last executing test programs: 2m48.910569295s ago: executing program 32 (id=218): r0 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000400), 0x4) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x18, &(0x7f00000000c0), 0xf9, 0x5a2, &(0x7f0000000fc0)="$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") chdir(&(0x7f0000000040)='./file0\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r3, &(0x7f0000000400)=[{&(0x7f0000000240)='4', 0x1}], 0x1) r4 = semget$private(0x0, 0x6, 0x0) semtimedop(r4, &(0x7f00000003c0)=[{0x2, 0x4, 0x800}], 0x1, 0x0) semop(r4, &(0x7f00000000c0)=[{0x2}], 0x1) semctl$SETALL(r4, 0x0, 0x11, &(0x7f0000000100)=[0x5, 0x7, 0x0, 0x9, 0x9, 0x7, 0x0, 0x8]) 2m29.004224877s ago: executing program 33 (id=430): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb0100180000000000000030000000300000000600000000000000030000930100000003000000b70b0000ffffff7f040000000500010005000000040000e4010000000101000000615f5f2e"], 0x0, 0x4e, 0x0, 0x9}, 0x28) 2m22.716965857s ago: executing program 6 (id=486): r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) write$binfmt_elf64(r1, 0x0, 0x509) unshare(0x2000400) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) signalfd4(r2, &(0x7f0000000040)={[0x4]}, 0x8, 0x80000) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000080)={0x0, 0x0, {0x0, @usage, 0x0}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB(r4, 0xc400941b, &(0x7f0000000480)={r5, 0x961c, 0x2}) ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f0000000000)={r5, "50b16cf3334f90646e81662194083d13"}) 2m22.565403369s ago: executing program 6 (id=488): sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0xd0, 0x65, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x4, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) (async) perf_event_open(&(0x7f0000000100)={0x2, 0xd0, 0x65, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x4, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=@newtaction={0x18, 0x30, 0x100, 0x0, 0x25dfdbfc, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x440c0}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=@newtaction={0x18, 0x30, 0x100, 0x0, 0x25dfdbfc, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x440c0}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) ioprio_set$pid(0x2, 0x0, 0xef10e7498e4480d2) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a4000000000090002618da9ac231f9a0073797a31000000000900010073797a30000000000800054000000007440000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000001800038014000080100001800b0001001d88d56a159a450014000000100001000000000000"], 0xc8}, 0x1, 0x0, 0x0, 0x20000841}, 0x0) ioctl$FS_IOC_GETVERSION(r3, 0xff04, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0), 0x31) r5 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) r6 = syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x203bce, 0x10100, 0x5, 0x100}, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000700)="f7", 0x1}], 0x1}, 0x4000000) (async) sendmsg$inet(r9, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000700)="f7", 0x1}], 0x1}, 0x4000000) syz_io_uring_submit(r7, r8, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r10, 0x0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f00000008c0)=""/192, 0xc0}], 0x2}, 0x0, 0x40000103}) io_uring_enter(r6, 0x46f3, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r11 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r11, &(0x7f0000000300)=ANY=[@ANYRESHEX], 0x10) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000240)) (async) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000240)) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r12, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)=[0x3], 0x0, 0x0, 0x1, 0x1}}, 0x40) write$P9_RSTATu(r11, &(0x7f0000000580)=ANY=[@ANYBLOB="c50000007d0a000000a900030005000000000100000005000000000000000000100008000000070000000200000000000000010085010000730017e05f7c732feccf1e7c7ef42a774958be5b5f12d47a5a7385c42fa23fbc3d824fc7f7f10dd00614bbf1bb99aadbf1f0e3df1c167b22088c30d049ff02293a39e78b6a9806a3f7aa57296f961b6d2bcbf1bf0eaad67c22f733722b4310f250cc1fd77ffc0e2c78e5105efff91200000000000001007b070097feef857a0386", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0xc5) (async) write$P9_RSTATu(r11, &(0x7f0000000580)=ANY=[@ANYBLOB="c50000007d0a000000a900030005000000000100000005000000000000000000100008000000070000000200000000000000010085010000730017e05f7c732feccf1e7c7ef42a774958be5b5f12d47a5a7385c42fa23fbc3d824fc7f7f10dd00614bbf1bb99aadbf1f0e3df1c167b22088c30d049ff02293a39e78b6a9806a3f7aa57296f961b6d2bcbf1bf0eaad67c22f733722b4310f250cc1fd77ffc0e2c78e5105efff91200000000000001007b070097feef857a0386", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0xc5) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r11, 0x0) (async) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r11, 0x0) write(r5, &(0x7f0000004200)='t', 0x1) (async) write(r5, &(0x7f0000004200)='t', 0x1) sendfile(r5, r1, 0x0, 0x3ffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[], &(0x7f0000000180)='GPL\x00'}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[], &(0x7f0000000180)='GPL\x00'}, 0x94) 2m22.027249517s ago: executing program 6 (id=490): openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x1042, 0x0) syz_emit_ethernet(0x1046, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6000000010102b00fc020000000000000000000000000001fe8000000000000000001100000000aa670000000000000021"], 0x0) 2m21.793714032s ago: executing program 6 (id=492): r0 = socket(0x11, 0x2, 0x0) setsockopt(r0, 0x107, 0x1, &(0x7f0000000000)="110000000000060000071a80010061cc", 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x1200414, &(0x7f00000001c0)={[{@dmode={'dmode', 0x3d, 0x8002}}, {@showassoc}, {@hide}, {@uid}, {@unhide}, {@overriderock}]}, 0x5, 0x56b, &(0x7f0000000a80)="$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") r2 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x68) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4048004) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010004, &(0x7f0000000100)={[{@nobh}, {@abort}, {@nomblk_io_submit}]}, 0x3, 0x4f8, &(0x7f0000000140)="$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") r3 = socket$kcm(0x2d, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r5) ptrace$peeksig(0x4212, r5, &(0x7f0000000140)={0x0, 0x0, 0x4}, &(0x7f0000001500)) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000000)={r4}) ioctl$sock_SIOCBRADDBR(r4, 0x89a0, &(0x7f00000000c0)='wg1\x00') mkdir(&(0x7f0000000080)='./bus\x00', 0x3) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', r2, &(0x7f00000003c0)='./file1\x00', 0x4) 2m20.049884652s ago: executing program 6 (id=509): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/mdstat\x00', 0x1800, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080), 0xa40020, &(0x7f0000000340)=ANY=[]) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) r3 = syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f0000000dc0)={[{@utf8}, {@uid}, {}, {@nocompress}, {@showassoc}, {@map_acorn}, {@map_normal}, {@block={'block', 0x3d, 0x800}}, {@map_acorn}, {@map_off}, {@dmode={'dmode', 0x3d, 0x9fbc}}, {@block={'block', 0x3d, 0x200}}]}, 0x2, 0xa1a, &(0x7f0000000380)="$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") r4 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x89901) r5 = fspick(r4, &(0x7f00000000c0)='.\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r5, 0x0, &(0x7f0000000080)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH(r5, 0x3, &(0x7f0000000040)='map=off', &(0x7f0000000180)='./file0\x00', r3) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r6) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000e80)=ANY=[@ANYBLOB="20000100194d1045d8bc71ec4fae6baef3783d56f0a16b8cc844b45fa3985b79f110f8a4717e616790b3d5edc60d03b31ec193d8f0015bf23e1bea3667234a4d4e1572702eaf2fe57d1dabb5cc609724f18eff049141514491ca8e4ed71cd5dffb62e0a51618b809d1ea579d33bf304b1c3997cc6f8ce5bd497d1755f9f1c3f955d45f1eda8d5afea043135479a12a553bf027b2896c4661a78e7398acbc6ff9d195dc18f258960ca97a3a308c473a5ef635fea5d396c22c25b6e27216fdda4133a96397e6a6e1320ef80f3e9f32cf02", @ANYRES16=r7, @ANYBLOB="79612abd7000fedbdf257e0000000c009900020000007e000000"], 0x20}, 0x1, 0x0, 0x0, 0xa004800}, 0x8) socket(0x15, 0x5, 0x0) r8 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000000040)={0x84, @remote, 0x15, 0x2000003, 'dh\x00', 0x0, 0x4, 0x76}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r8, 0x0, 0x485, 0x0, 0x0) 2m19.809577657s ago: executing program 6 (id=519): openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}, 'gre0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000140)}}], 0x2, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000200)={0xffffffffffffffff, &(0x7f0000000080)='\x00', 0x40000, 0x0, 0x9, 0x0, &(0x7f00000001c0)=0x4}) 2m19.802403035s ago: executing program 34 (id=519): openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}, 'gre0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000140)}}], 0x2, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000200)={0xffffffffffffffff, &(0x7f0000000080)='\x00', 0x40000, 0x0, 0x9, 0x0, &(0x7f00000001c0)=0x4}) 2m18.71608512s ago: executing program 0 (id=535): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r2, 0x6, 0x25, 0x0, &(0x7f0000000000)) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000000c0)={0x0, 0x800}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000180)={r3, 0xcb, "2869981dec9bf16669982955a0dbcf9f5141d3da08b439cd7c230ed68df231b6f1701c96ddf2707e43993e52b884e3a0318751746000a110027972ca1bd6d6aa04958a81d5ddaad6ad8758ea9319d3a33da7794a6a9717b0c45fef96325fb961f2e977ddc09bc1a0005322f9e39f9bde86fd5563464e3c4a6b4ff317bca13b39d6a2e719fea904bf63055070cd3c5f089033188d7e3797173b417b3d5013069b449f89189df71b6f16db9586e0a151a15e9c58318d57d77fb9ed789e62e610cf8bb19e75a7cd56c7a74ec6"}, &(0x7f00000002c0)=0xd3) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x7, @loopback, 0x6}, 0x1c) r4 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f0000000080)={0x20000004}) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @empty, 0x23}, 0x1c) r5 = socket$l2tp6(0xa, 0x2, 0x73) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0x42}, 0x8}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_int(r0, 0x29, 0x3, 0x0, 0x0) (async) pipe(&(0x7f0000000040)) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) getsockopt$inet_tcp_int(r2, 0x6, 0x25, 0x0, &(0x7f0000000000)) (async) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000000c0)={0x0, 0x800}, &(0x7f0000000100)=0x8) (async) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000180)={r3, 0xcb, "2869981dec9bf16669982955a0dbcf9f5141d3da08b439cd7c230ed68df231b6f1701c96ddf2707e43993e52b884e3a0318751746000a110027972ca1bd6d6aa04958a81d5ddaad6ad8758ea9319d3a33da7794a6a9717b0c45fef96325fb961f2e977ddc09bc1a0005322f9e39f9bde86fd5563464e3c4a6b4ff317bca13b39d6a2e719fea904bf63055070cd3c5f089033188d7e3797173b417b3d5013069b449f89189df71b6f16db9586e0a151a15e9c58318d57d77fb9ed789e62e610cf8bb19e75a7cd56c7a74ec6"}, &(0x7f00000002c0)=0xd3) (async) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x7, @loopback, 0x6}, 0x1c) (async) epoll_create(0x1) (async) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f0000000080)={0x20000004}) (async) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @empty, 0x23}, 0x1c) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0x42}, 0x8}, 0x1c) (async) 2m18.03000324s ago: executing program 0 (id=537): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000880)='./file0\x00', 0x100c404, &(0x7f0000000280)=ANY=[], 0x1, 0x1ff, &(0x7f0000000580)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000180)='./file7/file0\x00', 0x1b4247c, &(0x7f0000000000)=ANY=[@ANYRESDEC, @ANYRESOCT=r1], 0x0, 0x0, &(0x7f0000000000)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000380)=ANY=[@ANYBLOB="400000000c0601030000000000000000000000090500010007000000080009400000000f09000200"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x22040000) socket$nl_netfilter(0x10, 0x3, 0xc) read(0xffffffffffffffff, &(0x7f0000000240)=""/157, 0x9d) r3 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0xa102) ioctl$SG_GET_VERSION_NUM(r3, 0x2282, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'ip_vti0\x00', &(0x7f00000003c0)={'syztnl1\x00', 0x0, 0x7, 0x10, 0x7ff, 0x8, {{0x15, 0x4, 0x0, 0x0, 0x54, 0x67, 0x0, 0x15, 0x4, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@noop, @lsrr={0x83, 0x7, 0xf0, [@rand_addr=0x64010100]}, @noop, @lsrr={0x83, 0x23, 0xbb, [@multicast1, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @local, @rand_addr=0x64010100, @empty, @private=0xa010100]}, @timestamp_prespec={0x44, 0x14, 0x4f, 0x3, 0x6, [{@multicast2, 0x7}, {@dev={0xac, 0x14, 0x14, 0x12}, 0x7}]}]}}}}}) 2m17.741303516s ago: executing program 0 (id=541): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r2 = socket$kcm(0x21, 0x2, 0x2) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x28) write$binfmt_elf64(r1, &(0x7f00000006c0)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0xfb, 0x6, 0x8, 0xa512, 0x2, 0x3e, 0xffffffff, 0xe9, 0x40, 0x3c5, 0x2, 0x4, 0x38, 0x4, 0x63, 0x7, 0x8}, [{0x6, 0x2, 0xa, 0x0, 0x8, 0x1768, 0x0, 0x8}, {0x70000000, 0x1, 0x5, 0x4, 0x8, 0x400, 0x100000001, 0x7}, {0x2, 0x5, 0x1, 0x92, 0x6, 0x4, 0x6, 0x7fffffffffffffff}, {0x6, 0x9, 0x3, 0x0, 0x8, 0x9, 0xb1ba, 0x1000000000000}], "d03d24ae3bad6f5b5b6c46a0006285e7d81d9588f5ab2f49caf265c037e349fbd393903857e9949c295527def2ab7e821b20baa167fad7b6281d802e56bd8c9a920593e9943c38f87b9348b0a4fb817db6399c053c3dc5", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb77) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{0x1}, &(0x7f0000000080), &(0x7f00000001c0)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x3, 0x0, 0x80809, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000400)='syzkaller\x00', 0x1, 0x99, &(0x7f0000000240)=""/153, 0x0, 0x33}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') r5 = getpid() syz_pidfd_open(r5, 0x0) perf_event_open(&(0x7f0000000600)={0x4, 0x80, 0x7, 0x5, 0x4, 0x9, 0x0, 0x63b4, 0xc0439, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={&(0x7f00000005c0), 0x4}, 0x2, 0x6, 0xffffffff, 0x3, 0x6, 0x9, 0xe, 0x0, 0x3, 0x0, 0x78a1}, r5, 0xe, 0xffffffffffffffff, 0xb) sendfile(r4, r4, &(0x7f00000004c0)=0x100000000002eb4, 0x2000007ff) close(r3) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a8000900080008400400027c9c000461c1d67f6f94001600cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0x12b}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r2, 0x110, 0x3, 0x0, 0x3) mbind(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, &(0x7f0000000680)=0x3ff, 0x7f, 0x9) lsetxattr$trusted_overlay_redirect(&(0x7f0000000100)='./file0\x00', &(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x8, 0x5) 2m17.121522569s ago: executing program 0 (id=545): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000280)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@nombcache}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/pids.max\x00', 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000600)={0x8, 0x600, 0x4, 0xfffff801, 0x1, 0x0, [{0x0, 0x2, 0x2, '\x00', 0x100}]}) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) getpriority(0x0, r1) lsetxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000000), &(0x7f0000000d80)=ANY=[@ANYBLOB="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"/973], 0x3a6, 0x0) 2m17.051030635s ago: executing program 0 (id=547): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x80d40, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'pim6reg0\x00', 0x2}) ioctl$TUNSETOFFLOAD(r1, 0x400454c9, 0x3) ioctl$TUNSETLINK(r1, 0x400454cd, 0x308) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="4c0000000ffd03048000"/20, @ANYRES32=0x0, @ANYBLOB="000000002d5305002c00128009000100626f6e64000000001c000280080003007419000008000880ffffffff0800040000000000"], 0x4c}}, 0x0) 2m16.606568081s ago: executing program 0 (id=551): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5664}, {{0x18, 0x1, 0x1, 0x0, r1, 0x0, 0x0, 0x0, 0x18000000}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0xb}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x9, 0xfe04}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0xfffffffc}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xe1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m16.555422131s ago: executing program 35 (id=551): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5664}, {{0x18, 0x1, 0x1, 0x0, r1, 0x0, 0x0, 0x0, 0x18000000}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0xb}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x9, 0xfe04}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0xfffffffc}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xe1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m50.602624509s ago: executing program 7 (id=737): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280), 0xff, 0x25e, &(0x7f0000000e80)="$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") r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) 1m50.257612534s ago: executing program 7 (id=740): r0 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="28010000100007000000000000000000ff020000000000000000000000000001e00000020000000000000000000000004e200000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc0000000000000000000000000000000000000000000000000000fff2000000020000000000000000000000000000000000001000000000ffffffffffffffff00000000000000000000000000000000000000000000000000002000000000000700000000000000000000000000000000000400fdffffffe80a000000000000000000000a000200340000000000000014000e00fe8000000000000000000000000000bb2400090003000000000000000100000000000080b40000000000000005"], 0x128}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="040100001a0007002abd700000000000fe80000000000000000000800000001be0000001000000000000000000000000ffff00004e2200000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc0000000000000000000000000000005a0000000000000000b40000000000000500000000000000010000007ffffffe0000000000000000000006000000000000000000000000000000000000000000000000000000000000002000000000000700000000000000fdffffffffffffff0000040000000000e80a000000000000000000000a000200700000000000000014000e"], 0x104}}, 0x0) 1m49.888091424s ago: executing program 7 (id=748): mknod(&(0x7f0000000000)='./file0\x00', 0x4000, 0x5) getsockname(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, &(0x7f00000000c0)=0x80) 1m49.819116811s ago: executing program 7 (id=751): r0 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) ioctl$RTC_PIE_ON(r0, 0x7005) getdents(r0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="1803000000050000000000000000ffff1801000011af000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000d5030000020000838500000071000000180100002020752500000000806020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00082bbd7000fedbdf25110000000800030075371069e5bb261a58886ba4e04074bafc6963c8d14e8c37aafaec55145e2ae197982c52866aaca786c036bc1f9a8d4a29121954a044abc3391de98b2d69c1b9c1f3b72e7a523de60030c2ed44c1abea3891cd597a3694c9478ced717517011f12ceefb31d386ad71d63a6306aae", @ANYRES32=0x0, @ANYBLOB="0c009900e163000048000000"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000040) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x6}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) mremap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240"], 0x60}}, 0x0) accept4(r2, &(0x7f00000000c0)=@ieee802154={0x24, @short}, &(0x7f0000000180)=0x80, 0x800) prlimit64(0x0, 0x8, &(0x7f0000000080), 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x5, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffdffe, 0x1, @perf_bp={&(0x7f0000000640)}, 0x0, 0x10001, 0xd9, 0x5, 0xc31bc7c, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000280)='./bus\x00', 0x1200840, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x3, 0x394, &(0x7f0000000700)="$eJzs3T+IHNUfAPDv3uz9+5H87gpBFITRTtCQREG08Y5wgeA2UZaohbiYRMPtKeRwMSmyORuxFFJqZWehhUU6G1GRdBa2RpCoWGi6gCEjszO7O3N7Z4JhE4OfT7F8773v982b3bnbd3Psu1dXYv34bJy8evVKLCw0orlyaCWuNWI5khg6H5PmdmgDAO4N17Is/sgKEV/cSklj+rMCAKZp8P7/+t5Ky7tfj+OvJvKz4t1/9k7MDQCYjvL3/8VqW7ItZ2GianHa0wIApqh+/z8iHplIqfypvzmxNgAA7j0vvPTyc6utiOfTdCFi471eu9eOZ8b9qyfjVHTjROyPpbgeUSwU8ofG4PHwkdba/jRN+/HzcrTzil47YqPfaxcrhdVkUD8fB2Iplsv6crWRZVly+PPW2oF0ICLO93uz+SgbjV57dnCXYXUxTv3wvzgRByON+ybqI4601kZrknZ+3MHxZyO2xvct8vnvi6Xku9firejG8chrh8ua1tq5A2l6KGvtaYzr+732/CCvMHkHBAAAAAAAAAAAAAAAAAAAAAAAbse+Yu+dvWmaLo/2z8nG+/fsKxNq/c2IYq+f0f5AW8X+QNl8Fln2+zuPt99PorY/0GCDn9r+Os2YubunDgAAAAAAAAAAAAAAAAAAAP8am2fmotPtnji9eebsejXon948MxMRecub33765WLUcxbLAepVtaBZplS60nFVlgyTs6SWUwZJfvBGs2j55OJoxpWcylmMy2fGOfPbumrB3od/+vDs+nCEh5Jh1Y1xThI7ntfZpD6NWrDx/2LAYcuF3Z+fyeDgTXIuZ1m2W/m5VyarohHR3HWq/zDI8uCbK2888MTm8CLICo8+tnTs8oWPf13vdPMj57rdudOb17P1Tvn1zhfbRDA/vGySyvXTKC+2RvVKaHaevHF0zy4jb9VbOsn3v7344AeXypaZysu0wzSyY5fGLW/vkJMUB/1se9dcEeTTHHU9mwf5czQxzvC75KZPy1NxWy/c/R+tdC6e+/GXW62q/JCwUQcAAAAAAAAAAAAAAAAAANwRlc+Kl8oP+87+XdXTR6c/MwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4c8b//38UxMzWtpZbC/7sx7DlWAy75vMBY65yxOW7eLYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPxX/RUAAP//wAtXdw==") creat(&(0x7f00000004c0)='./bus\x00', 0x14c) mount(&(0x7f0000000480)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x801400, 0x0) r6 = open(&(0x7f0000000080)='./bus\x00', 0x44c00, 0xe898d2275f586997) preadv2(r6, &(0x7f0000000980)=[{&(0x7f0000001200)=""/4096, 0xffffffa4}], 0x1, 0x8000, 0x9, 0x1b) bpf$PROG_BIND_MAP(0xa, &(0x7f00000006c0)={r1, 0x1}, 0xc) 1m49.247579433s ago: executing program 7 (id=760): ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40088a01, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[], 0x48) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000140)={0x2006}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa224, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8946, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5664}, {{0x18, 0x1, 0x1, 0x0, r4, 0x0, 0x0, 0x0, 0xa000000}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0xb}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x9, 0xfe04}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0xfffffffc}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xe1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m48.713546892s ago: executing program 7 (id=767): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0xf, &(0x7f0000000840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x300}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x2000000}}}, &(0x7f0000000080)='GPL\x00', 0x7, 0x100a, &(0x7f00000009c0)=""/4106, 0x41100, 