last executing test programs: 9m2.679740135s ago: executing program 4 (id=935): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)={0x14, 0x3, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x20080) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000800)={0x58, 0x0, 0x8, 0x401, 0x0, 0x0, {0x0, 0x0, 0x1}, [@CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0xfff}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @icmp}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf8}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x1b}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8864}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) syz_emit_ethernet(0x3a, &(0x7f00000001c0)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x18, 0x0, @wg=@data={0x4, 0x4, 0xffffffff80000000}}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@broadcast, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0xe000, 0x4, 0x11, 0x0, @empty, @empty}, {0x4, 0x4e60, 0x8}}}}}, 0x0) 9m2.560030401s ago: executing program 4 (id=937): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x4000}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x88}, 0x1, 0x0, 0x0, 0x8080}, 0x0) 9m2.518564603s ago: executing program 4 (id=939): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0xc, 0x0, 0x400, 0x4156, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x10563b, 0x0, 0xfffffffe, 0x6, 0x10000, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700400008"], 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)}, 0x8000) r0 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, 0x0) 9m2.472484365s ago: executing program 4 (id=940): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="34000000200081dcfcffffff0300000002000000000000031f000000050016000400d804fe5e4a000008000200ac1414bb080017004e214e22"], 0x34}, 0x1, 0x0, 0x0, 0x81}, 0x44004) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000040)={0x7ff, 0x7, 0xf3d, 0x2, 0x2, 0x2}) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x8080, &(0x7f0000000040)=ANY=[@ANYBLOB="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", @ANYRES8], 0x3, 0x232, &(0x7f0000000640)="$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") open(&(0x7f0000000240)='./file1\x00', 0x105342, 0x20) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) getpid() r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$pokeuser(0x6, r3, 0x388, 0x41d9fda7) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x439, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1313}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x40008c0) 9m2.434779427s ago: executing program 4 (id=942): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000140), 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="270502001c0014000600002fb96db4f7babe050007008100050086dd", 0x1c}, {&(0x7f0000000300)="d307000000000000bbdf5d4cad705e8dbe8fabf4", 0x14}], 0x2}, 0x30040805) 9m1.231966937s ago: executing program 4 (id=953): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x1ffa, 0x43) acct(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x78, '\x00', 0x0, @fallback=0x30, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x7], 0x0, 0x200000000000000, 0x1}}, 0x40) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r1, 0xf507, 0x0) 9m1.141719751s ago: executing program 32 (id=953): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x1ffa, 0x43) acct(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x78, '\x00', 0x0, @fallback=0x30, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x7], 0x0, 0x200000000000000, 0x1}}, 0x40) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r1, 0xf507, 0x0) 2m44.343163693s ago: executing program 1 (id=3281): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00') prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20030, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x200000, 0x1000}, 0x20) 2m43.295657345s ago: executing program 1 (id=3286): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0xb6ac, @local, 0x10}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001a40)={0x18, 0xe, &(0x7f0000001840)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x1}, @alu={0x4, 0x0, 0x1, 0x6, 0x5, 0x10, 0x8}, @tail_call, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @call={0x85, 0x0, 0x0, 0xd0}]}, &(0x7f00000018c0)='syzkaller\x00', 0x101, 0xd4, &(0x7f0000001900)=""/212, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001a00)={0x4, 0x8, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000001}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000001b00)=@generic={&(0x7f0000000540)='./file0\x00', r3}, 0x18) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1f}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x11}]}, 0x24}}, 0x44004) r5 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) write$selinux_create(r5, &(0x7f00000005c0)=@access={'system_u:object_r:root_t:s0', 0x20, '/usr/sbin/cups-browsed', 0x20, 0x5}, 0x48) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x80078b, &(0x7f00000000c0)={[{@usrjquota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@delalloc}, {@nobh}, {@min_batch_time={'min_batch_time', 0x3d, 0xb656}}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x46f, &(0x7f0000000bc0)="$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") r6 = socket(0x2, 0x3, 0xff) bind$inet(r6, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r7, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000880)=ANY=[@ANYBLOB="1c000900", @ANYRES16=r8, @ANYBLOB="230525bd7000fedbdf25050000000800030004000000"], 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x4000000) sendmsg$rds(r6, &(0x7f00000001c0)={&(0x7f0000000240)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000000280)=[{0x0}, {&(0x7f00000000c0)=""/23, 0x17}], 0x2, 0x0, 0x0, 0x4c880}, 0x8000) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r6, 0x84, 0x8, &(0x7f0000000180), &(0x7f0000000500)=0x4) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="78000000390009fffe0f0f000000000003"], 0x78}}, 0x0) syz_emit_ethernet(0xae, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x78, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1803"}, {0x0, 0x1, "00e9ff06ffffaf64000000a2"}, {0x0, 0x1, "fe906d26efe3"}]}}}}}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="34000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b000100626174616476000004000280c9c60e995da8b4eb0103475be53b930ae1cbb246016ace2049f1db715c5192a29b256ef1f8d75b57e1104b3d2259c0bfd5858dcd"], 0x34}}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x2) sendmsg$SMC_PNETID_GET(r10, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x20, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) 2m40.867754885s ago: executing program 1 (id=3300): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='projid_map\x00') preadv(r0, &(0x7f0000001400), 0x0, 0xa1, 0x9) 2m40.745196101s ago: executing program 1 (id=3302): r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000b80)='./file0\x00', 0x1008002, &(0x7f0000000d00)={[{@grpjquota}]}, 0x3, 0x5ee, &(0x7f0000000280)="$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") ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, &(0x7f0000000a40)={0x3, {0x12, 0xb7, 0xe0000000000, 0xff}}) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) close_range(r1, r0, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$binfmt_register(r1, &(0x7f0000000880)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'usrjquota=\xb9\xc4\xd7A%S\n\x10i\xcf\x84\x93v\x02\xe4y}\xcbV\xbb\xc1\xd5\x06\v\xdc\xd8\\\xc5\xb3\ag\xa6u\xbe\xf4)\xae\xb6\xfe*\x9d?\xb2C\xf0<\xc9\x820M\x92Tzs\xba\xca\x9d\xad\x17\x1b\x84\xbc\xb3\xd8\xad\f\x17\xbe\x17\xb5}.H\x90\xc7\x0e\xb3y\xd0\xc3\xf0c\x04\xe6\fzZ\x02\xfd_W\x9a\xa7\x81\xfcr\xe9B\x95\x13\x9f\x10\'5\xc0\xf9\xb5\xe1\x15Y\x9b$\xa43\xe7F>\xb7\xa1\xb7zw\xac\xc8\x12\x94\xa7\xe5\xcb\xc0g\x865\\\x9e\xca\x8e\xe2\t\xb7\b\x00\x00\x00\x00\x00\x00\x00i7b\xad\x14oVT\xcb\xea\xd3\xad\xa9\x16\xd5\xb2\xa0 \x13^\xf6>\xd4\x8bZzl\x88\xddn\xab\xd6\x12\x1f\x06', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xdc\xf2\xb5', 0x3a, './file2', 0x3a, [0x46]}, 0x113) r2 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) r3 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) getsockopt$inet_sctp6_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f00000009c0), &(0x7f0000000a00)=0x4) write(r4, &(0x7f0000000040)="09000000010001", 0x7) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='hugetlbfs\x00', 0x8000, 0x0) mount$bind(&(0x7f0000000380)='./file0/file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x40000, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000009cc65113bf1a5bb10000000000000000", @ANYRES32=0x0, @ANYBLOB="03800000000000001c0012800b00010067726574617000000c00028008000700ac14141308000a00", @ANYRES32=r6, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001380)={&(0x7f0000000280)=ANY=[@ANYRESDEC=r3], 0x0, 0x44, 0x0, 0x1, 0x400000}, 0xcf) clock_settime(0xfffffffa, &(0x7f0000000280)) move_mount(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file0\x00', 0xffffffffffffff9c, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000a80)={[{@nodioread_nolock}, {@errors_continue}, {@noinit_itable}, {@sb={'sb', 0x3d, 0x1}}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x3}}], [{@uid_gt={'uid>', r7}}, {@fsuuid={'fsuuid', 0x3d, {[0x32, 0x0, 0x65, 0x64, 0x65, 0x32, 0x35, 0x66], 0x2d, [0x65, 0x64, 0x37, 0x35], 0x2d, [0x31, 0x30, 0x66, 0x37], 0x2d, [0x63, 0x65, 0x62, 0x3b], 0x2d, [0x62, 0x0, 0x33, 0x62, 0x35, 0x31, 0x36, 0x35]}}}, {@smackfsdef={'smackfsdef', 0x3d, '\\-^'}}]}, 0x1, 0x46e, &(0x7f0000000bc0)="$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") 2m39.647089395s ago: executing program 1 (id=3306): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000015c0), 0x20041, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r1, 0xe, &(0x7f0000001840)={0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001600)=""/235, 0xeb}, {&(0x7f0000001700)=""/16, 0x10}, {&(0x7f0000001740)=""/70, 0x46}], &(0x7f0000001800)=[0xfffffffffffffff7], 0x3}, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0xaf, &(0x7f00000000c0)=ANY=[], 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000002e50003000000000085100000fcffffff250000001000000006000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94) accept$packet(0xffffffffffffffff, &(0x7f0000000480), &(0x7f00000004c0)=0x14) preadv(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/79, 0x4f}], 0x1, 0x1, 0xffffff7c) 2m38.836730965s ago: executing program 2 (id=3312): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='projid_map\x00') preadv(r0, &(0x7f0000001400), 0x0, 0xa1, 0x9) 2m38.795926167s ago: executing program 1 (id=3313): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_vs\x00') sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0xbc3, 0x0, 0x0, &(0x7f0000000900)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x2, 0xa3d8, &(0x7f0000000340)=[{&(0x7f0000001f80)="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", 0x682}], 0x1, 0x8, 0x1, {0x2}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)={0x58, r3, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x30, 0x8, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ALLOWEDIPS={0x4}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r4) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$TIOCSERGETLSR(r6, 0x5459, &(0x7f0000000080)) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000600)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r4, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010030bd7000fddbdf2518000000100030800c000180080001000000000008000300c38526ef58c0eb76b41b970beff9887f2793ad8b4e5ccdaab1ac157f7001bada1e79cbf276913b24443cbafec7b7da9b51604fbacf1b4a3d26ba6179a5e4cbd90529b7984e9d11f675313bea9d33d3cbf07e3732b024b533f9939183c14b3d0b19a23394a7cccd189ff05b377d5846dd495fd9be7e99458f6a3bc70e2d4a754f4ef5f154295871c8ee0b73386308ea5209ece920", @ANYRES32=r7, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x100}, 0x24000000) lseek(r0, 0x10001, 0x0) 2m38.762913909s ago: executing program 33 (id=3313): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_vs\x00') sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0xbc3, 0x0, 0x0, &(0x7f0000000900)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x2, 0xa3d8, &(0x7f0000000340)=[{&(0x7f0000001f80)="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", 0x682}], 0x1, 0x8, 0x1, {0x2}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)={0x58, r3, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x30, 0x8, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ALLOWEDIPS={0x4}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r4) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$TIOCSERGETLSR(r6, 0x5459, &(0x7f0000000080)) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000600)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r4, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010030bd7000fddbdf2518000000100030800c000180080001000000000008000300c38526ef58c0eb76b41b970beff9887f2793ad8b4e5ccdaab1ac157f7001bada1e79cbf276913b24443cbafec7b7da9b51604fbacf1b4a3d26ba6179a5e4cbd90529b7984e9d11f675313bea9d33d3cbf07e3732b024b533f9939183c14b3d0b19a23394a7cccd189ff05b377d5846dd495fd9be7e99458f6a3bc70e2d4a754f4ef5f154295871c8ee0b73386308ea5209ece920", @ANYRES32=r7, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x100}, 0x24000000) lseek(r0, 0x10001, 0x0) 2m37.066604602s ago: executing program 2 (id=3318): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) sendmsg$SOCK_DESTROY(r0, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000780)={0x11e8, 0x15, 0x800, 0x70bd25, 0x25dfdbfb, {0x26, 0x5}, [@INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0xf6, 0x1, "0fb8522ffa856559fd028e6a9c5c50a8be45d28108daacf0bb3836d1041e8e08aa715722f2c9a4667f93637392d1c90820544ef77f127ad4be48967378c49728cc2540ec59eb6d33de2301aaf4f67f030e87891474bbf3e08a23b1f18350cac110f7be3d026cffececae36612674fde2c4d6b4d635fca74f8bc896db1f95a297b3fda9c078be1021d36ac078756edc121b4fc52883826a520ef875991938653309404b64033da596ff4a9f63695f56bb51e831211712f27095e0f6ab8690793b78a68360b7acef3191c7e9b56dbde35da60c9d6ff2232110781782272d7eae0da1efc6d9b81ef0b0126073ce2705663f903a"}, @INET_DIAG_REQ_BYTECODE={0x9b, 0x1, "479fa41cdccd3b11b00256ec722780b73f4f94ade31531259e9de981d0c2f94dd708bdadf5d5955cf620bbc60c5b08a5af7ac1b010076a2c3c2d392a8e7d1edde55d9b092e157d5a3ebdefc31f3a06f41d884b64886fed9af48fbb8530aa744cb110133da50b89061aa50c5dc404906ead6457654858e023de9c34a5cd6811f578079dff059f85bd0c10c8c1503eb557bb98af9a6f69a4"}, @INET_DIAG_REQ_BYTECODE={0x3a, 0x1, "acf2453582d2c4443aa40bf849d9664a1fff684e03122c727eb3526e21ba748ffb37d058fde881a924bb6d55c779a4208b4f8d6ff2cb"}]}, 0x11e8}, 0x1, 0x0, 0x0, 0x40001}, 0x44001) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a0101000000"], 0x57) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x61c27}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x20040000) 2m36.968135277s ago: executing program 2 (id=3320): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000200)={[{@nombcache}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@nombcache}, {@nobarrier}, {@init_itable}, {@errors_remount}]}, 0x1, 0x569, &(0x7f00000002c0)="$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") r1 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r1, 0x111, 0x1, 0x5d, 0x4) lsetxattr$trusted_overlay_upper(&(0x7f0000000080)='./file1\x00', &(0x7f0000000840), &(0x7f0000000940)=ANY=[], 0x361, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r2, 0x10c, 0x8, &(0x7f0000000000)=0x400047, 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x22000, 0x0) lseek(r3, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x5b, 0x3f}}, './file1/file0\x00'}) exit_group(0xa) setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f00000013c0)=ANY=[], 0x700, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000280)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000900)=ANY=[@ANYRES64=r0, @ANYBLOB="ecd15345e4396a3797c3eaaddd7ed6dfcd9a26ea39a55c807c"], 0xfe37, 0x2) 2m36.748256648s ago: executing program 2 (id=3321): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f00000000c0)={[{@noload}, {@stripe={'stripe', 0x3d, 0xdc}}, {@bsdgroups}, {@noload}, {@abort}, {@auto_da_alloc}]}, 0xff, 0x459, &(0x7f00000004c0)="$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") mount$cgroup2(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x80, &(0x7f0000000200)=ANY=[@ANYBLOB='pids_localevents,memory_localevents,favordynmods,memory_hugetlb_accounting,pids_localevents']) 2m36.435241714s ago: executing program 2 (id=3322): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0xfffffffffffffffa, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3) syz_read_part_table(0x105f, &(0x7f0000001080)="$eJzsz7FtwkAYBeDnS2z5lCJVRoiyQTZJnRKJEhZwQ0XBHLAJkzCGEbLNCEDxfc09vSed9Ienarqs/99+ktQkw72e3/exSUoOm4/fNttVkm4aalLLd5LyeWlvRb+fhvNx+aOrS+qbccpD+uy+Ms59+Ts94EQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeHnXAAAA//8SNwwv") mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x66) socket$xdp(0x2c, 0x3, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x404110, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x18, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000d802f950000000000500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018", @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000bf91000000000000b7020000000000008500"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2a}, 0x94) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000200)='cgroup.clone_children\x00', 0x2, 0x0) r6 = openat$cgroup_ro(r4, &(0x7f00000000c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x38) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r7, &(0x7f0000001240)=[{0x0}, {&(0x7f0000001280)=""/4098, 0x1002}], 0x2) 2m34.808097674s ago: executing program 2 (id=3327): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0xfffffffffffffffa, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_read_part_table(0x105f, &(0x7f0000001080)="$eJzsz7FtwkAYBeDnS2z5lCJVRoiyQTZJnRKJEhZwQ0XBHLAJkzCGEbLNCEDxfc09vSed9Ienarqs/99+ktQkw72e3/exSUoOm4/fNttVkm4aalLLd5LyeWlvRb+fhvNx+aOrS+qbccpD+uy+Ms59+Ts94EQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeHnXAAAA//8SNwwv") mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x66) socket$xdp(0x2c, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x18, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000d802f950000000000500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018", @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000bf91000000000000b7020000000000008500"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2a}, 0x94) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r3, &(0x7f0000000200)='cgroup.clone_children\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) 2m34.807504964s ago: executing program 34 (id=3327): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0xfffffffffffffffa, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_read_part_table(0x105f, &(0x7f0000001080)="$eJzsz7FtwkAYBeDnS2z5lCJVRoiyQTZJnRKJEhZwQ0XBHLAJkzCGEbLNCEDxfc09vSed9Ienarqs/99+ktQkw72e3/exSUoOm4/fNttVkm4aalLLd5LyeWlvRb+fhvNx+aOrS+qbccpD+uy+Ms59+Ts94EQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeHnXAAAA//8SNwwv") mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x66) socket$xdp(0x2c, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x18, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000d802f950000000000500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018", @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000bf91000000000000b7020000000000008500"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2a}, 0x94) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r3, &(0x7f0000000200)='cgroup.clone_children\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) 2.818272771s ago: executing program 6 (id=4542): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000080) socket(0x10, 0x803, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) socket$nl_route(0x10, 0x3, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4001, 0xb, @loopback, 0x9}, 0x1c) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 1.901533607s ago: executing program 0 (id=4564): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000005e00010028bd7000fddbdf25000000", @ANYRES32=r2, @ANYBLOB="9dbb"], 0x1c}}, 0x20000000) 1.900674517s ago: executing program 6 (id=4565): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x4, 0xe0, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101401, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, 0x0, {0x0, 0xc}, {0xb, 0xb}, {0xa, 0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x5, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x405c071}, 0x400c840) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xd}, {0x0, 0xc}, {0x8}}}, 0x24}}, 0x40004) 1.870544598s ago: executing program 0 (id=4566): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x100, 0x6, 0x6361, 0x5, 0xfffffffd, 0xfffffff3}, [@TCA_NETEM_JITTER64={0xc, 0xb, 0x9}, @TCA_NETEM_RATE64={0xc, 0x8, 0x9febdd443f36943a}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0xc04c001}, 0x20000804) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x19}, {0xb, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000050}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.755739074s ago: executing program 0 (id=4567): r0 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r1, &(0x7f00000000c0), 0x18) connect$can_j1939(r1, &(0x7f0000000140)={0x1d, 0x0, 0x0, {0x0, 0xff}}, 0x18) sendmmsg(r1, &(0x7f0000003e40)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="b875a1431a05b9319c", 0x9}], 0x1}}], 0x1, 0x0) close(0x3) 1.271751638s ago: executing program 3 (id=4578): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000000)) r0 = eventfd2(0x74a6, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000280)="00ffffffffffffff", 0x8}], 0x1) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) 1.174644763s ago: executing program 0 (id=4581): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newtfilter={0x88, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xb, 0xfff3}, {}, {0x8, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x2, 0x3, 0x6, 0x2}, 0x9}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x80) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x4) sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f0000000780)="f058050000007f8f", 0x300}], 0x2}, 0x5) 1.086642887s ago: executing program 0 (id=4582): socket(0xa, 0x5, 0x0) r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x2, 0x0, 0x800, 0x4000000000000000, 0x100000}, 0x0, 0x0, 0x0, 0x0) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x2, {0x2, 0xf0, 0x3}, 0xff}, 0x18) sendmmsg$sock(r0, &(0x7f00000088c0)=[{{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000002700)="ab", 0x1}, {0x0, 0x500}], 0x2}}], 0x1, 0x4040000) 916.438565ms ago: executing program 6 (id=4588): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000480)=0x1000, 0x4) 876.699948ms ago: executing program 6 (id=4589): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000005e00010028bd7000fddbdf25000000", @ANYRES32=r2, @ANYBLOB="9dbb"], 0x1c}}, 0x20000000) 876.168827ms ago: executing program 6 (id=4590): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000740)=ANY=[@ANYBLOB="00000000e40000005d0000008b1f"]) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000680)=ANY=[], 0xfdef) 822.15999ms ago: executing program 6 (id=4592): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f00000000c0), 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, 0x0, &(0x7f0000000080)) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f00000008c0), &(0x7f0000000340)=0x8) 338.532054ms ago: executing program 7 (id=4593): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newtfilter={0x88, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xb, 0xfff3}, {}, {0x8, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x2, 0x3, 0x6, 0x2}, 0x9}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x80) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x4) sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f0000000780)="f058050000007f8f", 0x300}], 0x2}, 0x5) 311.886175ms ago: executing program 3 (id=4595): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELRULE={0x14, 0x8, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x8}}], {0x14}}, 0xa4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 273.645767ms ago: executing program 3 (id=4596): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) close(0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r5, {0x5}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0xa32, 0x6, 0x1, 0xc, 0x0, 0x4, 0x8, 0x52, 0x68d8, 0x5, 0x4, 0x3, 0x12, 0x6, 0xfffffffd, 0xfffffe01}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000022c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd27, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xb, 0x10}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0xf7513c36066f8950}, 0x20000010) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r9, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x300}], 0x2}, 0x5) 273.316097ms ago: executing program 5 (id=4598): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) preadv(r0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/225, 0xe1}], 0x1, 0x3, 0x1) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r2], 0x20}}, 0x0) 230.301439ms ago: executing program 7 (id=4599): r0 = memfd_create(&(0x7f0000000800)='\xff\x00l\x1e\xa00x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, 0x0, 0x20040000) 169.730932ms ago: executing program 0 (id=4605): r0 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, r1}, 0x18) connect$can_j1939(0xffffffffffffffff, &(0x7f0000000140)={0x1d, r1, 0x0, {0x0, 0xff}}, 0x18) sendmmsg(0xffffffffffffffff, &(0x7f0000003e40)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="b875a1431a05b9319c", 0x9}], 0x1}}], 0x1, 0x0) close(0x3) 166.635172ms ago: executing program 3 (id=4606): r0 = socket$inet_tcp(0x2, 0x1, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mprotect(&(0x7f0000293000/0x4000)=nil, 0x4000, 0x2) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xfffffffffffffff3, 0x2) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 97.932556ms ago: executing program 5 (id=4607): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"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", 0xdd52d6c}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) unshare(0x22020600) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) 63.074638ms ago: executing program 5 (id=4608): r0 = socket(0x848000000015, 0x805, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x4, @rand_addr=' \x01\x00', 0xf0}, 0x1c) 62.910508ms ago: executing program 5 (id=4609): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x400) fcntl$F_GET_RW_HINT(r0, 0x40b, 0x0) 62.575398ms ago: executing program 7 (id=4610): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) unshare(0x22020600) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) 191.361µs ago: executing program 5 (id=4611): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x25dfdc01, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xfff3}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x8}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x53a8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x440e0}, 0x4890) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x8, r9, 0x3e}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000180)="27030200590214000600002fb96d", 0xe}], 0x1}, 0x0) 0s ago: executing program 7 (id=4612): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4008008) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) sched_setscheduler(0x0, 0x1, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r2], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x100000, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4c, 0xf3, 0x8, [0x0, 0x0, 0x0, 0xc, 0x5, 0x0, 0x0, 0x40000002]}}) kernel console output (not intermixed with test programs): ce loop7): ext4_xattr_delete_inode:3002: inode #15: comm syz.7.3528: mark inode dirty (error -117) [ 503.288702][T15276] EXT4-fs warning (device loop7): ext4_evict_inode:275: xattr delete (err -117) [ 503.310845][T15276] EXT4-fs (loop7): 1 orphan inode deleted [ 503.359098][T15276] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 504.331051][T15269] netlink: 96 bytes leftover after parsing attributes in process `syz.6.3530'. [ 504.350337][T15302] loop3: detected capacity change from 0 to 2048 [ 504.381274][T15302] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 504.443686][T12107] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 504.546282][T14169] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 505.088263][T15276] netlink: 96 bytes leftover after parsing attributes in process `syz.7.3528'. [ 505.294880][T14240] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 505.752289][ T28] audit: type=1400 audit(1774227983.007:6672): avc: denied { getopt } for pid=15320 comm="syz.0.3543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 506.145347][T15316] Set syz1 is full, maxelem 65536 reached [ 506.462279][T15336] loop3: detected capacity change from 0 to 1024 [ 506.502890][T15336] EXT4-fs: Ignoring removed i_version option [ 506.533530][T15336] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 506.565033][T15336] Quota error (device loop3): do_check_range: Getting block 64 out of range 1-5 [ 506.600957][T15336] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 506.629934][T15336] EXT4-fs error (device loop3): ext4_acquire_dquot:7001: comm syz.3.3547: Failed to acquire dquot type 0 [ 506.662953][T15336] loop3: lost filesystem error report for type 5 error -117 [ 506.663391][T15336] EXT4-fs error (device loop3): mb_free_blocks:2047: group 0, [ 506.670786][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 506.670812][ C0] EXT4-fs (loop3): initial error at time 1774227983: ext4_acquire_dquot:7001 [ 506.670859][ C0] EXT4-fs (loop3): last error at time 1774227983: ext4_acquire_dquot:7001 [ 506.702247][T15336] inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 506.751938][T15343] loop7: detected capacity change from 0 to 2048 [ 506.812478][T15336] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #13: comm syz.3.3547: corrupted inode contents [ 506.832052][T15343] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 506.857627][T15336] fserror_report: 5 callbacks suppressed [ 506.857645][T15336] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 506.877932][T15336] EXT4-fs error (device loop3): ext4_dirty_inode:6450: inode #13: comm syz.3.3547: mark_inode_dirty error [ 506.911566][T14240] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 506.934011][T15336] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 506.934176][T15336] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #13: comm syz.3.3547: corrupted inode contents [ 506.978571][T15336] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 506.978778][T15336] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #13: comm syz.3.3547: mark_inode_dirty error [ 507.020989][T15336] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 507.021215][T15336] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #13: comm syz.3.3547: corrupted inode contents [ 507.064139][T15336] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 507.064307][T15336] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 507.109609][T15336] loop3: lost filesystem error report for type 5 error -117 [ 507.109835][T15336] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #13: comm syz.3.3547: corrupted inode contents [ 507.190934][T15336] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 507.191096][T15336] EXT4-fs error (device loop3): ext4_truncate:4587: inode #13: comm syz.3.3547: mark_inode_dirty error [ 507.220046][T15347] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3552'. [ 507.257074][T15336] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 507.257298][T15336] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 507.288250][T15351] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3554'. [ 507.331588][T15354] loop7: detected capacity change from 0 to 1024 [ 507.353520][T15336] loop3: lost filesystem error report for type 5 error -117 [ 507.353972][T15336] EXT4-fs (loop3): 1 truncate cleaned up [ 507.381788][T15336] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 507.395490][T15354] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 507.450588][ T28] audit: type=1400 audit(1774227984.597:6673): avc: denied { write } for pid=15335 comm="syz.3.3547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 507.503692][T14240] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 507.519701][T12107] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 507.520697][ T28] audit: type=1400 audit(1774227984.644:6674): avc: denied { bind } for pid=15335 comm="syz.3.3547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 507.549729][ T28] audit: type=1400 audit(1774227984.653:6675): avc: denied { setopt } for pid=15335 comm="syz.3.3547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 507.733589][T15376] FAULT_INJECTION: forcing a failure. [ 507.733589][T15376] name failslab, interval 1, probability 0, space 0, times 0 [ 507.832283][T15376] CPU: 1 UID: 0 PID: 15376 Comm: syz.7.3562 Tainted: G W syzkaller #0 PREEMPT(full) [ 507.832321][T15376] Tainted: [W]=WARN [ 507.832328][T15376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 507.832340][T15376] Call Trace: [ 507.832346][T15376] [ 507.832417][T15376] __dump_stack+0x1d/0x30 [ 507.832489][T15376] dump_stack_lvl+0x95/0xd0 [ 507.832511][T15376] dump_stack+0x15/0x1b [ 507.832530][T15376] should_fail_ex+0x263/0x280 [ 507.832573][T15376] should_failslab+0x8c/0xb0 [ 507.832593][T15376] __kmalloc_noprof+0xb8/0x4e0 [ 507.832615][T15376] ? genl_family_rcv_msg_attrs_parse+0x75/0x190 [ 507.832673][T15376] genl_family_rcv_msg_attrs_parse+0x75/0x190 [ 507.832744][T15376] genl_family_rcv_msg_doit+0x4b/0x1f0 [ 507.832824][T15376] ? selinux_capable+0x31/0x40 [ 507.832858][T15376] ? security_capable+0x7b/0x90 [ 507.832888][T15376] ? ns_capable+0x7c/0xb0 [ 507.832907][T15376] genl_rcv_msg+0x432/0x470 [ 507.832928][T15376] ? __pfx_ovs_vport_cmd_set+0x10/0x10 [ 507.832986][T15376] netlink_rcv_skb+0x123/0x220 [ 507.833076][T15376] ? __pfx_genl_rcv_msg+0x10/0x10 [ 507.833134][T15376] genl_rcv+0x28/0x40 [ 507.833157][T15376] netlink_unicast+0x5c0/0x690 [ 507.833184][T15376] netlink_sendmsg+0x5c8/0x6f0 [ 507.833213][T15376] ? __pfx_netlink_sendmsg+0x10/0x10 [ 507.833285][T15376] ____sys_sendmsg+0x563/0x5b0 [ 507.833329][T15376] ___sys_sendmsg+0x195/0x1e0 [ 507.833366][T15376] __x64_sys_sendmsg+0xd4/0x160 [ 507.833420][T15376] x64_sys_call+0x194c/0x3020 [ 507.833449][T15376] do_syscall_64+0x12c/0x370 [ 507.833494][T15376] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.833517][T15376] RIP: 0033:0x7f68157ac799 [ 507.833585][T15376] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 507.833602][T15376] RSP: 002b:00007f68141ff028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 507.833623][T15376] RAX: ffffffffffffffda RBX: 00007f6815a25fa0 RCX: 00007f68157ac799 [ 507.833656][T15376] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 507.833672][T15376] RBP: 00007f68141ff090 R08: 0000000000000000 R09: 0000000000000000 [ 507.833686][T15376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 507.833701][T15376] R13: 00007f6815a26038 R14: 00007f6815a25fa0 R15: 00007ffef1c95618 [ 507.833722][T15376] [ 508.193538][T15381] tipc: Enabled bearer , priority 12 [ 508.201570][T15381] syzkaller0: entered promiscuous mode [ 508.207265][T15381] syzkaller0: entered allmulticast mode [ 508.305392][T15395] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3567'. [ 508.358430][T15387] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15387 comm=syz.5.3565 [ 508.374622][ T28] audit: type=1400 audit(1774227985.449:6676): avc: denied { connect } for pid=15385 comm="syz.5.3565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 