last executing test programs: 1m2.348365467s ago: executing program 1 (id=15): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x0, 0x101, 0x0, 0x9, 0xffffffff}, [@TCA_NETEM_RATE={0x14, 0x6, {0x7, 0x803e10, 0xffff6156, 0x7}}]}}}]}, 0x60}}, 0x0) sendmmsg(r0, &(0x7f0000001cc0), 0x400000000000026, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) 1m2.299239011s ago: executing program 1 (id=16): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000001a000100000000000000000002000000000000000000000014001f"], 0x38}}, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) unshare(0x20000400) bind$can_j1939(r1, &(0x7f00000000c0), 0x18) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x3, &(0x7f0000002480)) rt_sigpending(0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0xffffffffffffffd6) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x2000) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="780000000001010400000000141a00000200000014001080080003400000580508000140000000090001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000002a9c2851c5f8830b156302aa05db1ea50b354b3bba797a619967300a987d5e01c34c7e781f5cf4408c2e37ac7c6aa2c535c75d1e3169c2a1c1e415b94fea3cf3168a0bfbb4bfbfa775ae7cfdb08f955199ffad760fea44a1ffff8f69be8a709eed76000000000000000000"], 0x78}}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') mremap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000002000/0x2000)=nil) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="6583afa904000000000001001400080001007400000008002a01", @ANYRES32=0x0, @ANYBLOB], 0x24}}, 0x0) set_mempolicy_home_node(&(0x7f00002a4000/0x2000)=nil, 0x2000, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="280009000000000500000000", @ANYRES32=0x0, @ANYBLOB="0600070003000000"], 0x28}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syncfs(r5) r7 = socket$rds(0x15, 0x5, 0x0) bind$rds(r7, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r7, &(0x7f0000000000)={&(0x7f0000000080)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000480)=[@rdma_dest={0x18, 0x114, 0x2, {0x0, 0x4}}, @rdma_args={0x48, 0x114, 0x1, {{0x1, 0x6}, {0x0}, 0x0, 0x0, 0x82, 0x3}}], 0x60}, 0x0) lseek(r5, 0x2000, 0x0) 1m1.817559344s ago: executing program 0 (id=23): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800"/16], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r1 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) bpf$LINK_DETACH(0x22, &(0x7f0000000100)=r1, 0x4) 1m1.72825984s ago: executing program 0 (id=25): r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x0, 0x7fff0026}]}) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000540)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000400)={0x1, 0x0, 0xb, 0xa, 0x1a6}) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="33ff0000", @ANYRES16=0x0, @ANYBLOB="080028bd7000fbdbdf250f000000200004801c000780080004000000000008000400070000000800030003000000"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x4050) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) symlink(0x0, &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mount(&(0x7f0000000440)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='binder\x00', 0x4, &(0x7f0000000500)='NLBL_UNLBL\x00') r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$unix(0x1, 0x2, 0x0) bind$unix(r5, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f00000027c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x2d, 0x20040040) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) sendto$inet6(r7, &(0x7f0000000240)='\x00', 0x1, 0x40c0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r4) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01000000000000000000037400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a7330000800020000000000080007002609093a140006"], 0x78}, 0x1, 0xffffffff00000003}, 0x0) 1m1.72712678s ago: executing program 1 (id=26): syz_usb_connect(0x5, 0x59, &(0x7f00000003c0)={{0x12, 0x1, 0x250, 0x94, 0x55, 0x8, 0x9f, 0x19d2, 0x49, 0x866b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x47, 0x1, 0x7, 0x0, 0x60, 0xff, "", [{{0x9, 0x4, 0x5, 0x5, 0x3, 0x51, 0x2, 0x3b, 0x80, [], [{{0x9, 0x5, 0xd, 0x8, 0x10, 0x1, 0x2, 0x8, [@generic={0x1a, 0x22, "cdc44477362fca1b801065dc07f01668e0ddbcc5fa826a02"}]}}, {{0x9, 0x5, 0xb, 0x8, 0x8, 0x5, 0xc8}}, {{0x9, 0x5, 0x8, 0x0, 0x10, 0x3, 0x5, 0x8}}]}}]}}]}}, 0x0) socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xfffe, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000002600)) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000002680)={{{@in=@initdev, @in6=@local}}, {{@in6=@ipv4={""/10, ""/2, @dev}}, 0x0, @in=@initdev}}, &(0x7f0000002780)=0xe8) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x5865}, 0x0) lstat(&(0x7f0000002a40)='./file0\x00', &(0x7f0000002a80)) 1m1.650877406s ago: executing program 0 (id=28): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x2200008, &(0x7f0000000800)={[{@jqfmt_vfsv1}, {@stripe={'stripe', 0x3d, 0x6}}, {@norecovery}, {@noauto_da_alloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@jqfmt_vfsv1}, {@inlinecrypt}, {@grpquota}, {@norecovery}]}, 0x3, 0x5a8, &(0x7f0000000a40)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f0000000100), &(0x7f0000001400)=ANY=[], 0x835, 0x0) setxattr$security_ima(0x0, &(0x7f0000000080), &(0x7f00000000c0)=@md5={0x1, "751e0002803331982b87245cdd507078"}, 0x11, 0x1) setxattr$security_ima(&(0x7f0000000480)='./file1\x00', &(0x7f0000000200), &(0x7f0000000000)=ANY=[], 0x700, 0x0) 1m1.029758948s ago: executing program 0 (id=30): r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) lseek(r0, 0x2f, 0x0) msgget$private(0x0, 0x483) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x10042, &(0x7f0000000140)={[{@max_dir_size_kb}, {@delalloc}]}, 0xfe, 0x26f, &(0x7f0000001c80)="$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") r1 = creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) r6 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r7, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) tgkill(r6, r6, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[@ANYRES32=r0, @ANYBLOB="000000040000000000eaff001e00009763df13003ec1cb3440cd6c64281fb0d28842873b6633916dcc8d8de3833ffafaa30ac26b9a2dbdb2048f6ea043353f2d940db158cdcd98ddcfeb65", @ANYRES32, @ANYRES32=r1, @ANYBLOB], 0x50) r8 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) syz_emit_ethernet(0x0, 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_misc(r9, &(0x7f0000000040), 0xe09) 1m0.846070191s ago: executing program 1 (id=31): r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) lseek(r0, 0x2f, 0x0) msgget$private(0x0, 0x483) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x10042, &(0x7f0000000140)={[{@max_dir_size_kb}, {@delalloc}]}, 0xfe, 0x26f, &(0x7f0000001c80)="$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") r1 = creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) r6 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r7, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) tgkill(r6, r6, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[@ANYRES32=r0, @ANYBLOB="000000040000000000eaff001e00009763df13003ec1cb3440cd6c64281fb0d28842873b6633916dcc8d8de3833ffafaa30ac26b9a2dbdb2048f6ea043353f2d940db158cdcd98ddcfeb65", @ANYRES32, @ANYRES32=r1, @ANYBLOB], 0x50) r8 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) syz_emit_ethernet(0x0, 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_misc(r9, &(0x7f0000000040), 0xe09) 59.904441366s ago: executing program 0 (id=34): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x42718, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x48, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xb, 0xfff3}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0x18, 0x2, [@TCA_FLOW_POLICE={0x4}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) 59.858316739s ago: executing program 1 (id=35): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=@newtfilter={0x88, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x58, 0x2, [@TCA_FLOWER_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x8001, 0x10000006, 0x78000000, 0x8a7}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x88}}, 0x24000000) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 54.708896634s ago: executing program 1 (id=59): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r1 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) bpf$LINK_DETACH(0x22, &(0x7f0000000100)=r1, 0x4) 54.708502724s ago: executing program 0 (id=60): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x4d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xe723, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x3a, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x6}, 0x204, 0xd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000003, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xba, 0xba, 0x5, [@struct={0xc, 0x3, 0x0, 0x4, 0x1, 0xfffff8c5, [{0xb, 0x2, 0xf7}, {0xe, 0x3, 0x1}, {0xe, 0x0, 0xff}]}, @decl_tag={0x8, 0x0, 0x0, 0x11, 0x4, 0xffffffffffffffff}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x4, 0x3}}, @datasec={0x8, 0x4, 0x0, 0xf, 0x2, [{0x2, 0xb, 0x52}, {0x3, 0x5, 0x7}, {0x1, 0x7, 0x9}, {0x1, 0x8, 0x6}], "3602"}, @enum64={0xf, 0x1, 0x0, 0x13, 0x0, 0xf, [{0x2, 0x1, 0x7}]}, @restrict={0xd, 0x0, 0x0, 0xb, 0x2}]}, {0x0, [0x61, 0x30, 0x5f]}}, &(0x7f0000000600)=""/126, 0xd9, 0x7e, 0x1, 0x1, 0x10000}, 0x28) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r8, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e27, 0xa, @empty, 0x4}}}, 0x30) fsetxattr$security_selinux(r7, &(0x7f0000000200), &(0x7f00000002c0)='system_u:object_r:ppp_device_t:s0\x00', 0x22, 0x3) 54.700658515s ago: executing program 32 (id=59): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r1 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) bpf$LINK_DETACH(0x22, &(0x7f0000000100)=r1, 0x4) 54.004058903s ago: executing program 33 (id=60): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x4d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xe723, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x3a, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x6}, 0x204, 0xd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000003, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xba, 0xba, 0x5, [@struct={0xc, 0x3, 0x0, 0x4, 0x1, 0xfffff8c5, [{0xb, 0x2, 0xf7}, {0xe, 0x3, 0x1}, {0xe, 0x0, 0xff}]}, @decl_tag={0x8, 0x0, 0x0, 0x11, 0x4, 0xffffffffffffffff}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x4, 0x3}}, @datasec={0x8, 0x4, 0x0, 0xf, 0x2, [{0x2, 0xb, 0x52}, {0x3, 0x5, 0x7}, {0x1, 0x7, 0x9}, {0x1, 0x8, 0x6}], "3602"}, @enum64={0xf, 0x1, 0x0, 0x13, 0x0, 0xf, [{0x2, 0x1, 0x7}]}, @restrict={0xd, 0x0, 0x0, 0xb, 0x2}]}, {0x0, [0x61, 0x30, 0x5f]}}, &(0x7f0000000600)=""/126, 0xd9, 0x7e, 0x1, 0x1, 0x10000}, 0x28) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r8, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e27, 0xa, @empty, 0x4}}}, 0x30) fsetxattr$security_selinux(r7, &(0x7f0000000200), &(0x7f00000002c0)='system_u:object_r:ppp_device_t:s0\x00', 0x22, 0x3) 3.227178007s ago: executing program 4 (id=445): r0 = getpid() r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r2 = msgget$private(0x0, 0x12) r3 = msgget$private(0x0, 0x80) msgrcv(r3, 0x0, 0x0, 0x1, 0x2000) msgrcv(r3, 0x0, 0x0, 0x3, 0x2000) msgctl$IPC_RMID(r3, 0x0) lstat(&(0x7f0000000540)='./file0/file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000600)={{{@in6=@empty, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000700)=0xe8) msgctl$IPC_SET(r3, 0x1, &(0x7f0000000740)={{0x2, r4, 0xffffffffffffffff, r5, 0xffffffffffffffff, 0x102, 0x4}, 0x0, 0x0, 0x9, 0x7f, 0x8000000000000001, 0xffffffffffffffff, 0x2, 0x10, 0x4, 0x1, r0, r0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="24000000170001002abd700000000004000000002d6e822aba47e20ea0b6bcc501cc6b17c3cc1b4b9773ff580a9095fabc5eea491afdc3e3320531c658e1671988", @ANYRES32=0x0, @ANYBLOB="040000800500018088000000"], 0x24}], 0x1}, 0x0) msgsnd(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="030000040000000000ff06d952898ad327512e69c67327d0ebe4e06158a349d26f18e18b4e568a3d7a59cad29aa2cda6bfddc9dbde0642b02a40e6c85c428134c5c0ce126dfba39f1e3c84e0f995f8b2d1894133318a4f30000000cdede1c84bbab737000000000000000000000000000000000000000000008206fb9e37fc07436fffc8bfc9818c1f67cb83f701c308ba513f88d60b229bebe8ab760df523d31ef93b9ec855a995fffac0fa57a6ff8e739000061b3bfb430daafb9181a00dda94e971b3a29d5964a0ec25c0d752e056d0f10f2cc8dade1effa6"], 0x80, 0x800) preadv(0xffffffffffffffff, 0x0, 0x0, 0x200000, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x368, 0x0, 0x2b8, 0xb0000010, 0x1a0, 0x5c8f0200, 0x298, 0x3a8, 0x3a8, 0x298, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'vlan1\x00', 'veth0_to_team\x00'}, 0x0, 0x158, 0x1a0, 0x700, {}, [@common=@unspec=@rateest={{0x68}, {'team_slave_1\x00', 'team0\x00', 0xb, 0x0, 0x7f, 0x7, 0x4, 0x9, {0xff}, {0xe7f}}}, @common=@unspec=@limit={{0x48}, {0x10000000, 0x8000002, 0x0, 0xfffffffe, 0x800000, 0xd, 0xffffffffffffffff}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x206, 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xf}}]}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c8) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, r1, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000400000008"], 0x50) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000080000000000000000000080850000000f00000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000725e850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r9}, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r10 = syz_open_dev$vcsa(&(0x7f0000000000), 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xe, &(0x7f0000003540)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xe, r10, 0x8, &(0x7f0000000180), 0x8, 0x10, &(0x7f00000000c0)={0x0, 0xfffffffc}, 0x10}, 0x94) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000340)={[{@errors_remount}, {@nodioread_nolock}]}, 0x1, 0x512, &(0x7f0000000380)="$eJzs3d9rY1kdAPDvvW1mOzNdk1WRdcF1cVc6i07Sbt3dIqLriz4tqOv7WNu0lCZNadJ1Whbt4H8ggoJPPvki+AcIwzz4B8jAgL6ID6KiiM7og6DOlSQ3TidN2rrTNp3m84HTnHPvzf2ec0NO7o/TewMYWy9FxFsRMRERr0ZEMZ+e5in2uqm93IP77y21UxJZ9s5fk0jyab11tdcxGRFX87dNRcTXvhzxzeRg3ObO7vpirVbdysuVVn2z0tzZvb5WX1ytrlY35ufn3lh4c+H1hdks90TtLPUyP/nS529/+lu/u/Hna99uV+tzH4lC9LXjJHWbXuhsi572Nto6jWAj0PvMC6OuCAAAx9Lex/9gRHyis/9fjInO3lyfiVHUDAAAADgp2Rem499JRAYAAABcWGlETEeSlvOxANORppfycwMfjitprdFsfWqlsb2x3J4XUYpCurJWq87mY4VLUUja5bl8jG2v/FpfeT4inouI7xcvd8rlpUZtecTnPgAAAGBcXO07/v9HMe3kjzbg/wQAAACA86s0tAAAAABcFA75AQAA4OLrP/6/PaJ6AAAAAKfiK2+/3U5Z7/nXy+/ubK833r2+XG2ul+vbS+WlxtZmebXRWO3cs69+1PpqjcbmZ2Jj+2alVW22Ks2d3Rv1xvZG68baY4/ABgAAAM7Qcx+/8+skIvY+e7mTIr8PIMBj/jDqCgAnaWLUFQBGxl28YXwVRl0BYOSSI+YbvAMAAE+/mY8evP7fe/6/cwNwsRnrAwDjx/V/GF8FIwBhrKUR8YFu9plhywy9/v/L40bJsoi7xf1TnF8EAICzNd1JSVrOjwOmI03L5YhnI9JSFJKVtVp1Nj8++FWx8Ey7PNd5Z3LkmGEAAAAAAAAAAAAAAAAAAAAAAAAAoCvLksgAAACACy0i/VPSuZt/xEzxlen+8wOXkn8W44954Ufv/ODmYqu1Ndee/rfOs7wuRUTrh/n014Y+PgwAAAA4acne0Fnd4/T8de5MawUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAGHhw/72lXjrLuH/5YkSUBsWfjKnO61QUIuLK35OY3Pe+JCImTiD+3q2IeH5Q/CQeZllWymvRHz+NiMunHL/U2TTD4189gfgwzu60+5+3Bn3/0nip8zr4+zeZpyc1vP9L88jPd/q5Qf3fswfWVh8Y44V7P6sMjX8r4oXJwf1Pr/9NhsR/+cDa/pVl2cEY3/j67u6w+NmPI2YG/v4kj8WqtOqblebO7vW1+uJqdbW6MT8/98bCmwuvL8xWVtZq1fzvwBjf+9jPHx7W/isD4v/2N93+97D2vzJspX3+c+/m/Q91s4VB8a+9PPD3dyqGxE/z375P5vn2/Jlefq+b3+/Fn9598bD2Lw/Z/kd9/teO2f5Xv/rd3x9zUQDgDDR3dtcXa7Xq1iGZqWMs8zRmfjF1Lqrxf2ay73Q/ufNSn/ebae+tPprSa9U5qNi+THZmsSbinDT5f5mRdksAAMApeLTTP+qaAAAAAAAAAAAAAAAAAAAAwPg6i9uJ9cfcG01TAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAO9d8AAAD//yLg4A8=") 3.03945015s ago: executing program 5 (id=448): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="50000000120001000000000000000000e0000002000000000000000000000000000004d50000000014000d0020010000007f820000000000000000000c0015"], 0x50}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r2, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r1) sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x38, r3, 0x1, 0x70bd2d, 0x204, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x8014) 2.968867795s ago: executing program 5 (id=451): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000003c0)='./file2\x00', 0x1010000, &(0x7f0000000440)=ANY=[@ANYBLOB="696f636861727365743d69736f383835392d372c757466383d312c696f636861727365743d63703835372c73686f72746e616d653d6c6f7765722c6e6f6e756d7461696c3d302c7379735f696d6d757461626c652c73686f72746e616d653d6c6f7765722c696f636861727365743d61736369692c73686f72746e616d653d6c6f7765722c756e695f786c6174653d312c757466383d312c71756965742c756e695f786c6174653d312c756e695f786c6174653d3100000000000000026d653d6d697865642c72736469722c756e695f786c6174653d302c757466383d302c00"], 0x1, 0x379, &(0x7f0000000c00)="$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") munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) (async) r0 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) (async, rerun: 64) exit(0x0) (rerun: 64) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 2.968387834s ago: executing program 3 (id=452): r0 = socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f0000000000)='\x00', 0x1) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000ab4000000060a010400000000000000000a0000010900010073797a31000000004c000480340001800b000100746172676574000024000280080003009ac4200008000240000000000d000100434c41535349465900000000140001800b00010064796e7365740000040002800900020073797a32"], 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) sendfile(r2, r0, &(0x7f0000000100)=0x101, 0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) r5 = gettid() r6 = socket$nl_route(0x10, 0x3, 0x0) close(0x3) syz_open_procfs$namespace(0x0, &(0x7f00000013c0)='ns/mnt\x00') ioctl$sock_SIOCGIFINDEX(r6, 0x8008b70d, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)=0x0) timer_settime(r7, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x28011, r8, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 2.109049284s ago: executing program 2 (id=457): r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f0000014d00)=[{{&(0x7f0000000040)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x36, &(0x7f0000000000)=[@ip_tos_u8={{0x0, 0x0, 0x1, 0xc}}, @ip_ttl={{0x0, 0x0, 0x2, 0x2}}], 0x28}}], 0x1, 0x2000) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8, "0093170666befb26a200"}}}]}, 0x48}}, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{}, "e4653fe00ebb7e34", "92c1c3180160c5b4a536b78c0bd9a7d7", "b0e28098", "2d52a3ffedea866a"}, 0x28) 2.108387424s ago: executing program 2 (id=458): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r0, 0x28) poll(&(0x7f0000000000)=[{r0, 0x4}, {r0, 0x535}], 0x2, 0x404) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) close(0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000070601080000000000000000000000000500010006"], 0x1c}}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) unshare(0x6a040000) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x41, &(0x7f0000000000)=ANY=[@ANYBLOB="66696c7465720000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000"/120], 0x78) ioctl$OCFS2_IOC_RESVSP64(r1, 0x4030582a, &(0x7f0000000040)={0x1, 0x2, 0x9, 0x8, 0x800, 0x8}) shutdown(r0, 0x0) 2.062244918s ago: executing program 5 (id=459): r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x40c, &(0x7f0000000680)={[{@init_itable}, {@quota}, {@noinit_itable}, {@grpjquota}, {@lazytime}, {@noload}, {}]}, 0xff, 0x501, &(0x7f0000000e80)="$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") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(&(0x7f0000000140)='./bus\x00', 0x54) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0xa, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000002000000c60001002500003084ecdec83036209df700851000000100000095002f3050000000000000184000000200000000000000000000009700000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x807}, 0x94) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYRES8], 0x58}, 0x1, 0x0, 0x0, 0x40048851}, 0xc893) syz_mount_image$vfat(&(0x7f0000001200), &(0x7f00000002c0)='./file0\x00', 0x2004000, &(0x7f0000000180)=ANY=[@ANYRES64=0x0], 0xfe, 0x123d, &(0x7f00000024c0)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x316}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0xa, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c40)=@bpf_lsm={0x4, 0x4, &(0x7f00000004c0)=ANY=[@ANYRESOCT=r0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc0000000}, 0x94) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000a40)=ANY=[@ANYBLOB="4456e20010000305fc84ffff000000007e15872621233b5990d75071d1969c68eff40d43e08548fb22d250638bf1199e5c07bd2a39f29e9012e10fede2697bca442d70c2e51b97dd3254efcc7e7e976ff683d606985d5fe8618d586b41811c11cc31e4bce8cffc47f233d3c21066ae5fe0b2b249fdc5814cd193511fc090cd3fb4e03e173251032f8a7800ab12121ecc12b82af782407f38252c5b608ab19405ddd9164d0ce155b74bae6941ca64ef5ab7e49ea24f009c861d9416428bf300f21f45021942016db86cf7ac4552545a182bdd79dcde83", @ANYRES32=0x0, @ANYBLOB="11110200000100001c0012800b0001006d616373656300000c000280050008000100000008000500", @ANYRES32=r7, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x48890}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file0\x00', 