7cd2e2cfdf468b18c9b4968a8306db334c0cd4653e5a1b97cd7dd2771d25dfb7664201d90ed026c502d17e2b7c94a7b15ddbb5d2f5bc139cc8e8311fea61ee9394bf17de56c6b1bf371659bf103b2caf2a4ec7762d6759a48da8fd823968e3e993317741ffcab8c5e4a2369c5474ac3dde5c9e8657ba03647813586a58cc2448a496d"}}, {0xd7, &(0x7f0000001c00)=@string={0xd7, 0x3, "5b6908b9f4b193b7becc46fe02922a9c30da4aa4986b39ddc795c47038f104f8d93ca8242218020da2971093703b3af83f3d12d6791eacbe2be0f454bd006769073b56c221d6dbb912431d061bb296c65e2294eede443c1453d30175daa6ac55114b3f0e1d786ff629103f289daa361ec4a896950eb25e1ab3c31a9cd7e85f60fe061ac1364200c7fa71533e9d320cd7bc5a9b74ffaea787d11455efdc72d0f7daeed72ec8ad3dafcf33ff0057e340dfcad70a542224128477ac2404b9fc6283efb72f53419555a9bf378a799ec40418c5299b70bd"}}, {0x4, &(0x7f0000001d00)=@lang_id={0x4, 0x3, 0x480a}}]}) 1.308137375s ago: executing program 0 (id=521): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r1 = getpid() r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xd, 0x590, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x1}, 0x2000, 0x10000, 0x0, 0x6, 0x8, 0x80, 0x1, 0x0, 0x0, 0x0, 0x20000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r3, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0x3c}, 0x1, 0xa1ff, 0x0, 0x4040010}, 0x30) 1.021629362s ago: executing program 5 (id=532): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5, r0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) prctl$PR_SET_NAME(0x45, 0x0) 1.021333412s ago: executing program 5 (id=533): r0 = eventfd(0x3fb) dup(r0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x8, 0x3032, 0xffffffffffffffff, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) getsockopt$sock_int(r1, 0x1, 0x2f, 0x0, &(0x7f0000003a80)) close(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10) ioctl$int_in(r2, 0x5452, &(0x7f0000000080)=0x4) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r1, 0x8983, &(0x7f00000000c0)={0x8, 'wlan1\x00', {'virt_wifi0\x00'}, 0xe}) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) recvmmsg(r2, &(0x7f00000034c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) close(0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x10, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2000000}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, &(0x7f00000002c0)='GPL\x00', 0xe, 0x1009, &(0x7f0000002500)=""/4105, 0x0, 0x68}, 0x94) 941.721346ms ago: executing program 5 (id=535): r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @host}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) read$rfkill(r2, &(0x7f0000000040), 0x8) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)={0x3c, r3, 0x1, 0x70bd29, 0xfffffffe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40004}, 0x18) 905.924138ms ago: executing program 5 (id=537): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0xa080, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_ifreq(r7, 0x8991, &(0x7f0000000100)={'bond0\x00', @ifru_names='veth0_to_hsr\x00'}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002340)=@newtfilter={0x54, 0x2c, 0xd27, 0x30bd29, 0x25dffbff, {0x0, 0x0, 0x0, r6, {0x6, 0x9}, {}, {0x10, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_EMATCHES={0x20, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x100, 0x8, 0x6}, {0x1, 0x5, 0x4}}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20048084}, 0x2008c010) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) r8 = socket$inet(0x2, 0x5, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x7d, &(0x7f0000000000)=@assoc_value, &(0x7f0000000140)=0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_type(r1, &(0x7f0000000180), 0x13bb711e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000b000000095"], 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r9) 818.775823ms ago: executing program 2 (id=539): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000680)=ANY=[@ANYBLOB="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"/2663], &(0x7f0000000480)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffdb6}, 0x48) 818.089053ms ago: executing program 2 (id=540): r0 = creat(&(0x7f0000000000)='./file0\x00', 0x40) r1 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000140)={'ip6gre0\x00', 0x0, 0x29, 0xb8, 0x4, 0xeba, 0x0, @private0, @empty, 0x80, 0x7, 0x7ff, 0xff}}) (async, rerun: 64) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f0000000480)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x0, 0x80000001, 0x1, @local, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8000, 0x8000, 0xffffffff, 0x455a807d}}) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0xa, 0x7, 0x2, 0x4}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000010080000850000002d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000500)={'vcan0\x00', 0x0}) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000540)={'vxcan1\x00', 0x0}) (async, rerun: 64) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000680)={'tunl0\x00', &(0x7f0000000580)={'gre0\x00', 0x0, 0x1, 0x8, 0x7, 0x200, {{0x34, 0x4, 0x0, 0x6, 0xd0, 0x68, 0x0, 0x7c, 0x2f, 0x0, @broadcast, @multicast1, {[@generic={0x44, 0xb, "487247eea55cd5fac2"}, @timestamp_prespec={0x44, 0x34, 0xd9, 0x3, 0x0, [{@rand_addr=0x64010101, 0x5}, {@remote, 0x6}, {@multicast1, 0x6}, {@private=0xa010100, 0x82}, {@loopback, 0x6}, {@loopback, 0x2}]}, @ssrr={0x89, 0x23, 0x8c, [@multicast1, @broadcast, @remote, @private=0xa010101, @multicast1, @rand_addr=0x64010100, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x14}]}, @noop, @ssrr={0x89, 0x27, 0xf6, [@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x1f}, @dev={0xac, 0x14, 0x14, 0x1d}, @private=0xa010101]}, @lsrr={0x83, 0x1b, 0x2a, [@rand_addr=0x64010102, @private=0xa010101, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast]}, @timestamp={0x44, 0x14, 0x2b, 0x0, 0x9, [0x2, 0x2, 0x2, 0x400]}]}}}}}) r9 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) connect$can_bcm(r9, &(0x7f0000000140)={0x1d, r10}, 0x10) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000740)={'erspan0\x00', &(0x7f00000006c0)={'syztnl1\x00', 0x0, 0x7800, 0x40, 0x8, 0x51a0, {{0x17, 0x4, 0x2, 0x2e, 0x5c, 0x67, 0x0, 0x4, 0x2f, 0x0, @private=0xa010101, @local, {[@ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x44, 0x43, 0x3, 0x6, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@local, 0x8}, {@broadcast, 0xfffffffb}, {@private=0xa010101, 0x7ff}, {@multicast1, 0x7}, {@local, 0x1}, {@broadcast, 0xe2}, {@rand_addr=0x64010101}]}]}}}}}) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001d00)=@newtaction={0x1580, 0x30, 0x1, 0x0, 0x0, {}, [{0x156c, 0x1, [@m_ctinfo={0x48, 0x2, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x10080, 0x5, 0x5, 0x1, 0xfc}}]}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0x0, 0xfffffffa}, @local, @remote}}]}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x224, 0x1c, 0x0, 0x0, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xffffffff, 0x3, 0x5, 0x2, 0xf}, @multicast2, @rand_addr=0x64010101, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7f, 0x7f, 0x66085548bd3c565c, 0x6, 0x4}, @private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x2, 0x6, 0x89, 0x1000}, @multicast2, @remote, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4800000, 0x2, 0x5, 0x1, 0x9ed3}, @private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x80, 0x7, 0x8, 0xfffffffa, 0x8000}, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x40, 0x4, 0x8, 0x3}, @empty, @private=0xa010100, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x9, 0x8, 0xfffffffe, 0x8}, @loopback, @multicast2, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8001, 0xfffffffc, 0x2, 0x9, 0x80000001}, @remote, @private=0xa010100, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x2, 0x6, 0x2, 0x8000}, @loopback, @multicast2, 0x0, 0x1}}]}, {0x93, 0x6, "39708a8ae319d96d24647e5312e49a87f6a8add14f3376cb6c1d69282fb8a5c986a350a1078e28a23242249d72d528187329eafd8b58eaf5d28fe5f5ed9a6f0dc8cf147cb3c82652d7acabd25ffcf2b2a2fe5e1a01102ee7f32f9d1d359bd549faf52c9c9cb08b02c2c35b889d7bc1930241ffa42f9a76fc344fb6237b4f271bb0cb00a70d6258c8597b52af5dacfa"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_mirred={0x1110, 0x1d, 0x0, 0x0, {{0xb}, {0xe4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x4, 0x20000000, 0x6, 0x8}, 0x4, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xe, 0x7, 0xffffffffffffffff, 0xff, 0x6e202ca0}, 0x2, r3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x7, 0x5, 0x8001, 0xce}, 0x2, r6}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x10000, 0x10000000, 0x10, 0x4}, 0x1, r7}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0xb3, 0x7, 0x65, 0x8}, 0x3, r8}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x9, 0x20000000, 0x3ff, 0x7f24}, 0x3, r10}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xfffffffb, 0x7, 0x20000003, 0x80000001, 0xffff}, 0x1, r11}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_skbmod={0xb8, 0x20, 0x0, 0x0, {{0xb}, {0x58, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}, @TCA_SKBMOD_DMAC={0xa, 0x3, @remote}, @TCA_SKBMOD_SMAC={0xa, 0x4, @local}, @TCA_SKBMOD_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}, @TCA_SKBMOD_ETYPE={0x6}, @TCA_SKBMOD_SMAC={0xa}]}, {0x38, 0x6, "751628172bf0ac2c9e9762867de29cf5f412ac7933b83d691fa75bf8d1620a7f7a6afd9d7436f406b507146421263cba0f968e74"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ife={0xe0, 0x5, 0x0, 0x0, {{0x8}, {0x98, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x9, 0x5, 0x3, 0x10000, 0x2}, 0x1}}, @TCA_IFE_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}}, @TCA_IFE_METALST={0x4}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x3, 0x7, 0x2, 0x8001, 0xeb7}, 0x1}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x7, 0xe1e, 0x10000000, 0x2, 0x2}}}, @TCA_IFE_SMAC={0xa, 0x4, @random="b669d1cb4438"}, @TCA_IFE_METALST={0x24, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0x4}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0xd9}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x1ff}, @IFE_META_PRIO={0x4, 0x3, @void}]}]}, {0x24, 0x6, "4623dadb84a26a0e878426de764d7fd9b964d41a2c5075a433c847a65bd318dc"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x1580}, 0x1, 0x0, 0x0, 0x20008000}, 0x8000) (async) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) r12 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) syz_io_uring_setup(0x54d, &(0x7f0000000040)={0x0, 0x735a, 0x100, 0x805, 0x350}, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) ioctl$sock_bt_hidp_HIDPCONNDEL(r12, 0x400448c9, &(0x7f0000000040)={@none}) close(r0) (async, rerun: 32) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000100)={0xc, 0x8, 0xfa00, {&(0x7f0000000300)}}, 0x10) (async, rerun: 32) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000000200)={[0xffffffffffffffff]}, 0x0) 815.053603ms ago: executing program 2 (id=541): r0 = socket$nl_audit(0x10, 0x3, 0x9) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3000004, 0xdf4da18dbb178ad5, r0, 0xf7f21000) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x2000c406, &(0x7f00000007c0)={[{@dioread_lock}, {@noinit_itable}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@jqfmt_vfsold}, {@dax_inode}, {@grpjquota, 0x2e}, {@nouid32}, {@resuid}, {@barrier_val={'barrier', 0x3d, 0x1000}}, {@inlinecrypt}], [{@euid_gt={'euid>', 0xffffffffffffffff}}], 0x2c}, 0x84, 0x520, &(0x7f0000002140)="$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") r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x182, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0003}]}) r2 = syz_open_procfs(0x0, &(0x7f00000006c0)='pagemap\x00') sendfile(r2, r2, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x20) creat(&(0x7f0000000000)='./file1\x00', 0x14c) removexattr(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000400)=ANY=[@ANYBLOB="75736542ba158e"]) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="e182327718000000000000001800000018000000048b9b0000000000010000050200000001000000040008000700000000613000"], 0x0, 0x34, 0x0, 0x1, 0x1}, 0x28) mkdir(&(0x7f0000000140)='./file0\x00', 0x1fa) getdents64(r3, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000003c0)='./file1\x00', 0x0, &(0x7f0000000440)={[{@dax}, {@noload}, {@norecovery}, {@stripe={'stripe', 0x3d, 0x3}}, {@jqfmt_vfsold}]}, 0xff, 0x50f, &(0x7f0000001000)="$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") syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000380), 0x1, 0x55e, &(0x7f0000001bc0)="$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") r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000300)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0000b0fd28f22c6b6e35ed1c661c0000000000000000", @ANYRES16=r5, @ANYBLOB="01002dbd7000ffdbdf251500000008000300", @ANYRES32=r7, @ANYRES16=r3], 0x2c}, 0x1, 0x0, 0x0, 0x2004c015}, 0x810) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x8) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x18012, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) openat$sndseq(0xffffffffffffff9c, 0x0, 0x121880) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_sys\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x6, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0xa}, 0x94) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x94eb2000) bpf$MAP_CREATE(0x0, 0x0, 0xffffffffffffff14) socket$netlink(0x10, 0x3, 0x12) 814.877603ms ago: executing program 1 (id=542): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYBLOB='\b\x00\n'], 0x54}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) recvmsg$can_bcm(r1, &(0x7f00000027c0)={&(0x7f0000000140)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x80, &(0x7f0000001700)=[{&(0x7f00000001c0)=""/69, 0x45}, {&(0x7f0000000300)=""/182, 0xb6}, {&(0x7f00000003c0)=""/247, 0xf7}, {&(0x7f00000004c0)=""/157, 0x9d}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000000240)=""/86, 0x56}, {&(0x7f0000001580)=""/79, 0x4f}, {&(0x7f0000001600)=""/234, 0xea}, {0xfffffffffffffffd}, {&(0x7f00000000c0)=""/19, 0x13}], 0xa, &(0x7f00000017c0)=""/4096, 0x1000}, 0x42) 770.165926ms ago: executing program 0 (id=543): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000000)=0xb, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xaa6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x20000) (async) timer_create(0x7, &(0x7f0000000140)={0x0, 0x3c, 0x1, @tid=0xffffffffffffffff}, &(0x7f0000000180)=0x0) timer_settime(r2, 0x1, &(0x7f00000001c0)={{0x0, 0x989680}}, &(0x7f0000000200)) (async) r3 = inotify_init1(0xc0000) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x200002, 0x0) (async, rerun: 64) r5 = syz_clone3(&(0x7f0000000500)={0x210200000, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)=0x0, {0x16}, &(0x7f0000000380)=""/34, 0x22, &(0x7f00000003c0)=""/224, &(0x7f00000004c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) (rerun: 64) sendmsg$AUDIT_SET(r4, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x3c, 0x3e9, 0x20, 0x70bd2d, 0x25dfdbfe, {0x52, 0x1, 0x0, r6, 0x4, 0x2, 0x4, 0x2, 0x0, 0x4, 0x5}, ["", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0xc040}, 0x4840) (async) tkill(r5, 0x1b) dup(r3) (async) timer_gettime(r2, &(0x7f0000000640)) (async) r7 = open_tree(r4, &(0x7f0000000680)='./file0\x00', 0x8800) setsockopt$MRT6_DONE(r7, 0x29, 0xc9, 0x0, 0x0) (async) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x80, 0x0) chdir(&(0x7f0000000700)='./file0\x00') (async) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000740)) (async, rerun: 64) r8 = socket$can_bcm(0x1d, 0x2, 0x2) (rerun: 64) open_tree(r8, &(0x7f0000000780)='./file0\x00', 0xb01) (async) memfd_create(&(0x7f00000007c0)='/$..