508.664026][T15387] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3565'. [ 510.794327][T15429] loop7: detected capacity change from 0 to 764 [ 510.882090][T15419] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3572'. [ 511.360351][T15437] sock: sock_timestamping_bind_phc: sock not bind to device [ 511.474736][T15438] loop3: detected capacity change from 0 to 8192 [ 511.509893][ T3311] loop3: p1 < > p2 p4 < p5 > [ 511.519209][ T3311] loop3: partition table partially beyond EOD, truncated [ 511.553167][ T3311] loop3: p1 start 134217728 is beyond EOD, truncated [ 511.559962][ T3311] loop3: p2 size 591360 extends beyond EOD, truncated [ 511.584677][ T3311] loop3: p5 size 591360 extends beyond EOD, truncated [ 511.625991][T15438] loop3: p1 < > p2 p4 < p5 > [ 511.631063][T15438] loop3: partition table partially beyond EOD, truncated [ 511.638681][T15438] loop3: p1 start 134217728 is beyond EOD, truncated [ 511.645400][T15438] loop3: p2 size 591360 extends beyond EOD, truncated [ 511.655360][T15438] loop3: p5 size 591360 extends beyond EOD, truncated [ 511.951354][T15453] syzkaller0: entered allmulticast mode [ 512.086135][T15459] loop6: detected capacity change from 0 to 1024 [ 512.230921][T15459] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 512.274424][T15459] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 512.350433][T15459] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 512.423111][T15459] EXT4-fs error (device loop6): ext4_get_journal_inode:5863: inode #5: comm syz.6.3583: unexpected bad inode w/o EXT4_IGET_BAD [ 512.514888][T15459] loop6: lost file I/O error report for ino 5 type 5 pos 0x0 len 0x0 error -117 [ 512.516265][T15459] EXT4-fs (loop6): no journal found [ 512.525782][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 512.525804][ C0] EXT4-fs (loop6): initial error at time 1774227989: ext4_get_journal_inode:5863: inode 5 [ 512.525836][ C0] EXT4-fs (loop6): last error at time 1774227989: ext4_get_journal_inode:5863: inode 5 [ 512.558036][T15459] EXT4-fs (loop6): can't get journal size [ 512.575779][T15459] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 512.683289][T15468] loop5: detected capacity change from 0 to 1024 [ 512.710534][T15468] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 512.743180][T15468] System zones: 0-1, 3-36 [ 513.018624][T15468] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 514.879561][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 514.893907][ T3298] udevd[3298]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory [ 514.910532][ T3311] udevd[3311]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 514.933191][T15456] EXT4-fs (loop6): ext4_remount: Checksum for group 0 failed (42152!=20869) [ 514.952672][ T5734] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 514.965737][T15478] loop7: detected capacity change from 0 to 1024 [ 514.995097][T14169] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 515.013436][T15486] sock: sock_timestamping_bind_phc: sock not bind to device [ 515.021528][T15478] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 515.264602][T15489] loop5: detected capacity change from 0 to 8192 [ 515.338293][ T3311] loop5: p1 < > p2 p4 < p5 > [ 515.367602][ T3311] loop5: partition table partially beyond EOD, truncated [ 515.496005][ T3311] loop5: p1 start 134217728 is beyond EOD, truncated [ 515.567464][ T3311] loop5: p2 size 591360 extends beyond EOD, truncated [ 515.648801][ T3311] loop5: p5 size 591360 extends beyond EOD, truncated [ 515.815095][T14240] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 515.847503][T15489] loop5: p1 < > p2 p4 < p5 > [ 515.852363][T15489] loop5: partition table partially beyond EOD, truncated [ 515.859606][T15489] loop5: p1 start 134217728 is beyond EOD, truncated [ 515.866532][T15489] loop5: p2 size 591360 extends beyond EOD, truncated [ 515.875002][T15489] loop5: p5 size 591360 extends beyond EOD, truncated [ 515.961208][T15498] SET target dimension over the limit! [ 516.046925][T15494] loop3: detected capacity change from 0 to 512 [ 516.099219][T15494] EXT4-fs: Ignoring removed nobh option [ 516.527096][T15494] EXT4-fs (loop3): orphan cleanup on readonly fs [ 516.817306][T15494] EXT4-fs warning (device loop3): ext4_xattr_inode_get:560: inode #11: comm syz.3.3594: EA inode hash validation failed [ 517.508469][T15494] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #15: comm syz.3.3594: corrupted inode contents [ 517.582839][T15494] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 517.596078][T15494] EXT4-fs error (device loop3): ext4_dirty_inode:6450: inode #15: comm syz.3.3594: mark_inode_dirty error [ 517.606394][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 517.606659][ C0] EXT4-fs (loop3): initial error at time 1774227994: ext4_do_update_inode:5569: inode 15 [ 517.606916][ C0] EXT4-fs (loop3): last error at time 1774227994: ext4_do_update_inode:5569: inode 15 [ 518.334992][T15520] loop5: detected capacity change from 0 to 8192 [ 518.388551][T15523] loop7: detected capacity change from 0 to 256 [ 518.405560][T15494] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 518.417877][ T3311] loop5: p1 < > p2 p4 < p5 > [ 518.432135][ T3311] loop5: partition table partially beyond EOD, truncated [ 518.454642][T15494] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #15: comm syz.3.3594: corrupted inode contents [ 518.491072][T15494] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 518.497948][T15494] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2999: inode #15: comm syz.3.3594: mark_inode_dirty error [ 518.498822][ T3311] loop5: p1 start 134217728 is beyond EOD, [ 518.520471][T15494] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 518.589497][T15494] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3002: inode #15: comm syz.3.3594: mark inode dirty (error -117) [ 518.625522][ T3311] truncated [ 518.628770][ T3311] loop5: p2 size 591360 extends beyond EOD, truncated [ 518.636846][ T3311] loop5: p5 size 591360 extends beyond EOD, truncated [ 518.653848][T15494] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 518.655850][T15520] loop5: p1 < > p2 p4 < p5 > [ 518.665343][T15520] loop5: partition table partially beyond EOD, truncated [ 518.665481][T15520] loop5: p1 start 134217728 is beyond EOD, truncated [ 518.665501][T15520] loop5: p2 size 591360 extends beyond EOD, truncated [ 518.695486][T15530] FAULT_INJECTION: forcing a failure. [ 518.695486][T15530] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 518.710465][T15520] loop5: p5 size 591360 extends beyond EOD, truncated [ 518.766182][T15532] loop6: detected capacity change from 0 to 128 [ 518.790963][T15530] CPU: 0 UID: 0 PID: 15530 Comm: syz.7.3605 Tainted: G W syzkaller #0 PREEMPT(full) [ 518.791001][T15530] Tainted: [W]=WARN [ 518.791007][T15530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 518.791099][T15530] Call Trace: [ 518.791107][T15530] [ 518.791161][T15530] __dump_stack+0x1d/0x30 [ 518.791191][T15530] dump_stack_lvl+0x95/0xd0 [ 518.791217][T15530] dump_stack+0x15/0x1b [ 518.791264][T15530] should_fail_ex+0x263/0x280 [ 518.791290][T15530] should_fail_alloc_page+0xf2/0x100 [ 518.791322][T15530] __alloc_frozen_pages_noprof+0x108/0x360 [ 518.791405][T15530] alloc_pages_mpol+0xb3/0x260 [ 518.791437][T15530] vma_alloc_folio_noprof+0x1a9/0x300 [ 518.791539][T15530] handle_mm_fault+0x1129/0x3020 [ 518.791567][T15530] ? mt_find+0x291/0x3d0 [ 518.791593][T15530] ? irqentry_exit+0x91/0x520 [ 518.791666][T15530] do_user_addr_fault+0x3fd/0x1050 [ 518.791697][T15530] exc_page_fault+0x62/0xa0 [ 518.791794][T15530] asm_exc_page_fault+0x26/0x30 [ 518.791816][T15530] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 518.791842][T15530] Code: 19 02 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 8f 19 02 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 518.791859][T15530] RSP: 0018:ffffc90001b23d38 EFLAGS: 00050206 [ 518.791968][T15530] RAX: ffff8881038eef48 RBX: 0000000000001000 RCX: 0000000000000248 [ 518.791981][T15530] RDX: 0000000000000000 RSI: ffff888127010db8 RDI: 0000200000004000 [ 518.792021][T15530] RBP: ffff888127010000 R08: 0000000000000659 R09: 0000000000000000 [ 518.792037][T15530] R10: 0001888127010000 R11: 0001888127010fff R12: 0000200000004248 [ 518.792052][T15530] R13: 00007ffffffff000 R14: 0000200000003248 R15: ffff888127010000 [ 518.792076][T15530] _copy_to_user+0x7c/0xa0 [ 518.792145][T15530] pagemap_read+0x3ac/0x610 [ 518.792177][T15530] ? __pfx_pagemap_read+0x10/0x10 [ 518.792206][T15530] vfs_read+0x1ab/0x7f0 [ 518.792310][T15530] ? __rcu_read_unlock+0x4e/0x70 [ 518.792333][T15530] ? __fget_files+0x184/0x1c0 [ 518.792360][T15530] ? mutex_unlock+0x4e/0x90 [ 518.792393][T15530] __x64_sys_pread64+0xfd/0x150 [ 518.792416][T15530] x64_sys_call+0x27b5/0x3020 [ 518.792446][T15530] do_syscall_64+0x12c/0x370 [ 518.792555][T15530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.792578][T15530] RIP: 0033:0x7f68157ac799 [ 518.792592][T15530] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 518.792624][T15530] RSP: 002b:00007f68141de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 518.792647][T15530] RAX: ffffffffffffffda RBX: 00007f6815a26090 RCX: 00007f68157ac799 [ 518.792662][T15530] RDX: 0000000000019000 RSI: 0000200000001240 RDI: 0000000000000004 [ 518.792752][T15530] RBP: 00007f68141de090 R08: 0000000000000000 R09: 0000000000000000 [ 518.792767][T15530] R10: 0000000fffff7ff8 R11: 0000000000000246 R12: 0000000000000001 [ 518.792792][T15530] R13: 00007f6815a26128 R14: 00007f6815a26090 R15: 00007ffef1c95618 [ 518.792814][T15530] [ 518.798685][T15494] EXT4-fs warning (device loop3): ext4_evict_inode:275: xattr delete (err -117) [ 519.709895][T15494] EXT4-fs (loop3): 1 orphan inode deleted [ 520.676164][T15544] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3594'. [ 520.687245][T15494] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 520.975844][T12107] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 521.283769][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 521.295250][ T3298] udevd[3298]: inotify_add_watch(7, /dev/loop5p5, 10) failed: No such file or directory [ 521.309120][ T3311] udevd[3311]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 521.616286][T15562] loop5: detected capacity change from 0 to 8192 [ 521.625567][T15561] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3613'. [ 521.699392][T15562] loop5: p1 < > p2 p4 < p5 > [ 521.704342][T15562] loop5: partition table partially beyond EOD, truncated [ 521.712193][T15562] loop5: p1 start 134217728 is beyond EOD, truncated [ 521.719383][T15562] loop5: p2 size 591360 extends beyond EOD, truncated [ 521.809763][T15562] loop5: p5 size 591360 extends beyond EOD, truncated [ 522.114161][T15565] loop6: detected capacity change from 0 to 1024 [ 522.211944][ T3298] udevd[3298]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 522.213528][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 522.233217][ T5668] udevd[5668]: inotify_add_watch(7, /dev/loop5p5, 10) failed: No such file or directory [ 522.257883][T15565] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 522.296034][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 522.307707][ T3298] udevd[3298]: inotify_add_watch(7, /dev/loop5p5, 10) failed: No such file or directory [ 522.329740][ T3311] udevd[3311]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 522.422312][T14169] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 523.448422][T15603] loop3: detected capacity change from 0 to 8192 [ 523.495036][ T3311] loop3: p1 < > p2 p4 < p5 > [ 523.738488][ T3311] loop3: partition table partially beyond EOD, truncated [ 523.746672][ T3311] loop3: p1 start 134217728 is beyond EOD, truncated [ 523.753815][ T3311] loop3: p2 size 591360 extends beyond EOD, truncated [ 523.773074][ T3311] loop3: p5 size 591360 extends beyond EOD, truncated [ 523.830447][T15603] loop3: p1 < > p2 p4 < p5 > [ 523.835287][T15603] loop3: partition table partially beyond EOD, truncated [ 523.842888][T15603] loop3: p1 start 134217728 is beyond EOD, truncated [ 523.850062][T15603] loop3: p2 size 591360 extends beyond EOD, truncated [ 524.449840][T15609] loop6: detected capacity change from 0 to 8192 [ 524.461122][T15603] loop3: p5 size 591360 extends beyond EOD, truncated [ 524.637016][T15619] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3629'. [ 524.844845][T15609] loop6: p1 < > p2 p4 < p5 > [ 524.849573][T15609] loop6: partition table partially beyond EOD, truncated [ 524.856823][T15609] loop6: p1 start 134217728 is beyond EOD, truncated [ 524.863583][T15609] loop6: p2 size 591360 extends beyond EOD, truncated [ 524.872180][T15609] loop6: p5 size 591360 extends beyond EOD, truncated [ 525.292513][ T5668] udevd[5668]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 525.326495][T15627] loop5: detected capacity change from 0 to 512 [ 525.394939][T15628] loop6: detected capacity change from 0 to 512 [ 525.828213][T15628] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 525.928214][T15628] EXT4-fs (loop6): 1 orphan inode deleted [ 526.289717][T15628] EXT4-fs (loop6): 1 truncate cleaned up [ 526.309797][T15628] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 527.011105][T15630] loop0: detected capacity change from 0 to 512 [ 527.049893][T15630] EXT4-fs: Ignoring removed nobh option [ 527.200916][T15630] EXT4-fs (loop0): orphan cleanup on readonly fs [ 527.214453][T15658] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 527.221912][T15658] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 527.251093][T15630] EXT4-fs warning (device loop0): ext4_xattr_inode_get:560: inode #11: comm syz.0.3634: EA inode hash validation failed [ 527.292078][T15630] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #15: comm syz.0.3634: corrupted inode contents [ 527.318491][T15630] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 527.320771][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 527.338871][ C0] EXT4-fs (loop0): initial error at time 1774228003: ext4_do_update_inode:5569: inode 15 [ 527.349817][ C0] EXT4-fs (loop0): last error at time 1774228003: ext4_do_update_inode:5569: inode 15 [ 527.374318][ T9358] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 527.383169][ T9358] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 527.406410][ T9358] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 527.415207][ T9358] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 527.417296][T15630] EXT4-fs error (device loop0): ext4_dirty_inode:6450: inode #15: comm syz.0.3634: mark_inode_dirty error [ 527.457326][T15630] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 527.462944][T15630] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #15: comm syz.0.3634: corrupted inode contents [ 527.516020][T15630] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 527.518576][T15630] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2999: inode #15: comm syz.0.3634: mark_inode_dirty error [ 527.545379][T15576] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 527.559106][T15630] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 527.567089][T15630] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3002: inode #15: comm syz.0.3634: mark inode dirty (error -117) [ 527.631320][T15630] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 527.633418][T15630] EXT4-fs warning (device loop0): ext4_evict_inode:275: xattr delete (err -117) [ 527.674445][T15630] EXT4-fs (loop0): 1 orphan inode deleted [ 527.695752][T15663] loop5: detected capacity change from 0 to 512 [ 527.697882][T15630] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 527.730645][ T28] audit: type=1400 audit(1774228003.567:6677): avc: denied { map } for pid=15662 comm="syz.5.3645" path="/532/file0" dev="loop5" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 527.793485][T15630] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3634'. [ 528.170495][T11567] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 528.180624][T14169] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 528.241562][T15672] loop6: detected capacity change from 0 to 1024 [ 528.334162][T15672] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 528.471786][T15668] loop5: detected capacity change from 0 to 512 [ 528.494403][T15668] EXT4-fs: Ignoring removed nobh option [ 528.516744][T14169] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 528.597747][T15668] EXT4-fs (loop5): orphan cleanup on readonly fs [ 528.631241][T15666] loop0: detected capacity change from 0 to 512 [ 528.664567][T15666] EXT4-fs: Ignoring removed nobh option [ 528.756235][T15668] EXT4-fs warning (device loop5): ext4_xattr_inode_get:560: inode #11: comm syz.5.3646: EA inode hash validation failed [ 528.890774][T15666] EXT4-fs (loop0): orphan cleanup on readonly fs [ 528.925517][T15668] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #15: comm syz.5.3646: corrupted inode contents [ 528.951562][T15690] 9p: Bad value for 'rfdno' [ 528.966431][T15668] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 528.967170][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 528.984087][ C0] EXT4-fs (loop5): initial error at time 1774228004: ext4_do_update_inode:5569: inode 15 [ 528.994217][ C0] EXT4-fs (loop5): last error at time 1774228004: ext4_do_update_inode:5569: inode 15 [ 529.001134][T15666] EXT4-fs warning (device loop0): ext4_xattr_inode_get:560: inode #11: comm syz.0.3647: EA inode hash validation failed [ 529.028382][T15666] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #15: comm syz.0.3647: corrupted inode contents [ 529.029112][T15668] EXT4-fs error (device loop5): ext4_dirty_inode:6450: inode #15: comm syz.5.3646: mark_inode_dirty error [ 529.031931][T15666] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 529.045171][T15668] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 529.063336][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 529.063357][ C1] EXT4-fs (loop0): initial error at time 1774228004: ext4_do_update_inode:5569: inode 15 [ 529.063382][ C1] EXT4-fs (loop0): last error at time 