0x800090, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c756e695f786c6174653d312c756e695f786c6174653d302c757466383d302c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6d697865642c696f636861727365743d64656661756c742c6e6f6e756d7461696c3d302c73686f72746e616d653d6c6f7765722c726f6469722c757466383d302c6572726f72733d72656d6f756e742d726f2c6572726f72733d636f6e74696e75652c756e695f786c6174653d302c756e695f786c6174653d302c646d61736b3d30303030303030303030303030303030303030303030312c747a3d5554432c6e6f6e756d7461696c3d302c73686f72746e616d653d6d697865642c6572726f72733d72656d6f756e742d726f2c6e6f6e756d7461696c3d302c6e6f6e756d7461696c3d302c756e695f786c6174653d302c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e6e742c756e695f786c6174653d302c726f6469722c696f636861727365743d63703733372c73686f72746e616d653d77696e39352c696f636861727365743d6370313235312c73686f72746e616d653d77696e39352c73686f72746e616d653d77696e6e742c6e6f6e756d7461696c02002c00"], 0x6, 0x2d1, &(0x7f0000000740)="$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") r8 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./file2\x00', 0x40042, 0x81) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r6, &(0x7f000001a4c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f000001a480)={&(0x7f000001a500)=ANY=[@ANYBLOB="34020000", @ANYRES16=0x0, @ANYBLOB="010027bd7000fcdbdf25110000003c00018008000100", @ANYRES32=r7, @ANYBLOB="08000300010000001400020077673200000000000000000000000000140002006970766c616e300000000000000000003400018008000300020000001400020076657468315f746f5f62726964676500140002006d6163766c616e300000000000000000500001801400020064766d7270300000000000000000000014000200776c616e30000000000000000000000008000300020000001400020076657468315f746f5f6261746164760008000100", @ANYRES32=r7, @ANYBLOB="780001801400020076657468315f6d61637674617000000008000100", @ANYRES32=0x0, @ANYBLOB="140002007767310000000000000000000000000008000100", @ANYRES32=r7, @ANYBLOB="14000200677265300000000000000000000000001400250076657468315f746f5f6873720000000014fc570002007663616e300000000000000000000000340001801480020070696d36726567300000000000000000140002006d61637674617030000000000000000008000100", @ANYRES32=r7, @ANYBLOB="3000018008000100", @ANYRES32=r7, @ANYBLOB="080003000100000008000100", @ANYRES32=r7, @ANYBLOB="14000200626f6e6430000000000000000000000054000180080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="080003000300000008000100", @ANYRES32=0x0, @ANYBLOB="1400020064766d727031000000000000000000001400020070696d7265673100000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="3000018008000300010000000800030000000000140002007663616e30000000000000000000000008000100", @ANYRES32=r7, @ANYBLOB], 0x234}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, 0x0, 0x1000) r10 = socket$rds(0x15, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r8, @ANYBLOB=',wf\x00\x00\x00\x00', @ANYRESHEX=r10]) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000003, 0xc3072, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x20000406, &(0x7f0000001d40)={[{@dioread_lock}, {@noblock_validity}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@jqfmt_vfsold}, {@nolazytime}, {@grpjquota, 0x2e}, {@dax}, {@resuid}, {@lazytime}, {@grpid}], [], 0x2c}, 0x84, 0x4f5, &(0x7f0000001340)="$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") r11 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) quotactl_fd$Q_SYNC(r11, 0xffffffff80000102, 0x0, 0x0) r12 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') pread64(r12, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000300) ioctl$TCSBRKP(r8, 0x5425, 0x8) open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) 1.900820728s ago: executing program 3 (id=461): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000440)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug}, {@block_validity}, {@errors_remount}, {@debug}]}, 0x1, 0x44f, &(0x7f0000000640)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x740, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x2014, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x400000000000d0b, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a88000000060a010400000000000000000a0000010900010073797a31000000005c000480580001800b0001007461726765740000480002802c0003009ac420002f61afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000240000000000e00010049444c4554494d45520000000900020073797a32"], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) r2 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000080)={0x84, @loopback, 0x4e60, 0x3, 'lc\x00', 0x20, 0x670f537f, 0x80000070}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @multicast2, 0x4f29, 0x3, 'nq\x00', 0x25, 0xc, 0x6c}, {@loopback, 0x4e23, 0x3, 0x1, 0x1}}, 0x44) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x220c) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x3) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x7) r8 = socket(0xa, 0x1, 0x0) listen(r8, 0x7f) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r9, 0x0) r10 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r10, 0x0) r11 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c00000012000301000000000000000000009db7000000000000010004000000000000000000000000000000000000000000000000000000691d0f76e77044d1eb94e56239e4"], 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) recvmsg(r11, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x2) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xfd}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 1.898741549s ago: executing program 2 (id=462): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0x80552, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xa}, 0x102260, 0x10000, 0x0, 0x1, 0x8, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x2000000020000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (fail_nth: 7) 1.87223955s ago: executing program 6 (id=463): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c40)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@enum={0x3, 0x0, 0x0, 0xf}]}, {0x0, [0x0, 0x0, 0x61]}}, 0x0, 0x29, 0x0, 0x1, 0x0, 0x20000000}, 0x28) 1.758937368s ago: executing program 4 (id=464): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) syz_emit_ethernet(0x32, &(0x7f0000000000)={@local, @dev, @void, {@arp={0x806, @generic={0x204, 0x8914, 0x6, 0xd, 0xa, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, "eae69c554114e2a5f5e80732c8", @multicast, "a042ef"}}}}, 0x0) (async) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f00000004c0)={r3, 0x3, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}}, 0x10) (async) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000000)={r3, 0x1, 0x6, @random="790c7edd3d8d"}, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'bond0\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r5, 0x1, 0x6}, 0x10) (async) write$tun(r1, &(0x7f00000004c0)={@void, @void, @mpls={[], @ipv6=@tipc_packet={0x3, 0x6, "460ba0", 0x54, 0x6, 0x0, @local, @dev={0xfe, 0x80, '\x00', 0x24}, {[@dstopts={0x4}, @routing={0x2b, 0x0, 0x0, 0x65}], @name_distributor={{0x44, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0xb, 0x0, 0x0, 0x15b, 0x1de, 0x0, 0x4e20, 0x4e23, 0x1, 0x1}, [{0x4, 0x0, 0xf6f, 0x0, 0xfffff658, 0x5, 0xd, 0x9}]}}}}}, 0x7c) (async, rerun: 32) r6 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000010300)=ANY=[@ANYBLOB="480000001000210400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010067726574617000000c80028008000700000000000a0001"], 0x48}}, 0x40400c0) (async) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000040)=0x0) prlimit64(r7, 0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$SG_SET_KEEP_ORPHAN(r0, 0x2287, &(0x7f00000000c0)=0x401) getsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000140), &(0x7f0000000180)=0x4) 1.700593272s ago: executing program 6 (id=465): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f0000000040)={r1, 0xf7}, 0x8) syz_io_uring_setup(0x44bf, &(0x7f0000000000)={0x0, 0x3166, 0x8, 0x0, 0x104}, 0x0, 0x0, &(0x7f0000000000)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000000080)=ANY=[@ANYBLOB="2800000003060102000000080900024859aef7e23a91657c9fed8b2a06340073797a320000e8ff008a6c4ba3971c9a45f838fd226c1d73cd2ba75d0811fdaecd97a6baeb2abea0a343d42ea0b6c0a53da7d57fb74e55a4a1fae0a89aa54a3e14075d9f454e3bee54c2024781d19c2b98b186939b5067098dc17bd539fa119e10787545cc0fac8e47ee02195adb5a2f244322c3c3"], 0x28}}, 0x80) 1.474804237s ago: executing program 4 (id=466): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c000080080003400000000214000000110001"], 0xb0}, 0x1, 0x0, 0x0, 0x14}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c000180060001000000000014000000110005a7c295d8010000000000000000000100000a"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close_range(r0, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@ipv6_delroute={0x24, 0x19, 0x1, 0x0, 0x0, {0xa, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, 0x7, 0x2e00}, [@RTA_PRIORITY={0x8, 0x1e, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000090}, 0x4000050) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xf, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000820000000000000060b4000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000440)={r7, r5, 0x25, 0x0, @val=@tracing={0x0, 0xa}}, 0x20) syz_emit_ethernet(0x83, &(0x7f0000000540)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000e88a811008100100086dd627c21160045b000000000000002fe88000000000000000000000000010112e9668700c1b1de024a11453d62584d730e441dedfe27fea4e1c94240b55bc6e9eb4746fb5d11da196935aed7ecc36eea98db468353aca4c960f9022eb35717cff6fcbe72"], 0x0) 1.458965289s ago: executing program 6 (id=467): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210040, &(0x7f00000004c0), 0xfc, 0x59d, &(0x7f00000022c0)="$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") syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x21081e, &(0x7f00000000c0)={[{@grpquota}, {@grpjquota}, {@grpid}, {@nobh}]}, 0xfe, 0x51b, &(0x7f0000001000)="$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") r0 = open(&(0x7f0000000200)='./file1\x00', 0x4a87e, 0x80) fallocate(r0, 0x0, 0x0, 0x8800000) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) 1.388741744s ago: executing program 2 (id=468): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x6340, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@errors_remount}, {@min_batch_time={'min_batch_time', 0x3d, 0xd}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@data_err_ignore}, {@dioread_lock}]}, 0x3, 0x44d, &(0x7f0000001080)="$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") 1.385647974s ago: executing program 5 (id=469): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x24, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x4, 0x4, 0x4, 0x10005, 0x800, 0xffffffffffffffff, 0x7fffffff}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000040)={r2, &(0x7f0000000200), 0x0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000001a00000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r4, 0x18000000000002a0, 0x16, 0x0, &(0x7f0000000100)="76389e6a65585578f830e900000058c54feb682e25d3", 0x0, 0x10001, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.380709535s ago: executing program 4 (id=470): ioprio_set$uid(0x3, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) r5 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000540)='.log\x00', 0x1c10c1, 0x9c37611dc13d0db7) r6 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) flistxattr(r6, 0x0, 0x0) fchown(r5, 0x0, 0xee01) fchown(r5, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="b80000001300e999000000f54b0b735f51420000000000fc010000000000000000000000000001ac1414bb00000000000000000000000000000400100000000200201084000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400"/112], 0xb8}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x47ba, 0x3e82, 0x60, 0x0, 0x0) r8 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, 0x0, 0x0) vmsplice(r4, &(0x7f0000000440)=[{&(0x7f00000001c0)="749ceccf381f116a2741eef08ee9f0d312ec1cc4c044110d1246aebb5647", 0x1e}], 0x1, 0x5) ioctl$USBDEVFS_IOCTL(r8, 0xc0105512, &(0x7f0000000200)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x1, 0x1, 0x107fff, 0x10, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb6b, 0x800c1, 0x4, 0x1, 0x3, 0x9, 0xff, 0x1000, 0xc, 0x3, 0x3, 0x80000001, 0xfffffffa, 0x0, 0x1, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0x63c, 0xe, 0x6, 0x100, 0x6, 0x1bfe, 0xb, 0x40, 0x40bed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x5, 0x5, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xa, 0x1fa0860b, 0x7, 0xa9, 0x81, 0x2, 0x180000, 0x4003, 0x8b, 0x5, 0x2af, 0x6, 0x5, 0x2, 0x1, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x2, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10000, 0x3f6, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0xfffffffe, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x4, 0x20006, 0xc50, 0x2, 0xb, 0x2, 0xd9a, 0xc8, 0x6, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x5, 0x1fc, 0x1ff, 0xffffffff]}}) fsopen(&(0x7f0000000640)='btrfs\x00', 0x216b2d47e2804054) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="640000001000030528bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000700000000440012800b0001006272696467650000340002800c00230006000000000000000c002100030000000000000005002500010000000500170001000000080024"], 0x64}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)="2e00000010008188e6b6ffffff7fcc9f0ba1f848390000005e7b034c635600000e000a00100000000280000094", 0x69}], 0x1}, 0x24048800) 1.341584907s ago: executing program 3 (id=471): linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x8) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_clone3(&(0x7f0000000240)={0x200a00000, 0x0, 0x0, 0x0, {0x2c}, 0x0, 0x0, 0x0, 0x0, 0x20010, {r0}}, 0x58) 968.665513ms ago: executing program 3 (id=472): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) (async) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) rt_tgsigqueueinfo(0x0, 0x0, 0x15, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x24, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}}, 0x24}}, 0x4000800) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=@gettclass={0x24, 0x2a, 0x1, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xffe0, 0xffff}, {0x7}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0xb3550f9117a20f2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) getitimer(0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x42718, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000000000000007ff41000000000004000000"], 0x14}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) 649.885505ms ago: executing program 6 (id=473): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x4, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioprio_set$pid(0x3, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func={0x1, 0x0, 0x0, 0xc, 0x4}]}, {0x0, [0x61, 0x30]}}, 0x0, 0x28, 0x0, 0x1, 0x7ff}, 0x28) r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb201) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1, 0x10ffff, 0xfffffffe, 0x0, 0x0, 0x5}) r1 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r1, &(0x7f0000000600)={&(0x7f0000000080)={0xa, 0xce21, 0x280003, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffbffff}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1400000000000000010000000c0000002b0000000000000718"], 0x30}, 0x2600c000) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6a000}], 0x1, 0x7000, 0x0, 0x1e) 625.638066ms ago: executing program 2 (id=474): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x20000036, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r4 = socket$can_bcm(0x1d, 0x2, 0x2) r5 = gettid() r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r6) sendmsg$NL80211_CMD_START_AP(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x4c, r7, 0x201, 0x70bd2e, 0x0, {{}, {@void, @val={0xc, 0x99, {0x401, 0x25}}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x2a, 0xe, [@supported_rates={0x1, 0x1, [{0x6e}]}, @mic={0x8c, 0x18, {0xe7a, "38e5fdec2344", @long="779d788579b5a92f543f515e467cee7e"}}, @ssid={0x0, 0x7, @random="e854c8bc0f7d97"}]}]]}, 0x4c}}, 0x180) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001680)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001640)={&(0x7f0000001440)={0x1c4, r7, 0x20, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x0, 0x49}}}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xd2, 0xbe, "b8404f05f50345289d83dc96707740c1f7b6b13bd34c3d9795a2c66f45289f2b2aed10a3a3d82b24e4bf9381954621f9968800b671e1545c9cef95b399b53ce144b5d8a13a1cb2b22ccd2ea73afaf41e378c95c7172c7756970a89b89548dad165153e618477d704e487d5979bc58dada0b247869265f2bfa96e9d738517e8bb6704d27d1ccb787637ce982317f3ae6b1b6a889e8f677c17fe8cc3f89ae6a6bf1261b0346daec43f89263fc7ccee89c456777004efef3191b4eb743c6f2a5b2717b308e3275ded6b9658910c81fc"}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x10, 0x13, [{0x9}, {0x16, 0x1}, {0x6, 0x1}, {0x4bab73a1134d197c, 0x1}, {0x73, 0x1}, {0xb, 0x1}, {0x1, 0x1}, {0x1b}, {0x18, 0x1}, {0xb, 0x1}, {0x48}, {0x12}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x3eb}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x4}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x1}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x13, 0xbe, "2c25e1456ac0d5d6edf83c522fa883"}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0xffffffff, 0x3}}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x61, 0xbe, "425d2ad2cad57b193c284734fa2b9a0cc8b682bda242be0bd4b210b82025f82cb10103870dd77a7717d5ce41a001ce02b9e2ab954cf7f97c70b8d831ea7f8af9cdfb5e95cfa03bfda24f5360e09e1abbd2f7cf36bde0a6ef5550b4fe66"}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x13, 0x13, [{0x24}, {0xb}, {0x6a}, {0x19, 0x1}, {0xc}, {0x12}, {0x1b}, {0x9}, {0x6c, 0x1}, {0x60}, {0x9}, {0x2, 0x1}, {0xbc71ffdc545d61d8}, {0x6c}, {0x4}]}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x40840}, 0x8010) timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r5}, &(0x7f0000000000)) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x4, 0x8, 0x7f, 0x8, 0x0, 0xfffffffffffffffd, 0x24, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000080), 0x4}, 0xc500, 0xffffffffffff0001, 0x8, 0x7, 0x6, 0x8, 0x8000, 0x0, 0x2, 0x0, 0x4}, r5, 0xc, 0xffffffffffffffff, 0x0) close(r4) getsockopt(r1, 0x200000000114, 0x271d, 0x0, &(0x7f0000000400)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r9 = io_uring_setup(0x9e5, &(0x7f0000000180)={0x0, 0x2c3f, 0x0, 0x0, 0xab}) close_range(r9, 0xffffffffffffffff, 0x0) r10 = syz_open_dev$tty1(0xc, 0x4, 