0xc}, 0x94) 1m48.690199697s ago: executing program 36 (id=767): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0xf, &(0x7f0000000840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x300}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x2000000}}}, &(0x7f0000000080)='GPL\x00', 0x7, 0x100a, &(0x7f00000009c0)=""/4106, 0x41100, 0xc}, 0x94) 1m24.108072113s ago: executing program 3 (id=957): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fc3000000ffa100040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x40) 1m23.67661515s ago: executing program 3 (id=959): syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x60080}, 0x40) socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000200)) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc0060, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c000000c000bf2000000000000016001000071b48013d030100000000000f02000000000000bc26100000000000bf672000000000001602000000c0ffff6702000007000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb0}, 0x48) 1m22.193204579s ago: executing program 3 (id=976): syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000009940)={0x15, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0x23, 0x6, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) unshare(0x2e000200) sendto(r0, &(0x7f0000000140)="120000001200e7ef007b00000000000000a9", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000009580)=[{{0x0, 0x0, &(0x7f0000003180)=[{&(0x7f0000000b80)=""/4096, 0x1000}, {0x0}, {0x0}, {&(0x7f0000002d40)=""/211, 0xd3}, {&(0x7f0000002f00)=""/226, 0xe2}, {&(0x7f0000003000)=""/250, 0xfa}, {0x0}], 0x7}, 0xe868}, {{&(0x7f0000003300)=@can, 0x80, &(0x7f0000003440)=[{&(0x7f0000003380)=""/52, 0x34}, {&(0x7f00000033c0)=""/87, 0x57}], 0x2, &(0x7f0000003480)=""/207, 0xcf}, 0xffffff46}, {{&(0x7f0000003580)=@tipc=@id, 0x80, &(0x7f00000047c0)}, 0x4000000}, {{&(0x7f0000004840)=@nl=@proc, 0x80, 0x0, 0x0, &(0x7f0000005cc0)=""/4096, 0x1000}, 0xc}, {{&(0x7f0000006cc0)=@nl=@proc, 0x80, &(0x7f0000008fc0), 0x0, &(0x7f0000009040)=""/13, 0xd}, 0xc53}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000009180)=""/241, 0xf1}, 0x1}, {{&(0x7f0000009280)=@can={0x1d, 0x0}, 0x80, &(0x7f0000009540)}, 0x5}], 0x7, 0x12163, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000600142603600e1208000f0000000401a80016002000034004000200035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5c", 0xc1}, {&(0x7f00000014c0)="5c9ebe30", 0x4}], 0x2}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000097c0), r0) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000280)) sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4084}, 0x40001) r5 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {0x0, 0x1}, 0x3f, 0x0, &(0x7f0000000240)={0x0, 0xf, 0x0, 0x2c5}, 0x8, 0x8, 0x0, 0x0, 0x2000, 0x200001, 0x0}) syz_mount_image$vfat(&(0x7f00000098c0), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000009900)=ANY=[@ANYRES16=r3, @ANYRES64=r6], 0x1, 0x385, &(0x7f00000006c0)="$eJzs3TFvW9UXAPATt02a/P+pMyAkQIirssBiJeELNEKthIgECjUqDEivxAErbhzZVpArBN1Y+RwVIxsS4gtkgJ2NLQtjh6oP2c9uk9SkioLzFPj9JPse+95j3/ue3tNdns7Bne/vbW9dikKKSkRUHkUsDaPCzKitDOPZOOxBvF298/vrH33y6ftr6+s3N1K6tXb7ndWU0rU3fv7q6x+u/9L738c/XvtpLvaXPjv4c/WP/Zf3Xzl4cvvLZjc1u2mn3UtZuttu97K7rUbabHa3ayl92Gpk3UZq7nQbnSP9W6327m4/ZTubiwu7nUa3m7Kdftpu9FOvnXqdfsq+yJo7qVarpcWF4EXqDzc2srUivnrCuBvnNSGmoNNZywbX8NxzPfWHpUwIAChVsf/v1rayXlRunH7/P/uP7v+vxPns/2emdDQvmsP7f/6tBvv/2dH1e5T9PwAAAAAAAAAAAAAAXASP8rya53l13Objh4RHn0ueHlP23Pk/9ip7fkzXoQf3rka0vtur79WLtuhf24pmtKIRy1GNx4PbwlgR33pv/eZyGlqKxXvfDvOv/xpRv3Q0fyWqsTQ5f6XIT0/zY9BeiYXD+atRjZcm569OzJ+Nt948lF+Lavz2ebSjFZvD21s+M3gf5H+zktK7H6wfy58bjgMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgv6GWxl6Lou79Xj1iPvZG9ftrzwYsHa2PX+Q/ra+/HNV4PLk+//LE+vyX49XL5a4dAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMa6/fvbWavV6JxXMK75P/xmdhz8fdZMMfzBsa75ODp47kW/c8agcqqs+dEiJ3Q9yfN8WlO9er6n8izBlYg4YUw+OoBn/6//R8QJY+YiYvpLrpR/wE8dlHE3AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHI9K/pd9kwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoU7d/fztrtRqdKQZlrxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOAi+SsAAP//ELEJxw==") syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x2700, &(0x7f0000000000)={[{@data_writeback}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@sb}, {@nouid32}, {}, {@nombcache}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x491, &(0x7f0000000980)="$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") r7 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0x42000, 0x0) unshare(0x22020600) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f00000000c0)=0xeffffffe) syz_open_procfs(0x0, 0x0) ioctl$PPPIOCSMAXCID(r7, 0x40047451, &(0x7f0000000080)=0x70000) r8 = inotify_init() r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="6c000000000701020000000000000000000000070900010073797a3100000000090001"], 0x6c}, 0x1, 0x0, 0x0, 0x40080}, 0x4) inotify_add_watch(r8, &(0x7f00000002c0)='./file0\x00', 0x2000e0c) socket$inet6(0xa, 0x2, 0x0) 1m21.73453655s ago: executing program 3 (id=983): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000002240)='./file0\x00', 0x108008, &(0x7f0000000340)=ANY=[], 0x1, 0x31c, &(0x7f0000002740)="$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") mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000002200)='./file0/file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) mount$bind(&(0x7f0000000180)='./file0/file0\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x2243005, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) futex(&(0x7f0000000000), 0x5, 0x0, 0x0, &(0x7f00000000c0), 0xd5000002) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x40}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44880}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd25, 0x25df9bfb, {0x0, 0x0, 0x0, r3, {0xd, 0x6}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x8, 0x2, [@TCA_ROUTE4_ACT={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8010}, 0x0) 1m21.587363116s ago: executing program 3 (id=988): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb0100180000000000000030000000300000000600000000000000030000930100000003000000b70b0000ffffff7f04000000050001000500000004000000010000000101000000615f5f2e"], 0x0, 0x4e, 0x0, 0x9, 0x0, 0x0, @void, @value=0xfffff}, 0x28) 1m21.290272975s ago: executing program 3 (id=997): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@ipv6_getnexthop={0x18, 0x6a, 0x337, 0x70bd2c, 0x25dfdbfa, {0xa, 0x0, 0x0, 0x0, 0x4000000}}, 0x18}, 0x1, 0x0, 0x0, 0x4004010}, 0x4000) r2 = fcntl$dupfd(r1, 0x406, r1) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x7, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}}, 0x14}}, 0x20042080) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000002200)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f0000001f00)=ANY=[@ANYBLOB="780000000301010800000000000000000a0000054400028006000340000300000c00028005000100210000002c00018014000300"], 0x78}}, 0x8000) 1m21.290175745s ago: executing program 37 (id=997): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@ipv6_getnexthop={0x18, 0x6a, 0x337, 0x70bd2c, 0x25dfdbfa, {0xa, 0x0, 0x0, 0x0, 0x4000000}}, 0x18}, 0x1, 0x0, 0x0, 0x4004010}, 0x4000) r2 = fcntl$dupfd(r1, 0x406, r1) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x7, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}}, 0x14}}, 0x20042080) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000002200)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f0000001f00)=ANY=[@ANYBLOB="780000000301010800000000000000000a0000054400028006000340000300000c00028005000100210000002c00018014000300"], 0x78}}, 0x8000) 15.811136475s ago: executing program 5 (id=1923): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {}, {0x2, 0xe}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @dev={0xac, 0x14, 0x14, 0x13}}, @TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x4}, @TCA_FLOWER_KEY_IP_TTL={0x5, 0x4b, 0x8}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40004}, 0x4000800) 15.649342006s ago: executing program 5 (id=1928): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x8001, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x4000) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000600)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdc01, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4044060}, 0x4890) r3 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r3, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x88a8, r2, 0x1, 0xd8, 0x6, @multicast}, 0x14) 15.399449458s ago: executing program 5 (id=1935): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) recvmmsg(r1, &(0x7f000000cf00)=[{{0x0, 0x0, 0x0}, 0xfffffffd}], 0x1, 0x2, 0x0) r2 = syz_io_uring_setup(0xb5c, &(0x7f0000000640)={0x0, 0x8926, 0x0, 0x1, 0x164}, &(0x7f0000000040)=0x0, &(0x7f00000001c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r2, 0xf23, 0x0, 0xc, 0x0, 0x0) 14.520115699s ago: executing program 5 (id=1961): clock_nanosleep(0x2, 0xfffffdfc, &(0x7f0000000080)={0x0, 0x989680}, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f00000006c0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb87, &(0x7f00000017c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) r1 = syz_io_uring_setup(0xb5c, &(0x7f0000000640)={0x0, 0x1780, 0x0, 0x1, 0x164}, &(0x7f0000000dc0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000480)=@security={'security\x00', 0x4, 0x4, 0x418, 0xffffffff, 0xd0, 0x0, 0xd0, 0xffffffff, 0xffffffff, 0x348, 0x348, 0x348, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1a0}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0xfffa, 0x8}}}, {{@ipv6={@private1, @private2, [], [0xffffff00, 0xffffff00], 'geneve1\x00', 'macvlan0\x00', {0xff}, {}, 0x0, 0x2, 0x3, 0x5}, 0x0, 0x138, 0x1a8, 0x0, {}, [@common=@srh1={{0x90}, {0x16, 0xb7, 0xe, 0x8, 0x7, @local, @private2, @private1={0xfc, 0x1, '\x00', 0xfd}, [0xff000000, 0xff000000, 0xff, 0xff], [0xff, 0xffffffff, 0xff000000, 0xffffff00], [0xffffffff, 0xff000000, 0xffffffff, 0xff], 0x604, 0x208}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x2, 0x3, 0x8, 0x0, 0x0, "cf3523f6abea0ac59f38e4cee2d4e02b4433ada4369fbb16cedc9b2a2cbc46c2804dc8c41ce7aba48504d24e8bc4e7d304000000db2882bc827158e95f1a87e8"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x478) r5 = open(&(0x7f0000000280)='.\x00', 0xc8180, 0x0) fcntl$notify(r5, 0x402, 0x8000003d) syz_io_uring_submit(r2, r3, &(0x7f00000003c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, r0, 0x0) syz_clone(0x40200080, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$tipc(0x1e, 0x2, 0x0) sendmmsg(r6, &(0x7f0000002e40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="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", 0x1000}], 0x1, &(0x7f00000010c0)=[{0x78, 0x110, 0xda0, "3137034d24f76d35b0f03eea048c4ff2b1b48b494edc0a6c366864bceeb6dbb5849c571ed6e402e25b2cf83bab9eb9c556e555a889e354f6997856e932feb7d2e562108871e211c1fec943137c496b3f8f913ba919980b06bb211c9be45abfe32cd4"}, {0xb0, 0xff, 0x7, "61cd9d0426f3a551916c964243a743f29c55ff2ad2c4bed8c2d36ffcc31d1eb8c4ef88311cd7763939d13d8be6b72f2b4a0d477c264bdebf2a0b27e8202bc5ff22ff45dfdef57a478b3296349a3f6b233be4a2aabfc3bd5f3579d65cda3897202e5d3a4202df4cb5dd3fee0a43317d5e0f720bee5fed57dc566fb64d1f488d9b4d05ae4e21ab3bef79bd97aa3d1de373394d589039d52bdfcafb"}, {0x110, 0x193, 0x9, "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"}, {0xe0, 0x10d, 0xffffffff, "0dfc1fd812416f32e42a6ebd270be79a0b43c216a664417ca989e03635e124b6612bd189c356d450fa66192154ad06dd6b2b521d306cb6005c64de431103a54a4badbb28c941d5b94da02054b5e9bd289d4d0c9c96d5868f52ad467790b21dd3dc691c61d6770b86bda6b519a60d78c2b772708f9af3c3823f565d2c5ae00c755cc31a3712624bfce345926d0cdf374b5e70cbd39794ea100ba844780893350d0402e94d609e94f06afcde2108248e9f2432a69f170ae68b6b1c1d48fcd395f00175966013665fc547"}, {0xd0, 0x113, 0x8, "a7fb72c48cb574dd2712519d0fd1d18f13732b8e57c34ed8cbbc13736a8d68e463694d88a5fd1f198197392cf35fc55dc0c9c2f1002b445b601d12d311cbed48d5b6512f7a7516a7cdcd9a17d6f9f99a9e6d151b8f9bf2167b843a9073d70d66c00281ed7f8e18498d5aa2059717405732e82b4928fd33fed42c853f760d93436f7f8a3d9a7185a66fbddb50a6ea0c4aa1d7ce429f6d375b590311e3840080fd3b53a420ba4d7e732ff5e0b4aef3159fcbc97a0f9908a575704b41"}, {0x110, 0x84, 0x7, "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"}], 0x4f8}}, {{&(0x7f00000015c0)=@l2={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0xa98}, 0x80, &(0x7f0000001700)=[{&(0x7f0000000040)="da4e4e98d44902de3a3ddaf3d8fac76beea7d9f3628bbdb564619e5b59", 0x1d}, {&(0x7f0000001640)="2a9cddaad226f01bf0db9edfa915a6ba15e92a78e64b3020a70de1ccb334f1fac56d894b7216cdf5f90aa1abd2492cce896989f71b01562d836bfd544af736e6127a058b9b3de2199c9b7c6aac4d6a5361482a560f588d5e8fd239f12fbfd7e412e1a95b2143d7610599f13bc170166f1762b6e594337b8d7a32473e1d79786bc25654d03a19e2ec466c0cd643", 0x8d}], 0x2, &(0x7f0000001740)=[{0xb0, 0x116, 0x9, "3fc6400d1a3aba0222a8df6a32386cac1068927c7055844b900622a8e6de3fc9f2cacb9b9f5216930c4180a8833469f4fa6ae293d66031781bfb81a8789ffcbb150cb36699d87357e0bbe20fc1d2416e5f8829405674687b261cdb74b73a399341ebd75cfb48682afb7d141cd83c2993577f0f08ba522cf66558ba6b2e95916027e0d82b43dd227988c178e0297d1797e924978302a3b289bc43fba20a"}, {0xe0, 0x107, 0x8, "06c08ef72aaf9e25d14c03d965b14329ca89a93c60d0915d9c381cb4a2481c6a77e378a3ea6d2d347d4e2183b9b971d6c968af1e6df869fa1c372d648c10329870e9c7d1c6d8c582a9ef9f50d0e55359440a06463898356bdd83693f21608ae385e831a857c5cbf67720952db06353e8a35ed9c9cc92a51657d071ad2f03bf983f526dbe614a4e696a7201b5ce79933e984580254dd56ea8070b9dadeacb4e34d1c6a878d695b5c1b029115b00d9c744ca08cf7904d3a1150fe905ff852a039859813f67c79c04a8c9ce6ab41c0ccd51"}, {0xf8, 0x101, 0x57a4, "0085fc2ee4d32669157e17d4186c1d5c2b3d531efd11c57b281fc370838fffa1dcf20122918dfe8044d11a2d9dc35e400a19a9f92319b5e013ffc32da6ca16f2dcdf07745bcf2d7bc06dfb7be2315a5c5d0595f0c9c4d30a153b1549015675b47fde5f14dbc6eb63f1749cc70976915b9a9c226805c828f35c3080fd399687b6f8ce5ed0a543285135d1e8482fb7a974c2d20edcf78935b6559d2f684f550494753592ff801da02d973e089391e1c49f1b214e24e7a139eec481b1a88f7b2d393ce99268809908391bdbb5de4f334fb86087d33405352170de520076691e753a93c9"}], 0x288}}, {{&(0x7f0000001a00)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x80, &(0x7f0000002cc0)=[{&(0x7f0000001a80)="ce9b949905546f22605e6b3dcbf564a634d65c53e7148f1479a1f8b08c4cc565d19424877f06f6d0831d0f000cd297bd977f4c99c3e6740a57191dfd054438b9d8130605fabea7a83514270d3ff2f20aa756423dae85691fd2445f2fc7fec30c2194dc540d74377fd78d5669aaee5021ac253ae185581967089aa3107dd07fa32b3a655ede92032ba05db0602f78c7192d7d84d79e48cadfc257070c0513baaed10a04fcd2ffc5df3ab6877fe1f663ead2eb51ec090e756a3f9e421dee150a28b47535f71ef2f7388c0a16f6ad7aff716e7051f96061809280f498af", 0xdc}, {&(0x7f0000001b80)="a5f95e1e1d7194da9ce56f04dd5cfaec66557396a41982c9233728403cb4cc5153971e9725ab852e72eea1961f04329c0f46409d49677fe7adbba6de908a", 0x3e}, {&(0x7f0000001bc0)="ad4074093eb262c4e540497186", 0xd}, {&(0x7f0000001c00)="16faa67f8758cd3a9a8ced8804e074accc80854b1eede90d63d95885c4a248e183a67dba21068cf9d2f238993d7c31cefc17aa806c9186ef1c0128335530134224f5ac487169a075d2f58b672e261770e51ca8cae126340c682b2c300efe1551bd59d828bd1f9c1dd59a80ca15108bc7dc5a244eee9124a9e737b2d73a81d427aa4cec36562f", 0x86}, {&(0x7f0000001cc0)="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", 0x1000}], 0x5, &(0x7f0000003340)=ANY=[@ANYBLOB="d80000000000000001000000060000007d057736316b3ff7fe6ad3b48c5a99df706d4beed1f4d1aaf92f19c6cf9b4b663128113a91b11f1c71fb11fe7949c82e8a86169b074b88b1238642b0e630f5b2536589ec9ebffe43e4a2ded0800d6b9449f64130685fd37386414089a683a39e3bf9dfce50f000c68872aef67701ccf205a1f9f1aa488c72b168a53fc7f3cde05ae67b726bc2e857ddc211276f6d35fe791b1a37d34b814f1cde626217b2544aa5ec4474a9384a69d7f05e425fed7af9d406f5c54f0834edf7c04eb59ea2782626d00ca652b2b1a023238f0000000000"], 0xd8}}], 0x3, 0x0) sendmsg(r6, &(0x7f0000003300)={&(0x7f0000002f00)=@llc={0x1a, 0x301, 0x4, 0x3, 0xf7, 0xe, @random="384b6c88556b"}, 0x80, &(0x7f0000002f80), 0x0, &(0x7f0000002fc0)=[{0xa8, 0x11, 0x8, "0b857d341293213e5fe856f79c1d6f2d8af639d6d66d025ffebb0b0083b206fbee3ea20dc2de5e832c7ec507467dd239941538b651a34eb2d4e6c4e119fc46c6a6e8a1c5b1542da695ca3c9fd56481dad520c0c865b57a9009abcda344b5276359aa4a0128823d78212547ec5a938030f2663d8434c6f9cd336619eaf922ef624cbed60b21ffeb488f2339513ed3ad4df792280094e6"}, {0xffffffffffffff3e, 0x10b, 0x400, "acaf025f529cc3e55c16843f8eb8f79e8cf84285fb75e3d5758d9fc8921328cd651053e7cfacdcdd1aa3087bcc9f8063a03233bb92ac1d1cfcd194363b5b624065cc8a33e6d4fdda5f88434536c7f4248456647aacd028d3d20829ad3e5ffc5078bc52e35f6d548b1186efb045f65e708f345e87b73bac9f6de5675160cf5274aa4ef9f64569de7150eec0d65b8833236417edae8319f0945a340b209648beb1f003d4cdb9495d51f312363b"}, {0xa0, 0x103, 0xf0, "c8a77289f1db73b5912e1354866f62b3a4fdbd0a85c3afc0dc73136313ef983e9643fd590ccaf921f1c39bcfce4555e4899f2daa082058ff123b940d9daa47d308db2f0e54bab98bdb1f42c54f64a792bbf1d2f1a613332833eef08b06d640612056f5528f7eb9bd27ffa739fcfd42d5da17869173dba09b7eceb693563de1da5736be404e1720cf7f7f9496"}, {0x18, 0x0, 0x3, "e074a5cb17552bcd"}, {0x30, 0x6, 0x3, "44a51a194f494ffaa314d000f0119c739c4cabac152d748c524817cf"}, {0x80, 0x111, 0x0, "f05420a166afe6382c12ebe54404c6d24cff769d71cc0ef0b8a38e4ebd76bf513b01e38976cfa92784b99a858ad45a62f17e644407d24ee3869e773b5e25e6813c8365c5e2b67bd1ad8c689c16b3852a6db428afc406730151cd9e5171e63f6d5d45dcc0d092a1e032d84266e981a2"}, {0x68, 0x119, 0xef, "41d4bc56580f7436ffa7fa54ffbe7d2a5b702e0328fb874e7ae9768382e5f6425bc5a10730635bc0d43975f3bf9976a69fcda1dbe6611a2b95096b8e45aa49d01465996af2c13abaa66a3c304f21527a1ab47e"}], 0x338}, 0x4004000) 13.573225075s ago: executing program 5 (id=1970): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x5, 0xa555, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x7fff, 0x2}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_emit_ethernet(0xf75, &(0x7f0000000d80)={@random="bb622ac1eb87", @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x8, 0x6, '\x00', 0xf3f, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x1, 0x8, 0x8, 0x8, [{0x0, 0x1da, "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"}, {0xe, 0xb, "95924f331203810718181eee907b0efeb600cf38306d7b5380486cdcec2f2a947cdc488b2fc358ff38bd13730643cd896539b3282680d75f839f35bce3294f8836d9244ec4bc7f21753486415f0b8441a805adc71bacea22"}]}}}}}}, 0x0) 12.589593682s ago: executing program 5 (id=1975): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x8001, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x4000) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000600)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdc01, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4044060}, 0x4890) r3 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r3, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x88a8, r2, 0x1, 0xd8, 0x6, @multicast}, 0x14) 12.489675379s ago: executing program 38 (id=1975): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x8001, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x4000) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000600)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdc01, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4044060}, 0x4890) r3 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r3, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x88a8, r2, 0x1, 0xd8, 0x6, @multicast}, 0x14) 3.25288052s ago: executing program 2 (id=2089): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) recvmmsg(r1, &(0x7f000000cf00)=[{{0x0, 0x0, 0x0}, 0xfffffffd}], 0x1, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(0xffffffffffffffff, 0xf23, 0x0, 0xc, 0x0, 0x0) 2.300738145s ago: executing program 2 (id=2095): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="01002cbd7000fbdbdf250100000008000300", @ANYRES32=r4], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x8010) brk(0x5d555ede6000) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x1dd5, &(0x7f0000000000)=[{0x806, 0x0, 0x9, 0x4000}]}) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x4) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000040)={'batadv_slave_1\x00'}) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x0}}, './file0\x00'}) sendmsg$netlink(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000040)={0x2c, 0x10, 0x200, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r5}, @typed={0x8, 0x23, 0x0, 0x0, @uid=r6}, @nested={0xc, 0x2b, 0x0, 0x1, [@typed={0x8, 0x4, 0x0, 0x0, @fd}]}]}, 0x2c}], 0x1}, 0x20000000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x4, 0x0, &(0x7f0000000500)="e3008067", 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8000}, 0x50) r7 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x0) ioctl$FIBMAP(r7, 0x1, &(0x7f0000000040)=0x85) 2.145494098s ago: executing program 4 (id=2096): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={&(0x7f00000001c0), 0xd}, 0x0, 0x8000000, 0x3, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r2 = getpid() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f0000000000)={0x5, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}) mq_open(0x0, 0x1, 0xc, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="190000"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r5, &(0x7f0000000100), &(0x7f0000000000)=""/8, 0x2}, 0x20) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000340)={r5, &(0x7f0000000400), 0x20000000}, 0x20) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000400)={0x0, 0x100000, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010027bd7000fbdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008b00", @ANYRES32=r2, @ANYBLOB="99d85c282b3fa137f963048fd0d8804047528d1530b959cfcf2d78840638ae99b6f70b62"], 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0xb0) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000000)={r8, 0x1, 0x6, @multicast}, 0x10) r9 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r9, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43, 0x0, 0x3}}, 0x10) socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000300)={0x4000043, 0x804, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r9, &(0x7f0000000280)={&(0x7f0000000040), 0x10, 0x0}, 0x0) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000380)={r8, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_drop_memb(r7, 0x107, 0x2, &(0x7f0000000080)={r8, 0x1, 0x6, @multicast}, 0x10) sendmsg$nl_route(r0, 0x0, 0x4000010) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4ea0, @remote}, 0x10) 1.991424312s ago: executing program 2 (id=2097): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) bind$can_j1939(0xffffffffffffffff, &(0x7f00000000c0), 0x18) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000880)='./file0\x00', 0x100c404, &(0x7f0000000280)=ANY=[], 0x1, 0x1ff, &(0x7f0000000580)="$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") r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x1, 0x21e, [0x200000002300, 0x0, 0x0, 0x2000000024be, 0x2000000024ee], 0x20, 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff01000000050000006b0000000016636169663000000000000000e3ff00007665746831000000000000000000000073797a5f74756e0039da0000f8ff0000000076657468310000000000000000001000aaaaaaaaaa3d000000ff00000180c2000003ff00ffffff00ae000000560100008e0100006f776e6572000000000000000000000000000000001800"/198, @ANYRES32, @ANYRES32, @ANYRES32=0xee00, @ANYRES32, @ANYBLOB="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"]}, 0x296) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='attr/keycreate\x00') fcntl$setstatus(r3, 0x4, 0x40800) syz_io_uring_setup(0xffc, &(0x7f0000000440)={0x0, 0xfffffdfd, 0x2000, 0x200, 0x2f1, 0x0, r0}, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x792, &(0x7f0000000140)=[{&(0x7f0000000040)=""/4, 0x4}], 0x1}) io_uring_enter(0xffffffffffffffff, 0x567, 0x1000a38c, 0x0, 0x0, 0xfffffffffffffc3c) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYRES8, @ANYRES16=r2, @ANYRESOCT=r1], 0x54}, 0x1, 0x0, 0x0, 0x24000884}, 0x2400c000) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000280)={[], [{@obj_user={'obj_user', 0x3d, 'fsname'}}, {@obj_role={'obj_role', 0x3d, '[[.