1774228004: ext4_do_update_inode:5569: inode 15 [ 529.106824][T15666] EXT4-fs error (device loop0): ext4_dirty_inode:6450: inode #15: comm syz.0.3647: mark_inode_dirty error [ 529.111358][T15668] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #15: comm syz.5.3646: corrupted inode contents [ 529.126147][T15666] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 529.139052][T15692] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3654'. [ 529.153196][T15668] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 529.166476][T15666] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #15: comm syz.0.3647: corrupted inode contents [ 529.195320][T15666] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2999: inode #15: comm syz.0.3647: mark_inode_dirty error [ 529.210835][T15666] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3002: inode #15: comm syz.0.3647: mark inode dirty (error -117) [ 529.220438][T15668] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2999: inode #15: comm syz.5.3646: mark_inode_dirty error [ 529.238252][T15666] EXT4-fs warning (device loop0): ext4_evict_inode:275: xattr delete (err -117) [ 529.240124][T15668] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3002: inode #15: comm syz.5.3646: mark inode dirty (error -117) [ 529.265792][T15666] EXT4-fs (loop0): 1 orphan inode deleted [ 529.269727][T15668] EXT4-fs warning (device loop5): ext4_evict_inode:275: xattr delete (err -117) [ 529.312516][T15666] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 529.312631][T15668] EXT4-fs (loop5): 1 orphan inode deleted [ 529.340016][T15668] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 529.392021][T15697] loop3: detected capacity change from 0 to 512 [ 529.594176][T15666] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3647'. [ 529.859498][T11567] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 530.331999][T15704] loop0: detected capacity change from 0 to 8192 [ 530.424785][T15704] loop0: p1 < > p2 p4 < p5 > [ 530.429793][T15704] loop0: partition table partially beyond EOD, truncated [ 530.437475][T15704] loop0: p1 start 134217728 is beyond EOD, truncated [ 530.444424][T15704] loop0: p2 size 591360 extends beyond EOD, truncated [ 530.546025][T15704] loop0: p5 size 591360 extends beyond EOD, truncated [ 530.927083][T15707] loop0: detected capacity change from 0 to 2048 [ 530.955114][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 530.969354][ T3298] udevd[3298]: inotify_add_watch(7, /dev/loop0p5, 10) failed: No such file or directory [ 530.976971][ T3311] udevd[3311]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 530.999789][T15707] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 531.150273][T11567] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 531.169703][T15711] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3659'. [ 531.209033][T15713] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3660'. [ 531.469924][T15725] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3664'. [ 531.597397][ T5734] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 532.671980][T15742] loop7: detected capacity change from 0 to 512 [ 533.794964][T15753] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3673'. [ 535.741509][T15788] siw: device registration error -23 [ 535.785612][T15788] lo speed is unknown, defaulting to 1000 [ 536.344388][T15797] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3685'. [ 536.442253][ T28] audit: type=1400 audit(1774228011.724:6678): avc: denied { unmount } for pid=5734 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 536.458258][T15803] loop3: detected capacity change from 0 to 512 [ 536.614271][T15807] loop5: detected capacity change from 0 to 8192 [ 536.646856][T15803] EXT4-fs: Ignoring removed nobh option [ 536.668656][ T3309] loop5: p1 < > p2 p4 < p5 > [ 536.673641][ T3309] loop5: partition table partially beyond EOD, truncated [ 536.681975][ T3309] loop5: p1 start 134217728 is beyond EOD, truncated [ 536.689540][ T3309] loop5: p2 size 591360 extends beyond EOD, truncated [ 536.700210][ T3309] loop5: p5 size 591360 extends beyond EOD, truncated [ 536.703628][T15803] EXT4-fs (loop3): orphan cleanup on readonly fs [ 536.725422][T15807] loop5: p1 < > p2 p4 < p5 > [ 536.730537][T15807] loop5: partition table partially beyond EOD, truncated [ 536.738036][T15807] loop5: p1 start 134217728 is beyond EOD, truncated [ 536.745236][T15807] loop5: p2 size 591360 extends beyond EOD, truncated [ 536.754935][T15807] loop5: p5 size 591360 extends beyond EOD, truncated [ 536.755924][T15803] EXT4-fs warning (device loop3): ext4_xattr_inode_get:560: inode #11: comm syz.3.3687: EA inode hash validation failed [ 536.808096][T15803] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #15: comm syz.3.3687: corrupted inode contents [ 536.822664][T15803] fserror_report: 5 callbacks suppressed [ 536.822814][T15803] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 536.835164][T15803] EXT4-fs error (device loop3): ext4_dirty_inode:6450: inode #15: comm syz.3.3687: mark_inode_dirty error [ 536.835593][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 536.866797][ C1] EXT4-fs (loop3): initial error at time 1774228012: ext4_do_update_inode:5569: inode 15 [ 536.878003][ C1] EXT4-fs (loop3): last error at time 1774228012: ext4_do_update_inode:5569: inode 15 [ 536.899592][T15803] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 536.964232][T15803] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #15: comm syz.3.3687: corrupted inode contents [ 536.994099][T15803] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 537.001065][T15803] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2999: inode #15: comm syz.3.3687: mark_inode_dirty error [ 537.032274][T15803] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 537.039507][T15803] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3002: inode #15: comm syz.3.3687: mark inode dirty (error -117) [ 537.086886][T15803] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 537.097539][T15803] EXT4-fs warning (device loop3): ext4_evict_inode:275: xattr delete (err -117) [ 537.139687][T15803] EXT4-fs (loop3): 1 orphan inode deleted [ 537.289087][T15803] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 537.543473][T15812] loop7: detected capacity change from 0 to 128 [ 537.563416][T15813] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3687'. [ 537.630696][T15815] loop5: detected capacity change from 0 to 512 [ 537.648773][T15815] EXT4-fs: Ignoring removed nobh option [ 537.719417][T15815] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2 [ 537.748748][T15815] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #13: comm syz.5.3690: inode has both inline data and extents flags [ 537.763138][T15815] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 537.763422][T15815] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.3690: couldn't read orphan inode 13 (err -117) [ 537.772693][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 537.772710][ C0] EXT4-fs (loop5): initial error at time 1774228012: ext4_orphan_get:1391: inode 13 [ 537.772752][ C0] EXT4-fs (loop5): last error at time 1774228012: ext4_orphan_get:1391: inode 13 [ 537.813387][T15815] loop5: lost filesystem error report for type 5 error -117 [ 537.814574][T15815] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 537.837584][T15815] FAULT_INJECTION: forcing a failure. [ 537.837584][T15815] name failslab, interval 1, probability 0, space 0, times 0 [ 537.851400][T15815] CPU: 0 UID: 0 PID: 15815 Comm: syz.5.3690 Tainted: G W syzkaller #0 PREEMPT(full) [ 537.851430][T15815] Tainted: [W]=WARN [ 537.851436][T15815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 537.851472][T15815] Call Trace: [ 537.851480][T15815] [ 537.851489][T15815] __dump_stack+0x1d/0x30 [ 537.851528][T15815] dump_stack_lvl+0x95/0xd0 [ 537.851629][T15815] dump_stack+0x15/0x1b [ 537.851654][T15815] should_fail_ex+0x263/0x280 [ 537.851703][T15815] should_failslab+0x8c/0xb0 [ 537.851728][T15815] kmem_cache_alloc_lru_noprof+0x6c/0x410 [ 537.851807][T15815] ? __d_alloc+0x37/0x340 [ 537.851905][T15815] __d_alloc+0x37/0x340 [ 537.851971][T15815] d_alloc_parallel+0x54/0xce0 [ 537.852034][T15815] ? __rcu_read_unlock+0x4e/0x70 [ 537.852068][T15815] ? __d_lookup+0x316/0x340 [ 537.852159][T15815] path_openat+0x8b9/0x2050 [ 537.852196][T15815] do_file_open+0x16c/0x290 [ 537.852238][T15815] do_sys_openat2+0x94/0x130 [ 537.852323][T15815] __x64_sys_openat+0xf2/0x120 [ 537.852347][T15815] x64_sys_call+0x1e39/0x3020 [ 537.852374][T15815] do_syscall_64+0x12c/0x370 [ 537.852403][T15815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.852501][T15815] RIP: 0033:0x7f3cab9ec799 [ 537.852527][T15815] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 537.852585][T15815] RSP: 002b:00007f3caa447028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 537.852609][T15815] RAX: ffffffffffffffda RBX: 00007f3cabc65fa0 RCX: 00007f3cab9ec799 [ 537.852623][T15815] RDX: 000000000000275a RSI: 00002000000002c0 RDI: ffffffffffffff9c [ 537.852689][T15815] RBP: 00007f3caa447090 R08: 0000000000000000 R09: 0000000000000000 [ 537.852701][T15815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 537.852764][T15815] R13: 00007f3cabc66038 R14: 00007f3cabc65fa0 R15: 00007ffeb4803b18 [ 537.852781][T15815] [ 538.075914][T15773] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 538.243060][T12107] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 538.264064][ T5734] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 539.077988][T15837] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3697'. [ 539.493114][T15844] loop0: detected capacity change from 0 to 1024 [ 539.579404][T15844] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 539.881634][T15856] loop3: detected capacity change from 0 to 1024 [ 539.898497][T15856] EXT4-fs: Ignoring removed orlov option [ 539.957855][T15856] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 540.420109][T11567] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 540.536668][ T28] audit: type=1326 audit(1774228015.540:6679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15868 comm="syz.6.3707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda7423c799 code=0x7ffc0000 [ 540.634987][ T28] audit: type=1326 audit(1774228015.578:6680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15868 comm="syz.6.3707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fda7423c799 code=0x7ffc0000 [ 541.250915][ T28] audit: type=1326 audit(1774228015.578:6681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15868 comm="syz.6.3707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda7423c799 code=0x7ffc0000 [ 541.621627][T12107] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 541.686638][ T28] audit: type=1326 audit(1774228015.578:6682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15868 comm="syz.6.3707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda7423c799 code=0x7ffc0000 [ 541.716184][T15879] loop0: detected capacity change from 0 to 8192 [ 542.064913][T15882] loop5: detected capacity change from 0 to 8192 [ 542.190245][T15877] loop6: detected capacity change from 0 to 4096 [ 542.452614][ T3309] loop5: p1 < > p2 p4 < p5 > [ 542.461463][ T3311] loop0: p1 < > p2 p4 < p5 > [ 542.466680][T15877] EXT4-fs error (device loop6): ext4_ext_check_inode:521: inode #2: comm syz.6.3707: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 542.493164][ T3309] loop5: partition table partially beyond EOD, truncated [ 542.501010][ T3311] loop0: partition table partially beyond EOD, truncated [ 542.530891][ T3309] loop5: p1 start 134217728 is beyond EOD, truncated [ 542.556668][ T3311] loop0: p1 start 134217728 is beyond EOD, truncated [ 542.595350][ T3309] loop5: p2 size 591360 extends beyond EOD, truncated [ 542.614691][ T3311] loop0: p2 size 591360 extends beyond EOD, truncated [ 542.622867][T15877] loop6: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 542.623504][T15877] EXT4-fs (loop6): get root inode failed [ 542.633007][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 542.633050][ C1] EXT4-fs (loop6): initial error at time 1774228017: ext4_ext_check_inode:521: inode 2 [ 542.633083][ C1] EXT4-fs (loop6): last error at time 1774228017: ext4_ext_check_inode:521: inode 2 [ 542.702544][ T3309] loop5: p5 size 591360 extends beyond EOD, truncated [ 542.710674][ T3311] loop0: p5 size 591360 extends beyond EOD, truncated [ 542.739371][ T28] audit: type=1326 audit(1774228015.578:6683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15868 comm="syz.6.3707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fda7423c799 code=0x7ffc0000 [ 542.757894][T15877] EXT4-fs (loop6): mount failed [ 542.765797][ T28] audit: type=1326 audit(1774228015.578:6684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15868 comm="syz.6.3707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda7423c799 code=0x7ffc0000 [ 542.772875][T15879] loop0: p1 < > p2 p4 < p5 > [ 542.796734][T15879] loop0: partition table partially beyond EOD, truncated [ 542.804167][T15879] loop0: p1 start 134217728 is beyond EOD, truncated [ 542.811358][T15879] loop0: p2 size 591360 extends beyond EOD, truncated [ 542.829055][ T28] audit: type=1326 audit(1774228015.578:6685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15868 comm="syz.6.3707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda7423c799 code=0x7ffc0000 [ 542.861225][T15882] loop5: p1 < > p2 p4 < p5 > [ 542.862053][T15879] loop0: p5 size 591360 extends beyond EOD, [ 542.866237][T15882] loop5: partition table partially beyond EOD, truncated [ 542.866332][T15882] loop5: p1 start 134217728 is beyond EOD, [ 542.872327][T15879] truncated [ 542.879656][T15882] truncated [ 542.892275][T15882] loop5: p2 size 591360 extends beyond EOD, truncated [ 542.914145][ T28] audit: type=1326 audit(1774228015.578:6686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15868 comm="syz.6.3707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fda7423c799 code=0x7ffc0000 [ 542.937942][T15882] loop5: p5 size 591360 extends beyond EOD, truncated [ 542.955215][ T28] audit: type=1326 audit(1774228015.578:6687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15868 comm="syz.6.3707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda7423c799 code=0x7ffc0000 [ 542.979880][ T28] audit: type=1326 audit(1774228015.578:6688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15868 comm="syz.6.3707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fda7423c799 code=0x7ffc0000 [ 543.315027][T15899] loop3: detected capacity change from 0 to 8192 [ 543.356405][T15899] loop3: p1 < > p2 p4 < p5 > [ 543.361472][T15899] loop3: partition table partially beyond EOD, truncated [ 543.369801][T15899] loop3: p1 start 134217728 is beyond EOD, truncated [ 543.376662][T15899] loop3: p2 size 591360 extends beyond EOD, truncated [ 543.485943][T15899] loop3: p5 size 591360 extends beyond EOD, truncated [ 543.529066][ T3006] loop3: p1 < > p2 p4 < p5 > [ 543.604771][ T3006] loop3: partition table partially beyond EOD, truncated [ 543.822580][ T3006] loop3: p1 start 134217728 is beyond EOD, truncated [ 543.854227][ T3006] loop3: p2 size 591360 extends beyond EOD, truncated [ 543.895123][ T28] audit: type=1326 audit(1774228015.578:6689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15868 comm="syz.6.3707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda7423c799 code=0x7ffc0000 [ 543.902666][ T3006] loop3: p5 size 591360 extends beyond EOD, [ 543.919097][ T28] audit: type=1326 audit(1774228015.578:6690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15868 comm="syz.6.3707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fda7423c799 code=0x7ffc0000 [ 543.949015][ T28] audit: type=1326 audit(1774228015.578:6691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15868 comm="syz.6.3707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda7423c799 code=0x7ffc0000 [ 543.972924][ T28] audit: type=1326 audit(1774228015.625:6692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15868 comm="syz.6.3707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fda7423c799 code=0x7ffc0000 [ 543.998375][ T3006] truncated [ 544.163827][T15908] loop6: detected capacity change from 0 to 512 [ 544.189832][T15908] EXT4-fs: Ignoring removed nobh option [ 544.253573][T15908] ext4: Unknown parameter 'noauto_da_alloc"' [ 544.290818][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 544.332594][T15914] loop7: detected capacity change from 0 to 512 [ 544.343050][T12237] udevd[12237]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory [ 544.358370][ T3310] udevd[3310]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 544.370247][ T5668] udevd[5668]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 544.398997][ T4386] udevd[4386]: inotify_add_watch(7, /dev/loop5p5, 10) failed: No such file or directory [ 544.440017][ T3310] udevd[3310]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 544.453774][T12237] udevd[12237]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory [ 544.455278][T13839] udevd[13839]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 544.492094][ T3298] udevd[3298]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 544.528520][T15914] EXT4-fs: Ignoring removed nobh option [ 544.581367][T15918] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3716'. [ 544.871844][T15914] EXT4-fs (loop7): orphan cleanup on readonly fs [ 544.887517][T15914] EXT4-fs warning (device loop7): ext4_xattr_inode_get:560: inode #11: comm syz.7.3722: EA inode hash validation failed [ 544.917208][T15920] loop3: detected capacity change from 0 to 512 [ 544.924067][T15920] EXT4-fs: Ignoring removed nobh option [ 544.932844][T15920] EXT4-fs (loop3): orphan cleanup on readonly fs [ 544.937663][T15914] EXT4-fs error (device loop7): ext4_do_update_inode:5569: inode #15: comm syz.7.3722: corrupted inode contents [ 544.959239][T15920] EXT4-fs warning (device loop3): ext4_xattr_inode_get:560: inode #11: comm syz.3.3723: EA inode hash validation failed [ 544.965934][T15914] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 