0x3) writev(r10, &(0x7f0000000100)=[{&(0x7f0000000440)="9c554fd203ebd695822b5475b786f4fd4f7309f98756138a5c1e89be77db22a841aeee6f73d3982ab1a9f40efa00ef8a667663fd142d64630cf63abff170db4c6fef64e89521671dada81d2ba4f31a63f49ff8a5e4660cbada8c18500e534d650f4e0f7000a152ec6406b8c5d1478e9ce154c08399240e333187d2239a361c8abd677418bf1fdff33ad01f8b737d49e0e1077702efd5316838d84c56401391509539ac1485a5d7664005657a0cd57efb533027d334afacf3a5df07ef6f693b7625f6db53995f8299ebe48d778ef7fe0a05fb660f8e7421fe43041c6c69ed02ae2cd83ada1f929c5b9c0323e03270a98087a8e6bd699a04a4048c063242af9246f727a123f852f15bca77e832883d2b32c6e559ef4e58e0d6e8cf2984ecce8f5db3c4d7c916c13c01473e15b6f90d949c6176cff8024f0eef91c0ce4340ea9a1087279fd213e6785b7a8c29239d616e453ba50510842682ee272303e51506fa96b1a5a418e6f96502ad93e860e98b36c6095f3fa21031ceb2add82d6d74b3a2beac5a1beb77bfc18977a3277066b41ef6848685143110681737809c9fa3f43a21e3dc776c6a7f2ae58b3e10d20babfde12ee69845ac934a1449e28f506533fbfafd746934660bb19fafa9800f2bca870997e0a7be51343fe70f19012f60093e0c80e6e29c02a636f81cc4c67b8eab16c8bb932d171a1d19ac2e54587697e5f5c379659e7115e14ef6d3100192c51d1fff2b3c1085323d6810fab1e7d41ec0cd726810a71650530ca681e5c4348112458cfbd0b6164a753c001e6cf434c7414a592686db4ab80805e95e7a729515ab09b7d4ae8a0727e448191c7496924f63e40b9b8b7708fb5bbb041a7b99ba6c0a034a09ba9f2b6efa84c22137515f3b0c347874f7cfb375a85b7f5ba1e7276d643e093410573018dc22ce80b16219e142008de6e96e1b36992e16bf54ac4192be582ec1dc815bd3763a0472a48f1f2658110c2f3d5798e7ff80af1b02a76098f4d0dc4fbdf80358753ee22682cc1a46475544710bf966de30287ab82fa575adaae92014f7e9d272340e6fd1691a068f1ffbac0268a7b2bdf28459b193cf654b16e048f4a038d320c2d5f4d5daff71fc019344f60790a9e5b5d754f4882876cc1dcbd26dce1f368b71514fab9d522e2184c1716436abd6a9e7d1d904424c26a571c1d2020d4445e4bdad0a7564adb444a7f201df76d2825a183f139104a61ecf7a96aaf1f47ac660dc31a3d443008589fc67b60fe184b5edabfbcb0037ee4b6ccfa895ee44f0d2028498ed3f2ae428120874c630d4e26a1790389c5aaad5007a50873c33ebfaf341b988553ac339c2488d5509d365f468553979e8975a0478ab5d1f1a6c6fdf67cab5b12d8748701c143bb27c366ba870c21affb5854df233ce643ed9cbf6202a7747485ffa55cf4869e7cbcdfc8b6454519c199aaee23c25b28c0029929aae54460707ce3b41e435984710debd5ed49fded261859e55e92b3b840a2b249dc6e1dd259ce76df6b7897f0a294bb9506b22dcc26a6e147219e0d9384d7d05924dc6f3c293002e5cb8e40b9b343b37a07e5a2633b3801a77f772d164a71d3deffc04c0c32839c478d9c5de9decfeba980bca196c83b38998778297ce886387c5f7cf2b2aac1938f56cb58cb729cf1cca8ea8db086df667b2bff9d41cc04974bbdc0a4f5faa5411f03c24635e5b23c7abf3f64efcbea2d1d37ea5cc4bd75ec472916362d9fb9a1fe9b94085dfd593123b22550f25350dcf6f70de805244e78c8e9cc04ce5e87f67e867d375cff224c33a1157c4a55e08b4a7966207c1158ca97ee737cb8ba18c3e3d01637ec3993067e9339553c7b722d0e3a17d296924609bb6612d151cb488076b6f307290c97b371e04a511069f5417126c6533692b3d42a322de57eb313cd82e79a800d5e44fe5ac440ab8781c4593fdc103faece429dc6f749f1cfb27895a1ae8f47365a89d25cd99e1b997171dc1edefa5e2a9705acddacf973c6bbc2f50dcc798065940ed99339ba1b6fc03b05b841b11264e892cdd600f72658812e35b146704a1c61d9fc0463d36228e733b59b70f0c9ef9084c18427154d380a092e5d15907a23402e63f48277e0e5ea5fcd10d3426102d75c4d8020e25d9a7137537b39782e6f51975bb6ff9b351848143293ce8e123fd0b250fbe2d52114cfb98cbed69dfef5ccbe9f29de73d71447339e642b6adc09ede069f4650fd4b05f43e6a40ffb6b9dbe55bcc4426244714d13ad6f99e3e94b06a947257497cec59659aa9e65bd54cff3628c9a7f7747b7086df1e15542b3501ff77ea93018a12bf46588678325a4a0bcaa287b10f52717e81c6df444523797e91cd3aebaf7706567e851479766eb00bf529ab38fdac59a7d9d0a169bda0d153d64680e6f98f644afc310c136927ac5b89c0cc5cba36a519082c5b5387396848e45b8fbc4afefa4bc838b4327deeaa8bf7c3e5240d8bc05633292b5c53f0d62b978aac371753a8bb78ddf13dc3c0de39fd918e66aae92d469e7a27f6ad6c9fa63f8d3097794813fbd9933466604c3f7f20d3d003b47c4fd0eecc6b4a93362bc7bb905c83004a166cde9322a0833b8c9632f042c19b60238012c4aeda1f8009fec372e968057209309338233dcd130d86d52dce84af0d214b62194140486397628ce0a7b0dfc2001cfcc41c2078d3efcf3166601d295551c9e1173b28f65cc36e6c6658e9de246f260688314f74b7b442fac8eb3f90c07da5aa959880deaad8dc4838ccce1654978ae3b2ff1b12bd76b6a2bcf3c4f1b2088090902fce1764149184653040fcd632cda263464348fb9f10e50929299d039512698a25a3d75f981ae6c49eb4bb49f67d868306f2f5594a171930bd48d8ce4fac6bd3620d4fe90e6865dbf19dd810713f2afa8f8ffb4e32bc46ffd36ece9cd78636324b4372ff4547cb3816425788fcef62d39dc451356a2dadfbd884020fa8bc69b0a056c79369015b0af250e6750836f64a77465d057522737ee1e31c56f78b73bd750b1ef01119ace4ecfcd6c15a1de32d07ab1f38bf634b7f7e8eee50077455e307d3cd3971cdd5d1adb11a745a46084c583bdfaf38a9c938aa7e0d26384061dc81d08d09681ed76c2035bb7d1ae33f547cf4562baa0e0412dfc44292c51e6902c7544647bf752e8d50f44f03714ed816096229626fdf330b1740936e54b39481a78c67c17930de20f4d8a0a45914987d049c12886b8d4391fd9b6014f1d04e27edc393c6ad205d9917b7d83c184cde78e7cb35fb4598293237acd37e297a6c854e16c863961718d6bb1e6cc8e7a0beeb65c8311c8b3d0ab15c23cd18de2f198e2ff1b5286002b85a32f0d7abcb20995aed6317a6cc6692e9709d3914bca7b01e4124b2fcacb4afa4165b2c2f51d11ea723d6585e7031ed7de8a179269148e94f789be14aff7bf3a7027fd804bde60777848a0e5ad0a3be179249123ef56d0ab72677bbe8adfb1cb3a1aff11756cc79841a4fe49a903e4ca6f0cf42ddc87dfd8195c558ed8d36efabc3bf8743aec2e286223f283617f1db8faa7949a1cd5365143fffbfecd1db458bf5f56402945b3bc5d01c441b0474f8c95f85991e4a04aa31fee246ea64b3c5106014f0f89ed4824e42ff81097d4fdc505d0869e0bda8dc0d46fe2f4a8dcafe5a733382064bccddb3c8961167737b2141ff592202da512be48e3d27c9377102a866176dc39564b31f80244b003f793276a20bbf275736f4fc683c4d260e3242848749aeab54e6a23fad3c72e5b8f3b38313e4f704b6880369eb96d69ea53c6a03bf3f297516f41c8714c9d14c78ad76cc2b048e81c02696a7ce4b1d785c2baeb16879be1b74ebb782fd837c310a217afe97be05e8a3ca89ef903840f5b33c2338a3c7919cfaabab042cb4fd1850d9b56d3ab10f8fb703a5ea59f0799a04ecc28940c5eea4e7d59fbd501eaff7969a14f009021c9d43f538bd965e25ad3adce018fe1a02b4028a592625540ef0f968c6a4d5a3a6b61608d649a38947407fabdc2c45ad0cdb2e96bfe6706f609f29c0d5159a06a2d7b9e04e853f30588b98519b161aa0fd7c1672ce2f80a0c592577b03ff44c72c5e93e48ca0e314ebf8209d13492d7a48d87335aedbc79e3893bf386479305bc7d726c16bf056769f09fcd1c96fa17faddfa5757368321db261dbb0edc7268c5707a52f824c79caf1324e3007a9bc03b059a25a81840be5f1eadfee141e4ea28e7bc22409f8a7af7f29e5b9c69059c4ee57b9c271acc5e896b027a0b90bd91cee22e5e4fb239f0efffd934481b8ec12b5cc75be7b2974684b493dc20455d25303e311f28cc6340b075df3b34eb59ffa1a7369bd7a520c7af8b5eb8683d1e841f7ca31ff0beeeb7d429b27e81489635ce65478f98ff989cbbf5e325b3a87a68f4ed92e94abffe52f5c327b6f4bcb0bff093733f4a51fa1834c5dff901bfb9bb3bf4780c0a4cc12c68b29461c8b641435bfca331632cfa0641e6948fdee7052965b05815043f5daf7e8c55dbd92d8adb36113a40374348768dd13841e12c9c8c3828830d05901a559e7e9d3de5953df9450ed6c584f0370c4ca31ac80a6aab47c2a07909656e9c0590c001c21739c67fc4de2616564b6341995381d993cd97551c8a4dfbd2c5d429b863cec91a4794a02920416016c0fec715a78aa0910acbd7b9476f30c66497592e0a774eb736cce906e77cfc9758a49b13c117f6db1e674a5e3be3df3ac0a8b4c70acf20ebe269979def276dc0437a3e9959275dd554e3a73eb9d581ee3e9ea0365c34bf4e47b4d943336afce52fb1e9527f3cc8f5f55cd279d4c2d6bb23c7dc7308639e0a91a159d68c1d1dae7c92120b784920cc16107baebd6d30a60d659e8a59d142529331d5e71899b4136b4643b97118633d32dde4f8a1af3f288b465dff3766420342d6ac63f98fbff00d9a26bec3e65d7de9e1a0bf2e4d1f9f932185cbdeacebfcad425fd549d3d3e721e88f9eccb38819aa3f72fd473a3cd55bb2cd3239109e709de5922306d1a53265e7af5fd62edd959ca06a10a3733994de5dadea3a8a9b2b3cdb06dd536d17490712f677cbf96890ac20e5c0b319cd8c11c39c9db22cb45fd0baa62fd9d80af9f72f222fc974dac199743879cc3d671ffa446a3e629d6f6954161f040615cd3485851354ca3864f49b6cf517845283c94860725f31aa61b45ff4fe89a060aa7bdbeb6767d1c0cbcb2925c0d689ac1dcc8d34763bcde6ca79525beed0f64d06203eaa11947d7f94facd0c26b37a01e46401ce4c16d1280d1fede2de787bd0f99112a38b13cf307801bd0e02a0dc0599fcc12a02d95335af13bf2d3dad625fb04c99a9636c505e8bd2f1c6b8002d5ed81334c1670bf4988cb594856594278771802dc230ae6a7b01cb0d2a1dbaa603e7355ccb761dfd040472d385e568f7790829cbeaaa4104f294f5c6749da7565cd275e51cb3b6799e0092572be5b3f6d97018ff635cf02f8bc081e725c7207dc5aac0ce20d795fe929f126649ad58bb2c54281ec15a01b9133e7a353bcf666336dc21cbdea32dcc18ff9bb18473dc9470e9dc6dd38443673875801b9a432a6d8fab6b1490b27236f2acae34c0c3affde76c5146cbcddf631bcc2f5d098aa8b6882b34ceeed07dd92cbddcafa64f6a2e66e70425fb10bb53aa2df26cc06ca34b429c1d58ff1693876d4b19b316d", 0xfd1}], 0x1) r11 = socket(0xb, 0x803, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000100003042abd78000000000000000000", @ANYBLOB="460609000c000000081198010011e4cff9", @ANYRES32=r12, @ANYRES32=r12, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x600}, 0x0) 480.937297ms ago: executing program 6 (id=475): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="12000000050000000800000008"], 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000040)={0x38, r2, 0x1, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x38}}, 0x10004000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="e1082bbd4224f28adf250200000006000a004e23000014000700fc0000000000000000000000a345a09c84e446283eac040000000005002200000000000500020002000000050002000a0000000500030032000000"], 0x50}}, 0x20004040) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000600)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x24, &(0x7f0000000a00)=@raw=[@cb_func={0x18, 0x1, 0x4, 0x0, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffe01}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @alu={0x0, 0x0, 0x4, 0x1, 0x4, 0x0, 0xfffffffffffffff0}, @ldst={0x3, 0x1, 0x0, 0x4, 0x5, 0xc, 0x1}, @exit, @alu={0x7, 0x0, 0x6, 0xa, 0xb, 0x10, 0xfffffffffffffff0}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet(0x2, 0x2, 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r3) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000500)=@mangle={'mangle\x00', 0x44, 0x6, 0x428, 0x98, 0x2f0, 0x98, 0x3b8, 0x190, 0x3b8, 0x3b8, 0x3b8, 0x3b8, 0x3b8, 0x6, 0x0, {[{{@ip={@local, @empty, 0xffffff00, 0x0, 'veth1_to_bridge\x00', 'wlan1\x00', {0xff}, {}, 0x6, 0x1, 0x76}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x8, 0x3, 0x1}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0xffffffff, 'veth0_vlan\x00', 'rose0\x00', {0xff}, {0xff}, 0x8, 0x3, 0x4}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x3}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@remote, [0xffffff00, 0xffffff00, 0xffffffff], 0x4e20, 0x4e20, 0x4e20, 0x4e23, 0x2, 0xe, 0xd0, 0xa87000, 0xd}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@ah={{0x30}, {[0x8, 0x40], 0x1}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0xfffffffc, 0x8, @multicast1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x488) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r3) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000003c0)=0x0, &(0x7f0000000400)=0x4) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000bc0)={'ip6tnl0\x00', &(0x7f0000000b40)={'ip6tnl0\x00', 0x0, 0x2f, 0x9, 0x4, 0x3, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, 0x7, 0x8000, 0x62}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000c00)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000d80)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000c40)={0xdc, r6, 0x800, 0x70bd28, 0x25dfdbfd, {}, [@HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x88, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000811) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r10, 0x6, 0x210000000013, &(0x7f0000000580)=0x100000001, 0x4) connect$inet(r10, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4}, 0x48) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x14, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r13, 0x1, 0x32, &(0x7f00000000c0)=r15, 0x4) sendmsg$unix(r14, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x20000050) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r10, 0x6, 0x16, &(0x7f0000000600)=[@sack_perm], 0x8cbd752) getsockopt$inet_tcp_buf(r10, 0x6, 0xb, 0x0, &(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000500)={'wlan1\x00'}) 480.556876ms ago: executing program 5 (id=476): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711235000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x101c088, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x6, 0x2c3, &(0x7f0000000900)="$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") socket$inet_mptcp(0x2, 0x1, 0x106) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file2\x00', 0x0, 0x160) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x84, @local, 0x4}, {0xa, 0x0, 0x3, @mcast1}, 0x0, {[0x2, 0x8, 0xa, 0x0, 0x0, 0x0, 0x7ff, 0x4]}}, 0x5c) ioctl$SIOCGETSGCNT(r2, 0x89e1, &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102}) open_by_handle_at(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='K\x00\x00\x00r', @ANYRES64=r0, @ANYRES32=r1], 0x531500) 364.417084ms ago: executing program 4 (id=477): syz_emit_ethernet(0x76, &(0x7f0000000040)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, "081000", 0x40, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @local}, @mcast2, {[], @param_prob={0x4, 0x2, 0x0, 0xffff, {0x5, 0x6, "5436ea", 0x400, 0x88, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@dstopts={0x0, 0x0, '\x00', [@pad1, @padn]}]}}}}}}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1d01}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x3}, @IFLA_XFRM_LINK={0x8}, @IFLA_XFRM_LINK={0x8, 0x1, 0x408e0302}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) 280.57811ms ago: executing program 4 (id=478): r0 = socket$inet6(0xa, 0x2, 0x3a) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = creat(&(0x7f0000000380)='./file0\x00', 0xc7) close(r3) lstat(&(0x7f0000000080)='./file0\x00', 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x4440, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r8, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xe}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r7, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, r9, 0x400, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x8f8, 0x60}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x93b}, @NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x13e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x4048}, 0x80) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x24, r5, 0x200, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0xfffffffd}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x80) r11 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r11, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r12, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=@delchain={0x3c, 0x64, 0xf31, 0xffffffdb, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@TCA_CHAIN={0x8, 0xb, 0x5}, @filter_kind_options=@f_flower={{0xb}, {0x2f, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_SRC_MASK={0x0, 0x20, [0x7f0000ff, 0xff, 0xff000000, 0xffffffff]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x38, 0x0, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000040)=0x8, 0x4) sendto$inet6(r0, &(0x7f0000000000)="800037bbfa9ba1ce", 0x8, 0x4000, &(0x7f0000001100)={0xa, 0x100, 0x0, @loopback, 0x4}, 0x1c) recvmmsg(r0, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x49}, 0x9c}], 0x1, 0x40, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) pwrite64(r2, &(0x7f0000000500)="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", 0xfb, 0x240000000000000) 280.1848ms ago: executing program 5 (id=479): r0 = socket(0x2, 0x80805, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, 0x0) pwritev(r0, &(0x7f00000008c0)=[{&(0x7f0000000480)="c021", 0x2}, {&(0x7f0000000580)="b2820c825bb47f345d5e7538c5a8f57e91c8063c9982f704edd11837053d4be5eb24a5470206f3fe457eb3cb6da62d49f1d116f2184e88449771d94af0d8512ed7625976", 0x44}], 0x2, 0x403, 0xfffffffc) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, 0x0, &(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000"], 0x7c}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x28, 0x0, 0x0, 0x3e57}, {0x6}]}, 0x10) sendmmsg$inet(r4, &(0x7f0000002c40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, 0x0, 0x0) unshare(0x22020400) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00005a4000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r6 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x39d}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000001c0)={'gretap0\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) write(r3, &(0x7f0000000180), 0x0) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000640)={0x54, r9, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0xfffffffffffffd98, 0xb, 0x87}, {0xffffff6a, 0x11, 0x4}, {0x8, 0x15, 0x9}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004808}, 0x20008000) io_uring_enter(r6, 0x12a, 0x14, 0x17, 0x0, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r2, &(0x7f00000030c0), 0x0, 0x9200000000000000) r10 = dup3(r3, r2, 0x0) ioctl$TCSETSW2(r10, 0x402c542c, &(0x7f0000000140)={0x7, 0x9, 0x1000, 0x100, 0x1, "505ef0ad92efbbc8d4c9cf29af091dbe633245", 0xb, 0x7}) recvmmsg(r10, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}, 0x1}], 0x1, 0x40000001, 0x0) 279.35456ms ago: executing program 6 (id=480): setxattr$incfs_metadata(0x0, &(0x7f0000000280), &(0x7f0000000380)="30573472b621739984c336124406e8", 0xf, 0x1) socket$kcm(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) r3 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r3, &(0x7f0000000040)={&(0x7f0000001340)=@ieee802154={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0302}}}, 0x80, &(0x7f0000000140)=[{&(0x7f00000006c0)="62053c005902002f1eafbcf706e12b30087f5c112d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e2305e4", 0x46}], 0x1}, 0x4040) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000040)=0x200302, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1d, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703dcb1f6c70200000074353764ccc2bf"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x4000, &(0x7f00000000c0)={[{@debug}]}, 0x0, 0x512, &(0x7f0000000c40)="$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") syz_open_dev$sg(0x0, 0x0, 0x8002) write$tun(0xffffffffffffffff, &(0x7f0000000840)={@void, @void, @mpls={[], @generic="ac6441323c6ee5146495cfcb078ee3053166906013382489c8e86a386eed434894d7c4da5f7456c05cf441b5fc7d55e49c96a274321fb610ca1876b54aacdaceda9e1a399644332661dfeb5235382c54952c388d91247b3138a93edf3bda61ad76601ca5aa60a3fec107dc4720c13acb7afc7224af7b5924ce45772122f757f1b9949e4ae5e227144606124d44e45e4e135508a56beaabe6d7f056b7460209e62d334844439d947d79906eea020d0d21e24ab0be5d13efd5be3c26a412f49d61722c6ac55d2b2f9297932c17e16a47c1f27b7318bd6666d8262141f3a2c4c0ffb2c75a98bca4"}}, 0xe6) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[], 0x50) r7 = add_key(&(0x7f0000000100)='pkcs7_test\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) request_key(&(0x7f0000002800)='id_legacy\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f0000000000)='\x00', r7) r8 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000000240)={0x84, @rand_addr=0x64010102, 0x4e20, 0x3, 'wlc\x00', 0x0, 0xa7e, 0x70}, 0x2c) 199.751586ms ago: executing program 3 (id=481): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r0, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x1006) 14.641578ms ago: executing program 2 (id=482): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280)={[{@usrquota}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000e80)="$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") syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x35, 0x1, 0x4, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') lseek(r0, 0x10000000005, 0x0) move_pages(0x0, 0x2, &(0x7f0000000000)=[&(0x7f0000000000/0x1000)=nil, &(0x7f00007f6000/0x3000)=nil], 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6(0xa, 0x1, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 0s ago: executing program 3 (id=483): r0 = socket$caif_stream(0x25, 0x1, 0x5) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x440e0) io_uring_setup(0x3574, &(0x7f0000000240)={0x0, 0xdcca, 0x20, 0x1, 0x373, 0x0, r0}) r1 = socket$unix(0x1, 0x5, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, 0x1c, 0x0}}], 0x1, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="0218000014000000000000000000000005000500000000000a00ffff00000000fe8000000000000000000000000000aa0000000000000000080012000000000003000000000000001000000000000000000000000000000002000002000000000000000000000000fc010000000000000000000000000000050006"], 0xa0}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r2, &(0x7f00000000c0)={0x1d, r4}, 0x10) sendmsg$can_bcm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r1, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[], 0x4640}, 0x2, 0x0, 0x0, 0x10048050}, 0x4004) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) setresgid(0xee00, 0xee01, 0x0) setregid(0xffffffffffffffff, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r7, &(0x7f0000000180)='\x00', 0x1, 0x24000010, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r7, 0x84, 0x12, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x54, 0x10, 0xffffffffffffffff, 0x70bd23, 0x25df5bfb, {0x0, 0x0, 0x0, 0x0, 0x1414, 0x26021}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x2}, @IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x7, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000002) socket(0x10, 0x3, 0x0) setresgid(0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0x1}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x84}, 0x0) kernel console output (not intermixed with test programs): mode [ 27.296833][ T870] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.312825][ T870] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.331214][ T3317] veth0_vlan: entered promiscuous mode [ 27.338850][ T870] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.348314][ T870] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.365403][ T870] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.374976][ T870] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.386327][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.390464][ T3315] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 27.412155][ T870] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.422013][ T870] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.431982][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.456396][ T3317] veth1_vlan: entered promiscuous mode [ 27.484766][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.509703][ C0] hrtimer: interrupt took 46537 ns [ 27.518020][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.535237][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.572652][ T3487] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6'. [ 27.574233][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.582161][ T3487] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6'. [ 27.611142][ T9] IPVS: starting estimator thread 0... [ 27.611674][ T3484] loop3: detected capacity change from 0 to 128 [ 27.617114][ T3317] veth0_macvtap: entered promiscuous mode [ 27.657271][ T3484] syz.3.4: attempt to access beyond end of device [ 27.657271][ T3484] loop3: rw=8390657, sector=138, nr_sectors = 2 limit=128 [ 27.675160][ T3317] veth1_macvtap: entered promiscuous mode [ 27.698629][ T3484] Buffer I/O error on dev loop3, logical block 69, lost async page write [ 27.702855][ T3487] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6'. [ 27.708408][ T3484] syz.3.4: attempt to access beyond end of device [ 27.708408][ T3484] loop3: rw=8390657, sector=140, nr_sectors = 2 limit=128 [ 27.716262][ T3489] IPVS: using max 2304 ests per chain, 115200 per kthread [ 27.731218][ T3484] Buffer I/O error on dev loop3, logical block 70, lost async page write [ 27.745901][ T3484] syz.3.4: attempt to access beyond end of device [ 27.745901][ T3484] loop3: rw=8390657, sector=142, nr_sectors = 2 limit=128 [ 27.758133][ T3487] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6'. [ 27.762133][ T3484] Buffer I/O error on dev loop3, logical block 71, lost async page write [ 27.777596][ T28] kauditd_printk_skb: 47 callbacks suppressed [ 27.777611][ T28] audit: type=1400 audit(1775330925.852:127): avc: denied { write } for pid=3482 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 27.790591][ T3484] syz.3.4: attempt to access beyond end of device [ 27.790591][ T3484] loop3: rw=8390657, sector=138, nr_sectors = 2 limit=128 [ 27.821225][ T3484] Buffer I/O error on dev loop3, logical block 69, lost async page write [ 27.827046][ T28] audit: type=1400 audit(1775330925.852:128): avc: denied { connect } for pid=3482 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 27.830125][ T3484] syz.3.4: attempt to access beyond end of device [ 27.830125][ T3484] loop3: rw=8390657, sector=140, nr_sectors = 2 limit=128 [ 27.864201][ T3484] Buffer I/O error on dev loop3, logical block 70, lost async page write [ 27.867333][ T28] audit: type=1400 audit(1775330925.852:129): avc: denied { name_connect } for pid=3482 comm="syz.3.4" dest=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 27.873537][ T3484] syz.3.4: attempt to access beyond end of device [ 27.873537][ T3484] loop3: rw=8390657, sector=142, nr_sectors = 2 limit=128 [ 27.913002][ T3484] Buffer I/O error on dev loop3, logical block 71, lost async page write [ 27.943866][ T28] audit: type=1400 audit(1775330925.872:130): avc: denied { write } for pid=3492 comm="syz.2.