last executing test programs: 2m21.584270457s ago: executing program 4 (id=5): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000180)={r1, 0xd}, &(0x7f00000001c0)=0x8) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x10b, 0x4, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000), 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) exit(0x0) r2 = syz_open_dev$evdev(&(0x7f0000000140), 0x0, 0x0) syz_usb_disconnect(r2) (async) syz_usb_connect(0x6, 0x24, &(0x7f0000000740)=ANY=[], 0x0) ioctl$EVIOCRMFF(r2, 0x40085503, &(0x7f00000000c0)=0xaf) (async) r3 = socket$kcm(0x29, 0x2, 0x0) (async) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) (async) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000001c00010400000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000090495000100aaaaaa47b82aaaaa"], 0x28}}, 0x0) (async) sendmsg$kcm(r3, &(0x7f0000000400)={&(0x7f0000000040)=@in={0x2, 0x4e23, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000300)="fb4f8398e85b091c2c064e4ac58a9396c99ae6f6654f302abc89c4d9ebc06a60ac394dd419330625119ab574a30bb25b21dbc7aa7d90c6dccbf6854bf3b5dacb96d7caa600837c6573a84aaea2a210f2ea1935476bb0fc48c0fd489094ef73c7d301a6649d039c124a1c452d57d11f19b7e01cd5be7ca12397624c965be9a0026f5aedec1f164d536f60265ed2cd01e757ba9d78e1792a8285db99e0edb200f52365db12caabe7ccfb2651082bb9753340bd7aec4cdbe215e559efcaa52142e38b3bb6c14ed6219eb21adc86fbd4f6", 0xcf}, {&(0x7f00000000c0)="c4323f74936a92f82d76d191594a3d91a17f5841f9e6d592e7c9bf53e7afab0d7b3a3994bf7de6c3cd39e768eb30a02db554bc6b", 0x34}, {&(0x7f0000000100)="80ba9a7e6ccb4aa44d4f783c161b1d6c3d6067ee958ce0ac1b326fb86ccde899ea0af68d2230b124283eeaff5790e20f130c7a9c3d6a4924c073f218f5b8be0bc2", 0x41}, {&(0x7f0000000200)="2f77780670865c56f256e7ddb89df81c029232af4da34c34e82da4064ca8b903da21b2d30dabf2ac93a378c04f12da90368d33519ce83ca50ed3904bbf9e0b7ac14b6fa3abd6615b931df98aa86c68", 0x4f}], 0x4, &(0x7f0000001a80)=ANY=[@ANYBLOB="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"], 0x15e0}, 0x20000000) 2m20.896416925s ago: executing program 4 (id=22): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0xa0, &(0x7f0000000240)={0x3, 0x11, 0x5, 0x535e, 0x7}, 0x8, 0x6, 0x81, 0x0, 0x1, 0x101, 0x0}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7, 0x0, 0x3}) bind$bt_hci(r2, &(0x7f0000000580)={0x1f, 0x0, 0x1}, 0x6) socket$netlink(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x8800, &(0x7f0000000140), 0x1, 0x520, &(0x7f0000000680)="$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") r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000c80)='./file1\x00', 0x40, 0x5c) ioctl$FITRIM(r3, 0xc0185879, &(0x7f0000000040)={0x8, 0x40000cca8, 0x4010}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r4, 0xc0185879, &(0x7f0000000000)={@desc={0x1, 0x0, @desc4}}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="400000002000010027bd7000000000000a002040000000070000000014000200fe88000000000000000000000000010108000d000800000009000e"], 0x40}, 0x1, 0x0, 0x0, 0x24048844}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000100)='./file0\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f0000000100)=[{r7}], 0x1, 0x0, 0x0, 0x0) dup2(r6, r7) shutdown(r7, 0x1) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/../file0/file0\x00') getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000780)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000240)=0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4805}, 0x20000050) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a30000000000900010073797a3000000000140003800800014000000000080002400000000014000000110001"], 0x68}}, 0x0) 2m19.984666785s ago: executing program 4 (id=30): unshare(0x2c020400) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@ipv6_delroute={0x2c, 0x19, 0x1, 0x1020, 0x0, {0xa, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2e00}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x3}, @RTA_EXPIRES={0x8, 0x17, 0xffffffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000090}, 0x4000050) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00U\x00=\t\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00', @ANYRES32=r3, @ANYBLOB="20000280", @ANYRES32=r1, @ANYBLOB="0000000000000000000000000a000000000000000000001420000100", @ANYRES32=r1, @ANYBLOB="00000000ac14f3ad00000000000000000000000086dd"], 0x58}}, 0x0) execve(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="28010000100007000000000200000000ff020000000000000000000000000001e00000020000000000000000000000004e200000000000000000000002000000", @ANYRES32, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc00000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000700000000000000000000000000000000000400fdffffffe80a000000000000000000000a000200700000000000000014000e00fe8000000000000000000000000000bb24000900"], 0x128}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000700)=@newsa={0x10c, 0x1a, 0x7, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x300, 0x3, 0x2, 0xfeffff7f00000000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @XFRMA_IF_ID={0x8, 0x1f, 0x3}]}, 0x10c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x3, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000040)='syzkaller\x00', 0x1, 0x99, &(0x7f0000000300)=""/153, 0x0, 0xc, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) 2m19.124802453s ago: executing program 4 (id=38): r0 = syz_io_uring_setup(0x237, &(0x7f0000000480)={0x0, 0x8901, 0x400, 0x0, 0x2cf}, &(0x7f0000000040)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x5, 0x12, 0x0, 0x3}, 0x9c) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x24, 0x2007, @fd, 0x800, 0x0, 0x0, 0x18, 0x0, {0x2}}) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) 2m19.108367444s ago: executing program 32 (id=38): r0 = syz_io_uring_setup(0x237, &(0x7f0000000480)={0x0, 0x8901, 0x400, 0x0, 0x2cf}, &(0x7f0000000040)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x5, 0x12, 0x0, 0x3}, 0x9c) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x24, 0x2007, @fd, 0x800, 0x0, 0x0, 0x18, 0x0, {0x2}}) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) 1m38.027907264s ago: executing program 3 (id=454): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000140)={r0}, 0x8) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000180)=[r0], 0x1) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00', @ANYRES16=r2, @ANYBLOB="871000000000000000000100000008000300000001000500060000000000050005"], 0x30}, 0x1, 0x0, 0x0, 0x94}, 0x8808) 1m38.015021724s ago: executing program 3 (id=455): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_io_uring_setup(0x497, &(0x7f0000000440)={0x0, 0x77bf, 0x10, 0x0, 0x285}, &(0x7f00000001c0)=0x0, &(0x7f00000003c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}) io_uring_enter(r0, 0x3498, 0x969, 0xffff000000000000, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x7042, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x80008, 0xc0}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000}, 0x94) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x2219) 1m37.891415341s ago: executing program 3 (id=456): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000600142603600e1208000f0000000401a80016002000024006000a00035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc", 0xd8}], 0x1}, 0x0) 1m37.74784802s ago: executing program 3 (id=457): socket$inet6(0xa, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="84010000100001002bad700000000000fc0100000000000000000000000000000a0101000000000000000000000000000000ecdf00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x184}}, 0x4050) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x28002) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') 1m37.663049564s ago: executing program 3 (id=458): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="180200000400eaff00000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007500000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xfda8, 0xfffffffffffffe5d, &(0x7f00000000c0)="5fd63edbfd8a4a6077fd87686f9a", 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r1 = socket$inet6(0x10, 0x3, 0x0) write(r1, &(0x7f0000000040)="2400000021002551241c0165ff00fc020200000000100f000ee1000c08000b0003000000", 0x24) unshare(0x2c020400) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xfecc) syz_open_dev$usbmon(&(0x7f0000001100), 0x8e53, 0x40400) ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) r2 = syz_io_uring_setup(0x136f, &(0x7f00000001c0)={0x0, 0x49fa, 0x10, 0x0, 0x4e}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_group_source_req(r5, 0x0, 0x2c, &(0x7f0000000000)={0x1, {{0x2, 0x4e21, @empty=0xe0000000}}, {{0x2, 0x4e25, @broadcast}}}, 0x108) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0xc000400) mq_open(&(0x7f0000000200)='\xf7\x03\x85\xa5n\x00\xc9\xff\x00\x00', 0x842, 0x38b, 0x0) close(r7) unshare(0x28000600) close_range(r6, 0xffffffffffffffff, 0x2) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r5, 0x4018f50b, &(0x7f0000001080)={0x0, 0x7fffffffffffffff, 0xa}) r8 = socket(0x13, 0x80805, 0x6) getsockopt$bt_hci(r8, 0x84, 0x85, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) 1m37.439866566s ago: executing program 3 (id=460): r0 = socket$inet_icmp(0x2, 0x2, 0x1) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCGICOUNT(r1, 0x5409, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) r3 = syz_io_uring_setup(0x5caf, &(0x7f00000000c0)={0x0, 0xc439, 0x2, 0x40000006, 0xe2}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x3, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x59, 0x0, @fd=r2, 0x0, 0x0, 0x0, {0x3406}, 0x1, {0x0, r6}}) io_uring_enter(r3, 0x5b2, 0x8d99, 0x2, 0x0, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x48042, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000180)=0x9) ioctl$VT_RESIZEX(r7, 0x560a, &(0x7f0000000140)={0xfff9, 0x2, 0x0, 0x300, 0x9, 0x4}) close(r0) 1m22.456736764s ago: executing program 33 (id=460): r0 = socket$inet_icmp(0x2, 0x2, 0x1) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCGICOUNT(r1, 0x5409, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) r3 = syz_io_uring_setup(0x5caf, &(0x7f00000000c0)={0x0, 0xc439, 0x2, 0x40000006, 0xe2}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x3, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x59, 0x0, @fd=r2, 0x0, 0x0, 0x0, {0x3406}, 0x1, {0x0, r6}}) io_uring_enter(r3, 0x5b2, 0x8d99, 0x2, 0x0, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x48042, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000180)=0x9) ioctl$VT_RESIZEX(r7, 0x560a, &(0x7f0000000140)={0xfff9, 0x2, 0x0, 0x300, 0x9, 0x4}) close(r0) 29.853543191s ago: executing program 2 (id=1198): unshare(0x6a040000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) sendmsg$NFT_BATCH(r2, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0x0, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0xfffffffffffffda3, &(0x7f0000000180)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x1}]}, 0x20}}, 0x4000000) syz_io_uring_setup(0x237, &(0x7f0000000480)={0x0, 0x8901, 0x400, 0x0, 0x2cf}, &(0x7f0000000040)=0x0, &(0x7f0000000600)=0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r7, 0x0, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0}, &(0x7f00000003c0)=0xc) sendmsg$nl_xfrm(r7, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f0000000500)=@migrate={0x84, 0x21, 0x800, 0x70bd25, 0x25dfdbfc, {{@in6=@mcast1, @in6=@local, 0x4e23, 0x3, 0x4e21, 0x4, 0xa, 0x0, 0xa0, 0x2b, 0x0, r8}, 0x6e6bb4, 0x2}, [@etimer_thresh={0x8, 0xc, 0x8001}, @encap={0x1c, 0x4, {0xfffffffffffffffd, 0x4e24, 0x4e23, @in6=@private1={0xfc, 0x1, '\x00', 0x1}}}, @replay_thresh={0x8, 0xb, 0x7}, @proto={0x5, 0x19, 0x32}]}, 0x84}}, 0x20000040) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r7, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2a78f1f924e53931}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)={0x4c, r9, 0xee25546317ad1d9f, 0x70bd2a, 0x1, {}, [@L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_FD={0x8}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1ff}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x9}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x7}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x2004c004) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) sendmsg$rds(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000800}, 0x4000008) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r10, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r10, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x24, 0x2007, @fd, 0x800, 0x0, 0x0, 0x18, 0x0, {0x2}}) 29.587372335s ago: executing program 2 (id=1203): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x400, 0x0, 0x25dfdbfc, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000001}, 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = memfd_create(&(0x7f0000000080), 0x0) splice(r2, 0x0, r4, 0x0, 0x1ea9, 0x9) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x13f, 0x1}}, 0x20) r5 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x70c80, 0x181) ioprio_set$pid(0x2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x7ffe, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) setreuid(0xee01, 0x0) ioprio_get$pid(0x3, 0x0) socket$unix(0x1, 0x5, 0x0) openat$cgroup_ro(r5, 0x0, 0x275a, 0x0) 29.451905863s ago: executing program 2 (id=1207): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='comm\x00') write$tcp_mem(r0, 0x0, 0x0) r1 = syz_io_uring_setup(0x237, &(0x7f0000000480)={0x0, 0x8901, 0x400, 0x0, 0x2cf}, &(0x7f0000000040)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) sendmsg$rds(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x20000800}, 0x4000008) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x5, 0x12, 0x0, 0x3}, 0x9c) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) r7 = pidfd_getfd(r6, r6, 0x0) r8 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9) setns(r7, 0x66020000) syz_clone(0x498144ee5f60e149, 0x0, 0x0, 0x0, 0x0, 0x0) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x24, 0x2007, @fd, 0x800, 0x0, 0x0, 0x18, 0x0, {0x2}}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r1, 0x18, &(0x7f0000000280)={0x0, r4, 0x1c, {0x7, 0xa42}, 0x80}, 0x1) 28.868102645s ago: executing program 2 (id=1212): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x44, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x44000}, 0x0) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./bus\x00', 0x2000414, &(0x7f00000005c0)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c0048451600000000007a19d7e4588c8665bf5c237d9e1e57b15d5132e7b10d1ae02d29ca3656c4e7832d892e04f4c2abbebc4ee41c29c6266f3ab658b3d5c3", @ANYRES64=0x0, @ANYRESHEX, @ANYRESHEX, @ANYRESDEC], 0x1, 0x2b8, &(0x7f0000000800)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105142, 0x2c) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x100000b, 0x2013, r0, 0x0) syz_clone(0x4011, 0x0, 0xc, 0x0, 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000440)=ANY=[], 0x32600) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xfff9}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x44, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x44000}, 0x0) (async) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./bus\x00', 0x2000414, &(0x7f00000005c0)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c0048451600000000007a19d7e4588c8665bf5c237d9e1e57b15d5132e7b10d1ae02d29ca3656c4e7832d892e04f4c2abbebc4ee41c29c6266f3ab658b3d5c3", @ANYRES64=0x0, @ANYRESHEX, @ANYRESHEX, @ANYRESDEC], 0x1, 0x2b8, &(0x7f0000000800)="$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") (async) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105142, 0x2c) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x100000b, 0x2013, r0, 0x0) (async) syz_clone(0x4011, 0x0, 0xc, 0x0, 0x0, 0x0) (async) write$cgroup_subtree(r0, &(0x7f0000000440)=ANY=[], 0x32600) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xfff9}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) 28.590701781s ago: executing program 2 (id=1216): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x7, 0x4, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}, 0x50) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000020603000000000000000000000000001400078008001240000000000500150002000000050001000600000005000500020000000500040000000000090002"], 0x4c}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a030000000000"], 0xa4}}, 0x0) 28.085267988s ago: executing program 2 (id=1229): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 28.019219402s ago: executing program 34 (id=1229): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 1.949080862s ago: executing program 0 (id=1727): syz_emit_ethernet(0x10c4, &(0x7f0000000a80)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x80}, @void, {@ipv6={0x86dd, @dccp_packet={0x7, 0x6, "c6f2d4", 0x108e, 0x21, 0xff, @private1, @dev={0xfe, 0x80, '\x00', 0x12}, {[@hopopts={0x3c, 0x0, '\x00', [@pad1]}, @fragment={0x6, 0x0, 0x6, 0x1, 0x0, 0x3, 0x67}, @dstopts={0x73}, @dstopts={0x11}, @hopopts={0x67, 0xb, '\x00', [@jumbo={0xc2, 0x4, 0x1}, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}, @jumbo={0xc2, 0x4, 0x1}, @calipso={0x7, 0x20, {0x8569435ef11d71c3, 0x6, 0x28, 0x3, [0x0, 0x3, 0x4]}}, @padn={0x1, 0x1, [0x0]}, @pad1, @jumbo={0xc2, 0x4, 0x857}]}], {{0x4e20, 0x4e21, 0x4, 0x1, 0x3, 0x0, 0x0, 0x4, 0x7, "698a9d", 0xe, 'nkc'}, "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"}}}}}}, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x33, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5871, 0x1, @perf_config_ext={0x6, 0x400000008}, 0x4c58, 0x6, 0x0, 0x1, 0xe, 0x20005, 0x10, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) creat(&(0x7f0000000000)='./bus\x00', 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000800)={'filter\x00', 0xb001, 0xff03, 0x3a8, 0x0, 0x1d0, 0x0, 0x2c0, 0x2c0, 0x2c0, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xdf}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1d0}}, {{@uncond, 0xc0, 0xe8, 0x0, {0x0, 0x1e03}}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x46e, 0xfffc}}}, {{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x3f8) 1.784292171s ago: executing program 0 (id=1733): mknodat(0xffffffffffffff9c, &(0x7f0000000400)='./file7\x00', 0x21c0, 