-}'}}]}, 0x2, 0xbd1, &(0x7f0000001340)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x22000, 0x60) listen(0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xd409b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x37, 0x43a1bd78, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) fstatfs(r9, &(0x7f0000000340)=""/168) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) write$RDMA_USER_CM_CMD_SET_OPTION(r6, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @ib_path={0x0, r8}}, 0x20) 1.382083307s ago: executing program 4 (id=2103): r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)=""/19, 0x14}, 0x7}], 0x1, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000180)=0x6, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) 1.307350129s ago: executing program 2 (id=2105): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = syz_io_uring_setup(0xb5c, &(0x7f0000000640)={0x0, 0x8926, 0x0, 0x1, 0x164}, &(0x7f0000000040)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r1, 0xf23, 0x0, 0xc, 0x0, 0x0) 1.294690317s ago: executing program 1 (id=2107): bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x8, 0x3}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$sock(r1, 0x0, 0x0, 0x4000804) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB="00ffffffc300000008000a00", @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000240)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r2, 0x0, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14, 0x1, 0x4, 0x202, 0x0, 0x0, {0x3, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0xc084}, 0x4040000) r5 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) add_key(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'veth1_to_bond\x00'}) sendmsg$nl_route_sched(r7, 0x0, 0x4000800) r9 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r9, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)={0x60, r5, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r6}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000431}, 0x4040084) 1.221542119s ago: executing program 9 (id=2109): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080006000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000005e00000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 1.219053139s ago: executing program 9 (id=2110): prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup(r3) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r3, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000003c0)="882d960004000000007fffff", 0xc}], 0x1}, 0x4048043) 1.179841849s ago: executing program 2 (id=2111): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r1], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 524.755394ms ago: executing program 8 (id=2113): close(0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x68180, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x3fffffffb}, 0xc0c8, 0x0, 0x0, 0x3, 0x9, 0x8001, 0x7fff}, 0x0, 0xff6fffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x62, 0x0, 0x0, 0x0, 0x0, 0xcf, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x3, 0x6}, 0x1004, 0x0, 0x10000, 0x3, 0x2, 0x80004001, 0x0, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$nl_rdma(0x10, 0x3, 0x14) request_key(&(0x7f00000000c0)='dns_resolver\x00', 0x0, 0x0, 0x0) add_key$fscrypt_provisioning(0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000006c0)='net/dev\x00') sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, 0x0, 0x4010) preadv(r0, &(0x7f0000000240)=[{&(0x7f00000004c0)=""/152, 0x98}, {&(0x7f0000000580)=""/142, 0x2000060e}], 0x2, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100), 0x0) lseek(0xffffffffffffffff, 0x87, 0x1) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 518.278562ms ago: executing program 4 (id=2114): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fc3000000000000040014000d000a000da100009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x40) 465.74727ms ago: executing program 2 (id=2115): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@nobarrier}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") socket$key(0xf, 0x3, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', 0x4400, &(0x7f00000005c0)=ANY=[], 0xfc, 0x2e2, &(0x7f0000000940)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write$bt_hci(r3, &(0x7f0000000bc0)={0x1, @remote_name_req_cancel={{0x41a, 0x6}}}, 0xa) sendfile(r3, r0, 0x0, 0x40001) sendfile(r3, r2, 0x0, 0x7ffff000) ppoll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x140}, {0xffffffffffffffff, 0x50f0}, {0xffffffffffffffff, 0x400}], 0x3, &(0x7f0000000200)={0x77359400}, &(0x7f0000000240)={[0x2]}, 0x58) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001780), r5) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000017c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_INTERFACE(r6, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001880)={&(0x7f0000001800)={0x1c, r7, 0x409, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x80) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r4, 0x80047210, 0x0) linkat(r4, &(0x7f00000000c0)='./bus\x00', r0, 0x0, 0x400) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r0, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000000)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x7, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x49, &(0x7f0000000180), 0x0, 0x10, &(0x7f0000000280), &(0x7f0000000300), 0x8, 0xac, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) 391.087883ms ago: executing program 1 (id=2116): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f0000000380)={@generic={0x1f, "f1e6925441ccad322d31ebf988f2633ba2cc84321b3d77a70cd02af4f6c439f87d0f310e67296fbc160a967b138caf52ac9421200c010988c92671f74aa6e9acbeb25c6d7dc5a134f9b192ccdfe68bed0f434ce78ca1ebbecde253073a8ba25c140ed7e94f38fc5cbb02938c2133aa9ecc4f812210ff6d3d498c2b5ffa63"}, {0x0}, 0x0, 0x25}, 0xa0) r2 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x2000000, 0x132}, &(0x7f0000000100)=0x0, &(0x7f0000002300)=0x0) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$sock_buf(r5, 0x1, 0x1c, 0x0, &(0x7f0000000580)) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16, @ANYBLOB="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"], 0x64}, 0x1, 0x0, 0x0, 0x4008090}, 0x20000895) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf64(r6, &(0x7f00000003c0)=ANY=[], 0x78) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r6, 0x0) setitimer(0x1, &(0x7f0000000000)={{0x0, 0x2710}, {0x77359400}}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x3}}) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x4, 0x8, 0x3, 0x0, 0x0, {0x3, 0x0, 0x7}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x10}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xa}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8004}, 0x40000) flistxattr(r2, &(0x7f0000000040)=""/22, 0x16) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r7, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x10, 0x4004, @fd_index=0x9, 0x6, 0x0, 0x0, 0x3, 0x1}) socket$inet(0x2, 0xa, 0x262) r8 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(r9, r9) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0xc018937b, &(0x7f0000000640)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xffffffffffffffff}}, './file0\x00'}) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r12, 0x0, 0x0}, 0x10) statx(r7, &(0x7f0000000680)='./file0\x00', 0x800, 0x40, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgroups(0x3, &(0x7f00000007c0)=[r9, r10, r13]) syz_open_procfs(0x0, &(0x7f0000000880)='net/packet\x00') 390.744463ms ago: executing program 8 (id=2117): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x0) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x20}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0xfe, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0xfffd}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) 390.564552ms ago: executing program 4 (id=2118): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {0x0, 0x1}, 0x3f, 0x0, &(0x7f0000000240)={0x0, 0xf, 0x0, 0x2c5}, 0x8, 0x8, 0x0, 0x0, 0x2000, 0x200001, 0x0}) 305.356902ms ago: executing program 1 (id=2119): timer_delete(0x0) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0xcf, 0x100, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x7, 0x6}, 0x0, 0x0, 0x10000, 0x7, 0x2, 0x80004001, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0x60, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) (async) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x80510, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x4000000006, 0x4}, 0x102260, 0x10000, 0x1, 0x1, 0x8, 0x20005, 0x987, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r0 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0xcde, 0x4) (async) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x1000000000000b0, 0x42758, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0xd07, 0x4}, 0x2000, 0x8, 0xffffffff, 0x0, 0xb, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x3, 0xffffffffffffffff, 0x1) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x13, 0xffffffffffffffff, 0x0) (async, rerun: 32) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="54000000020603000000000000000000000000000d00030068610200000065740000000005000400b2aa5e5d76e7000000000900020073797a31000000000c00078108001340000017e50500050002000000050018dbda9fe0c6cff14ec33eb6ca9b3093e228f25b9cd3e642e272026cbd1659784ca450764429d164b05a0e63cb2ca39ac480eaad07e30d563531d7c600fc9d0296c82aa080d3704cca93ceabeb9d75b83700fa17541259b84854dd69d68108fb0d41dbcc7b8761bcb1207ac7be67738075b575314f9e85393d0c7fb89c5bd789b3cb437dd2c79f1e92e43a1c06b1ef5cdb77932f2cac11e4bfdcfe288c38ee257a7ae6507669419f1f062e64006793b645540235f4fb005111e49497623fea98aaf6ba57f9371031"], 0x54}}, 0x0) (async, rerun: 32) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000009060102000000f8ffffff00000000000900020073797a310000000005000100070000001c0007800c00018008000140fffffffe0c000280080001407f000001"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) (async) r3 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet_udp(0x2, 0x2, 0x0) (async) connect$pppl2tp(r3, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x0, 0x4, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x32) (async) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000f7ab14a068b985bed4be8f751309c7362b4bf5d7173446df", @ANYRES16=r4, @ANYBLOB="010028bd7000fcdbdf25020000000800090002000000"], 0x1c}}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000300000005"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESHEX=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 32) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4014) (async) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) 288.330828ms ago: executing program 4 (id=2120): syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) open(0x0, 0xc8180, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x4) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f40)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e00010077697265677561726400"], 0x40}}, 0x0) 284.113047ms ago: executing program 9 (id=2121): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = syz_io_uring_setup(0xb5c, &(0x7f0000000640)={0x0, 0x8926, 0x0, 0x1, 0x164}, &(0x7f0000000040)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r1, 0xf23, 0x0, 0xc, 0x0, 0x0) 216.704291ms ago: executing program 1 (id=2122): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x429a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x8000) 216.000161ms ago: executing program 9 (id=2123): socket$inet6(0xa, 0x2, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x2800) r0 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f0000000040)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) 153.507206ms ago: executing program 4 (id=2124): r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)=""/19, 0x14}, 0x7}], 0x1, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000180)=0x6, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) 146.229034ms ago: executing program 8 (id=2125): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079104800000000007104c300000000009500f3ff"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x2c, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 140.348183ms ago: executing program 1 (id=2126): r0 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="28010000100007000000000000000000ff020000000000000000000000000001e00000020000000000000000000000004e200000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc0000000000000000000000000000000000000000000000000000fff2000000020000000000000000000000000000000000001000000000ffffffffffffffff00000000000000000000000000000000000000000000000000002000000000000700000000000000000000000000000000000400fdffffffe80a000000000000000000000a000200340000000000000014000e00fe8000000000000000000000000000bb2400090003000000000000000100000000000080b40000000000000005"], 0x128}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="040100001a0007002abd700000000000fe80000000000000000000800000001be0000001000000000000000000000000ffff00004e2200000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc0000000000000000000000000000005a0000000000000000b40000000000000200000000000000010000007ffffffe0000000300000000000006000000000000000000000000000000000000000000000000000000000000002000000000000700000000000000fdffffffffffffff0000040000000000e80a000000000000000000000a000200700000000000000014000e"], 0x104}}, 0x0) 118.688488ms ago: executing program 8 (id=2127): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r0, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff0000ffb0b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa600000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000240)='GPL\x00', 0x4, 0x1009, &(0x7f0000002500)=""/4105, 0x80100, 0x68}, 0x94) 110.528106ms ago: executing program 9 (id=2128): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r3, 0x20, 0x70bd28, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x8014) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xffe0, 0x1}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_LIMIT={0x8, 0x2, 0x1}, @TCA_PIE_ALPHA={0x8, 0x4, 0xe}]}}]}, 0x40}}, 0x20000000) 65.450245ms ago: executing program 1 (id=2129): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_rdma(0x10, 0x3, 0x14) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x4, 0xffffffff, 0xfffffff8, 0xfffffffc}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_config_ext={0x8, 0x2}, 0x6000, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = syz_open_dev$sg(0x0, 0x4, 0x400) ioctl$SCSI_IOCTL_SYNC(r3, 0x4) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x90, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x28, 0x80, 0xb, [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x3, 0x1, 0x1, 0x80, {0x9, 0x21, 0x1, 0x8, 0x1, {0x22, 0xd4e}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x0, 0x6}}}}}]}}]}}, &(0x7f00000010c0)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x201, 0x3, 0xc, 0x4, 0x10, 0xc}, 0x5, &(0x7f0000000f80)={0x5, 0xf, 0x5}, 0x1, [{0x0, 0x0}]}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0x0, 0x0, 0x7}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x43) 59.534644ms ago: executing program 8 (id=2130): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {0x0, 0x1}, 0x3f, 0x0, &(0x7f0000000240)={0x0, 0xf, 0x0, 0x2c5}, 0x8, 0x8, 0x0, 0x0, 0x2000, 0x200001, 0x0}) 59.129424ms ago: executing program 9 (id=2131): r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) syz_emit_ethernet(0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x143042, 0x80) pwritev2(r4, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfe}], 0x1, 0x5405, 0x0, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)={0x130, r5, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x70, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @local}}, {0x14, 0x2, @in={0x2, 0x4e23, @broadcast}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x10f}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x800, @local, 0x7}}, {0x14, 0x2, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1f}}}}}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x3}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x200}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xf}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xb000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x99be}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}]}, @TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x800}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3ff}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x20040004}, 0x4841) r6 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x13, 0x0, 0x0, 0x7995}, 0x10022, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 0s ago: executing program 8 (id=2132): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0xb20, 0x1c0, 0x43, 0xa0, 0x0, 0x98, 0xa88, 0x178, 0x178, 0xa88, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x1a0, 0x1c0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x3, {0x100000001}}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x888, 0x8c8, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}, @common=@unspec=@u32={{0x7e0}, {[{[{0x9}, {0x3}, {0x1, 0x1}, {0x0, 0x3}, {0x4, 0x2}, {0xb1d}, {0x3}, {0x8}, {0x2, 0x3}, {0x3}, {0x103}], [{0xe8f3, 0x5}, {0x1d, 0x6}, {0x1, 0x8}, {0x0, 0x4}, {0x4, 0xc3e}, {0x1, 0x100}, {0x6, 0x7}, {0x3, 0x3}, {0xf2, 0x3}, {0x3ff, 0x8}, {0x10, 0x3}], 0x6, 0x6}, {[{0x80, 0x3}, {0x2}, {0x6, 0x1}, {0x355cbac3, 0x2}, {0x0, 0x2}, {0x0, 0x2}, {0x7}, {0xe7, 0x2}, {0x3, 0x3}, {0x5598e8fe, 0x2}, {0x1d, 0x1}], [{0x9, 0x9097}, {0x7, 0x9}, {0x7, 0xa}, {0x6, 0x8}, {0x20080, 0x5}, {0x13, 0xc0000000}, {0x40, 0xb}, {0x9, 0x6}, {0x4, 0x2}, {0x6, 0x7fffffff}, {0x7fffffff, 0x400}], 0x7}, {[{0x84, 0x2}, {}, {0x0, 0x2}, {0xffffffff, 0x1}, {}, {0x5, 0x1}, {0x5, 0x2}, {0x8, 0x3}, {0x2, 0x3}, {0x8, 0x1}, {0x7, 0x1}], [{0x9, 0x5}, {0x80, 0x32}, {0x0, 0xfffffff7}, {0xff, 0x1}, {0x7, 0xfffffff6}, {0xdb9, 0xff4}, {0x6, 0x3ff}, {0x3, 0x6}, {0x5, 0x10}, {0x9, 0x6}, {0x10000, 0x10002}], 0x3, 0x2a}, {[{0x3, 0x2}, {0xa, 0x1}, {0x6, 0x1}, {0x10, 0x3}, {0x2, 0x2}, {0x2, 0x2}, {0x3, 0x1}, {0x2, 0x3}, {0x3, 0x1}, {0x2, 0x2}, {0x477d, 0x1}], [{0x0, 0xffffffff}, {0x200, 0x6}, {0x4be1, 0x4044}, {0x1}, {0x5, 0xc}, {0x3, 0x4}, {0x2, 0x4}, {0x800, 0x8000}, {0x8, 0x800}, {0x3, 0x2}, {0xe, 0x8000}], 0x4, 0xb}, {[{0x7, 0x1}, {0xd, 0x3}, {0x5}, {0x61}, {0x9}, {}, {0x2}, {0x1}, {0x40000000, 0x2}, {0x9, 0x3}, {0x5, 0x3}], [{0x58d, 0x3ff}, {0x0, 0x7f}, {0x6}, {0xfc9b, 0x80000001}, {0x101, 0x7}, {0x7, 0x1}, {0x7, 0x8001}, {0x2, 0x1}, {0x2, 0x2}, {0x9, 0x4cf}, {0x7, 0x10000}], 0x1}, {[{0x2}, {0x9}, {0x8, 0x1}, {0x2, 0x3}, {0x71, 0x3}, {0x0, 0x2}, {0xe, 0x2}, {0x6, 0x2}, {0x5}, {0x3000000, 0x3}, {0x6}], [{0x9, 0x3}, {0x5, 0x7fffffff}, {0xffff, 0x4}, {0x0, 0x7}, {0x8, 0xb502}, {0x1ff, 0x86}, {0x6, 0xffffffff}, {0x3, 0x4}, {0x5, 0x6}, {0xf, 0xf93}, {0x5, 0x4}], 0x3, 0x3}, {[{0x7, 0x1}, {0x3, 0x1}, {0x45d7}, {0xfff, 0x3}, {0xc4f, 0x3}, {0x0, 0x2}, {0x400, 0x1}, {0x2, 0x1}, {0x4, 0x2}, {0xfffffffd}, {0x2}], [{0x3, 0x6}, {0xed, 0xd}, {0x80, 0xb81d}, {0x2ca, 0x80000000}, {0x8, 0xff}, {0x7, 0x45a8}, {0x8, 0x6}, {0x4, 0x1}, {0x2, 0x6}, {0xfc, 0x6}, {0xd, 0x138c}], 0x6}, {[{0x4, 0x1}, {0x800}, {0x9, 0x2}, {0xf0000000, 0x2}, {0x6, 0x3}, {0x3, 0x2}, {0x8, 0x2}, {}, {0x9}, {0x400, 0x2}, {0x8, 0x3}], [{0x7, 0xfffffffd}, {0x2}, {0x2, 0x2}, {0x8f, 0x6}, {0x7, 0x5}, {0x8, 0x7}, {0xb, 0x82c6}, {0xb1b}, {0xbd5c, 0xffff}, {0x1, 0x9b8d}, {0xec, 0x5}], 0x0, 0x6}, {[{0x8}, {0x0, 0x1}, {0xac000000}, {0x6, 0x2}, {0x2d8, 0x3}, {0x7e3ea4bc}, {0x8, 0x1324f499ce9a99e8}, {0x4f, 0x3}, {0x4, 0x2}, {0xfffffff7}, {0x3, 0x2}], [{0x5, 0x42}, {0x76a74689, 0xfffff156}, {0x1}, {0x8000, 0x7}, {0x400, 0xdd}, {0xfff, 0x8}, {0x76b, 0xfffffffe}, {0xa6d00, 0xfffffff7}, {0x10001, 0xfc8d}, {0x0, 0x10001}, {0x4, 0x3}], 0x1, 0x9}, {[{0x8, 0x1}, {0x3, 0x3}, {0x18, 0x3}, {0x3ff, 0x3}, {0x7fffffff}, {0x8}, {0x1}, {0x8, 0x3}, {0xf1b6}, {0x80, 0x3}, {0x4, 0x2}], [{0x2, 0x4}, {0x3, 0xf}, {0x9, 0x6}, {0x7f, 0x8}, {0x7, 0x273e1899}, {0x4, 0x1}, {0x6, 0x3}, {0x1, 0xb7}, {0x8, 0x3}, {0x3, 0x1}, {0x7ff, 0x63}], 0xb, 0x3}, {[{0x1, 0x2}, {0x6, 0x3}, {0xffff, 0x1}, {0x1}, {0x4, 0x3}, {0x4, 0x3}, {0xaa7}, {0x100, 0x3}, {0x2}, {0xfffffff7, 0xb90af65875a5dc08}, {0x4, 0x3}], [{0x3}, {0x8001, 0x7}, {0x10000, 0x7524}, {0x73d, 0x4}, {0x0, 0x280000}, {0x3, 0x3af}, {0x5, 0x2}, {0x101, 0xbf}, {0x10000, 0x6}, {0x3, 0x800}], 0x8, 0x5}], 0x3}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f1c098b60204ed02d82cf440fef5497b80c29d381d41116000"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0xb80) kernel console output (not intermixed with test programs): activated: batadv_slave_1 [ 147.590462][ T7819] netlink: 40 bytes leftover after parsing attributes in process `syz.9.1071'. [ 147.620412][ T2077] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.633640][ T7819] netlink: 40 bytes leftover after parsing attributes in process `syz.9.1071'. [ 147.671141][ T2077] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.683852][ T2077] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.705577][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 