544.992553][T15920] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #15: comm syz.3.3723: corrupted inode contents [ 545.001576][T15914] EXT4-fs error (device loop7): ext4_dirty_inode:6450: inode #15: comm syz.7.3722: mark_inode_dirty error [ 545.012966][T15920] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 545.014164][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 545.041629][ C1] EXT4-fs (loop7): initial error at time 1774228019: ext4_do_update_inode:5569: inode 15 [ 545.045832][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 545.051669][ C1] EXT4-fs (loop7): last error at time 1774228019: ext4_do_update_inode:5569: inode 15 [ 545.058269][ C0] EXT4-fs (loop3): initial error at time 1774228019: ext4_do_update_inode:5569: inode 15 [ 545.067999][ C1] [ 545.080280][ C0] [ 545.082721][ C0] EXT4-fs (loop3): last error at time 1774228019: ext4_do_update_inode:5569: inode 15 [ 545.092667][T15914] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 545.092863][T15914] EXT4-fs error (device loop7): ext4_do_update_inode:5569: inode #15: comm syz.7.3722: corrupted inode contents [ 545.135023][T15920] EXT4-fs error (device loop3): ext4_dirty_inode:6450: inode #15: comm syz.3.3723: mark_inode_dirty error [ 545.147673][T15920] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 545.147844][T15920] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #15: comm syz.3.3723: corrupted inode contents [ 545.179648][T15914] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 545.179732][T15920] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 545.195635][T15914] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2999: inode #15: comm syz.7.3722: mark_inode_dirty error [ 545.217807][T15920] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2999: inode #15: comm syz.3.3723: mark_inode_dirty error [ 545.229763][T15914] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 545.230166][T15920] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 545.240580][T15920] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3002: inode #15: comm syz.3.3723: mark inode dirty (error -117) [ 545.263350][T15920] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 545.263504][T15920] EXT4-fs warning (device loop3): ext4_evict_inode:275: xattr delete (err -117) [ 545.273131][T15914] EXT4-fs error (device loop7): ext4_xattr_delete_inode:3002: inode #15: comm syz.7.3722: mark inode dirty (error -117) [ 545.295921][T15920] EXT4-fs (loop3): 1 orphan inode deleted [ 545.302447][T15920] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 545.355645][T15939] loop5: detected capacity change from 0 to 512 [ 545.366662][T15914] EXT4-fs warning (device loop7): ext4_evict_inode:275: xattr delete (err -117) [ 545.400758][T15914] EXT4-fs (loop7): 1 orphan inode deleted [ 545.428768][T15914] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 545.474794][T15939] EXT4-fs: Ignoring removed nobh option [ 545.510377][T15945] syzkaller0: entered allmulticast mode [ 545.517363][T15947] loop0: detected capacity change from 0 to 1024 [ 545.524142][T15947] EXT4-fs: quotafile must be on filesystem root [ 545.557782][T15939] EXT4-fs (loop5): orphan cleanup on readonly fs [ 545.681946][T15939] EXT4-fs warning (device loop5): ext4_xattr_inode_get:560: inode #11: comm syz.5.3728: EA inode hash validation failed [ 545.712159][T15914] netlink: 96 bytes leftover after parsing attributes in process `syz.7.3722'. [ 545.740303][T15939] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #15: comm syz.5.3728: corrupted inode contents [ 545.772772][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 545.780327][ C0] EXT4-fs (loop5): initial error at time 1774228020: ext4_do_update_inode:5569: inode 15 [ 545.792003][ C0] EXT4-fs (loop5): last error at time 1774228020: ext4_do_update_inode:5569: inode 15 [ 545.808077][T15939] EXT4-fs error (device loop5): ext4_dirty_inode:6450: inode #15: comm syz.5.3728: mark_inode_dirty error [ 545.823849][T15939] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #15: comm syz.5.3728: corrupted inode contents [ 545.843043][T15939] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2999: inode #15: comm syz.5.3728: mark_inode_dirty error [ 545.863124][T15939] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3002: inode #15: comm syz.5.3728: mark inode dirty (error -117) [ 545.886814][T15939] EXT4-fs warning (device loop5): ext4_evict_inode:275: xattr delete (err -117) [ 545.898118][T15939] EXT4-fs (loop5): 1 orphan inode deleted [ 545.920958][T15939] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 546.046107][T15939] netlink: 96 bytes leftover after parsing attributes in process `syz.5.3728'. [ 546.067131][T14240] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 546.219815][ T5734] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 546.287067][T15969] netlink: 'syz.5.3738': attribute type 39 has an invalid length. [ 546.307760][T15962] netlink: 'syz.7.3737': attribute type 10 has an invalid length. [ 546.422793][T15974] loop5: detected capacity change from 0 to 512 [ 546.472799][T15956] lo speed is unknown, defaulting to 1000 [ 546.711189][T15982] loop7: detected capacity change from 0 to 8192 [ 546.873255][T15982] loop7: p1 < > p2 p4 < p5 > [ 546.878316][T15982] loop7: partition table partially beyond EOD, truncated [ 546.886410][T15982] loop7: p1 start 134217728 is beyond EOD, truncated [ 546.893626][T15982] loop7: p2 size 591360 extends beyond EOD, truncated [ 546.906268][T15982] loop7: p5 size 591360 extends beyond EOD, truncated [ 546.979454][ T3006] loop7: p1 < > p2 p4 < p5 > [ 547.156467][ T3006] loop7: partition table partially beyond EOD, truncated [ 547.280382][ T3006] loop7: p1 start 134217728 is beyond EOD, truncated [ 547.312124][ T3006] loop7: p2 size 591360 extends beyond EOD, truncated [ 547.334753][ T3006] loop7: p5 size 591360 extends beyond EOD, truncated [ 547.440264][T15919] udevd[15919]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory [ 547.779762][T15993] loop5: detected capacity change from 0 to 8192 [ 547.847274][ T3309] loop5: p1 < > p2 p4 < p5 > [ 548.412830][ T3309] loop5: partition table partially beyond EOD, truncated [ 548.463494][ T3309] loop5: p1 start 134217728 is beyond EOD, truncated [ 548.512539][T15992] loop0: detected capacity change from 0 to 8192 [ 548.551645][ T3309] loop5: p2 size 591360 extends beyond EOD, truncated [ 548.666328][T12107] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 548.676105][ T3309] loop5: p5 size 591360 extends beyond EOD, truncated [ 548.685655][T15993] loop5: p1 < > p2 p4 < p5 > [ 548.690533][T15993] loop5: partition table partially beyond EOD, truncated [ 548.698300][T15993] loop5: p1 start 134217728 is beyond EOD, truncated [ 548.705661][T15993] loop5: p2 size 591360 extends beyond EOD, truncated [ 548.714460][T15993] loop5: p5 size 591360 extends beyond EOD, truncated [ 548.731718][T15919] loop0: p1 < > p2 p4 < p5 > [ 548.791803][T15919] loop0: partition table partially beyond EOD, truncated [ 548.802486][T15919] loop0: p1 start 134217728 is beyond EOD, truncated [ 548.818918][T15919] loop0: p2 size 591360 extends beyond EOD, truncated [ 548.836452][T16004] loop3: detected capacity change from 0 to 1024 [ 548.860761][T15919] loop0: p5 size 591360 extends beyond EOD, truncated [ 548.887017][T16004] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 548.900527][T15992] loop0: p1 < > p2 p4 < p5 > [ 548.905342][T15992] loop0: partition table partially beyond EOD, truncated [ 548.912720][T15992] loop0: p1 start 134217728 is beyond EOD, truncated [ 548.919477][T15992] loop0: p2 size 591360 extends beyond EOD, truncated [ 548.927867][T15992] loop0: p5 size 591360 extends beyond EOD, truncated [ 549.124920][ T28] kauditd_printk_skb: 22 callbacks suppressed [ 549.124938][ T28] audit: type=1326 audit(1774228023.585:6715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16018 comm="syz.7.3756" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f68157ac799 code=0x0 [ 549.270493][T12107] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 549.311989][T16027] netlink: 'syz.3.3758': attribute type 5 has an invalid length. [ 549.571171][ T28] audit: type=1400 audit(1774228023.987:6716): avc: denied { write } for pid=16037 comm="syz.6.3761" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 549.620015][ T28] audit: type=1400 audit(1774228023.987:6717): avc: denied { read } for pid=16037 comm="syz.6.3761" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 549.644428][T16040] loop0: detected capacity change from 0 to 2048 [ 549.718096][ T3311] loop0: p1 < > p4 [ 549.722502][ T3311] loop0: p4 size 722688 extends beyond EOD, truncated [ 549.733329][T16040] loop0: p1 < > p4 [ 549.738280][T16040] loop0: p4 size 722688 extends beyond EOD, truncated [ 549.803267][T16040] syzkaller0: entered promiscuous mode [ 549.809183][T16040] syzkaller0: entered allmulticast mode [ 551.278930][T16060] loop0: detected capacity change from 0 to 1024 [ 551.304040][ T28] audit: type=1326 audit(1774228025.615:6718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16063 comm="syz.7.3769" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f68157ac799 code=0x0 [ 551.361259][T16060] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 551.460372][T11567] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 551.552938][T16080] loop6: detected capacity change from 0 to 512 [ 551.627890][ T28] audit: type=1400 audit(1774228025.923:6719): avc: denied { ioctl } for pid=16086 comm="syz.0.3778" path="socket:[48660]" dev="sockfs" ino=48660 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 551.686115][ T28] audit: type=1400 audit(1774228025.979:6720): avc: denied { connect } for pid=16088 comm="syz.0.3779" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 551.804830][T16096] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3780'. [ 551.816739][T16096] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3780'. [ 552.337352][T16107] loop0: detected capacity change from 0 to 1024 [ 552.392218][T16107] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 552.555682][T16102] loop3: detected capacity change from 0 to 8192 [ 552.602096][T11567] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 552.865914][T16128] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=52 sclass=netlink_tcpdiag_socket pid=16128 comm=syz.5.3789 [ 553.506071][T16136] loop7: detected capacity change from 0 to 8192 [ 553.732801][T16139] FAULT_INJECTION: forcing a failure. [ 553.732801][T16139] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 553.761543][T16139] CPU: 1 UID: 0 PID: 16139 Comm: syz.0.3794 Tainted: G W syzkaller #0 PREEMPT(full) [ 553.761578][T16139] Tainted: [W]=WARN [ 553.761587][T16139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 553.761601][T16139] Call Trace: [ 553.761609][T16139] [ 553.761619][T16139] __dump_stack+0x1d/0x30 [ 553.761671][T16139] dump_stack_lvl+0x95/0xd0 [ 553.761697][T16139] dump_stack+0x15/0x1b [ 553.761724][T16139] should_fail_ex+0x263/0x280 [ 553.761755][T16139] should_fail+0xb/0x20 [ 553.761812][T16139] should_fail_usercopy+0x1a/0x20 [ 553.761968][T16139] _copy_to_user+0x20/0xa0 [ 553.762003][T16139] __se_sys_newlstat+0x398/0x3f0 [ 553.762039][T16139] __x64_sys_newlstat+0x31/0x40 [ 553.762122][T16139] x64_sys_call+0x1b8c/0x3020 [ 553.762153][T16139] do_syscall_64+0x12c/0x370 [ 553.762180][T16139] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.762200][T16139] RIP: 0033:0x7fe4be8ac799 [ 553.762230][T16139] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 553.762252][T16139] RSP: 002b:00007fe4bd307028 EFLAGS: 00000246 ORIG_RAX: 0000000000000006 [ 553.762276][T16139] RAX: ffffffffffffffda RBX: 00007fe4beb25fa0 RCX: 00007fe4be8ac799 [ 553.762293][T16139] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000200000000140 [ 553.762316][T16139] RBP: 00007fe4bd307090 R08: 0000000000000000 R09: 0000000000000000 [ 553.762328][T16139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 553.762346][T16139] R13: 00007fe4beb26038 R14: 00007fe4beb25fa0 R15: 00007ffc1a81ec98 [ 553.762426][T16139] [ 554.326375][ T3311] loop7: p1 < > p2 p4 < p5 > [ 554.331525][ T3311] loop7: partition table partially beyond EOD, truncated [ 554.339434][ T3311] loop7: p1 start 134217728 is beyond EOD, truncated [ 554.346898][ T3311] loop7: p2 size 591360 extends beyond EOD, truncated [ 554.364774][ T3311] loop7: p5 size 591360 extends beyond EOD, truncated [ 554.386616][T16136] loop7: p1 < > p2 p4 < p5 > [ 554.391709][T16136] loop7: partition table partially beyond EOD, truncated [ 554.398834][T16136] loop7: p1 start 134217728 is beyond EOD, truncated [ 554.405761][T16136] loop7: p2 size 591360 extends beyond EOD, truncated [ 554.446141][T16146] loop5: detected capacity change from 0 to 1024 [ 554.666920][T16154] loop0: detected capacity change from 0 to 8192 [ 554.700374][ T3309] loop0: p1 < > p2 p4 < p5 > [ 554.705482][ T3309] loop0: partition table partially beyond EOD, truncated [ 554.738450][T16146] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 554.771052][ T3309] loop0: p1 start 134217728 is beyond EOD, truncated [ 555.297211][T12107] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 555.321987][T16155] loop6: detected capacity change from 0 to 8192 [ 555.344975][T16136] loop7: p5 size 591360 extends beyond EOD, truncated [ 555.352297][T12107] CPU: 1 UID: 0 PID: 12107 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(full) [ 555.352336][T12107] Tainted: [W]=WARN [ 555.352343][T12107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 555.352354][T12107] Call Trace: [ 555.352360][T12107] [ 555.352367][T12107] __dump_stack+0x1d/0x30 [ 555.352413][T12107] dump_stack_lvl+0x95/0xd0 [ 555.352437][T12107] dump_stack+0x15/0x1b [ 555.352516][T12107] dump_header+0x80/0x240 [ 555.352540][T12107] oom_kill_process+0x295/0x350 [ 555.352625][T12107] out_of_memory+0x97d/0xb80 [ 555.352648][T12107] try_charge_memcg+0x62e/0xa10 [ 555.352662][ T3309] loop0: p2 size 591360 extends beyond EOD, [ 555.352687][T12107] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 555.352717][T12107] __swap_cache_prepare_and_add+0x386/0x530 [ 555.352769][T12107] swap_cache_alloc_folio+0xa2/0x120 [ 555.352796][T12107] swap_cluster_readahead+0x36b/0x3d0 [ 555.352886][T12107] swapin_readahead+0xde/0x840 [ 555.352912][T12107] ? preempt_schedule_common+0x11/0x30 [ 555.352940][T12107] ? preempt_schedule_thunk+0x16/0x30 [ 555.353050][T12107] ? filemap_map_pages+0xc4f/0xf10 [ 555.353074][T12107] ? __rcu_read_unlock+0x33/0x70 [ 555.353101][T12107] ? __rcu_read_unlock+0x4e/0x70 [ 555.353172][T12107] ? swap_cache_get_folio+0x26f/0x280 [ 555.353210][T12107] do_swap_page+0x30d/0x2220 [ 555.353236][T12107] ? rcu_preempt_deferred_qs_irqrestore+0x3dd/0x5c0 [ 555.353334][T12107] ? css_rstat_updated+0xbb/0x280 [ 555.353410][T12107] ? __rcu_read_lock+0x36/0x50 [ 555.353430][T12107] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 555.353537][T12107] handle_mm_fault+0xb46/0x3020 [ 555.353568][T12107] ? vma_start_read+0x1c7/0x2c0 [ 555.353620][T12107] do_user_addr_fault+0x62f/0x1050 [ 555.353698][T12107] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 555.353721][T12107] ? trace_page_fault_user+0x1f/0xe0 [ 555.353750][T12107] exc_page_fault+0x62/0xa0 [ 555.353832][T12107] asm_exc_page_fault+0x26/0x30 [ 555.353879][T12107] RIP: 0033:0x7f1b28d9a7b7 [ 555.353897][T12107] Code: 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 00 b0 ed 00 48 69 8c 24 90 00 00 00 e8 03 00 00 8b 78 08 <48> 8b 44 24 18 48 c1 ea 12 4c 8b 0d f9 ae ed 00 48 01 d1 39 7c 24 [ 555.353914][T12107] RSP: 002b:00007fff5e0c5db0 EFLAGS: 00010202 [ 555.353932][T12107] RAX: 0000001b31424000 RBX: 0000000000000205 RCX: 000000000007fee0 [ 555.353979][T12107] RDX: 0000000001963b94 RSI: 00007fff5e0c5e40 RDI: 000000000000001e [ 555.353993][T12107] RBP: 00007fff5e0c5dec R08: 00000000060da7a8 R09: 7fffffffffffffff [ 555.354007][T12107] R10: 3fffffffffffffff R11: 0000000000000202 R12: 0000000000001388 [ 555.354020][T12107] R13: 00000000000927c0 R14: 000000000007fe5a R15: 00007fff5e0c5e40 [ 555.354111][T12107] [ 555.354855][T12107] memory: usage 307200kB, limit 307200kB, failcnt 2316 [ 555.364403][ T3309] truncated [ 555.383421][T12107] memory+swap: usage 311784kB, limit 9007199254740988kB, failcnt 0 [ 555.414469][ T3309] loop0: p5 size 591360 extends beyond EOD, [ 555.485542][T16155] loop6: p1 < > p2 p4 < p5 > [ 555.488511][T12107] kmem: usage 307152kB, limit 9007199254740988kB, failcnt 0 [ 555.495354][T16155] loop6: partition table partially beyond EOD, [ 555.505744][T12107] Memory cgroup stats for [ 555.533307][ T3309] truncated [ 555.554862][ T5734] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 555.597541][T16155] truncated [ 555.642268][T12107] /syz3 [ 555.646094][T16155] loop6: p1 start 134217728 is beyond EOD, [ 555.687204][T12107] : [ 555.693593][T12107] cache 0 [ 555.699573][T12107] rss 0 [ 555.702754][T12107] shmem 0 [ 555.706810][T12107] mapped_file 0 [ 555.712100][T16154] loop0: p1 < > p2 p4 < p5 > [ 555.713072][T12107] dirty 0 [ 555.716954][T16154] loop0: partition table partially beyond EOD, truncated [ 555.720095][T12107] writeback 0 [ 555.727004][T16154] loop0: p1 start 134217728 is beyond EOD, truncated [ 555.730417][T16155] truncated [ 555.737093][T16154] loop0: p2 size 591360 extends beyond EOD, truncated [ 555.740484][T16155] loop6: p2 size 591360 extends beyond EOD, [ 555.747254][T12107] workingset_refault_anon 1904 [ 555.748311][T16154] loop0: p5 size 591360 extends beyond EOD, [ 555.753389][T16155] truncated [ 555.758146][T16154] truncated [ 555.818502][T12107] workingset_refault_file 1153 [ 555.833587][T16155] loop6: p5 size 591360 extends beyond EOD, truncated [ 555.854141][T12107] swap 4694016 [ 555.857648][T12107] swapcached 5492736 [ 555.877047][T12107] pgpgin 706858 [ 555.880638][T12107] pgpgout 706846 [ 555.884221][T12107] pgfault 477549 [ 555.896654][T12107] pgmajfault 275 [ 555.913111][T12107] inactive_anon 0 [ 555.918565][T12107] active_anon 4096 [ 555.922714][T12107] inactive_file 0 [ 555.926504][T12107] active_file 45056 [ 