0x103) socket$inet(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd700021dcdf10270000000c00018008000100", @ANYRES32, @ANYBLOB="180001801400020064756d"], 0x38}, 0x1, 0x0, 0x0, 0xc4}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x70bc2b, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}, {0x12, 0xd}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xffffffffffffffcd}}, @qdisc_kind_options=@q_red={{}, {0x0, 0x2, [@TCA_RED_PARMS={0x0, 0x1, {0x6, 0x8000, 0x9, 0xbf, 0x1c, 0x1a, 0x4}}]}}, @TCA_RATE={0x0, 0x5, {0x10}}]}, 0x34}}, 0x0) 1.731163574s ago: executing program 0 (id=1736): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) add_key(&(0x7f0000000300)='dns_resolver\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000200)="75a1d70300", 0x5, 0xfffffffffffffffe) 1.443542301s ago: executing program 0 (id=1747): unshare(0x6a040000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) sendmsg$NFT_BATCH(r2, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0x0, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0xfffffffffffffda3, &(0x7f0000000180)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x1}]}, 0x20}}, 0x4000000) syz_io_uring_setup(0x237, &(0x7f0000000480)={0x0, 0x8901, 0x400, 0x0, 0x2cf}, &(0x7f0000000040)=0x0, &(0x7f0000000600)=0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0}, &(0x7f00000003c0)=0xc) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f0000000500)=@migrate={0x84, 0x21, 0x800, 0x70bd25, 0x25dfdbfc, {{@in6=@mcast1, @in6=@local, 0x4e23, 0x3, 0x4e21, 0x4, 0xa, 0x0, 0xa0, 0x2b, 0x0, r7}, 0x6e6bb4, 0x2}, [@etimer_thresh={0x8, 0xc, 0x8001}, @encap={0x1c, 0x4, {0xfffffffffffffffd, 0x4e24, 0x4e23, @in6=@private1={0xfc, 0x1, '\x00', 0x1}}}, @replay_thresh={0x8, 0xb, 0x7}, @proto={0x5, 0x19, 0x32}]}, 0x84}}, 0x20000040) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2a78f1f924e53931}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)={0x4c, r8, 0xee25546317ad1d9f, 0x70bd2a, 0x1, {}, [@L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_FD={0x8}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1ff}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x9}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x7}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x2004c004) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) sendmsg$rds(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000800}, 0x4000008) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x5, 0x12, 0x0, 0x3}, 0x9c) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r9, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r9, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x24, 0x2007, @fd, 0x800, 0x0, 0x0, 0x18, 0x0, {0x2}}) 1.44333403s ago: executing program 5 (id=1748): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_wait(0xffffffffffffffff, &(0x7f0000000140)=[{}], 0x1, 0xffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) pselect6(0x40, &(0x7f0000001fc0)={0xd8, 0x6000, 0x9557, 0x68, 0x3908, 0xfffffffffffffff7, 0x8, 0x5}, 0x0, 0x0, 0x0, 0x0) 994.417665ms ago: executing program 0 (id=1750): r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r0, 0x0, 0x1400c0c0) 775.539408ms ago: executing program 0 (id=1753): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) open(&(0x7f0000000400)='./file0\x00', 0x64842, 0x2) r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x101400, 0xad) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfff, 0x1, @perf_config_ext={0x9, 0x7ff7fffd}, 0x40, 0x1, 0xfffffffc, 0x6, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x7000000}, 0x50) lseek(r0, 0x100000001, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000040), 0x7, 0xc0041) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xc, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000140)="76ea092000000000009bb5606c1e", 0x0, 0x2f00, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$LOOP_SET_DIRECT_IO(r2, 0x4c08, 0x591) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@getqdisc={0x24, 0x26, 0x705, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x1, 0xffe0}, {0x10, 0x8}, {0xfff2, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) bind$inet(r5, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f00000002c0)='veth1_to_bridge\x00', 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x20, &(0x7f0000000180)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000280)=0x10) sendmmsg$inet(r5, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000280)="5338a3848b25e258a25f9dae13edec", 0xf}], 0x1}}], 0x1, 0x20008000) recvmsg(r5, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)=""/103, 0x67}, {&(0x7f00000005c0)=""/214, 0xd6}], 0x2}, 0x103) socket$nl_generic(0x10, 0x3, 0x10) 770.360448ms ago: executing program 6 (id=1754): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, 0x0, 0x0) setsockopt(r0, 0x84, 0x81, &(0x7f0000000040)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000001080)={0xe}, 0x1) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000000c0), 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x8020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) write$binfmt_register(r2, &(0x7f00000003c0)={0x3a, 'syz1', 0x3a, 'E', 0x3a, 0x5, 0x3a, 'L%', 0x3a, '!', 0x3a, './file0'}, 0x2a) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRES16=r1], 0x448}}, 0x0) sendmmsg$inet(r1, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100), 0x2}}], 0x40000000000003a, 0x0) 725.05355ms ago: executing program 7 (id=1756): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x1cb142, 0x84) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sigaltstack(&(0x7f0000000080)={0x0, 0x3}, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4) r1 = gettid() socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) timer_create(0x8, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) 702.949631ms ago: executing program 6 (id=1757): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x20, 0xff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, 0x0, 0x93}, 0xe) ppoll(&(0x7f0000000100)=[{r0, 0x1a0}], 0x1, 0x0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r0, 0x1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="d70a000010000000620a00000000000007000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x3, &(0x7f000000cf3d)=""/195}, 0x23) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) readv(r2, &(0x7f0000003cc0)=[{&(0x7f0000001bc0)=""/4096, 0x1000}], 0x1000000000000048) signalfd4(r2, &(0x7f0000000040)={[0x7fffffffffffffff]}, 0x8, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x1008041, &(0x7f0000000000)=ANY=[], 0x0, 0x2cf, &(0x7f00000000c0)="$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") 601.799247ms ago: executing program 7 (id=1758): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TRIM(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f6, 0x400, 0x70bd29, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x4044880}, 0x4) (fail_nth: 1) 404.771698ms ago: executing program 5 (id=1759): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000740)={'veth0_virt_wifi\x00', &(0x7f00000006c0)=@ethtool_gstrings={0x1b, 0x5, 0x300}}) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f0000000100)={'broute\x00', 0x0, 0x0, 0x0, [0x8, 0x68, 0x2, 0x0, 0x3, 0xd], 0x1, &(0x7f0000000000)=[{}, {}, {}], 0x0, [{}]}, 0x88) (async, rerun: 32) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000740)=@raw={'raw\x00', 0x8, 0x3, 0x2a0, 0x130, 0x11, 0x148, 0x130, 0x0, 0x208, 0x2a8, 0x2a8, 0x208, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x110, 0x130, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x0, 0x18}}}, @common=@unspec=@limit={{0x48}, {0x5, 0x5, 0x4, 0x3, 0x9, 0x3, 0xfffffffffffffff8}}]}, @unspec=@NOTRACK={0x20}}, {{@ip={@multicast2, @multicast1, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00', {}, {0xff}}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x12, 0x9, 0x5, 0x1, 'netbios-ns\x00', 'syz0\x00', {0x4a7}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x300) (rerun: 32) 391.650369ms ago: executing program 7 (id=1760): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, 0x0, 0x4000000) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000580)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x29, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) 377.520399ms ago: executing program 7 (id=1761): r0 = socket$nl_rdma(0x10, 0x3, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x7ff, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="00010000031401"], 0x100}, 0x1, 0x0, 0x0, 0x4040024}, 0x0) 345.373681ms ago: executing program 6 (id=1763): socket$inet6(0xa, 0x2, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x9}]}], {0x14}}, 0x64}}, 0x0) 344.772221ms ago: executing program 5 (id=1764): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000001b1c0)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'pim6reg1\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'dvmrp0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000040)={'wg1\x00', {0x2, 0x4e24, @multicast1}}) close(0x3) 319.734953ms ago: executing program 6 (id=1765): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000040), 0x2}], 0x1, 0x0, 0x0, 0x0) futex(&(0x7f0000000040), 0x1, 0x0, 0x0, 0x0, 0x0) 280.131625ms ago: executing program 1 (id=1766): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0xc64}, 0x10014, 0x0, 0x800000, 0x0, 0x4, 0x2, 0x6, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x6a) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a0000008700"], 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x400000, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}}}, 0xb8}}, 0x2c000010) sendfile(r4, r4, 0x0, 0x1) r6 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r6, &(0x7f0000000040), 0x10) r7 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r7, &(0x7f0000000080), 0x10) r8 = syz_io_uring_setup(0x4172, &(0x7f0000000780)={0x0, 0x4f5c, 0x10100}, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27}) io_uring_enter(r8, 0x567, 0x0, 0x0, 0x0, 0x0) sendmmsg(r7, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) accept4$unix(r6, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@newqdisc={0x45c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r2, {0x3, 0x800e}, {}, {0x2, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x0, 0x5, 0x401, 0x0, 0x9, 0x18, 0x1, 0x80, 0x7000000, 0x5, 0x8, 0x9, 0x8, 0xd8c, 0x10f8000, 0x1, 0x4, 0x6, 0xf, 0x7ff, 0x1, 0x88d, 0x8, 0xfffffff9, 0x7, 0x6, 0x7f, 0x4, 0xc824, 0x4, 0xe3, 0x6, 0x0, 0xe, 0x7, 0xe, 0x101, 0xf, 0x0, 0x7, 0x8, 0x6, 0x4, 0x3, 0x7fb, 0xe55, 0x5, 0x4b19, 0x8, 0x8, 0xc5c, 0x9, 0x3, 0x5, 0x9, 0xfffffff8, 0x9, 0x5, 0x9, 0x2, 0x8, 0x2, 0xfffffff7, 0x1, 0x6a42, 0xffffffff, 0xf, 0x4, 0x3ff, 0x7f, 0x3, 0x81, 0x10, 0x3, 0x400, 0x9, 0x7ff, 0x5, 0x40, 0x2, 0x2e, 0x0, 0x1, 0x5, 0xcf9, 0x2, 0x0, 0x4, 0x4, 0x0, 0x4, 0x3, 0x7ff, 0x5, 0xfffffffc, 0x3, 0x2, 0x6, 0xa5, 0xfffff000, 0x2, 0x6, 0x1, 0x8, 0x80000000, 0x800, 0x9, 0x6, 0x2, 0x0, 0x80, 0x3, 0xfffffffd, 0xfff, 0x7f, 0x7, 0x2, 0x7, 0x1, 0x89c, 0x9fae562, 0x6, 0x5, 0xff, 0x7, 0x401, 0x1, 0x7, 0x9, 0x7, 0x3ff, 0x800, 0x2, 0x3, 0x6, 0xc71, 0x81, 0x80000000, 0x3ff, 0xb, 0x7, 0x2, 0x7, 0x200, 0x2, 0x4, 0x8000, 0xe265, 0x7fffffff, 0x0, 0x0, 0x2e, 0xc, 0x7, 0x0, 0xc88f, 0x2, 0xffffffff, 0x6, 0x5, 0x8000, 0xe, 0xfffffff9, 0x6, 0x8, 0x990, 0x800, 0xfa95, 0xf0b, 0x1, 0xfffffffa, 0xb, 0x5, 0x2, 0x7ff, 0x8, 0x5, 0x1, 0x10000, 0xd41b, 0x128b5072, 0xf, 0x4, 0xf918, 0xfff, 0x3, 0x8, 0x2, 0x0, 0x0, 0xff, 0xb, 0x0, 0x96a3, 0x1, 0x8001, 0x7, 0x4, 0x1, 0x9, 0x6, 0x1000000, 0x3, 0x5, 0x631, 0x8001, 0x3, 0x10001, 0x44c, 0x5827, 0xa99, 0x3, 0x400, 0x0, 0xfff, 0x7, 0x10000000, 0x10, 0x3, 0x0, 0xf750, 0x3, 0x4, 0x0, 0xb78b, 0x1, 0x3, 0x10000000, 0x7, 0x8, 0x4, 0x2, 0x7, 0x4, 0x5, 0xb, 0x0, 0xfffffff9, 0xffff, 0x81, 0x9, 0x6, 0x3, 0x19f2, 0x89d, 0xe, 0x1, 0x7, 0x13, 0x81, 0x58783dd6, 0xed2, 0x5, 0x7, 0xae]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x4a, 0xa0862ae33a3ebe6c, 0xdf19, 0x4, 0x4, 0xfffffffc}, {0x81, 0x1, 0x0, 0x3, 0x0, 0x1}, 0x3, 0x67c3, 0x8cb}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x20008091}, 0x4000000) fsopen(&(0x7f0000000140)='ufs\x00', 0x1) 279.658445ms ago: executing program 7 (id=1767): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, 0x0, 0x0) setsockopt(r0, 0x84, 0x81, &(0x7f0000000040)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000001080)={0xe}, 0x1) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000000c0), 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x8020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) write$binfmt_register(r2, &(0x7f00000003c0)={0x3a, 'syz1', 0x3a, 'E', 0x3a, 0x5, 0x3a, 'L%', 0x3a, '!', 0x3a, './file0'}, 0x2a) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRES16=r1], 0x448}}, 0x0) sendmmsg$inet(r1, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100), 0x2}}], 0x40000000000003a, 0x0) 232.258777ms ago: executing program 6 (id=1768): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x3}, 0x6025, 0x4005, 0xb, 0x0, 0x1, 0x3000, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000009110000000000000950000000000000000356a3cc2b5c1ca2303000000978b7f27c66ff43978e9b2257497b69367"], &(0x7f0000000d40)='syzkaller\x00'}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x18, 0x7ffc1fff}]}) rt_tgsigqueueinfo(0x0, 0x0, 0x7, 0x0) memfd_create(&(0x7f0000000ec0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'e\xe5\x8f\xf8\xd2\x1c\xc0\xfb\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6\x03\x00\x00\x00A\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xf2\xde\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7yn\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xefCGa\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcas\xf4D\xd4\xd0s\r3\xcb\x9a&\xdf+(\xc9S\x9eL5\x84\xb1\x90pN\xe7/\r\b\x9a\xf13Q\xf9\xdf\x7fX\xa0\xafK\xefh\xbfOv\x9bh\xb3\xc0\xf5\x80\xba\"@\'\x02\xafi\xeaE\xa6a6F\xde\xd4\xfa\x84\xe4+A\xb7\xa2\x8f\xc9\xee|xxn\xefw\x93]%\xd0\x19\x132\x86\xabn\xfe\x91\xb6Cl\xcf\x04\x1cq\xc1\x1d~\x8d\x01\x83\x93_\x83\x8a`v\xb0K,|S\xe4\xba\xb1\f\xc8`\xa6s\xad\x11\xd4wG\x80u\x87u\xff\x87\xee', 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x1c161, 0x10000, 0x0, 0x6, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r1 = socket(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x8604, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x1c161, 0x2, 0x0, 0x6, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fspick(r2, &(0x7f00000000c0)='.\x00', 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001500)=@raw={'raw\x00', 0x8, 0x3, 0xb30, 0x1c0, 0x43, 0xa0, 0x0, 0x98, 0xa98, 0x178, 0x178, 0xa98, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x1a0, 0x1c0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@quota={{0x38}, {0x300, 0x0, 0x3, {0x100000001}}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x898, 0x8d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x1, 'netbios-ns\x00'}}, @common=@unspec=@u32={{0x7e0}, {[{[{0x9}, {0x3}, {0x1, 0x1}, {0x0, 0x3}, {0x4, 0x2}, {0xb1d}, {0x3}, {0x8}, {0x2, 0x3}, {0x3}, {0x103}], [{0xe8f3, 0x5}, {0x1d, 0x6}, {0x4, 0x8}, {0x0, 0x4}, {0x4, 0xc3e}, {0x1, 0x100}, {0x6, 0x7}, {0x3, 0x3}, {0xf2, 0x3}, {0x3ff, 0x8}, {0x10, 0x3}], 0x6, 0x6}, {[{0x80, 0x3}, {0x2}, {0x6, 0x1}, {0x355cbac3, 0x2}, {0x0, 0x2}, {0x0, 0x2}, {0x7}, {0xe7, 0x2}, {0x3, 0x3}, {0x5598e8fe, 0x2}, {0x6, 0x1}], [{0x9, 0x9097}, {0x7, 0x9}, {0x7, 0xa}, {0x6, 0x8}, {0x20080, 0x5}, {0x13, 0xc0000000}, {0x40, 0xb}, {0x9, 0x6}, {0x4, 0x2}, {0x6, 0x7fffffff}, {0x7fffffff, 0x400}], 0x7}, {[{0x84, 0x2}, {}, {0x0, 0x2}, {0xffffffff, 0x1}, {}, {0x5, 0x1}, {0x5, 0x2}, {0x8, 0x3}, {0x2, 0x3}, {0x8, 0x1}, {0x7, 0x1}], [{0x9, 0x5}, {0x80, 0x32}, {0x0, 0xfffffff7}, {0xff, 0x1}, {0x7, 0x6}, {0xdb9, 0xff4}, {0x6, 0x3ff}, {0x3, 0x6}, {0x5, 0x10}, {0x9, 0x6}, {0x10000, 0x2}], 0x4, 0x2a}, {[{0x4, 0x2}, {0xa, 0x1}, {0x6, 0x1}, {0x10, 0x3}, {0x2, 0x2}, {0x2, 0x2}, {0x3, 0x1}, {0x2, 0x3}, {0x3, 0x1}, {0x2, 0x2}, {0x477d, 0x1}], [{0x4, 0xffffffff}, {0x200, 0x6}, {0x4be1, 0x4044}, {0x1}, {0x5, 0xc}, {0x3, 0x4}, {0x2, 0x4}, {0x800, 0x8000}, {0x8, 0x800}, {0x3, 0x2}, {0xe, 0x8000}], 0x4, 0xb}, {[{0x7, 0x1}, {0xd, 0x3}, {0x5}, {0x61}, {0x9}, {}, {0x2}, {0x1}, {0x0, 0x2}, {0x9, 0x3}, {0x5, 0x3}], [{0x58d, 0x3ff}, {0x0, 0x7f}, {0x6}, {0xfc9b, 0x80000001}, {0x101, 0x7}, {0x7, 0x1}, {0x7, 0x7}, {0x2, 0x1}, {0x2, 0x2}, {0x9, 0x4cf}, {0x7, 0x10000}], 0x1}, {[{0x2}, {0x9}, {0x8, 0x1}, {0x2, 0x3}, {0x71, 0x3}, {0x0, 0x2}, {0xe, 0x2}, {0x6, 0x2}, {0x5}, {0x3000000, 0x3}, {0x6, 0x1}], [{0x9, 0x3}, {0x5, 0x7fffffff}, {0xffff, 0x4}, {0x0, 0x7}, {0x8, 0xb502}, {0x1ff, 0x86}, {0x6, 0xffffffff}, {0x3, 0x4}, {0x5, 0x6}, {0xf, 0xf93}, {0x5, 0x4}], 0x3, 0x3}, {[{0x7, 0x1}, {0x3, 0x1}, {0x45d7}, {0xfff, 0x3}, {0xc50, 0x3}, {0x0, 0x2}, {0x400, 0x1}, {0x2, 0x1}, {0x4, 0x2}, {0xfffffffd}, {0x2}], [{0x3, 0x6}, {0xed, 0xd}, {0x80, 0xb81d}, {0x2ca, 0x80000000}, {0x8, 0xff}, {0x7, 0x45a8}, {0x8, 0x6}, {0x4, 0x1}, {0x2, 0x6}, {0xfc, 0x6}, {0xd, 0x138c}], 0x6, 0x5}, {[{0x4, 0x1}, {0x800}, {0x9, 0x2}, {0xf0000000, 0x2}, {0x6, 0x3}, {0x3, 0x2}, {0x8, 0x2}, {}, {0x9}, {0x400, 0x2}, {0x8, 0x3}], [{0x7, 0xfffffffd}, {0x2}, {0x2, 0x2}, {0x8f, 0x6}, {0x7, 0x5}, {0x8, 0x7}, {0xb, 0x82c6}, {0xb1b}, {0xbd5c, 0xffff}, {0x1, 0x9b8d}, {0xec, 0x5}], 0x2, 0x6}, {[{0x8}, {0x0, 0x1}, {0xac000000}, {0x6, 0x2}, {0x2d8, 0x3}, {0x7e3ea4bc}, {0x8, 0x1}, {0x4f, 0x3}, {0x4, 0x2}, {0xfffffff7}, {0x3, 0x2}], [{0x5, 0x42}, {0x76a74689, 0x4}, {0x1}, {0x8000, 0x7}, {0x400, 0xdd}, {0xfff, 0x8}, {0x76b, 0xfffffffe}, {0xa6d00, 0xfffffff7}, {0x10001, 0xfc8d}, {0x0, 0x10001}, {0x4, 0x3}], 0x1, 0x9}, {[{0x8, 0x1}, {0x3, 0x3}, {0x18, 0x3}, {0x3ff, 0x3}, {0x7fffffff}, {0x8}, {0x1}, {0x8, 0x3}, {0xf1b6}, {0x80, 0x3}, {0x4, 0x2}], [{0x2, 0x4}, {0x3, 0xf}, {0x9, 0x6}, {0x7f, 0x8}, {0x7, 0x273e1899}, {0x4, 0x1}, {0x6, 0x3}, {0x1, 0xb7}, {0x8, 0x3}, {0x3, 0x1}, {0x7ff, 0x63}], 0xb, 0x3}, {[{0x1, 0x2}, {0x6, 0x3}, {0xffff, 0x1}, {0x1}, {0x4, 0x3}, {0x4, 0x3}, {0xaa7}, {0x100, 0x3}, {0x2}, {0xfffffff7, 0xb90af65875a5dc08}, {0x4, 0x3}], [{0x3}, {0x8001, 0x7}, {0x10000, 0x7524}, {0x73d, 0x4}, {0x0, 0x280000}, {0x3, 0x3af}, {0x5, 0x2}, {0x101, 0xbf}, {0x10000, 0x6}, {0x3, 0x800}], 0x8, 0x5}], 0x3}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f1c098b60204ed02d82cf440fef5497b80c29d381d41116000"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0xb90) 