147.705591][ T28] audit: type=1400 audit(1772231025.530:1372): avc: denied { recv } for pid=7445 comm="syz-executor" saddr=10.128.0.163 src=30036 daddr=10.128.0.20 dest=51528 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 147.748430][ T2077] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.110263][ T28] audit: type=1400 audit(1772231025.940:1373): avc: denied { egress } for pid=3394 comm="kworker/1:3" saddr=fe80::1b daddr=ff02::16 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 148.152173][ T7853] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1080'. [ 148.173409][ T7853] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1080'. [ 148.194510][ T28] audit: type=1400 audit(1772231025.940:1374): avc: denied { sendto } for pid=3394 comm="kworker/1:3" saddr=fe80::1b daddr=ff02::16 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 148.272973][ T7857] team_slave_1: entered promiscuous mode [ 148.338045][ T7857] vlan2: entered promiscuous mode [ 148.343785][ T7857] team0: entered promiscuous mode [ 148.633983][ T7887] bridge_slave_0: left allmulticast mode [ 148.649213][ T7887] bridge_slave_0: left promiscuous mode [ 148.654972][ T7887] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.681718][ T7907] loop9: detected capacity change from 0 to 512 [ 148.693415][ T7887] bridge_slave_1: left allmulticast mode [ 148.702494][ T7887] bridge_slave_1: left promiscuous mode [ 148.708191][ T7887] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.742544][ T7887] bond0: (slave bond_slave_0): Releasing backup interface [ 148.752617][ T7919] netlink: 'syz.1.1090': attribute type 10 has an invalid length. [ 148.752663][ T7887] bond0: (slave bond_slave_1): Releasing backup interface [ 148.789839][ T7919] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1090'. [ 148.805912][ T7887] team0: Port device team_slave_0 removed [ 148.818855][ T7887] team0: Port device team_slave_1 removed [ 148.825797][ T7887] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 148.846195][ T7887] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 148.855263][ T7887] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 148.869143][ T7887] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 148.883570][ T7887] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 148.906668][ T7897] tipc: Enabling of bearer rejected, already enabled [ 148.922064][ T7892] tipc: Enabling of bearer rejected, already enabled [ 149.257716][ T7956] lo speed is unknown, defaulting to 1000 [ 149.263587][ T7956] lo speed is unknown, defaulting to 1000 [ 149.269709][ T7956] lo speed is unknown, defaulting to 1000 [ 149.276469][ T7956] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 149.284974][ T7956] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 149.306651][ T7956] lo speed is unknown, defaulting to 1000 [ 149.313250][ T7956] lo speed is unknown, defaulting to 1000 [ 149.319490][ T7956] lo speed is unknown, defaulting to 1000 [ 149.325605][ T7956] lo speed is unknown, defaulting to 1000 [ 149.331965][ T7956] lo speed is unknown, defaulting to 1000 [ 149.356414][ T7956] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 149.647281][ T7964] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1098'. [ 149.683497][ T7964] vlan2: entered promiscuous mode [ 149.688550][ T7964] syz_tun: entered promiscuous mode [ 149.704663][ T7970] loop4: detected capacity change from 0 to 512 [ 149.731248][ T7970] EXT4-fs: Ignoring removed mblk_io_submit option [ 149.763536][ T7970] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.789735][ T7970] ext4 filesystem being mounted at /6/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 149.830649][ T7970] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7970 comm=syz.4.1100 [ 150.004301][ T7445] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.113247][ T8004] loop1: detected capacity change from 0 to 128 [ 150.120372][ T8004] vfat: Unknown parameter '18446744073709551615' [ 150.632216][ T8009] loop9: detected capacity change from 0 to 256 [ 150.639505][ T8009] vfat: Unknown parameter 'w9D)KbJou`5T!ySW }iCɖ!|sm_{ӧj#| JMm'XQ C}>r^u4iMV&ɦepC+' [ 151.319418][ T8038] loop5: detected capacity change from 0 to 1764 [ 151.801554][ T8091] vcan0: tx drop: invalid da for name 0x00000000000000c7 [ 151.809338][ T8090] loop8: detected capacity change from 0 to 512 [ 151.825460][ T8090] EXT4-fs: Ignoring removed mblk_io_submit option [ 151.873094][ T8090] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.874768][ T8090] ext4 filesystem being mounted at /104/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 151.892743][ T8090] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8090 comm=syz.8.1117 [ 151.902200][ T8091] lo speed is unknown, defaulting to 1000 [ 151.923622][ T5534] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.048933][ T8091] loop1: detected capacity change from 0 to 512 [ 152.062789][ T8109] netlink: 'syz.9.1124': attribute type 10 has an invalid length. [ 152.062804][ T8109] __nla_validate_parse: 1 callbacks suppressed [ 152.062814][ T8109] netlink: 40 bytes leftover after parsing attributes in process `syz.9.1124'. [ 152.062933][ T8109] bridge0: port 3(dummy0) entered blocking state [ 152.062985][ T8109] bridge0: port 3(dummy0) entered disabled state [ 152.063223][ T8109] dummy0: entered allmulticast mode [ 152.063835][ T8109] dummy0: entered promiscuous mode [ 152.068843][ T8109] bridge0: port 3(dummy0) entered blocking state [ 152.120910][ T8109] bridge0: port 3(dummy0) entered forwarding state [ 152.149177][ T8114] netlink: 104 bytes leftover after parsing attributes in process `syz.8.1125'. [ 152.173946][ T8114] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1125'. [ 152.183163][ T8114] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1125'. [ 152.219145][ T8122] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 152.249447][ T8124] netlink: 'syz.5.1130': attribute type 11 has an invalid length. [ 152.250330][ T8122] team0: No ports can be present during mode change [ 152.260638][ T8124] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1130'. [ 152.270836][ T8127] loop8: detected capacity change from 0 to 512 [ 152.287127][ T8127] EXT4-fs: Ignoring removed mblk_io_submit option [ 152.308974][ T8130] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1132'. [ 152.327758][ T8127] ext4 filesystem being mounted at /107/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 152.368115][ T8127] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1131'. [ 152.494891][ T8150] xt_connbytes: Forcing CT accounting to be enabled [ 152.836402][ T28] audit: type=1400 audit(1772231030.650:1375): avc: denied { write } for pid=8172 comm="syz.8.1146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 152.861386][ T8175] loop9: detected capacity change from 0 to 1024 [ 153.384947][ T8192] lo speed is unknown, defaulting to 1000 [ 153.705749][ T8201] loop8: detected capacity change from 0 to 2048 [ 153.733487][ T8201] ext4 filesystem being mounted at /115/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 154.384009][ T8220] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1159'. [ 154.402911][ T8222] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1159'. [ 154.492922][ T8225] loop9: detected capacity change from 0 to 256 [ 154.499750][ T8225] vfat: Unknown parameter 'w9D)KbJou`5T!ySW }iCɖ!|sm_{ӧj#| JMm'XQ C}>r^u4iMV&ɦepC+' [ 154.720682][ T8237] loop4: detected capacity change from 0 to 128 [ 154.766711][ T28] audit: type=1400 audit(1772231032.580:1376): avc: denied { accept } for pid=8238 comm="syz.1.1166" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 154.901017][ T8247] syz.4.1165: attempt to access beyond end of device [ 154.901017][ T8247] loop4: rw=2049, sector=945, nr_sectors = 96 limit=128 [ 154.921551][ T8250] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1169'. [ 154.939135][ T8248] loop1: detected capacity change from 0 to 1764 [ 155.141609][ T8227] loop5: detected capacity change from 0 to 256 [ 155.184524][ T8224] lo speed is unknown, defaulting to 1000 [ 155.567179][ T8271] tipc: Enabling of bearer rejected, already enabled [ 155.595430][ T8227] FAT-fs (loop5): Directory bread(block 64) failed [ 155.629359][ T8227] FAT-fs (loop5): Directory bread(block 65) failed [ 155.649060][ T8227] FAT-fs (loop5): Directory bread(block 66) failed [ 155.656246][ T8227] FAT-fs (loop5): Directory bread(block 67) failed [ 155.675862][ T8271] tipc: Enabling of bearer rejected, already enabled [ 155.689589][ T8227] FAT-fs (loop5): Directory bread(block 68) failed [ 155.696266][ T8227] FAT-fs (loop5): Directory bread(block 69) failed [ 155.750715][ T8227] FAT-fs (loop5): Directory bread(block 70) failed [ 155.763468][ T8274] lo: entered promiscuous mode [ 155.770706][ T8274] lo: entered allmulticast mode [ 155.776744][ T8274] tunl0: entered promiscuous mode [ 155.784419][ T8227] FAT-fs (loop5): Directory bread(block 71) failed [ 155.796042][ T8286] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8286 comm=syz.4.1180 [ 155.813096][ T8274] tunl0: entered allmulticast mode [ 155.818526][ T8227] FAT-fs (loop5): Directory bread(block 72) failed [ 155.828254][ T8227] FAT-fs (loop5): Directory bread(block 73) failed [ 155.836727][ T8274] gre0: entered promiscuous mode [ 155.842216][ T8274] gre0: entered allmulticast mode [ 155.849058][ T8274] gretap0: entered allmulticast mode [ 155.852366][ T8290] loop1: detected capacity change from 0 to 512 [ 155.855819][ T8274] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 155.879010][ T8284] team0: No ports can be present during mode change [ 155.897976][ T8290] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.1182: invalid indirect mapped block 256 (level 2) [ 155.916798][ T8290] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 155.919094][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 155.934668][ C1] EXT4-fs (loop1): initial error at time 1772231033: ext4_free_branches:1023: inode 11 [ 155.944367][ C1] EXT4-fs (loop1): last error at time 1772231033: ext4_free_branches:1023: inode 11 [ 155.955736][ T8290] EXT4-fs (loop1): 2 truncates cleaned up [ 155.983610][ T8290] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 156.025490][ T8294] ext4: Unknown parameter '' [ 156.171640][ T8310] netlink: zone id is out of range [ 156.176840][ T8310] netlink: zone id is out of range [ 156.194662][ T8310] netlink: zone id is out of range [ 156.235222][ T8310] netlink: set zone limit has 8 unknown bytes [ 156.267175][ T8318] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 156.293150][ T8317] lo speed is unknown, defaulting to 1000 [ 156.296315][ T8318] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 156.319096][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 156.320430][ T8318] EXT4-fs (loop1): 1 truncate cleaned up [ 156.325547][ C1] EXT4-fs (loop1): initial error at time 1772231034: ext4_mb_generate_buddy:1315 [ 156.340291][ C1] EXT4-fs (loop1): last error at time 1772231034: ext4_mb_generate_buddy:1315 [ 156.406594][ T8323] lo: entered promiscuous mode [ 156.416219][ T8323] lo: entered allmulticast mode [ 156.425988][ T8323] tunl0: entered promiscuous mode [ 156.443707][ T28] audit: type=1326 audit(1772231034.260:1377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8319 comm="syz.5.1192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68fc71c799 code=0x7ffc0000 [ 156.472225][ T8327] EXT4-fs error (device loop1): ext4_inlinedir_to_tree:1324: inode #12: block 7: comm syz.1.1191: path /newroot/256/bus/file0: bad entry in directory: directory entry overrun - offset=80, inode=2147483648, rec_len=1024, size=60 fake=0 [ 156.472364][ T8323] tunl0: entered allmulticast mode [ 156.473470][ T8323] gre0: entered promiscuous mode [ 156.505817][ T28] audit: type=1326 audit(1772231034.260:1378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8319 comm="syz.5.1192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68fc71c799 code=0x7ffc0000 [ 156.535533][ T8323] gre0: entered allmulticast mode [ 156.543190][ T8323] gretap0: entered promiscuous mode [ 156.548456][ T28] audit: type=1326 audit(1772231034.260:1379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8319 comm="syz.5.1192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f68fc71c799 code=0x7ffc0000 [ 156.573998][ T8323] gretap0: entered allmulticast mode [ 156.632026][ T8323] erspan0: entered promiscuous mode [ 156.638266][ T28] audit: type=1326 audit(1772231034.260:1380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8319 comm="syz.5.1192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68fc71c799 code=0x7ffc0000 [ 156.671359][ T8323] erspan0: entered allmulticast mode [ 156.690489][ T8323] ip_vti0: entered promiscuous mode [ 156.695779][ T8323] ip_vti0: entered allmulticast mode [ 156.703464][ T8323] ip6_vti0: entered promiscuous mode [ 156.708757][ T8323] ip6_vti0: entered allmulticast mode [ 156.715077][ T28] audit: type=1326 audit(1772231034.260:1381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8319 comm="syz.5.1192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68fc71c799 code=0x7ffc0000 [ 156.740237][ T8323] sit0: entered promiscuous mode [ 156.745183][ T8323] sit0: entered allmulticast mode [ 156.752073][ T8323] ip6tnl0: entered promiscuous mode [ 156.757273][ T8323] ip6tnl0: entered allmulticast mode [ 156.763138][ T28] audit: type=1326 audit(1772231034.260:1382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8319 comm="syz.5.1192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f68fc71c799 code=0x7ffc0000 [ 156.792802][ T8323] ip6gre0: entered promiscuous mode [ 156.798241][ T8323] ip6gre0: entered allmulticast mode [ 156.804971][ T8323] syz_tun: entered promiscuous mode [ 156.810388][ T8323] syz_tun: entered allmulticast mode [ 156.815807][ T28] audit: type=1326 audit(1772231034.260:1383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8319 comm="syz.5.1192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68fc71c799 code=0x7ffc0000 [ 156.840524][ T8323] ip6gretap0: entered promiscuous mode [ 156.845984][ T8323] ip6gretap0: entered allmulticast mode [ 156.853562][ T8323] bridge0: entered promiscuous mode [ 156.858813][ T8323] bridge0: entered allmulticast mode [ 156.859173][ T28] audit: type=1326 audit(1772231034.260:1384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8319 comm="syz.5.1192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f68fc71c799 code=0x7ffc0000 [ 156.865614][ T8323] vcan0: entered promiscuous mode [ 156.894733][ T8323] vcan0: entered allmulticast mode [ 156.901960][ T8323] bond0: entered promiscuous mode [ 156.907230][ T8323] bond0: entered allmulticast mode [ 156.914841][ T8323] team0: entered promiscuous mode [ 156.920082][ T8323] team0: entered allmulticast mode [ 156.926885][ T8323] dummy0: entered promiscuous mode [ 156.932423][ T8323] dummy0: entered allmulticast mode [ 156.938659][ T8323] nlmon0: entered promiscuous mode [ 156.944191][ T8323] nlmon0: entered allmulticast mode [ 156.950695][ T8323] caif0: entered promiscuous mode [ 156.955868][ T8323] caif0: entered allmulticast mode [ 156.961066][ T8323] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 156.994612][ T8330] team0: Mode changed to "loadbalance" [ 157.139008][ T8353] set_capacity_and_notify: 4 callbacks suppressed [ 157.145873][ T8353] loop8: detected capacity change from 0 to 1764 [ 157.220900][ T8357] Cannot find add_set index 0 as target [ 157.226634][ T8351] delete_channel: no stack [ 157.542911][ T8378] loop1: detected capacity change from 0 to 1764 [ 157.549739][ T8378] iso9660: Bad value for 'block' [ 157.562134][ T8377] __nla_validate_parse: 3 callbacks suppressed [ 157.562163][ T8377] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1210'. [ 157.607904][ T8377] debugfs: 'hsr1' already exists in 'hsr' [ 157.621092][ T8377] Cannot create hsr debugfs directory [ 157.632699][ T8377] hsr1: entered promiscuous mode [ 157.785230][ T8382] loop9: detected capacity change from 0 to 1764 [ 157.946563][ T8391] loop9: detected capacity change from 0 to 1024 [ 158.056086][ T8397] netlink: 52 bytes leftover after parsing attributes in process `syz.9.1215'. [ 158.065214][ T8395] loop4: detected capacity change from 0 to 256 [ 158.072004][ T8395] vfat: Unknown parameter 'w9D)KbJou`5T!ySW }iCɖ!|sm_{ӧj#| JMm'XQ C}>r^u4iMV&ɦepC+' [ 158.108532][ T8398] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1215'. [ 158.160499][ T8398] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1215'. [ 158.567619][ T8407] TCP: tcp_parse_options: Illegal window scaling value 129 > 14 received [ 158.581028][ T8408] vlan2: entered promiscuous mode [ 158.623355][ T7235] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.714506][ T7235] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.728361][ T8425] loop9: detected capacity change from 0 to 128 [ 158.761491][ T8425] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 158.808491][ T7235] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.881807][ T7235] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.898097][ T8440] netlink: 132 bytes leftover after parsing attributes in process `syz.8.1224'. [ 158.963701][ T8428] lo speed is unknown, defaulting to 1000 [ 158.987328][ T8447] loop8: detected capacity change from 0 to 512 [ 158.995406][ T7235] dummy0: left allmulticast mode [ 159.001167][ T7235] bridge0: port 3(dummy0) entered disabled state [ 159.015193][ T7235] bridge_slave_1: left allmulticast mode [ 159.022589][ T7235] bridge_slave_1: left promiscuous mode [ 159.028311][ T7235] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.036364][ T8447] EXT4-fs mount: 18 callbacks suppressed [ 159.036375][ T8447] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.054948][ T8447] ext4 filesystem being mounted at /129/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 159.065672][ T7235] bridge_slave_0: left allmulticast mode [ 159.071730][ T7235] bridge_slave_0: left promiscuous mode [ 159.077721][ T7235] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.086518][ T5534] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.150705][ T28] kauditd_printk_skb: 23 callbacks suppressed [ 159.150719][ T28] audit: type=1326 audit(1772231036.970:1408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8450 comm="syz.8.1226" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8b8be6c799 code=0x0 [ 159.185291][ T7235] gretap0 (unregistering): left promiscuous mode [ 159.271871][ T7235] tipc: Disabling bearer [ 159.277638][ T7235] tipc: Disabling bearer [ 159.286493][ T7235] tipc: Left network mode [ 159.297148][ T7235] IPVS: stopping backup sync thread 3874 ... [ 159.306009][ T7235] hsr_slave_0: left promiscuous mode [ 159.319557][ T7235] hsr_slave_1: left promiscuous mode [ 159.325435][ T7235] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 159.339187][ T7235] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 159.354337][ T7235] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 159.368406][ T7235] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 159.383371][ T7235] veth1_macvtap: left promiscuous mode [ 159.388941][ T7235] veth0_macvtap: left promiscuous mode [ 159.395122][ T7235] veth1_vlan: left promiscuous mode [ 159.400458][ T7235] veth0_vlan: left promiscuous mode [ 159.469733][ T7235] team_slave_1 (unregistering): left promiscuous mode [ 159.476980][ T7235] team0 (unregistering): Port device team_slave_1 removed [ 159.488664][ T7235] team_slave_0 (unregistering): left promiscuous mode [ 159.496123][ T7235] team0 (unregistering): Port device team_slave_0 removed [ 159.559197][ T8428] chnl_net:caif_netlink_parms(): no params data found [ 159.580823][ T8472] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1228'. [ 159.645039][ T8428] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.655640][ T8428] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.661913][ T28] audit: type=1400 audit(1772231037.490:1409): avc: denied { bind } for pid=8480 comm="syz.5.1230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 159.663651][ T8428] bridge_slave_0: entered allmulticast mode [ 159.688641][ T8428] bridge_slave_0: entered promiscuous mode [ 159.695772][ T8428] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.718609][ T8428] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.726071][ T8428] bridge_slave_1: entered allmulticast mode [ 159.732827][ T8428] bridge_slave_1: entered promiscuous mode [ 159.813615][ T8496] loop5: detected capacity change from 0 to 256 [ 159.865202][ T8428] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 159.875516][ T8428] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 159.896585][ T8428] team0: Port device team_slave_0 added [ 159.898997][ T8496] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1232'. [ 159.914779][ T8428] team0: Port device team_slave_1 added [ 160.097906][ T8428] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 160.194657][ T8428] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 160.225218][ T8504] netlink: 'syz.8.1233': attribute type 3 has an invalid length. [ 160.279615][ T8504] netlink: 'syz.8.1233': attribute type 1 has an invalid length. [ 160.323118][ T8428] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 160.331625][ T8504] netlink: 198116 bytes leftover after parsing attributes in process `syz.8.1233'. [ 160.334316][ T8428] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 160.349971][ T8428] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 160.375916][ T8428] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 160.445317][ T8428] hsr_slave_0: entered promiscuous mode [ 160.470822][ T8428] hsr_slave_1: entered promiscuous mode [ 160.478008][ T8428] debugfs: 'hsr0' already exists in 'hsr' [ 160.483879][ T8428] Cannot create hsr debugfs directory [ 160.535087][ T7235] IPVS: stop unused estimator thread 0... [ 160.545223][ T8513] syzkaller0: entered promiscuous mode [ 160.553885][ T8513] syzkaller0: entered allmulticast mode [ 160.790355][ T8528] loop9: detected capacity change from 0 to 128 [ 160.809630][ T8528] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 160.839782][ T8528] ext4 filesystem being mounted at /68/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 160.900570][ T6520] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 160.999528][ T8540] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 161.074838][ T8544] tipc: Enabling of bearer rejected, already enabled [ 161.090856][ T8540] team0: Unable to change to the same mode the team is in [ 161.142884][ T8538] lo speed is unknown, defaulting to 1000 [ 161.215885][ T8562] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=36 sclass=netlink_tcpdiag_socket pid=8562 comm=syz.4.1247 [ 161.239719][ T8562] loop4: detected capacity change from 0 to 512 [ 161.263247][ T8562] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.277576][ T8562] ext4 filesystem being mounted at /file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 161.295427][ T8562] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.297163][ T8538] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1243'. [ 161.326849][ T8428] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 161.333862][ T8538] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1243'. [ 161.358773][ T8428] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 161.369469][ T8562] EXT4-fs: Ignoring removed mblk_io_submit option [ 161.378047][ T8428] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 161.379472][ T8575] netlink: 'syz.5.1248': attribute type 10 has an invalid length. [ 161.395270][ T8428] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 161.399377][ T8562] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 161.420825][ T8562] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.434038][ T8562] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.461026][ T28] audit: type=1400 audit(1772231039.280:1410): avc: denied { getopt } for pid=8583 comm="syz.5.1249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 161.507350][ T28] audit: type=1400 audit(1772231039.280:1411): avc: denied { read } for pid=8583 comm="syz.5.1249" name="file0" dev="tmpfs" ino=1130 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 161.528946][ T8428] 8021q: adding VLAN 0 to HW filter on device bond0 [ 161.560867][ T28] audit: type=1400 audit(1772231039.280:1412): avc: denied { open } for pid=8583 comm="syz.5.1249" path="/208/file0" dev="tmpfs" ino=1130 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 161.592045][ T8428] 8021q: adding VLAN 0 to HW filter on device team0 [ 161.607442][ T28] audit: type=1400 audit(1772231039.280:1413): avc: denied { ioctl } for pid=8583 comm="syz.5.1249" path="/208/file0" dev="tmpfs" ino=1130 ioctlcmd=0x4c03 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 161.718620][ T8603] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.744648][ T2077] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.751835][ T2077] bridge0: port 1(bridge_slave_0) entered forwarding state [ 161.756069][ T8621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.770413][ T2077] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.777466][ T2077] bridge0: port 2(bridge_slave_1) entered forwarding state [ 161.778876][ T8621] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.807419][ T8428] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 161.817919][ T8428] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 161.818331][ T28] audit: type=1400 audit(1772231039.600:1414): avc: denied { relabelfrom } for pid=8611 comm="syz.8.1256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 161.856788][ T4168] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.875018][ T28] audit: type=1400 audit(1772231039.600:1415): avc: denied { relabelto } for pid=8611 comm="syz.8.1256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 161.953286][ T8428] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 162.009550][ T28] audit: type=1400 audit(1772231039.750:1416): avc: denied { map } for pid=8622 comm="syz.9.1258" path="socket:[22930]" dev="sockfs" ino=22930 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 162.079091][ T8428] veth0_vlan: entered promiscuous mode [ 162.095945][ T8428] veth1_vlan: entered promiscuous mode [ 162.223935][ T8428] veth0_macvtap: entered promiscuous mode [ 162.235120][ T8428] veth1_macvtap: entered promiscuous mode [ 162.253046][ T8428] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 162.359851][ T8428] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 162.389885][ T8657] set_capacity_and_notify: 2 callbacks suppressed [ 162.389973][ T8657] loop8: detected capacity change from 0 to 512 [ 162.422035][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.453555][ T8657] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 162.471260][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.509515][ T8657] EXT4-fs error (device loop8): ext4_init_orphan_info:618: comm syz.8.1262: orphan file block 0: bad magic [ 162.521873][ T8657] loop8: lost filesystem error report for type 5 error -117 [ 162.522143][ T8657] EXT4-fs (loop8): Remounting filesystem read-only [ 162.529496][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 162.529511][ C1] EXT4-fs (loop8): initial error at time 1772231040: ext4_init_orphan_info:618 [ 162.529530][ C1] EXT4-fs (loop8): last error at time 1772231040: ext4_init_orphan_info:618 [ 162.563563][ T8657] EXT4-fs (loop8): mount failed [ 162.572287][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.637489][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.687845][ T8667] team_slave_0: entered promiscuous mode [ 162.693645][ T8667] team_slave_1: entered promiscuous mode [ 162.713909][ T8667] vlan2: entered promiscuous mode [ 162.723431][ T8667] team0: entered promiscuous mode [ 162.756259][ T8680] Cannot find add_set index 0 as target [ 162.795534][ T8678] loop4: detected capacity change from 0 to 4096 [ 162.915939][ T8678] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.049535][ T28] audit: type=1400 audit(1772231040.840:1417): avc: denied { map } for pid=8676 comm="syz.4.1266" path="socket:[22324]" dev="sockfs" ino=22324 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 163.080404][ T8697] loop5: detected capacity change from 0 to 256 [ 163.087581][ T8697] vfat: Unknown parameter 'w9D)KbJou`5T!ySW }iCɖ!|sm_{ӧj#| JMm'XQ C}>r^u4iMV&ɦepC+' [ 163.920344][ T7445] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.378005][ T8716] syz.1.1271 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 164.464269][ T8728] __nla_validate_parse: 4 callbacks suppressed [ 164.464284][ T8728] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1275'. [ 164.527710][ T8728] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1275'. [ 164.593086][ T8728] wireguard0: entered promiscuous mode [ 164.598891][ T8728] wireguard0: entered allmulticast mode [ 164.678327][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 164.678371][ T28] audit: type=1400 audit(1772231042.500:1420): avc: denied { ioctl } for pid=8744 comm="syz.4.1278" path="socket:[23095]" dev="sockfs" ino=23095 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 164.777450][ T28] audit: type=1400 audit(1772231042.550:1421): avc: denied { create } for pid=8746 comm="syz.9.1279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 164.853640][ T8758] vhci_hcd vhci_hcd.0: invalid port number 197 [ 164.873367][ T8758] vhci_hcd vhci_hcd.0: default hub control req: 000f v0000 i00c5 l0 [ 164.934147][ T28] audit: type=1400 audit(1772231042.550:1422): avc: denied { accept } for pid=8746 comm="syz.9.1279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 164.954020][ T28] audit: type=1400 audit(1772231042.590:1423): avc: denied { unmount } for pid=6520 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 164.984520][ T8773] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1283'. [ 165.000246][ T8773] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1283'. [ 165.037631][ T8775] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1284'. [ 165.150038][ T28] audit: type=1400 audit(1772231042.980:1424): avc: denied { getopt } for pid=8778 comm="syz.1.1285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 165.226889][ T8787] loop5: detected capacity change from 0 to 8192 [ 165.227502][ T8791] vlan2: entered promiscuous mode [ 165.299606][ T3603] loop5: p1 p2 p3 [ 165.305565][ T3603] loop5: p1 start 17825536 is beyond EOD, truncated [ 165.313778][ T3603] loop5: p3 size 100663552 extends beyond EOD, truncated [ 165.330980][ T8787] loop5: p1 p2 p3 [ 165.334814][ T8787] loop5: p1 start 17825536 is beyond EOD, truncated [ 165.355391][ T8787] loop5: p3 size 100663552 extends beyond EOD, truncated [ 165.368212][ T8797] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1291'. [ 165.466162][ T8801] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 165.497711][ T8801] team0: No ports can be present during mode change [ 165.719556][ T8813] vlan2: entered promiscuous mode [ 165.742139][ T8814] tipc: Started in network mode [ 165.747146][ T8814] tipc: Node identity ac1414aa, cluster identity 4711 [ 165.754407][ T8814] tipc: Enabled bearer , priority 10 [ 166.066023][ T8832] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1301'. [ 166.115358][ T8832] vlan2: entered promiscuous mode [ 166.195259][ T8835] loop1: detected capacity change from 0 to 8192 [ 166.572447][ T8844] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1305'. [ 166.674205][ T28] audit: type=1400 audit(1772231044.500:1425): avc: denied { getopt } for pid=8852 comm="syz.5.1308" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 166.869349][ T10] tipc: Node number set to 2886997162 [ 167.067264][ T8872] loop1: detected capacity change from 0 to 512 [ 167.087449][ T8872] EXT4-fs: Ignoring removed mblk_io_submit option [ 167.150585][ T8872] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.186187][ T8872] ext4 filesystem being mounted at /7/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 167.228140][ T8872] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1314'. [ 167.286619][ T8428] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.092281][ T8899] 8021q: VLANs not supported on ip6gre0 [ 168.230345][ T8888] loop1: detected capacity change from 0 to 1764 [ 168.245472][ T10] IPVS: starting estimator thread 0... [ 168.251425][ T8886] loop4: detected capacity change from 0 to 256 [ 168.259886][ T8898] loop9: detected capacity change from 0 to 512 [ 168.285446][ T8886] FAT-fs (loop4): Directory bread(block 64) failed [ 168.292052][ T8886] FAT-fs (loop4): Directory bread(block 65) failed [ 168.298742][ T8886] FAT-fs (loop4): Directory bread(block 66) failed [ 168.305302][ T8886] FAT-fs (loop4): Directory bread(block 67) failed [ 168.311931][ T8886] FAT-fs (loop4): Directory bread(block 68) failed [ 168.318444][ T8886] FAT-fs (loop4): Directory bread(block 69) failed [ 168.325133][ T8886] FAT-fs (loop4): Directory bread(block 70) failed [ 168.331657][ T8886] FAT-fs (loop4): Directory bread(block 71) failed [ 168.338310][ T8886] FAT-fs (loop4): Directory bread(block 72) failed [ 168.344883][ T8886] FAT-fs (loop4): Directory bread(block 73) failed [ 168.431844][ T8898] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 168.499140][ T8901] IPVS: using max 2352 ests per chain, 117600 per kthread [ 168.599861][ T8898] EXT4-fs (loop9): 1 truncate cleaned up [ 168.612690][ T8898] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.568494][ T8915] loop5: detected capacity change from 0 to 1024 [ 169.586917][ T6520] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.616716][ T8915] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.782080][ T8930] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1329'. [ 169.799031][ T4168] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.839478][ T8936] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1333'. [ 169.848385][ T28] audit: type=1400 audit(1772231047.660:1426): avc: denied { ioctl } for pid=8934 comm="syz.1.1333" path="socket:[23401]" dev="sockfs" ino=23401 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 170.343579][ T8951] loop8: detected capacity change from 0 to 1764 [ 170.418321][ T28] audit: type=1400 audit(1772231048.240:1427): avc: denied { append } for pid=8948 comm="syz.4.1338" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 171.432469][ T8960] loop1: detected capacity change from 0 to 256 [ 171.439259][ T8960] vfat: Unknown parameter 'w9D)KbJou`5T!ySW }iCɖ!|sm_{ӧj#| JMm'XQ C}>r^u4iMV&ɦepC+' [ 171.470847][ T8961] loop5: detected capacity change from 0 to 128 [ 171.703830][ T8961] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 172.439543][ T8965] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1341'. [ 173.367425][ T8973] tipc: Enabling of bearer rejected, already enabled [ 173.748554][ T8982] netlink: 'syz.1.1345': attribute type 10 has an invalid length. [ 173.913259][ T8986] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1347'. [ 173.919365][ T8982] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1345'. [ 173.948515][ T8982] dummy0: entered promiscuous mode [ 173.979433][ T8982] dummy0: entered allmulticast mode [ 174.022735][ T8990] loop4: detected capacity change from 0 to 512 [ 174.029811][ T8990] EXT4-fs: Ignoring removed i_version option [ 174.035884][ T8990] EXT4-fs: inline encryption not supported [ 174.041792][ T8990] EXT4-fs: Ignoring removed bh option [ 174.071493][ T8982] bridge0: port 3(dummy0) entered blocking state [ 174.127880][ T8990] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.141046][ T8990] ext4 filesystem being mounted at /59/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 174.190149][ T8982] bridge0: port 3(dummy0) entered disabled state [ 174.463402][ T8982] bridge0: port 3(dummy0) entered blocking state [ 174.469819][ T8982] bridge0: port 3(dummy0) entered forwarding state [ 174.588606][ T9005] tipc: Enabling of bearer rejected, failed to enable media [ 174.695747][ T7445] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.723537][ T9009] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1355'. [ 174.799150][ T28] audit: type=1400 audit(1772231052.620:1428): avc: denied { name_connect } for pid=9014 comm="syz.4.1357" dest=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 174.915477][ T9030] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=8192 sclass=netlink_tcpdiag_socket pid=9030 comm=syz.1.1362 [ 175.088937][ T9044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.120612][ T9044] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.144701][ T9052] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1372'. [ 175.279530][ T9070] netlink: 'syz.5.1380': attribute type 13 has an invalid length. [ 175.316718][ T9070] tipc: Resetting bearer [ 175.331241][ T3383] lo speed is unknown, defaulting to 1000 [ 175.930902][ T9099] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1392'. [ 176.026539][ T28] audit: type=1400 audit(1772231053.850:1429): avc: denied { connect } for pid=9102 comm="syz.1.1394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 176.225877][ T9122] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.235817][ T9122] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.249914][ T9122] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.259059][ T9122] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.452056][ T28] audit: type=1400 audit(1772231054.280:1430): avc: denied { setopt } for pid=9143 comm="syz.5.1410" lport=40863 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 176.489959][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 176.498897][ T10] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 176.511527][ T9122] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.520612][ T9122] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.660378][ T9161] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.668959][ T9161] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.068699][ T9167] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.077493][ T9167] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.193824][ T9169] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1421'. [ 177.237736][ T9171] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.247332][ T9171] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.355515][ T9183] syzkaller1: entered promiscuous mode [ 177.361118][ T9183] syzkaller1: entered allmulticast mode [ 177.468987][ T9200] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.480597][ T9200] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.496060][ T3383] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 177.503985][ T3383] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 177.696948][ T9221] sctp: [Deprecated]: syz.9.1445 (pid 9221) Use of struct sctp_assoc_value in delayed_ack socket option. [ 177.696948][ T9221] Use struct sctp_sack_info instead [ 177.725430][ T28] audit: type=1400 audit(1772231055.550:1431): avc: denied { bind } for pid=9222 comm="syz.9.1446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 177.745026][ T28] audit: type=1400 audit(1772231055.550:1432): avc: denied { node_bind } for pid=9222 comm="syz.9.1446" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 177.913635][ T28] audit: type=1326 audit(1772231055.740:1433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9244 comm="syz.8.1458" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8b8be6c799 code=0x0 [ 177.951063][ T9249] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1459'. [ 178.217181][ T9278] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1470'. [ 178.250346][ T9280] xt_hashlimit: size too large, truncated to 1048576 [ 178.424696][ T9290] netlink: 'syz.5.1475': attribute type 6 has an invalid length. [ 178.431084][ T9294] syzkaller0: entered promiscuous mode [ 178.434347][ T9290] netlink: 'syz.5.1475': attribute type 15 has an invalid length. [ 178.438129][ T9294] syzkaller0: entered allmulticast mode [ 178.446917][ T9290] netlink: 'syz.5.1475': attribute type 16 has an invalid length. [ 178.459798][ T9290] netlink: 'syz.5.1475': attribute type 20 has an invalid length. [ 178.467929][ T9290] netlink: 'syz.5.1475': attribute type 21 has an invalid length. [ 178.476226][ T9290] netlink: 'syz.5.1475': attribute type 23 has an invalid length. [ 178.484138][ T9290] netlink: 'syz.5.1475': attribute type 25 has an invalid length. [ 178.493271][ T9290] netlink: 'syz.5.1475': attribute type 27 has an invalid length. [ 178.576834][ T9309] xt_connbytes: Forcing CT accounting to be enabled [ 179.090339][ T9343] validate_nla: 3 callbacks suppressed [ 179.090399][ T9343] netlink: 'syz.5.1498': attribute type 10 has an invalid length. [ 179.129436][ T9343] bridge0: port 3(dummy0) entered disabled state [ 179.151565][ T9343] dummy0: left allmulticast mode [ 179.151630][ T9344] netlink: 'syz.5.1498': attribute type 10 has an invalid length. [ 179.156580][ T9343] dummy0: left promiscuous mode [ 179.156737][ T9343] bridge0: port 3(dummy0) entered disabled state [ 179.178258][ T9344] dummy0: entered promiscuous mode [ 179.184815][ T9344] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 179.229031][ T9348] loop5: detected capacity change from 0 to 256 [ 179.332133][ T9348] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1500'. [ 179.454986][ T9351] loop5: detected capacity change from 0 to 4096 [ 179.573005][ T9351] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 179.639674][ T9360] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1503'. [ 179.680735][ T9360] bond1: entered promiscuous mode [ 179.685860][ T9360] bond1: entered allmulticast mode [ 179.699297][ T9360] 8021q: adding VLAN 0 to HW filter on device bond1 [ 179.733321][ T9362] erspan1: entered allmulticast mode [ 179.744813][ T9362] erspan1: entered promiscuous mode [ 179.750776][ T9362] bond1: (slave erspan1): Enslaving as an active interface with an up link [ 179.772874][ T9360] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1503'. [ 179.795168][ T9360] bond1 (unregistering): (slave erspan1): Releasing backup interface [ 179.805432][ T9360] erspan1: left promiscuous mode [ 179.825735][ T9360] bond1 (unregistering): Released all slaves [ 180.335230][ T28] audit: type=1400 audit(1772231058.160:1434): avc: denied { lock } for pid=9375 comm="syz.8.1508" path="socket:[24135]" dev="sockfs" ino=24135 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 180.830874][ T4168] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.937620][ T9382] loop8: detected capacity change from 0 to 128 [ 180.979422][ T9382] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 180.999290][ T9382] ext4 filesystem being mounted at /171/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 181.036531][ T28] audit: type=1326 audit(1772231058.860:1435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9381 comm="syz.8.1510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b8be6c799 code=0x7ffc0000 [ 181.071041][ T28] audit: type=1326 audit(1772231058.860:1436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9381 comm="syz.8.1510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b8be6c799 code=0x7ffc0000 [ 181.096184][ T9387] loop5: detected capacity change from 0 to 256 [ 181.102622][ T28] audit: type=1326 audit(1772231058.860:1437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9381 comm="syz.8.1510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f8b8be6c799 code=0x7ffc0000 [ 181.126356][ T28] audit: type=1326 audit(1772231058.860:1438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9381 comm="syz.8.1510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f8b8be6c502 code=0x7ffc0000 [ 181.150156][ T28] audit: type=1326 audit(1772231058.860:1439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9381 comm="syz.8.1510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f8b8be2cfce code=0x7ffc0000 [ 181.181113][ T28] audit: type=1326 audit(1772231058.860:1440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9381 comm="syz.8.1510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f8b8be6c5c7 code=0x7ffc0000 [ 181.186737][ T9387] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1511'. [ 181.205286][ T28] audit: type=1326 audit(1772231058.900:1441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9381 comm="syz.8.1510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8b8be2cfce code=0x7ffc0000 [ 181.205364][ T28] audit: type=1326 audit(1772231058.900:1442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9381 comm="syz.8.1510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f8b8be2cfce code=0x7ffc0000 [ 181.205387][ T28] audit: type=1326 audit(1772231058.900:1443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9381 comm="syz.8.1510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b8be6c799 code=0x7ffc0000 [ 181.205486][ T28] audit: type=1326 audit(1772231058.900:1444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9381 comm="syz.8.1510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b8be6c799 code=0x7ffc0000 [ 181.234748][ T9389] loop9: detected capacity change from 0 to 128 [ 181.412929][ T9389] loop9: detected capacity change from 0 to 512 [ 181.420987][ T9389] EXT4-fs: Ignoring removed mblk_io_submit option [ 181.422756][ T5534] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 181.438133][ T9389] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 181.454091][ T9389] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e028, mo2=0002] [ 181.487774][ T9398] netlink: 'syz.5.1515': attribute type 1 has an invalid length. [ 181.489555][ T9389] EXT4-fs (loop9): orphan cleanup on readonly fs [ 181.503287][ T9389] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.1512: bg 0: block 361: padding at end of block bitmap is not set [ 181.518202][ T9389] loop9: lost filesystem error report for type 5 error -117 [ 181.519114][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 181.525237][ T9398] 8021q: adding VLAN 0 to HW filter on device bond2 [ 181.526393][ C1] EXT4-fs (loop9): initial error at time 1772231059: ext4_validate_block_bitmap:441 [ 181.548788][ C1] EXT4-fs (loop9): last error at time 1772231059: ext4_validate_block_bitmap:441 [ 181.559413][ T9389] EXT4-fs (loop9): Remounting filesystem read-only [ 181.571702][ T9389] EXT4-fs (loop9): 1 truncate cleaned up [ 181.603113][ T9404] macvlan0: entered promiscuous mode [ 181.618761][ T9404] bond2: (slave macvlan0): making interface the new active one [ 181.746960][ T9389] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 181.770183][ T9404] bond2: (slave macvlan0): Enslaving as an active interface with an up link [ 181.837111][ T9414] ipt_REJECT: ECHOREPLY no longer supported. [ 181.860070][ T9414] lo speed is unknown, defaulting to 1000 [ 181.951128][ T9414] lo speed is unknown, defaulting to 1000 [ 182.365047][ T9413] loop5: detected capacity change from 0 to 128 [ 182.536655][ T9418] syz.5.1519: attempt to access beyond end of device [ 182.536655][ T9418] loop5: rw=2049, sector=681, nr_sectors = 360 limit=128 [ 182.560419][ T6520] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 182.644289][ T9419] lo speed is unknown, defaulting to 1000 [ 183.000744][ T9431] loop9: detected capacity change from 0 to 256 [ 183.033602][ T9428] lo speed is unknown, defaulting to 1000 [ 183.110799][ T9431] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1523'. [ 183.578460][ T9442] FAULT_INJECTION: forcing a failure. [ 183.578460][ T9442] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 183.667359][ T9450] loop8: detected capacity change from 0 to 1764 [ 183.697832][ T9442] CPU: 0 UID: 0 PID: 9442 Comm: syz.1.1527 Tainted: G W syzkaller #0 PREEMPT(full) [ 183.697864][ T9442] Tainted: [W]=WARN [ 183.697940][ T9442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 183.697962][ T9442] Call Trace: [ 183.697967][ T9442] [ 183.697973][ T9442] __dump_stack+0x1d/0x30 [ 183.697999][ T9442] dump_stack_lvl+0x95/0xd0 [ 183.698022][ T9442] dump_stack+0x15/0x1b [ 183.698114][ T9442] should_fail_ex+0x263/0x280 [ 183.698138][ T9442] should_fail+0xb/0x20 [ 183.698155][ T9442] should_fail_usercopy+0x1a/0x20 [ 183.698174][ T9442] _copy_to_user+0x20/0xa0 [ 183.698200][ T9442] simple_read_from_buffer+0xb5/0x130 [ 183.698300][ T9442] proc_fail_nth_read+0x10e/0x150 [ 183.698372][ T9442] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 183.698400][ T9442] vfs_read+0x1ab/0x7f0 [ 183.698473][ T9442] ? __rcu_read_unlock+0x4e/0x70 [ 183.698536][ T9442] ? __fget_files+0x184/0x1c0 [ 183.698666][ T9442] ? mutex_lock+0x57/0x90 [ 183.698694][ T9442] ksys_read+0xdc/0x1a0 [ 183.698771][ T9442] __x64_sys_read+0x40/0x50 [ 183.698802][ T9442] x64_sys_call+0x2886/0x3020 [ 183.698828][ T9442] do_syscall_64+0x12c/0x370 [ 183.698907][ T9442] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.698980][ T9442] RIP: 0033:0x7fab555dcfce [ 183.698997][ T9442] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 183.699061][ T9442] RSP: 002b:00007fab54076fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 183.699111][ T9442] RAX: ffffffffffffffda RBX: 00007fab540776c0 RCX: 00007fab555dcfce [ 183.699127][ T9442] RDX: 000000000000000f RSI: 00007fab540770a0 RDI: 0000000000000004 [ 183.699138][ T9442] RBP: 00007fab54077090 R08: 0000000000000000 R09: 0000000000000000 [ 183.699149][ T9442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 183.699160][ T9442] R13: 00007fab55896038 R14: 00007fab55895fa0 R15: 00007fff117852a8 [ 183.699175][ T9442] [ 183.904292][ T9452] loop9: detected capacity change from 0 to 1764 [ 184.917901][ T9455] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9455 comm=syz.1.1531 [ 185.418919][ T9457] loop4: detected capacity change from 0 to 128 [ 185.448676][ T9455] loop1: detected capacity change from 0 to 2048 [ 185.921704][ T9460] syz.4.1532: attempt to access beyond end of device [ 185.921704][ T9460] loop4: rw=2049, sector=705, nr_sectors = 336 limit=128 [ 185.982844][ T9455] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 186.045752][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 186.045767][ T28] audit: type=1400 audit(1772231063.870:1457): avc: denied { create } for pid=9454 comm="syz.1.1531" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 186.081012][ T9465] vhci_hcd vhci_hcd.0: invalid port number 197 [ 186.104259][ T9465] vhci_hcd vhci_hcd.0: default hub control req: 000f v0000 i00c5 l0 [ 186.184900][ T9470] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1531'. [ 186.197165][ T9472] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 186.386341][ T28] audit: type=1400 audit(1772231064.210:1458): avc: denied { setattr } for pid=9481 comm="syz.5.1541" name="L2TP/IPv6" dev="sockfs" ino=24464 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 186.411784][ T9482] loop5: detected capacity change from 0 to 512 [ 186.511156][ T9482] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 186.750668][ T8428] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.760301][ T9501] loop5: detected capacity change from 0 to 512 [ 186.766666][ T9503] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1547'. [ 186.839890][ T9501] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 186.859640][ T9501] ext4 filesystem being mounted at /278/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 186.905414][ T9515] netlink: 'syz.1.1553': attribute type 1 has an invalid length. [ 186.923353][ T9515] macvlan0: entered promiscuous mode [ 186.965171][ T9511] loop9: detected capacity change from 0 to 8192 [ 186.987148][ T9521] netlink: 'syz.1.1554': attribute type 1 has an invalid length. [ 187.221667][ T9538] Cannot find add_set index 0 as target [ 187.307826][ T9540] syzkaller0: entered promiscuous mode [ 187.325835][ T9540] syzkaller0: entered allmulticast mode [ 187.511776][ T9551] netlink: 'syz.1.1565': attribute type 1 has an invalid length. [ 187.546135][ T9551] 8021q: adding VLAN 0 to HW filter on device bond1 [ 187.768834][ T9567] vlan2: entered promiscuous mode [ 187.778635][ T28] audit: type=1326 audit(1772231065.600:1459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9570 comm="syz.8.1575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b8be6c799 code=0x7ffc0000 [ 187.833849][ T9575] netlink: 'syz.1.1577': attribute type 1 has an invalid length. [ 187.835543][ T28] audit: type=1326 audit(1772231065.600:1460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9570 comm="syz.8.1575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8b8be6c799 code=0x7ffc0000 [ 187.881966][ T9575] 8021q: adding VLAN 0 to HW filter on device bond2 [ 187.882024][ T28] audit: type=1326 audit(1772231065.600:1461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9570 comm="syz.8.1575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b8be6c799 code=0x7ffc0000 [ 188.068307][ T28] audit: type=1326 audit(1772231065.600:1462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9570 comm="syz.8.1575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=468 compat=0 ip=0x7f8b8be6c799 code=0x7ffc0000 [ 188.097951][ T28] audit: type=1326 audit(1772231065.600:1463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9570 comm="syz.8.1575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b8be6c799 code=0x7ffc0000 [ 188.127050][ T28] audit: type=1326 audit(1772231065.600:1464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9570 comm="syz.8.1575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7f8b8be6c799 code=0x7ffc0000 [ 188.148765][ T9583] loop1: detected capacity change from 0 to 8192 [ 188.162908][ T9589] vhci_hcd vhci_hcd.0: invalid port number 197 [ 188.175300][ T9589] vhci_hcd vhci_hcd.0: default hub control req: 000f v0000 i00c5 l0 [ 188.246799][ T28] audit: type=1326 audit(1772231065.600:1465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9570 comm="syz.8.1575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b8be6c799 code=0x7ffc0000 [ 188.287066][ T9596] netlink: 'syz.9.1585': attribute type 21 has an invalid length. [ 188.357823][ T9596] netlink: 'syz.9.1585': attribute type 1 has an invalid length. [ 188.370814][ T28] audit: type=1326 audit(1772231065.600:1466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9570 comm="syz.8.1575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7f8b8be6c799 code=0x7ffc0000 [ 188.394251][ T9596] netlink: 132 bytes leftover after parsing attributes in process `syz.9.1585'. [ 189.641597][ T9628] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9628 comm=syz.9.1595 [ 189.684360][ T4168] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.708334][ T9630] netlink: 'syz.4.1596': attribute type 1 has an invalid length. [ 189.720960][ T9630] macvlan0: entered promiscuous mode [ 189.872525][ T9638] loop9: detected capacity change from 0 to 256 [ 189.891617][ T9638] netlink: 40 bytes leftover after parsing attributes in process `syz.9.1598'. [ 189.901525][ T9638] netlink: 48 bytes leftover after parsing attributes in process `syz.9.1598'. [ 189.990510][ T9646] loop5: detected capacity change from 0 to 128 [ 190.054302][ T9646] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1603'. [ 190.250568][ T9653] loop9: detected capacity change from 0 to 4096 [ 190.271882][ T9659] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9659 comm=syz.5.1608 [ 190.380861][ T9653] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.424963][ T9663] syzkaller0: entered promiscuous mode [ 190.430539][ T9663] syzkaller0: entered allmulticast mode [ 190.624239][ T6520] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.742196][ T9679] loop5: detected capacity change from 0 to 1024 [ 190.765179][ T9679] EXT4-fs: Ignoring removed bh option [ 190.775090][ T9679] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 190.784978][ T9679] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 190.805640][ T9679] EXT4-fs (loop5): orphan cleanup on readonly fs [ 190.831224][ T9679] EXT4-fs error (device loop5): ext4_quota_enable:7192: comm syz.5.1616: inode #2304: comm syz.5.1616: iget: illegal inode # [ 190.844402][ T9679] loop5: lost filesystem error report for type 5 error -117 [ 190.849113][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 190.862854][ C1] EXT4-fs (loop5): initial error at time 1772231068: ext4_quota_enable:7192 [ 190.871560][ C1] EXT4-fs (loop5): last error at time 1772231068: ext4_quota_enable:7192 [ 190.879158][ T9679] EXT4-fs error (device loop5): ext4_quota_enable:7195: comm syz.5.1616: Bad quota inode: 2304, type: 2 [ 190.901272][ T9679] loop5: lost filesystem error report for type 5 error -117 [ 190.901412][ T9679] EXT4-fs warning (device loop5): ext4_enable_quotas:7236: Failed to enable quota tracking (type=2, err=-117, ino=2304). Please run e2fsck to fix. [ 190.939091][ T9679] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 190.968582][ T9679] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 190.990099][ T9689] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9689 comm=syz.9.1619 [ 191.037923][ T9692] sit0: entered promiscuous mode [ 191.161716][ T4168] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.207101][ T9702] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1624'. [ 191.216031][ T9702] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1624'. [ 191.232059][ T9705] syzkaller0: entered promiscuous mode [ 191.237553][ T9705] syzkaller0: entered allmulticast mode [ 191.299555][ T9710] loop8: detected capacity change from 0 to 256 [ 191.326027][ T9710] FAT-fs (loop8): Directory bread(block 64) failed [ 191.332689][ T9710] FAT-fs (loop8): Directory bread(block 65) failed [ 191.339223][ T9710] FAT-fs (loop8): Directory bread(block 66) failed [ 191.345724][ T9710] FAT-fs (loop8): Directory bread(block 67) failed [ 191.352327][ T9710] FAT-fs (loop8): Directory bread(block 68) failed [ 191.358819][ T9710] FAT-fs (loop8): Directory bread(block 69) failed [ 191.365412][ T9710] FAT-fs (loop8): Directory bread(block 70) failed [ 191.371976][ T9710] FAT-fs (loop8): Directory bread(block 71) failed [ 191.378511][ T9710] FAT-fs (loop8): Directory bread(block 72) failed [ 191.385068][ T9710] FAT-fs (loop8): Directory bread(block 73) failed [ 191.397633][ T9711] netlink: 'syz.5.1624': attribute type 21 has an invalid length. [ 191.406634][ T9711] netlink: 'syz.5.1624': attribute type 1 has an invalid length. [ 191.480616][ T9711] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1624'. [ 191.591275][ T9728] loop9: detected capacity change from 0 to 128 [ 191.618296][ T9730] loop5: detected capacity change from 0 to 512 [ 191.648305][ T9730] EXT4-fs: Ignoring removed nomblk_io_submit option [ 191.661207][ T9730] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 191.676439][ T9728] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 191.690986][ T9728] ext4 filesystem being mounted at /151/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 191.692052][ T9730] EXT4-fs (loop5): 1 truncate cleaned up [ 191.707524][ T9730] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 191.914291][ T28] kauditd_printk_skb: 115 callbacks suppressed [ 191.914304][ T28] audit: type=1400 audit(1772231069.740:1582): avc: denied { setopt } for pid=9726 comm="syz.9.1631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 192.059796][ T2077] kworker/u8:8: attempt to access beyond end of device [ 192.059796][ T2077] loop8: rw=8388609, sector=1224, nr_sectors = 4 limit=256 [ 192.143575][ T2077] Buffer I/O error on dev loop8, logical block 306, lost async page write [ 192.238215][ T9744] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1633'. [ 192.458953][ T6520] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 192.488789][ T4168] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.543651][ T9754] syzkaller0: entered promiscuous mode [ 192.552748][ T9754] syzkaller0: entered allmulticast mode [ 192.613793][ T9760] macvlan0: entered promiscuous mode [ 192.749680][ T9768] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1644'. [ 192.768946][ T9770] Cannot find del_set index 2 as target [ 192.840034][ T28] audit: type=1326 audit(1772231070.670:1583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9778 comm="syz.9.1648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99b6e4c799 code=0x7ffc0000 [ 192.884760][ T9784] loop5: detected capacity change from 0 to 256 [ 192.886015][ T28] audit: type=1326 audit(1772231070.670:1584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9778 comm="syz.9.1648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99b6e4c799 code=0x7ffc0000 [ 192.959577][ T28] audit: type=1326 audit(1772231070.670:1585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9778 comm="syz.9.1648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99b6e4c799 code=0x7ffc0000 [ 192.981973][ T9784] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1650'. [ 193.028505][ T28] audit: type=1326 audit(1772231070.670:1586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9778 comm="syz.9.1648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f99b6e0cfce code=0x7ffc0000 [ 193.084036][ T28] audit: type=1326 audit(1772231070.670:1587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9778 comm="syz.9.1648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99b6e4c799 code=0x7ffc0000 [ 193.136076][ T28] audit: type=1326 audit(1772231070.670:1588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9778 comm="syz.9.1648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99b6e4c799 code=0x7ffc0000 [ 193.155953][ T9799] syzkaller0: entered promiscuous mode [ 193.163130][ T28] audit: type=1326 audit(1772231070.670:1589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9778 comm="syz.9.1648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99b6e4c799 code=0x7ffc0000 [ 193.196242][ T28] audit: type=1326 audit(1772231070.670:1590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9778 comm="syz.9.1648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f99b6e4c799 code=0x7ffc0000 [ 193.200556][ T9799] syzkaller0: entered allmulticast mode [ 193.222992][ T28] audit: type=1326 audit(1772231070.670:1591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9778 comm="syz.9.1648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99b6e4c799 code=0x7ffc0000 [ 193.264349][ T9804] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1656'. [ 193.297177][ T9807] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1657'. [ 193.389211][ T9822] netlink: 'syz.1.1664': attribute type 1 has an invalid length. [ 193.412491][ T9822] 8021q: adding VLAN 0 to HW filter on device bond3 [ 193.513091][ T9831] loop5: detected capacity change from 0 to 128 [ 193.571533][ T9834] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1669'. [ 193.602894][ T9836] netlink: 'syz.4.1671': attribute type 10 has an invalid length. [ 193.611674][ T9836] bridge0: port 1(dummy0) entered blocking state [ 193.627432][ T9836] bridge0: port 1(dummy0) entered disabled state [ 193.642747][ T9836] bridge0: port 1(dummy0) entered blocking state [ 193.649168][ T9836] bridge0: port 1(dummy0) entered forwarding state [ 193.652613][ T9841] loop5: detected capacity change from 0 to 128 [ 193.707889][ T9841] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1672'. [ 193.731339][ T9845] syzkaller0: entered promiscuous mode [ 193.740472][ T9845] syzkaller0: entered allmulticast mode [ 194.034747][ T9864] netlink: 36 bytes leftover after parsing attributes in process `syz.9.1681'. [ 194.740943][ T9882] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1690'. [ 194.804615][ T9882] vlan2: entered promiscuous mode [ 194.909891][ T9892] tipc: Enabling of bearer rejected, already enabled [ 194.924800][ T9894] vlan2: entered promiscuous mode [ 194.937995][ T9888] tipc: Enabling of bearer rejected, already enabled [ 194.978079][ T9896] vhci_hcd vhci_hcd.0: invalid port number 197 [ 194.985177][ T9896] vhci_hcd vhci_hcd.0: default hub control req: 000f v0000 i00c5 l0 [ 195.014302][ T9900] syzkaller0: entered promiscuous mode [ 195.020368][ T9900] syzkaller0: entered allmulticast mode [ 195.029567][ T9900] tipc: Started in network mode [ 195.035588][ T9900] tipc: Node identity eea0dcdb012c, cluster identity 4711 [ 195.043310][ T9900] tipc: Enabled bearer , priority 0 [ 195.053534][ T9899] tipc: Resetting bearer [ 195.064183][ T9899] tipc: Disabling bearer [ 195.178467][ T9919] lo speed is unknown, defaulting to 1000 [ 195.250731][ T9926] vhci_hcd vhci_hcd.0: invalid port number 197 [ 195.257118][ T9926] vhci_hcd vhci_hcd.0: default hub control req: 000f v0000 i00c5 l0 [ 195.308585][ T9930] loop9: detected capacity change from 0 to 8192 [ 195.444901][ T9924] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1707'. [ 195.663206][ T9944] loop9: detected capacity change from 0 to 256 [ 195.693545][ T9946] Cannot find del_set index 2 as target [ 195.865907][ T9953] vhci_hcd vhci_hcd.0: invalid port number 197 [ 195.875924][ T9953] vhci_hcd vhci_hcd.0: default hub control req: 000f v0000 i00c5 l0 [ 196.162399][ T9963] loop1: detected capacity change from 0 to 128 [ 196.189543][ T9963] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 196.202624][ T9963] ext4 filesystem being mounted at /95/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 196.224231][ T9963] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9963 comm=syz.1.1723 [ 196.250490][ T8428] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 196.656049][ T9975] loop8: detected capacity change from 0 to 8192 [ 196.795768][ T9982] loop8: detected capacity change from 0 to 1024 [ 196.804766][ T9984] loop4: detected capacity change from 0 to 256 [ 196.862033][ T9982] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.886573][ T9982] netlink: 'syz.8.1730': attribute type 5 has an invalid length. [ 197.349961][ T3408] hid-generic 0007:0006:0003.0003: unknown main item tag 0x0 [ 197.362979][ T3408] hid-generic 0007:0006:0003.0003: unknown main item tag 0x0 [ 197.367310][T10011] vhci_hcd vhci_hcd.0: invalid port number 197 [ 197.389677][ T3408] hid-generic 0007:0006:0003.0003: unknown main item tag 0x0 [ 197.393448][T10011] vhci_hcd vhci_hcd.0: default hub control req: 000f v0000 i00c5 l0 [ 197.405206][ T3408] hid-generic 0007:0006:0003.0003: unknown main item tag 0x0 [ 197.423235][ T3408] hid-generic 0007:0006:0003.0003: unknown main item tag 0x0 [ 197.447614][ T3408] hid-generic 0007:0006:0003.0003: unknown main item tag 0x0 [ 197.464952][ T3408] hid-generic 0007:0006:0003.0003: unknown main item tag 0x0 [ 197.482786][ T3408] hid-generic 0007:0006:0003.0003: unknown main item tag 0x0 [ 197.501695][ T3408] hid-generic 0007:0006:0003.0003: unknown main item tag 0x0 [ 197.538595][T10019] __nla_validate_parse: 4 callbacks suppressed [ 197.538611][T10019] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1743'. [ 197.554248][ T3408] hid-generic 0007:0006:0003.0003: unknown main item tag 0x0 [ 197.562143][T10019] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1743'. [ 197.562782][ T9982] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4222: comm syz.8.1730: Allocating blocks 497-513 which overlap fs metadata [ 197.571140][ T3408] hid-generic 0007:0006:0003.0003: hidraw0: HID v0.05 Device [syz1] on syz0 [ 197.599722][T10019] wireguard0: entered promiscuous mode [ 197.620467][T10019] wireguard0: entered allmulticast mode [ 197.672646][ T9982] EXT4-fs (loop8): pa ffff888108aac690: logic 48, phys. 177, len 21 [ 197.680690][ T9982] EXT4-fs error (device loop8): ext4_mb_release_inode_pa:5465: group 0, free 0, pa_free 1 [ 197.698587][T10026] fido_id[10026]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 197.729457][T10032] netlink: 'syz.5.1746': attribute type 21 has an invalid length. [ 197.744256][T10032] netlink: 'syz.5.1746': attribute type 1 has an invalid length. [ 197.766161][T10032] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1746'. [ 