555.931123][T12107] unevictable 0 [ 555.934711][T12107] hierarchical_memory_limit 314572800 [ 555.940578][T12107] hierarchical_memsw_limit 9223372036854771712 [ 555.947031][T12107] total_cache 0 [ 555.950824][T12107] total_rss 0 [ 555.954136][T12107] total_shmem 0 [ 555.957846][T12107] total_mapped_file 0 [ 556.000306][T12107] total_dirty 0 [ 556.014224][T12107] total_writeback 0 [ 556.029686][T12107] total_workingset_refault_anon 1904 [ 556.049726][T12107] total_workingset_refault_file 1153 [ 556.069119][T12107] total_swap 4694016 [ 556.095323][T12107] total_swapcached 5492736 [ 556.102394][T12107] total_pgpgin 706858 [ 556.106557][T12107] total_pgpgout 706846 [ 556.111435][T12107] total_pgfault 477549 [ 556.115936][T12107] total_pgmajfault 275 [ 556.120659][T12107] total_inactive_anon 0 [ 556.125645][T12107] total_active_anon 4096 [ 556.130184][T12107] total_inactive_file 0 [ 556.135068][T12107] total_active_file 45056 [ 556.139698][T12107] total_unevictable 0 [ 556.144534][T12107] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.3780,pid=16095,uid=0 [ 556.160305][T12107] Memory cgroup out of memory: Killed process 16095 (syz.3.3780) total-vm:161880kB, anon-rss:1224kB, file-rss:22488kB, shmem-rss:0kB, UID:0 pgtables:156kB oom_score_adj:1000 [ 556.242910][T12237] udevd[12237]: inotify_add_watch(7, /dev/loop7p5, 10) failed: No such file or directory [ 556.257731][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop7p2, 10) failed: No such file or directory [ 556.278743][ T3310] udevd[3310]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory [ 556.409305][T16096] syz.3.3780 (16096) used greatest stack depth: 5880 bytes left [ 557.601061][T16182] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3807'. [ 558.047080][T16193] loop7: detected capacity change from 0 to 128 [ 558.895546][T16197] loop6: detected capacity change from 0 to 512 [ 559.019509][T16197] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #15: comm syz.6.3803: inode has both inline data and extents flags [ 559.034649][T16197] fserror_report: 6 callbacks suppressed [ 559.034900][T16197] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 559.050496][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 559.066343][ C0] EXT4-fs (loop6): initial error at time 1774228032: ext4_orphan_get:1391: inode 15 [ 559.075937][ C0] EXT4-fs (loop6): last error at time 1774228032: ext4_orphan_get:1391: inode 15 [ 559.391009][T16197] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.3803: couldn't read orphan inode 15 (err -117) [ 559.405219][T16197] loop6: lost filesystem error report for type 5 error -117 [ 560.482237][T16197] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 561.148714][ T28] audit: type=1400 audit(1774228034.239:6721): avc: denied { read append open } for pid=16194 comm="syz.6.3803" path=2F38392FE91F7189591E9233614B2F6370752E73746174 dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 561.478468][T16204] loop0: detected capacity change from 0 to 128 [ 562.215187][T14169] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 562.797311][T16207] loop7: detected capacity change from 0 to 8192 [ 562.835349][ T3311] loop7: p1 < > p2 p4 < p5 > [ 562.840689][ T3311] loop7: partition table partially beyond EOD, truncated [ 562.848202][ T3311] loop7: p1 start 134217728 is beyond EOD, truncated [ 562.854998][ T3311] loop7: p2 size 591360 extends beyond EOD, truncated [ 562.863409][ T3311] loop7: p5 size 591360 extends beyond EOD, truncated [ 562.873083][T16211] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3812'. [ 563.513279][T16207] loop7: p1 < > p2 p4 < p5 > [ 563.518348][T16207] loop7: partition table partially beyond EOD, truncated [ 563.525573][T16207] loop7: p1 start 134217728 is beyond EOD, truncated [ 563.532312][T16207] loop7: p2 size 591360 extends beyond EOD, truncated [ 563.552280][T16207] loop7: p5 size 591360 extends beyond EOD, truncated [ 563.697470][T16215] loop0: detected capacity change from 0 to 128 [ 563.777230][ T28] audit: type=1400 audit(1774228037.279:6722): avc: denied { write } for pid=16214 comm="syz.0.3815" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 563.894753][T16222] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3819'. [ 564.208058][T16226] tipc: Enabled bearer , priority 10 [ 564.755205][T16233] loop3: detected capacity change from 0 to 8192 [ 565.005701][ T3311] loop3: p1 < > p2 p4 < p5 > [ 565.048900][ T3311] loop3: partition table partially beyond EOD, truncated [ 565.125640][ T3311] loop3: p1 start 134217728 is beyond EOD, truncated [ 565.190070][ T3311] loop3: p2 size 591360 extends beyond EOD, truncated [ 565.225417][ T3311] loop3: p5 size 591360 extends beyond EOD, truncated [ 565.268961][T16241] syzkaller0: entered allmulticast mode [ 565.276871][T16233] loop3: p1 < > p2 p4 < p5 > [ 565.281868][T16233] loop3: partition table partially beyond EOD, truncated [ 565.289266][T16233] loop3: p1 start 134217728 is beyond EOD, truncated [ 565.296288][T16233] loop3: p2 size 591360 extends beyond EOD, truncated [ 565.304338][T16233] loop3: p5 size 591360 extends beyond EOD, truncated [ 565.331057][T16244] loop7: detected capacity change from 0 to 164 [ 565.361813][T16246] loop5: detected capacity change from 0 to 512 [ 565.376405][T16244] iso9660: Bad value for 'block' [ 565.406258][T16244] loop7: detected capacity change from 0 to 128 [ 565.538257][T16248] loop0: detected capacity change from 0 to 512 [ 565.621341][T16248] EXT4-fs: Ignoring removed nobh option [ 565.798327][T16248] EXT4-fs (loop0): orphan cleanup on readonly fs [ 566.055353][T16257] loop6: detected capacity change from 0 to 8192 [ 566.092383][T16248] EXT4-fs warning (device loop0): ext4_xattr_inode_get:560: inode #11: comm syz.0.3826: EA inode hash validation failed [ 566.126901][T16248] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #15: comm syz.0.3826: corrupted inode contents [ 566.142832][T16248] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 566.145604][T16248] EXT4-fs error (device loop0): ext4_dirty_inode:6450: inode #15: comm syz.0.3826: mark_inode_dirty error [ 566.157733][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 566.158076][ C0] EXT4-fs (loop0): initial error at time 1774228039: ext4_do_update_inode:5569: inode 15 [ 566.158310][ C0] EXT4-fs (loop0): last error at time 1774228039: ext4_do_update_inode:5569: inode 15 [ 566.171024][ T3309] loop6: p1 < > p2 p4 < p5 > [ 566.173677][T16248] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 566.249999][T16248] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #15: comm syz.0.3826: corrupted inode contents [ 566.256223][ T3309] loop6: partition table partially beyond EOD, [ 566.268539][T16248] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 566.298916][ T3309] truncated [ 566.313429][ T3309] loop6: p1 start 134217728 is beyond EOD, truncated [ 566.321676][ T3309] loop6: p2 size 591360 extends beyond EOD, truncated [ 566.332290][ T3309] loop6: p5 size 591360 extends beyond EOD, truncated [ 566.340722][T16248] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2999: inode #15: comm syz.0.3826: mark_inode_dirty error [ 566.366354][T16248] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 566.370292][T16248] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3002: inode #15: comm syz.0.3826: mark inode dirty (error -117) [ 566.416559][T16248] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 566.417826][T16248] EXT4-fs warning (device loop0): ext4_evict_inode:275: xattr delete (err -117) [ 566.452666][T16248] EXT4-fs (loop0): 1 orphan inode deleted [ 566.551870][T16267] loop3: detected capacity change from 0 to 8192 [ 566.578102][T16248] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 566.598407][T16267] loop3: p1 < > p2 p4 < p5 > [ 566.603149][T16267] loop3: partition table partially beyond EOD, truncated [ 566.610371][T16267] loop3: p1 start 134217728 is beyond EOD, truncated [ 566.617327][T16267] loop3: p2 size 591360 extends beyond EOD, truncated [ 566.625570][T16267] loop3: p5 size 591360 extends beyond EOD, truncated [ 566.641118][ T3006] loop3: p1 < > p2 p4 < p5 > [ 566.646041][ T3006] loop3: partition table partially beyond EOD, truncated [ 566.657867][ T3006] loop3: p1 start 134217728 is beyond EOD, truncated [ 566.669420][ T3006] loop3: p2 size 591360 extends beyond EOD, truncated [ 566.691703][ T3006] loop3: p5 size 591360 extends beyond EOD, truncated [ 566.789509][T16248] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3826'. [ 567.007049][T16257] loop6: p1 < > p2 p4 < p5 > [ 567.011916][T16257] loop6: partition table partially beyond EOD, truncated [ 567.019358][T16257] loop6: p1 start 134217728 is beyond EOD, truncated [ 567.026187][T16257] loop6: p2 size 591360 extends beyond EOD, truncated [ 567.055165][T16257] loop6: p5 size 591360 extends beyond EOD, truncated [ 567.073337][T11567] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 567.349451][T16272] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3833'. [ 567.380961][T16280] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3834'. [ 568.347020][T16280] loop5: detected capacity change from 0 to 32768 [ 568.487055][T16280] loop5: p1 p3 < > p4 < p5 > [ 568.575222][T16280] loop5: p1 start 460800 is beyond EOD, truncated [ 568.714387][T16280] loop5: p5 start 460800 is beyond EOD, truncated [ 568.916774][T16295] loop7: detected capacity change from 0 to 8192 [ 568.972162][T15919] loop7: p1 < > p2 p4 < p5 > [ 568.982121][T15919] loop7: partition table partially beyond EOD, truncated [ 568.991540][T15919] loop7: p1 start 134217728 is beyond EOD, truncated [ 569.006943][T15919] loop7: p2 size 591360 extends beyond EOD, truncated [ 569.058427][T15919] loop7: p5 size 591360 extends beyond EOD, truncated [ 569.084282][T16295] loop7: p1 < > p2 p4 < p5 > [ 569.089299][T16295] loop7: partition table partially beyond EOD, truncated [ 569.096810][T16295] loop7: p1 start 134217728 is beyond EOD, truncated [ 569.104250][T16295] loop7: p2 size 591360 extends beyond EOD, truncated [ 569.112755][T16295] loop7: p5 size 591360 extends beyond EOD, truncated [ 569.215616][ T3311] udevd[3311]: inotify_add_watch(7, /dev/loop7p2, 10) failed: No such file or directory [ 569.225956][T15919] udevd[15919]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory [ 569.236312][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop7p5, 10) failed: No such file or directory [ 569.283668][T15919] udevd[15919]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory [ 569.294988][ T3311] udevd[3311]: inotify_add_watch(7, /dev/loop7p2, 10) failed: No such file or directory [ 569.305159][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop7p5, 10) failed: No such file or directory [ 569.370767][T16307] loop0: detected capacity change from 0 to 8192 [ 569.486411][T15919] loop0: p1 < > p2 p4 < p5 > [ 569.491128][T15919] loop0: partition table partially beyond EOD, truncated [ 569.505670][T15919] loop0: p1 start 134217728 is beyond EOD, truncated [ 569.530195][T15919] loop0: p2 size 591360 extends beyond EOD, truncated [ 569.562299][T16309] EXT4-fs: Ignoring removed nobh option [ 569.575185][T15919] loop0: p5 size 591360 extends beyond EOD, truncated [ 569.622870][T16309] EXT4-fs (loop7): orphan cleanup on readonly fs [ 569.687989][T16309] EXT4-fs warning (device loop7): ext4_xattr_inode_get:560: inode #11: comm syz.7.3840: EA inode hash validation failed [ 569.730678][T16309] EXT4-fs error (device loop7): ext4_do_update_inode:5569: inode #15: comm syz.7.3840: corrupted inode contents [ 569.767099][T16309] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 569.767501][T16309] EXT4-fs error (device loop7): ext4_dirty_inode:6450: inode #15: comm syz.7.3840: mark_inode_dirty error [ 569.776812][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 569.776832][ C1] EXT4-fs (loop7): initial error at time 1774228042: ext4_do_update_inode:5569: inode 15 [ 569.776859][ C1] EXT4-fs (loop7): last error at time 1774228042: ext4_do_update_inode:5569: inode 15 [ 569.862674][T16309] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 569.869586][T16307] loop0: p1 < > p2 p4 < p5 > [ 569.883523][T16307] loop0: partition table partially beyond EOD, truncated [ 569.890937][T16307] loop0: p1 start 134217728 is beyond EOD, truncated [ 569.897816][T16307] loop0: p2 size 591360 extends beyond EOD, truncated [ 569.907585][T16307] loop0: p5 size 591360 extends beyond EOD, truncated [ 569.917990][T16309] EXT4-fs error (device loop7): ext4_do_update_inode:5569: inode #15: comm syz.7.3840: corrupted inode contents [ 569.934060][T16309] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 569.934961][T16309] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2999: inode #15: comm syz.7.3840: mark_inode_dirty error [ 569.959518][T16309] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 569.959720][T16309] EXT4-fs error (device loop7): ext4_xattr_delete_inode:3002: inode #15: comm syz.7.3840: mark inode dirty (error -117) [ 569.981849][T16309] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 569.982136][T16309] EXT4-fs warning (device loop7): ext4_evict_inode:275: xattr delete (err -117) [ 570.000576][T16309] EXT4-fs (loop7): 1 orphan inode deleted [ 570.006949][T16309] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 570.069075][T16305] netlink: 96 bytes leftover after parsing attributes in process `syz.7.3840'. [ 570.171353][T16317] vhci_hcd vhci_hcd.4: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 570.296291][T16317] lo speed is unknown, defaulting to 1000 [ 570.343279][T14240] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 570.616108][T16324] set_capacity_and_notify: 1 callbacks suppressed [ 570.616267][T16324] loop7: detected capacity change from 0 to 512 [ 570.651460][T16324] EXT4-fs: Ignoring removed nobh option [ 570.684049][T16324] EXT4-fs (loop7): orphan cleanup on readonly fs [ 570.700251][T16324] EXT4-fs warning (device loop7): ext4_xattr_inode_get:560: inode #11: comm syz.7.3846: EA inode hash validation failed [ 570.718651][T16324] EXT4-fs error (device loop7): ext4_do_update_inode:5569: inode #15: comm syz.7.3846: corrupted inode contents [ 570.735329][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 570.736132][T16324] EXT4-fs error (device loop7): ext4_dirty_inode:6450: inode #15: comm syz.7.3846: mark_inode_dirty error [ 570.741789][ C1] EXT4-fs (loop7): initial error at time 1774228043: ext4_do_update_inode:5569: inode 15 [ 570.741835][ C1] EXT4-fs (loop7): last error at time 1774228043: ext4_do_update_inode:5569: inode 15 [ 570.786544][T15919] udevd[15919]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 570.799298][T16324] EXT4-fs error (device loop7): ext4_do_update_inode:5569: inode #15: comm syz.7.3846: corrupted inode contents [ 570.868622][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop0p5, 10) failed: No such file or directory [ 570.878849][T16331] loop5: detected capacity change from 0 to 8192 [ 570.888169][T16324] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2999: inode #15: comm syz.7.3846: mark_inode_dirty error [ 570.907454][ T3311] udevd[3311]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 570.908912][T16324] EXT4-fs error (device loop7): ext4_xattr_delete_inode:3002: inode #15: comm syz.7.3846: mark inode dirty (error -117) [ 570.948869][T15919] loop5: p1 < > p2 p4 < p5 > [ 570.955376][T15919] loop5: partition table partially beyond EOD, truncated [ 570.973294][T15919] loop5: p1 start 134217728 is beyond EOD, truncated [ 570.985797][T16324] EXT4-fs warning (device loop7): ext4_evict_inode:275: xattr delete (err -117) [ 570.997902][T15919] loop5: p2 size 591360 extends beyond EOD, truncated [ 571.014482][T16324] EXT4-fs (loop7): 1 orphan inode deleted [ 571.023096][T15919] loop5: p5 size 591360 extends beyond EOD, truncated [ 571.068303][T16331] loop5: p1 < > p2 p4 < p5 > [ 571.073205][T16331] loop5: partition table partially beyond EOD, truncated [ 571.078842][T16324] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 571.080533][T16331] loop5: p1 start 134217728 is beyond EOD, truncated [ 571.080556][T16331] loop5: p2 size 591360 extends beyond EOD, truncated [ 571.089054][T16331] loop5: p5 size 591360 extends beyond EOD, truncated [ 572.031121][T16341] netlink: 96 bytes leftover after parsing attributes in process `syz.7.3846'. [ 572.601616][T16355] loop3: detected capacity change from 0 to 8192 [ 573.078495][ T3311] loop3: p1 < > p2 p4 < p5 > [ 573.083388][ T3311] loop3: partition table partially beyond EOD, truncated [ 573.094377][ T3311] loop3: p1 start 134217728 is beyond EOD, truncated [ 573.101563][ T3311] loop3: p2 size 591360 extends beyond EOD, truncated [ 573.109828][ T3311] loop3: p5 size 591360 extends beyond EOD, truncated [ 573.122096][T16365] netlink: 3260 bytes leftover after parsing attributes in process `syz.5.3856'. [ 573.135917][T16355] loop3: p1 < > p2 p4 < p5 > [ 573.141317][T16355] loop3: partition table partially beyond EOD, truncated [ 573.148833][T16355] loop3: p1 start 134217728 is beyond EOD, truncated [ 573.167324][T16355] loop3: p2 size 591360 extends beyond EOD, truncated [ 573.190231][T16355] loop3: p5 size 591360 extends beyond EOD, truncated [ 573.272881][T16369] loop6: detected capacity change from 0 to 512 [ 573.319255][T16369] EXT4-fs: Ignoring removed nobh option [ 573.389044][T16369] EXT4-fs (loop6): orphan cleanup on readonly fs [ 573.448818][T16369] EXT4-fs warning (device loop6): ext4_xattr_inode_get:560: inode #11: comm syz.6.3858: EA inode hash validation failed [ 573.491905][T16369] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #15: comm syz.6.3858: corrupted inode contents [ 573.525749][T16369] fserror_report: 5 callbacks suppressed [ 573.525792][T16369] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 573.540078][T16369] EXT4-fs error (device loop6): ext4_dirty_inode:6450: inode #15: comm syz.6.3858: mark_inode_dirty error [ 573.550471][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 573.550673][ C0] EXT4-fs (loop6): initial error at time 1774228046: ext4_do_update_inode:5569: inode 15 [ 573.551069][ C0] EXT4-fs (loop6): last