231.484138ms ago: executing program 7 (id=1769): r0 = fsopen(&(0x7f0000000080)='mqueue\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000000)='rw\x00', 0x0, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x42b42, 0x1c0) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b000000000000000000000000800000000008"], 0x48) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace(0x8, r3) wait4(0x0, 0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c0000000306010200000000000000000a00000105000100"], 0x1c}, 0x1, 0x0, 0x0, 0x4004810}, 0x840) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x1f, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e00000011008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x40840) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_print_times', 0x0, 0xd1) r6 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={&(0x7f0000000100)=@in={0x2, 0x4e21, @remote}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000080)="be", 0x1}], 0x1, &(0x7f0000000040)=[{0x20, 0x84, 0x8, "eeb4fe8ba15e3999ef"}], 0x20}, 0x41) lseek(r5, 0x0, 0x1) ioctl$SNAPSHOT_FREE(r5, 0x3305) pipe(&(0x7f0000005880)) syz_io_uring_setup(0x30b6, &(0x7f0000001240)={0x0, 0x10008cc8, 0x10100, 0x2, 0x75, 0x0, r1}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = syz_usb_connect$printer(0x6, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12011000000400b70ac224b255fd0904000f0206010108090501021000044000090582020300040601"], &(0x7f0000000580)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x0, 0x7d, 0x5, 0x31, 0x10, 0x1}, 0x31, &(0x7f0000000280)={0x5, 0xf, 0x31, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x4, 0x0, 0x9}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x3, 0x9, 0x6, 0x3}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x5, 0x4, 0x7}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "106a55e5cea9a8181589fbe128dbddb0"}]}, 0x5, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x500a}}, {0xa3, &(0x7f0000000300)=@string={0xa3, 0x3, "c42fa9cddab0cfe5c058ea486fa96befee5bba860b3c44a190160bcc5ae06a8d328ff0b17acd2f34f43940a764d348fdc448c479ba7e5fc0aab2de809b54b7a2f5e2417961219ac3c42ce15203d95a7af9f3ed0908b074b9a26b6dcc7b2283fd83d8c7c6d1859d040e430fa982c158a336a17e5d5987aed4443ccfbdbe74a6836ffb564cbc596afd84f359dc646ba775b05d45673781a524578e4b09cac030d90f"}}, {0xdd, &(0x7f00000003c0)=@string={0xdd, 0x3, "769465b787c3366f6f74d71948334aa7c96c9dc3b2ec036d9e9b20a226b04e6c201b69aefc9f068c772d26067305a97eec23a61c282bd60c5ebd14861db3acfc623b465f5555fe2949e0f8773666e4042732d03aeb1d32d9392b846fd0e0b489a4f5cee1ddbd0007b4b4d341e835a06a5017e5403552fefe99e9f60090e8370df7ae458ef420ff49f38bb25ab581f80d314af5cf098e135a083b0912bd666d8a354debeb202cba82e173571c4065c0a20a18ba3e55e5d1cadbd9599982aede0a69e7e171ad179a7d5809af75922f8b2d620ef07c065c86b743df76"}}, {0x46, &(0x7f00000004c0)=@string={0x46, 0x3, "2d5344447a43912d894aacfdc453db182b8418f2e033850c5f9efd20f5a67d03f371f76924f800a1890612bb5b8e8872444c9e4c08a1151d2c0f37bfdf4ca3b621bab917"}}, {0x1b, &(0x7f0000000540)=@string={0x1b, 0x3, "5cdb230a122073e332216e271982c8da46e2f4823a57739f87"}}]}) syz_usb_disconnect(r10) sendmsg$nl_route(r9, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=@ipmr_getroute={0x1c, 0x1a, 0x100, 0x70bd2c, 0x25dfdbfc, {0x80, 0x20, 0x0, 0xd, 0x0, 0x4, 0xfd, 0x3, 0x1200}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x20094) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x3b, 0x2, 0x1}) 231.294047ms ago: executing program 5 (id=1770): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 174.825601ms ago: executing program 1 (id=1771): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) 129.617573ms ago: executing program 1 (id=1772): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x30, 0x7, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4064}, 0x4008040) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x4c000) 128.784783ms ago: executing program 5 (id=1773): r0 = socket$nl_rdma(0x10, 0x3, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x7ff, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="00010000031401"], 0x100}, 0x1, 0x0, 0x0, 0x4040024}, 0x0) 128.606513ms ago: executing program 1 (id=1774): capset(&(0x7f0000000000)={0x20071026, 0xffffffffffffffff}, 0x0) (async) syz_clone3(&(0x7f0000000200)={0x8009000, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)=0x0, {0x5}, &(0x7f0000000100)=""/58, 0x3a, &(0x7f0000000140)=""/122, &(0x7f00000001c0)=[0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x6}, 0x58) capget(&(0x7f0000000280)={0x19980330, r0}, &(0x7f00000002c0)={0x3, 0x2, 0x8432, 0x6, 0x1ff, 0x5}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f0000000000)={'batadv0\x00', 0x7d}) 86.331065ms ago: executing program 1 (id=1775): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@generic={&(0x7f00000000c0)='./file0\x00'}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x8, 0x0, &(0x7f00000000c0), &(0x7f0000000000)='GPL\x00', 0x5, 0x59, &(0x7f00000001c0)=""/89, 0x40f00, 0x18, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x8, 0x1}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0x8, 0xfffffff7, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x2, &(0x7f0000000300)=[r0, r0, r0, r1, r0, r0, r0], &(0x7f0000000340)=[{0x4, 0x3, 0xa, 0xb}, {0xffffffff, 0x1, 0x5, 0xa}], 0x10, 0x10}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="b70000008e000000bca31000000000002403000030feffff720af0ffa4ffffff91a4f0ff000000001f030000000000002e140200000000002604fdffa4ffffff14010000000300001d130000000000007a0a00fe0020001f0f14000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb150c537bf2085651d6dd6ce9bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf0134c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4136dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91ff073e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baaa244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b7025488316241f64c851a7fe7396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb11883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcd857ab15e355713767c536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ced301efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0900000000000000ff0f40b1888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fc08001011e32f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e3f753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30c1675767999d146aef7799738b292fd64bb25b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963342aece449a0d80010fcdb9913823333a70c2a4ab000000000000003f8dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc090000000000000061563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9901010000b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba435926b61c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0aa81192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e5789c6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da740800000000000000c55a4385e9a617aa6c8e10d4202c5afeb06eef98aee88ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a274000000000000000000000000000000000000000000000009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4100260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06ee0ff698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d34d3757b1450fdb0a9a69f432e277f3a0386eb2bd3305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e913ac1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07618b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e040000003c3ffad44d2a376def42e41e9fc31678257e040fa7cf32c221aaac08000000000000001a00000000000000000000173570f0c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d641ef02e495295d756e110522a7a945b93fb705b95b6aae27a8fb33732ce1da1c0b1af8eb9222a06e984ab1e6984c8bdc12360627137ab67b6b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481efe46a4ce86be0b1d8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0c6cb4bed8594a39bd76d3ef8a7ab014e787596db796bd93a36c2880423291e3bccc86f66ba792ff4d87b3f80e5908779e51c5e9055fc5b23605cd000c723187ef09dcf4b07b06a9342f3f62ee7acddff292082c1f4d8eb9561f80873a09a1ae0c9af1121175e5600f43a1179484502009759264a5729f07c2b218fa36ba2316a99aaad0130df83d0bda1e711290f78c143ea143967b00adcd77e6ad5e48d839ea61aadb83e4d071c54691924a3830d3e7b5c198bb0ed623153590000060000000000004b985ea1702f34f2f85b168c083e810ed567e3f1979b9ed1a4bf6a10dac825c96a0828b335de445a4880bb6474157efd1a72ca46ae4cbe3ab648c9bc4867a5a4cb87d7d6d55475b34b3cb6aa9e2337d4e04a37e35109752522ac9b186ddd80c47da6a2f4ef7bb909c97552606ffff97e86dc995604346262a177b06c634969a31b5717c416f8224662f4dd46d6081cb96dd6"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd00}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x50) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_WRITEV={0x2, 0x8, 0x4004, @fd_index=0x3, 0x0, 0x0}) syz_open_procfs(0x0, &(0x7f0000002240)='comm\x00') io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0x0) 86.067745ms ago: executing program 5 (id=1776): unshare(0x6a040000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) sendmsg$NFT_BATCH(r2, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0x0, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0xfffffffffffffda3, &(0x7f0000000180)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x1}]}, 0x20}}, 0x4000000) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, 0x0, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0}, &(0x7f00000003c0)=0xc) sendmsg$nl_xfrm(r5, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f0000000500)=@migrate={0x84, 0x21, 0x800, 0x70bd25, 0x25dfdbfc, {{@in6=@mcast1, @in6=@local, 0x4e23, 0x3, 0x4e21, 0x4, 0xa, 0x0, 0xa0, 0x2b, 0x0, r6}, 0x6e6bb4, 0x2}, [@etimer_thresh={0x8, 0xc, 0x8001}, @encap={0x1c, 0x4, {0xfffffffffffffffd, 0x4e24, 0x4e23, @in6=@private1={0xfc, 0x1, '\x00', 0x1}}}, @replay_thresh={0x8, 0xb, 0x7}, @proto={0x5, 0x19, 0x32}]}, 0x84}}, 0x20000040) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2a78f1f924e53931}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)={0x4c, r7, 0xee25546317ad1d9f, 0x70bd2a, 0x1, {}, [@L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_FD={0x8}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1ff}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x9}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x7}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x2004c004) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) sendmsg$rds(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000800}, 0x4000008) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x5, 0x12, 0x0, 0x3}, 0x9c) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r8, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r8, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x24, 0x2007, @fd, 0x800, 0x0, 0x0, 0x18, 0x0, {0x2}}) 85.340985ms ago: executing program 6 (id=1777): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002ebd7000ffdbdf254564657673696d0000000f0002006e39746465767366bce90195e690696d30000069fd8e0c"], 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x20048080) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2}, &(0x7f0000000080), &(0x7f0000000240)=r3}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x53f, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 0s ago: executing program 1 (id=1778): r0 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r5, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r6, &(0x7f0000000280)={0x10, 0x0, 0x25dfdbfb, 0x4140045e}, 0xc) r7 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r7, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc) r8 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r8, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc) r9 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r9, &(0x7f0000000240)={0x10, 0x0, 0x0, 0x51ee2927639cc674}, 0xc) r10 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r10, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc) r11 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r11, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc) socket$netlink(0x10, 0x3, 0x14) r12 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r12, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc) bind$netlink(r1, &(0x7f0000000180)={0x10, 0x0, 0x0, 0x80020000}, 0xc) r13 = socket$netlink(0x10, 0x3, 0x4) writev(r13, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) kernel console output (not intermixed with test programs): erface: batadv_slave_1 [ 92.596771][ T5569] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.623371][ T5569] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.640850][ T5619] netlink: 'syz.1.594': attribute type 21 has an invalid length. [ 92.648970][ T5619] netlink: 100 bytes leftover after parsing attributes in process `syz.1.594'. [ 92.859299][ T5599] Set syz1 is full, maxelem 65536 reached [ 92.907635][ T5569] hsr_slave_0: entered promiscuous mode [ 92.937947][ T5569] hsr_slave_1: entered promiscuous mode [ 92.962019][ T5569] debugfs: 'hsr0' already exists in 'hsr' [ 92.968062][ T5569] Cannot create hsr debugfs directory [ 93.097659][ T5629] loop0: detected capacity change from 0 to 256 [ 93.319110][ T5569] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 93.329963][ T5569] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 93.349293][ T5569] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 93.358113][ T5569] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 93.416842][ T5569] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.443232][ T5569] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.501670][ T814] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.509407][ T814] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.545579][ T814] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.552797][ T814] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.748170][ T5569] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.971404][ T29] kauditd_printk_skb: 109 callbacks suppressed [ 93.971420][ T29] audit: type=1400 audit(1768904977.812:1887): avc: denied { sqpoll } for pid=5668 comm="syz.5.604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 94.319167][ T5686] netlink: 12 bytes leftover after parsing attributes in process `syz.5.607'. [ 94.423903][ T5687] wireguard0: entered promiscuous mode [ 94.429807][ T5687] wireguard0: entered allmulticast mode [ 94.674894][ T5686] 8021q: adding VLAN 0 to HW filter on device bond2 [ 94.780177][ T5569] veth0_vlan: entered promiscuous mode [ 94.796577][ T5569] veth1_vlan: entered promiscuous mode [ 94.834353][ T5569] veth0_macvtap: entered promiscuous mode [ 94.885320][ T5569] veth1_macvtap: entered promiscuous mode [ 94.917147][ T5569] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.942684][ T5569] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.956817][ T29] audit: type=1400 audit(1768904978.792:1888): avc: denied { execute } for pid=5711 comm="syz.5.615" name="file1" dev="tmpfs" ino=678 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 94.976435][ T5709] netlink: 'syz.0.614': attribute type 10 has an invalid length. [ 94.986528][ T29] audit: type=1400 audit(1768904978.822:1889): avc: denied { execute_no_trans } for pid=5711 comm="syz.5.615" path="/125/file1" dev="tmpfs" ino=678 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 95.046417][ T5709] team0 (unregistering): Port device team_slave_0 removed [ 95.112306][ T5709] team0 (unregistering): Port device team_slave_1 removed [ 95.141172][ T2088] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.158067][ T2088] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.187171][ T2088] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.211799][ T2088] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.257031][ T5720] loop6: detected capacity change from 0 to 1024 [ 95.277371][ T5720] EXT4-fs: Ignoring removed bh option [ 95.319233][ T5720] EXT4-fs (loop6): can't mount with data=, fs mounted w/o journal [ 95.396559][ T29] audit: type=1326 audit(1768904979.232:1890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5722 comm="syz.5.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa330adacb9 code=0x7ffc0000 [ 95.476296][ T29] audit: type=1326 audit(1768904979.272:1891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5722 comm="syz.5.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa330adacb9 code=0x7ffc0000 [ 95.500982][ T29] audit: type=1326 audit(1768904979.272:1892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5722 comm="syz.5.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa330adacb9 code=0x7ffc0000 [ 95.525278][ T29] audit: type=1326 audit(1768904979.272:1893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5722 comm="syz.5.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7fa330adacb9 code=0x7ffc0000 [ 95.550330][ T29] audit: type=1326 audit(1768904979.272:1894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5722 comm="syz.5.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa330adacb9 code=0x7ffc0000 [ 95.574561][ T29] audit: type=1326 audit(1768904979.282:1895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5722 comm="syz.5.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa330a9b58e code=0x7ffc0000 [ 95.599189][ T29] audit: type=1326 audit(1768904979.282:1896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5722 comm="syz.5.