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 27.965466][ T3495] syz.3.4 (3495) used greatest stack depth: 9328 bytes left [ 27.970656][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.973414][ T3487] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6'. [ 27.991637][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.006091][ T28] audit: type=1326 audit(1775330925.872:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3492 comm="syz.2.7" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f97221dc819 code=0x0 [ 28.011007][ T3487] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6'. [ 28.042347][ T3482] syz.3.4: attempt to access beyond end of device [ 28.042347][ T3482] loop3: rw=8390657, sector=138, nr_sectors = 2 limit=128 [ 28.046661][ T28] audit: type=1400 audit(1775330926.002:132): avc: denied { write } for pid=3482 comm="syz.3.4" name="ptype" dev="proc" ino=4026532614 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 28.057149][ T3482] Buffer I/O error on dev loop3, logical block 69, lost async page write [ 28.078825][ T28] audit: type=1400 audit(1775330926.002:133): avc: denied { map_create } for pid=3482 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 28.098637][ T3482] syz.3.4: attempt to access beyond end of device [ 28.098637][ T3482] loop3: rw=8390657, sector=140, nr_sectors = 2 limit=128 [ 28.113972][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.120109][ T3482] Buffer I/O error on dev loop3, logical block 70, lost async page write [ 28.128465][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.145699][ T3482] syz.3.4: attempt to access beyond end of device [ 28.145699][ T3482] loop3: rw=8390657, sector=142, nr_sectors = 2 limit=128 [ 28.148226][ T28] audit: type=1400 audit(1775330926.062:134): avc: denied { mounton } for pid=3309 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=538 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 28.166147][ T3482] Buffer I/O error on dev loop3, logical block 71, lost async page write [ 28.195956][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.204778][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.242923][ T28] audit: type=1400 audit(1775330926.312:135): avc: denied { map_read map_write } for pid=3500 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 28.276821][ T28] audit: type=1400 audit(1775330926.342:136): avc: denied { write } for pid=3500 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 28.309389][ T3504] loop0: detected capacity change from 0 to 512 [ 28.361816][ T3510] vti0: entered allmulticast mode [ 28.367834][ T3504] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.8: invalid indirect mapped block 256 (level 2) [ 28.453928][ T3510] autofs: Unknown parameter 'vti' [ 28.511673][ T3504] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 28.513874][ T3504] EXT4-fs (loop0): 2 truncates cleaned up [ 28.523082][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 28.523100][ C1] EXT4-fs (loop0): initial error at time 1775330926: ext4_free_branches:1023: inode 11 [ 28.523135][ C1] EXT4-fs (loop0): last error at time 1775330926: ext4_free_branches:1023: inode 11 [ 28.565152][ T3523] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11'. [ 28.579997][ T3504] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 28.606779][ T3523] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11'. [ 28.641691][ T3504] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 28.661790][ T3504] bond0: (slave bond_slave_1): Releasing backup interface [ 28.728711][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 28.755311][ T3521] loop2: detected capacity change from 0 to 4096 [ 28.775317][ T3521] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 28.960439][ T3527] loop3: detected capacity change from 0 to 32768 [ 28.977739][ T3523] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11'. [ 29.399405][ T3300] loop3: p1 p3 < > [ 29.417912][ T3523] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11'. [ 29.662766][ T3527] loop3: p1 p3 < > [ 29.676321][ T3556] netlink: 'syz.4.14': attribute type 1 has an invalid length. [ 29.691494][ T3556] netlink: 'syz.4.14': attribute type 2 has an invalid length. [ 29.759030][ T2999] loop3: p1 p3 < > [ 29.763259][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.811442][ T3562] loop0: detected capacity change from 0 to 1024 [ 29.827056][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 29.838093][ T3300] udevd[3300]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 29.848688][ T3562] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 29.880193][ T3565] loop2: detected capacity change from 0 to 512 [ 29.904908][ T3565] ======================================================= [ 29.904908][ T3565] WARNING: The mand mount option has been deprecated and [ 29.904908][ T3565] and is ignored by this kernel. Remove the mand [ 29.904908][ T3565] option from the mount to silence this warning. [ 29.904908][ T3565] ======================================================= [ 29.910588][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.986039][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 30.010687][ T3300] udevd[3300]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 30.024965][ T3565] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.052607][ T3565] ext4 filesystem being mounted at /3/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 30.087669][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 30.112954][ T3300] udevd[3300]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 30.214390][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.246697][ T3573] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=3573 comm=syz.3.20 [ 30.288279][ T3583] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 30.326835][ T3583] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 30.367707][ T3583] Zero length message leads to an empty skb [ 30.408880][ T3573] loop3: detected capacity change from 0 to 512 [ 30.441459][ T3589] loop0: detected capacity change from 0 to 1024 [ 30.456667][ T3589] EXT4-fs: inline encryption not supported [ 30.473287][ T3589] EXT4-fs (loop0): stripe (6) is not aligned with cluster size (16), stripe is disabled [ 30.493093][ T3573] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 30.585442][ T3592] loop4: detected capacity change from 0 to 4096 [ 30.611687][ T3573] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 30.622294][ T3589] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.638635][ T3573] EXT4-fs (loop3): orphan cleanup on readonly fs [ 30.693382][ T3573] EXT4-fs error (device loop3): ext4_do_update_inode:5602: inode #16: comm syz.3.20: corrupted inode contents [ 30.734760][ T3592] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.844458][ T3573] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 30.845963][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 30.862769][ C0] EXT4-fs (loop3): initial error at time 1775330928: ext4_do_update_inode:5602: inode 16 [ 30.872823][ C0] EXT4-fs (loop3): last error at time 1775330928: ext4_do_update_inode:5602: inode 16 [ 30.937964][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.076749][ T3600] loop0: detected capacity change from 0 to 128 [ 31.227940][ T3600] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 31.245655][ T3573] EXT4-fs (loop3): Remounting filesystem read-only [ 31.264294][ T3603] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 31.289238][ T3573] EXT4-fs (loop3): 1 truncate cleaned up [ 31.297571][ T3600] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 31.308294][ T821] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 31.321498][ T3603] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 31.336628][ T821] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 31.595874][ T821] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 31.708322][ T3573] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 31.748088][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.846271][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.803537][ T3630] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 32.816957][ T3630] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.443223][ T3634] __nla_validate_parse: 6 callbacks suppressed [ 33.443242][ T3634] netlink: 12 bytes leftover after parsing attributes in process `syz.3.43'. [ 33.461016][ T3634] netlink: 12 bytes leftover after parsing attributes in process `syz.3.43'. [ 34.330244][ T28] kauditd_printk_skb: 80 callbacks suppressed [ 34.330261][ T28] audit: type=1400 audit(1775330932.402:211): avc: denied { write } for pid=3643 comm="syz.4.47" name="001" dev="devtmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 34.417220][ T3648] netlink: 'syz.4.47': attribute type 36 has an invalid length. [ 34.720833][ T3648] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 34.730781][ T3648] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 34.742366][ T3648] netlink: 'syz.4.47': attribute type 10 has an invalid length. [ 35.895954][ T3648] macvlan1: entered allmulticast mode [ 35.903326][ T3648] veth1_vlan: entered allmulticast mode [ 35.910950][ T3648] team0: Port device macvlan1 added [ 35.932819][ T3652] netlink: 24 bytes leftover after parsing attributes in process `syz.3.50'. [ 35.942618][ T3652] netlink: 4 bytes leftover after parsing attributes in process `syz.3.50'. [ 35.958234][ T3652] bond0: (slave bond_slave_1): Releasing backup interface [ 36.035578][ T3658] netlink: 4 bytes leftover after parsing attributes in process `syz.3.53'. [ 36.235313][ T3663] netlink: 12 bytes leftover after parsing attributes in process `syz.3.55'. [ 36.344888][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.410724][ T3611] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 36.450830][ T3609] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 36.537869][ T3666] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.581387][ T3666] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.796174][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.890660][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.189666][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.208309][ T3674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.247428][ T3674] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.363433][ T12] bridge_slave_1: left allmulticast mode [ 37.375940][ T12] bridge_slave_1: left promiscuous mode [ 37.386518][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.404630][ T12] bridge_slave_0: left allmulticast mode [ 37.414005][ T12] bridge_slave_0: left promiscuous mode [ 37.424185][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.558289][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 37.577018][ T12] bond0 (unregistering): Released all slaves [ 37.759001][ T12] hsr_slave_0: left promiscuous mode [ 37.786077][ T12] hsr_slave_1: left promiscuous mode [ 37.805891][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 37.835977][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 37.854172][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 37.863946][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 37.886233][ T12] veth1_macvtap: left promiscuous mode [ 37.891727][ T12] veth0_macvtap: left promiscuous mode [ 37.905939][ T12] veth1_vlan: left promiscuous mode [ 37.916141][ T12] veth0_vlan: left promiscuous mode [ 38.105851][ T12] team0 (unregistering): Port device team_slave_1 removed [ 38.116097][ T12] team0 (unregistering): Port device team_slave_0 removed [ 38.230490][ T3709] netlink: 'syz.3.65': attribute type 36 has an invalid length. [ 38.283007][ T3710] netlink: 'syz.3.65': attribute type 10 has an invalid length. [ 38.376281][ T3713] netlink: 'syz.4.67': attribute type 36 has an invalid length. [ 38.389566][ T3713] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 38.399575][ T3713] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 38.413347][ T3713] netlink: 'syz.4.67': attribute type 10 has an invalid length. [ 38.421462][ T3713] veth1_vlan: left allmulticast mode [ 38.683471][ T3709] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 38.693375][ T3709] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 38.706104][ T3710] macvlan1: entered allmulticast mode [ 38.713805][ T3710] veth1_vlan: entered allmulticast mode [ 38.720636][ T3710] team0: Port device macvlan1 added [ 38.944206][ T3737] netlink: 4 bytes leftover after parsing attributes in process `syz.2.66'. [ 38.959130][ T3697] chnl_net:caif_netlink_parms(): no params data found [ 39.019801][ T3739] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 39.032903][ T28] audit: type=1400 audit(1775330937.092:212): avc: denied { create } for pid=3738 comm="syz.3.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 39.065936][ T28] audit: type=1400 audit(1775330937.132:213): avc: denied { getopt } for pid=3738 comm="syz.3.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 39.115915][ T28] audit: type=1400 audit(1775330937.172:214): avc: denied { bpf } for pid=3753 comm="syz.2.69" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 39.134882][ T3697] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.143396][ T28] audit: type=1400 audit(1775330937.172:215): avc: denied { perfmon } for pid=3753 comm="syz.2.69" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 39.149447][ T3697] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.184137][ T3697] bridge_slave_0: entered allmulticast mode [ 39.190984][ T3697] bridge_slave_0: entered promiscuous mode [ 39.198228][ T28] audit: type=1400 audit(1775330937.272:216): avc: denied { unmount } for pid=3308 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 39.231936][ T3760] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.243876][ T3697] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.251075][ T3697] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.256146][ T3760] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.258708][ T3697] bridge_slave_1: entered allmulticast mode [ 39.273120][ T3697] bridge_slave_1: entered promiscuous mode [ 39.302041][ T3697] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.317855][ T3696] chnl_net:caif_netlink_parms(): no params data found [ 39.363152][ T3697] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.427024][ T3769] netlink: 276 bytes leftover after parsing attributes in process `syz.2.73'. [ 39.433706][ T3697] team0: Port device team_slave_0 added [ 39.443608][ T28] audit: type=1400 audit(1775330937.502:217): avc: denied { nlmsg_read } for pid=3767 comm="syz.2.73" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 39.500084][ T3697] team0: Port device team_slave_1 added [ 39.507683][ T28] audit: type=1400 audit(1775330937.512:218): avc: denied { read append } for pid=3767 comm="syz.2.73" name="usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 39.511832][ T3696] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.539184][ T3696] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.548632][ T3696] bridge_slave_0: entered allmulticast mode [ 39.555472][ T3696] bridge_slave_0: entered promiscuous mode [ 39.562343][ T3696] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.569546][ T3696] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.579057][ T3696] bridge_slave_1: entered allmulticast mode [ 39.585766][ T3696] bridge_slave_1: entered promiscuous mode [ 39.601844][ T28] audit: type=1400 audit(1775330937.512:219): avc: denied { open } for pid=3767 comm="syz.2.73" path="/dev/usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 39.676823][ T3697] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.683926][ T3697] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.741278][ T3697] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.766239][ T3696] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.779042][ T3696] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.794630][ T3787] set_capacity_and_notify: 1 callbacks suppressed [ 39.794647][ T3787] loop4: detected capacity change from 0 to 256 [ 39.799088][ T3697] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.824593][ T3697] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.828144][ T3787] FAT-fs (loop4): Directory bread(block 64) failed [ 39.858570][ T3787] FAT-fs (loop4): Directory bread(block 65) failed [ 39.865224][ T3787] FAT-fs (loop4): Directory bread(block 66) failed [ 39.875921][ T3697] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.899791][ T3787] FAT-fs (loop4): Directory bread(block 67) failed [ 39.915850][ T28] audit: type=1400 audit(1775330937.982:220): avc: denied { map } for pid=3788 comm="syz.3.76" path="socket:[6248]" dev="sockfs" ino=6248 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 39.939163][ T3787] FAT-fs (loop4): Directory bread(block 68) failed [ 39.949190][ T3787] FAT-fs (loop4): Directory bread(block 69) failed [ 39.960264][ T3787] FAT-fs (loop4): Directory bread(block 70) failed [ 39.967446][ T3787] FAT-fs (loop4): Directory bread(block 71) failed [ 39.974009][ T28] audit: type=1400 audit(1775330937.982:221): avc: denied { read } for pid=3788 comm="syz.3.76" path="socket:[6248]" dev="sockfs" ino=6248 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 39.999262][ T3787] FAT-fs (loop4): Directory bread(block 72) failed [ 40.005919][ T3787] FAT-fs (loop4): Directory bread(block 73) failed [ 40.007546][ T3696] team0: Port device team_slave_0 added [ 40.020316][ T3696] team0: Port device team_slave_1 added [ 40.042399][ T3696] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 40.049800][ T3696] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 40.077766][ T3696] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 40.132110][ T3794] netlink: 'syz.3.77': attribute type 36 has an invalid length. [ 40.183113][ T28] audit: type=1400 audit(1775330938.232:222): avc: denied { create } for pid=3786 comm="syz.4.75" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 40.204159][ T3796] netlink: 'syz.3.77': attribute type 10 has an invalid length. [ 40.291010][ T3697] hsr_slave_0: entered promiscuous mode [ 40.292290][ T3697] hsr_slave_1: entered promiscuous mode [ 40.330435][ T3696] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 40.330450][ T3696] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 40.330475][ T3696] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 40.337469][ T3794] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 40.337540][ T3794] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 40.340499][ T3796] veth1_vlan: left allmulticast mode [ 40.383396][ T3800] netlink: 4 bytes leftover after parsing attributes in process `syz.4.78'. [ 40.595906][ T3696] hsr_slave_0: entered promiscuous mode [ 40.596937][ T3696] hsr_slave_1: entered promiscuous mode [ 40.597752][ T3696] debugfs: 'hsr0' already exists in 'hsr' [ 40.597766][ T3696] Cannot create hsr debugfs directory [ 40.794672][ T3697] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 40.837904][ T3697] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 40.857719][ T3697] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 40.924086][ T3697] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 41.033531][ T3696] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 41.065988][ T3696] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 41.086103][ T28] audit: type=1400 audit(1775330939.152:223): avc: denied { create } for pid=3829 comm="syz.4.82" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 41.090213][ T3697] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.134045][ T3696] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 41.147669][ T3696] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 41.172642][ T3830] netlink: 8 bytes leftover after parsing attributes in process `syz.4.82'. [ 41.191831][ T3697] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.229952][ T821] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.237055][ T821] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.268457][ T821] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.275542][ T821] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.301426][ T3697] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 41.308435][ T28] audit: type=1400 audit(1775330939.382:224): avc: denied { create } for pid=3832 comm="syz.3.83" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 41.323077][ T3696] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.379874][ T3696] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.380133][ T28] audit: type=1400 audit(1775330939.422:225): avc: denied { write } for pid=3832 comm="syz.3.83" name="file0" dev="tmpfs" ino=151 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 41.424674][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.431811][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.444664][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.451877][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.459543][ T28] audit: type=1400 audit(1775330939.422:226): avc: denied { open } for pid=3832 comm="syz.3.83" path="/25/file0" dev="tmpfs" ino=151 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 41.504721][ T3697] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.517413][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811b776400: rx timeout, send abort [ 41.533340][ T3696] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 41.556067][ T3696] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 41.645191][ T3696] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.780782][ T3697] veth0_vlan: entered promiscuous mode [ 41.789542][ T3697] veth1_vlan: entered promiscuous mode [ 41.809499][ T3697] veth0_macvtap: entered promiscuous mode [ 41.817622][ T3697] veth1_macvtap: entered promiscuous mode [ 41.829275][ T3697] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.841617][ T3697] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.853292][ T870] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.902367][ T870] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.926229][ T870] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.935141][ T870] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.017456][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811b776600: rx timeout, send abort [ 42.027684][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811b776400: abort rx timeout. Force session deactivation [ 42.029391][ T3885] loop3: detected capacity change from 0 to 512 [ 42.113827][ T3893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.118293][ T3889] netlink: 4 bytes leftover after parsing attributes in process `syz.4.89'. [ 42.136611][ T3893] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.153190][ T3899] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 42.154333][ T3885] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.173617][ T3900] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 42.185605][ T3885] ext4 filesystem being mounted at /27/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 42.215518][ T3696] veth0_vlan: entered promiscuous mode [ 42.223589][ T3696] veth1_vlan: entered promiscuous mode [ 42.250266][ T3696] veth0_macvtap: entered promiscuous mode [ 42.258477][ T3696] veth1_macvtap: entered promiscuous mode [ 42.271411][ T3696] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 42.283195][ T3696] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.292991][ T821] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.306715][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.328879][ T50] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.337993][ T50] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.347346][ T50] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.406172][ T3894] loop6: detected capacity change from 0 to 128 [ 42.413376][ T3894] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 42.458163][ T3894] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 42.478276][ T3894] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 42.486960][ T3894] FAT-fs (loop6): Filesystem has been set read-only [ 42.494278][ T3894] netlink: 'syz.6.62': attribute type 1 has an invalid length. [ 42.525771][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811b776600: abort rx timeout. Force session deactivation [ 42.545515][ T3924] loop3: detected capacity change from 0 to 2048 [ 42.585113][ T3928] loop5: detected capacity change from 0 to 512 [ 42.592717][ T3928] EXT4-fs: Ignoring removed mblk_io_submit option [ 42.601008][ T3928] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 42.612279][ T3924] loop3: p1 p2 < > p3 < p5 p6 > p4 [ 42.618349][ T3924] loop3: partition table partially beyond EOD, [ 42.620966][ T3928] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.640457][ T3924] truncated [ 42.644472][ T3924] loop3: p2 start 4278190080 is beyond EOD, truncated [ 42.652199][ T3924] loop3: p4 size 8192 extends beyond EOD, truncated [ 42.661845][ T3924] loop3: p6 size 8192 extends beyond EOD, truncated [ 42.666944][ T3928] ext4 filesystem being mounted at /2/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 42.682502][ T2999] loop3: p1 p2 < > p3 < p5 p6 > p4 [ 42.687986][ T2999] loop3: partition table partially beyond EOD, truncated [ 42.696076][ T2999] loop3: p2 start 4278190080 is beyond EOD, truncated [ 42.703919][ T2999] loop3: p4 size 8192 extends beyond EOD, truncated [ 42.705289][ T3928] EXT4-fs error (device loop5): ext4_lookup:1785: inode #12: comm syz.5.98: iget: bad i_size value: 2533274857506816 [ 42.712392][ T2999] loop3: p6 size 8192 extends beyond EOD, truncated [ 42.734154][ T3924] No such timeout policy "syz0" [ 42.740334][ T3924] netlink: 8 bytes leftover after parsing attributes in process `syz.3.96'. [ 42.752490][ T3924] netlink: 12 bytes leftover after parsing attributes in process `syz.3.96'. [ 42.780818][ T3931] EXT4-fs error (device loop5): ext4_lookup:1785: inode #12: comm syz.5.98: iget: bad i_size value: 2533274857506816 [ 42.875333][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 42.876899][ T3300] udevd[3300]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 42.888810][ T3267] udevd[3267]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory [ 42.890299][ T3516] udevd[3516]: inotify_add_watch(7, /dev/loop3p6, 10) failed: No such file or directory [ 42.892240][ T3934] udevd[3934]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 42.922201][ T3940] loop3: detected capacity change from 0 to 512 [ 42.943514][ T3940] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.943594][ T3940] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.964397][ T3942] netlink: 4 bytes leftover after parsing attributes in process `syz.2.99'. [ 42.986128][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.067121][ T3696] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.186102][ T3948] Cannot find set identified by id 0 to match [ 43.340822][ T3955] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 43.347472][ T3955] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 43.366156][ T3955] vhci_hcd vhci_hcd.0: Device attached [ 43.403146][ T3963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.406306][ T3958] vhci_hcd: connection closed [ 43.415419][ T3964] FAULT_INJECTION: forcing a failure. [ 43.415419][ T3964] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 43.433376][ T12] vhci_hcd vhci_hcd.6: stop threads [ 43.439003][ T12] vhci_hcd vhci_hcd.6: release socket [ 43.445232][ T12] vhci_hcd vhci_hcd.6: disconnect device [ 43.451341][ T3963] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.461728][ T3964] CPU: 0 UID: 0 PID: 3964 Comm: syz.5.108 Not tainted syzkaller #0 PREEMPT(full) [ 43.461755][ T3964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 43.461767][ T3964] Call Trace: [ 43.461775][ T3964] [ 43.461784][ T3964] __dump_stack+0x1d/0x30 [ 43.461836][ T3964] dump_stack_lvl+0x95/0xd0 [ 43.461858][ T3964] dump_stack+0x15/0x1b [ 43.461938][ T3964] should_fail_ex+0x263/0x280 [ 43.461969][ T3964] should_fail+0xb/0x20 [ 43.461991][ T3964] should_fail_usercopy+0x1a/0x20 [ 43.462134][ T3964] _copy_to_user+0x20/0xa0 [ 43.462238][ T3964] simple_read_from_buffer+0xb5/0x130 [ 43.462265][ T3964] proc_fail_nth_read+0x10e/0x150 [ 43.462299][ T3964] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 43.462327][ T3964] vfs_read+0x1ab/0x7f0 [ 43.462376][ T3964] ? __rcu_read_unlock+0x4e/0x70 [ 43.462402][ T3964] ? __fget_files+0x184/0x1c0 [ 43.462454][ T3964] ? mutex_lock+0x57/0x90 [ 43.462477][ T3964] ksys_read+0xdc/0x1a0 [ 43.462496][ T3964] __x64_sys_read+0x40/0x50 [ 43.462514][ T3964] x64_sys_call+0x2886/0x3020 [ 43.462588][ T3964] do_syscall_64+0x12c/0x370 [ 43.462622][ T3964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.462649][ T3964] RIP: 0033:0x7f2b21f9d04e [ 43.462668][ T3964] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 43.462690][ T3964] RSP: 002b:00007f2b20a36fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 43.462713][ T3964] RAX: ffffffffffffffda RBX: 00007f2b20a376c0 RCX: 00007f2b21f9d04e [ 43.462727][ T3964] RDX: 000000000000000f RSI: 00007f2b20a370a0 RDI: 0000000000000003 [ 43.462765][ T3964] RBP: 00007f2b20a37090 R08: 0000000000000000 R09: 0000000000000000 [ 43.462778][ T3964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 43.462792][ T3964] R13: 00007f2b22256038 R14: 00007f2b22255fa0 R15: 00007ffd30b19068 [ 43.462876][ T3964] [ 43.877639][ T3971] loop5: detected capacity change from 0 to 512 [ 43.920208][ T3971] EXT4-fs: Ignoring removed nomblk_io_submit option [ 43.936721][ T3979] capability: warning: `syz.3.116' uses 32-bit capabilities (legacy support in use) [ 43.975780][ T3971] EXT4-fs error (device loop5): ext4_do_update_inode:5602: inode #15: comm syz.5.112: corrupted inode contents [ 43.991955][ T3971] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 43.993051][ T3971] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 44.002743][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 44.002823][ C0] EXT4-fs (loop5): initial error at time 1775330942: ext4_do_update_inode:5602: inode 15 [ 44.003220][ C0] EXT4-fs (loop5): last error at time 1775330942: ext4_do_update_inode:5602: inode 15 [ 44.048041][ T3988] netlink: 'syz.6.117': attribute type 4 has an invalid length. [ 44.051068][ T3971] loop5: lost filesystem error report for type 5 error -117 [ 44.060306][ T3987] netlink: 4 bytes leftover after parsing attributes in process `syz.4.115'. [ 44.066003][ T3985] netlink: 'syz.6.117': attribute type 4 has an invalid length. [ 44.085319][ T3971] EXT4-fs error (device loop5): ext4_do_update_inode:5602: inode #15: comm syz.5.112: corrupted inode contents [ 44.098958][ T3971] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 44.119670][ T3971] EXT4-fs error (device loop5): ext4_evict_inode:313: inode #15: comm syz.5.112: mark_inode_dirty error [ 44.147016][ T3971] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 44.149507][ T3971] EXT4-fs (loop5): 1 orphan inode deleted [ 44.177546][ T3971] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.219283][ T3696] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.259345][ T3999] loop5: detected capacity change from 0 to 512 [ 44.313843][ T3999] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.337103][ T4001] loop2: detected capacity change from 0 to 512 [ 44.346889][ T4005] netlink: 'syz.4.120': attribute type 36 has an invalid length. [ 44.360551][ T4005] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 44.370456][ T4005] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 44.384605][ T4005] netlink: 'syz.4.120': attribute type 10 has an invalid length. [ 44.422212][ T3993] netlink: 12 bytes leftover after parsing attributes in process `syz.6.118'. [ 44.464467][ T3999] ext4 filesystem being mounted at /6/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 44.530527][ T4001] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.578023][ T3696] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.587745][ T4001] ext4 filesystem being mounted at /26/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 44.823839][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.862733][ T4011] x_tables: duplicate underflow at hook 1 [ 44.888970][ T28] kauditd_printk_skb: 28 callbacks suppressed [ 44.888986][ T28] audit: type=1400 audit(1775330942.962:255): avc: denied { connect } for pid=4010 comm="syz.5.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 44.998970][ T4025] netlink: 4 bytes leftover after parsing attributes in process `syz.2.131'. [ 45.019677][ T4028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.030537][ T4028] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.114647][ T4030] SELinux: Context system_u:object_r:ppp_device_t:s0 is not valid (left unmapped). [ 45.191779][ T28] audit: type=1400 audit(1775330943.182:256): avc: denied { read write } for pid=4020 comm="syz.5.128" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 45.238850][ T4035] loop6: detected capacity change from 0 to 512 [ 45.290844][ T28] audit: type=1400 audit(1775330943.182:257): avc: denied { open } for pid=4020 comm="syz.5.128" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 45.331142][ T4030] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.338424][ T4030] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.359464][ T28] audit: type=1400 audit(1775330943.182:258): avc: denied { relabelfrom } for pid=4020 comm="syz.5.128" name="UNIX" dev="sockfs" ino=7340 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 45.386570][ T28] audit: type=1400 audit(1775330943.182:259): avc: denied { mac_admin } for pid=4020 comm="syz.5.128" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 45.415093][ T4038] hub 8-0:1.0: USB hub found [ 45.420138][ T4038] hub 8-0:1.0: 8 ports detected [ 45.436209][ T4038] netlink: 8 bytes leftover after parsing attributes in process `syz.4.134'. [ 45.594163][ T4035] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.665140][ T28] audit: type=1400 audit(1775330943.192:260): avc: denied { relabelto } for pid=4020 comm="syz.5.128" name="UNIX" dev="sockfs" ino=7340 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=unix_stream_socket permissive=1 trawcon="system_u:object_r:ppp_device_t:s0" [ 45.701439][ T28] audit: type=1400 audit(1775330943.252:261): avc: denied { create } for pid=4020 comm="syz.5.128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 45.775879][ T4030] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 45.789189][ T4030] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 45.962769][ T4035] ext4 filesystem being mounted at /5/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 45.996788][ T28] audit: type=1400 audit(1775330943.252:262): avc: denied { getopt } for pid=4020 comm="syz.5.128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 46.310454][ T3697] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.348102][ T4038] bridge4: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 46.358140][ T4038] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 46.385716][ T870] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.407517][ T870] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.425221][ T870] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.434402][ T870] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.498959][ T28] audit: type=1400 audit(1775330944.572:263): avc: denied { create } for pid=4057 comm="syz.4.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 46.534146][ T4058] netlink: 'syz.4.142': attribute type 4 has an invalid length. [ 46.546151][ T4058] netlink: 152 bytes leftover after parsing attributes in process `syz.4.142'. [ 46.559560][ T4058] .`: renamed from bond0 (while UP) [ 46.610198][ T4072] loop4: detected capacity change from 0 to 512 [ 46.638834][ T4072] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.651755][ T4072] ext4 filesystem being mounted at /28/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 46.680780][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.695182][ T4077] netlink: 4 bytes leftover after parsing attributes in process `syz.2.147'. [ 46.707387][ T4075] netlink: 'syz.6.145': attribute type 36 has an invalid length. [ 46.717920][ T4075] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 46.728012][ T4075] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 46.739683][ T4075] netlink: 'syz.6.145': attribute type 10 has an invalid length. [ 46.748017][ T4075] macvlan1: entered allmulticast mode [ 46.755362][ T4075] veth1_vlan: entered allmulticast mode [ 46.763087][ T4075] team0: Port device macvlan1 added [ 46.770121][ T4079] netlink: 4 bytes leftover after parsing attributes in process `syz.4.148'. [ 46.828000][ T4085] netlink: 220 bytes leftover after parsing attributes in process `syz.3.151'. [ 46.840114][ T4085] netlink: 8 bytes leftover after parsing attributes in process `syz.3.151'. [ 46.863861][ T4085] netlink: 8 bytes leftover after parsing attributes in process `syz.3.151'. [ 46.872974][ T4085] tipc: MTU too low for tipc bearer [ 46.975965][ T28] audit: type=1400 audit(1775330945.012:264): avc: denied { read write } for pid=4083 comm="syz.3.151" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 47.028704][ T4093] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.035969][ T4093] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.144599][ T4093] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 47.156684][ T4093] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 47.243568][ T50] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.252897][ T50] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.291346][ T50] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.321152][ T50] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.538837][ T4113] loop6: detected capacity change from 0 to 512 [ 47.557940][ T4116] loop2: detected capacity change from 0 to 512 [ 47.568886][ T4116] EXT4-fs: Ignoring removed nobh option [ 47.591345][ T4116] EXT4-fs error (device loop2): ext4_iget_extra_inode:5040: inode #15: comm syz.2.159: corrupted in-inode xattr: overlapping e_value [ 47.606791][ T4116] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 47.607246][ T4116] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.159: couldn't read orphan inode 15 (err -117) [ 47.616456][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 47.616482][ C1] EXT4-fs (loop2): initial error at time 1775330945: ext4_iget_extra_inode:5040: inode 15 [ 47.616514][ C1] EXT4-fs (loop2): last error at time 1775330945: ext4_iget_extra_inode:5040: inode 15 [ 47.647227][ T4113] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.667732][ T4116] loop2: lost filesystem error report for type 5 error -117 [ 47.668435][ T4116] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.675749][ T4113] ext4 filesystem being mounted at /8/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 47.731581][ T3697] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.795648][ T4129] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.811991][ T4129] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.845520][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.890683][ T4140] loop5: detected capacity change from 0 to 128 [ 47.900161][ T4140] msdos: Unknown parameter ' a}c' [ 47.951843][ T4145] netlink: 'syz.4.169': attribute type 36 has an invalid length. [ 47.962682][ T4145] bridge5: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 47.966505][ T4142] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=26629 sclass=netlink_route_socket pid=4142 comm=syz.2.167 [ 47.972737][ T4145] bridge5: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 48.002632][ T4145] netlink: 'syz.4.169': attribute type 10 has an invalid length. [ 48.041213][ T4153] loop6: detected capacity change from 0 to 512 [ 48.067973][ T4153] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.085679][ T4153] ext4 filesystem being mounted at /10/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 48.125619][ T3697] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.425439][ T4173] loop2: detected capacity change from 0 to 2048 [ 48.452036][ T4173] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.509085][ T4173] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 48.537240][ T4173] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 1 with error 28 [ 48.552553][ T4173] EXT4-fs (loop2): This should not happen!! Data will be lost [ 48.552553][ T4173] [ 48.563039][ T4173] EXT4-fs (loop2): Total free blocks count 0 [ 48.570028][ T4173] EXT4-fs (loop2): Free/Dirty block details [ 48.576587][ T4173] EXT4-fs (loop2): free_blocks=66060288 [ 48.582404][ T4173] EXT4-fs (loop2): dirty_blocks=32 [ 48.588407][ T4173] EXT4-fs (loop2): Block