error at time 1774228046: ext4_do_update_inode:5569: inode 15 [ 573.598006][T16369] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 573.599736][T16369] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #15: comm syz.6.3858: corrupted inode contents [ 573.629460][T16369] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 573.630638][T16369] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2999: inode #15: comm syz.6.3858: mark_inode_dirty error [ 573.658999][T16369] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 573.676066][T16369] EXT4-fs error (device loop6): ext4_xattr_delete_inode:3002: inode #15: comm syz.6.3858: mark inode dirty (error -117) [ 573.702162][T16369] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 573.704288][T16369] EXT4-fs warning (device loop6): ext4_evict_inode:275: xattr delete (err -117) [ 573.729539][T16369] EXT4-fs (loop6): 1 orphan inode deleted [ 573.749524][T16369] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 573.906068][T16377] netlink: 96 bytes leftover after parsing attributes in process `syz.6.3858'. [ 574.109668][T16337] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 574.134528][T14240] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 574.194105][T14169] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 574.283368][T16382] loop0: detected capacity change from 0 to 8192 [ 574.339342][T15919] loop0: p1 < > p2 p4 < p5 > [ 574.345283][T15919] loop0: partition table partially beyond EOD, truncated [ 574.380115][T15919] loop0: p1 start 134217728 is beyond EOD, truncated [ 574.399599][T15919] loop0: p2 size 591360 extends beyond EOD, truncated [ 574.421383][T15919] loop0: p5 size 591360 extends beyond EOD, truncated [ 574.443881][T16382] loop0: p1 < > p2 p4 < p5 > [ 574.448981][T16382] loop0: partition table partially beyond EOD, truncated [ 574.456921][T16382] loop0: p1 start 134217728 is beyond EOD, truncated [ 574.463951][T16382] loop0: p2 size 591360 extends beyond EOD, truncated [ 574.475850][T16382] loop0: p5 size 591360 extends beyond EOD, truncated [ 574.477748][T16390] loop6: detected capacity change from 0 to 1024 [ 574.592640][T16390] EXT4-fs: inline encryption not supported [ 574.599036][T16390] ext4: Bad value for 'mb_optimize_scan' [ 574.867004][T16391] loop5: detected capacity change from 0 to 8192 [ 575.033433][ T3298] udevd[3298]: inotify_add_watch(7, /dev/loop0p5, 10) failed: No such file or directory [ 575.044264][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 575.050962][T16391] loop5: p1 < > p2 p4 < p5 > [ 575.059443][T16391] loop5: partition table partially beyond EOD, truncated [ 575.067190][T16391] loop5: p1 start 134217728 is beyond EOD, truncated [ 575.067668][T15919] udevd[15919]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 575.074070][T16391] loop5: p2 size 591360 extends beyond EOD, truncated [ 575.099573][T16391] loop5: p5 size 591360 extends beyond EOD, truncated [ 575.141204][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 575.142119][ T3298] udevd[3298]: inotify_add_watch(7, /dev/loop0p5, 10) failed: No such file or directory [ 575.162735][T15919] udevd[15919]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 575.199597][T13839] udevd[13839]: inotify_add_watch(7, /dev/loop0p5, 10) failed: No such file or directory [ 575.214776][ T5668] udevd[5668]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 575.227213][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 575.271722][T16408] loop0: detected capacity change from 0 to 512 [ 575.292943][T16410] netdevsim netdevsim7: Direct firmware load for .. @ failed with error -2 [ 575.302239][T16408] EXT4-fs: Ignoring removed bh option [ 575.311198][ T28] audit: type=1400 audit(1774228048.074:6723): avc: denied { execute } for pid=16405 comm="syz.3.3868" path="/memory.swap.current" dev="ramfs" ino=49124 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 575.372593][T16408] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 575.428095][T16408] ext4 filesystem being mounted at /266/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 575.529621][T16418] lo speed is unknown, defaulting to 1000 [ 575.590449][T16420] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 575.599045][T11567] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 575.618886][T16420] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 576.481430][T16430] xt_bpf: check failed: parse error [ 577.023855][T16388] loop6: detected capacity change from 0 to 1024 [ 577.555250][T16388] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 577.558603][T16388] EXT4-fs: failed to create workqueue [ 577.620548][T16388] EXT4-fs (loop6): mount failed [ 577.876776][ T28] audit: type=1400 audit(1774228050.449:6724): avc: denied { read } for pid=16459 comm="syz.7.3885" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 577.958608][ T28] audit: type=1400 audit(1774228050.449:6725): avc: denied { connect } for pid=16459 comm="syz.7.3885" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 577.985597][T16467] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3882'. [ 578.086534][T16473] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3887'. [ 578.344685][T16477] loop7: detected capacity change from 0 to 1024 [ 578.399979][T16477] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 579.107152][T14240] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 579.189406][ T28] audit: type=1400 audit(1774228051.703:6726): avc: denied { connect } for pid=16509 comm="syz.6.3899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 579.484563][ T28] audit: type=1400 audit(1774228051.984:6727): avc: denied { listen } for pid=16531 comm="syz.6.3910" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 579.687070][T16552] syzkaller0: entered promiscuous mode [ 579.693169][T16552] syzkaller0: entered allmulticast mode [ 579.733538][T16556] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 579.757501][T16556] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 580.317799][T16574] syzkaller0: entered promiscuous mode [ 580.530867][ T28] audit: type=1400 audit(1774228052.956:6728): avc: denied { append } for pid=16590 comm="syz.5.3935" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 580.568571][T16593] netlink: 'syz.0.3936': attribute type 4 has an invalid length. [ 580.583901][T16596] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3937'. [ 580.599167][T16593] netlink: 'syz.0.3936': attribute type 4 has an invalid length. [ 580.648001][T16596] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3937'. [ 580.678512][T16608] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3944'. [ 580.779443][T16625] netlink: 'syz.5.3950': attribute type 2 has an invalid length. [ 580.787737][T16625] netlink: 'syz.5.3950': attribute type 8 has an invalid length. [ 580.836762][T16632] syz_tun: entered allmulticast mode [ 580.851146][T16632] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 580.859814][T16632] mroute: pending queue full, dropping entries [ 580.870748][T16625] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3950'. [ 580.945623][T16629] syz_tun: left allmulticast mode [ 581.021556][ T28] audit: type=1400 audit(1774228053.377:6729): avc: denied { bind } for pid=16639 comm="syz.6.3957" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 581.110625][T16646] batman_adv: batadv0: Adding interface: dummy0 [ 581.117102][T16646] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 581.143998][T16646] batman_adv: batadv0: Interface activated: dummy0 [ 581.157350][T16646] batadv0: mtu less than device minimum [ 581.163841][T16646] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 581.175103][T16646] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 581.187024][T16646] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 581.197974][T16646] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 581.208849][T16646] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 581.219817][T16646] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 581.230979][T16646] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 581.242088][T16646] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 581.253862][T16646] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 581.293211][ T28] audit: type=1400 audit(1774228053.546:6730): avc: denied { ioctl } for pid=16645 comm="syz.7.3959" path="socket:[50640]" dev="sockfs" ino=50640 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 581.320402][T16652] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3962'. [ 581.329596][T16652] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3962'. [ 581.397361][T16665] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 581.406694][T16665] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 581.420597][T16665] bridge0: port 3(team0) entered blocking state [ 581.428154][T16665] bridge0: port 3(team0) entered disabled state [ 581.434976][T16665] team0: entered allmulticast mode [ 581.440534][T16665] team_slave_0: entered allmulticast mode [ 581.447002][T16665] team_slave_1: entered allmulticast mode [ 581.462057][T16665] team0: entered promiscuous mode [ 581.467504][T16665] team_slave_0: entered promiscuous mode [ 581.473543][T16665] team_slave_1: entered promiscuous mode [ 581.480110][T16665] bridge0: port 3(team0) entered blocking state [ 581.486422][T16665] bridge0: port 3(team0) entered forwarding state [ 581.897328][T16683] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 581.909052][T16683] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 582.564355][T16695] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 582.594214][T16695] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 583.188170][T16705] netlink: 68 bytes leftover after parsing attributes in process `syz.6.3981'. [ 583.197376][T16705] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3981'. [ 583.301772][T16707] lo speed is unknown, defaulting to 1000 [ 583.529831][T16715] netlink: 'syz.5.3985': attribute type 4 has an invalid length. [ 583.547929][T16715] netlink: 'syz.5.3985': attribute type 30 has an invalid length. [ 583.591013][T16721] lo speed is unknown, defaulting to 1000 [ 583.762979][T16742] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 583.780533][T16742] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 584.019667][T16770] netlink: 'syz.3.4011': attribute type 27 has an invalid length. [ 584.046746][T16770] netlink: 'syz.3.4011': attribute type 28 has an invalid length. [ 584.069514][T16770] netlink: 'syz.3.4011': attribute type 29 has an invalid length. [ 584.088529][T16770] netlink: 'syz.3.4011': attribute type 30 has an invalid length. [ 584.107363][T16770] netlink: 236 bytes leftover after parsing attributes in process `syz.3.4011'. [ 584.132352][ T9352] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 584.182162][T16772] lo speed is unknown, defaulting to 1000 [ 584.201833][ T9352] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 584.251499][ T9352] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 584.326559][ T9352] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 584.383209][T16772] chnl_net:caif_netlink_parms(): no params data found [ 584.496534][T16772] bridge0: port 1(bridge_slave_0) entered blocking state [ 584.516444][T16772] bridge0: port 1(bridge_slave_0) entered disabled state [ 584.547888][T16772] bridge_slave_0: entered allmulticast mode [ 584.555568][T16772] bridge_slave_0: entered promiscuous mode [ 584.565975][T16824] vhci_hcd vhci_hcd.0: invalid port number 65 [ 584.569190][T16772] bridge0: port 2(bridge_slave_1) entered blocking state [ 584.580227][T16772] bridge0: port 2(bridge_slave_1) entered disabled state [ 584.588082][T16826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 584.597493][T16824] vhci_hcd vhci_hcd.0: invalid port number 65 [ 584.598992][T16772] bridge_slave_1: entered allmulticast mode [ 584.621155][T16772] bridge_slave_1: entered promiscuous mode [ 584.629303][T16826] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 584.637648][ T9352] gretap0: left allmulticast mode [ 584.646530][ T9352] gretap0: left promiscuous mode [ 584.661803][ T9352] bridge0: port 3(gretap0) entered disabled state [ 584.672939][ T9352] bridge_slave_1: left allmulticast mode [ 584.680325][ T9352] bridge_slave_1: left promiscuous mode [ 584.686940][ T9352] bridge0: port 2(bridge_slave_1) entered disabled state [ 584.695333][ T9352] bridge_slave_0: left allmulticast mode [ 584.701598][ T9352] bridge_slave_0: left promiscuous mode [ 584.707785][ T9352] bridge0: port 1(bridge_slave_0) entered disabled state [ 584.827271][ T9352] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 584.838051][ T9352] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 584.858304][ T9352] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 584.869610][ T9352] bond0 (unregistering): Released all slaves [ 584.877867][ T9352] bond1 (unregistering): Released all slaves [ 584.887056][ T9352] bond2 (unregistering): Released all slaves [ 584.903067][ T9352] bond3 (unregistering): Released all slaves [ 584.912650][ T9352] bond4 (unregistering): Released all slaves [ 584.921186][ T9352] bond5 (unregistering): Released all slaves [ 584.948486][T16772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 584.974068][T16772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 585.023317][T16852] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4039'. [ 585.024198][ T9352] tipc: Left network mode [ 585.047430][T16772] team0: Port device team_slave_0 added [ 585.055615][T16772] team0: Port device team_slave_1 added [ 585.086589][T16852] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4039'. [ 585.106858][ T9352] hsr_slave_0: left promiscuous mode [ 585.118914][ T9352] hsr_slave_1: left promiscuous mode [ 585.124522][ T9352] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 585.136014][ T9352] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 585.216285][ T9352] team0 (unregistering): Port device team_slave_1 removed [ 585.230178][ T9352] team0 (unregistering): Port device team_slave_0 removed [ 585.277288][T16860] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 585.285421][T16860] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 585.304555][T16875] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 585.313732][T16772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 585.313887][T16875] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 585.329383][T16772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 585.356759][T16772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 585.377394][T16772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 585.385529][T16772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 585.412617][T16772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 585.441411][T16772] hsr_slave_0: entered promiscuous mode [ 585.467765][T16772] hsr_slave_1: entered promiscuous mode [ 585.476725][T16772] debugfs: 'hsr0' already exists in 'hsr' [ 585.493382][T16772] Cannot create hsr debugfs directory [ 585.606211][ T7479] usb usb8-port1: attempt power cycle [ 585.681507][T16902] syzkaller1: entered promiscuous mode [ 585.687130][T16902] syzkaller1: entered allmulticast mode [ 586.046419][T16940] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4052'. [ 586.208028][T16772] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 586.231360][T16772] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 586.260123][T16772] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 586.291864][ T9352] IPVS: stop unused estimator thread 0... [ 586.299335][T16772] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 586.375412][T16772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 586.389989][T16772] 8021q: adding VLAN 0 to HW filter on device team0 [ 586.415287][ T9341] bridge0: port 1(bridge_slave_0) entered blocking state [ 586.422520][ T9341] bridge0: port 1(bridge_slave_0) entered forwarding state [ 586.466061][ T9341] bridge0: port 2(bridge_slave_1) entered blocking state [ 586.473285][ T9341] bridge0: port 2(bridge_slave_1) entered forwarding state [ 586.488706][T16968] validate_nla: 15 callbacks suppressed [ 586.488725][T16968] netlink: 'syz.0.4059': attribute type 1 has an invalid length. [ 586.512984][T16968] netlink: 'syz.0.4059': attribute type 4 has an invalid length. [ 586.534209][T16772] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 586.559427][T16772] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 586.596300][T17008] pim6reg0: tun_chr_ioctl cmd 35111 [ 586.641855][T16772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 586.795794][T16772] veth0_vlan: entered promiscuous mode [ 586.805048][T16772] veth1_vlan: entered promiscuous mode [ 586.823589][T16772] veth0_macvtap: entered promiscuous mode [ 586.833895][T16772] veth1_macvtap: entered promiscuous mode [ 586.847070][T16772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 586.871461][T16772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 586.884145][ T9358] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.893906][T17046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 586.895417][ T9358] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.910644][T17046] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 586.922360][ T9358] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.931439][ T9358] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.117877][T17065] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4080'. [ 587.195213][T17075] net_ratelimit: 10 callbacks suppressed [ 587.195230][T17075] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 587.339598][T17096] usb usb7: usbfs: process 17096 (syz.5.4094) did not claim interface 0 before use [ 587.445435][T17111] tipc: Started in network mode [ 587.450460][T17111] tipc: Node identity 22c4d5455fc, cluster identity 4711 [ 587.459397][T17111] tipc: Enabled bearer , priority 0 [ 587.475342][T17112] syzkaller0: entered promiscuous mode [ 587.482443][T17112] syzkaller0: entered allmulticast mode [ 587.495487][T17111] syzkaller0: entered promiscuous mode [ 587.508666][T17111] syzkaller0: entered allmulticast mode [ 587.660385][T17111] tipc: Resetting bearer [ 587.667107][T17108] tipc: Resetting bearer [ 587.674085][T17108] tipc: Disabling bearer [ 587.875716][T17147] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 587.878155][T17145] lo speed is unknown, defaulting to 1000 [ 587.885405][T17147] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 588.000977][ T7479] usb usb8-port1: unable to enumerate USB device [ 588.625130][T17198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 588.635993][T17198] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 589.168332][ T28] audit: type=1400 audit(1774228061.038:6731): avc: denied { getopt } for pid=17201 comm="syz.6.4142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 589.218225][T17208] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 589.226894][T17208] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 589.377054][T17215] netlink: 2 bytes leftover after parsing attributes in process `syz.7.4148'. [ 589.500672][T17226] lo speed is unknown, defaulting to 1000 [ 589.546514][T17228] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4154'. [ 589.795577][T17252] lo speed is unknown, defaulting to 1000 [ 589.828411][ C0] vcan0: j1939_tp_rxtimer: 0xffff888105a4ec00: rx timeout, send abort [ 589.837205][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888105a4ec00: 0x0ff00: (3) A timeout occurred and this is the connection abort to close the session. [ 590.086616][T17276] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 590.095680][T17276] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 590.229484][T17280] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4177'. [ 590.242748][T17280] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4177'. [ 590.445152][T17286] netlink: 64 bytes leftover after parsing attributes in process `syz.5.4180'. [ 590.455595][T17286] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4180'. [ 590.752351][T17311] lo speed is unknown, defaulting to 1000 [ 590.966578][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 590.982049][ T23] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 591.267979][T17345] lo speed is unknown, defaulting to 1000 [ 591.413516][T17354] lo speed is unknown, defaulting to 1000 [ 591.557435][T17367] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 591.566631][T17367] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 591.777961][T17393] tipc: Started in network mode [ 591.783063][T17393] tipc: Node identity c6807ecaac3a, cluster identity 4711 [ 591.790596][T17393] tipc: Enabled bearer , priority 0 [ 591.798854][T17393] syzkaller0: entered promiscuous mode [ 591.804563][T17393] syzkaller0: entered allmulticast mode [ 591.813882][T17393] tipc: Resetting bearer [ 591.821133][T17390] tipc: Resetting bearer [ 591.827815][T17390] tipc: Disabling bearer [ 591.903867][T17397] lo speed is unknown, defaulting to 1000 [ 592.060008][T17401] syzkaller0: entered promiscuous mode [ 592.065906][T17401] syzkaller0: entered allmulticast mode [ 592.314040][T17412] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4232'. [ 592.414116][T17425] lo speed is unknown, defaulting to 1000 [ 592.643854][ T28] audit: type=1400 audit(1774228064.293:6732): avc: denied { create } for pid=17435 comm="syz.5.4241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 592.664114][ T28] audit: type=1400 audit(1774228064.293:6733): avc: denied { connect } for pid=17435 comm="syz.5.4241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 592.905860][T17442] syzkaller0: entered promiscuous mode [ 592.934333][T17442] syzkaller0: entered allmulticast mode [ 593.295602][ T28] audit: type=1326 audit(1774228064.901:6734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17460 comm="syz.6.4252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda7423c799 code=0x7ffc0000 [ 593.325130][ T28] audit: type=1326 audit(1774228064.901:6735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17460 comm="syz.6.4252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda7423c799 code=0x7ffc0000 [ 593.349883][ T28] audit: type=1326 audit(1774228064.901:6736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17460 comm="syz.6.4252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda7423c799 code=0x7ffc0000 [ 593.373807][ T28] audit: type=1326 audit(1774228064.901:6737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17460 comm="syz.6.4252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7fda7423c799 code=0x7ffc0000 [ 593.398598][ T28] audit: type=1326 audit(1774228064.901:6738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17460 comm="syz.6.4252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda7423c799 code=0x7ffc0000 [ 593.423727][ T28] audit: type=1326 audit(1774228064.901:6740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17460 comm="syz.6.4252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda7423c799 code=0x7ffc0000 [ 593.448254][ T28] audit: type=1326 audit(1774228064.901:6741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17460 comm="syz.6.4252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fda7423c799 code=0x7ffc0000 [ 593.489431][T17467] lo speed is unknown, defaulting to 1000 [ 594.716832][T17516] lo speed is unknown, defaulting to 1000 [ 594.890650][T17512] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 594.899812][T17512] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 595.519896][T17540] tipc: Enabled bearer , priority 0 [ 595.532554][T17540] syzkaller0: entered promiscuous mode [ 595.552114][T17540] syzkaller0: entered allmulticast mode [ 595.563335][T17540] tipc: Resetting bearer [ 595.578238][T17539] tipc: Resetting bearer [ 595.586587][T17551] netlink: 60 bytes leftover after parsing attributes in process `syz.6.4284'. [ 595.596555][T17539] tipc: Disabling bearer [ 595.711247][T17568] syzkaller0: entered promiscuous mode [ 595.716939][T17568] syzkaller0: entered allmulticast mode [ 595.791661][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 595.791680][ T28] audit: type=1400 audit(1774228067.231:6743): avc: denied { create } for pid=17576 comm="syz.3.4295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 595.836361][ T3406] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 595.851406][ T3406] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 595.895763][T17585] fido_id[17585]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 596.010827][ T28] audit: type=1400 audit(1774228067.436:6744): avc: denied { ioctl } for pid=17576 comm="syz.3.4295" path="socket:[54512]" dev="sockfs" ino=54512 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 596.351402][ T23] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 596.372679][ T23] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 596.521376][T17624] fido_id[17624]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 596.974332][T17686] tipc: Enabled bearer , priority 0 [ 596.981867][T17686] syzkaller0: entered promiscuous mode [ 596.989489][T17686] syzkaller0: entered allmulticast mode [ 596.999494][T17686] tipc: Resetting bearer [ 597.006482][T17685] tipc: Resetting bearer [ 597.019401][T17685] tipc: Disabling bearer [ 597.178730][T17712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 597.188334][T17712] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 597.801330][T17760] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4370'. [ 598.158710][T17800] netlink: 68 bytes leftover after parsing attributes in process `syz.6.4387'. [ 598.435958][T17827] lo speed is unknown, defaulting to 1000 [ 598.794782][T17862] netlink: 192 bytes leftover after parsing attributes in process `syz.5.4413'. [ 598.841051][T17864] lo speed is unknown, defaulting to 1000 [ 598.911336][T17873] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 598.919975][T17873] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 599.204826][ T7479] usb usb8-port1: attempt power cycle [ 599.914644][T17903] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 599.923688][T17903] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 599.989898][ T9358] gretap0: left allmulticast mode [ 599.999608][ T9358] gretap0: left promiscuous mode [ 600.019006][ T9358] bridge0: port 3(gretap0) entered disabled state [ 600.040507][ T9358] bridge_slave_1: left allmulticast mode [ 600.046342][ T9358] bridge_slave_1: left promiscuous mode [ 600.056963][ T9358] bridge0: port 2(bridge_slave_1) entered disabled state [ 600.067749][ T9358] bridge_slave_0: left allmulticast mode [ 600.073735][ T9358] bridge_slave_0: left promiscuous mode [ 600.079596][ T9358] bridge0: port 1(bridge_slave_0) entered disabled state [ 600.275101][ T9358] bond0 (unregistering): Released all slaves [ 600.283842][ T9358] bond1 (unregistering): Released all slaves [ 600.292350][ T9358] bond2 (unregistering): Released all slaves [ 600.330373][ T9358] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 600.339031][ T9358] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 600.346456][ T9358] batman_adv: batadv0: Removing interface: vlan0 [ 600.384744][ T9358] team0 (unregistering): Port device team_slave_1 removed [ 600.403548][ T9358] team0 (unregistering): Port device team_slave_0 removed [ 600.447960][T17919] tipc: Started in network mode [ 600.452963][T17919] tipc: Node identity b6c5ae64bacc, cluster identity 4711 [ 600.460689][T17919] tipc: Enabled bearer , priority 0 [ 600.468026][T17919] syzkaller0: entered promiscuous mode [ 600.473585][T17919] syzkaller0: entered allmulticast mode [ 600.482889][T17919] tipc: Resetting bearer [ 600.489700][T17918] tipc: Resetting bearer [ 600.497085][T17918] tipc: Disabling bearer [ 600.587545][T17921] syzkaller0: entered promiscuous mode [ 600.593042][T17921] syzkaller0: entered allmulticast mode [ 601.040283][T17949] loop7: detected capacity change from 0 to 16384 [ 601.184224][T17949] loop7: detected capacity change from 16384 to 16383 [ 601.217010][ T9358] IPVS: stop unused estimator thread 0... [ 601.310851][ T7479] usb usb8-port1: unable to enumerate USB device [ 601.471086][T17968] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4453'. [ 601.509154][T17968] bridge0: port 2(bridge_slave_1) entered disabled state [ 601.516528][T17968] bridge0: port 1(bridge_slave_0) entered disabled state [ 601.558010][T17968] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4453'. [ 601.586735][T17971] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4454'. [ 601.728034][T17979] ip6erspan1: entered allmulticast mode [ 601.753307][T17977] tipc: Enabled bearer , priority 0 [ 601.764598][T17977] syzkaller0: entered promiscuous mode [ 601.770560][T17977] syzkaller0: entered allmulticast mode [ 601.786031][T17977] tipc: Resetting bearer [ 601.793195][T17976] tipc: Resetting bearer [ 601.817459][T17976] tipc: Disabling bearer [ 601.986372][T17991] syzkaller0: entered promiscuous mode [ 601.992046][T17991] syzkaller0: entered allmulticast mode [ 602.316365][ T28] audit: type=1326 audit(1774228073.339:6745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18008 comm="syz.5.4473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdcaf7c799 code=0x7ffc0000 [ 602.384314][ T28] audit: type=1326 audit(1774228073.339:6746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18008 comm="syz.5.4473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7efdcaf7c799 code=0x7ffc0000 [ 602.430183][ T28] audit: type=1326 audit(1774228073.339:6747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18008 comm="syz.5.4473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdcaf7c799 code=0x7ffc0000 [ 602.502279][ T28] audit: type=1326 audit(1774228073.339:6748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18008 comm="syz.5.4473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdcaf7c799 code=0x7ffc0000 [ 602.528392][ T28] audit: type=1326 audit(1774228073.339:6749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18008 comm="syz.5.4473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7efdcaf7c799 code=0x7ffc0000 [ 602.553521][T18018] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 602.556385][ T28] audit: type=1326 audit(1774228073.339:6750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18008 comm="syz.5.4473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdcaf7c799 code=0x7ffc0000 [ 602.623442][T18025] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4479'. [ 602.633111][T18018] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 602.646994][ T28] audit: type=1326 audit(1774228073.339:6751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18008 comm="syz.5.4473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdcaf7c799 code=0x7ffc0000 [ 603.222734][T18055] netlink: 'syz.5.4493': attribute type 8 has an invalid length. [ 603.233147][T18055] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 603.363780][T18071] syzkaller0: entered promiscuous mode [ 603.369389][T18071] syzkaller0: entered allmulticast mode [ 604.460381][T18105] syzkaller0: entered promiscuous mode [ 604.466101][T18105] syzkaller0: entered allmulticast mode [ 604.779008][T18110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 604.788937][T18110] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 604.839594][ T23] usb usb8-port1: attempt power cycle [ 605.511634][T18134] syzkaller0: entered promiscuous mode [ 605.517278][T18134] syzkaller0: entered allmulticast mode [ 605.855645][T18150] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4532'. [ 605.866803][T18150] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4532'. [ 605.907911][T18154] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4534'. [ 606.011752][T18158] syzkaller0: entered promiscuous mode [ 606.017547][T18158] syzkaller0: entered allmulticast mode [ 606.580125][T18176] syzkaller0: entered promiscuous mode [ 606.585973][T18176] syzkaller0: entered allmulticast mode [ 606.664551][T18178] vlan2: entered promiscuous mode [ 606.674216][T18178] macvlan0: entered promiscuous mode [ 606.891206][ T23] usb usb8-port1: unable to enumerate USB device [ 607.220006][T18198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 607.237009][T18198] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 607.252727][T18213] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4560'. [ 607.358607][T18225] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 607.768383][T18241] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4570'. [ 607.869523][T18250] netlink: 336 bytes leftover after parsing attributes in process `syz.7.4574'. [ 608.997931][T18314] usb usb1: usbfs: process 18314 (syz.3.4600) did not claim interface 0 before use [ 609.193790][T18337] syzkaller0: entered promiscuous mode [ 609.199470][T18337] syzkaller0: entered allmulticast mode [ 609.214773][T18339] bridge0: port 3(team0) entered disabled state [ 609.222946][T18339] team0 (unregistering): left allmulticast mode [ 609.229345][T18339] team_slave_0: left allmulticast mode [ 609.235494][T18339] team_slave_1: left allmulticast mode [ 609.241019][T18339] team0 (unregistering): left promiscuous mode [ 609.247849][T18339] team_slave_0: left promiscuous mode [ 609.253493][T18339] team_slave_1: left promiscuous mode [ 609.259233][T18339] bridge0: port 3(team0) entered disabled state [ 609.268938][T18339] team0 (unregistering): Failed to send options change via netlink (err -105) [ 609.279031][T18339] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 609.290277][T18339] team0 (unregistering): Port device team_slave_0 removed [ 609.290417][ T2995] ================================================================== [ 609.305745][ T2995] BUG: KCSAN: data-race in _prb_read_valid / data_alloc [ 609.312825][ T2995] [ 609.315159][ T2995] write to 0xffffffff86c780f8 of 8 bytes by task 18339 on cpu 1: [ 609.322961][ T2995] data_alloc+0x310/0x390 [ 609.327324][ T2995] prb_reserve+0x8d7/0xae0 [ 609.331748][ T2995] vprintk_store+0x54a/0x910 [ 609.336340][ T2995] vprintk_emit+0x1a4/0x600 [ 609.340847][ T2995] vprintk_default+0x26/0x30 [ 609.345436][ T2995] vprintk+0x1d/0x30 [ 609.349335][ T2995] _printk+0x79/0xa0 [ 609.353230][ T2995] __netdev_printk+0x310/0x370 [ 609.358009][ T2995] netdev_info+0xa6/0xd0 [ 609.362261][ T2995] team_port_del+0x7c6/0x840 [ 609.366949][ T2995] team_uninit+0x7d/0x120 [ 609.371407][ T2995] unregister_netdevice_many_notify+0x128a/0x1710 [ 609.378093][ T2995] rtnl_dellink+0x43f/0x640 [ 609.382769][ T2995] rtnetlink_rcv_msg+0x64b/0x720 [ 609.387802][ T2995] netlink_rcv_skb+0x123/0x220 [ 609.392660][ T2995] rtnetlink_rcv+0x1c/0x30 [ 609.397074][ T2995] netlink_unicast+0x5c0/0x690 [ 609.401842][ T2995] netlink_sendmsg+0x5c8/0x6f0 [ 609.406835][ T2995] ____sys_sendmsg+0x563/0x5b0 [ 609.411620][ T2995] ___sys_sendmsg+0x195/0x1e0 [ 609.416308][ T2995] __x64_sys_sendmsg+0xd4/0x160 [ 609.421168][ T2995] x64_sys_call+0x194c/0x3020 [ 609.425934][ T2995] do_syscall_64+0x12c/0x370 [ 609.430526][ T2995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.436602][ T2995] [ 609.438929][ T2995] read to 0xffffffff86c780f8 of 16 bytes by task 2995 on cpu 0: [ 609.446664][ T2995] _prb_read_valid+0x1bc/0x950 [ 609.451442][ T2995] prb_read_valid+0x3c/0x60 [ 609.456133][ T2995] syslog_print+0x109/0x560 [ 609.460824][ T2995] do_syslog+0x52b/0x7f0 [ 609.465159][ T2995] __x64_sys_syslog+0x41/0x50 [ 609.470011][ T2995] x64_sys_call+0x2b9e/0x3020 [ 609.474867][ T2995] do_syscall_64+0x12c/0x370 [ 609.479558][ T2995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.485539][ T2995] [ 609.487859][ T2995] Reported by Kernel Concurrency Sanitizer on: [ 609.494183][ T2995] CPU: 0 UID: 0 PID: 2995 Comm: klogd Tainted: G W syzkaller #0 PREEMPT(full) [ 609.504717][ T2995] Tainted: [W]=WARN [ 609.508601][ T2995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 609.518755][ T2995] ================================================================== [ 609.532984][T18339] team0 (unregistering): Failed to send options change via netlink (err -105) [ 609.542457][T18339] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 609.555166][T18339] team0 (unregistering): Port device team_slave_1 removed