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa330adacb9 code=0x7ffc0000 [ 96.235091][ T5747] loop5: detected capacity change from 0 to 512 [ 96.242157][ T5746] x_tables: duplicate underflow at hook 1 [ 96.331588][ T5749] netlink: 'syz.0.626': attribute type 10 has an invalid length. [ 96.502883][ T5747] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2 [ 96.579007][ T5747] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #13: comm syz.5.623: iget: bad i_size value: 12154757448730 [ 96.620269][ T5747] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.623: couldn't read orphan inode 13 (err -117) [ 96.700258][ T5747] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.830675][ T5747] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 96.860761][ T5763] netlink: 72 bytes leftover after parsing attributes in process `syz.2.630'. [ 96.880993][ T5764] netlink: 'syz.5.623': attribute type 1 has an invalid length. [ 96.959753][ T5764] bond3: entered promiscuous mode [ 96.965049][ T5764] bond3: entered allmulticast mode [ 97.322730][ T5764] 8021q: adding VLAN 0 to HW filter on device bond3 [ 97.359555][ T5767] netlink: 4 bytes leftover after parsing attributes in process `syz.5.623'. [ 97.461396][ T5747] erspan1: entered allmulticast mode [ 97.496075][ T5747] bond3: (slave erspan1): making interface the new active one [ 97.504185][ T5747] erspan1: entered promiscuous mode [ 97.525782][ T5774] loop6: detected capacity change from 0 to 1024 [ 97.577094][ T5774] EXT4-fs: Ignoring removed orlov option [ 97.614367][ T5747] bond3: (slave erspan1): Enslaving as an active interface with an up link [ 97.645543][ T5774] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.868187][ T5785] loop1: detected capacity change from 0 to 256 [ 97.941883][ T5569] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.089238][ T3636] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.214729][ T5803] x_tables: duplicate underflow at hook 1 [ 98.221570][ T5798] netlink: 'syz.6.641': attribute type 10 has an invalid length. [ 98.255557][ T5798] team0 (unregistering): Port device team_slave_0 removed [ 98.296996][ T5798] team0 (unregistering): Port device team_slave_1 removed [ 99.244177][ T5829] loop5: detected capacity change from 0 to 1024 [ 99.300107][ T5829] EXT4-fs: Ignoring removed orlov option [ 99.407622][ T5829] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.421483][ T5831] netlink: 44 bytes leftover after parsing attributes in process `syz.2.649'. [ 99.547802][ T3636] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.581123][ T5838] netlink: 36 bytes leftover after parsing attributes in process `syz.2.649'. [ 99.590678][ T5838] netlink: 16 bytes leftover after parsing attributes in process `syz.2.649'. [ 99.596437][ T29] kauditd_printk_skb: 52 callbacks suppressed [ 99.596454][ T29] audit: type=1326 audit(1768904983.432:1949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5839 comm="syz.5.652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa330adacb9 code=0x7ffc0000 [ 99.599698][ T5838] netlink: 36 bytes leftover after parsing attributes in process `syz.2.649'. [ 99.642815][ T29] audit: type=1326 audit(1768904983.482:1950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5839 comm="syz.5.652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa330adacb9 code=0x7ffc0000 [ 99.668370][ T29] audit: type=1326 audit(1768904983.482:1951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5839 comm="syz.5.652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa330adacb9 code=0x7ffc0000 [ 99.668913][ T5838] netlink: 36 bytes leftover after parsing attributes in process `syz.2.649'. [ 99.693835][ T29] audit: type=1326 audit(1768904983.482:1952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5839 comm="syz.5.652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa330adacb9 code=0x7ffc0000 [ 99.726833][ T29] audit: type=1326 audit(1768904983.482:1953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5839 comm="syz.5.652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa330adacb9 code=0x7ffc0000 [ 99.751524][ T29] audit: type=1326 audit(1768904983.512:1954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5839 comm="syz.5.652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fa330adacb9 code=0x7ffc0000 [ 99.776219][ T29] audit: type=1326 audit(1768904983.512:1955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5839 comm="syz.5.652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa330adacb9 code=0x7ffc0000 [ 99.801452][ T29] audit: type=1326 audit(1768904983.512:1956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5839 comm="syz.5.652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa330adacb9 code=0x7ffc0000 [ 99.826334][ T29] audit: type=1326 audit(1768904983.512:1957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5839 comm="syz.5.652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fa330adacb9 code=0x7ffc0000 [ 99.879628][ T5836] netlink: 12 bytes leftover after parsing attributes in process `syz.1.651'. [ 99.949851][ T29] audit: type=1326 audit(1768904983.702:1958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5839 comm="syz.5.652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fa330adacb9 code=0x7ffc0000 [ 100.375295][ T5867] x_tables: duplicate underflow at hook 1 [ 100.926625][ T5882] loop6: detected capacity change from 0 to 1024 [ 101.132900][ T5883] infiniband : set down [ 101.137387][ T5883] infiniband : added ipvlan0 [ 101.166857][ T5882] EXT4-fs error (device loop6): ext4_acquire_dquot:6986: comm syz.6.666: Failed to acquire dquot type 0 [ 101.184835][ T5883] RDS/IB: : added [ 101.188780][ T5883] smc: adding ib device  with port count 1 [ 101.195292][ T5883] smc: ib device  port 1 has no pnetid [ 101.308579][ T5882] EXT4-fs (loop6): 1 truncate cleaned up [ 101.346936][ T5882] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.557791][ T5569] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.624503][ T5903] raw_sendmsg: syz.5.672 forgot to set AF_INET. Fix it! [ 101.697196][ T5908] loop5: detected capacity change from 0 to 512 [ 102.083367][ T5908] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.180980][ T5908] ext4 filesystem being mounted at /141/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.210461][ T5908] netlink: 8 bytes leftover after parsing attributes in process `syz.5.674'. [ 102.370784][ T5933] x_tables: duplicate underflow at hook 1 [ 102.540405][ T3636] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.794480][ T5941] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 103.024741][ T5944] netlink: 4 bytes leftover after parsing attributes in process `syz.5.682'. [ 103.218622][ T5955] loop0: detected capacity change from 0 to 1024 [ 103.253009][ T5955] EXT4-fs: Ignoring removed orlov option [ 103.308772][ T5955] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.467665][ T3328] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.541036][ T5953] loop5: detected capacity change from 0 to 1024 [ 103.595199][ T5953] EXT4-fs: Ignoring removed nobh option [ 103.601020][ T5953] EXT4-fs: Ignoring removed bh option [ 103.635878][ T5953] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.916558][ T3636] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.031266][ T5993] loop5: detected capacity change from 0 to 1024 [ 104.048459][ T5993] EXT4-fs: Ignoring removed orlov option [ 104.078225][ T5993] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.120519][ T5996] x_tables: duplicate underflow at hook 1 [ 104.180343][ T3636] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.898725][ T29] kauditd_printk_skb: 129 callbacks suppressed [ 104.898744][ T29] audit: type=1400 audit(1768904988.722:2086): avc: denied { wake_alarm } for pid=6011 comm="syz.5.705" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 105.660848][ T6034] loop1: detected capacity change from 0 to 1024 [ 105.728606][ T6034] EXT4-fs: Ignoring removed orlov option [ 105.965059][ T6034] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.131881][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.283106][ T6052] x_tables: duplicate underflow at hook 1 [ 106.434253][ T29] audit: type=1326 audit(1768904990.272:2087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6056 comm="syz.1.718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f622facb9 code=0x7ffc0000 [ 106.529853][ T29] audit: type=1326 audit(1768904990.302:2088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6056 comm="syz.1.718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f622facb9 code=0x7ffc0000 [ 106.555130][ T29] audit: type=1326 audit(1768904990.302:2089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6056 comm="syz.1.718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0f622facb9 code=0x7ffc0000 [ 106.579839][ T29] audit: type=1326 audit(1768904990.302:2090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6056 comm="syz.1.718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f622facb9 code=0x7ffc0000 [ 106.605409][ T29] audit: type=1326 audit(1768904990.302:2091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6056 comm="syz.1.718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f622facb9 code=0x7ffc0000 [ 106.630451][ T29] audit: type=1326 audit(1768904990.302:2092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6056 comm="syz.1.718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f0f622facb9 code=0x7ffc0000 [ 106.654376][ T29] audit: type=1326 audit(1768904990.302:2093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6056 comm="syz.1.718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f622facb9 code=0x7ffc0000 [ 106.678775][ T29] audit: type=1326 audit(1768904990.302:2094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6056 comm="syz.1.718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f622facb9 code=0x7ffc0000 [ 106.702808][ T29] audit: type=1326 audit(1768904990.302:2095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6056 comm="syz.1.718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f0f622facb9 code=0x7ffc0000 [ 106.864378][ T6069] netlink: 830 bytes leftover after parsing attributes in process `syz.0.720'. [ 106.877515][ T6070] netlink: 4 bytes leftover after parsing attributes in process `syz.1.724'. [ 106.923351][ T6073] tmpfs: Bad value for 'mpol' [ 106.942987][ T6072] loop6: detected capacity change from 0 to 1024 [ 106.959512][ T6072] EXT4-fs: Ignoring removed orlov option [ 106.990086][ T6072] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.128178][ T5569] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.405551][ T6096] tmpfs: Unknown parameter 'mpod' [ 107.529187][ T6098] x_tables: duplicate underflow at hook 1 [ 108.391328][ T6118] netlink: 4 bytes leftover after parsing attributes in process `syz.6.737'. [ 108.616688][ T6129] loop6: detected capacity change from 0 to 1024 [ 108.627026][ T6129] EXT4-fs: Ignoring removed orlov option [ 108.661453][ T6129] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.831742][ T5569] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.960951][ T6144] loop6: detected capacity change from 0 to 1024 [ 108.987368][ T6144] EXT4-fs: Ignoring removed bh option [ 109.017138][ T6144] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.206863][ T6155] x_tables: duplicate underflow at hook 1 [ 109.262029][ T6144] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 109.872854][ T6172] loop0: detected capacity change from 0 to 1024 [ 109.899170][ T6172] EXT4-fs: Ignoring removed orlov option [ 109.910674][ T6172] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.997749][ T6175] loop2: detected capacity change from 0 to 128 [ 110.104185][ T3328] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.164865][ T12] kworker/u8:0: attempt to access beyond end of device [ 110.164865][ T12] loop2: rw=1, sector=145, nr_sectors = 8 limit=128 [ 110.193885][ T12] kworker/u8:0: attempt to access beyond end of device [ 110.193885][ T12] loop2: rw=1, sector=161, nr_sectors = 8 limit=128 [ 110.220814][ T12] kworker/u8:0: attempt to access beyond end of device [ 110.220814][ T12] loop2: rw=1, sector=177, nr_sectors = 8 limit=128 [ 110.236994][ T12] kworker/u8:0: attempt to access beyond end of device [ 110.236994][ T12] loop2: rw=1, sector=193, nr_sectors = 8 limit=128 [ 110.251873][ T12] kworker/u8:0: attempt to access beyond end of device [ 110.251873][ T12] loop2: rw=1, sector=209, nr_sectors = 8 limit=128 [ 110.252240][ T6183] netlink: 83992 bytes leftover after parsing attributes in process `syz.0.757'. [ 110.275910][ T6183] netlink: zone id is out of range [ 110.281578][ T6183] netlink: zone id is out of range [ 110.297910][ T6183] netlink: set zone limit has 8 unknown bytes [ 110.342298][ T12] kworker/u8:0: attempt to access beyond end of device [ 110.342298][ T12] loop2: rw=1, sector=225, nr_sectors = 8 limit=128 [ 110.379961][ T6186] loop0: detected capacity change from 0 to 512 [ 110.400847][ T6144] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.413530][ T6186] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.759: inode has both inline data and extents flags [ 110.414559][ T12] kworker/u8:0: attempt to access beyond end of device [ 110.414559][ T12] loop2: rw=1, sector=241, nr_sectors = 8 limit=128 [ 110.431792][ T6186] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.759: couldn't read orphan inode 15 (err -117) [ 110.456227][ T6186] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.646880][ T3328] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.869936][ T6221] loop2: detected capacity change from 0 to 1024 [ 111.876895][ T6221] EXT4-fs: Ignoring removed bh option [ 111.960010][ T6221] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.336059][ T6221] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.392540][ T29] kauditd_printk_skb: 47 callbacks suppressed [ 112.392558][ T29] audit: type=1326 audit(1768904996.232:2143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6235 comm="syz.2.775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff69bfcacb9 code=0x7ffc0000 [ 112.462447][ T29] audit: type=1326 audit(1768904996.272:2144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6235 comm="syz.2.775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff69bfcacb9 code=0x7ffc0000 [ 112.489024][ T29] audit: type=1326 audit(1768904996.272:2145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6235 comm="syz.2.775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff69bfcacb9 code=0x7ffc0000 [ 112.514901][ T29] audit: type=1326 audit(1768904996.272:2146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6235 comm="syz.2.775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7ff69bfcacb9 code=0x7ffc0000 [ 112.539671][ T29] audit: type=1326 audit(1768904996.272:2147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6235 comm="syz.2.775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff69bfcacb9 code=0x7ffc0000 [ 112.564584][ T29] audit: type=1326 audit(1768904996.272:2148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6235 comm="syz.2.775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ff69bfcacb9 code=0x7ffc0000 [ 112.589138][ T29] audit: type=1326 audit(1768904996.282:2149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6235 comm="syz.2.775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff69bfcacb9 code=0x7ffc0000 [ 112.614493][ T29] audit: type=1326 audit(1768904996.302:2150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6235 comm="syz.2.775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7ff69bfcacb9 code=0x7ffc0000 [ 112.730779][ T6238] loop2: detected capacity change from 0 to 1024 [ 112.763453][ T6238] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 112.775151][ T6238] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 112.879379][ T6238] JBD2: no valid journal superblock found [ 112.885381][ T6238] EXT4-fs (loop2): Could not load journal inode [ 113.069049][ T6251] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2562 sclass=netlink_route_socket pid=6251 comm=syz.2.781 [ 113.082444][ T6251] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2584 sclass=netlink_route_socket pid=6251 comm=syz.2.781 [ 113.095376][ T6251] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2580 sclass=netlink_route_socket pid=6251 comm=syz.2.781 [ 113.108452][ T6251] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2563 sclass=netlink_route_socket pid=6251 comm=syz.2.781 [ 113.179981][ T6251] netlink: 24 bytes leftover after parsing attributes in process `syz.2.781'. [ 113.190966][ T6247] netlink: 'syz.1.779': attribute type 10 has an invalid length. [ 113.276977][ T6247] team0 (unregistering): Port device team_slave_0 removed [ 113.307182][ T6247] team0 (unregistering): Port device team_slave_1 removed [ 113.333058][ T6251] netlink: 4 bytes leftover after parsing attributes in process `syz.2.781'. [ 113.398924][ T6253] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2050 sclass=netlink_route_socket pid=6253 comm=syz.2.781 [ 113.690125][ T6262] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6262 comm=syz.6.784 [ 114.100792][ T6268] loop0: detected capacity change from 0 to 2048 [ 114.180883][ T3314] Alternate GPT is invalid, using primary GPT. [ 114.187701][ T3314] loop0: p1 p2 p3 [ 114.191555][ T3314] loop0: partition table partially beyond EOD, truncated [ 114.205183][ T6270] loop1: detected capacity change from 0 to 1024 [ 114.259213][ T6270] EXT4-fs: Ignoring removed orlov option [ 114.273289][ T6268] Alternate GPT is invalid, using primary GPT. [ 114.279960][ T6268] loop0: p1 p2 p3 [ 114.284567][ T6268] loop0: partition table partially beyond EOD, truncated [ 114.303072][ T6270] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.486488][ T3314] udevd[3314]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 114.489185][ T3753] udevd[3753]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 114.499720][ T3312] udevd[3312]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 114.519691][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.545696][ T3314] udevd[3314]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 114.545737][ T3313] udevd[3313]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 114.562021][ T3753] udevd[3753]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 114.701318][ T6293] netlink: 2 bytes leftover after parsing attributes in process `syz.1.791'. [ 115.784351][ T6314] netlink: 8 bytes leftover after parsing attributes in process `syz.1.803'. [ 115.996549][ T29] audit: type=1400 audit(1768904999.832:2151): avc: denied { ioctl } for pid=6319 comm="syz.2.805" path="socket:[14305]" dev="sockfs" ino=14305 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 116.041794][ T6322] loop1: detected capacity change from 0 to 164 [ 116.061952][ T6322] ISOFS: Bad logical zone size 65280 [ 116.079315][ T6331] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 116.086686][ T6331] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 116.100064][ T29] audit: type=1400 audit(1768904999.832:2152): avc: denied { create } for pid=6325 