reservation details [ 48.595055][ T4173] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 48.801070][ T4173] syz.2.177 (4173) used greatest stack depth: 9208 bytes left [ 48.839478][ T12] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 48.863768][ T3315] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 48.974856][ T4197] loop3: detected capacity change from 0 to 512 [ 48.997081][ T4197] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.026007][ T4197] ext4 filesystem being mounted at /49/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 49.041953][ T4203] loop4: detected capacity change from 0 to 512 [ 49.073614][ T4203] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 222 vs 220 free clusters [ 49.125823][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 49.132300][ C0] EXT4-fs (loop4): initial error at time 1775330947: ext4_mb_generate_buddy:1317 [ 49.141468][ C0] EXT4-fs (loop4): last error at time 1775330947: ext4_mb_generate_buddy:1317 [ 49.151512][ T4203] EXT4-fs (loop4): Remounting filesystem read-only [ 49.158306][ T4203] EXT4-fs warning (device loop4): ext4_xattr_inode_lookup_create:1607: inode #18: comm syz.4.185: cleanup dec ref error -28 [ 49.173646][ T4203] EXT4-fs warning (device loop4): ext4_evict_inode:268: couldn't mark inode dirty (err -30) [ 49.185888][ T4203] EXT4-fs (loop4): 1 orphan inode deleted [ 49.192278][ T4203] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.196277][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.257014][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.263739][ T4214] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.312587][ T4214] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.348072][ T4220] netlink: 'syz.3.192': attribute type 36 has an invalid length. [ 49.358767][ T4220] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 49.368634][ T4220] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 49.380192][ T4220] netlink: 'syz.3.192': attribute type 10 has an invalid length. [ 49.538944][ T4228] loop2: detected capacity change from 0 to 512 [ 49.551364][ T4228] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 49.565133][ T4228] EXT4-fs (loop2): 1 truncate cleaned up [ 49.576537][ T4228] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.083357][ T4243] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.160084][ T4243] ext4 filesystem being mounted at /16/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 50.222997][ T4251] RDS: rds_bind could not find a transport for ::ffff:172.30.0.4, load rds_tcp or rds_rdma? [ 50.255369][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 50.255388][ T28] audit: type=1400 audit(1775330948.322:283): avc: denied { connect } for pid=4250 comm="syz.3.200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 50.288330][ T3697] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.312294][ T28] audit: type=1400 audit(1775330948.322:284): avc: denied { setopt } for pid=4250 comm="syz.3.200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 50.326329][ T4258] FAULT_INJECTION: forcing a failure. [ 50.326329][ T4258] name failslab, interval 1, probability 0, space 0, times 1 [ 50.345076][ T4258] CPU: 1 UID: 0 PID: 4258 Comm: syz.5.204 Not tainted syzkaller #0 PREEMPT(full) [ 50.345109][ T4258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 50.345123][ T4258] Call Trace: [ 50.345131][ T4258] [ 50.345139][ T4258] __dump_stack+0x1d/0x30 [ 50.345181][ T4258] dump_stack_lvl+0x95/0xd0 [ 50.345221][ T4258] dump_stack+0x15/0x1b [ 50.345245][ T4258] should_fail_ex+0x263/0x280 [ 50.345274][ T4258] ? nfnetlink_rcv+0xa66/0x1720 [ 50.345372][ T4258] should_failslab+0x8c/0xb0 [ 50.345396][ T4258] __kmalloc_cache_noprof+0x5f/0x410 [ 50.345427][ T4258] nfnetlink_rcv+0xa66/0x1720 [ 50.345487][ T4258] netlink_unicast+0x5c0/0x690 [ 50.345599][ T4258] netlink_sendmsg+0x5c8/0x6f0 [ 50.345620][ T4258] ? __pfx_netlink_sendmsg+0x10/0x10 [ 50.345642][ T4258] ____sys_sendmsg+0x563/0x5b0 [ 50.345680][ T4258] ___sys_sendmsg+0x195/0x1e0 [ 50.345760][ T4258] __x64_sys_sendmsg+0xd4/0x160 [ 50.345793][ T4258] x64_sys_call+0x194c/0x3020 [ 50.345881][ T4258] do_syscall_64+0x12c/0x370 [ 50.345911][ T4258] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.345984][ T4258] RIP: 0033:0x7f2b21fdc819 [ 50.346000][ T4258] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 50.346020][ T4258] RSP: 002b:00007f2b20a37028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 50.346042][ T4258] RAX: ffffffffffffffda RBX: 00007f2b22255fa0 RCX: 00007f2b21fdc819 [ 50.346056][ T4258] RDX: 0000000000000000 RSI: 000020000000e380 RDI: 0000000000000003 [ 50.346068][ T4258] RBP: 00007f2b20a37090 R08: 0000000000000000 R09: 0000000000000000 [ 50.346080][ T4258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 50.346099][ T4258] R13: 00007f2b22256038 R14: 00007f2b22255fa0 R15: 00007ffd30b19068 [ 50.346121][ T4258] [ 50.617838][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.652147][ T28] audit: type=1400 audit(1775330948.722:285): avc: denied { create } for pid=4263 comm="syz.6.201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 50.682470][ T4268] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.691073][ T4268] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.741888][ T4271] __nla_validate_parse: 1 callbacks suppressed [ 50.741906][ T4271] netlink: 4 bytes leftover after parsing attributes in process `syz.2.206'. [ 50.876958][ T28] audit: type=1400 audit(1775330948.942:286): avc: denied { write } for pid=4264 comm="syz.4.208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 52.094264][ T4294] set_capacity_and_notify: 1 callbacks suppressed [ 52.094282][ T4294] loop5: detected capacity change from 0 to 512 [ 52.117539][ T4292] netlink: 'syz.3.211': attribute type 36 has an invalid length. [ 52.146199][ T4292] bridge4: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 52.156231][ T4292] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 52.167952][ T4292] netlink: 'syz.3.211': attribute type 10 has an invalid length. [ 52.237821][ T28] audit: type=1400 audit(1775330950.302:287): avc: denied { getattr } for pid=4301 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=513 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 52.293331][ T28] audit: type=1400 audit(1775330950.342:288): avc: denied { read } for pid=4303 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=513 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 52.326342][ T28] audit: type=1400 audit(1775330950.342:289): avc: denied { open } for pid=4303 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=513 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 52.356603][ T4294] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.389294][ T4294] ext4 filesystem being mounted at /23/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 52.409698][ T28] audit: type=1400 audit(1775330950.482:290): avc: denied { add_name } for pid=4293 comm="syz.5.212" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 52.451699][ T3696] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.513271][ T28] audit: type=1400 audit(1775330950.582:291): avc: denied { create } for pid=4300 comm="dhcpcd-run-hook" name="resolv.conf.eth4.ipv4ll" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 52.567796][ T28] audit: type=1400 audit(1775330950.582:292): avc: denied { write } for pid=4300 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth4.ipv4ll" dev="tmpfs" ino=1884 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 53.468158][ T4371] FAULT_INJECTION: forcing a failure. [ 53.468158][ T4371] name failslab, interval 1, probability 0, space 0, times 0 [ 53.487911][ T4373] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.496723][ T4359] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 53.506547][ T4359] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 53.511804][ T4373] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.527206][ T4371] CPU: 1 UID: 0 PID: 4371 Comm: syz.6.221 Not tainted syzkaller #0 PREEMPT(full) [ 53.527243][ T4371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 53.527254][ T4371] Call Trace: [ 53.527260][ T4371] [ 53.527268][ T4371] __dump_stack+0x1d/0x30 [ 53.527297][ T4371] dump_stack_lvl+0x95/0xd0 [ 53.527348][ T4371] dump_stack+0x15/0x1b [ 53.527374][ T4371] should_fail_ex+0x263/0x280 [ 53.527454][ T4371] should_failslab+0x8c/0xb0 [ 53.527475][ T4371] __kvmalloc_node_noprof+0x155/0x650 [ 53.527574][ T4371] ? bpf_test_run_xdp_live+0x17e/0x1360 [ 53.527616][ T4371] bpf_test_run_xdp_live+0x17e/0x1360 [ 53.527676][ T4371] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 53.527724][ T4371] ? __pfx_autoremove_wake_function+0x10/0x10 [ 53.527764][ T4371] ? mutex_unlock+0x4e/0x90 [ 53.527783][ T4371] ? 0xffffffffa0205240 [ 53.527798][ T4371] ? bpf_dispatcher_change_prog+0x6ec/0x7f0 [ 53.527887][ T4371] ? 0xffffffffa0205240 [ 53.527912][ T4371] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 53.527941][ T4371] bpf_prog_test_run_xdp+0x57b/0xa10 [ 53.528009][ T4371] ? __rcu_read_unlock+0x4e/0x70 [ 53.528033][ T4371] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 53.528062][ T4371] bpf_prog_test_run+0x204/0x340 [ 53.528134][ T4371] __sys_bpf+0x52e/0x7e0 [ 53.528178][ T4371] __x64_sys_bpf+0x41/0x50 [ 53.528199][ T4371] x64_sys_call+0x10cb/0x3020 [ 53.528227][ T4371] do_syscall_64+0x12c/0x370 [ 53.528275][ T4371] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.528299][ T4371] RIP: 0033:0x7fd676ffc819 [ 53.528315][ T4371] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 53.528387][ T4371] RSP: 002b:00007fd675a57028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 53.528470][ T4371] RAX: ffffffffffffffda RBX: 00007fd677275fa0 RCX: 00007fd676ffc819 [ 53.528485][ T4371] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 53.528500][ T4371] RBP: 00007fd675a57090 R08: 0000000000000000 R09: 0000000000000000 [ 53.528516][ T4371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 53.528530][ T4371] R13: 00007fd677276038 R14: 00007fd677275fa0 R15: 00007ffdf21954b8 [ 53.528549][ T4371] [ 53.808675][ T12] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.821662][ T12] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.821700][ T12] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.821790][ T12] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.882088][ T4382] netlink: 12 bytes leftover after parsing attributes in process `syz.6.226'. [ 53.882178][ T4382] netlink: 12 bytes leftover after parsing attributes in process `syz.6.226'. [ 53.989458][ T4385] netlink: 'syz.3.224': attribute type 36 has an invalid length. [ 53.992635][ T4385] bridge5: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 53.992657][ T4385] bridge5: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 53.993531][ T4385] netlink: 'syz.3.224': attribute type 10 has an invalid length. [ 54.926928][ T4389] netlink: 20 bytes leftover after parsing attributes in process `syz.3.228'. [ 54.991643][ T4389] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 54.999039][ T4389] IPv6: NLM_F_CREATE should be set when creating new route [ 55.006448][ T4389] IPv6: NLM_F_CREATE should be set when creating new route [ 55.013648][ T4389] IPv6: NLM_F_CREATE should be set when creating new route [ 55.208878][ T4402] netlink: 4 bytes leftover after parsing attributes in process `syz.3.234'. [ 55.846897][ T4411] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.854100][ T4411] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.912505][ T4411] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 55.923458][ T4411] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 55.997364][ T4411] veth1_vlan: left allmulticast mode [ 56.041336][ T36] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.126035][ T36] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.165963][ T36] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.175362][ T36] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.210334][ T4417] netlink: 12 bytes leftover after parsing attributes in process `syz.6.237'. [ 56.220214][ T4417] netlink: 12 bytes leftover after parsing attributes in process `syz.6.237'. [ 56.236620][ T4420] loop2: detected capacity change from 0 to 2048 [ 56.247435][ T4420] EXT4-fs: dax option not supported [ 56.258925][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 56.258939][ T28] audit: type=1326 audit(1775330954.332:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4419 comm="syz.2.238" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f97221dc819 code=0x0 [ 56.341067][ T4423] netlink: 'syz.4.239': attribute type 36 has an invalid length. [ 56.351797][ T4423] bridge6: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 56.361640][ T4423] bridge6: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 56.373160][ T4423] netlink: 'syz.4.239': attribute type 10 has an invalid length. [ 56.544849][ T4430] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.572668][ T4430] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.703065][ T28] audit: type=1400 audit(1775330954.772:299): avc: denied { ioctl } for pid=4431 comm="syz.6.243" path="socket:[8583]" dev="sockfs" ino=8583 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 56.737531][ T4432] batman_adv: batadv0: Adding interface: ip6gretap1 [ 56.750647][ T4432] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 56.779218][ T4432] batman_adv: batadv0: Interface activated: ip6gretap1 [ 56.801718][ T4436] loop6: detected capacity change from 0 to 512 [ 56.840064][ T4436] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 56.873093][ T4436] EXT4-fs error (device loop6): ext4_orphan_get:1423: comm syz.6.243: bad orphan inode 15 [ 56.932572][ T4436] loop6: lost filesystem error report for type 5 error -117 [ 56.932740][ T4436] ext4_test_bit(bit=14, block=5) = 0 [ 56.940190][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 56.940212][ C0] EXT4-fs (loop6): initial error at time 1775330955: ext4_orphan_get:1423 [ 56.940240][ C0] EXT4-fs (loop6): last error at time 1775330955: ext4_orphan_get:1423 [ 57.017996][ T4436] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.102831][ T4442] loop5: detected capacity change from 0 to 1024 [ 57.138747][ T4447] netlink: 'syz.4.246': attribute type 1 has an invalid length. [ 57.148006][ T4442] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 57.157684][ T4447] netlink: 28 bytes leftover after parsing attributes in process `syz.4.246'. [ 57.167641][ T4447] bond0: entered promiscuous mode [ 57.188959][ T4442] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 57.195920][ T4447] bond0: entered allmulticast mode [ 57.204466][ T4447] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.221344][ T28] audit: type=1400 audit(1775330955.292:300): avc: denied { ioctl } for pid=4451 comm="syz.3.247" path="socket:[8600]" dev="sockfs" ino=8600 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 57.248673][ T4431] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 7987 vs 220 free clusters [ 57.274345][ T4453] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.299163][ T4453] bond0: (slave geneve2): making interface the new active one [ 57.315873][ T4453] geneve2: entered promiscuous mode [ 57.321220][ T4453] geneve2: entered allmulticast mode [ 57.326876][ T4442] EXT4-fs (loop5): orphan cleanup on readonly fs [ 57.335316][ T4455] netlink: 8 bytes leftover after parsing attributes in process `syz.3.247'. [ 57.366662][ T4453] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 57.375350][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 57.375946][ T28] audit: type=1400 audit(1775330955.322:301): avc: denied { map } for pid=4431 comm="syz.6.243" path="/27/file0/file2" dev="loop6" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 57.404518][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 57.423072][ T4442] EXT4-fs error (device loop5): __ext4_get_inode_loc:4797: comm syz.5.244: Invalid inode table block 0 in block_group 0 [ 57.430140][ T4452] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 57.447127][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 57.466067][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 57.485884][ T28] audit: type=1400 audit(1775330955.402:302): avc: denied { setopt } for pid=4451 comm="syz.3.247" lport=17 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 57.491347][ T4442] loop5: lost filesystem error report for type 5 error -117 [ 57.511701][ T4452] block device autoloading is deprecated and will be removed. [ 57.531307][ T4442] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6291: Corrupt filesystem [ 57.535871][ T28] audit: type=1400 audit(1775330955.422:303): avc: denied { getopt } for pid=4451 comm="syz.3.247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 57.540743][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 57.540761][ C1] EXT4-fs (loop5): initial error at time 1775330955: __ext4_get_inode_loc:4797 [ 57.540785][ C1] EXT4-fs (loop5): last error at time 1775330955: __ext4_get_inode_loc:4797 [ 57.560495][ T4442] loop5: lost filesystem error report for type 5 error -117 [ 57.564232][ T4442] EXT4-fs error (device loop5): ext4_quota_write:7415: inode #3: comm syz.5.244: mark_inode_dirty error [ 57.661954][ T4442] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 57.664806][ T4442] Quota error (device loop5): write_blk: dquota write failed [ 57.741987][ T4442] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 57.763879][ T3697] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.825149][ T4442] EXT4-fs error (device loop5): ext4_acquire_dquot:7026: comm syz.5.244: Failed to acquire dquot type 0 [ 57.863001][ T4458] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 57.900816][ T4442] loop5: lost filesystem error report for type 5 error -117 [ 57.901089][ T4442] EXT4-fs error (device loop5): __ext4_get_inode_loc:4797: comm syz.5.244: Invalid inode table block 0 in block_group 0 [ 57.956391][ T4442] loop5: lost filesystem error report for type 5 error -117 [ 57.956562][ T4442] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6291: Corrupt filesystem [ 57.992834][ T4442] loop5: lost filesystem error report for type 5 error -117 [ 57.992959][ T4442] EXT4-fs error (device loop5): ext4_ext_truncate:4557: inode #15: comm syz.5.244: mark_inode_dirty error [ 58.032068][ T4442] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 58.032273][ T4442] EXT4-fs error (device loop5): __ext4_get_inode_loc:4797: comm syz.5.244: Invalid inode table block 0 in block_group 0 [ 58.084308][ T4460] netlink: 92 bytes leftover after parsing attributes in process `syz.4.249'. [ 58.094250][ T4442] loop5: lost filesystem error report for type 5 error -117 [ 58.094359][ T4442] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6291: Corrupt filesystem [ 58.151615][ T4442] loop5: lost filesystem error report for type 5 error -117 [ 58.151755][ T4442] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 58.191787][ T4442] loop5: lost filesystem error report for type 5 error -117 [ 58.191921][ T4442] EXT4-fs error (device loop5): __ext4_get_inode_loc:4797: comm syz.5.244: Invalid inode table block 0 in block_group 0 [ 58.212371][ T4461] netlink: 8 bytes leftover after parsing attributes in process `syz.4.249'. [ 58.221639][ T4461] netlink: 'syz.4.249': attribute type 4 has an invalid length. [ 58.227509][ T4442] loop5: lost filesystem error report for type 5 error -117 [ 58.229600][ T4461] netlink: 8 bytes leftover after parsing attributes in process `syz.4.249'. [ 58.246146][ T4442] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6291: Corrupt filesystem [ 58.263101][ T4442] EXT4-fs error (device loop5): ext4_truncate:4602: inode #15: comm syz.5.244: mark_inode_dirty error [ 58.286885][ T4442] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 58.287023][ T4442] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 58.346494][ T4442] EXT4-fs (loop5): 1 truncate cleaned up [ 58.356671][ T4442] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 58.369417][ T4461] RDS: rds_bind could not find a transport for ::ffff:172.30.1.5, load rds_tcp or rds_rdma? [ 58.388770][ T4461] loop4: detected capacity change from 0 to 512 [ 58.411779][ T4461] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.425934][ T4461] ext4 filesystem being mounted at /48/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.455334][ T4461] SELinux: Context system_u:object_r: is not valid (left unmapped). [ 58.470201][ T28] audit: type=1400 audit(1775330956.542:304): avc: denied { relabelto } for pid=4459 comm="syz.4.249" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:" [ 58.499643][ T4461] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 58.556773][ T4466] loop3: detected capacity change from 0 to 2048 [ 58.563718][ T4466] EXT4-fs: quotafile must be on filesystem root [ 58.587068][ T28] audit: type=1326 audit(1775330956.662:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4465 comm="syz.3.250" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fca7e72c819 code=0x0 [ 58.643272][ T4467] loop3: detected capacity change from 0 to 1024 [ 58.651120][ T4467] EXT4-fs: Ignoring removed nomblk_io_submit option [ 58.681377][ T4469] netlink: 4 bytes leftover after parsing attributes in process `syz.6.251'. [ 58.729210][ T4467] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.843083][ T3696] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.078951][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.096743][ T4476] loop6: detected capacity change from 0 to 512 [ 59.109083][ T4476] EXT4-fs: Ignoring removed nobh option [ 59.123525][ T4476] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 59.258928][ T4481] netlink: 'syz.5.256': attribute type 36 has an invalid length. [ 59.269685][ T4481] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 59.279573][ T4481] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 59.293223][ T4481] netlink: 'syz.5.256': attribute type 10 has an invalid length. [ 59.301078][ T4481] macvlan1: entered allmulticast mode [ 59.306730][ T4481] veth1_vlan: entered allmulticast mode [ 59.313156][ T4481] team0: Port device macvlan1 added [ 59.346443][ T4476] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.433106][ T4476] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.500115][ T4489] loop4: detected capacity change from 0 to 1024 [ 59.512489][ T4476] EXT4-fs error (device loop6): ext4_find_dest_de:2050: inode #2: block 3: comm syz.6.254: bad entry in directory: inode out of bounds - offset=92, inode=117440528, rec_len=16, size=2048 fake=0 [ 59.548242][ T4491] netlink: 4 bytes leftover after parsing attributes in process `syz.5.259'. [ 59.586066][ T4489] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.659843][ T3697] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.687589][ T4496] netlink: 4 bytes leftover after parsing attributes in process `syz.5.260'. [ 59.783515][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.909816][ T4506] loop4: detected capacity change from 0 to 512 [ 59.953923][ T4506] ext3: Unknown parameter 'subj_type' [ 60.017319][ T4513] loop5: detected capacity change from 0 to 512 [ 60.071598][ T4515] loop4: detected capacity change from 0 to 512 [ 60.093101][ T4513] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.133640][ T4515] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.159063][ T4513] ext4 filesystem being mounted at /37/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 60.181237][ T4515] ext4 filesystem being mounted at /52/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 60.208758][ T3696] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.257136][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.401948][ T4525] loop4: detected capacity change from 0 to 512 [ 60.431614][ T4525] EXT4-fs: dax option not supported [ 60.628625][ T4531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.651048][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.676151][ T4531] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.752613][ T36] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 60.776013][ T36] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 60.784982][ T36] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 60.829993][ T36] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 60.849175][ T4542] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8840c01c, mo2=0002] [ 60.876700][ T4542] EXT4-fs (loop4): orphan cleanup on readonly fs [ 60.887483][ T4542] EXT4-fs warning (device loop4): ext4_enable_quotas:7261: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 60.914680][ T4542] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 60.925974][ T4542] EXT4-fs error (device loop4): ext4_ext_check_inode:521: inode #13: comm syz.4.277: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 60.965962][ T4542] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 60.968358][ T4542] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.277: couldn't read orphan inode 13 (err -117) [ 60.977554][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 60.977573][ C1] EXT4-fs (loop4): last error at time 1775330959: ext4_ext_check_inode:521: inode 13 [ 61.021937][ T4551] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.035036][ T4542] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 61.056024][ T4551] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.079368][ T3755] kernel read not supported for file / (pid: 3755 comm: kworker/0:4) [ 61.099940][ T3696] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.119190][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.261622][ T4561] __nla_validate_parse: 5 callbacks suppressed [ 61.261657][ T4561] netlink: 277 bytes leftover after parsing attributes in process `syz.5.281'. [ 61.278933][ T4561] hub 8-0:1.0: USB hub found [ 61.284142][ T4561] hub 8-0:1.0: 8 ports detected [ 61.297446][ T4561] netlink: 'syz.5.281': attribute type 36 has an invalid length. [ 61.334296][ T4561] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 61.344289][ T4561] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 61.358549][ T4561] netlink: 'syz.5.281': attribute type 10 has an invalid length. [ 61.372443][ T4561] veth1_vlan: left allmulticast mode [ 61.421834][ T70] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 61.432922][ T4561] EXT4-fs warning (device loop5): read_mmp_block:111: Error -117 while reading MMP block 0 [ 61.523761][ T70] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 61.607265][ T70] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 61.654355][ T70] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 61.759875][ T4566] iso9660: Unknown parameter 'hixe' [ 61.784564][ T12] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 61.820719][ T12] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 61.832332][ T12] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 61.843305][ T12] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 62.232188][ T4571] netlink: 4 bytes leftover after parsing attributes in process `syz.5.284'. [ 62.539041][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 62.539058][ T28] audit: type=1400 audit(1775330960.612:313): avc: denied { create } for pid=4576 comm="syz.5.287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 62.589110][ T28] audit: type=1400 audit(1775330960.612:314): avc: denied { ioctl } for pid=4576 comm="syz.5.287" path="socket:[8904]" dev="sockfs" ino=8904 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 62.662322][ T4585] set_capacity_and_notify: 4 callbacks suppressed [ 62.662339][ T4585] loop5: detected capacity change from 0 to 256 [ 62.802707][ T4599] loop3: detected capacity change from 0 to 1024 [ 62.826138][ T4599] ext4: Unknown parameter 'fsuuid' [ 62.852400][ T4589] : renamed from vlan0 [ 62.913444][ T4610] loop4: detected capacity change from 0 to 1024 [ 62.932653][ T4610] EXT4-fs: inline encryption not supported [ 62.957394][ T4610] EXT4-fs (loop4): stripe (6) is not aligned with cluster size (16), stripe is disabled [ 62.999340][ T4610] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.029094][ T4605] loop5: detected capacity change from 0 to 164 [ 63.049763][ T4605] iso9660: Unknown parameter 'nojo"ꈅcorn' [ 63.201852][ T28] audit: type=1400 audit(1775330961.262:315): avc: denied { link } for pid=4572 comm="syz.4.286" name="file4" dev="loop4" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 63.367370][ T4650] loop3: detected capacity change from 0 to 164 [ 63.394534][ T4650] iso9660: Unknown parameter 'nojo"ꈅcorn' [ 63.468414][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.676062][ T28] audit: type=1326 audit(1775330961.732:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4683 comm="syz.6.298" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd676ffc819 code=0x0 [ 63.760226][ T4688] netlink: 'syz.2.297': attribute type 36 has an invalid length. [ 63.773157][ T4688] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 63.783017][ T4688] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 63.796180][ T4688] netlink: 'syz.2.297': attribute type 10 has an invalid length. [ 63.804404][ T4688] macvlan1: entered allmulticast mode [ 63.812712][ T4688] veth1_vlan: entered allmulticast mode [ 63.822025][ T4688] team0: Port device macvlan1 added [ 63.971691][ T4689] netlink: 4 bytes leftover after parsing attributes in process `syz.6.298'. [ 64.440704][ T28] audit: type=1400 audit(1775330962.512:317): avc: denied { mounton } for pid=4692 comm="syz.2.301" path="/60/file0" dev="tmpfs" ino=330 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 64.475337][ T4696] netlink: 212 bytes leftover after parsing attributes in process `syz.6.302'. [ 64.492325][ T4697] netlink: 76 bytes leftover after parsing attributes in process `syz.2.301'. [ 64.515151][ T4696] netlink: 8 bytes leftover after parsing attributes in process `syz.6.302'. [ 64.524103][ T28] audit: type=1400 audit(1775330962.512:318): avc: denied { read } for pid=4692 comm="syz.2.301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 64.534904][ T4696] netlink: 8 bytes leftover after parsing attributes in process `syz.6.302'. [ 64.553380][ T4696] netlink: 44 bytes leftover after parsing attributes in process `syz.6.302'. [ 64.600666][ T28] audit: type=1400 audit(1775330962.672:319): avc: denied { create } for pid=4695 comm="syz.6.302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 64.601192][ T4696] netlink: 8 bytes leftover after parsing attributes in process `syz.6.302'. [ 64.873133][ T28] audit: type=1400 audit(1775330962.942:320): avc: denied { ioctl } for pid=4726 comm="syz.3.313" path="socket:[8090]" dev="sockfs" ino=8090 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 64.946964][ T28] audit: type=1400 audit(1775330962.972:321): avc: denied { bind } for pid=4724 comm="syz.5.314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 64.972019][ T4732] netlink: 'syz.6.312': attribute type 36 has an invalid length. [ 64.988525][ T4732] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 64.998539][ T4732] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 65.011764][ T4732] netlink: 'syz.6.312': attribute type 10 has an invalid length. [ 65.020915][ T28] audit: type=1400 audit(1775330962.972:322): avc: denied { read append } for pid=4726 comm="syz.3.313" name="file0" dev="tmpfs" ino=398 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 65.044511][ T4731] netlink: 'syz.3.315': attribute type 41 has an invalid length. [ 65.089947][ T4733] netlink: 'syz.2.311': attribute type 36 has an invalid length. [ 65.191934][ T4734] netlink: 'syz.2.311': attribute type 10 has an invalid length. [ 65.287960][ T4731] loop3: detected capacity change from 0 to 512 [ 65.472682][ T4733] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 65.483296][ T4733] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 65.552593][ T4734] veth1_vlan: left allmulticast mode [ 65.670907][ T4742] Cannot find add_set index 2 as target [ 66.430991][ T4751] loop3: detected capacity change from 0 to 512 [ 66.491275][ T4751] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.557152][ T4751] ext4 filesystem being mounted at /74/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.617825][ T4751] FAULT_INJECTION: forcing a failure. [ 66.617825][ T4751] name failslab, interval 1, probability 0, space 0, times 0 [ 66.633247][ T4758] loop6: detected capacity change from 0 to 2048 [ 66.664364][ T4751] CPU: 1 UID: 0 PID: 4751 Comm: syz.3.320 Not tainted syzkaller #0 PREEMPT(full) [ 66.664393][ T4751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 66.664478][ T4751] Call Trace: [ 66.664485][ T4751] [ 66.664493][ T4751] __dump_stack+0x1d/0x30 [ 66.664519][ T4751] dump_stack_lvl+0x95/0xd0 [ 66.664545][ T4751] dump_stack+0x15/0x1b [ 66.664571][ T4751] should_fail_ex+0x263/0x280 [ 66.664627][ T4751] should_failslab+0x8c/0xb0 [ 66.664651][ T4751] kmem_cache_alloc_noprof+0x66/0x400 [ 66.664729][ T4751] ? security_inode_alloc+0x37/0x100 [ 66.664763][ T4751] security_inode_alloc+0x37/0x100 [ 66.664813][ T4751] inode_init_always_gfp+0x4b7/0x500 [ 66.664904][ T4751] ? __pfx_ext4_alloc_inode+0x10/0x10 [ 66.664934][ T4751] alloc_inode+0x58/0x170 [ 66.664960][ T4751] iget_locked+0x101/0x440 [ 66.664991][ T4751] __ext4_iget+0x152/0x23f0 [ 66.665045][ T4751] ? kmem_cache_alloc_lru_noprof+0x1eb/0x410 [ 66.665072][ T4751] ? __d_alloc+0x37/0x340 [ 66.665108][ T4751] ext4_lookup+0x173/0x3a0 [ 66.665157][ T4751] lookup_one_qstr_excl+0xcb/0x250 [ 66.665185][ T4751] __start_renaming+0x13f/0x2a0 [ 66.665259][ T4751] filename_renameat2+0x2d0/0x6e0 [ 66.665289][ T4751] __se_sys_renameat2+0x4f/0x1c0 [ 66.665342][ T4751] __x64_sys_renameat2+0x67/0x80 [ 66.665372][ T4751] x64_sys_call+0x2a12/0x3020 [ 66.665403][ T4751] do_syscall_64+0x12c/0x370 [ 66.665499][ T4751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.665560][ T4751] RIP: 0033:0x7fca7e72c819 [ 66.665579][ T4751] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 66.665600][ T4751] RSP: 002b:00007fca7d17f028 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 66.665625][ T4751] RAX: ffffffffffffffda RBX: 00007fca7e9a5fa0 RCX: 00007fca7e72c819 [ 66.665723][ T4751] RDX: 0000000000000004 RSI: 0000200000000480 RDI: ffffffffffffff9c [ 66.665739][ T4751] RBP: 00007fca7d17f090 R08: 0000000000000002 R09: 0000000000000000 [ 66.665755][ T4751] R10: 00002000000004c0 R11: 0000000000000246 R12: 0000000000000001 [ 66.665770][ T4751] R13: 00007fca7e9a6038 R14: 00007fca7e9a5fa0 R15: 00007ffc67835538 [ 66.665791][ T4751] [ 67.216388][ T4758] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.411708][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.496647][ T3697] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.506641][ T4769] loop3: detected capacity change from 0 to 512 [ 67.527341][ T4768] loop5: detected capacity change from 0 to 1024 [ 67.534525][ T4768] EXT4-fs: Ignoring removed bh option [ 67.568212][ T4769] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.642906][ T4769] netlink: 4556 bytes leftover after parsing attributes in process `syz.3.325'. [ 67.761887][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 67.761917][ T28] audit: type=1400 audit(1775330965.832:326): avc: denied { setopt } for pid=4770 comm="syz.4.327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 68.000022][ T4768] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.145528][ T4768] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.174071][ T4769] EXT4-fs (loop3): shut down requested (2) [ 68.196244][ T4769] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 68.205227][ T4769] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 68.223205][ T4769] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 68.232949][ T28] audit: type=1400 audit(1775330966.302:327): avc: denied { remove_name } for pid=4767 comm="syz.3.325" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 68.279949][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.280662][ T4791] netlink: 8 bytes leftover after parsing attributes in process `syz.5.324'. [ 68.298061][ T4791] openvswitch: netlink: Flow key attr not present in new flow. [ 68.305698][ T28] audit: type=1400 audit(1775330966.302:328): avc: denied { rmdir } for pid=4767 comm="syz.3.325" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 68.397023][ T4797] netlink: 68 bytes leftover after parsing attributes in process `syz.4.333'. [ 68.456150][ T4800] loop3: detected capacity change from 0 to 512 [ 68.474416][ T4802] loop4: detected capacity change from 0 to 1024 [ 68.483710][ T4802] EXT4-fs: test_dummy_encryption option not supported [ 68.576043][ T4800] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.600183][ T4800] ext4 filesystem being mounted at /77/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.830890][ T4814] loop4: detected capacity change from 0 to 512 [ 68.895541][ T4814] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 68.968732][ T10] IPVS: starting estimator thread 0... [ 69.066050][ T4820] IPVS: using max 2304 ests per chain, 115200 per kthread [ 69.246287][ T4653] EXT4-fs error (device loop5): ext4_map_blocks:828: inode #15: comm kworker/u8:12: lblock 0 mapped to illegal pblock 0 (length 6) [ 69.630946][ T4653] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 69.746122][ T4653] EXT4-fs (loop5): This should not happen!! Data will be lost [ 69.746122][ T4653] [ 69.799203][ T4882] EXT4-fs error (device loop5): ext4_map_blocks:828: inode #15: block 8: comm kworker/u8:19: lblock 8 mapped to illegal pblock 8 (length 8) [ 69.852224][ T4893] capability: warning: `syz.6.341' uses deprecated v2 capabilities in a way that may be insecure [ 69.873085][ T4882] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 69.917348][ T4882] EXT4-fs (loop5): This should not happen!! Data will be lost [ 69.917348][ T4882] [ 69.947792][ T3696] EXT4-fs warning (device loop5): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 70.467058][ T28] audit: type=1400 audit(1775330968.532:329): avc: denied { rename } for pid=4799 comm="syz.3.334" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 70.512781][ T28] audit: type=1400 audit(1775330968.532:330): avc: denied { reparent } for pid=4799 comm="syz.3.334" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 70.535358][ T28] audit: type=1400 audit(1775330968.532:331): avc: denied { remove_name } for pid=4799 comm="syz.3.334" name="bus" dev="loop3" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 70.588501][ T28] audit: type=1400 audit(1775330968.532:332): avc: denied { rename } for pid=4799 comm="syz.3.334" name="bus" dev="loop3" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 70.628724][ T28] audit: type=1400 audit(1775330968.532:333): avc: denied { rmdir } for pid=4799 comm="syz.3.334" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 71.201432][ T4909] netlink: 8 bytes leftover after parsing attributes in process `syz.4.348'. [ 71.226272][ T28] audit: type=1326 audit(1775330969.292:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4913 comm="syz.5.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b21fdc819 code=0x7ffc0000 [ 71.358814][ T4926] netlink: 4 bytes leftover after parsing attributes in process `syz.6.351'. [ 71.383942][ T28] audit: type=1326 audit(1775330969.292:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4913 comm="syz.5.