-\x00', 0x3) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) select(0x40, &(0x7f0000000800)={0x2, 0x7, 0x400, 0x3, 0x1ff959fa, 0x5, 0xfffffffffffffffe, 0x7f3}, &(0x7f0000000840)={0x9, 0x1400000000, 0x5, 0xa, 0x7fffffff, 0x3, 0x9, 0x1000}, &(0x7f0000000880)={0x5, 0x3, 0x4, 0x3, 0x2, 0x8, 0xfef, 0x7}, &(0x7f00000008c0)={0x0, 0x2710}) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000900)={{0x1, 0x1, 0x18, r0, {0x80000001}}, './file0\x00'}) (async) rt_sigqueueinfo(r6, 0x21, &(0x7f0000000940)={0x1, 0x3, 0x1}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f00000009c0)={'vxcan0\x00'}) (async) setsockopt(r7, 0x4f528435, 0x81, &(0x7f0000000a00)="ec61725b1556485af9ffd87c1f62", 0xe) r9 = socket$unix(0x1, 0x1, 0x0) sendto$unix(r9, &(0x7f0000000a40)="fe641532d9e6d2da01ac71a59070c608cf6a938b9248c8f473857f5783068aad0e4cd8a0673e1c24422a615bdef13a59df544e581ad0339674248fd24d52d00f383e60759a1d5329b1627dba419ff55e1cf975d6aab4ad98d343a779364909ee92e1a0e230da8242ef1288c66f2000c25ab6fea9", 0x74, 0x8000, 0x0, 0x0) 769.908266ms ago: executing program 1 (id=544): ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x10000, 0x2}}, './file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x20000000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sched_cls=0x2f}, 0x94) r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'gretap0\x00', &(0x7f0000000040)={'syztnl1\x00', 0x0, 0x80, 0x40, 0x9, 0xb, {{0x20, 0x4, 0x0, 0xe, 0x80, 0x64, 0x0, 0x5, 0x4, 0x0, @multicast2, @multicast2, {[@lsrr={0x83, 0x7, 0x3d, [@multicast1]}, @timestamp={0x44, 0x14, 0xe5, 0x0, 0x5, [0x3, 0x9, 0x3aa, 0x81]}, @noop, @lsrr={0x83, 0x7, 0x68, [@multicast1]}, @cipso={0x86, 0x30, 0xffffffffffffffff, [{0x0, 0xf, "ff622d9a3960ce68e45e0b790d"}, {0x7, 0x4, "a18f"}, {0x1, 0x8, "86c2bf2a8dc3"}, {0x7, 0xb, "53a4bf8069523ef511"}, {0x6, 0x4, "0e70"}]}, @ra={0x94, 0x4}, @timestamp={0x44, 0x14, 0x98, 0x0, 0x4, [0x5, 0x8000, 0x401, 0x6]}]}}}}}) r2 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) fdatasync(r2) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xcb, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x7, r1, 0x2}, 0xc) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x10000, 0x2}}, './file0\x00'}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x20000000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sched_cls=0x2f}, 0x94) (async) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'gretap0\x00', &(0x7f0000000040)={'syztnl1\x00', 0x0, 0x80, 0x40, 0x9, 0xb, {{0x20, 0x4, 0x0, 0xe, 0x80, 0x64, 0x0, 0x5, 0x4, 0x0, @multicast2, @multicast2, {[@lsrr={0x83, 0x7, 0x3d, [@multicast1]}, @timestamp={0x44, 0x14, 0xe5, 0x0, 0x5, [0x3, 0x9, 0x3aa, 0x81]}, @noop, @lsrr={0x83, 0x7, 0x68, [@multicast1]}, @cipso={0x86, 0x30, 0xffffffffffffffff, [{0x0, 0xf, "ff622d9a3960ce68e45e0b790d"}, {0x7, 0x4, "a18f"}, {0x1, 0x8, "86c2bf2a8dc3"}, {0x7, 0xb, "53a4bf8069523ef511"}, {0x6, 0x4, "0e70"}]}, @ra={0x94, 0x4}, @timestamp={0x44, 0x14, 0x98, 0x0, 0x4, [0x5, 0x8000, 0x401, 0x6]}]}}}}}) (async) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) (async) fdatasync(r2) (async) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xcb, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x7, r1, 0x2}, 0xc) (async) 711.41313ms ago: executing program 6 (id=545): socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x4, 0x20710, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x1, @perf_bp={0x0, 0x5}, 0x0, 0x10003, 0x3, 0x1, 0x8, 0x20005, 0xb900, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) close(0x3) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000200)=@newtaction={0x48, 0x32, 0x12f, 0x70bd2b, 0x25dfdbfe, {}, [{0x34, 0x1, [@m_police={0xffe1, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0xb, {0x0, 0x1}}, {0xc, 0xa, {0x1}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4020804}, 0x10040000) r1 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000180)={{{@in=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e22, 0x0, 0x0, 0x48, 0x2, 0x0, 0x0, 0x1}, {0xfffffffffffffffd, 0x0, 0x6, 0x2, 0x5, 0x2, 0x5}, {0x0, 0x0, 0x0, 0x20000000000000}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x4d4, 0x6c}, 0xa, @in=@broadcast, 0x3502, 0x4, 0x1, 0x0, 0x0, 0x0, 0x200000}}, 0xe8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4800}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYRES8=0x0, @ANYRES8], 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x40) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007200000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r5}, 0xc) close(0x3) ptrace(0x10, r0) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x2000001) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) 707.88059ms ago: executing program 0 (id=546): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYRES8=r0, @ANYRES64=r0, @ANYRES64=r0, @ANYRESDEC=r0, @ANYRESHEX=r0, @ANYRES16=r0], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20004845) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000080)={0x0, 0x3, 0xd9}) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYRES8=r0, @ANYRES64=r0, @ANYRES64=r0, @ANYRESDEC=r0, @ANYRESHEX=r0, @ANYRES16=r0], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20004845) (async) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000080)={0x0, 0x3, 0xd9}) (async) 707.33861ms ago: executing program 6 (id=547): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x5, 0x20005, 0xb, 0x0, 0x0, 0x0, 0xcd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x81) close(r0) (async) close(r0) socket$caif_stream(0x25, 0x1, 0x1) (async) r1 = socket$caif_stream(0x25, 0x1, 0x1) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000340)=ANY=[@ANYRES8=r1, @ANYRESHEX=r0, @ANYRES16=r0, @ANYRESHEX=r1]) write$binfmt_script(r0, &(0x7f0000000340)={'#! ', './file0'}, 0xb) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r2, &(0x7f0000000700)=[{{&(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10, 0x0}}, {{&(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000940)=[@ip_retopts={{0x14, 0x0, 0x7, {[@ssrr={0x89, 0x3, 0xfb}]}}}], 0x18}}], 0x2, 0x240008c4) 697.57349ms ago: executing program 1 (id=548): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x3, &(0x7f0000000000)=""/124, &(0x7f00000000c0)=0x7c) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendmmsg$inet6(r2, &(0x7f0000004cc0)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x1ff, @private0, 0x401}, 0x1c, &(0x7f00000001c0)=[{&(0x7f00000003c0)="f5", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x4e24, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8e}, 0x1c, &(0x7f0000000d80)=[{&(0x7f0000000c40)="ea", 0x1}], 0x1}}], 0x2, 0x40) shutdown(r2, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f00000000c0)={0x0, 0x8, 0x30}, &(0x7f0000000100)=0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r3, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028006000f"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4c0000001000370c000000000000000000080000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128009000100697069700000000008000280040013001400030074756e6c3000"/52], 0x4c}}, 0x1020) r5 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_generic(r5, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x14, 0x33, 0x701, 0x70bd2c, 0x25dfdbfe, {0x7}}, 0x14}}, 0x24044094) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@ipv6_getaddrlabel={0x30, 0x4a, 0x1, 0x70bd2b, 0x25dfdbff, {0xa, 0x0, 0x80, 0x0, 0x0, 0x7}, [@IFAL_ADDRESS={0x14, 0x1, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0xc0}, 0x4000000) r7 = socket$inet6(0xa, 0x1, 0x8) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000740)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x230, 0x12, 0x60a, 0x0, 0x202, 0x230, 0x2e8, 0x2e8, 0x320, 0x2c0, 0x4, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @dev}, @mcast2, [], [], 'veth1_to_bond\x00', 'xfrm0\x00'}, 0x0, 0x108, 0x230, 0x0, {}, [@common=@unspec=@statistic={{0x38}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x57c, 'system_u:object_r:file_context_t:s0\x00'}}}, {{@ipv6={@private2, @loopback, [], [], 'vxcan1\x00', 'geneve0\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@empty, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39e}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) socket$kcm(0x29, 0x5, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@ifindex=r3, 0xd, 0x0, 0x2, &(0x7f0000000040)=[0x0], 0x1, 0x0, &(0x7f0000000080)=[0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0]}, 0x40) setxattr$trusted_overlay_opaque(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, 0x15, 0x1) 669.838802ms ago: executing program 0 (id=549): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x3}, 0x50) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000000c0)='./file2\x00', 0x20048a, &(0x7f0000000300), 0x12, 0x51a, &(0x7f0000001200)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0xa4c42, 0x108) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, 0x0) add_key(&(0x7f00000001c0)='ceph\x00', 0x0, &(0x7f0000000340)="0be7e7139e9bf2e612364ab4a70ccfe916a925c4f3e6", 0x16, 0xffffffffffffffff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r1}, &(0x7f00000001c0), &(0x7f0000000500)=r1}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r2, 0xffffffffffffffff}, 0x4) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000000), &(0x7f0000000040)=0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000643200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007041af64090aac40d6600000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) 614.617875ms ago: executing program 6 (id=550): getresuid(&(0x7f0000000100)=0x0, &(0x7f0000000180)=0x0, &(0x7f00000001c0)) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000001440)={'ip6_vti0\x00', &(0x7f00000006c0)=@ethtool_flash={0x33, 0xb, './bus/file0\x00'}}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f0000000240)={[], [{@dont_measure}, {@euid_gt={'euid>', r1}}, {@fsname={'fsname', 0x3d, '\x86c\xb6\xa4\x94U'}}, {@fowner_gt={'fowner>', r0}}, {@pcr={'pcr', 0x3d, 0x1a}}]}, 0x1, 0x571, &(0x7f0000000780)="$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") mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000200)='./file0\x00', 0x1a4a438, &(0x7f0000000340)=ANY=[@ANYRES64, @ANYRES32, @ANYRES32, @ANYRESHEX, @ANYRESHEX=0x0, @ANYRESOCT], 0xb, 0x0, &(0x7f0000000000)) chroot(&(0x7f00000002c0)='./file1/file0\x00') r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000040)=0x86) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) close(r3) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000480)={'syzkaller0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8914, &(0x7f0000000080)) write$cgroup_subtree(r4, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03000000000060007538e486dd630ace2200102f00fe80000000000000875a65059ff57bffffff"], 0xcfa4) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x7f) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x10008, 0x18, 0x1, 0x5, 0x20009, 0x1b, 0x0, 0x0, 0x0, 0xcd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) readv(r7, 0x0, 0x0) writev(r8, 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141242, 0x1) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) openat$incfs(r7, &(0x7f0000000440)='.log\x00', 0x80, 0x80) r10 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r10, &(0x7f0000000000)=[{&(0x7f0000000100)="58000000140019234083feff040d8c560a06580200ff0000000000000020ffff00000000000064009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100070c100000000200ffffffff", 0x58}], 0x1) ioctl$SIOCPNENABLEPIPE(r7, 0x89ed, 0x0) pwrite64(r9, &(0x7f0000000140)='2', 0xfdef, 0xfecc) 558.264768ms ago: executing program 1 (id=551): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000680)=ANY=[@ANYBLOB="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"/2663], &(0x7f0000000480)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffdb6}, 0x48) 457.422274ms ago: executing program 1 (id=552): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x3, 0x0, &(0x7f0000000100)="c918ff", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000a80)='./file0\x00', 0x200000, &(0x7f00000025c0)=ANY=[], 0x3, 0x15d, &(0x7f0000000f00)="$eJzs27+KE1EUB+AzJmrUJrVYDNhYBbWyVCSCOKAoKbRSiDaJBEwzWgWfxNaHEyRVCuGKzpLshoRl/8zO7ub7mhz4ccM9xZ3LGZj3dz6PhpPpp8mreXSyLNqPI49FFt24Eq2ozAIAuEwWKcXvlFK6PosbPyKl1PSOAIC6uf8BYPccev8/amhjAEBtzP8AsHvevH334klR9F/neSfi16wclIPqt8qfPS/69/P/uqtV87IctJb5gyrPD+ZX4+Ze/nBjfi3u3a3yf9nTl8VafiuG9bcPAAAAO6GXL22c73u9bXlV7Xs/sDa/t+N2+8zaAACOYPr12+jDePzxi0JxQYs/KaVjLP/+szoC56SL0y2yiDjZ/zT9ZALqtjr0Te8EAAAAAAAAAAAAAADYpt6vkVpNtwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAb/Q0AAP//LjxONw==") lgetxattr(0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r0) sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000580)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000740)=ANY=[@ANYBLOB="c101000040ed5b486eb5790c241888f9deaa4004df53fd552ab5ba48b74bd2c049e373be4bd4539628d0f169ceee3958aa1a29abb51e3d57ea2352dc2274fe0d1b4d7b32843364169725f9e1a225b99e28d3285596ad8e2ee298939196f37813134d76ceafde", @ANYRES16=r1, @ANYBLOB="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"], 0x1cc}, 0x1, 0x0, 0x0, 0x4000}, 0x20008000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x18050, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e0a, 0x1, @perf_bp={0x0, 0x3}, 0x1216, 0x10000, 0xa, 0x6, 0x2ed5, 0x7, 0x3, 0x0, 0x0, 0x0, 0x100000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r4, 0x1000) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040)}, 0x38) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c0000000206030000e000000000000000000000050001000700000033a4c92753689568312c9ba20d25982c1b09a3604b956d20751f9309b325141998caeec380b60e6cda167b0ab521433bcc08b287d0f281a741fbc099c592d84aba994b6ff2b95f5c8cf7ee1318afcc7157af0f89eb8d92cf819e0145ce33d0d19211ba47749da1839975a94465c8cd387ffc0e0b3608cea11c274e2be73465578a6932bc25b8af115858211fc74cf3be9a4b347d0e5e8e2b5cdfd24f3f59168edc31cc5b9cebdc37559393e7a9037609ce95c9f2b945acf428cfc56f7ad49ecde9a5da7f2ee6c34b9d47055a6b4b4b970c54580c75f7c13f0b0fce8f58178065a709eb5ff39cf200102a0dfbeec660ded503df776f09668bad92a91231e670d9228ad5a34e8f5876a1b44d74f5d140a79f1107767317d47813afbbd799e0fe6520c24b6bdf85d365899eb61cd39cb94a058988da90de04bdbfc7621c4a12a6b7e8"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1a, 0x0, 0x0, 0x0, 0x80000002, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @tracing=0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x4000004}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r5, 0x0) getsockopt$inet6_mptcp_buf(r5, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) socket$inet_udp(0x2, 0x2, 0x0) r6 = timerfd_create(0x7, 0x80000) r7 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000000)={0xc000001c}) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r6, &(0x7f0000000080)) creat(0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x4, &(0x7f00000002c0)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7f}}]}, 0x1, 0x4c0, &(0x7f0000000f00)="$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") r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r8, 0x107, 0xc, &(0x7f00000001c0)=0x7, 0x4) 410.774987ms ago: executing program 0 (id=553): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r1 = getpid() r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xd, 0x590, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x1}, 0x2000, 0x10000, 0x0, 0x6, 0x8, 0x80, 0x1, 0x0, 0x0, 0x0, 0x20000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r3, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0x3c}, 0x1, 0xfeff, 0x0, 0x4040010}, 0x30) 336.051481ms ago: executing program 6 (id=554): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x4, &(0x7f00000000c0)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0xb3}, [@call={0x85, 0x0, 0x0, 0x75}]}, &(0x7f0000000480)='GPL\x00'}, 0x94) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x2b, 0x0, &(0x7f0000000100)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00005fd000/0x4000)=nil, 0x4000, 0x0, 0x5, 0x20000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) socket$nl_generic(0x10, 0x3, 0x10) mlockall(0x1) 279.984464ms ago: executing program 1 (id=555): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x2, 0x0) fsetxattr(r1, &(0x7f0000000000)=@known='system.posix_acl_access\x00', &(0x7f0000000080)='}-\'+\x00', 0x5, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@nobarrier}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0x5}, {0xffff, 0xffff}, {0xe, 0xd}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x10, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x3b9aca00}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x41}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x200, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r7, &(0x7f00000001c0)="f1", 0x1) sendfile(r7, r5, 0x0, 0x40001) r8 = socket(0x10, 0x3, 0x0) fremovexattr(0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@mpls_getroute={0x1c, 0x1a, 0x9e8a232eead7ae69, 0x0, 0x0, {0x1c, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x4}}, 0x1c}}, 0x0) sendfile(r7, r6, 0x0, 0x7ffff000) r9 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x129ac0, 0x0) setsockopt$packet_int(r7, 0x107, 0x13, &(0x7f0000000140)=0x99, 0x4) fcntl$setsig(r9, 0xa, 0x11) 206.788768ms ago: executing program 2 (id=556): r0 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000140)=0x5) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0x49920d862a92153b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_OKEY={0x8}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IKEY={0x8}]}}}]}, 0x48}}, 0x0) 182.75022ms ago: executing program 5 (id=557): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$sock_buf(r0, 0x1, 0x1f, 0x0, &(0x7f0000000080)) 177.25825ms ago: executing program 2 (id=558): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe5, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xfffd}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x1a4, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {}, {0x0, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x16c, 0x2, [@TCA_FLOW_ACT={0x168, 0x9, 0x0, 0x1, [@m_ctinfo={0x164, 0xa, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x5, 0x2, 0x4, 0x6f, 0x8}}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x9}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x6}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x4}]}, {0xfe, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xff, 0x4}}]}, 0x1a4}}, 0x0) 42.161727ms ago: executing program 5 (id=559): mmap(&(0x7f00000e0000/0x2000)=nil, 0x2000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x1) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}]}]}, 0x58}}, 0x0) fcntl$notify(r1, 0x402, 0x0) (async) fcntl$notify(r1, 0x402, 0x0) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x2) fchdir(r3) (async) fchdir(r3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x11, r4, 0x2000) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x3f) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) write$P9_RREADLINK(r0, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) socket(0x40000000015, 0x805, 0x0) (async) r5 = socket(0x40000000015, 0x805, 0x0) getsockopt(r5, 0x114, 0x5, &(0x7f0000019100)=""/102399, &(0x7f00000000c0)=0x18fff) 0s ago: executing program 2 (id=560): r0 = socket(0x23, 0x3, 0x3a) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="500000001d0011042bbd7000fbdbdf251c00", @ANYBLOB], 0x50}}, 0x54) (async) close(r1) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket(0x10, 0x2, 0x4) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000001800010000000000000000000200000000000006000000000c00090008000000", @ANYRES32, @ANYBLOB="08000400", @ANYRES32, @ANYBLOB="080005"], 0x38}}, 0x40000) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="120000001d000000080000000b"], 0x48) (async) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x10001, '\x00', r2, r7, 0x4, 0x5, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r9, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000780)=r6}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r10, &(0x7f0000000000), 0x0}, 0x20) (async) sendmsg$SMC_PNETID_GET(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r5, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c0000001000370400000000ffdbdf2500000000", @ANYRES32=r11, @ANYBLOB="83450500000000002c0012800900010069706970000000001c00028006000f0001000000060010000900000008000100aa"], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmmsg$inet(r3, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r11, @empty, @dev={0xac, 0x14, 0x14, 0x27}}}}], 0x20}}, {{&(0x7f0000000ac0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10, 0x0, 