197.778720][ T5534] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.796862][T10040] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1749'. [ 197.868044][T10040] bond0: entered promiscuous mode [ 197.884533][T10040] bond_slave_0: entered promiscuous mode [ 197.896638][T10040] bond_slave_1: entered promiscuous mode [ 197.922446][T10040] gretap0: entered promiscuous mode [ 197.941931][T10040] debugfs: 'hsr1' already exists in 'hsr' [ 197.947667][T10040] Cannot create hsr debugfs directory [ 197.975421][T10040] hsr1: entered promiscuous mode [ 198.065039][T10068] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1758'. [ 198.099284][T10069] tipc: Enabling of bearer rejected, already enabled [ 198.127096][T10068] vlan2: entered promiscuous mode [ 198.143556][T10062] tipc: Enabled bearer , priority 0 [ 198.198323][T10075] vlan2: entered promiscuous mode [ 198.335850][T10086] syzkaller0: entered promiscuous mode [ 198.343643][T10086] syzkaller0: entered allmulticast mode [ 198.356600][T10086] tipc: Enabled bearer , priority 0 [ 198.381796][T10085] tipc: Resetting bearer [ 198.398899][T10085] tipc: Disabling bearer [ 198.414470][ T28] kauditd_printk_skb: 241 callbacks suppressed [ 198.414490][ T28] audit: type=1400 audit(1772231076.240:1833): avc: denied { mounton } for pid=10096 comm="syz.9.1769" path="/proc/524/task" dev="proc" ino=26417 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 198.472605][T10103] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1771'. [ 198.582640][T10111] netlink: 'syz.4.1775': attribute type 9 has an invalid length. [ 198.590458][T10111] netlink: 'syz.4.1775': attribute type 7 has an invalid length. [ 198.603995][T10111] netlink: 'syz.4.1775': attribute type 8 has an invalid length. [ 198.641952][T10111] loop4: detected capacity change from 0 to 128 [ 198.648711][T10117] Cannot find add_set index 0 as target [ 198.658828][T10097] loop9: detected capacity change from 0 to 32768 [ 198.662328][T10111] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 0, start 0000a203) [ 198.672459][ T28] audit: type=1400 audit(1772231076.500:1834): avc: denied { associate } for pid=10096 comm="syz.9.1769" name="cpu.stat" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 198.683444][T10111] FAT-fs (loop4): Filesystem has been set read-only [ 198.721132][T10111] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 0, start 0000a203) [ 198.722031][T10097] loop9: p1 < > p3 < p5 > [ 198.735924][T10097] loop9: partition table partially beyond EOD, truncated [ 198.785727][T10126] loop9: detected capacity change from 0 to 128 [ 198.828709][T10126] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 198.848249][T10126] ext4 filesystem being mounted at /198/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 198.859369][ T3485] kernel write not supported for file 891/net/vlan/vlan0 (pid: 3485 comm: kworker/0:5) [ 198.872650][ T3297] udevd[3297]: inotify_add_watch(7, /dev/loop9p5, 10) failed: No such file or directory [ 198.883816][ T3603] udevd[3603]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 198.895026][T10132] loop4: detected capacity change from 0 to 256 [ 198.901351][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 198.911708][T10122] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.922854][T10132] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1783'. [ 198.932720][T10122] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.939294][T10134] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1781'. [ 198.941428][T10132] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1783'. [ 199.010259][T10138] loop4: detected capacity change from 0 to 128 [ 199.023873][T10138] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 199.039897][T10138] ext4 filesystem being mounted at /131/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 199.053586][T10138] usb usb7: usbfs: process 10138 (syz.4.1784) did not claim interface 0 before use [ 199.114318][T10133] netlink: 10 bytes leftover after parsing attributes in process `syz.5.1782'. [ 199.148878][ T7445] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 199.237655][T10151] loop4: detected capacity change from 0 to 512 [ 199.290635][T10151] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.317862][T10151] ext4 filesystem being mounted at /133/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 199.339993][ T7445] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.636617][T10192] vlan2: entered promiscuous mode [ 199.672616][ T6520] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 199.765289][T10199] xt_connbytes: Forcing CT accounting to be enabled [ 199.924088][T10209] netlink: 'syz.9.1811': attribute type 1 has an invalid length. [ 199.948748][T10209] 8021q: adding VLAN 0 to HW filter on device bond3 [ 200.098972][T10225] vlan2: entered promiscuous mode [ 200.155513][T10231] vlan2: entered promiscuous mode [ 200.220765][T10234] bridge0: port 3(dummy0) entered disabled state [ 200.236698][T10234] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.246324][T10234] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.253867][T10239] netlink: 'syz.9.1820': attribute type 16 has an invalid length. [ 200.261896][T10239] netlink: 'syz.9.1820': attribute type 17 has an invalid length. [ 200.274873][T10234] tipc: Resetting bearer [ 200.281541][T10234] tipc: Resetting bearer [ 200.331040][T10246] netlink: 'syz.5.1824': attribute type 1 has an invalid length. [ 200.346539][ T28] audit: type=1400 audit(1772231078.160:1835): avc: denied { write } for pid=10233 comm="syz.9.1820" path="socket:[28202]" dev="sockfs" ino=28202 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 200.427511][T10239] bridge0: port 3(dummy0) entered blocking state [ 200.433911][T10239] bridge0: port 3(dummy0) entered forwarding state [ 200.446356][T10239] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 200.468230][T10246] 8021q: adding VLAN 0 to HW filter on device bond3 [ 200.509353][T10249] bond2: (slave macvlan0): Releasing active interface [ 200.695677][ T28] audit: type=1400 audit(1772231078.520:1836): avc: denied { ioctl } for pid=10280 comm="syz.8.1840" path="socket:[29160]" dev="sockfs" ino=29160 ioctlcmd=0x943c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 200.800571][T10301] netlink: 'syz.8.1847': attribute type 1 has an invalid length. [ 200.821744][T10301] macvlan0: entered promiscuous mode [ 200.880616][T10314] FAULT_INJECTION: forcing a failure. [ 200.880616][T10314] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 200.894984][T10314] CPU: 1 UID: 0 PID: 10314 Comm: syz.8.1853 Tainted: G W syzkaller #0 PREEMPT(full) [ 200.895022][T10314] Tainted: [W]=WARN [ 200.895028][T10314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 200.895039][T10314] Call Trace: [ 200.895045][T10314] [ 200.895051][T10314] __dump_stack+0x1d/0x30 [ 200.895073][T10314] dump_stack_lvl+0x95/0xd0 [ 200.895122][T10314] dump_stack+0x15/0x1b [ 200.895144][T10314] should_fail_ex+0x263/0x280 [ 200.895166][T10314] should_fail+0xb/0x20 [ 200.895181][T10314] should_fail_usercopy+0x1a/0x20 [ 200.895204][T10314] _copy_from_user+0x1c/0xb0 [ 200.895229][T10314] ___sys_sendmsg+0xc1/0x1e0 [ 200.895291][T10314] __x64_sys_sendmsg+0xd4/0x160 [ 200.895328][T10314] x64_sys_call+0x194c/0x3020 [ 200.895366][T10314] do_syscall_64+0x12c/0x370 [ 200.895383][T10314] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.895406][T10314] RIP: 0033:0x7f8b8be6c799 [ 200.895422][T10314] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 200.895441][T10314] RSP: 002b:00007f8b8a8bf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 200.895481][T10314] RAX: ffffffffffffffda RBX: 00007f8b8c0e5fa0 RCX: 00007f8b8be6c799 [ 200.895493][T10314] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 200.895548][T10314] RBP: 00007f8b8a8bf090 R08: 0000000000000000 R09: 0000000000000000 [ 200.895562][T10314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 200.895573][T10314] R13: 00007f8b8c0e6038 R14: 00007f8b8c0e5fa0 R15: 00007ffd800cf278 [ 200.895589][T10314] [ 201.109508][T10320] vhci_hcd vhci_hcd.0: invalid port number 197 [ 201.126521][T10320] vhci_hcd vhci_hcd.0: default hub control req: 000f v0000 i00c5 l0 [ 202.112009][T10346] set_capacity_and_notify: 5 callbacks suppressed [ 202.112045][T10346] loop8: detected capacity change from 0 to 256 [ 202.126060][T10346] vfat: Unknown parameter 'w9D)KbJou`5T!ySW }iCɖ!|sm_{ӧj#| JMm'XQ C}>r^u4iMV&ɦepC+' [ 202.619490][T10358] vhci_hcd vhci_hcd.0: invalid port number 197 [ 202.673910][T10358] vhci_hcd vhci_hcd.0: default hub control req: 000f v0000 i00c5 l0 [ 203.084638][T10372] __nla_validate_parse: 5 callbacks suppressed [ 203.084734][T10372] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1877'. [ 203.101380][T10373] loop1: detected capacity change from 0 to 256 [ 203.162031][T10372] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1877'. [ 203.226452][T10372] wireguard0: entered promiscuous mode [ 203.247708][T10372] wireguard0: entered allmulticast mode [ 203.472440][T10391] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 203.532205][T10393] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1883'. [ 203.548817][T10391] team0: No ports can be present during mode change [ 203.736305][T10402] vhci_hcd vhci_hcd.0: invalid port number 197 [ 203.744104][T10402] vhci_hcd vhci_hcd.0: default hub control req: 000f v0000 i00c5 l0 [ 203.818990][T10403] loop8: detected capacity change from 0 to 256 [ 203.826164][T10403] vfat: Unknown parameter 'w9D)KbJou`5T!ySW }iCɖ!|sm_{ӧj#| JMm'XQ C}>r^u4iMV&ɦepC+' [ 203.991174][T10406] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 204.144465][T10406] team0: No ports can be present during mode change [ 204.168803][T10409] loop4: detected capacity change from 0 to 256 [ 204.629100][T10423] loop4: detected capacity change from 0 to 128 [ 204.695092][T10421] loop5: detected capacity change from 0 to 8192 [ 204.771636][T10424] syz.4.1895: attempt to access beyond end of device [ 204.771636][T10424] loop4: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 204.820812][T10424] syz.4.1895: attempt to access beyond end of device [ 204.820812][T10424] loop4: rw=2049, sector=169, nr_sectors = 24 limit=128 [ 204.862213][T10424] syz.4.1895: attempt to access beyond end of device [ 204.862213][T10424] loop4: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 204.918214][T10424] syz.4.1895: attempt to access beyond end of device [ 204.918214][T10424] loop4: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 204.962270][T10424] syz.4.1895: attempt to access beyond end of device [ 204.962270][T10424] loop4: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 205.012043][T10424] syz.4.1895: attempt to access beyond end of device [ 205.012043][T10424] loop4: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 205.058047][T10424] syz.4.1895: attempt to access beyond end of device [ 205.058047][T10424] loop4: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 205.107561][T10424] syz.4.1895: attempt to access beyond end of device [ 205.107561][T10424] loop4: rw=2049, sector=281, nr_sectors = 9 limit=128 [ 205.142382][T10437] loop9: detected capacity change from 0 to 128 [ 205.270173][T10437] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 205.293717][T10445] FAULT_INJECTION: forcing a failure. [ 205.293717][T10445] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 205.317323][T10437] ext4 filesystem being mounted at /214/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 205.348201][T10445] CPU: 1 UID: 0 PID: 10445 Comm: syz.8.1901 Tainted: G W syzkaller #0 PREEMPT(full) [ 205.348231][T10445] Tainted: [W]=WARN [ 205.348236][T10445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 205.348247][T10445] Call Trace: [ 205.348252][T10445] [ 205.348258][T10445] __dump_stack+0x1d/0x30 [ 205.348350][T10445] dump_stack_lvl+0x95/0xd0 [ 205.348369][T10445] dump_stack+0x15/0x1b [ 205.348389][T10445] should_fail_ex+0x263/0x280 [ 205.348480][T10445] should_fail+0xb/0x20 [ 205.348518][T10445] should_fail_usercopy+0x1a/0x20 [ 205.348559][T10445] _copy_from_user+0x1c/0xb0 [ 205.348585][T10445] ___sys_sendmsg+0xc1/0x1e0 [ 205.348671][T10445] __x64_sys_sendmsg+0xd4/0x160 [ 205.348729][T10445] x64_sys_call+0x194c/0x3020 [ 205.348756][T10445] do_syscall_64+0x12c/0x370 [ 205.348778][T10445] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.348801][T10445] RIP: 0033:0x7f8b8be6c799 [ 205.348828][T10445] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 205.348847][T10445] RSP: 002b:00007f8b8a8bf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 205.348869][T10445] RAX: ffffffffffffffda RBX: 00007f8b8c0e5fa0 RCX: 00007f8b8be6c799 [ 205.348885][T10445] RDX: 0000000000040000 RSI: 0000200000000000 RDI: 0000000000000003 [ 205.348898][T10445] RBP: 00007f8b8a8bf090 R08: 0000000000000000 R09: 0000000000000000 [ 205.348912][T10445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 205.348950][T10445] R13: 00007f8b8c0e6038 R14: 00007f8b8c0e5fa0 R15: 00007ffd800cf278 [ 205.348970][T10445] [ 205.514788][ T6520] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 205.548289][T10452] loop8: detected capacity change from 0 to 512 [ 205.561804][T10452] ext4: Unknown parameter 'audit' [ 205.586048][T10452] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 205.620806][T10455] loop9: detected capacity change from 0 to 256 [ 205.730668][T10459] loop1: detected capacity change from 0 to 1764 [ 205.737699][T10459] iso9660: Bad value for 'map' [ 205.923200][T10463] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1908'. [ 206.373216][T10478] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1909'. [ 206.387748][T10475] vlan2: entered promiscuous mode [ 207.022493][T10492] netlink: 'syz.9.1920': attribute type 19 has an invalid length. [ 207.050884][T10492] netlink: 172 bytes leftover after parsing attributes in process `syz.9.1920'. [ 207.153682][T10492] set_capacity_and_notify: 1 callbacks suppressed [ 207.153698][T10492] loop9: detected capacity change from 0 to 4096 [ 207.209262][T10492] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 207.233482][T10492] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1920'. [ 207.247655][T10492] vlan2: entered promiscuous mode [ 207.276446][T10496] netlink: 'syz.8.1918': attribute type 21 has an invalid length. [ 207.332884][T10500] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1922'. [ 207.342110][T10496] netlink: 'syz.8.1918': attribute type 1 has an invalid length. [ 207.355796][T10496] netlink: 132 bytes leftover after parsing attributes in process `syz.8.1918'. [ 207.414622][ T5099] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.503952][T10508] loop8: detected capacity change from 0 to 128 [ 207.559658][T10508] syz.8.1926: attempt to access beyond end of device [ 207.559658][T10508] loop8: rw=0, sector=121, nr_sectors = 920 limit=128 [ 207.623216][ T5099] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.653232][ T6520] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.697990][ T5099] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.743988][T10536] vhci_hcd vhci_hcd.0: invalid port number 197 [ 207.751039][T10536] vhci_hcd vhci_hcd.0: default hub control req: 000f v0000 i00c5 l0 [ 207.791189][T10534] vhci_hcd vhci_hcd.0: invalid port number 197 [ 207.804598][ T5099] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.809281][T10534] vhci_hcd vhci_hcd.0: default hub control req: 000f v0000 i00c5 l0 [ 207.841768][T10519] lo speed is unknown, defaulting to 1000 [ 207.953059][ T5099] bridge0: port 3(dummy0) entered disabled state [ 207.993165][ T5099] bridge_slave_1: left allmulticast mode [ 207.998909][ T5099] bridge_slave_1: left promiscuous mode [ 208.006008][ T5099] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.065175][ T5099] bridge_slave_0: left allmulticast mode [ 208.084564][ T5099] bridge_slave_0: left promiscuous mode [ 208.090394][ T5099] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.163955][ T5099] gretap0 (unregistering): left promiscuous mode [ 208.218675][T10598] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1950'. [ 208.251155][ T5099] bond0 (unregistering): left promiscuous mode [ 208.257373][ T5099] bond_slave_0: left promiscuous mode [ 208.263172][ T5099] bond_slave_1: left promiscuous mode [ 208.271197][ T5099] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 208.281145][ T5099] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 208.290647][ T5099] bond0 (unregistering): Released all slaves [ 208.297811][ T5099] bond1 (unregistering): Released all slaves [ 208.306032][ T5099] bond2 (unregistering): Released all slaves [ 208.314529][ T5099] bond3 (unregistering): Released all slaves [ 208.333650][T10598] vlan2: entered promiscuous mode [ 208.363479][T10519] chnl_net:caif_netlink_parms(): no params data found [ 208.379896][ T5099] tipc: Left network mode [ 208.405222][ T5099] hsr_slave_0: left promiscuous mode [ 208.413215][ T5099] hsr_slave_1: left promiscuous mode [ 208.419376][ T5099] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 208.428572][ T5099] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 208.441224][ T5099] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 208.453864][ T5099] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 208.469148][ T5099] veth1_macvtap: left promiscuous mode [ 208.474632][ T5099] veth0_macvtap: left promiscuous mode [ 208.480287][ T5099] veth1_vlan: left promiscuous mode [ 208.485655][ T5099] veth0_vlan: left promiscuous mode [ 208.506805][T10621] loop9: detected capacity change from 0 to 256 [ 208.692381][T10630] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1960'. [ 208.715319][ T5099] team0 (unregistering): Port device team_slave_1 removed [ 208.722569][T10630] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1960'. [ 208.736385][ T5099] team0 (unregistering): Port device team_slave_0 removed [ 208.749820][T10631] loop8: detected capacity change from 0 to 512 [ 208.827814][T10632] loop5: detected capacity change from 0 to 4096 [ 208.882966][T10631] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 208.940724][T10632] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.975617][T10629] xt_NFQUEUE: number of queues (8) out of range (got 65537) [ 208.984843][ T28] audit: type=1400 audit(1772231086.810:1837): avc: denied { watch watch_reads } for pid=10628 comm="syz.5.1961" path="/359/file0" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 209.126936][T10519] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.139122][T10519] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.146412][T10519] bridge_slave_0: entered allmulticast mode [ 209.153018][T10519] bridge_slave_0: entered promiscuous mode [ 209.163025][T10630] wireguard0: entered promiscuous mode [ 209.168702][T10630] wireguard0: entered allmulticast mode [ 209.176620][T10519] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.195469][T10519] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.202741][T10519] bridge_slave_1: entered allmulticast mode [ 209.209283][T10519] bridge_slave_1: entered promiscuous mode [ 209.240693][T10632] lo speed is unknown, defaulting to 1000 [ 209.246842][T10519] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 209.257990][T10519] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 209.284431][T10519] team0: Port device team_slave_0 added [ 209.296531][T10519] team0: Port device team_slave_1 added [ 209.350643][T10519] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 209.392798][T10519] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 209.418767][T10519] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 209.436043][ T5534] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.446621][T10519] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 209.470551][T10665] loop4: detected capacity change from 0 to 8192 [ 209.477085][T10519] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 209.514448][T10519] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 209.519157][ T28] audit: type=1326 audit(1772231087.330:1838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10669 comm="syz.8.1968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b8be6c799 code=0x7ffc0000 [ 209.560410][ T28] audit: type=1326 audit(1772231087.330:1839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10669 comm="syz.8.1968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b8be6c799 code=0x7ffc0000 [ 209.560587][T10665] loop4: p1 < > p2 p4 < p5 > [ 209.584048][ T28] audit: type=1326 audit(1772231087.330:1840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10669 comm="syz.8.1968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b8be6c799 code=0x7ffc0000 [ 209.601823][T10674] loop8: detected capacity change from 0 to 256 [ 209.612242][ T28] audit: type=1326 audit(1772231087.330:1841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10669 comm="syz.8.1968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f8b8be6c799 code=0x7ffc0000 [ 209.645074][ T28] audit: type=1326 audit(1772231087.330:1842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10669 comm="syz.8.1968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b8be6c799 code=0x7ffc0000 [ 209.649449][T10665] loop4: partition table partially beyond EOD, [ 209.670453][ T28] audit: type=1326 audit(1772231087.330:1843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10669 comm="syz.8.1968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b8be6c799 code=0x7ffc0000 [ 209.704624][T10665] truncated [ 209.713228][T10665] loop4: p1 start 134217728 is beyond EOD, truncated [ 209.715697][T10519] hsr_slave_0: entered promiscuous mode [ 209.732918][T10519] hsr_slave_1: entered promiscuous mode [ 209.735052][T10665] loop4: p2 size 591360 extends beyond EOD, truncated [ 209.739316][T10519] debugfs: 'hsr0' already exists in 'hsr' [ 209.745746][ T28] audit: type=1326 audit(1772231087.330:1844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10669 comm="syz.8.1968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b8be6c799 code=0x7ffc0000 [ 209.775769][ T28] audit: type=1326 audit(1772231087.330:1845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10669 comm="syz.8.1968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b8be6c799 code=0x7ffc0000 [ 209.799640][T10665] loop4: p5 size 591360 extends beyond EOD, truncated [ 209.821401][T10519] Cannot create hsr debugfs directory [ 209.828832][ T5099] IPVS: stop unused estimator thread 0... [ 209.840782][ T28] audit: type=1326 audit(1772231087.330:1846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10669 