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b21fdc819 code=0x7ffc0000 [ 71.539395][ T4933] netlink: 32 bytes leftover after parsing attributes in process `syz.2.355'. [ 71.548646][ T4933] netlink: 8 bytes leftover after parsing attributes in process `syz.2.355'. [ 71.563796][ T4939] loop5: detected capacity change from 0 to 512 [ 71.581213][ T4939] ext4: Unknown parameter 'noacl' [ 71.612325][ T4943] 9p: Bad value for 'rfdno' [ 71.638726][ T4943] netlink: 12 bytes leftover after parsing attributes in process `syz.6.359'. [ 71.731804][ T4951] loop2: detected capacity change from 0 to 512 [ 71.810625][ T4961] loop5: detected capacity change from 0 to 512 [ 71.828355][ T4961] EXT4-fs: Ignoring removed nobh option [ 71.836953][ T4961] EXT4-fs warning (device loop5): ext4_init_metadata_csum:4673: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 71.852425][ T3300] udevd[3300]: incorrect ext4 checksum on /dev/loop5 [ 71.872730][ T4961] EXT4-fs (loop5): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 71.883997][ T3300] udevd[3300]: incorrect ext4 checksum on /dev/loop5 [ 71.938375][ T4975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.948772][ T4975] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.958536][ T4975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.967920][ T4975] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.978268][ T4972] EXT4-fs error (device loop2): ext4_validate_block_bitmap:423: comm ext4lazyinit: bg 0: bad block bitmap checksum [ 71.992552][ T4951] EXT4-fs (loop2): shut down requested (2) [ 72.002432][ T4951] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 72.011710][ T4951] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 74.675902][ T5019] netlink: 'syz.4.378': attribute type 36 has an invalid length. [ 74.689164][ T5019] bridge7: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 74.699225][ T5019] bridge7: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 74.719862][ T5019] netlink: 'syz.4.378': attribute type 10 has an invalid length. [ 75.529473][ T5024] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=5024 comm=syz.5.385 [ 77.208382][ T5037] loop3: detected capacity change from 0 to 512 [ 77.410291][ T5046] loop5: detected capacity change from 0 to 1024 [ 77.420937][ T5050] loop2: detected capacity change from 0 to 512 [ 77.436660][ T5046] EXT4-fs: test_dummy_encryption option not supported [ 78.636422][ T5064] loop5: detected capacity change from 0 to 512 [ 79.607665][ T5069] loop6: detected capacity change from 0 to 512 [ 79.618289][ T5068] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 79.960144][ T5069] ext4: Unknown parameter 'appraise' [ 79.986701][ T5064] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 81.172537][ T28] kauditd_printk_skb: 29 callbacks suppressed [ 81.172628][ T28] audit: type=1400 audit(1775330979.242:365): avc: denied { write } for pid=5078 comm="syz.5.402" lport=56164 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 81.202898][ T28] audit: type=1400 audit(1775330979.252:366): avc: denied { setopt } for pid=5078 comm="syz.5.402" lport=56164 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 81.241811][ T28] audit: type=1400 audit(1775330979.252:367): avc: denied { create } for pid=5078 comm="syz.5.402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 81.262309][ T28] audit: type=1400 audit(1775330979.252:368): avc: denied { bind } for pid=5078 comm="syz.5.402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 81.341221][ T28] audit: type=1400 audit(1775330979.402:369): avc: denied { connect } for pid=5076 comm="syz.3.401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 81.518630][ T28] audit: type=1400 audit(1775330979.572:370): avc: denied { allowed } for pid=5085 comm="syz.5.403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 81.636407][ T5089] serio: Serial port ttyS3 [ 81.660148][ T28] audit: type=1400 audit(1775330979.732:371): avc: denied { create } for pid=5085 comm="syz.5.403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 81.842277][ T5088] loop5: detected capacity change from 0 to 128 [ 82.168947][ T5088] loop5: detected capacity change from 0 to 512 [ 82.339949][ T5088] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 82.980949][ T5088] EXT4-fs (loop5): can't mount with journal_checksum, fs mounted w/o journal [ 83.059331][ T5102] loop4: detected capacity change from 0 to 1024 [ 83.086661][ T5102] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869) [ 83.146685][ T5102] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 83.173959][ T5101] netlink: 32 bytes leftover after parsing attributes in process `syz.6.408'. [ 83.183390][ T5102] EXT4-fs (loop4): invalid journal inode [ 83.201169][ T5101] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2048 sclass=netlink_route_socket pid=5101 comm=syz.6.408 [ 83.852248][ T5109] netlink: 'syz.6.410': attribute type 36 has an invalid length. [ 83.863038][ T5109] bridge4: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 83.872908][ T5109] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 83.886783][ T5109] netlink: 'syz.6.410': attribute type 10 has an invalid length. [ 84.082705][ T5112] netlink: 8 bytes leftover after parsing attributes in process `syz.3.409'. [ 84.240844][ T5102] loop4: detected capacity change from 0 to 1024 [ 84.257705][ T5102] EXT4-fs: inline encryption not supported [ 84.298620][ T5102] EXT4-fs (loop4): bad geometry: bigalloc file system with non-zero first_data_block [ 84.298620][ T5102] [ 84.369999][ T28] audit: type=1400 audit(1775330982.442:372): avc: denied { read write } for pid=5114 comm="syz.5.412" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 84.398090][ T28] audit: type=1400 audit(1775330982.462:373): avc: denied { open } for pid=5114 comm="syz.5.412" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 84.398124][ T28] audit: type=1400 audit(1775330982.472:374): avc: denied { mount } for pid=5114 comm="syz.5.412" name="/" dev="autofs" ino=9618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 84.563499][ T5129] loop2: detected capacity change from 0 to 512 [ 84.572834][ T5129] ext3: Unknown parameter 'dax2uid<00000000000000000000' [ 84.701169][ T5136] netlink: 16 bytes leftover after parsing attributes in process `syz.2.418'. [ 84.749057][ T5138] netlink: 'syz.6.420': attribute type 36 has an invalid length. [ 84.765318][ T5138] bridge5: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 84.775278][ T5138] bridge5: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 84.789860][ T5138] netlink: 'syz.6.420': attribute type 10 has an invalid length. [ 84.955342][ T5141] loop4: detected capacity change from 0 to 1024 [ 84.998365][ T5141] EXT4-fs mount: 4 callbacks suppressed [ 84.998437][ T5141] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.207334][ T5141] EXT4-fs error (device loop4) in ext4_setattr:6028: error 28 [ 85.381803][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.527225][ T5160] netlink: 24 bytes leftover after parsing attributes in process `syz.6.427'. [ 85.627142][ T5154] loop4: detected capacity change from 0 to 128 [ 85.665621][ T5154] netlink: 28 bytes leftover after parsing attributes in process `syz.4.425'. [ 85.674716][ T5154] netlink: 28 bytes leftover after parsing attributes in process `syz.4.425'. [ 85.702075][ T5164] tc_dump_action: action bad kind [ 86.254396][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 86.254480][ T28] audit: type=1400 audit(1775330984.322:384): avc: denied { write } for pid=5182 comm="syz.4.435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 86.423272][ T5185] loop3: detected capacity change from 0 to 1024 [ 86.453273][ T5185] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.570579][ T5195] netlink: 'syz.6.437': attribute type 36 has an invalid length. [ 86.582047][ T5195] bridge6: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 86.591922][ T5195] bridge6: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 86.603534][ T5195] netlink: 'syz.6.437': attribute type 10 has an invalid length. [ 86.644313][ T5183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.668411][ T5183] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.951723][ T28] audit: type=1400 audit(1775330984.992:385): avc: denied { bind } for pid=5200 comm="syz.5.439" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 87.093360][ T5203] loop5: detected capacity change from 0 to 512 [ 87.136450][ T5203] EXT4-fs: Ignoring removed nobh option [ 87.182945][ T28] audit: type=1400 audit(1775330985.242:386): avc: denied { create } for pid=5182 comm="syz.4.435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 87.216785][ T28] audit: type=1400 audit(1775330985.242:387): avc: denied { write } for pid=5182 comm="syz.4.435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 88.098179][ T5203] EXT4-fs (loop5): orphan cleanup on readonly fs [ 88.131191][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.273036][ T5203] EXT4-fs warning (device loop5): ext4_xattr_inode_get:560: inode #11: comm syz.5.439: EA inode hash validation failed [ 88.289901][ T5203] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 88.303423][ T5203] EXT4-fs error (device loop5): ext4_do_update_inode:5602: inode #15: comm syz.5.439: corrupted inode contents [ 88.315375][ T5203] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 88.315653][ T5203] EXT4-fs error (device loop5): ext4_dirty_inode:6495: inode #15: comm syz.5.439: mark_inode_dirty error [ 88.324825][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 88.324847][ C1] EXT4-fs (loop5): initial error at time 1775330986: ext4_do_update_inode:5602: inode 15 [ 88.324880][ C1] EXT4-fs (loop5): last error at time 1775330986: ext4_do_update_inode:5602: inode 15 [ 88.362719][ T5203] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 88.363004][ T5203] EXT4-fs error (device loop5): ext4_do_update_inode:5602: inode #15: comm syz.5.439: corrupted inode contents [ 88.385693][ T5203] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 88.385919][ T5203] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2999: inode #15: comm syz.5.439: mark_inode_dirty error [ 88.407156][ T5203] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 88.407353][ T5203] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3002: inode #15: comm syz.5.439: mark inode dirty (error -117) [ 88.429687][ T5203] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 88.430064][ T5203] EXT4-fs warning (device loop5): ext4_evict_inode:285: xattr delete (err -117) [ 88.448846][ T5203] EXT4-fs (loop5): 1 orphan inode deleted [ 88.455076][ T5203] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 88.479523][ T5201] netlink: 96 bytes leftover after parsing attributes in process `syz.5.439'. [ 88.504222][ T3696] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.523490][ T28] audit: type=1400 audit(1775330986.552:388): avc: denied { getopt } for pid=5200 comm="syz.5.439" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 88.838367][ T5224] netlink: 28 bytes leftover after parsing attributes in process `syz.5.446'. [ 88.870658][ T5219] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=5219 comm=syz.4.445 [ 88.916203][ T5210] netlink: 8 bytes leftover after parsing attributes in process `syz.2.443'. [ 88.932379][ T5234] netlink: 8 bytes leftover after parsing attributes in process `syz.5.448'. [ 88.982394][ T5219] loop4: detected capacity change from 0 to 512 [ 88.995712][ T5237] loop5: detected capacity change from 0 to 256 [ 89.074883][ T28] audit: type=1400 audit(1775330987.142:389): avc: denied { bind } for pid=5241 comm="syz.2.453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 89.109086][ T5237] FAT-fs (loop5): Directory bread(block 64) failed [ 89.125232][ T28] audit: type=1400 audit(1775330987.142:390): avc: denied { listen } for pid=5241 comm="syz.2.453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 89.135536][ T5237] FAT-fs (loop5): Directory bread(block 65) failed [ 89.154932][ T5219] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 89.168418][ T28] audit: type=1400 audit(1775330987.152:391): avc: denied { ioctl } for pid=5241 comm="syz.2.453" path="socket:[10736]" dev="sockfs" ino=10736 ioctlcmd=0x89f3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 89.285914][ T5237] FAT-fs (loop5): Directory bread(block 66) failed [ 89.295729][ T5237] FAT-fs (loop5): Directory bread(block 67) failed [ 89.308360][ T5249] netlink: 'syz.6.454': attribute type 36 has an invalid length. [ 89.325480][ T5249] bridge7: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 89.335534][ T5249] bridge7: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 89.349796][ T5249] netlink: 'syz.6.454': attribute type 10 has an invalid length. [ 89.364716][ T5219] EXT4-fs (loop4): orphan cleanup on readonly fs [ 89.397464][ T5237] FAT-fs (loop5): Directory bread(block 68) failed [ 89.497693][ T5237] FAT-fs (loop5): Directory bread(block 69) failed [ 89.564789][ T5237] FAT-fs (loop5): Directory bread(block 70) failed [ 89.613414][ T5237] FAT-fs (loop5): Directory bread(block 71) failed [ 89.624444][ T5219] EXT4-fs error (device loop4): ext4_do_update_inode:5602: inode #16: comm syz.4.445: corrupted inode contents [ 89.658404][ T5237] FAT-fs (loop5): Directory bread(block 72) failed [ 89.683053][ T5237] FAT-fs (loop5): Directory bread(block 73) failed [ 89.691825][ T5219] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 89.699054][ T5219] EXT4-fs (loop4): Remounting filesystem read-only [ 89.709330][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 89.709609][ C1] EXT4-fs (loop4): initial error at time 1775330987: ext4_do_update_inode:5602: inode 16 [ 89.709992][ C1] EXT4-fs (loop4): last error at time 1775330987: ext4_do_update_inode:5602: inode 16 [ 89.786704][ T5219] EXT4-fs (loop4): 1 truncate cleaned up [ 89.803482][ T821] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 89.815881][ T821] Quota error (device loop4): write_blk: dquota write failed [ 89.835848][ T821] Quota error (device loop4): remove_free_dqentry: Can't write block (5) with free entries [ 89.867356][ T821] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 89.899106][ T821] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 89.961366][ T5262] loop5: detected capacity change from 0 to 512 [ 90.002004][ T5262] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 90.022994][ T5219] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 90.052793][ T5268] loop3: detected capacity change from 0 to 512 [ 90.073527][ T5262] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.117183][ T5262] ext4 filesystem being mounted at /68/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 90.123141][ T5268] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 90.143239][ T5272] FAULT_INJECTION: forcing a failure. [ 90.143239][ T5272] name failslab, interval 1, probability 0, space 0, times 0 [ 90.188702][ T5272] CPU: 1 UID: 0 PID: 5272 Comm: syz.2.462 Not tainted syzkaller #0 PREEMPT(full) [ 90.188731][ T5272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 90.188742][ T5272] Call Trace: [ 90.188791][ T5272] [ 90.188801][ T5272] __dump_stack+0x1d/0x30 [ 90.188833][ T5272] dump_stack_lvl+0x95/0xd0 [ 90.188860][ T5272] dump_stack+0x15/0x1b [ 90.188881][ T5272] should_fail_ex+0x263/0x280 [ 90.188974][ T5272] should_failslab+0x8c/0xb0 [ 90.189010][ T5272] __kvmalloc_node_noprof+0x155/0x650 [ 90.189042][ T5272] ? page_pool_create_percpu+0x223/0x640 [ 90.189074][ T5272] page_pool_create_percpu+0x223/0x640 [ 90.189177][ T5272] page_pool_create+0x1a/0x30 [ 90.189241][ T5272] bpf_test_run_xdp_live+0x1a8/0x1360 [ 90.189348][ T5272] ? __pfx_autoremove_wake_function+0x10/0x10 [ 90.189387][ T5272] ? mutex_unlock+0x4e/0x90 [ 90.189420][ T5272] ? 0xffffffffa0205240 [ 90.189439][ T5272] ? bpf_dispatcher_change_prog+0x6ec/0x7f0 [ 90.189491][ T5272] ? 0xffffffffa0205240 [ 90.189517][ T5272] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 90.189541][ T5272] bpf_prog_test_run_xdp+0x57b/0xa10 [ 90.189581][ T5272] ? __rcu_read_unlock+0x4e/0x70 [ 90.189638][ T5272] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 90.189672][ T5272] bpf_prog_test_run+0x204/0x340 [ 90.189707][ T5272] __sys_bpf+0x52e/0x7e0 [ 90.189736][ T5272] __x64_sys_bpf+0x41/0x50 [ 90.189820][ T5272] x64_sys_call+0x10cb/0x3020 [ 90.189845][ T5272] do_syscall_64+0x12c/0x370 [ 90.189874][ T5272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.189955][ T5272] RIP: 0033:0x7f97221dc819 [ 90.189969][ T5272] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 90.189986][ T5272] RSP: 002b:00007f9720c37028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 90.190016][ T5272] RAX: ffffffffffffffda RBX: 00007f9722455fa0 RCX: 00007f97221dc819 [ 90.190079][ T5272] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 90.190095][ T5272] RBP: 00007f9720c37090 R08: 0000000000000000 R09: 0000000000000000 [ 90.190110][ T5272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 90.190125][ T5272] R13: 00007f9722456038 R14: 00007f9722455fa0 R15: 00007ffc8fec6738 [ 90.190145][ T5272] [ 90.190772][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.205991][ T5272] page_pool_create_percpu() gave up with errno -12 [ 90.269686][ T5277] netlink: 20 bytes leftover after parsing attributes in process `syz.6.465'. [ 90.312475][ T5268] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 90.460711][ T5262] EXT4-fs error (device loop5): ext4_lookup:1785: inode #12: comm syz.5.459: iget: bad i_size value: 2533274857506816 [ 90.473936][ T5268] System zones: 1-12 [ 90.484611][ T5268] EXT4-fs (loop3): 1 truncate cleaned up [ 90.491550][ T5268] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.547787][ T5287] loop6: detected capacity change from 0 to 1024 [ 90.589400][ T10] IPVS: starting estimator thread 0... [ 90.601839][ T5290] loop2: detected capacity change from 0 to 512 [ 90.613983][ T3696] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.614264][ T5290] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 90.648525][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.658507][ T5290] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 90.705993][ T5289] IPVS: using max 2304 ests per chain, 115200 per kthread [ 90.744657][ T5290] EXT4-fs (loop2): 1 truncate cleaned up [ 90.808535][ T5300] netlink: 'syz.4.470': attribute type 36 has an invalid length. [ 90.823842][ T5300] bridge8: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 90.833839][ T5300] bridge8: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 90.847792][ T5300] netlink: 'syz.4.470': attribute type 10 has an invalid length. [ 90.858691][ T5290] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.934510][ T5287] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.343291][ T3697] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.363979][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.461792][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 91.461811][ T28] audit: type=1400 audit(1775330989.522:392): avc: denied { ioctl } for pid=5305 comm="syz.2.474" path="socket:[10860]" dev="sockfs" ino=10860 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 91.529917][ T5313] netlink: 32 bytes leftover after parsing attributes in process `syz.6.475'. [ 91.549314][ T28] audit: type=1400 audit(1775330989.572:393): avc: denied { getopt } for pid=5305 comm="syz.2.474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 91.565298][ T5314] loop5: detected capacity change from 0 to 256 [ 91.608219][ T28] audit: type=1400 audit(1775330989.682:394): avc: denied { create } for pid=5305 comm="syz.2.474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 91.646494][ T5323] xfrm1: entered promiscuous mode [ 91.666423][ T28] audit: type=1400 audit(1775330989.742:395): avc: denied { ioctl } for pid=5311 comm="syz.5.476" path="socket:[10886]" dev="sockfs" ino=10886 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 91.679832][ T5320] netlink: 16 bytes leftover after parsing attributes in process `syz.2.474'. [ 91.701495][ T28] audit: type=1400 audit(1775330989.772:396): avc: denied { mounton } for pid=5325 comm="syz.4.478" path="/102/file0" dev="tmpfs" ino=565 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 91.836051][ T5338] netlink: 24 bytes leftover after parsing attributes in process `syz.4.478'. [ 91.836379][ T5338] netlink: 4 bytes leftover after parsing attributes in process `syz.4.478'. [ 91.836618][ T5330] loop6: detected capacity change from 0 to 512 [ 91.837417][ T28] audit: type=1400 audit(1775330989.902:397): avc: denied { write } for pid=5325 comm="syz.4.478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 91.837445][ T28] audit: type=1400 audit(1775330989.912:398): avc: denied { write } for pid=5325 comm="syz.4.478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 91.837465][ T28] audit: type=1400 audit(1775330989.912:399): avc: denied { read } for pid=5325 comm="syz.4.478" lport=39492 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 91.839639][ T5328] netlink: 24 bytes leftover after parsing attributes in process `syz.5.479'. [ 91.848603][ T28] audit: type=1400 audit(1775330989.922:400): avc: denied { ioctl } for pid=5327 comm="syz.5.479" path="socket:[10905]" dev="sockfs" ino=10905 ioctlcmd=0x542c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 91.897021][ T5330] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e018, mo2=0002] [ 91.971453][ T5330] System zones: 0-2, 18-18, 34-34 [ 91.987419][ T5330] EXT4-fs (loop6): 1 orphan inode deleted [ 91.993769][ T5330] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.013199][ T4879] Quota error (device loop6): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 92.016992][ T5345] loop2: detected capacity change from 0 to 128 [ 92.029590][ T5330] ext4 filesystem being mounted at /83/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.033227][ T4879] EXT4-fs error (device loop6): ext4_release_dquot:7062: comm kworker/u8:18: Failed to release dquot type 1 [ 92.056313][ T5344] ================================================================== [ 92.064524][ T5344] BUG: KCSAN: data-race in _copy_from_iter / bcm_can_tx [ 92.071493][ T5344] [ 92.073826][ T5344] read to 0xffff88810cf825f8 of 72 bytes by interrupt on cpu 1: [ 92.081468][ T5344] bcm_can_tx+0x1b3/0x4c0 [ 92.085836][ T5344] bcm_tx_timeout_handler+0xe5/0x290 [ 92.091141][ T5344] __hrtimer_run_queues+0x218/0x4f0 [ 92.096356][ T5344] hrtimer_run_softirq+0xe0/0x2c0 [ 92.101398][ T5344] handle_softirqs+0xb9/0x2a0 [ 92.106095][ T5344] __irq_exit_rcu+0x39/0xc0 [ 92.110616][ T5344] sysvec_apic_timer_interrupt+0x37/0x80 [ 92.116350][ T5344] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 92.122360][ T5344] [ 92.124697][ T5344] write to 0xffff88810cf825f8 of 72 bytes by task 5344 on cpu 0: [ 92.132422][ T5344] _copy_from_iter+0x258/0xea0 [ 92.137266][ T5344] bcm_tx_setup+0xae5/0xdd0 [ 92.141795][ T5344] bcm_sendmsg+0x357/0x4a0 [ 92.146230][ T5344] ____sys_sendmsg+0x563/0x5b0 [ 92.151019][ T5344] ___sys_sendmsg+0x195/0x1e0 [ 92.155723][ T5344] __x64_sys_sendmsg+0xd4/0x160 [ 92.160614][ T5344] x64_sys_call+0x194c/0x3020 [ 92.164455][ T5345] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 92.165316][ T5344] do_syscall_64+0x12c/0x370 [ 92.165347][ T5344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.165370][ T5344] [ 92.165375][ T5344] Reported by Kernel Concurrency Sanitizer on: [ 92.165388][ T5344] CPU: 0 UID: 0 PID: 5344 Comm: syz.3.483 Not tainted syzkaller #0 PREEMPT(full) [ 92.165412][ T5344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 92.165425][ T5344] ================================================================== [ 92.193315][ T5345] ext4 filesystem being mounted at /99/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.235326][ T3405] IPVS: starting estimator thread 0... [ 92.312011][ T3697] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.335850][ T5348] IPVS: using max 2544 ests per chain, 127200 per kthread [ 93.026953][ T3315] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.