0x0, &(0x7f0000000e40)=ANY=[@ANYBLOB="1400000000000000000000000200000002000000000000002c0000000000000000000000070000008203264404f5319404000083075b7f0000018608ffffffff06020000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aae02000010000000010000000000000000000000007000000"], 0x78}}], 0x2, 0x80) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb010018000002000000000c0000000c00000005000000040000000000009300004000005f5f5f00"], 0x0, 0x29, 0x0, 0x1}, 0x28) (async) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB], 0x48) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000080)={@private0, 0x4f, r2}) kernel console output (not intermixed with test programs): no=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.522698][ T3313] chnl_net:caif_netlink_parms(): no params data found [ 28.565676][ T3317] chnl_net:caif_netlink_parms(): no params data found [ 28.581330][ T3312] chnl_net:caif_netlink_parms(): no params data found [ 28.591995][ T3315] chnl_net:caif_netlink_parms(): no params data found [ 28.644460][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.651666][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.659201][ T3313] bridge_slave_0: entered allmulticast mode [ 28.665834][ T3313] bridge_slave_0: entered promiscuous mode [ 28.681574][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.688761][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.695868][ T3313] bridge_slave_1: entered allmulticast mode [ 28.702307][ T3313] bridge_slave_1: entered promiscuous mode [ 28.729298][ T3311] chnl_net:caif_netlink_parms(): no params data found [ 28.746318][ T3317] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.753414][ T3317] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.760560][ T3317] bridge_slave_0: entered allmulticast mode [ 28.766931][ T3317] bridge_slave_0: entered promiscuous mode [ 28.783750][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.793049][ T3317] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.800183][ T3317] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.807346][ T3317] bridge_slave_1: entered allmulticast mode [ 28.813854][ T3317] bridge_slave_1: entered promiscuous mode [ 28.841238][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.850356][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.857954][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.865127][ T3315] bridge_slave_0: entered allmulticast mode [ 28.871542][ T3315] bridge_slave_0: entered promiscuous mode [ 28.878336][ T3312] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.885422][ T3312] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.892675][ T3312] bridge_slave_0: entered allmulticast mode [ 28.898945][ T3312] bridge_slave_0: entered promiscuous mode [ 28.914752][ T3317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.927935][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.935003][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.942203][ T3315] bridge_slave_1: entered allmulticast mode [ 28.948453][ T3315] bridge_slave_1: entered promiscuous mode [ 28.959054][ T3312] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.966184][ T3312] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.973617][ T3312] bridge_slave_1: entered allmulticast mode [ 28.980025][ T3312] bridge_slave_1: entered promiscuous mode [ 28.989442][ T3317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.007233][ T3313] team0: Port device team_slave_0 added [ 29.013782][ T3313] team0: Port device team_slave_1 added [ 29.038587][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.052721][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.068164][ T3317] team0: Port device team_slave_0 added [ 29.074036][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.081135][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.107459][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.119694][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.133955][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.147691][ T3317] team0: Port device team_slave_1 added [ 29.157924][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.164871][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.190859][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.218758][ T3311] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.225823][ T3311] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.233065][ T3311] bridge_slave_0: entered allmulticast mode [ 29.239498][ T3311] bridge_slave_0: entered promiscuous mode [ 29.249590][ T3315] team0: Port device team_slave_0 added [ 29.260074][ T3312] team0: Port device team_slave_0 added [ 29.265811][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.272900][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.298819][ T3317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.309795][ T3311] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.316819][ T3311] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.324047][ T3311] bridge_slave_1: entered allmulticast mode [ 29.330376][ T3311] bridge_slave_1: entered promiscuous mode [ 29.338115][ T3315] team0: Port device team_slave_1 added [ 29.349335][ T3312] team0: Port device team_slave_1 added [ 29.355171][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.362182][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.388218][ T3317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.427775][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.434801][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.460781][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.475516][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.482534][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.508484][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.521024][ T3311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.530417][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.537405][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.563483][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.574392][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.581458][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.607899][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.620996][ T3313] hsr_slave_0: entered promiscuous mode [ 29.626848][ T3313] hsr_slave_1: entered promiscuous mode [ 29.633820][ T3311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.675036][ T3311] team0: Port device team_slave_0 added [ 29.688537][ T3317] hsr_slave_0: entered promiscuous mode [ 29.694636][ T3317] hsr_slave_1: entered promiscuous mode [ 29.700499][ T3317] debugfs: 'hsr0' already exists in 'hsr' [ 29.706220][ T3317] Cannot create hsr debugfs directory [ 29.713145][ T3311] team0: Port device team_slave_1 added [ 29.733472][ T3312] hsr_slave_0: entered promiscuous mode [ 29.739681][ T3312] hsr_slave_1: entered promiscuous mode [ 29.745480][ T3312] debugfs: 'hsr0' already exists in 'hsr' [ 29.751228][ T3312] Cannot create hsr debugfs directory [ 29.780485][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.787628][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.813756][ T3311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.826783][ T3315] hsr_slave_0: entered promiscuous mode [ 29.832792][ T3315] hsr_slave_1: entered promiscuous mode [ 29.838952][ T3315] debugfs: 'hsr0' already exists in 'hsr' [ 29.844667][ T3315] Cannot create hsr debugfs directory [ 29.853095][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.860091][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.886025][ T3311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.954336][ T3311] hsr_slave_0: entered promiscuous mode [ 29.960414][ T3311] hsr_slave_1: entered promiscuous mode [ 29.966492][ T3311] debugfs: 'hsr0' already exists in 'hsr' [ 29.972278][ T3311] Cannot create hsr debugfs directory [ 30.109959][ T3313] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 30.118681][ T3313] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 30.131563][ T3313] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 30.140068][ T3313] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 30.172491][ T3317] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 30.181348][ T3317] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 30.192532][ T3317] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 30.202083][ T3317] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 30.222704][ T3315] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 30.231562][ T3315] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 30.245573][ T3315] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 30.256541][ T3315] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 30.288387][ T3311] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 30.297594][ T3311] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 30.306682][ T3311] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 30.332779][ T3311] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 30.347170][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.379082][ T3312] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 30.402345][ T3312] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 30.411574][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.421518][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.428760][ T3312] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 30.437978][ T3312] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 30.455122][ T835] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.462183][ T835] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.477274][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.484366][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.500582][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.512399][ T3317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.523019][ T3311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.538834][ T835] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.545876][ T835] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.555987][ T835] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.563135][ T835] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.587092][ T3317] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.602462][ T835] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.609559][ T835] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.624201][ T3313] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.652252][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.659383][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.676444][ T3311] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.707475][ T3337] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.714552][ T3337] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.723881][ T3337] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.730961][ T3337] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.759468][ T3317] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.774497][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.792096][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.821090][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.851322][ T3312] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.865788][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.872953][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.884432][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.891589][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.906898][ T3317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.953511][ T3312] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.990127][ T3311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.017224][ T3313] veth0_vlan: entered promiscuous mode [ 31.050041][ T3313] veth1_vlan: entered promiscuous mode [ 31.092742][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.116590][ T3313] veth0_macvtap: entered promiscuous mode [ 31.147676][ T3315] veth0_vlan: entered promiscuous mode [ 31.153915][ T3317] veth0_vlan: entered promiscuous mode [ 31.163172][ T3313] veth1_macvtap: entered promiscuous mode [ 31.174180][ T3311] veth0_vlan: entered promiscuous mode [ 31.184372][ T3317] veth1_vlan: entered promiscuous mode [ 31.192178][ T3311] veth1_vlan: entered promiscuous mode [ 31.200186][ T3315] veth1_vlan: entered promiscuous mode [ 31.216923][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.231858][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.259300][ T37] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.275433][ T37] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.286144][ T37] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.295595][ T3312] veth0_vlan: entered promiscuous mode [ 31.303102][ T3311] veth0_macvtap: entered promiscuous mode [ 31.309698][ T37] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.323860][ T3317] veth0_macvtap: entered promiscuous mode [ 31.345228][ T3311] veth1_macvtap: entered promiscuous mode [ 31.352777][ T3313] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.355904][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.377778][ T3315] veth0_macvtap: entered promiscuous mode [ 31.384251][ T3312] veth1_vlan: entered promiscuous mode [ 31.394964][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.404260][ T3317] veth1_macvtap: entered promiscuous mode [ 31.413561][ T3315] veth1_macvtap: entered promiscuous mode [ 31.426824][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.437398][ T31] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.456860][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.464489][ C0] hrtimer: interrupt took 35795 ns [ 31.466593][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.488688][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.495949][ T31] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.514465][ T3312] veth0_macvtap: entered promiscuous mode [ 31.525872][ T31] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.546455][ T31] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.556485][ T3312] veth1_macvtap: entered promiscuous mode [ 31.575986][ T31] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.612040][ T31] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.623388][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.646120][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.655053][ T3485] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1'. [ 31.797878][ T31] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.838061][ T31] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.847059][ T31] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.893442][ T31] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.912400][ T31] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.931824][ T31] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.953375][ T31] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.967991][ T3485] syz.0.1 (3485) used greatest stack depth: 10248 bytes left [ 31.979641][ T31] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.994160][ T31] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.017110][ T29] kauditd_printk_skb: 31 callbacks suppressed [ 32.017129][ T29] audit: type=1400 audit(1770450796.149:111): avc: denied { allowed } for pid=3501 comm="syz.4.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 32.036148][ T3500] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3'. [ 32.042409][ T29] audit: type=1400 audit(1770450796.149:112): avc: denied { sqpoll } for pid=3501 comm="syz.4.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 32.070059][ T29] audit: type=1400 audit(1770450796.149:113): avc: denied { create } for pid=3501 comm="syz.4.6" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 32.093781][ T1006] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.109403][ T29] audit: type=1400 audit(1770450796.159:114): avc: denied { create } for pid=3499 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 32.129419][ T29] audit: type=1400 audit(1770450796.189:115): avc: denied { create } for pid=3501 comm="syz.4.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 32.133248][ T3500] vlan2: entered promiscuous mode [ 32.153585][ T3500] syz_tun: entered promiscuous mode [ 32.161574][ T3505] loop2: detected capacity change from 0 to 128 [ 32.178305][ T3505] loop2: detected capacity change from 0 to 256 [ 32.188488][ T29] audit: type=1400 audit(1770450796.309:116): avc: denied { create } for pid=3504 comm="syz.0.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 32.196738][ T3506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 32.207946][ T29] audit: type=1400 audit(1770450796.309:117): avc: denied { create } for pid=3504 comm="syz.0.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 32.235852][ T29] audit: type=1400 audit(1770450796.309:118): avc: denied { connect } for pid=3504 comm="syz.0.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 32.255366][ T29] audit: type=1400 audit(1770450796.309:119): avc: denied { bind } for pid=3504 comm="syz.0.