comm="syz.8.1968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f8b8be2cfce code=0x7ffc0000 [ 210.103922][T10675] lo speed is unknown, defaulting to 1000 [ 210.337439][T10672] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.537815][T10519] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 210.600447][T10519] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 210.678102][T10519] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 210.806858][T10519] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 210.903966][ T5099] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.943909][T10750] vlan2: entered promiscuous mode [ 210.974258][ T5099] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.988352][T10519] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.074694][T10519] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.096142][ T5099] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.112415][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.119614][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.137322][ T2077] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.144394][ T2077] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.169250][T10739] lo speed is unknown, defaulting to 1000 [ 211.175518][T10519] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 211.186237][T10519] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 211.266622][ T5099] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.590252][T10519] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 211.714757][T10785] loop4: detected capacity change from 0 to 256 [ 211.762597][T10739] chnl_net:caif_netlink_parms(): no params data found [ 211.812204][ T5099] bridge_slave_1: left allmulticast mode [ 211.818046][ T5099] bridge_slave_1: left promiscuous mode [ 211.826170][ T5099] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.837478][ T5099] bridge_slave_0: left allmulticast mode [ 211.843354][ T5099] bridge_slave_0: left promiscuous mode [ 211.849374][ T5099] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.865864][T10797] loop4: detected capacity change from 0 to 256 [ 211.878715][T10797] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1988'. [ 211.890488][T10797] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1988'. [ 211.913658][ T5099] gretap0 (unregistering): left promiscuous mode [ 211.961454][ T5099] bond0 (unregistering): left promiscuous mode [ 211.967672][ T5099] bond_slave_0: left promiscuous mode [ 211.973247][ T5099] bond_slave_1: left promiscuous mode [ 211.978694][ T5099] dummy0: left promiscuous mode [ 211.985461][ T5099] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 212.004085][ T5099] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 212.013918][ T5099] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 212.023106][ T5099] bond0 (unregistering): Released all slaves [ 212.031354][ T5099] bond1 (unregistering): Released all slaves [ 212.040225][ T5099] bond2 (unregistering): Released all slaves [ 212.063276][T10803] netlink: 'syz.8.1990': attribute type 3 has an invalid length. [ 212.073825][ T5099] bond3 (unregistering): Released all slaves [ 212.080749][T10803] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1990'. [ 212.147974][ T5099] tipc: Disabling bearer [ 212.155297][ T5099] tipc: Disabling bearer [ 212.162945][ T5099] tipc: Left network mode [ 212.184816][T10739] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.192140][T10739] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.199337][T10739] bridge_slave_0: entered allmulticast mode [ 212.205943][T10739] bridge_slave_0: entered promiscuous mode [ 212.212761][T10739] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.219877][T10739] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.227178][T10739] bridge_slave_1: entered allmulticast mode [ 212.233657][T10739] bridge_slave_1: entered promiscuous mode [ 212.252005][ T5099] hsr_slave_0: left promiscuous mode [ 212.275937][ T5099] hsr_slave_1: left promiscuous mode [ 212.371966][ T5099] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 212.379488][ T5099] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 212.403468][ T5099] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 212.419195][ T5099] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 212.428089][ T5099] veth1_macvtap: left promiscuous mode [ 212.434719][ T5099] veth0_macvtap: left promiscuous mode [ 212.440801][ T5099] veth1_vlan: left promiscuous mode [ 212.446146][ T5099] veth0_vlan: left promiscuous mode [ 212.525548][T10836] loop8: detected capacity change from 0 to 1764 [ 213.105231][T10844] loop9: detected capacity change from 0 to 256 [ 213.275754][T10519] veth0_vlan: entered promiscuous mode [ 213.314244][ T23] lo speed is unknown, defaulting to 1000 [ 213.370651][T10739] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 213.414186][ T23] infiniband syz0: ib_query_port failed (-19) [ 213.510737][T10739] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 213.547205][T10848] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1998'. [ 213.650063][T10850] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1999'. [ 213.687211][T10519] veth1_vlan: entered promiscuous mode [ 213.707176][T10850] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1999'. [ 213.724394][T10848] 8021q: VLANs not supported on ip6gre0 [ 213.742302][T10739] team0: Port device team_slave_0 added [ 213.772013][T10519] veth0_macvtap: entered promiscuous mode [ 213.819251][T10739] team0: Port device team_slave_1 added [ 213.857502][T10850] wireguard1: entered promiscuous mode [ 213.891787][T10850] wireguard1: entered allmulticast mode [ 213.954307][T10519] veth1_macvtap: entered promiscuous mode [ 214.049400][ T5099] IPVS: stop unused estimator thread 0... [ 214.062330][T10739] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 214.124386][T10739] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 214.249151][T10739] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 214.277081][T10519] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 214.313154][T10739] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 214.329235][T10739] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 214.364970][T10739] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 214.379914][T10519] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 214.395191][T10875] dummy0: entered allmulticast mode [ 214.422596][ T129] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.438732][ T129] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.461133][ T129] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.472528][ T129] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.492759][T10739] hsr_slave_0: entered promiscuous mode [ 214.498904][T10739] hsr_slave_1: entered promiscuous mode [ 214.574376][T10886] loop1: detected capacity change from 0 to 256 [ 214.596111][T10886] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1924'. [ 214.641904][T10886] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1924'. [ 214.737346][ T28] kauditd_printk_skb: 24 callbacks suppressed [ 214.737361][ T28] audit: type=1400 audit(1772231092.560:1871): avc: denied { ioctl } for pid=10909 comm="syz.1.2009" path="socket:[31774]" dev="sockfs" ino=31774 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 214.774556][ T28] audit: type=1400 audit(1772231092.570:1872): avc: denied { listen } for pid=10909 comm="syz.1.2009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 214.839786][T10913] syzkaller0: entered promiscuous mode [ 214.846128][T10913] syzkaller0: entered allmulticast mode [ 214.854932][T10915] vhci_hcd vhci_hcd.0: invalid port number 197 [ 214.863232][T10915] vhci_hcd vhci_hcd.0: default hub control req: 000f v0000 i00c5 l0 [ 214.872818][T10913] tipc: Enabled bearer , priority 0 [ 214.938146][T10739] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 215.029932][T10739] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 215.046387][T10739] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 215.058009][T10739] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 215.075465][T10927] ip6gretap0: entered promiscuous mode [ 215.226662][T10739] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.902377][T10739] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.934748][ T7232] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.941930][ T7232] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.032186][ T7232] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.039279][ T7232] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.074047][T10739] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 216.098760][T10955] vhci_hcd vhci_hcd.0: invalid port number 197 [ 216.126311][T10955] vhci_hcd vhci_hcd.0: default hub control req: 000f v0000 i00c5 l0 [ 216.191640][T10739] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 216.239329][T10983] netlink: 'syz.8.2024': attribute type 10 has an invalid length. [ 216.249480][T10966] tipc: Enabling of bearer rejected, failed to enable media [ 216.258414][T10986] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2026'. [ 216.267704][T10983] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2024'. [ 216.299178][T10983] dummy0: entered promiscuous mode [ 216.309384][T10983] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 216.375561][T10739] veth0_vlan: entered promiscuous mode [ 216.407470][T10739] veth1_vlan: entered promiscuous mode [ 216.472136][T10739] veth0_macvtap: entered promiscuous mode [ 216.484974][T10739] veth1_macvtap: entered promiscuous mode [ 216.501726][T11023] vlan2: entered promiscuous mode [ 216.514221][T11027] vhci_hcd vhci_hcd.0: invalid port number 197 [ 216.523714][T11027] vhci_hcd vhci_hcd.0: default hub control req: 000f v0000 i00c5 l0 [ 216.547512][T10739] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 216.567258][T10739] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 216.583469][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.604647][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.624611][T11036] loop9: detected capacity change from 0 to 8192 [ 216.636736][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.654280][T11043] loop8: detected capacity change from 0 to 512 [ 216.666077][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.727890][T11043] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 216.753762][T11043] ext4 filesystem being mounted at /267/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 216.855487][ T28] audit: type=1400 audit(1772231094.680:1873): avc: denied { accept } for pid=11066 comm="syz.2.1976" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 216.922660][ T5534] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.967920][T11082] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2042'. [ 216.982617][T11082] vlan2: entered promiscuous mode [ 216.988982][T11085] loop2: detected capacity change from 0 to 128 [ 216.999688][T11085] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 217.029178][T11085] ext4 filesystem being mounted at /2/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 217.064479][ T28] audit: type=1400 audit(1772231094.890:1874): avc: denied { execute } for pid=11084 comm="syz.2.2044" path="/2/mnt/net_prio.prioidx" dev="loop2" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 217.104721][T10739] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 217.221867][T11097] loop8: detected capacity change from 0 to 512 [ 217.230505][T11097] EXT4-fs: Ignoring removed nomblk_io_submit option [ 217.274610][T11097] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 217.294430][T11097] EXT4-fs (loop8): 1 truncate cleaned up [ 217.300727][T11097] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 218.227955][ T5534] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.301369][T11144] loop9: detected capacity change from 0 to 1024 [ 218.353882][T11144] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 218.396488][ T6520] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.417356][ T12] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 218.464952][ T12] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 218.482240][ T12] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 218.519210][ T12] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 218.556193][T11177] tipc: Enabling of bearer rejected, already enabled [ 218.574267][T11177] tipc: Enabled bearer , priority 0 [ 218.886483][T11201] loop8: detected capacity change from 0 to 128 [ 218.918323][T11201] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 218.945181][T11201] ext4 filesystem being mounted at /276/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 218.979706][ T28] audit: type=1400 audit(1772231096.800:1875): avc: denied { setattr } for pid=11200 comm="syz.8.2068" name="bus" dev="loop8" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 219.056612][ T5534] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 219.095311][T11220] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2070'. [ 219.211929][T11233] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.227799][T11233] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.243247][T11233] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2075'. [ 219.259119][T11233] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2075'. [ 219.279361][T11236] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2076'. [ 219.292978][T11233] netlink: 68 bytes leftover after parsing attributes in process `syz.8.2075'. [ 219.313830][T11236] vlan2: entered promiscuous mode [ 219.318889][T11236] syz_tun: entered promiscuous mode [ 219.389578][T11250] Cannot find add_set index 0 as target [ 219.542901][T11260] loop9: detected capacity change from 0 to 8192 [ 219.559398][T11270] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2083'. [ 219.571672][T11263] loop1: detected capacity change from 0 to 8192 [ 219.752275][T11290] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 219.770281][T11290] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2085'. [ 219.863139][ T28] audit: type=1326 audit(1772231097.690:1876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11296 comm="syz.2.2086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bc039c799 code=0x7ffc0000 [ 219.959917][ T28] audit: type=1326 audit(1772231097.690:1877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11296 comm="syz.2.2086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bc039c799 code=0x7ffc0000 [ 220.019012][ T28] audit: type=1326 audit(1772231097.690:1878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11296 comm="syz.2.2086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8bc039c799 code=0x7ffc0000 [ 220.079144][ T28] audit: type=1326 audit(1772231097.690:1879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11296 comm="syz.2.2086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bc039c799 code=0x7ffc0000 [ 220.154075][ T28] audit: type=1326 audit(1772231097.690:1880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11296 comm="syz.2.2086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f8bc039c799 code=0x7ffc0000 [ 220.177931][ T28] audit: type=1400 audit(1772231097.690:1881): avc: denied { connect } for pid=11296 comm="syz.2.2086" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 220.211131][ T28] audit: type=1326 audit(1772231097.690:1882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11296 comm="syz.2.2086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bc039c799 code=0x7ffc0000 [ 220.253398][ T28] audit: type=1326 audit(1772231097.690:1883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11296 comm="syz.2.2086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=52 compat=0 ip=0x7f8bc039c799 code=0x7ffc0000 [ 220.299992][T11325] loop8: detected capacity change from 0 to 1764 [ 220.384363][ T28] audit: type=1326 audit(1772231097.690:1884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11296 comm="syz.2.2086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bc039c799 code=0x7ffc0000 [ 220.498066][ T28] audit: type=1326 audit(1772231097.690:1885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11296 comm="syz.2.2086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f8bc039c799 code=0x7ffc0000 [ 220.616525][T11332] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2093'. [ 221.064262][T11342] program syz.2.2095 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 221.122035][T11347] netlink: 60 bytes leftover after parsing attributes in process `syz.9.2091'. [ 221.162766][T11349] batadv_slave_1: entered promiscuous mode [ 221.249796][T11344] batadv_slave_1: left promiscuous mode [ 221.310198][T11356] loop2: detected capacity change from 0 to 256 [ 221.317646][T11355] loop9: detected capacity change from 0 to 8192 [ 221.847201][T11367] vhci_hcd vhci_hcd.0: invalid port number 197 [ 221.854695][T11367] vhci_hcd vhci_hcd.0: default hub control req: 000f v0000 i00c5 l0 [ 221.906626][T11376] Cannot find del_set index 2 as target [ 221.951960][T11380] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2108'. [ 222.070191][T11378] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.077409][T11378] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.137400][T11378] bridge_slave_0: left allmulticast mode [ 222.145053][T11378] bridge_slave_0: left promiscuous mode [ 222.151920][T11378] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.167795][T11378] bridge_slave_1: left allmulticast mode [ 222.429786][T11378] bridge_slave_1: left promiscuous mode [ 222.435865][T11378] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.452906][T11378] bond0: (slave bond_slave_0): Releasing backup interface [ 222.467808][T11378] bond0: (slave bond_slave_1): Releasing backup interface [ 222.503697][T11378] team0: Port device team_slave_0 removed [ 222.517531][T11378] team0: Port device team_slave_1 removed [ 222.530462][T11378] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 222.541569][T11378] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 222.551241][T11378] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 222.561042][T11378] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 222.573238][T11378] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 222.614404][T11388] bond0: entered promiscuous mode [ 222.628842][T11388] bond_slave_0: entered promiscuous mode [ 222.636261][T11388] bond_slave_1: entered promiscuous mode [ 222.643676][T11388] gretap0: entered promiscuous mode [ 222.666700][T11388] debugfs: 'hsr1' already exists in 'hsr' [ 222.690859][T11388] Cannot create hsr debugfs directory [ 222.701547][T11388] hsr1: entered promiscuous mode [ 222.709249][T11407] netlink: 'syz.4.2114': attribute type 10 has an invalid length. [ 222.719732][T11389] team0: Mode changed to "loadbalance" [ 222.726833][T11407] bridge0: port 1(dummy0) entered disabled state [ 222.749652][T11407] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 222.749775][T11409] loop2: detected capacity change from 0 to 1024 [ 222.750170][T11409] EXT4-fs: Ignoring removed oldalloc option [ 222.790647][T11409] EXT4-fs: Ignoring removed bh option [ 222.818615][T11409] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 222.866749][T11418] vhci_hcd vhci_hcd.0: invalid port number 197 [ 222.873669][T11418] vhci_hcd vhci_hcd.0: default hub control req: 000f v0000 i00c5 l0 [ 222.953980][T11427] wireguard1: entered promiscuous mode [ 222.962176][T11427] wireguard1: entered allmulticast mode [ 223.030276][T11431] macvlan0: entered promiscuous mode [ 223.174441][T11451] vhci_hcd vhci_hcd.0: invalid port number 197 [ 223.181076][T11451] vhci_hcd vhci_hcd.0: default hub control req: 000f v0000 i00c5 l0 [ 223.215508][T11454] vhci_hcd vhci_hcd.3: default hub control req: 8013 v0000 i0000 l31125 [ 223.279591][T11409] ================================================================== [ 223.287700][T11409] BUG: KCSAN: data-race in file_write_and_wait_range / xas_set_mark [ 223.295694][T11409] [ 223.297995][T11409] write to 0xffff888108bf586c of 4 bytes by task 11428 on cpu 0: [ 223.305687][T11409] xas_set_mark+0x12b/0x140 [ 223.310189][T11409] tag_pages_for_writeback+0xe3/0x2e0 [ 223.315551][T11409] ext4_do_writepages+0x6b9/0x2840 [ 223.320652][T11409] ext4_writepages+0x18f/0x320 [ 223.325400][T11409] do_writepages+0x1c6/0x310 [ 223.329982][T11409] file_write_and_wait_range+0x178/0x2f0 [ 223.335609][T11409] generic_buffers_fsync_noflush+0x45/0x130 [ 223.341490][T11409] ext4_sync_file+0x1aa/0x6b0 [ 223.346149][T11409] vfs_fsync_range+0xc5/0xe0 [ 223.350722][T11409] ext4_buffered_write_iter+0x34f/0x3c0 [ 223.356258][T11409] ext4_file_write_iter+0x380/0xfa0 [ 223.361447][T11409] iter_file_splice_write+0x6c4/0xa80 [ 223.366803][T11409] direct_splice_actor+0x156/0x2a0 [ 223.371899][T11409] splice_direct_to_actor+0x311/0x670 [ 223.377254][T11409] do_splice_direct+0x119/0x1a0 [ 223.382099][T11409] do_sendfile+0x382/0x650 [ 223.386499][T11409] __x64_sys_sendfile64+0x105/0x150 [ 223.391679][T11409] x64_sys_call+0x2dc4/0x3020 [ 223.396346][T11409] do_syscall_64+0x12c/0x370 [ 223.400917][T11409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.406792][T11409] [ 223.409098][T11409] read to 0xffff888108bf586c of 4 bytes by task 11409 on cpu 1: [ 223.416706][T11409] file_write_and_wait_range+0x130/0x2f0 [ 223.422336][T11409] generic_buffers_fsync_noflush+0x45/0x130 [ 223.428214][T11409] ext4_sync_file+0x1aa/0x6b0 [ 223.432873][T11409] vfs_fsync_range+0xc5/0xe0 [ 223.437455][T11409] ext4_buffered_write_iter+0x34f/0x3c0 [ 223.442991][T11409] ext4_file_write_iter+0x380/0xfa0 [ 223.448199][T11409] iter_file_splice_write+0x6c4/0xa80 [ 223.453553][T11409] direct_splice_actor+0x156/0x2a0 [ 223.458647][T11409] splice_direct_to_actor+0x311/0x670 [ 223.464001][T11409] do_splice_direct+0x119/0x1a0 [ 223.468841][T11409] do_sendfile+0x382/0x650 [ 223.473244][T11409] __x64_sys_sendfile64+0x105/0x150 [ 223.478424][T11409] x64_sys_call+0x2dc4/0x3020 [ 223.483091][T11409] do_syscall_64+0x12c/0x370 [ 223.487662][T11409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.493539][T11409] [ 223.495842][T11409] value changed: 0x02000021 -> 0x04000021 [ 223.501541][T11409] [ 223.503843][T11409] Reported by Kernel Concurrency Sanitizer on: [ 223.510063][T11409] CPU: 1 UID: 0 PID: 11409 Comm: syz.2.2115 Tainted: G W syzkaller #0 PREEMPT(full) [ 223.520983][T11409] Tainted: [W]=WARN [ 223.524766][T11409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 223.534839][T11409] ================================================================== [ 223.655059][T10739] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.