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 32.255737][ T3506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 32.274686][ T29] audit: type=1400 audit(1770450796.309:120): avc: denied { remount } for pid=3499 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 32.323079][ T3482] loop1: detected capacity change from 0 to 4096 [ 32.349352][ T3516] loop3: detected capacity change from 0 to 512 [ 32.356377][ T3516] EXT4-fs: Ignoring removed nobh option [ 32.387400][ T3516] EXT4-fs: Ignoring removed oldalloc option [ 32.394627][ T3506] tipc: Started in network mode [ 32.399629][ T3506] tipc: Node identity aaaaaaaaaa2a, cluster identity 4711 [ 32.406802][ T3506] tipc: Enabled bearer , priority 10 [ 32.458798][ T3521] netlink: 104 bytes leftover after parsing attributes in process `syz.4.10'. [ 32.493482][ T3516] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: comm syz.3.8: Parent and EA inode have the same ino 15 [ 32.521387][ T3482] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.522996][ T3516] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 32.564739][ T3516] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: comm syz.3.8: Parent and EA inode have the same ino 15 [ 32.578165][ T3516] EXT4-fs (loop3): 1 orphan inode deleted [ 32.584534][ T3525] netlink: 'syz.4.11': attribute type 4 has an invalid length. [ 32.584595][ T3516] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.648676][ T3526] ALSA: seq fatal error: cannot create timer (-19) [ 32.661966][ T3482] netlink: 'syz.1.2': attribute type 14 has an invalid length. [ 32.670592][ T3525] syz.4.11 (3525) used greatest stack depth: 9992 bytes left [ 32.690739][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.700948][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.762389][ T3531] loop4: detected capacity change from 0 to 1024 [ 32.894914][ T3553] loop1: detected capacity change from 0 to 1024 [ 32.896013][ T3555] netlink: 16 bytes leftover after parsing attributes in process `syz.4.19'. [ 32.903832][ T3553] ======================================================= [ 32.903832][ T3553] WARNING: The mand mount option has been deprecated and [ 32.903832][ T3553] and is ignored by this kernel. Remove the mand [ 32.903832][ T3553] option from the mount to silence this warning. [ 32.903832][ T3553] ======================================================= [ 33.005229][ T3553] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.132451][ T3571] loop0: detected capacity change from 0 to 512 [ 33.149487][ T3571] EXT4-fs: Mount option(s) incompatible with ext2 [ 33.170467][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.184126][ T3577] loop2: detected capacity change from 0 to 512 [ 33.211639][ T3582] loop3: detected capacity change from 0 to 764 [ 33.244778][ T3582] rock: directory entry would overflow storage [ 33.251191][ T3582] rock: sig=0x4654, size=5, remaining=4 [ 33.260728][ T3577] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.273559][ T3577] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.288925][ T3577] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 33.302206][ T3584] loop1: detected capacity change from 0 to 512 [ 33.318353][ T3581] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2578 sclass=netlink_route_socket pid=3581 comm=syz.4.29 [ 33.332734][ T3581] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2565 sclass=netlink_route_socket pid=3581 comm=syz.4.29 [ 33.346794][ T3581] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2563 sclass=netlink_route_socket pid=3581 comm=syz.4.29 [ 33.368306][ T3593] Zero length message leads to an empty skb [ 33.374879][ T3577] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 33.397387][ T3407] tipc: Node number set to 8432298 [ 33.419049][ T3584] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.26: bad orphan inode 11862016 [ 33.463639][ T3584] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 33.471590][ T3599] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 33.488584][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.497189][ T3584] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.508138][ T3599] sock: sock_timestamping_bind_phc: sock not bind to device [ 33.551908][ T3584] netlink: 12 bytes leftover after parsing attributes in process `syz.1.26'. [ 33.584366][ T3602] ref_ctr increment failed for inode: 0x24 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff888103fd4380 [ 33.598068][ T3584] syz.1.26 uses obsolete (PF_INET,SOCK_PACKET) [ 33.745786][ T3608] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 95 vs 96 free clusters [ 33.785540][ T3608] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.26: Failed to acquire dquot type 0 [ 33.861555][ T3615] ext4: Unknown parameter 'smackfshat' [ 33.879348][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 34.076983][ T3629] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.103088][ T3629] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.131014][ T3629] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.42: corrupted xattr block 33: invalid checksum [ 34.155943][ T3629] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop4 ino=15 [ 34.165093][ T3629] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.42: corrupted xattr block 33: invalid checksum [ 34.179452][ T3629] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop4 ino=15 [ 34.188651][ T3629] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.42: corrupted xattr block 33: invalid checksum [ 34.203298][ T3629] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop4 ino=15 [ 34.223178][ T3642] syz.1.44 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 34.248362][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.534030][ T3655] xt_CT: You must specify a L4 protocol and not use inversions on it [ 34.558592][ T3660] netlink: 'syz.1.49': attribute type 4 has an invalid length. [ 34.601571][ T3664] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002] [ 34.610008][ T3664] System zones: 0-1, 3-8 [ 34.614975][ T3664] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 34.628084][ T3664] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.683233][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 34.701352][ T3672] bond1: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 34.714756][ T3672] bond1 (unregistering): Released all slaves [ 34.803940][ T3679] EXT4-fs: Ignoring removed oldalloc option [ 34.825817][ T3679] EXT4-fs error (device loop2): ext4_iget_extra_inode:5073: inode #15: comm syz.2.58: corrupted in-inode xattr: e_value size too large [ 34.854991][ T3679] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.58: couldn't read orphan inode 15 (err -117) [ 34.878088][ T3679] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.895657][ T3690] ref_ctr increment failed for inode: 0x43 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff888103fd6c00 [ 34.896913][ T3679] netlink: 8 bytes leftover after parsing attributes in process `syz.2.58'. [ 34.937908][ T3694] netlink: 8 bytes leftover after parsing attributes in process `syz.1.62'. [ 34.946673][ T3694] netlink: 40 bytes leftover after parsing attributes in process `syz.1.62'. [ 34.947602][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.955526][ T3694] netlink: 176 bytes leftover after parsing attributes in process `syz.1.62'. [ 34.973304][ T3694] netlink: 40 bytes leftover after parsing attributes in process `syz.1.62'. [ 35.095355][ T3703] bridge1: entered promiscuous mode [ 35.146940][ T3707] EXT4-fs: Ignoring removed i_version option [ 35.153155][ T3707] EXT4-fs: Ignoring removed nomblk_io_submit option [ 35.160004][ T31] Bluetooth: hci0: Frame reassembly failed (-84) [ 35.176425][ T3707] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 35.189820][ T3707] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 35.207657][ T3714] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.68: inode has both inline data and extents flags [ 35.225725][ T3707] EXT4-fs (loop2): mount failed [ 35.231002][ T3714] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.68: couldn't read orphan inode 15 (err -117) [ 35.248674][ T3714] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.286335][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.384436][ T3728] FAT-fs (loop4): bogus number of reserved sectors [ 35.391048][ T3728] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 35.398173][ T3726] tmpfs: Bad value for 'mpol' [ 35.400483][ T3728] FAT-fs (loop4): Can't find a valid FAT filesystem [ 35.707589][ T3781] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 35.867218][ T3791] netlink: 'syz.1.85': attribute type 4 has an invalid length. [ 36.079614][ T3797] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 36.097015][ T3797] EXT4-fs (loop0): can't mount with journal_async_commit, fs mounted w/o journal [ 36.171683][ T3804] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.184824][ T3804] ext4 filesystem being mounted at /21/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 36.244213][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.271253][ T3815] program syz.1.95 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 36.300947][ T3817] xfrm1: entered allmulticast mode [ 36.345208][ T3828] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c018, mo2=0002] [ 36.353599][ T3828] System zones: 0-2, 18-18, 34-34 [ 36.361376][ T3828] EXT4-fs (loop0): orphan cleanup on readonly fs [ 36.374105][ T3828] EXT4-fs warning (device loop0): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 36.390357][ T3828] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 36.397074][ T3828] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.98: bad orphan inode 4095 [ 36.408269][ T3828] EXT4-fs (loop0): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 36.428778][ T3828] EXT4-fs (loop0): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 36.451633][ T3832] SELinux: failed to load policy [ 36.492368][ T3835] netlink: 'syz.1.100': attribute type 1 has an invalid length. [ 36.500231][ T3835] netlink: 'syz.1.100': attribute type 2 has an invalid length. [ 36.548849][ T3842] hsr_slave_0: left promiscuous mode [ 36.562250][ T3842] hsr_slave_1: left promiscuous mode [ 36.630632][ T3849] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.643356][ T3849] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.770676][ T3854] veth0_to_team: entered promiscuous mode [ 36.830585][ T3856] syzkaller0: entered promiscuous mode [ 36.836102][ T3856] syzkaller0: entered allmulticast mode [ 36.847228][ T3859] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3859 comm=syz.1.107 [ 36.941616][ T3865] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.023341][ T3871] syzkaller0: entered promiscuous mode [ 37.028936][ T3871] syzkaller0: entered allmulticast mode [ 37.048443][ T29] kauditd_printk_skb: 172 callbacks suppressed [ 37.048461][ T29] audit: type=1400 audit(1770450802.189:290): avc: denied { mounton } for pid=3864 comm="syz.1.108" path="/31/file1/file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 37.082396][ T3872] 9p: Could not find request transport: xen [ 37.098873][ T3872] EXT4-fs error (device loop1): ext4_xattr_set_entry:1670: inode #15: comm syz.1.108: corrupted xattr entries [ 37.111889][ T3872] EXT4-fs error (device loop1): ext4_xattr_block_set:2220: inode #15: comm syz.1.108: bad block 113 [ 37.118025][ T29] audit: type=1400 audit(1770450802.259:291): avc: denied { create } for pid=3879 comm="syz.3.112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 37.142500][ T29] audit: type=1400 audit(1770450802.259:292): avc: denied { ioctl } for pid=3879 comm="syz.3.112" path="socket:[6068]" dev="sockfs" ino=6068 ioctlcmd=0x4943 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 37.167194][ T29] audit: type=1400 audit(1770450802.259:293): avc: denied { accept } for pid=3879 comm="syz.3.112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 37.195153][ T3699] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 37.202598][ T29] audit: type=1400 audit(1770450802.329:294): avc: denied { read } for pid=3881 comm="syz.4.113" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 37.225624][ T29] audit: type=1400 audit(1770450802.329:295): avc: denied { open } for pid=3881 comm="syz.4.113" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 37.249193][ T29] audit: type=1400 audit(1770450802.329:296): avc: denied { ioctl } for pid=3881 comm="syz.4.113" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x9371 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 37.296341][ T3887] set_capacity_and_notify: 13 callbacks suppressed [ 37.296360][ T3887] loop3: detected capacity change from 0 to 512 [ 37.314452][ T3887] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 37.324886][ T29] audit: type=1400 audit(1770450802.459:297): avc: denied { create } for pid=3885 comm="syz.3.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 37.356245][ T3892] loop2: detected capacity change from 0 to 164 [ 37.360064][ T29] audit: type=1400 audit(1770450802.489:298): avc: denied { bind } for pid=3885 comm="syz.3.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 37.363660][ T3892] isofs_fill_super: root inode is not a directory. Corrupted media? [ 37.381785][ T29] audit: type=1400 audit(1770450802.489:299): avc: denied { setopt } for pid=3885 comm="syz.3.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 37.470844][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.514124][ T3904] loop2: detected capacity change from 0 to 512 [ 37.529761][ T3904] EXT4-fs: Ignoring removed oldalloc option [ 37.556076][ T3904] EXT4-fs error (device loop2): ext4_xattr_inode_iget:437: comm syz.2.121: Parent and EA inode have the same ino 15 [ 37.574068][ T3916] loop3: detected capacity change from 0 to 512 [ 37.587014][ T3916] ext4: Unknown parameter 'fsmagic' [ 37.590807][ T3904] EXT4-fs error (device loop2): ext4_xattr_inode_iget:437: comm syz.2.121: Parent and EA inode have the same ino 15 [ 37.612273][ T3904] EXT4-fs (loop2): 1 orphan inode deleted [ 37.620298][ T3904] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.633801][ T3920] loop3: detected capacity change from 0 to 128 [ 37.641669][ T3904] __nla_validate_parse: 3 callbacks suppressed [ 37.641680][ T3904] netlink: 20 bytes leftover after parsing attributes in process `syz.2.121'. [ 37.685603][ T3925] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 37.706439][ T3925] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 37.747455][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.769334][ T3931] netlink: 8 bytes leftover after parsing attributes in process `syz.1.130'. [ 37.828803][ T3935] process 'syz.3.132' launched '/dev/fd/4' with NULL argv: empty string added [ 37.839227][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.905258][ T3945] netlink: 48 bytes leftover after parsing attributes in process `syz.1.136'. [ 37.933841][ T3947] netlink: 8 bytes leftover after parsing attributes in process `syz.3.137'. [ 37.946492][ T3947] lo speed is unknown, defaulting to 1000 [ 37.952456][ T3947] lo speed is unknown, defaulting to 1000 [ 37.958519][ T3947] lo speed is unknown, defaulting to 1000 [ 37.965721][ T3947] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 37.974124][ T3947] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 37.995658][ T3947] lo speed is unknown, defaulting to 1000 [ 38.022869][ T3947] lo speed is unknown, defaulting to 1000 [ 38.036437][ T3952] loop0: detected capacity change from 0 to 1024 [ 38.046906][ T3947] lo speed is unknown, defaulting to 1000 [ 38.064334][ T3947] lo speed is unknown, defaulting to 1000 [ 38.071553][ T3952] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 38.082468][ T3952] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (27642!=20869) [ 38.092392][ T3947] lo speed is unknown, defaulting to 1000 [ 38.110145][ T3947] lo speed is unknown, defaulting to 1000 [ 38.117902][ T3947] lo speed is unknown, defaulting to 1000 [ 38.130634][ T3952] JBD2: no valid journal superblock found [ 38.136521][ T3952] EXT4-fs (loop0): Could not load journal inode [ 38.143827][ T3966] lo speed is unknown, defaulting to 1000 [ 38.232058][ T3981] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 38.257061][ T3981] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 38.270639][ T3987] loop2: detected capacity change from 0 to 128 [ 38.281072][ T3987] netlink: 1 bytes leftover after parsing attributes in process `syz.2.148'. [ 38.486652][ T4016] loop4: detected capacity change from 0 to 512 [ 38.514989][ T4016] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 38.529533][ T4016] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #13: comm syz.4.160: iget: bad i_size value: 12154757448730 [ 38.542863][ T4016] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.160: couldn't read orphan inode 13 (err -117) [ 38.556125][ T4016] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.573413][ T4016] EXT4-fs error (device loop4): ext4_iget_extra_inode:5073: inode #15: comm syz.4.160: corrupted in-inode xattr: overlapping e_value [ 38.595871][ T4016] EXT4-fs error (device loop4): ext4_iget_extra_inode:5073: inode #15: comm syz.4.160: corrupted in-inode xattr: overlapping e_value [ 38.610363][ T4016] EXT4-fs warning (device loop4): ext4_lookup:1797: Inconsistent encryption contexts: 2/12 [ 38.637778][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.773466][ T4046] netlink: 8 bytes leftover after parsing attributes in process `syz.1.171'. [ 38.784795][ T4046] netlink: 8 bytes leftover after parsing attributes in process `syz.1.171'. [ 38.796911][ T4051] netlink: 12 bytes leftover after parsing attributes in process `syz.2.173'. [ 38.813363][ T4051] netlink: 24 bytes leftover after parsing attributes in process `syz.2.173'. [ 38.933435][ T4055] can0: slcan on ttyS3. [ 38.933633][ T4046] lo speed is unknown, defaulting to 1000 [ 39.017410][ T4055] can0 (unregistered): slcan off ttyS3. [ 39.029643][ T4057] can0: slcan on ttyS3. [ 39.105425][ T4057] lo speed is unknown, defaulting to 1000 [ 39.147708][ T37] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.201861][ T37] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.255481][ T4085] netlink: 12 bytes leftover after parsing attributes in process `syz.2.180'. [ 39.281588][ T37] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.307719][ T4067] lo speed is unknown, defaulting to 1000 [ 39.344401][ T37] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.437597][ T4080] can0 (unregistered): slcan off ttyS3. [ 39.467906][ T4089] loop2: detected capacity change from 0 to 8192 [ 39.566617][ T37] bridge_slave_1: left allmulticast mode [ 39.572355][ T37] bridge_slave_1: left promiscuous mode [ 39.578212][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.639195][ T4089] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.682964][ T4089] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.715631][ T37] bridge_slave_0: left allmulticast mode [ 39.721524][ T37] bridge_slave_0: left promiscuous mode [ 39.727346][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.959710][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 39.975826][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 39.987880][ T37] bond0 (unregistering): Released all slaves [ 40.007041][ T4067] chnl_net:caif_netlink_parms(): no params data found [ 40.041072][ T4157] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 40.049837][ T52] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 40.060727][ T4164] bond1 (unregistering): (slave geneve2): Releasing backup interface [ 40.071216][ T4147] 9p: Bad value for 'wfdno' [ 40.072276][ T4164] bond1 (unregistering): Released all slaves [ 40.089085][ T52] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 40.118898][ T37] hsr_slave_0: left promiscuous mode [ 40.124704][ T37] hsr_slave_1: left promiscuous mode [ 40.130769][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 40.138230][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 40.145776][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 40.153391][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 40.163523][ T37] veth1_macvtap: left promiscuous mode [ 40.169098][ T37] veth0_macvtap: left promiscuous mode [ 40.174647][ T37] veth1_vlan: left promiscuous mode [ 40.180255][ T37] veth0_vlan: left promiscuous mode [ 40.246132][ T37] team0 (unregistering): Port device team_slave_1 removed [ 40.256497][ T37] team0 (unregistering): Port device team_slave_0 removed [ 40.300959][ T23] lo speed is unknown, defaulting to 1000 [ 40.306880][ T23] infiniband syz2: ib_query_port failed (-19) [ 40.322545][ T4195] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4195 comm=syz.2.192 [ 40.325276][ T4067] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.339140][ T4196] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4196 comm=syz.2.192 [ 40.342053][ T4067] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.363005][ T4067] bridge_slave_0: entered allmulticast mode [ 40.369872][ T4067] bridge_slave_0: entered promiscuous mode [ 40.376681][ T4067] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.383840][ T4067] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.391014][ T4067] bridge_slave_1: entered allmulticast mode [ 40.397470][ T4067] bridge_slave_1: entered promiscuous mode [ 40.413902][ T4067] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 40.424503][ T4067] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 40.465740][ T4067] team0: Port device team_slave_0 added [ 40.472338][ T4067] team0: Port device team_slave_1 added [ 40.495108][ T4067] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 40.502114][ T4067] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 40.509899][ T4212] capability: warning: `syz.2.196' uses deprecated v2 capabilities in a way that may be insecure [ 40.528056][ T4067] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 40.537975][ T4067] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 40.556328][ T4067] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 40.582323][ T4067] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 40.684196][ T4067] hsr_slave_0: entered promiscuous mode [ 40.709656][ T4067] hsr_slave_1: entered promiscuous mode [ 40.723904][ T4232] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.731173][ T4232] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.744209][ T4232] bridge0: entered allmulticast mode [ 40.791883][ T4238] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.814904][ T4220] bridge_slave_1: left allmulticast mode [ 40.820647][ T4220] bridge_slave_1: left promiscuous mode [ 40.826388][ T4220] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.844350][ T4220] bridge_slave_0: left allmulticast mode [ 40.850137][ T4220] bridge_slave_0: left promiscuous mode [ 40.855830][ T4220] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.909797][ T4242] loop2: detected capacity change from 0 to 512 [ 40.917622][ T4242] ext4: Unknown parameter '"' [ 40.923237][ T4242] usb usb9: usbfs: process 4242 (syz.2.202) did not claim interface 0 before use [ 40.949406][ T4238] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.993038][ T4247] netlink: 'syz.2.203': attribute type 21 has an invalid length. [ 41.043296][ T4238] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.118736][ T4238] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.132130][ T4067] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 41.141349][ T4067] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 41.179058][ T4067] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 41.192757][ T4067] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 41.235992][ T835] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.255397][ T835] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.271777][ T835] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.289911][ T835] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.335867][ T4300] SELinux: failed to load policy [ 41.348508][ T4067] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.388094][ T4067] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.404074][ T1006] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.411191][ T1006] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.443062][ T1006] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.450231][ T1006] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.481041][ T4067] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 41.491451][ T4067] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 41.552424][ T4324] 9pnet_fd: Insufficient options for proto=fd [ 41.597658][ T4067] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.788046][ T4067] veth0_vlan: entered promiscuous mode [ 41.797489][ T4067] veth1_vlan: entered promiscuous mode [ 41.814241][ T4067] veth0_macvtap: entered promiscuous mode [ 41.822587][ T4067] veth1_macvtap: entered promiscuous mode [ 41.834538][ T4067] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.846759][ T4067] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.866696][ T835] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.879633][ T835] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.889806][ T835] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.898941][ T835] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.948275][ T4365] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 41.975809][ T4365] EXT4-fs (loop2): Remounting filesystem read-only [ 41.995446][ T4365] EXT4-fs (loop2): 1 truncate cleaned up [ 42.012606][ T4365] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.104504][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.168882][ T4383] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.183034][ T4383] ext4 filesystem being mounted at /42/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.206926][ T29] kauditd_printk_skb: 99 callbacks suppressed [ 42.206941][ T29] audit: type=1400 audit(1770450807.275:399): avc: denied { bind } for pid=4386 comm="syz.0.225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 42.241179][ T4390] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.270556][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.290212][ T4397] SELinux: ebitmap: start bit 0 comes after start bit 384 [ 42.299581][ T4397] SELinux: failed to load policy [ 42.305843][ T29] audit: type=1400 audit(1770450807.368:400): avc: denied { mounton } for pid=4396 comm="syz.1.227" path="/bus" dev="proc" ino=4026531853 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 42.342492][ T4390] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.355379][ T29] audit: type=1400 audit(1770450807.415:401): avc: denied { read write } for pid=4398 comm="syz.2.228" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 42.378706][ T29] audit: type=1400 audit(1770450807.415:402): avc: denied { open } for pid=4398 comm="syz.2.228" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 42.401732][ T29] audit: type=1400 audit(1770450807.415:403): avc: denied { ioctl } for pid=4398 comm="syz.2.228" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 42.446403][ T4399] set_capacity_and_notify: 2 callbacks suppressed [ 42.446421][ T4399] loop2: detected capacity change from 0 to 1024 [ 42.472560][ T29] audit: type=1400 audit(1770450807.499:404): avc: denied { allowed } for pid=4404 comm="syz.1.230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 42.492631][ T4390] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.519186][ T4409] 9pnet_fd: Insufficient options for proto=fd [ 42.570311][ T4399] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 42.590843][ T4399] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.594309][ T4390] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.651362][ T4416] loop4: detected capacity change from 0 to 512 [ 42.656254][ T29] audit: type=1400 audit(1770450807.696:405): avc: denied { block_suspend } for pid=4404 comm="syz.1.230" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 42.672800][ T4416] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 42.785402][ T29] audit: type=1400 audit(1770450807.818:406): avc: denied { setopt } for pid=4429 comm="syz.4.240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 42.820481][ T4432] tmpfs: Bad value for 'mpol' [ 42.832477][ T4424] netlink: 'syz.0.237': attribute type 13 has an invalid length. [ 42.916935][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 42.958729][ T4443] tmpfs: Bad value for 'mpol' [ 43.091659][ T4458] loop0: detected capacity change from 0 to 1024 [ 43.103159][ T4460] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 43.109767][ T4460] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 43.117225][ T4460] vhci_hcd vhci_hcd.0: Device attached [ 43.124955][ T4458] EXT4-fs: Ignoring removed bh option [ 43.131795][ T4458] EXT4-fs (loop0): stripe (9) is not aligned with cluster size (16), stripe is disabled [ 43.169302][ T4458] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.186600][ T29] audit: type=1400 audit(1770450808.192:407): avc: denied { add_name } for pid=4457 comm="syz.0.249" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 43.242999][ T4447] loop4: detected capacity change from 0 to 512 [ 43.255643][ T4469] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4215: comm syz.0.249: Allocating blocks 497-513 which overlap fs metadata [ 43.267565][ T4447] ext4: Bad value for 'resuid' [ 43.270331][ T29] audit: type=1400 audit(1770450808.267:408): avc: denied { ioctl } for pid=4457 comm="syz.0.249" path="/57/file1/file1" dev="loop0" ino=15 ioctlcmd=0x662a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 43.274813][ T4447] ext4: Bad value for 'resuid' [ 43.301734][ T4467] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4215: comm syz.0.249: Allocating blocks 497-513 which overlap fs metadata [ 43.318696][ T3400] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 43.328663][ T4469] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4215: comm syz.0.249: Allocating blocks 497-513 which overlap fs metadata [ 43.343790][ T4467] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4215: comm syz.0.249: Allocating blocks 497-513 which overlap fs metadata [ 43.388521][ T3400] usb 5-1: new full-speed USB device number 2 using vhci_hcd [ 43.403154][ T4468] EXT4-fs (loop0): pa ffff8881004a20e0: logic 48, phys. 177, len 21 [ 43.411399][ T4468] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 1 [ 43.440417][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.603875][ T37] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.623546][ T37] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.653463][ T37] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.677890][ T4506] __nla_validate_parse: 6 callbacks suppressed [ 43.677938][ T4506] netlink: 8 bytes leftover after parsing attributes in process `syz.5.263'. [ 43.687372][ T37] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.692993][ T4506] netlink: 4 bytes leftover after parsing attributes in process `syz.5.263'. [ 43.757642][ T4515] netlink: 4768 bytes leftover after parsing attributes in process `syz.5.267'. [ 43.768613][ T4515] netlink: 'syz.5.267': attribute type 16 has an invalid length. [ 43.776464][ T4515] netlink: 'syz.5.267': attribute type 3 has an invalid length. [ 43.784345][ T4515] netlink: 64066 bytes leftover after parsing attributes in process `syz.5.267'. [ 43.795650][ T4516] netlink: 16 bytes leftover after parsing attributes in process `syz.1.264'. [ 43.818746][ T4516] netlink: 20 bytes leftover after parsing attributes in process `syz.1.264'. [ 43.830707][ T4518] loop4: detected capacity change from 0 to 128 [ 43.898169][ T4524] loop5: detected capacity change from 0 to 512 [ 43.915719][ T4524] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 43.932706][ T4524] EXT4-fs (loop5): 1 truncate cleaned up [ 43.939425][ T4524] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.991249][ T4461] vhci_hcd: connection reset by peer [ 43.996899][ T1006] vhci_hcd vhci_hcd.2: stop threads [ 44.002300][ T1006] vhci_hcd vhci_hcd.2: release socket [ 44.007725][ T1006] vhci_hcd vhci_hcd.2: disconnect device [ 44.045468][ T4067] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.073720][ T4538] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.161964][ T4538] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.241880][ T4538] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.266162][ T4551] loop5: detected capacity change from 0 to 512 [ 44.296471][ T4557] bridge0: port 3(vlan2) entered blocking state [ 44.302924][ T4557] bridge0: port 3(vlan2) entered disabled state [ 44.309606][ T4557] vlan2: entered allmulticast mode [ 44.314775][ T4557] bridge0: entered allmulticast mode [ 44.320836][ T4557] vlan2: left allmulticast mode [ 44.325718][ T4557] bridge0: left allmulticast mode [ 44.356417][ T4538] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.409739][ T4561] netlink: 12 bytes leftover after parsing attributes in process `syz.5.282'. [ 44.422839][ T4563] loop4: detected capacity change from 0 to 128 [ 44.438193][ T37] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.446585][ T835] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.457447][ T835] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.465730][ T835] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.548608][ T4568] netlink: 12 bytes leftover after parsing attributes in process `syz.0.283'. [ 44.668878][ T4582] loop5: detected capacity change from 0 to 8192 [ 44.681161][ T4582] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 44.713724][ T4582] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000001) [ 44.721709][ T4582] FAT-fs (loop5): Filesystem has been set read-only [ 44.739995][ T4582] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000001) [ 44.769939][ T4590] FAULT_INJECTION: forcing a failure. [ 44.769939][ T4590] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 44.783119][ T4590] CPU: 1 UID: 0 PID: 4590 Comm: syz.0.288 Not tainted syzkaller #0 PREEMPT(voluntary) [ 44.783150][ T4590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 44.783161][ T4590] Call Trace: [ 44.783166][ T4590] [ 44.783173][ T4590] __dump_stack+0x1d/0x30 [ 44.783199][ T4590] dump_stack_lvl+0x95/0xd0 [ 44.783219][ T4590] dump_stack+0x15/0x1b [ 44.783240][ T4590] should_fail_ex+0x263/0x280 [ 44.783318][ T4590] should_fail+0xb/0x20 [ 44.783344][ T4590] should_fail_usercopy+0x1a/0x20 [ 44.783431][ T4590] _copy_from_user+0x1c/0xb0 [ 44.783524][ T4590] sctp_getsockopt_local_auth_chunks+0x89/0x470 [ 44.783552][ T4590] ? selinux_socket_getsockopt+0x192/0x1c0 [ 44.783572][ T4590] sctp_getsockopt+0x38d/0xaa0 [ 44.783603][ T4590] sock_common_getsockopt+0x60/0x70 [ 44.783631][ T4590] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 44.783657][ T4590] do_sock_getsockopt+0x1c4/0x210 [ 44.783685][ T4590] __x64_sys_getsockopt+0x11d/0x1a0 [ 44.783791][ T4590] x64_sys_call+0x2dc7/0x3000 [ 44.783815][ T4590] do_syscall_64+0xc0/0x2a0 [ 44.783892][ T4590] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.783914][ T4590] RIP: 0033:0x7f9a274aaeb9 [ 44.783932][ T4590] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 44.783951][ T4590] RSP: 002b:00007f9a25ee6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 44.783974][ T4590] RAX: ffffffffffffffda RBX: 00007f9a27726090 RCX: 00007f9a274aaeb9 [ 44.783990][ T4590] RDX: 000000000000001b RSI: 0000000000000084 RDI: 0000000000000003 [ 44.784001][ T4590] RBP: 00007f9a25ee6090 R08: 00002000000000c0 R09: 0000000000000000 [ 44.784021][ T4590] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 44.784034][ T4590] R13: 00007f9a27726128 R14: 00007f9a27726090 R15: 00007ffddf645188 [ 44.784093][ T4590] [ 44.785279][ T4588] loop4: detected capacity change from 0 to 1024 [ 44.877084][ T4594] netlink: 4 bytes leftover after parsing attributes in process `syz.1.289'. [ 44.898185][ T4588] EXT4-fs: Ignoring removed mblk_io_submit option [ 44.994802][ T4588] EXT4-fs: Ignoring removed nobh option [ 45.001206][ T4588] EXT4-fs: Mount option(s) incompatible with ext3 [ 45.001871][ T4596] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.069179][ T4599] gretap0: entered promiscuous mode [ 45.093006][ T4599] gretap0: left promiscuous mode [ 45.105365][ T4604] Illegal XDP return value 4291452928 on prog (id 63) dev syz_tun, expect packet loss! [ 45.116388][ T4596] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.215861][ T4596] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.326762][ T4596] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.357165][ T4616] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4616 comm=syz.2.296 [ 45.411758][ T4634] EXT4-fs: Ignoring removed bh option [ 45.417241][ T4634] EXT4-fs: inline encryption not supported [ 45.423142][ T4634] ext4: Unknown parameter 'uid>00000000000000000000' [ 45.602970][ T4645] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 45.622966][ T4647] pim6reg: entered allmulticast mode [ 45.628816][ T4645] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.819615][ T4660] EXT4-fs error (device loop1): ext4_map_blocks:825: inode #15: comm syz.1.307: lblock 0 mapped to illegal pblock 0 (length 1) [ 45.864407][ T4660] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 45.876820][ T4660] EXT4-fs (loop1): This should not happen!! Data will be lost [ 45.876820][ T4660] [ 45.912508][ T4666] set match dimension is over the limit! [ 45.958362][ T4665] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #15: comm syz.1.307: lblock 0 mapped to illegal pblock 0 (length 1) [ 45.994204][ T4669] EXT4-fs: Ignoring removed oldalloc option [ 46.000311][ T4669] EXT4-fs: Ignoring removed bh option [ 46.033761][ T4669] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.074168][ T4669] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4669 comm=syz.4.313 [ 46.100477][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.116933][ T4664] netlink: 4 bytes leftover after parsing attributes in process `syz.5.312'. [ 46.130686][ T4664] EXT4-fs: Ignoring removed mblk_io_submit option [ 46.170367][ T4664] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 46.182992][ T4664] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.196505][ T4664] EXT4-fs error (device loop5): ext4_map_blocks:825: inode #15: block 3: comm syz.5.312: lblock 3 mapped to illegal pblock 3 (length 3) [ 46.230281][ T4664] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 46.242759][ T4664] EXT4-fs (loop5): This should not happen!! Data will be lost [ 46.242759][ T4664] [ 46.275681][ T4679] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.317727][ T3438] EXT4-fs error (device loop5): ext4_map_blocks:825: inode #15: block 8: comm kworker/u8:7: lblock 8 mapped to illegal pblock 8 (length 8) [ 46.333280][ T3438] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 46.345668][ T3438] EXT4-fs (loop5): This should not happen!! Data will be lost [ 46.345668][ T3438] [ 46.516618][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.521182][ T4067] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 46.535651][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 46.587217][ T4673] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 46.611020][ T4692] x_tables: duplicate entry at hook 2 [ 46.654729][ T4696] EXT4-fs: inline encryption not supported [ 46.681712][ T4696] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 46.709929][ T4696] EXT4-fs (loop1): 1 truncate cleaned up [ 46.728661][ T4696] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.764830][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.806259][ T4673] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 46.974057][ T4673] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.314: bg 0: block 248: padding at end of block bitmap is not set [ 47.145848][ T4673] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.314: Failed to acquire dquot type 1 [ 47.193923][ T4673] EXT4-fs (loop2): 1 truncate cleaned up [ 47.281193][ T4673] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 47.387374][ T4673] syz.2.314 (4673) used greatest stack depth: 8776 bytes left [ 47.408268][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 47.576124][ T4697] syz.5.321 (4697) used greatest stack depth: 7464 bytes left [ 47.737335][ T4735] netlink: 'syz.5.332': attribute type 1 has an invalid length. [ 47.771176][ T4735] bond1: entered promiscuous mode [ 47.776317][ T4735] bond1: entered allmulticast mode [ 47.781905][ T4735] 8021q: adding VLAN 0 to HW filter on device bond1 [ 47.800425][ T4735] bond1 (unregistering): Released all slaves [ 47.947781][ T4757] set_capacity_and_notify: 9 callbacks suppressed [ 47.947798][ T4757] loop4: detected capacity change from 0 to 512 [ 47.960616][ T29] kauditd_printk_skb: 87 callbacks suppressed [ 47.960627][ T29] audit: type=1400 audit(1770450812.654:494): avc: denied { read } for pid=4758 comm="syz.2.340" path="socket:[9048]" dev="sockfs" ino=9048 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 47.965192][ T4757] EXT4-fs: inline encryption not supported [ 48.003086][ T29] audit: type=1400 audit(1770450812.691:495): avc: denied { read } for pid=4758 comm="syz.2.340" lport=43396 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 48.035078][ T4757] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.050007][ T4757] ext4 filesystem being mounted at /75/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.063575][ T29] audit: type=1400 audit(1770450812.757:496): avc: denied { read append open } for pid=4756 comm="syz.4.341" path="/75/file1/memory.current" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 48.088411][ T29] audit: type=1400 audit(1770450812.775:497): avc: denied { mounton } for pid=4756 comm="syz.4.341" path="/proc/203/task" dev="proc" ino=9064 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 48.118014][ T29] audit: type=1400 audit(1770450812.803:498): avc: denied { associate } for pid=4756 comm="syz.4.341" name=06 scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 48.166892][ T3315] EXT4-fs error (device loop4): ext4_empty_dir:3075: inode #12: comm syz-executor: invalid size [ 48.180054][ T3315] EXT4-fs (loop4): Remounting filesystem read-only [ 48.188202][ T29] audit: type=1400 audit(1770450812.822:499): avc: denied { map } for pid=4773 comm="syz.5.344" path="socket:[9960]" dev="sockfs" ino=9960 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 48.211074][ T29] audit: type=1400 audit(1770450812.822:500): avc: denied { read } for pid=4773 comm="syz.5.344" path="socket:[9960]" dev="sockfs" ino=9960 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 48.234065][ T29] audit: type=1400 audit(1770450812.831:501): avc: denied { write } for pid=4756 comm="syz.4.341" name="memory.current" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 48.256636][ T29] audit: type=1400 audit(1770450812.841:502): avc: denied { rmdir } for pid=3315 comm="syz-executor" name=6C6F73742B0F6F756E64 dev="loop4" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 48.280068][ T29] audit: type=1400 audit(1770450812.869:503): avc: denied { unlink } for pid=3315 comm="syz-executor" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 48.332949][ T4778] loop5: detected capacity change from 0 to 1024 [ 48.340720][ T4778] EXT4-fs: Ignoring removed orlov option [ 48.362299][ T4778] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.375108][ T4778] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.461317][ T37] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.472460][ T37] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.481345][ T4772] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.491059][ T37] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 48.502581][ T835] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.520013][ T37] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 48.532429][ T1006] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.546697][ T1006] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.576036][ T835] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.639227][ T835] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.678453][ T4797] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 48.691606][ T4799] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=4799 comm=syz.5.354 [ 48.706529][ T4799] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4799 comm=syz.5.354 [ 48.724471][ T835] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.787719][ T3400] usb 5-1: enqueue for inactive port 0 [ 48.810138][ T3400] usb 5-1: enqueue for inactive port 0 [ 48.843655][ T835] bridge_slave_1: left allmulticast mode [ 48.849486][ T835] bridge_slave_1: left promiscuous mode [ 48.855376][ T835] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.894338][ T835] bridge_slave_0: left allmulticast mode [ 48.900083][ T835] bridge_slave_0: left promiscuous mode [ 48.906159][ T835] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.947709][ T3400] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 48.969388][ T37] Bluetooth: hci0: Frame reassembly failed (-84) [ 49.083483][ T835] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 49.099230][ T835] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 49.115475][ T4843] loop1: detected capacity change from 0 to 512 [ 49.117475][ T835] bond0 (unregistering): Released all slaves [ 49.122808][ T4845] __nla_validate_parse: 9 callbacks suppressed [ 49.122820][ T4845] netlink: 8 bytes leftover after parsing attributes in process `syz.0.364'. [ 49.143625][ T4845] netlink: 4 bytes leftover after parsing attributes in process `syz.0.364'. [ 49.153227][ T4843] EXT4-fs: Ignoring removed oldalloc option [ 49.167374][ T4843] EXT4-fs error (device loop1): ext4_xattr_inode_iget:437: comm syz.1.365: Parent and EA inode have the same ino 15 [ 49.184147][ T4846] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2567 sclass=netlink_route_socket pid=4846 comm=syz.0.364 [ 49.195850][ T4843] EXT4-fs error (device loop1): ext4_xattr_inode_iget:437: comm syz.1.365: Parent and EA inode have the same ino 15 [ 49.215735][ T52] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 49.232372][ T4845] netlink: 8 bytes leftover after parsing attributes in process `syz.0.364'. [ 49.241224][ T4845] netlink: 4 bytes leftover after parsing attributes in process `syz.0.364'. [ 49.250808][ T4843] EXT4-fs (loop1): 1 orphan inode deleted [ 49.256671][ T3420] IPVS: starting estimator thread 0... [ 49.256729][ T835] hsr_slave_0: left promiscuous mode [ 49.267806][ T835] hsr_slave_1: left promiscuous mode [ 49.268419][ T4843] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.274022][ T835] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 49.293260][ T835] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 49.303362][ T4856] loop2: detected capacity change from 0 to 512 [ 49.314175][ T4856] EXT4-fs: Ignoring removed bh option [ 49.330942][ T4856] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 49.339481][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.343822][ T4856] EXT4-fs (loop2): external journal device major/minor numbers have changed [ 49.357837][ T835] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 49.365283][ T835] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 49.372686][ T4853] IPVS: using max 2976 ests per chain, 148800 per kthread [ 49.375679][ T4856] EXT4-fs (loop2): failed to open journal device unknown-block(8,224) -6 [ 49.393970][ T835] veth1_macvtap: left promiscuous mode [ 49.399944][ T835] veth0_macvtap: left promiscuous mode [ 49.405462][ T835] veth1_vlan: left promiscuous mode [ 49.411336][ T835] veth0_vlan: left promiscuous mode [ 49.487194][ T835] team0 (unregistering): Port device team_slave_1 removed [ 49.497107][ T835] team0 (unregistering): Port device team_slave_0 removed [ 49.528416][ T52] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 49.537448][ T52] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 49.545869][ T52] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 49.629222][ T4878] netlink: 12 bytes leftover after parsing attributes in process `syz.0.370'. [ 49.638166][ T4878] netlink: 16 bytes leftover after parsing attributes in process `syz.0.370'. [ 49.653165][ T4876] bond1 (unregistering): Released all slaves [ 49.703225][ T4881] loop2: detected capacity change from 0 to 2048 [ 49.706395][ T4884] loop1: detected capacity change from 0 to 2048 [ 49.737215][ T4794] chnl_net:caif_netlink_parms(): no params data found [ 49.751404][ T3305] Alternate GPT is invalid, using primary GPT. [ 49.757835][ T3305] loop2: p1 p2 p3 [ 49.761629][ T3305] loop2: partition table partially beyond EOD, truncated [ 49.778472][ T3304] loop1: p4 < > [ 49.795410][ T4884] loop1: p4 < > [ 49.815376][ T4881] Alternate GPT is invalid, using primary GPT. [ 49.821657][ T4881] loop2: p1 p2 p3 [ 49.825461][ T4881] loop2: partition table partially beyond EOD, truncated [ 49.851095][ T4884] netlink: 'syz.1.371': attribute type 1 has an invalid length. [ 49.858860][ T4884] netlink: 'syz.1.371': attribute type 2 has an invalid length. [ 49.898297][ T4907] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 49.920659][ T4909] ------------[ cut here ]------------ [ 49.926224][ T4909] verifier bug: REG INVARIANTS VIOLATION (true_reg1): range bounds violation u64=[0xffffdfcd, 0xffffffffffffdfcc] s64=[0x80000000ffffdfcd, 0x7fffffffffffdfcc] u32=[0xffffdfcd, 0xffffdfcc] s32=[0xffffdfcd, 0xffffdfcc] var_off=(0xffffdfcc, 0xffffffff00000000) [ 49.951089][ T4909] WARNING: kernel/bpf/verifier.c:2748 at reg_bounds_sanity_check+0x15b/0x660, CPU#1: syz.2.374/4909 [ 49.962066][ T4909] Modules linked in: [ 49.966105][ T4909] CPU: 1 UID: 0 PID: 4909 Comm: syz.2.374 Not tainted syzkaller #0 PREEMPT(voluntary) [ 49.975990][ T4909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 49.986121][ T4909] RIP: 0010:reg_bounds_sanity_check+0x27d/0x660 [ 49.992619][ T4909] Code: 24 78 4c 8b 44 24 70 4c 8b 4c 24 60 41 ff 74 24 20 41 55 53 ff 74 24 68 ff 74 24 78 ff b4 24 90 00 00 00 ff b4 24 b0 00 00 00 <67> 48 0f b9 3a 48 83 c4 38 4c 8b ac 24 98 00 00 00 49 8d 85 80 08 [ 50.012515][ T4909] RSP: 0018:ffffc900012af388 EFLAGS: 00010246 [ 50.018875][ T4909] RAX: ffff88811e193c10 RBX: 00000000ffffdfcc RCX: 00000000ffffdfcd [ 50.027062][ T4909] RDX: ffffffff867f0c86 RSI: ffffffff866bb997 RDI: ffffffff86fb99b0 [ 50.027204][ T4906] udevd[4906]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 50.035085][ T4909] RBP: ffff88811a051270 R08: ffffffffffffdfcc R09: 80000000ffffdfcd [ 50.049316][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 50.053552][ T4909] R10: 00000000000000d0 R11: 0000000000000002 R12: ffff88811a051230 [ 50.071306][ T4909] R13: 00000000ffffdfcc R14: ffff88811a05127c R15: ffff88811a051268 [ 50.074528][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 50.079297][ T4909] FS: 00007f9e5d2ef6c0(0000) GS:ffff8882aec57000(0000) knlGS:0000000000000000 [ 50.079336][ T4909] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 50.079352][ T4909] CR2: 0000200000001000 CR3: 000000012d064000 CR4: 00000000003506f0 [ 50.111213][ T4913] netlink: 20 bytes leftover after parsing attributes in process `syz.1.375'. [ 50.113032][ T4909] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 50.125945][ T4906] udevd[4906]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 50.129955][ T4909] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 50.141453][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 50.147811][ T4909] Call Trace: [ 50.147822][ T4909] [ 50.147838][ T4909] reg_set_min_max+0x1c8/0x260 [ 50.147895][ T4909] check_cond_jmp_op+0x13bd/0x1a80 [ 50.159449][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 50.161137][ T4909] do_check+0x440c/0x9060 [ 50.188200][ T4909] do_check_common+0xd0f/0x1630 [ 50.193227][ T4909] bpf_check+0x2f6d/0xc7e0 [ 50.197675][ T4909] ? __alloc_frozen_pages_noprof+0x18a/0x350 [ 50.203854][ T4909] ? alloc_pages_bulk_noprof+0x4a1/0x520 [ 50.209663][ T4909] ? __vmap_pages_range_noflush+0xb9c/0xcc0 [ 50.215612][ T4909] ? try_charge_memcg+0x215/0xa10 [ 50.220720][ T4909] ? pcpu_block_update+0x232/0x3b0 [ 50.226042][ T4909] ? _find_next_zero_bit+0x64/0xa0 [ 50.231232][ T4909] ? pcpu_block_refresh_hint+0x157/0x170 [ 50.237294][ T4909] ? pcpu_block_update_hint_alloc+0x640/0x660 [ 50.243667][ T4909] ? css_rstat_updated+0xbb/0x280 [ 50.248841][ T4909] ? mod_memcg_state+0x182/0x260 [ 50.253851][ T4909] ? __rcu_read_unlock+0x4e/0x70 [ 50.258943][ T4909] ? pcpu_memcg_post_alloc_hook+0xec/0x170 [ 50.264837][ T4909] ? pcpu_alloc_noprof+0xb08/0x1010 [ 50.270153][ T4909] ? should_fail_ex+0x30/0x280 [ 50.274980][ T4909] ? __kmalloc_noprof+0x2a3/0x580 [ 50.280068][ T4909] ? security_bpf_prog_load+0x60/0x140 [ 50.285586][ T4909] ? selinux_bpf_prog_load+0xac/0xd0 [ 50.290977][ T4909] ? security_bpf_prog_load+0x9e/0x140 [ 50.296464][ T4909] bpf_prog_load+0xf76/0x1140 [ 50.301234][ T4909] ? security_bpf+0x2b/0x90 [ 50.305823][ T4909] __sys_bpf+0x469/0x7b0 [ 50.310174][ T4909] __x64_sys_bpf+0x41/0x50 [ 50.314671][ T4909] x64_sys_call+0x28e1/0x3000 [ 50.319418][ T4909] do_syscall_64+0xc0/0x2a0 [ 50.324075][ T4909] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.330182][ T4909] RIP: 0033:0x7f9e5e89aeb9 [ 50.334719][ T4909] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 50.354597][ T4909] RSP: 002b:00007f9e5d2ef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 50.363384][ T4909] RAX: ffffffffffffffda RBX: 00007f9e5eb15fa0 RCX: 00007f9e5e89aeb9 [ 50.371503][ T4909] RDX: 0000000000000049 RSI: 0000200000000140 RDI: 0000000000000005 [ 50.379872][ T4909] RBP: 00007f9e5e908c1f R08: 0000000000000000 R09: 0000000000000000 [ 50.387878][ T4909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 50.395890][ T4909] R13: 00007f9e5eb16038 R14: 00007f9e5eb15fa0 R15: 00007ffe4e1c6c98 [ 50.404078][ T4909] [ 50.407165][ T4909] ---[ end trace 0000000000000000 ]--- [ 50.416505][ T4905] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 50.426693][ T4905] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.440749][ T4794] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.448038][ T4794] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.459316][ T4794] bridge_slave_0: entered allmulticast mode [ 50.465792][ T4929] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=4929 comm=syz.2.376 [ 50.465928][ T4794] bridge_slave_0: entered promiscuous mode [ 50.479567][ T4794] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.491288][ T4794] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.498949][ T4794] bridge_slave_1: entered allmulticast mode [ 50.505523][ T4794] bridge_slave_1: entered promiscuous mode [ 50.522620][ T4905] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 50.532522][ T4905] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.552823][ T4931] ref_ctr increment failed for inode: 0x18a offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff8881000586c0 [ 50.591045][ T4794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.608996][ T4905] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 50.619106][ T4905] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.632407][ T4794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.653578][ T4794] team0: Port device team_slave_0 added [ 50.660494][ T4794] team0: Port device team_slave_1 added [ 50.683620][ T4905] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 50.693551][ T4905] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.706082][ T4794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.713170][ T4794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 50.739201][ T4794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.751095][ T4794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.758229][ T4794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 50.784240][ T4794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.824253][ T4794] hsr_slave_0: entered promiscuous mode [ 50.832412][ T4794] hsr_slave_1: entered promiscuous mode [ 50.838305][ T4794] debugfs: 'hsr0' already exists in 'hsr' [ 50.844360][ T4794] Cannot create hsr debugfs directory [ 51.017604][ T4952] netlink: 12 bytes leftover after parsing attributes in process `syz.1.381'. [ 51.026576][ T4952] netlink: 16 bytes leftover after parsing attributes in process `syz.1.381'. [ 51.182492][ T3709] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 51.208117][ T4954] loop1: detected capacity change from 0 to 1024 [ 51.228144][ T4954] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 51.245180][ T4954] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 51.260556][ T4954] EXT4-fs (loop1): orphan cleanup on readonly fs [ 51.268735][ T4954] EXT4-fs warning (device loop1): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 51.283524][ T4954] EXT4-fs (loop1): Cannot turn on quotas: error -5 [ 51.290836][ T4954] EXT4-fs (loop1): 1 truncate cleaned up [ 51.296931][ T4954] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 51.311786][ T4954] capability: warning: `syz.1.382' uses 32-bit capabilities (legacy support in use) [ 51.413015][ T4794] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 51.426722][ T4794] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 51.440597][ T4794] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 51.452186][ T4794] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 51.477202][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.555274][ T4974] netlink: 184 bytes leftover after parsing attributes in process `syz.5.386'. [ 51.574017][ T4977] loop1: detected capacity change from 0 to 256 [ 51.590822][ T4794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.615681][ T4794] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.627854][ T4977] xt_TCPMSS: Only works on TCP SYN packets [ 51.637698][ T835] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.644880][ T835] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.659688][ T1006] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.666811][ T1006] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.780006][ T4794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.836022][ T4996] loop1: detected capacity change from 0 to 1764 [ 51.935997][ T5010] loop1: detected capacity change from 0 to 1024 [ 51.954188][ T5010] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 51.991594][ T5010] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 52.016633][ T5010] EXT4-fs (loop1): orphan cleanup on readonly fs [ 52.023602][ T5010] EXT4-fs error (device loop1): __ext4_get_inode_loc:4830: comm syz.1.392: Invalid inode table block 0 in block_group 0 [ 52.032342][ T4794] veth0_vlan: entered promiscuous mode [ 52.050800][ T4794] veth1_vlan: entered promiscuous mode [ 52.064449][ T5010] EXT4-fs (loop1): Remounting filesystem read-only [ 52.090025][ T4794] veth0_macvtap: entered promiscuous mode [ 52.096128][ T5010] EXT4-fs (loop1): 1 truncate cleaned up [ 52.108837][ T4794] veth1_macvtap: entered promiscuous mode [ 52.115471][ T5010] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 52.134522][ T4794] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.146315][ T4794] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.153760][ T5035] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 52.162522][ T5035] FAT-fs (loop2): Filesystem has been set read-only [ 52.182519][ T31] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.205908][ T5035] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 52.215438][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.221594][ T31] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.227995][ T5035] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 52.234626][ T31] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.252097][ T5034] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 52.261560][ T5034] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 52.272547][ T5034] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 52.281615][ T31] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.300523][ T5035] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 52.316579][ T5034] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 52.337005][ T5035] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 52.339935][ T5034] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 52.357317][ T5043] netlink: 'syz.6.399': attribute type 2 has an invalid length. [ 52.365067][ T5043] netlink: 'syz.6.399': attribute type 1 has an invalid length. [ 52.416069][ T5052] Cannot find del_set index 0 as target [ 52.540459][ T5057] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 52.563403][ T5057] EXT4-fs error (device loop6): xattr_find_entry:337: inode #15: comm syz.6.404: corrupted xattr entries [ 52.583618][ T5057] EXT4-fs (loop6): 1 orphan inode deleted [ 52.604976][ T5057] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.629034][ T5066] tmpfs: Unknown parameter 'cù&¾ôÓ¡ØÊ«a' [ 52.642290][ T4794] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.659498][ T5050] veth2: entered promiscuous mode [ 52.665590][ T5050] veth2: entered allmulticast mode [ 52.874122][ T5088] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.890282][ T5088] ext4 filesystem being mounted at /54/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.914679][ T5088] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.932015][ T5099] EXT4-fs: Ignoring removed bh option [ 52.937577][ T5099] EXT4-fs: dax option not supported [ 52.948326][ T5091] EXT4-fs (loop6): can't mount with data=, fs mounted w/o journal [ 53.190251][ T5111] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 53.246273][ T3438] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 53.254502][ T3438] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.274351][ T3438] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 53.282647][ T3438] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.291780][ T3438] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 53.300308][ T3438] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.308863][ T3438] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 53.317128][ T3438] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.329344][ T29] kauditd_printk_skb: 137 callbacks suppressed [ 53.329359][ T29] audit: type=1326 audit(1770450817.676:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5114 comm="syz.1.420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc7c16faeb9 code=0x7ffc0000 [ 53.358759][ T29] audit: type=1326 audit(1770450817.676:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5114 comm="syz.1.420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc7c16faeb9 code=0x7ffc0000 [ 53.382010][ T29] audit: type=1326 audit(1770450817.676:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5114 comm="syz.1.420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc7c16faeb9 code=0x7ffc0000 [ 53.405341][ T29] audit: type=1326 audit(1770450817.676:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5114 comm="syz.1.420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc7c16faeb9 code=0x7ffc0000 [ 53.428713][ T29] audit: type=1326 audit(1770450817.676:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5114 comm="syz.1.420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc7c16faeb9 code=0x7ffc0000 [ 53.452017][ T29] audit: type=1326 audit(1770450817.676:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5114 comm="syz.1.420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc7c16faeb9 code=0x7ffc0000 [ 53.475262][ T29] audit: type=1326 audit(1770450817.676:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5114 comm="syz.1.420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc7c16faeb9 code=0x7ffc0000 [ 53.498649][ T29] audit: type=1326 audit(1770450817.676:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5114 comm="syz.1.420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc7c16faeb9 code=0x7ffc0000 [ 53.521839][ T29] audit: type=1326 audit(1770450817.676:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5114 comm="syz.1.420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc7c16faeb9 code=0x7ffc0000 [ 53.545036][ T29] audit: type=1326 audit(1770450817.676:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5114 comm="syz.1.420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc7c16faeb9 code=0x7ffc0000 [ 53.682312][ T5142] set_capacity_and_notify: 6 callbacks suppressed [ 53.682399][ T5142] loop2: detected capacity change from 0 to 2048 [ 53.723565][ T5142] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.738813][ T5157] netlink: 'syz.5.428': attribute type 1 has an invalid length. [ 53.747859][ T5151] loop0: detected capacity change from 0 to 2048 [ 53.781637][ T5154] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.788966][ T5154] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.824491][ T5151] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.896054][ T5172] delete_channel: no stack [ 53.898569][ T5154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 53.908702][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.910836][ T5154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 53.964388][ T5157] 8021q: adding VLAN 0 to HW filter on device bond1 [ 53.992133][ T5163] bond1: (slave ip6gretap1): making interface the new active one [ 54.003968][ T5163] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 54.021536][ T5173] bond1: entered promiscuous mode [ 54.026977][ T52] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.031693][ T5180] FAULT_INJECTION: forcing a failure. [ 54.031693][ T5180] name failslab, interval 1, probability 0, space 0, times 1 [ 54.038680][ T5175] ip6gretap1: entered promiscuous mode [ 54.048632][ T5180] CPU: 1 UID: 0 PID: 5180 Comm: syz.6.433 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 54.048663][ T5180] Tainted: [W]=WARN [ 54.048670][ T5180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 54.048681][ T5180] Call Trace: [ 54.048687][ T5180] [ 54.048707][ T5180] __dump_stack+0x1d/0x30 [ 54.048738][ T5180] dump_stack_lvl+0x95/0xd0 [ 54.048893][ T5180] dump_stack+0x15/0x1b [ 54.048911][ T5180] should_fail_ex+0x263/0x280 [ 54.048940][ T5180] should_failslab+0x8c/0xb0 [ 54.049013][ T5180] kmem_cache_alloc_node_noprof+0x6a/0x4a0 [ 54.049036][ T5180] ? __alloc_skb+0x2f0/0x4b0 [ 54.049064][ T5180] __alloc_skb+0x2f0/0x4b0 [ 54.049163][ T5180] ? __alloc_skb+0x219/0x4b0 [ 54.049188][ T5180] alloc_skb_with_frags+0x7d/0x470 [ 54.049263][ T5180] ? __account_obj_stock+0x211/0x350 [ 54.049286][ T5180] sock_alloc_send_pskb+0x44d/0x500 [ 54.049307][ T5180] ? pn_find_sock_by_sa+0x1d1/0x250 [ 54.049329][ T5180] pep_sendmsg+0xc7/0x6a0 [ 54.049376][ T5180] ? _raw_spin_lock_bh+0x56/0xb0 [ 54.049405][ T5180] ? _raw_spin_unlock_bh+0x18/0x20 [ 54.049465][ T5180] ? release_sock+0x116/0x150 [ 54.049491][ T5180] pn_socket_sendmsg+0x10b/0x140 [ 54.049513][ T5180] ? __pfx_pn_socket_sendmsg+0x10/0x10 [ 54.049591][ T5180] sock_write_iter+0x32a/0x360 [ 54.049614][ T5180] ? __pfx_sock_write_iter+0x10/0x10 [ 54.049636][ T5180] io_write+0x626/0xd60 [ 54.049730][ T5180] __io_issue_sqe+0xfd/0x2d0 [ 54.049754][ T5180] io_issue_sqe+0x20b/0xc20 [ 54.049776][ T5180] ? io_prep_rwv+0xef/0x260 [ 54.049852][ T5180] io_submit_sqes+0x78a/0x11b0 [ 54.049880][ T5180] __se_sys_io_uring_enter+0x1bf/0x1c70 [ 54.049906][ T5180] ? __rcu_read_unlock+0x4e/0x70 [ 54.049973][ T5180] ? get_pid_task+0x96/0xd0 [ 54.050066][ T5180] ? proc_fail_nth_write+0x13b/0x160 [ 54.050167][ T5180] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 54.050193][ T5180] ? vfs_write+0x86e/0x9f0 [ 54.050211][ T5180] ? __rcu_read_unlock+0x4e/0x70 [ 54.050237][ T5180] ? __fget_files+0x184/0x1c0 [ 54.050259][ T5180] ? mutex_lock+0x57/0x90 [ 54.050350][ T5180] ? mutex_unlock+0x4e/0x90 [ 54.050371][ T5180] ? fput+0x8f/0xc0 [ 54.050440][ T5180] __x64_sys_io_uring_enter+0x78/0x90 [ 54.050532][ T5180] x64_sys_call+0x27e4/0x3000 [ 54.050613][ T5180] do_syscall_64+0xc0/0x2a0 [ 54.050640][ T5180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.050660][ T5180] RIP: 0033:0x7f607d88aeb9 [ 54.050677][ T5180] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 54.050694][ T5180] RSP: 002b:00007f607c2df028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 54.050746][ T5180] RAX: ffffffffffffffda RBX: 00007f607db05fa0 RCX: 00007f607d88aeb9 [ 54.050760][ T5180] RDX: 0000000000000002 RSI: 0000000000004d10 RDI: 0000000000000004 [ 54.050773][ T5180] RBP: 00007f607c2df090 R08: 0000000000000000 R09: 0000000000000000 [ 54.050785][ T5180] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 54.050797][ T5180] R13: 00007f607db06038 R14: 00007f607db05fa0 R15: 00007fffa973d0f8 [ 54.050814][ T5180] [ 54.366114][ T5187] ref_ctr increment failed for inode: 0x147 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff888103fd2f40 [ 54.378017][ T52] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.387192][ T5150] delete_channel: no stack [ 54.396068][ T52] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.417018][ T52] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.428829][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.444097][ T5190] loop6: detected capacity change from 0 to 128 [ 54.466616][ T5190] FAT-fs (loop6): error, clusters badly computed (2 != 0) [ 54.473988][ T5190] FAT-fs (loop6): Filesystem has been set read-only [ 54.484607][ T5197] loop5: detected capacity change from 0 to 512 [ 54.491922][ T5197] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 54.542224][ T5197] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.558761][ T5208] loop0: detected capacity change from 0 to 128 [ 54.576565][ T5197] ext4 filesystem being mounted at /60/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 54.584514][ T5208] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 54.652270][ T5208] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 54.666415][ T5225] vhci_hcd vhci_hcd.4: default hub control req: 2000 v0000 i0000 l0 [ 54.746256][ T5232] loop6: detected capacity change from 0 to 512 [ 54.795762][ T5232] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 54.809756][ T5232] EXT4-fs (loop6): orphan cleanup on readonly fs [ 54.822231][ T5232] EXT4-fs warning (device loop6): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 54.831256][ T3438] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 54.861100][ T5232] EXT4-fs (loop6): Cannot turn on quotas: error -117 [ 54.892780][ T5232] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #16: comm syz.6.446: inode has both inline data and extents flags [ 54.926252][ T5232] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.446: couldn't read orphan inode 16 (err -117) [ 54.931591][ T5259] __nla_validate_parse: 10 callbacks suppressed [ 54.931608][ T5259] netlink: 28 bytes leftover after parsing attributes in process `syz.1.455'. [ 54.943598][ T5255] loop2: detected capacity change from 0 to 4096 [ 54.964737][ T5257] 8021q: adding VLAN 0 to HW filter on device bond1 [ 54.972526][ T5232] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 54.975284][ T5257] lo: Caught tx_queue_len zero misconfig [ 55.018369][ T5255] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.019425][ T4067] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.054784][ T4794] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.091399][ T5274] FAULT_INJECTION: forcing a failure. [ 55.091399][ T5274] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 55.104694][ T5274] CPU: 1 UID: 0 PID: 5274 Comm: syz.6.458 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 55.104736][ T5274] Tainted: [W]=WARN [ 55.104744][ T5274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 55.104757][ T5274] Call Trace: [ 55.104764][ T5274] [ 55.104772][ T5274] __dump_stack+0x1d/0x30 [ 55.104809][ T5274] dump_stack_lvl+0x95/0xd0 [ 55.104866][ T5274] dump_stack+0x15/0x1b [ 55.104896][ T5274] should_fail_ex+0x263/0x280 [ 55.104923][ T5274] should_fail+0xb/0x20 [ 55.104988][ T5274] should_fail_usercopy+0x1a/0x20 [ 55.105067][ T5274] _copy_from_iter+0xcf/0xea0 [ 55.105085][ T5274] ? pn_find_sock_by_sa+0x1d1/0x250 [ 55.105106][ T5274] pep_sendmsg+0x178/0x6a0 [ 55.105187][ T5274] ? _raw_spin_lock_bh+0x56/0xb0 [ 55.105245][ T5274] ? _raw_spin_unlock_bh+0x18/0x20 [ 55.105265][ T5274] ? release_sock+0x116/0x150 [ 55.105376][ T5274] pn_socket_sendmsg+0x10b/0x140 [ 55.105399][ T5274] ? __pfx_pn_socket_sendmsg+0x10/0x10 [ 55.105418][ T5274] sock_write_iter+0x32a/0x360 [ 55.105464][ T5274] ? __pfx_sock_write_iter+0x10/0x10 [ 55.105488][ T5274] io_write+0x626/0xd60 [ 55.105518][ T5274] __io_issue_sqe+0xfd/0x2d0 [ 55.105544][ T5274] io_issue_sqe+0x20b/0xc20 [ 55.105613][ T5274] ? io_prep_rwv+0xef/0x260 [ 55.105636][ T5274] io_submit_sqes+0x78a/0x11b0 [ 55.105671][ T5274] __se_sys_io_uring_enter+0x1bf/0x1c70 [ 55.105700][ T5274] ? __rcu_read_unlock+0x4e/0x70 [ 55.105794][ T5274] ? get_pid_task+0x96/0xd0 [ 55.105818][ T5274] ? proc_fail_nth_write+0x13b/0x160 [ 55.105841][ T5274] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 55.105903][ T5274] ? vfs_write+0x86e/0x9f0 [ 55.105924][ T5274] ? __rcu_read_unlock+0x4e/0x70 [ 55.105951][ T5274] ? __fget_files+0x184/0x1c0 [ 55.105970][ T5274] ? mutex_lock+0x57/0x90 [ 55.106050][ T5274] ? mutex_unlock+0x4e/0x90 [ 55.106075][ T5274] ? fput+0x8f/0xc0 [ 55.106098][ T5274] __x64_sys_io_uring_enter+0x78/0x90 [ 55.106126][ T5274] x64_sys_call+0x27e4/0x3000 [ 55.106152][ T5274] do_syscall_64+0xc0/0x2a0 [ 55.106212][ T5274] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.106236][ T5274] RIP: 0033:0x7f607d88aeb9 [ 55.106254][ T5274] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 55.106270][ T5274] RSP: 002b:00007f607c2df028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 55.106353][ T5274] RAX: ffffffffffffffda RBX: 00007f607db05fa0 RCX: 00007f607d88aeb9 [ 55.106365][ T5274] RDX: 0000000000000002 RSI: 0000000000004d10 RDI: 0000000000000004 [ 55.106377][ T5274] RBP: 00007f607c2df090 R08: 0000000000000000 R09: 0000000000000000 [ 55.106388][ T5274] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 55.106400][ T5274] R13: 00007f607db06038 R14: 00007f607db05fa0 R15: 00007fffa973d0f8 [ 55.106420][ T5274] [ 55.433197][ T5255] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.457882][ T5279] loop1: detected capacity change from 0 to 512 [ 55.474662][ T5289] netlink: 24 bytes leftover after parsing attributes in process `syz.5.456'. [ 55.484309][ T5289] netlink: 'syz.5.456': attribute type 10 has an invalid length. [ 55.491748][ T5279] EXT4-fs: Ignoring removed i_version option [ 55.492675][ T52] Bluetooth: hci0: Frame reassembly failed (-84) [ 55.498286][ T5279] EXT4-fs: Ignoring removed bh option [ 55.535467][ T5289] syz_tun: entered promiscuous mode [ 55.542200][ T5279] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.564517][ T5289] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 55.597413][ T5279] ext4 filesystem being mounted at /95/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 55.664699][ T5313] netlink: 68 bytes leftover after parsing attributes in process `syz.5.467'. [ 55.701844][ T5318] netlink: 12 bytes leftover after parsing attributes in process `syz.6.468'. [ 55.710912][ T5318] netlink: 16 bytes leftover after parsing attributes in process `syz.6.468'. [ 55.825457][ T5318] loop6: detected capacity change from 0 to 8192 [ 55.887447][ T5318] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.889923][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.896118][ T5318] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.924737][ T10] IPVS: starting estimator thread 0... [ 55.930685][ T5313] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 56.026937][ T5322] IPVS: using max 2928 ests per chain, 146400 per kthread [ 56.043699][ T5329] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.050826][ T5333] delete_channel: no stack [ 56.104672][ T5329] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.156383][ T52] IPVS: stop unused estimator thread 0... [ 56.209616][ T5329] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.306226][ T5329] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.369827][ T52] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.389546][ T52] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.398330][ T52] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.407492][ T52] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.543711][ T5358] netlink: 60 bytes leftover after parsing attributes in process `syz.5.478'. [ 56.642250][ T5367] netlink: 8 bytes leftover after parsing attributes in process `syz.6.480'. [ 56.671855][ T5379] 9p: Bad value for 'wfdno' [ 56.710686][ T5379] netlink: 12 bytes leftover after parsing attributes in process `syz.5.482'. [ 56.809172][ T5387] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5387 comm=syz.5.485 [ 56.834071][ T5387] loop5: detected capacity change from 0 to 2048 [ 56.924354][ T5387] loop5: p1 p2 p3 [ 56.932506][ T5387] loop5: p3 start 8388352 is beyond EOD, truncated [ 56.942181][ T5383] netlink: 104 bytes leftover after parsing attributes in process `syz.6.483'. [ 56.957168][ T3000] loop5: p1 p2 p3 [ 56.962359][ T3000] loop5: p3 start 8388352 is beyond EOD, truncated [ 57.059717][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 57.079541][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 57.081802][ T5395] netlink: 'syz.5.487': attribute type 1 has an invalid length. [ 57.103183][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 57.115098][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 57.143738][ T5395] bond2: entered promiscuous mode [ 57.149051][ T5395] bond2: entered allmulticast mode [ 57.233963][ T5405] netlink: 60 bytes leftover after parsing attributes in process `syz.1.489'. [ 57.317245][ T5411] netlink: 'syz.5.490': attribute type 9 has an invalid length. [ 57.345404][ T5415] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 57.357198][ T5415] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 57.367422][ T5415] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.492: Corrupt directory, running e2fsck is recommended [ 57.475336][ T5418] FAT-fs (loop5): Directory bread(block 64) failed [ 57.490623][ T5418] FAT-fs (loop5): Directory bread(block 65) failed [ 57.501654][ T5418] FAT-fs (loop5): Directory bread(block 66) failed [ 57.504786][ T5415] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 57.519078][ T5418] FAT-fs (loop5): Directory bread(block 67) failed [ 57.529854][ T5418] FAT-fs (loop5): Directory bread(block 68) failed [ 57.536573][ T5415] EXT4-fs error (device loop1): ext4_iget_extra_inode:5073: inode #15: comm syz.1.492: corrupted in-inode xattr: invalid ea_ino [ 57.544220][ T5418] FAT-fs (loop5): Directory bread(block 69) failed [ 57.571489][ T5418] FAT-fs (loop5): Directory bread(block 70) failed [ 57.571558][ T5415] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.492: couldn't read orphan inode 15 (err -117) [ 57.581669][ T5418] FAT-fs (loop5): Directory bread(block 71) failed [ 57.610032][ T5415] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.629824][ T5418] FAT-fs (loop5): Directory bread(block 72) failed [ 57.647391][ T5418] FAT-fs (loop5): Directory bread(block 73) failed [ 57.683035][ T3699] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 57.686274][ T3709] Bluetooth: hci0: command 0x1003 tx timeout [ 57.696023][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.747387][ T5422] syz.6.493: attempt to access beyond end of device [ 57.747387][ T5422] loop6: rw=2049, sector=154, nr_sectors = 8 limit=128 [ 57.786999][ T5422] syz.6.493: attempt to access beyond end of device [ 57.786999][ T5422] loop6: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 57.800815][ T5422] Buffer I/O error on dev loop6, logical block 80, lost async page write [ 57.874936][ T5422] syz.6.493: attempt to access beyond end of device [ 57.874936][ T5422] loop6: rw=2049, sector=162, nr_sectors = 8 limit=128 [ 57.927074][ T5422] syz.6.493: attempt to access beyond end of device [ 57.927074][ T5422] loop6: rw=8390657, sector=168, nr_sectors = 2 limit=128 [ 57.940912][ T5422] Buffer I/O error on dev loop6, logical block 84, lost async page write [ 57.958612][ T5422] syz.6.493: attempt to access beyond end of device [ 57.958612][ T5422] loop6: rw=2049, sector=186, nr_sectors = 8 limit=128 [ 57.998711][ T5422] syz.6.493: attempt to access beyond end of device [ 57.998711][ T5422] loop6: rw=8390657, sector=192, nr_sectors = 2 limit=128 [ 58.012489][ T5422] Buffer I/O error on dev loop6, logical block 96, lost async page write [ 58.054375][ T5422] syz.6.493: attempt to access beyond end of device [ 58.054375][ T5422] loop6: rw=2049, sector=194, nr_sectors = 8 limit=128 [ 58.091007][ T5422] syz.6.493: attempt to access beyond end of device [ 58.091007][ T5422] loop6: rw=8390657, sector=200, nr_sectors = 2 limit=128 [ 58.104810][ T5422] Buffer I/O error on dev loop6, logical block 100, lost async page write [ 58.125053][ T5422] syz.6.493: attempt to access beyond end of device [ 58.125053][ T5422] loop6: rw=2049, sector=218, nr_sectors = 8 limit=128 [ 58.139585][ T5422] syz.6.493: attempt to access beyond end of device [ 58.139585][ T5422] loop6: rw=8390657, sector=224, nr_sectors = 2 limit=128 [ 58.153307][ T5422] Buffer I/O error on dev loop6, logical block 112, lost async page write [ 58.165573][ T5422] Buffer I/O error on dev loop6, logical block 116, lost async page write [ 58.178164][ T5422] Buffer I/O error on dev loop6, logical block 88, lost async page write [ 58.188177][ T5422] Buffer I/O error on dev loop6, logical block 92, lost async page write [ 58.198233][ T5422] Buffer I/O error on dev loop6, logical block 120, lost async page write [ 58.208799][ T5422] Buffer I/O error on dev loop6, logical block 124, lost async page write [ 58.518117][ T5464] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 58.536471][ T5464] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #16: comm syz.0.506: invalid indirect mapped block 4294967295 (level 0) [ 58.556581][ T5464] EXT4-fs (loop0): Remounting filesystem read-only [ 58.564033][ T5464] EXT4-fs (loop0): 1 orphan inode deleted [ 58.569993][ T5464] EXT4-fs (loop0): 1 truncate cleaned up [ 58.576954][ T5464] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.593074][ T5464] EXT4-fs (loop0): shut down requested (1) [ 58.599143][ T5464] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 58.608088][ T5464] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 58.630289][ T5464] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 58.677480][ T29] kauditd_printk_skb: 18549 callbacks suppressed [ 58.677528][ T29] audit: type=1326 audit(1770450822.689:19192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5352 comm="syz.2.477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e5e89aeb9 code=0x7ff00000 [ 58.736936][ T29] audit: type=1326 audit(1770450822.708:19193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5352 comm="syz.2.477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e5e89aeb9 code=0x7ff00000 [ 58.760439][ T29] audit: type=1326 audit(1770450822.708:19194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5352 comm="syz.2.477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e5e89aeb9 code=0x7ff00000 [ 58.784009][ T29] audit: type=1326 audit(1770450822.708:19195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5352 comm="syz.2.477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e5e89aeb9 code=0x7ff00000 [ 58.807457][ T29] audit: type=1326 audit(1770450822.708:19196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5352 comm="syz.2.477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e5e89aeb9 code=0x7ff00000 [ 58.830952][ T29] audit: type=1326 audit(1770450822.708:19197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5352 comm="syz.2.477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e5e89aeb9 code=0x7ff00000 [ 58.854573][ T29] audit: type=1326 audit(1770450822.708:19198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5352 comm="syz.2.477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e5e89aeb9 code=0x7ff00000 [ 58.878027][ T29] audit: type=1326 audit(1770450822.708:19199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5352 comm="syz.2.477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e5e89aeb9 code=0x7ff00000 [ 58.901535][ T29] audit: type=1326 audit(1770450822.708:19200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5352 comm="syz.2.477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e5e89aeb9 code=0x7ff00000 [ 58.924989][ T29] audit: type=1326 audit(1770450822.708:19201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5352 comm="syz.2.477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e5e89aeb9 code=0x7ff00000 [ 58.963412][ T5476] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 58.969966][ T5476] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 58.977567][ T5476] vhci_hcd vhci_hcd.0: Device attached [ 59.023123][ T5483] mmap: syz.5.512 (5483) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 59.038150][ T5480] vhci_hcd: connection closed [ 59.038472][ T3438] vhci_hcd vhci_hcd.1: stop threads [ 59.048467][ T3438] vhci_hcd vhci_hcd.1: release socket [ 59.053956][ T3438] vhci_hcd vhci_hcd.1: disconnect device [ 59.249649][ T5496] set_capacity_and_notify: 5 callbacks suppressed [ 59.249665][ T5496] loop6: detected capacity change from 0 to 8192 [ 59.270357][ T5503] loop5: detected capacity change from 0 to 1024 [ 59.277497][ T5503] EXT4-fs: inline encryption not supported [ 59.296687][ T5503] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 59.298478][ T5496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.319056][ T5496] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.331176][ T5503] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #3: block 2: comm syz.5.520: lblock 2 mapped to illegal pblock 2 (length 1) [ 59.365872][ T5503] EXT4-fs (loop5): Remounting filesystem read-only [ 59.372706][ T5503] EXT4-fs (loop5): 1 orphan inode deleted [ 59.378880][ T5503] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.401018][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.487712][ T5507] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 59.497734][ T5507] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.549331][ T5507] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 59.559318][ T5507] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.620425][ T5507] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 59.630410][ T5507] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.684159][ T5507] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 59.693989][ T5507] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.712799][ T5534] ref_ctr increment failed for inode: 0x262 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88810a94a1c0 [ 59.776738][ T12] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 59.785140][ T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.800618][ T12] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 59.808914][ T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.820993][ T12] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 59.829514][ T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.891628][ T12] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 59.899924][ T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.922544][ T5563] loop2: detected capacity change from 0 to 512 [ 59.944942][ T5563] EXT4-fs: dax option not supported [ 59.991197][ T5563] loop2: detected capacity change from 0 to 512 [ 60.026781][ T5563] EXT4-fs: dax option not supported [ 60.072293][ T5588] loop6: detected capacity change from 0 to 512 [ 60.080739][ T5587] loop0: detected capacity change from 0 to 512 [ 60.103133][ T5588] ext4: Unknown parameter 'dont_measure' [ 60.130833][ T5587] ext4 filesystem being mounted at /94/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.297486][ T5602] loop1: detected capacity change from 0 to 128 [ 60.317507][ T5604] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 60.327531][ T5604] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.431258][ T5604] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 60.441349][ T5604] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.496550][ T5610] loop1: detected capacity change from 0 to 1024 [ 60.514266][ T5610] EXT4-fs: Ignoring removed oldalloc option [ 60.520485][ T5610] EXT4-fs: Ignoring removed bh option [ 60.571871][ T5604] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 60.581778][ T5604] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.647131][ T5604] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 60.657265][ T5604] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.747290][ T5628] ================================================================== [ 60.754547][ T5630] ipip0: entered promiscuous mode [ 60.755411][ T5628] BUG: KCSAN: data-race in xas_find_marked / xas_set_mark [ 60.767634][ T5628] [ 60.769982][ T5628] write to 0xffff88811a8e9894 of 4 bytes by task 5610 on cpu 1: [ 60.777636][ T5628] xas_set_mark+0x12b/0x140 [ 60.782170][ T5628] tag_pages_for_writeback+0xe3/0x2e0 [ 60.787587][ T5628] ext4_do_writepages+0x6a8/0x2800 [ 60.792745][ T5628] ext4_writepages+0x18f/0x320 [ 60.797538][ T5628] do_writepages+0x1c6/0x310 [ 60.802174][ T5628] file_write_and_wait_range+0x178/0x2f0 [ 60.807836][ T5628] generic_buffers_fsync_noflush+0x45/0x130 [ 60.813844][ T5628] ext4_sync_file+0x1aa/0x680 [ 60.818579][ T5628] vfs_fsync_range+0x10d/0x130 [ 60.823367][ T5628] ext4_buffered_write_iter+0x34f/0x3c0 [ 60.828945][ T5628] ext4_file_write_iter+0x380/0xf70 [ 60.834258][ T5628] iter_file_splice_write+0x6bc/0xa80 [ 60.839650][ T5628] direct_splice_actor+0x156/0x2a0 [ 60.844783][ T5628] splice_direct_to_actor+0x311/0x670 [ 60.850251][ T5628] do_splice_direct+0x119/0x1a0 [ 60.855119][ T5628] do_sendfile+0x382/0x650 [ 60.859561][ T5628] __x64_sys_sendfile64+0x105/0x150 [ 60.864793][ T5628] x64_sys_call+0x2db1/0x3000 [ 60.869503][ T5628] do_syscall_64+0xc0/0x2a0 [ 60.874041][ T5628] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.879950][ T5628] [ 60.882291][ T5628] read to 0xffff88811a8e9894 of 4 bytes by task 5628 on cpu 0: [ 60.889856][ T5628] xas_find_marked+0x5d7/0x620 [ 60.894667][ T5628] filemap_get_folios_tag+0xfa/0x510 [ 60.899987][ T5628] filemap_fdatawait_range+0x88/0x1e0 [ 60.905387][ T5628] __writeback_single_inode+0xdb/0x7b0 [ 60.910874][ T5628] writeback_single_inode+0x16d/0x3f0 [ 60.916273][ T5628] sync_inode_metadata+0x6e/0xa0 [ 60.921234][ T5628] generic_buffers_fsync_noflush+0xee/0x130 [ 60.927136][ T5628] ext4_sync_file+0x1aa/0x680 [ 60.931824][ T5628] vfs_fsync_range+0x10d/0x130 [ 60.936594][ T5628] ext4_buffered_write_iter+0x34f/0x3c0 [ 60.942157][ T5628] ext4_file_write_iter+0x380/0xf70 [ 60.947367][ T5628] iter_file_splice_write+0x6bc/0xa80 [ 60.952738][ T5628] direct_splice_actor+0x156/0x2a0 [ 60.957850][ T5628] splice_direct_to_actor+0x311/0x670 [ 60.963225][ T5628] do_splice_direct+0x119/0x1a0 [ 60.968072][ T5628] do_sendfile+0x382/0x650 [ 60.972494][ T5628] __x64_sys_sendfile64+0x105/0x150 [ 60.977699][ T5628] x64_sys_call+0x2db1/0x3000 [ 60.982379][ T5628] do_syscall_64+0xc0/0x2a0 [ 60.986890][ T5628] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.992799][ T5628] [ 60.995118][ T5628] value changed: 0x02000021 -> 0x04000021 [ 61.000832][ T5628] [ 61.003153][ T5628] Reported by Kernel Concurrency Sanitizer on: [ 61.009304][ T5628] CPU: 0 UID: 0 PID: 5628 Comm: syz.1.555 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 61.020504][ T5628] Tainted: [W]=WARN [ 61.024303][ T5628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 61.034367][ T5628] ================================================================== [ 63.740792][ T835] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 63.749159][ T835] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.774866][ T835] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 63.783266][ T835] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.791915][ T37] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 63.800371][ T37] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.808697][ T37] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 63.816890][ T37] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0