comm="syz.6.808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 116.121143][ T6329] loop0: detected capacity change from 0 to 512 [ 116.299392][ T6346] loop1: detected capacity change from 0 to 1024 [ 116.309970][ T6346] EXT4-fs: Ignoring removed orlov option [ 116.332912][ T6346] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.347812][ T6349] loop6: detected capacity change from 0 to 1024 [ 116.368932][ T6349] EXT4-fs: Ignoring removed nobh option [ 116.374755][ T6349] EXT4-fs: inline encryption not supported [ 116.383859][ T6329] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #16: comm syz.0.809: corrupted inode contents [ 116.396550][ T6329] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #16: comm syz.0.809: mark_inode_dirty error [ 116.417146][ T6329] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #16: comm syz.0.809: corrupted inode contents [ 116.430186][ T6329] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.809: mark_inode_dirty error [ 116.442704][ T6329] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #16: comm syz.0.809: corrupted inode contents [ 116.451819][ T6349] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.455088][ T6329] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 116.477699][ T6329] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #16: comm syz.0.809: corrupted inode contents [ 116.490033][ T6329] EXT4-fs error (device loop0): ext4_truncate:4635: inode #16: comm syz.0.809: mark_inode_dirty error [ 116.503079][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.505030][ T6329] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 116.523672][ T6329] EXT4-fs (loop0): 1 truncate cleaned up [ 116.531263][ T6329] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.532160][ T3526] Process accounting resumed [ 116.544423][ T6329] ext4 filesystem being mounted at /165/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.549266][ T2363] EXT4-fs error (device loop0): ext4_release_dquot:7022: comm kworker/u8:14: Failed to release dquot type 1 [ 116.595978][ T6349] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 116.609185][ T6329] EXT4-fs error (device loop0): ext4_lookup:1785: inode #15: comm syz.0.809: iget: bad i_size value: 360287970189639690 [ 116.639683][ T5569] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.804075][ T3328] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.849300][ T6365] loop6: detected capacity change from 0 to 128 [ 116.894477][ T6364] tipc: Started in network mode [ 116.899425][ T6364] tipc: Node identity 4, cluster identity 4711 [ 116.905694][ T6364] tipc: Node number set to 4 [ 117.119859][ T6368] netlink: 83992 bytes leftover after parsing attributes in process `syz.6.821'. [ 117.129211][ T6368] netlink: zone id is out of range [ 117.134506][ T6368] netlink: zone id is out of range [ 117.140257][ T6368] netlink: zone id is out of range [ 117.164538][ T6368] netlink: set zone limit has 8 unknown bytes [ 117.364283][ T6385] loop0: detected capacity change from 0 to 1024 [ 117.373419][ T6385] EXT4-fs: Ignoring removed orlov option [ 117.393489][ T6385] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.489195][ T3328] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.632682][ T6395] netlink: 'syz.2.830': attribute type 10 has an invalid length. [ 118.447149][ T6422] loop1: detected capacity change from 0 to 1024 [ 118.486958][ T6422] EXT4-fs: Ignoring removed orlov option [ 118.506567][ T6421] netlink: 'syz.0.838': attribute type 10 has an invalid length. [ 118.520601][ T6422] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.640339][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.738780][ T3526] IPVS: starting estimator thread 0... [ 118.849685][ T6428] IPVS: using max 2592 ests per chain, 129600 per kthread [ 118.947676][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 118.947773][ T29] audit: type=1400 audit(1768905002.782:2160): avc: denied { read } for pid=6434 comm="syz.1.843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 119.079067][ T29] audit: type=1400 audit(1768905002.902:2161): avc: denied { accept } for pid=6438 comm="syz.6.844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 119.279225][ T29] audit: type=1326 audit(1768905003.112:2162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6453 comm="syz.5.850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa330adacb9 code=0x7ffc0000 [ 119.311432][ T6456] netlink: 4 bytes leftover after parsing attributes in process `syz.0.851'. [ 119.374031][ T29] audit: type=1326 audit(1768905003.142:2163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6453 comm="syz.5.850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa330adacb9 code=0x7ffc0000 [ 119.398775][ T29] audit: type=1326 audit(1768905003.162:2164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6453 comm="syz.5.850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fa330adacb9 code=0x7ffc0000 [ 119.422637][ T29] audit: type=1326 audit(1768905003.162:2165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6453 comm="syz.5.850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa330adacb9 code=0x7ffc0000 [ 119.446780][ T29] audit: type=1326 audit(1768905003.162:2166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6453 comm="syz.5.850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=82 compat=0 ip=0x7fa330adacb9 code=0x7ffc0000 [ 119.471798][ T29] audit: type=1326 audit(1768905003.162:2167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6453 comm="syz.5.850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa330adacb9 code=0x7ffc0000 [ 119.609038][ T6466] netlink: 'syz.5.857': attribute type 10 has an invalid length. [ 119.713701][ T29] audit: type=1326 audit(1768905003.472:2168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6467 comm="syz.6.855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0da079acb9 code=0x7ffc0000 [ 119.738103][ T29] audit: type=1326 audit(1768905003.472:2169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6467 comm="syz.6.855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0da079acb9 code=0x7ffc0000 [ 119.785815][ T6484] loop6: detected capacity change from 0 to 512 [ 119.853033][ T6488] netlink: 4 bytes leftover after parsing attributes in process `syz.1.865'. [ 119.900263][ T6484] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.920223][ T6484] ext4 filesystem being mounted at /56/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 119.987998][ T6484] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #2: comm syz.6.863: corrupted inode contents [ 120.019033][ T6484] EXT4-fs error (device loop6): ext4_dirty_inode:6502: inode #2: comm syz.6.863: mark_inode_dirty error [ 120.046422][ T6484] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #2: comm syz.6.863: corrupted inode contents [ 120.096657][ T6484] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #2: comm syz.6.863: mark_inode_dirty error [ 120.123754][ T6505] syz.6.863: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 120.138775][ T6505] CPU: 0 UID: 0 PID: 6505 Comm: syz.6.863 Not tainted syzkaller #0 PREEMPT(voluntary) [ 120.138807][ T6505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 120.138822][ T6505] Call Trace: [ 120.138830][ T6505] [ 120.138837][ T6505] __dump_stack+0x1d/0x30 [ 120.138898][ T6505] dump_stack_lvl+0x95/0xd0 [ 120.138921][ T6505] dump_stack+0x15/0x1b [ 120.138941][ T6505] warn_alloc+0x145/0x1c0 [ 120.139006][ T6505] ? __pfx_min_vruntime_cb_rotate+0x10/0x10 [ 120.139037][ T6505] __vmalloc_node_range_noprof+0xa0/0x12b0 [ 120.139064][ T6505] ? ttwu_do_activate+0x1cf/0x210 [ 120.139151][ T6505] ? __rcu_read_unlock+0x4e/0x70 [ 120.139170][ T6505] ? avc_has_perm_noaudit+0xab/0x130 [ 120.139190][ T6505] ? should_fail_ex+0x30/0x280 [ 120.139220][ T6505] ? should_failslab+0x8c/0xb0 [ 120.139263][ T6505] vmalloc_user_noprof+0x7d/0xb0 [ 120.139289][ T6505] ? xskq_create+0x80/0xe0 [ 120.139307][ T6505] xskq_create+0x80/0xe0 [ 120.139336][ T6505] xsk_init_queue+0x91/0xe0 [ 120.139354][ T6505] xsk_setsockopt+0x3f5/0x640 [ 120.139385][ T6505] ? __pfx_xsk_setsockopt+0x10/0x10 [ 120.139449][ T6505] __sys_setsockopt+0x184/0x200 [ 120.139480][ T6505] __x64_sys_setsockopt+0x64/0x80 [ 120.139505][ T6505] x64_sys_call+0x21d5/0x3000 [ 120.139568][ T6505] do_syscall_64+0xc0/0x2a0 [ 120.139651][ T6505] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.139674][ T6505] RIP: 0033:0x7f0da079acb9 [ 120.139692][ T6505] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 120.139712][ T6505] RSP: 002b:00007f0d9f1d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 120.139751][ T6505] RAX: ffffffffffffffda RBX: 00007f0da0a16090 RCX: 00007f0da079acb9 [ 120.139824][ T6505] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000a [ 120.139839][ T6505] RBP: 00007f0da0808bf7 R08: 0000000000000004 R09: 0000000000000000 [ 120.139916][ T6505] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 120.139929][ T6505] R13: 00007f0da0a16128 R14: 00007f0da0a16090 R15: 00007ffea4d7cfd8 [ 120.140000][ T6505] [ 120.140008][ T6505] Mem-Info: [ 120.269513][ T6508] netlink: 4 bytes leftover after parsing attributes in process `syz.6.863'. [ 120.273540][ T6505] active_anon:11435 inactive_anon:0 isolated_anon:0 [ 120.273540][ T6505] active_file:26691 inactive_file:2848 isolated_file:0 [ 120.273540][ T6505] unevictable:0 dirty:325 writeback:0 [ 120.273540][ T6505] slab_reclaimable:3530 slab_unreclaimable:57204 [ 120.273540][ T6505] mapped:35625 shmem:3125 pagetables:1369 [ 120.273540][ T6505] sec_pagetables:0 bounce:0 [ 120.273540][ T6505] kernel_misc_reclaimable:0 [ 120.273540][ T6505] free:1819425 free_pcp:5918 free_cma:0 [ 120.417279][ T6505] Node 0 active_anon:40056kB inactive_anon:0kB active_file:106764kB inactive_file:11392kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:145052kB dirty:1300kB writeback:0kB shmem:6932kB kernel_stack:4256kB pagetables:5708kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 120.445803][ T6505] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 120.476069][ T6505] lowmem_reserve[]: 0 2879 7858 7858 [ 120.481918][ T6505] Node 0 DMA32 free:2945360kB boost:0kB min:4128kB low:7056kB high:9984kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2948988kB mlocked:0kB bounce:0kB free_pcp:3628kB local_pcp:100kB free_cma:0kB [ 120.514410][ T6505] lowmem_reserve[]: 0 0 4978 4978 [ 120.519949][ T6505] Node 0 Normal free:4316852kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:34372kB inactive_anon:0kB active_file:106764kB inactive_file:11392kB unevictable:0kB writepending:1300kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:31260kB local_pcp:5700kB free_cma:0kB [ 120.554301][ T6505] lowmem_reserve[]: 0 0 0 0 [ 120.554398][ T6515] netlink: 12 bytes leftover after parsing attributes in process `syz.1.876'. [ 120.568233][ T6505] [ 120.570704][ T6505] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 120.583893][ T6505] Node 0 DMA32: 2*4kB (M) 1*8kB (M) 4*16kB (M) 2*32kB (M) 3*64kB (M) 2*128kB (M) 3*256kB (M) 2*512kB (M) 4*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2945360kB [ 120.600565][ T6505] Node 0 Normal: 879*4kB (UME) 770*8kB (UME) 1755*16kB (ME) 1079*32kB (UME) 625*64kB (UME) 269*128kB (UM) 79*256kB (UME) 21*512kB (UM) 12*1024kB (UME) 16*2048kB (U) 998*4096kB (M) = 4310556kB [ 120.621080][ T6505] Node 0 hugepages_total=7 hugepages_free=0 hugepages_surp=3 hugepages_size=2048kB [ 120.630978][ T6505] 29818 total pagecache pages [ 120.636405][ T6505] 0 pages in swap cache [ 120.640700][ T6505] Free swap = 124996kB [ 120.644868][ T6505] Total swap = 124996kB [ 120.649073][ T6505] 2097051 pages RAM [ 120.652983][ T6505] 0 pages HighMem/MovableOnly [ 120.658027][ T6505] 81404 pages reserved [ 120.893167][ T6534] netlink: 'syz.1.884': attribute type 10 has an invalid length. [ 120.984378][ T5569] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.304257][ T6556] dvmrp1: tun_chr_ioctl cmd 35108 [ 121.816003][ T6575] loop1: detected capacity change from 0 to 1024 [ 121.849200][ T6575] EXT4-fs: Ignoring removed orlov option [ 121.935499][ T6575] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.146830][ T6585] netlink: 83992 bytes leftover after parsing attributes in process `syz.5.901'. [ 122.156250][ T6585] netlink: zone id is out of range [ 122.161510][ T6585] netlink: zone id is out of range [ 122.166817][ T6585] netlink: zone id is out of range [ 122.181244][ T6585] netlink: set zone limit has 8 unknown bytes [ 122.239880][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.569747][ T6599] netlink: 136 bytes leftover after parsing attributes in process `syz.5.905'. [ 122.578802][ T6599] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 122.924540][ T6611] loop2: detected capacity change from 0 to 1024 [ 122.933706][ T6611] EXT4-fs: Ignoring removed orlov option [ 122.945822][ T6611] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.037895][ T6615] netlink: 8 bytes leftover after parsing attributes in process `syz.0.913'. [ 123.053311][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.116584][ T6621] netlink: 12 bytes leftover after parsing attributes in process `syz.0.915'. [ 123.406714][ T6648] netlink: 12 bytes leftover after parsing attributes in process `syz.1.927'. [ 123.445555][ T6648] bridge0: port 3(vlan2) entered blocking state [ 123.452749][ T6648] bridge0: port 3(vlan2) entered disabled state [ 123.478059][ T6648] vlan2: entered allmulticast mode [ 123.483537][ T6648] bridge0: entered allmulticast mode [ 123.626261][ T6648] vlan2: left allmulticast mode [ 123.631708][ T6648] bridge0: left allmulticast mode [ 123.893038][ T6660] netlink: 4 bytes leftover after parsing attributes in process `syz.2.930'. [ 124.016199][ T29] kauditd_printk_skb: 118 callbacks suppressed [ 124.016283][ T29] audit: type=1326 audit(1768905007.852:2288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6662 comm="syz.2.931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff69bfcacb9 code=0x7ffc0000 [ 124.167777][ T29] audit: type=1326 audit(1768905007.892:2289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6662 comm="syz.2.931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7ff69bfcacb9 code=0x7ffc0000 [ 124.191944][ T29] audit: type=1326 audit(1768905007.892:2290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6662 comm="syz.2.931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff69bfcacb9 code=0x7ffc0000 [ 124.215857][ T29] audit: type=1326 audit(1768905007.892:2291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6662 comm="syz.2.931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff69bfcacb9 code=0x7ffc0000 [ 124.240196][ T29] audit: type=1326 audit(1768905007.892:2292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6662 comm="syz.2.931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=82 compat=0 ip=0x7ff69bfcacb9 code=0x7ffc0000 [ 124.265296][ T29] audit: type=1326 audit(1768905007.902:2293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6662 comm="syz.2.931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff69bfcacb9 code=0x7ffc0000 [ 124.325331][ T6665] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.332958][ T6665] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.357644][ T6670] loop6: detected capacity change from 0 to 512 [ 124.405418][ T6670] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e01c, mo2=0002] [ 124.450373][ T6670] System zones: 1-12 [ 124.463855][ T6670] EXT4-fs error (device loop6): dx_probe:791: inode #2: comm syz.6.934: Directory hole found for htree index block 0 [ 124.497622][ T6670] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -117 [ 124.514723][ T6670] EXT4-fs error (device loop6): dx_probe:791: inode #2: comm syz.6.934: Directory hole found for htree index block 0 [ 124.530213][ T6670] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117 [ 124.554442][ T6665] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 124.566143][ T6665] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 124.631631][ T29] audit: type=1326 audit(1768905008.472:2294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6680 comm="syz.2.937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff69bfcacb9 code=0x7ffc0000 [ 124.672107][ T6670] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.685066][ T31] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.739703][ T6670] EXT4-fs error (device loop6): dx_probe:791: inode #2: comm syz.6.934: Directory hole found for htree index block 0 [ 124.766315][ T29] audit: type=1326 audit(1768905008.472:2295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6680 comm="syz.2.937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=198 compat=0 ip=0x7ff69bfcacb9 code=0x7ffc0000 [ 124.779448][ T6690] netlink: 4 bytes leftover after parsing attributes in process `syz.1.941'. [ 124.792309][ T29] audit: type=1326 audit(1768905008.472:2296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6680 comm="syz.2.937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff69bfcacb9 code=0x7ffc0000 [ 124.825030][ T29] audit: type=1326 audit(1768905008.512:2297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6680 comm="syz.2.937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff69bfcacb9 code=0x7ffc0000 [ 124.859217][ T31] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.868208][ T31] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.877635][ T6687] netlink: 'syz.0.939': attribute type 10 has an invalid length. [ 124.896354][ T5569] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.940494][ T31] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.336998][ T6718] netlink: 12 bytes leftover after parsing attributes in process `syz.2.951'. [ 126.044314][ T6746] netlink: 12 bytes leftover after parsing attributes in process `syz.2.962'. [ 126.601823][ T6766] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6766 comm=syz.0.970 [ 127.179385][ T6784] netlink: 12 bytes leftover after parsing attributes in process `syz.1.975'. [ 127.481472][ T6799] netlink: 24 bytes leftover after parsing attributes in process `syz.5.980'. [ 127.569805][ T6802] netlink: 'syz.0.982': attribute type 2 has an invalid length. [ 127.611745][ T6806] netlink: 64 bytes leftover after parsing attributes in process `syz.5.980'. [ 127.736869][ T6812] loop0: detected capacity change from 0 to 1024 [ 127.816654][ T6812] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.941541][ T6812] netlink: 32 bytes leftover after parsing attributes in process `syz.0.985'. [ 127.957242][ T6822] netlink: 277 bytes leftover after parsing attributes in process `syz.5.988'. [ 128.071864][ T3328] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.232719][ T6847] x_tables: duplicate underflow at hook 1 [ 128.312307][ T6849] netlink: 88 bytes leftover after parsing attributes in process `syz.5.996'. [ 128.343395][ T6851] IPv6: NLM_F_CREATE should be specified when creating new route [ 128.409776][ T6849] loop5: detected capacity change from 0 to 2048 [ 128.451766][ T6849] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.554851][ T3636] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.624910][ T6864] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1001'. [ 128.910869][ T6878] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1004'. [ 130.605228][ T6930] __nla_validate_parse: 2 callbacks suppressed [ 130.605247][ T6930] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1019'. [ 130.660308][ T29] kauditd_printk_skb: 63 callbacks suppressed [ 130.660327][ T29] audit: type=1400 audit(1768905014.492:2361): avc: denied { mounton } for pid=6936 comm="syz.1.1024" path="/222/file0" dev="tmpfs" ino=1211 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 130.913009][ T6951] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1028'. [ 131.666566][ T6968] loop2: detected capacity change from 0 to 1024 [ 131.673891][ T6968] EXT4-fs: Ignoring removed mblk_io_submit option [ 131.692087][ T6968] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.889577][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.966737][ T6978] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1037'. [ 132.189149][ T6988] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1042'. [ 132.535163][ T7002] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1046'. [ 132.559690][ T29] audit: type=1400 audit(1768905016.372:2362): avc: denied { bind } for pid=6997 comm="syz.1.1046" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 132.599045][ T7005] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1046'. [ 132.665013][ T6998] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1046'. [ 133.189761][ T29] audit: type=1400 audit(1768905017.032:2363): avc: denied { write } for pid=7018 comm="syz.6.1053" name="file0" dev="tmpfs" ino=451 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 133.213307][ T29] audit: type=1400 audit(1768905017.032:2364): avc: denied { open } for pid=7018 comm="syz.6.1053" path="/80/file0" dev="tmpfs" ino=451 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 133.339146][ T29] audit: type=1400 audit(1768905017.032:2365): avc: denied { ioctl } for pid=7018 comm="syz.6.1053" path="/80/file0" dev="tmpfs" ino=451 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 133.502178][ T7032] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1057'. [ 133.511096][ T7034] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1053'. [ 133.573671][ T7033] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1058'. [ 133.886046][ T7048] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7048 comm=syz.6.1063 [ 134.049525][ T7051] x_tables: duplicate underflow at hook 1 [ 134.086754][ T29] audit: type=1400 audit(1768905017.922:2366): avc: denied { map } for pid=7055 comm="syz.6.1066" path="socket:[18709]" dev="sockfs" ino=18709 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 134.112745][ T29] audit: type=1400 audit(1768905017.922:2367): avc: denied { read } for pid=7055 comm="syz.6.1066" path="socket:[18709]" dev="sockfs" ino=18709 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 134.279529][ T7066] loop5: detected capacity change from 0 to 1024 [ 134.399806][ T7066] EXT4-fs: Ignoring removed orlov option [ 134.519589][ T7066] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.773970][ T3636] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.969241][ T29] audit: type=1400 audit(1768905018.802:2368): avc: denied { setopt } for pid=7092 comm="syz.0.1079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 134.991932][ T29] audit: type=1400 audit(1768905018.802:2369): avc: denied { write } for pid=7092 comm="syz.0.1079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 135.389126][ T29] audit: type=1400 audit(1768905019.232:2370): avc: denied { connect } for pid=7114 comm="syz.1.1087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 135.479037][ T7116] loop5: detected capacity change from 0 to 1024 [ 135.540439][ T7116] EXT4-fs: Ignoring removed orlov option [ 135.568621][ T7115] loop1: detected capacity change from 0 to 8192 [ 135.772698][ T7116] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.972994][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 135.973090][ T29] audit: type=1400 audit(1768905019.812:2372): avc: denied { read } for pid=3048 comm="dhcpcd" name="n30" dev="tmpfs" ino=5803 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 136.002679][ T29] audit: type=1400 audit(1768905019.812:2373): avc: denied { open } for pid=3048 comm="dhcpcd" path="/run/udev/data/n30" dev="tmpfs" ino=5803 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 136.028244][ T29] audit: type=1400 audit(1768905019.812:2374): avc: denied { getattr } for pid=3048 comm="dhcpcd" path="/run/udev/data/n30" dev="tmpfs" ino=5803 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 136.146878][ T3636] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.390595][ T29] audit: type=1400 audit(1768905020.232:2375): avc: denied { create } for pid=7137 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 136.467668][ T7159] __nla_validate_parse: 8 callbacks suppressed [ 136.467683][ T7159] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1096'. [ 136.486832][ T29] audit: type=1400 audit(1768905020.262:2376): avc: denied { write } for pid=7137 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.sl0.link" dev="tmpfs" ino=5829 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 136.515366][ T29] audit: type=1400 audit(1768905020.262:2377): avc: denied { append } for pid=7137 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" dev="tmpfs" ino=5829 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 136.738731][ T29] audit: type=1400 audit(1768905020.492:2378): avc: denied { unlink } for pid=7157 comm="rm" name="resolv.conf.sl0.link" dev="tmpfs" ino=5829 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 137.253738][ T7200] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1105'. [ 137.330307][ T7204] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1107'. [ 137.464566][ T29] audit: type=1400 audit(1768905021.302:2379): avc: denied { create } for pid=7205 comm="syz.1.1108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 137.489649][ T7206] netlink: 'syz.1.1108': attribute type 1 has an invalid length. [ 137.551986][ T29] audit: type=1400 audit(1768905021.332:2380): avc: denied { write } for pid=7205 comm="syz.1.1108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 137.689271][ T7208] 8021q: adding VLAN 0 to HW filter on device bond6 [ 137.780282][ T7208] bond5: (slave bond6): making interface the new active one [ 137.804418][ T7221] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1114'. [ 137.850426][ T7208] bond5: (slave bond6): Enslaving as an active interface with an up link [ 138.120348][ T29] audit: type=1326 audit(1768905021.942:2381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7225 comm="syz.1.1117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0f622f4ad7 code=0x7ffc0000 [ 138.129604][ T7234] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1119'. [ 138.553569][ T7251] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1126'. [ 138.745641][ T7262] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1130'. [ 139.289425][ T7275] bond3 (unregistering): Released all slaves [ 139.389410][ T7280] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1135'. [ 139.539250][ T7289] x_tables: duplicate underflow at hook 1 [ 139.598250][ T7290] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1139'. [ 139.709540][ T7293] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1141'. [ 140.093315][ T7308] loop5: detected capacity change from 0 to 512 [ 140.155587][ T7308] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.245463][ T7308] ext4 filesystem being mounted at /230/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 140.353331][ T3636] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.386513][ T7313] bond3: Removing last arp target with arp_interval on [ 140.681220][ T7313] bond4: Removing last arp target with arp_interval on [ 140.813983][ T7316] bond1 (unregistering): Released all slaves [ 140.917860][ T7313] bond5: Removing last arp target with arp_interval on [ 140.972981][ T7313] bond6: Removing last arp target with arp_interval on [ 141.021437][ T29] kauditd_printk_skb: 316 callbacks suppressed [ 141.021455][ T29] audit: type=1326 audit(1768905024.862:2698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7336 comm="syz.5.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa330adacb9 code=0x7ffc0000 [ 141.115469][ T7313] bond7: Removing last arp target with arp_interval on [ 141.183521][ T29] audit: type=1326 audit(1768905024.902:2699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7336 comm="syz.5.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=251 compat=0 ip=0x7fa330adacb9 code=0x7ffc0000 [ 141.207638][ T29] audit: type=1326 audit(1768905024.902:2700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7336 comm="syz.5.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa330adacb9 code=0x7ffc0000 [ 141.231651][ T29] audit: type=1326 audit(1768905024.902:2701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7336 comm="syz.5.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fa330adacb9 code=0x7ffc0000 [ 141.255327][ T29] audit: type=1326 audit(1768905024.902:2702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7336 comm="syz.5.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa330adacb9 code=0x7ffc0000 [ 141.279390][ T29] audit: type=1326 audit(1768905024.902:2703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7336 comm="syz.5.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa330adacb9 code=0x7ffc0000 [ 141.304252][ T29] audit: type=1326 audit(1768905024.902:2704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7336 comm="syz.5.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa330adacb9 code=0x7ffc0000 [ 141.328962][ T29] audit: type=1326 audit(1768905024.902:2705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7336 comm="syz.5.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa330adacb9 code=0x7ffc0000 [ 141.353377][ T29] audit: type=1326 audit(1768905024.902:2706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7336 comm="syz.5.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa330adacb9 code=0x7ffc0000 [ 141.377117][ T29] audit: type=1326 audit(1768905024.902:2707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7336 comm="syz.5.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa330adacb9 code=0x7ffc0000 [ 141.522027][ T7353] __nla_validate_parse: 1 callbacks suppressed [ 141.522047][ T7353] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1158'. [ 141.578787][ T7352] netlink: 'syz.0.1159': attribute type 13 has an invalid length. [ 141.757775][ T7364] loop2: detected capacity change from 0 to 1024 [ 141.785569][ T7366] FAULT_INJECTION: forcing a failure. [ 141.785569][ T7366] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 141.799560][ T7366] CPU: 1 UID: 0 PID: 7366 Comm: syz.1.1166 Not tainted syzkaller #0 PREEMPT(voluntary) [ 141.799597][ T7366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 141.799655][ T7366] Call Trace: [ 141.799664][ T7366] [ 141.799672][ T7366] __dump_stack+0x1d/0x30 [ 141.799697][ T7366] dump_stack_lvl+0x95/0xd0 [ 141.799725][ T7366] dump_stack+0x15/0x1b [ 141.799747][ T7366] should_fail_ex+0x263/0x280 [ 141.799775][ T7366] should_fail+0xb/0x20 [ 141.799797][ T7366] should_fail_usercopy+0x1a/0x20 [ 141.799908][ T7366] _copy_to_user+0x20/0xa0 [ 141.799939][ T7366] simple_read_from_buffer+0xb5/0x130 [ 141.799975][ T7366] proc_fail_nth_read+0x10e/0x150 [ 141.800051][ T7366] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 141.800098][ T7366] vfs_read+0x1ab/0x7f0 [ 141.800133][ T7366] ? __rcu_read_unlock+0x4e/0x70 [ 141.800155][ T7366] ? __fget_files+0x184/0x1c0 [ 141.800210][ T7366] ? mutex_lock+0x57/0x90 [ 141.800258][ T7366] ksys_read+0xdc/0x1a0 [ 141.800350][ T7366] __x64_sys_read+0x40/0x50 [ 141.800368][ T7366] x64_sys_call+0x2889/0x3000 [ 141.800412][ T7366] do_syscall_64+0xc0/0x2a0 [ 141.800433][ T7366] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.800454][ T7366] RIP: 0033:0x7f0f622bb58e [ 141.800472][ T7366] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 141.800491][ T7366] RSP: 002b:00007f0f60d56fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 141.800574][ T7366] RAX: ffffffffffffffda RBX: 00007f0f60d576c0 RCX: 00007f0f622bb58e [ 141.800670][ T7366] RDX: 000000000000000f RSI: 00007f0f60d570a0 RDI: 0000000000000003 [ 141.800703][ T7366] RBP: 00007f0f60d57090 R08: 0000000000000000 R09: 0000000000000000 [ 141.800718][ T7366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 141.800733][ T7366] R13: 00007f0f62576038 R14: 00007f0f62575fa0 R15: 00007ffd3ae7c3f8 [ 141.800885][ T7366] [ 141.802109][ T7364] EXT4-fs: Ignoring removed orlov option [ 142.078486][ T7364] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.118423][ T7372] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 142.197245][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.226752][ T7374] netlink: 'syz.0.1167': attribute type 10 has an invalid length. [ 142.275825][ T7383] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1170'. [ 142.279227][ T7384] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1172'. [ 142.469774][ T7393] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1176'. [ 142.480058][ T7394] netlink: 240 bytes leftover after parsing attributes in process `syz.6.1175'. [ 142.557489][ T7399] netlink: 'syz.6.1178': attribute type 1 has an invalid length. [ 142.575975][ T7399] bond1 (unregistering): Released all slaves [ 142.641318][ T7402] netlink: 'syz.5.1179': attribute type 21 has an invalid length. [ 142.742996][ T7405] loop6: detected capacity change from 0 to 1024 [ 142.791945][ T7405] EXT4-fs: Ignoring removed orlov option [ 142.845434][ T7405] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.950386][ T7402] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1179'. [ 142.959981][ T7402] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1179'. [ 143.067168][ T5569] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.213128][ T7425] netlink: 240 bytes leftover after parsing attributes in process `syz.5.1187'. [ 143.424519][ T7440] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1192'. [ 143.603590][ T7449] loop5: detected capacity change from 0 to 1024 [ 143.620312][ T7454] macvlan0: mtu greater than device maximum [ 143.671238][ T7449] EXT4-fs: Ignoring removed orlov option [ 143.686251][ T7458] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1197'. [ 143.705972][ T7449] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.739776][ T7458] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 143.864737][ T3636] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.144639][ T7481] loop6: detected capacity change from 0 to 512 [ 144.182818][ T7481] EXT4-fs: Ignoring removed nobh option [ 144.331543][ T7481] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.388059][ T7481] ext4 filesystem being mounted at /101/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.565865][ T7493] x_tables: duplicate underflow at hook 1 [ 144.702436][ T7496] loop1: detected capacity change from 0 to 1764 [ 144.714901][ T7496] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 144.725113][ T7499] loop2: detected capacity change from 0 to 128 [ 144.768467][ T7499] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 144.819124][ T7499] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 144.914675][ T2363] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.922248][ T3326] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 144.926946][ T2363] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.931320][ T3326] FAT-fs (loop2): Filesystem has been set read-only [ 144.974603][ T3326] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 144.978710][ T2363] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.992972][ T2363] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.064627][ T7481] EXT4-fs error (device loop6): ext4_find_dest_de:2050: inode #12: block 32: comm syz.6.1206: bad entry in directory: rec_len is too small for name_len - offset=0, inode=12, rec_len=12, size=2048 fake=0 [ 145.232098][ T7532] loop1: detected capacity change from 0 to 512 [ 145.239459][ T5569] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.250000][ T7532] EXT4-fs: Ignoring removed oldalloc option [ 145.261897][ T7532] EXT4-fs error (device loop1): ext4_xattr_inode_iget:437: comm syz.1.1225: Parent and EA inode have the same ino 15 [ 145.285625][ T7532] EXT4-fs error (device loop1): ext4_xattr_inode_iget:437: comm syz.1.1225: Parent and EA inode have the same ino 15 [ 145.298716][ T7532] EXT4-fs (loop1): 1 orphan inode deleted [ 145.305073][ T7532] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.308345][ T7504] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 145.331094][ T1580] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 145.341648][ T1580] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.386896][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.428084][ T7541] netlink: 'syz.6.1228': attribute type 1 has an invalid length. [ 145.444092][ T1580] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 145.454573][ T1580] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.529411][ T7541] bond1 (unregistering): Released all slaves [ 145.591704][ T7555] loop0: detected capacity change from 0 to 512 [ 145.621116][ T1580] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 145.631755][ T1580] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.679410][ T7563] loop6: detected capacity change from 0 to 1024 [ 145.689903][ T7563] EXT4-fs: Ignoring removed orlov option [ 145.698713][ T7555] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.699711][ T7563] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.750909][ T7555] ext4 filesystem being mounted at /251/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.768247][ T7572] netlink: 'syz.1.1238': attribute type 1 has an invalid length. [ 145.768265][ T7572] netlink: 'syz.1.1238': attribute type 2 has an invalid length. [ 145.793021][ T1580] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 145.793117][ T1580] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.868538][ T5569] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.893779][ T7577] geneve2: entered promiscuous mode [ 145.899450][ T7577] geneve2: entered allmulticast mode [ 145.910641][ T3328] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.027814][ T29] kauditd_printk_skb: 30 callbacks suppressed [ 146.027912][ T29] audit: type=1326 audit(1768905037.875:2738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7589 comm="syz.0.1241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ba050acb9 code=0x7ffc0000 [ 146.107098][ T29] audit: type=1326 audit(1768905037.905:2739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7589 comm="syz.0.1241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ba050acb9 code=0x7ffc0000 [ 146.131807][ T29] audit: type=1326 audit(1768905037.915:2740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7589 comm="syz.0.1241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f0ba050acb9 code=0x7ffc0000 [ 146.156229][ T29] audit: type=1326 audit(1768905037.915:2741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7589 comm="syz.0.1241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ba050acb9 code=0x7ffc0000 [ 146.180135][ T29] audit: type=1326 audit(1768905037.915:2742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7589 comm="syz.0.1241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ba050acb9 code=0x7ffc0000 [ 146.204078][ T29] audit: type=1326 audit(1768905037.915:2743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7589 comm="syz.0.1241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f0ba050acb9 code=0x7ffc0000 [ 146.227775][ T29] audit: type=1326 audit(1768905037.915:2744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7589 comm="syz.0.1241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ba050acb9 code=0x7ffc0000 [ 146.251886][ T29] audit: type=1326 audit(1768905037.915:2745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7589 comm="syz.0.1241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ba050acb9 code=0x7ffc0000 [ 146.276706][ T29] audit: type=1326 audit(1768905037.925:2746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7589 comm="syz.0.1241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ba050acb9 code=0x7ffc0000 [ 146.301057][ T29] audit: type=1326 audit(1768905037.925:2747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7589 comm="syz.0.1241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0ba04cb58e code=0x7ffc0000 [ 146.362643][ T1580] bond0 (unregistering): Released all slaves [ 146.380956][ T1580] bond1 (unregistering): Released all slaves [ 146.423577][ T1580] bond2 (unregistering): Released all slaves [ 146.441650][ T1580] bond3 (unregistering): Released all slaves [ 146.450736][ T1580] bond4 (unregistering): Released all slaves [ 146.460496][ T1580] bond5 (unregistering): Released all slaves [ 146.470282][ T1580] bond6 (unregistering): Released all slaves [ 146.477534][ T7611] loop0: detected capacity change from 0 to 1024 [ 146.479823][ T1580] bond7 (unregistering): Released all slaves [ 146.484445][ T7611] EXT4-fs: Ignoring removed orlov option [ 146.519713][ T7611] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.625419][ T3328] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.652261][ T7550] chnl_net:caif_netlink_parms(): no params data found [ 146.671578][ T1580] hsr_slave_0: left promiscuous mode [ 146.701870][ T1580] hsr_slave_1: left promiscuous mode [ 146.707713][ T7628] loop0: detected capacity change from 0 to 512 [ 146.765462][ T1580] veth1_macvtap: left promiscuous mode [ 146.774720][ T7628] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.799947][ T1580] veth0_macvtap: left promiscuous mode [ 146.805323][ T7628] ext4 filesystem being mounted at /257/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.816055][ T1580] veth1_vlan: left promiscuous mode [ 146.821825][ T1580] veth0_vlan: left promiscuous mode [ 146.838516][ T3328] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.077778][ T7550] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.085515][ T7550] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.093926][ T7550] bridge_slave_0: entered allmulticast mode [ 147.101383][ T7550] bridge_slave_0: entered promiscuous mode [ 147.166291][ T7550] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.173446][ T7550] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.194401][ T7550] bridge_slave_1: entered allmulticast mode [ 147.211692][ T7550] bridge_slave_1: entered promiscuous mode [ 147.259744][ T7657] loop6: detected capacity change from 0 to 512 [ 147.280111][ T7660] loop5: detected capacity change from 0 to 1024 [ 147.292716][ T7657] EXT4-fs: Ignoring removed bh option [ 147.297080][ T7660] EXT4-fs: Ignoring removed orlov option [ 147.320224][ T7657] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.334568][ T7550] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 147.337762][ T7657] ext4 filesystem being mounted at /110/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 147.359115][ T7660] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.361740][ T7550] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 147.404371][ T7550] team0: Port device team_slave_0 added [ 147.411470][ T7550] team0: Port device team_slave_1 added [ 147.419000][ T7657] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.430796][ T7550] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 147.438272][ T7550] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 147.465225][ T7550] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 147.485447][ T3636] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.486845][ T7550] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 147.502242][ T7550] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 147.529646][ T7550] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 147.568808][ T7679] loop6: detected capacity change from 0 to 512 [ 147.599227][ T7683] loop5: detected capacity change from 0 to 512 [ 147.610812][ T7683] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 147.621154][ T7679] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.637377][ T7679] ext4 filesystem being mounted at /111/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 147.656137][ T7683] EXT4-fs (loop5): orphan cleanup on readonly fs [ 147.663051][ T7683] EXT4-fs warning (device loop5): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 147.678009][ T7683] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 147.685021][ T7683] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.1259: bad orphan inode 768 [ 147.692182][ T7683] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 147.715233][ T7683] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.748004][ T5569] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.757874][ T7683] loop5: detected capacity change from 0 to 512 [ 147.777725][ T7550] hsr_slave_0: entered promiscuous mode [ 147.784870][ T7683] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 147.814669][ T7683] EXT4-fs (loop5): can't mount with data=, fs mounted w/o journal [ 147.826319][ T7550] hsr_slave_1: entered promiscuous mode [ 147.842342][ T7550] debugfs: 'hsr0' already exists in 'hsr' [ 147.848501][ T7550] Cannot create hsr debugfs directory [ 148.069636][ T7725] x_tables: duplicate underflow at hook 1 [ 148.164859][ T7550] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 148.190205][ T7550] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 148.220764][ T7550] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 148.254578][ T7550] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 148.404984][ T7550] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.418464][ T7550] 8021q: adding VLAN 0 to HW filter on device team0 [ 148.438371][ T839] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.445981][ T839] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.460647][ T839] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.467959][ T839] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.510563][ T7550] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 148.521356][ T7550] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 148.673515][ T7760] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.691919][ T7760] ext4 filesystem being mounted at /262/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 148.692577][ T7550] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 148.751688][ T3328] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.833264][ T7785] __nla_validate_parse: 11 callbacks suppressed [ 148.833285][ T7785] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1281'. [ 149.007923][ T7797] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1282'. [ 149.051284][ T7797] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 149.125307][ T7808] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1285'. [ 149.157062][ T7795] x_tables: duplicate underflow at hook 1 [ 149.161853][ T7550] veth0_vlan: entered promiscuous mode [ 149.179121][ T7812] netlink: 'syz.1.1286': attribute type 21 has an invalid length. [ 149.186275][ T7550] veth1_vlan: entered promiscuous mode [ 149.187219][ T7812] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1286'. [ 149.199953][ T7550] veth0_macvtap: entered promiscuous mode [ 149.242412][ T7550] veth1_macvtap: entered promiscuous mode [ 149.242798][ T7814] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.253113][ T7550] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 149.269202][ T7812] netlink: 'syz.1.1286': attribute type 5 has an invalid length. [ 149.277269][ T7812] netlink: 'syz.1.1286': attribute type 6 has an invalid length. [ 149.285231][ T7812] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1286'. [ 149.296127][ T7814] ext4 filesystem being mounted at /121/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.322940][ T5569] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.343586][ T7550] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 149.358207][ T1580] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.390988][ T1580] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.424286][ T1580] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.438840][ T1580] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.529551][ T7833] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1293'. [ 149.539028][ T7833] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 149.613746][ T7843] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1296'. [ 149.747919][ T7847] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.771843][ T7847] ext4 filesystem being mounted at /259/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.853986][ T3636] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.324020][ T7885] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1312'. [ 150.473123][ T7901] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1316'. [ 150.506087][ T7898] set_capacity_and_notify: 3 callbacks suppressed [ 150.506107][ T7898] loop1: detected capacity change from 0 to 764 [ 150.595733][ T7905] loop7: detected capacity change from 0 to 512 [ 150.617649][ T7907] loop6: detected capacity change from 0 to 128 [ 150.630037][ T7898] rock: directory entry would overflow storage [ 150.636853][ T7898] rock: sig=0x4f50, size=4, remaining=3 [ 150.642917][ T7898] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 150.656305][ T7905] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.687186][ T7905] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 150.699300][ T7898] Symlink component flag not implemented [ 150.745310][ T7911] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1320'. [ 150.780870][ T7550] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.978734][ T7924] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 151.193923][ T29] kauditd_printk_skb: 126 callbacks suppressed [ 151.193940][ T29] audit: type=1326 audit(1768905043.037:2874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7932 comm="syz.7.1331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15ae57acb9 code=0x7ffc0000 [ 151.263366][ T29] audit: type=1326 audit(1768905043.077:2875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7932 comm="syz.7.1331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15ae57acb9 code=0x7ffc0000 [ 151.288474][ T29] audit: type=1326 audit(1768905043.077:2876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7932 comm="syz.7.1331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15ae57acb9 code=0x7ffc0000 [ 151.314838][ T29] audit: type=1326 audit(1768905043.077:2877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7932 comm="syz.7.1331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15ae57acb9 code=0x7ffc0000 [ 151.340218][ T29] audit: type=1326 audit(1768905043.077:2878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7932 comm="syz.7.1331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7f15ae57acb9 code=0x7ffc0000 [ 151.364457][ T29] audit: type=1326 audit(1768905043.077:2879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7932 comm="syz.7.1331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15ae57acb9 code=0x7ffc0000 [ 151.389449][ T29] audit: type=1326 audit(1768905043.077:2880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7932 comm="syz.7.1331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15ae57acb9 code=0x7ffc0000 [ 151.414715][ T29] audit: type=1326 audit(1768905043.077:2881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7932 comm="syz.7.1331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15ae57acb9 code=0x7ffc0000 [ 151.440048][ T29] audit: type=1326 audit(1768905043.077:2882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7932 comm="syz.7.1331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f15ae57acb9 code=0x7ffc0000 [ 151.465357][ T29] audit: type=1326 audit(1768905043.097:2883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7932 comm="syz.7.1331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f15ae57acb9 code=0x7ffc0000 [ 151.467698][ T7937] loop7: detected capacity change from 0 to 512 [ 151.557482][ T7937] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.600132][ T7937] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 151.663939][ T7959] A link change request failed with some changes committed already. Interface veth1_to_batadv may have been left with an inconsistent configuration, please check. [ 151.685658][ T7550] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.715366][ T7964] netlink: 'syz.5.1339': attribute type 21 has an invalid length. [ 151.845350][ T7974] loop1: detected capacity change from 0 to 128 [ 151.934547][ T7974] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 152.012324][ T7974] ext4 filesystem being mounted at /301/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 152.026554][ T7981] bond1 (unregistering): Released all slaves [ 152.081356][ T7986] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 152.135255][ T7988] loop7: detected capacity change from 0 to 512 [ 152.176901][ T3320] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 152.206950][ T7988] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.246373][ T7988] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 152.275755][ T7550] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.295781][ T8002] netdevsim netdevsim0: Direct firmware load for / [ 152.295781][ T8002] failed with error -2 [ 152.460757][ T8015] loop6: detected capacity change from 0 to 1024 [ 152.470708][ T8015] EXT4-fs: Ignoring removed orlov option [ 152.495162][ T8015] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.550913][ T5569] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.562740][ T8023] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 152.590652][ T8025] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 152.616861][ T8027] loop1: detected capacity change from 0 to 512 [ 152.647863][ T8027] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.661011][ T8027] ext4 filesystem being mounted at /310/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 152.687571][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.113412][ T8049] loop0: detected capacity change from 0 to 512 [ 153.138020][ T8049] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.155158][ T8049] ext4 filesystem being mounted at /274/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 153.195527][ T8055] FAULT_INJECTION: forcing a failure. [ 153.195527][ T8055] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 153.209039][ T8055] CPU: 0 UID: 0 PID: 8055 Comm: syz.1.1373 Not tainted syzkaller #0 PREEMPT(voluntary) [ 153.209066][ T8055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 153.209078][ T8055] Call Trace: [ 153.209088][ T8055] [ 153.209168][ T8055] __dump_stack+0x1d/0x30 [ 153.209264][ T8055] dump_stack_lvl+0x95/0xd0 [ 153.209341][ T8055] dump_stack+0x15/0x1b [ 153.209364][ T8055] should_fail_ex+0x263/0x280 [ 153.209392][ T8055] should_fail+0xb/0x20 [ 153.209416][ T8055] should_fail_usercopy+0x1a/0x20 [ 153.209493][ T8055] _copy_from_user+0x1c/0xb0 [ 153.209525][ T8055] do_ipt_set_ctl+0x3a9/0x8e0 [ 153.209584][ T8055] ? _raw_spin_unlock_bh+0x36/0x40 [ 153.209684][ T8055] ? tcp_release_cb+0xf1/0x370 [ 153.209768][ T8055] nf_setsockopt+0x199/0x1b0 [ 153.209866][ T8055] ip_setsockopt+0x102/0x110 [ 153.209898][ T8055] tcp_setsockopt+0x98/0xb0 [ 153.209919][ T8055] sock_common_setsockopt+0x69/0x80 [ 153.209967][ T8055] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 153.209993][ T8055] __sys_setsockopt+0x184/0x200 [ 153.210026][ T8055] __x64_sys_setsockopt+0x64/0x80 [ 153.210109][ T8055] x64_sys_call+0x21d5/0x3000 [ 153.210279][ T8055] do_syscall_64+0xc0/0x2a0 [ 153.210301][ T8055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.210356][ T8055] RIP: 0033:0x7f0f622facb9 [ 153.210374][ T8055] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 153.210391][ T8055] RSP: 002b:00007f0f60d57028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 153.210456][ T8055] RAX: ffffffffffffffda RBX: 00007f0f62575fa0 RCX: 00007f0f622facb9 [ 153.210473][ T8055] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000004 [ 153.210486][ T8055] RBP: 00007f0f60d57090 R08: 0000000000000238 R09: 0000000000000000 [ 153.210500][ T8055] R10: 0000200000000980 R11: 0000000000000246 R12: 0000000000000001 [ 153.210515][ T8055] R13: 00007f0f62576038 R14: 00007f0f62575fa0 R15: 00007ffd3ae7c3f8 [ 153.210537][ T8055] [ 153.211930][ T8054] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 153.337053][ T8063] EXT4-fs error (device loop0): ext4_lookup:1785: inode #12: comm syz.0.1372: iget: bad i_size value: 2533274857506816 [ 153.518500][ T8067] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 153.693683][ T8091] gretap1: entered promiscuous mode [ 153.782117][ T3328] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.983480][ T8088] __nla_validate_parse: 11 callbacks suppressed [ 153.983499][ T8088] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1384'. [ 154.003387][ T8088] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1384'. [ 154.062090][ T8116] loop0: detected capacity change from 0 to 1024 [ 154.120121][ T8116] EXT4-fs: Ignoring removed orlov option [ 154.173565][ T8116] ext4: Unknown parameter 'max_' [ 154.290204][ T8130] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1399'. [ 154.796296][ T8163] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 154.808478][ T8163] EXT4-fs (loop1): filesystem is read-only [ 154.824485][ T8163] EXT4-fs (loop1): failed to initialize system zone (-117) [ 154.835191][ T8163] EXT4-fs (loop1): mount failed [ 155.032647][ T8172] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1413'. [ 155.157498][ T8183] netlink: 104 bytes leftover after parsing attributes in process `syz.6.1418'. [ 155.459103][ T8207] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1427'. [ 155.468736][ T8207] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1427'. [ 155.583772][ T8212] FAULT_INJECTION: forcing a failure. [ 155.583772][ T8212] name fail_futex, interval 1, probability 0, space 0, times 1 [ 155.597999][ T8212] CPU: 0 UID: 0 PID: 8212 Comm: syz.6.1426 Not tainted syzkaller #0 PREEMPT(voluntary) [ 155.598096][ T8212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 155.598108][ T8212] Call Trace: [ 155.598115][ T8212] [ 155.598125][ T8212] __dump_stack+0x1d/0x30 [ 155.598154][ T8212] dump_stack_lvl+0x95/0xd0 [ 155.598179][ T8212] dump_stack+0x15/0x1b [ 155.598197][ T8212] should_fail_ex+0x263/0x280 [ 155.598286][ T8212] should_fail+0xb/0x20 [ 155.598318][ T8212] get_futex_key+0x12f/0xbe0 [ 155.598347][ T8212] ? __rcu_read_unlock+0x4e/0x70 [ 155.598414][ T8212] futex_wake+0x84/0x380 [ 155.598517][ T8212] ? perf_lock_task_context+0x260/0x2d0 [ 155.598591][ T8212] do_futex+0x323/0x380 [ 155.598641][ T8212] mm_release+0xa1/0x190 [ 155.598663][ T8212] exit_mm_release+0x25/0x30 [ 155.598684][ T8212] exit_mm+0x37/0x180 [ 155.598711][ T8212] do_exit+0x3fa/0x1590 [ 155.598804][ T8212] ? wakeup_source_deactivate+0x1b1/0x270 [ 155.598851][ T8212] ? __pm_relax+0x61/0x70 [ 155.598872][ T8212] do_group_exit+0xfe/0x140 [ 155.598893][ T8212] ? get_signal+0xe47/0xf60 [ 155.598939][ T8212] get_signal+0xe4f/0xf60 [ 155.598998][ T8212] arch_do_signal_or_restart+0x96/0x450 [ 155.599027][ T8212] exit_to_user_mode_loop+0x6a/0x6f0 [ 155.599049][ T8212] ? __x64_sys_epoll_wait+0x15e/0x190 [ 155.599085][ T8212] do_syscall_64+0x1d3/0x2a0 [ 155.599183][ T8212] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.599244][ T8212] RIP: 0033:0x7f0da079acb9 [ 155.599260][ T8212] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 155.599277][ T8212] RSP: 002b:00007f0d9f1b5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e8 [ 155.599371][ T8212] RAX: fffffffffffffffc RBX: 00007f0da0a16180 RCX: 00007f0da079acb9 [ 155.599389][ T8212] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 0000000000000006 [ 155.599403][ T8212] RBP: 00007f0d9f1b5090 R08: 0000000000000000 R09: 0000000000000000 [ 155.599420][ T8212] R10: 00000000ffffffff R11: 0000000000000246 R12: 0000000000000001 [ 155.599451][ T8212] R13: 00007f0da0a16218 R14: 00007f0da0a16180 R15: 00007ffea4d7cfd8 [ 155.599472][ T8212] [ 156.037554][ T8230] set_capacity_and_notify: 1 callbacks suppressed [ 156.037632][ T8230] loop1: detected capacity change from 0 to 256 [ 156.057695][ T8230] vfat: Unknown parameter 'sw;"% /h˜£°¤÷hortname' [ 156.193145][ T29] kauditd_printk_skb: 1660 callbacks suppressed [ 156.193163][ T29] audit: type=1326 audit(1768905048.040:4544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8218 comm="syz.0.1430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0ba0504ad7 code=0x7ffc0000 [ 156.224886][ T29] audit: type=1326 audit(1768905048.050:4545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8218 comm="syz.0.1430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0ba04ac0d9 code=0x7ffc0000 [ 156.248960][ T29] audit: type=1326 audit(1768905048.050:4546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8218 comm="syz.0.1430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0ba0504ad7 code=0x7ffc0000 [ 156.273752][ T29] audit: type=1326 audit(1768905048.050:4547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8218 comm="syz.0.1430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0ba04ac0d9 code=0x7ffc0000 [ 156.298744][ T29] audit: type=1326 audit(1768905048.050:4548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8218 comm="syz.0.1430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0ba0504ad7 code=0x7ffc0000 [ 156.323605][ T29] audit: type=1326 audit(1768905048.050:4549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8218 comm="syz.0.1430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0ba04ac0d9 code=0x7ffc0000 [ 156.419834][ T29] audit: type=1326 audit(1768905048.050:4550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8218 comm="syz.0.1430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0ba0504ad7 code=0x7ffc0000 [ 156.445491][ T29] audit: type=1326 audit(1768905048.050:4551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8218 comm="syz.0.1430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0ba04ac0d9 code=0x7ffc0000 [ 156.470597][ T29] audit: type=1326 audit(1768905048.050:4552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8218 comm="syz.0.1430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ba050acb9 code=0x7ffc0000 [ 156.496076][ T29] audit: type=1326 audit(1768905048.050:4553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8218 comm="syz.0.1430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0ba0504ad7 code=0x7ffc0000 [ 156.530523][ T8250] FAULT_INJECTION: forcing a failure. [ 156.530523][ T8250] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 156.544145][ T8250] CPU: 1 UID: 0 PID: 8250 Comm: syz.0.1440 Not tainted syzkaller #0 PREEMPT(voluntary) [ 156.544176][ T8250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 156.544189][ T8250] Call Trace: [ 156.544197][ T8250] [ 156.544205][ T8250] __dump_stack+0x1d/0x30 [ 156.544323][ T8250] dump_stack_lvl+0x95/0xd0 [ 156.544356][ T8250] dump_stack+0x15/0x1b [ 156.544448][ T8250] should_fail_ex+0x263/0x280 [ 156.544475][ T8250] should_fail+0xb/0x20 [ 156.544497][ T8250] should_fail_usercopy+0x1a/0x20 [ 156.544566][ T8250] _copy_to_user+0x20/0xa0 [ 156.544661][ T8250] simple_read_from_buffer+0xb5/0x130 [ 156.544699][ T8250] proc_fail_nth_read+0x10e/0x150 [ 156.544728][ T8250] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 156.544757][ T8250] vfs_read+0x1ab/0x7f0 [ 156.544796][ T8250] ? __rcu_read_unlock+0x4e/0x70 [ 156.544819][ T8250] ? __fget_files+0x184/0x1c0 [ 156.544904][ T8250] ? mutex_lock+0x57/0x90 [ 156.544935][ T8250] ksys_read+0xdc/0x1a0 [ 156.544956][ T8250] __x64_sys_read+0x40/0x50 [ 156.544976][ T8250] x64_sys_call+0x2889/0x3000 [ 156.545020][ T8250] do_syscall_64+0xc0/0x2a0 [ 156.545044][ T8250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.545110][ T8250] RIP: 0033:0x7f0ba04cb58e [ 156.545130][ T8250] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 156.545151][ T8250] RSP: 002b:00007f0b9ef66fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 156.545175][ T8250] RAX: ffffffffffffffda RBX: 00007f0b9ef676c0 RCX: 00007f0ba04cb58e [ 156.545191][ T8250] RDX: 000000000000000f RSI: 00007f0b9ef670a0 RDI: 0000000000000004 [ 156.545205][ T8250] RBP: 00007f0b9ef67090 R08: 0000000000000000 R09: 0000000000000000 [ 156.545299][ T8250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 156.545335][ T8250] R13: 00007f0ba0786038 R14: 00007f0ba0785fa0 R15: 00007ffe5cd10248 [ 156.545437][ T8250] [ 156.801839][ T8252] loop7: detected capacity change from 0 to 1024 [ 156.829639][ T8252] EXT4-fs: Ignoring removed orlov option [ 156.836110][ T8252] /dev/loop7: Can't open blockdev [ 156.887354][ T8255] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1442'. [ 157.203734][ T8280] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1453'. [ 157.433901][ T8294] loop1: detected capacity change from 0 to 1024 [ 157.483761][ T8294] EXT4-fs: Ignoring removed orlov option [ 157.521349][ T8294] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.554526][ T8305] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1459'. [ 157.668031][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.142435][ T8347] 9p: Bad value for 'rfdno' [ 158.675636][ T8375] netlink: 'syz.7.1488': attribute type 10 has an invalid length. [ 158.690867][ T8375] team0 (unregistering): Port device team_slave_0 removed [ 158.714256][ T8375] team0 (unregistering): Port device team_slave_1 removed [ 158.852740][ T8397] process '/newroot/297/file1' started with executable stack [ 158.886866][ T8401] xt_CT: No such helper "snmp" [ 158.907364][ T8408] netlink: zone id is out of range [ 158.912725][ T8408] netlink: zone id is out of range [ 158.918070][ T8408] netlink: zone id is out of range [ 158.923481][ T8408] netlink: zone id is out of range [ 158.929088][ T8408] netlink: zone id is out of range [ 158.934518][ T8408] netlink: zone id is out of range [ 158.939761][ T8408] netlink: zone id is out of range [ 158.945366][ T8408] netlink: zone id is out of range [ 158.950666][ T8408] netlink: zone id is out of range [ 158.956038][ T8408] netlink: zone id is out of range [ 159.076820][ T8434] __nla_validate_parse: 4 callbacks suppressed [ 159.076840][ T8434] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1497'. [ 159.095742][ T8434] loop5: detected capacity change from 0 to 128 [ 159.108332][ T8434] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 159.127673][ T8434] ext4 filesystem being mounted at /302/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 159.160778][ T3636] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 159.164211][ T8401] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 159.249189][ T8401] bond1 (unregistering): Released all slaves [ 160.013710][ T8490] netlink: 104 bytes leftover after parsing attributes in process `syz.7.1505'. [ 160.116460][ T8494] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1506'. [ 160.292130][ T8506] netlink: 240 bytes leftover after parsing attributes in process `syz.5.1509'. [ 160.393699][ T8516] netlink: 'syz.5.1514': attribute type 16 has an invalid length. [ 160.401958][ T8516] netlink: 'syz.5.1514': attribute type 17 has an invalid length. [ 160.415826][ T8516] macvlan2: left promiscuous mode [ 160.421380][ T8516] macvlan2: left allmulticast mode [ 160.434038][ T8516] bond3: left promiscuous mode [ 160.439194][ T8516] erspan1: left promiscuous mode [ 160.444418][ T8516] bond3: left allmulticast mode [ 160.463455][ T8516] erspan1: left allmulticast mode [ 160.501803][ T8524] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=17398 sclass=netlink_route_socket pid=8524 comm=syz.7.1517 [ 160.556665][ T8529] loop1: detected capacity change from 0 to 512 [ 160.583901][ T8526] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1518'. [ 160.598844][ T8529] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.631756][ T8529] ext4 filesystem being mounted at /357/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 160.668143][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.755414][ T8543] loop0: detected capacity change from 0 to 512 [ 160.817827][ T8549] netlink: 'syz.7.1526': attribute type 1 has an invalid length. [ 160.838263][ T8543] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.851498][ T8543] ext4 filesystem being mounted at /294/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 160.868899][ T8543] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1521'. [ 160.879260][ T8543] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 160.916155][ T8555] bond1 (unregistering): Released all slaves [ 160.937235][ T8557] x_tables: duplicate underflow at hook 1 [ 161.036779][ T8563] macsec0: entered promiscuous mode [ 161.042445][ T8563] macsec0: entered allmulticast mode [ 161.048107][ T8563] veth1_macvtap: entered allmulticast mode [ 161.093054][ T8567] netlink: 80 bytes leftover after parsing attributes in process `syz.7.1527'. [ 161.111561][ T8566] vlan2: entered promiscuous mode [ 161.117588][ T8566] vlan2: entered allmulticast mode [ 161.123068][ T8566] hsr_slave_1: entered allmulticast mode [ 161.135171][ T8566] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1529'. [ 161.203756][ T29] kauditd_printk_skb: 250 callbacks suppressed [ 161.203774][ T29] audit: type=1326 audit(1768905309.055:4804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8565 comm="syz.6.1529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0da079acb9 code=0x7ffc0000 [ 161.234481][ T29] audit: type=1326 audit(1768905309.055:4805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8565 comm="syz.6.1529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0da079acb9 code=0x7ffc0000 [ 161.303683][ T8578] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1533'. [ 161.442159][ T8590] bond4 (unregistering): Released all slaves [ 161.552458][ T3328] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.594831][ T8604] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1542'. [ 161.634709][ T8607] loop5: detected capacity change from 0 to 128 [ 161.660260][ T8607] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 161.673413][ T8607] ext4 filesystem being mounted at /317/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 161.730312][ T3636] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 161.750122][ T29] audit: type=1326 audit(1768905309.595:4806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8617 comm="syz.1.1548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f622facb9 code=0x7ffc0000 [ 161.774821][ T29] audit: type=1326 audit(1768905309.595:4807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8617 comm="syz.1.1548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f622facb9 code=0x7ffc0000 [ 161.800353][ T29] audit: type=1326 audit(1768905309.595:4808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8617 comm="syz.1.1548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f622facb9 code=0x7ffc0000 [ 161.825953][ T29] audit: type=1326 audit(1768905309.605:4809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8617 comm="syz.1.1548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f622facb9 code=0x7ffc0000 [ 161.850843][ T29] audit: type=1326 audit(1768905309.605:4810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8617 comm="syz.1.1548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0f622facb9 code=0x7ffc0000 [ 161.876686][ T29] audit: type=1326 audit(1768905309.605:4811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8617 comm="syz.1.1548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f622facb9 code=0x7ffc0000 [ 161.901933][ T29] audit: type=1326 audit(1768905309.605:4812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8617 comm="syz.1.1548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f622facb9 code=0x7ffc0000 [ 161.926968][ T29] audit: type=1326 audit(1768905309.605:4813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8617 comm="syz.1.1548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f622facb9 code=0x7ffc0000 [ 162.203920][ T8637] vhci_hcd vhci_hcd.3: default hub control req: 800f v0000 i0000 l31125 [ 162.670838][ T8666] loop1: detected capacity change from 0 to 1024 [ 162.679003][ T8666] EXT4-fs: Ignoring removed orlov option [ 162.700087][ T8666] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.764574][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.881752][ T8686] bond1 (unregistering): Released all slaves [ 163.063310][ T8700] loop5: detected capacity change from 0 to 1024 [ 163.078087][ T8700] EXT4-fs: Ignoring removed orlov option [ 163.113882][ T8700] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.196887][ T3636] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.230235][ T8696] loop1: detected capacity change from 0 to 512 [ 163.238234][ T8696] vfat: Unknown parameter '’’’’’’’’’’’’’’' [ 163.579911][ T8730] loop6: detected capacity change from 0 to 1024 [ 163.590677][ T8730] EXT4-fs: Ignoring removed orlov option [ 163.600797][ T8730] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.641317][ T8732] bond1 (unregistering): Released all slaves [ 163.847361][ T5569] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.332720][ T8767] x_tables: duplicate underflow at hook 1 [ 165.218264][ T8806] netlink: 'syz.1.1612': attribute type 1 has an invalid length. [ 165.309150][ T8814] x_tables: duplicate underflow at hook 1 [ 165.447916][ T8824] tipc: Enabling of bearer rejected, failed to enable media [ 166.269187][ T8873] __nla_validate_parse: 8 callbacks suppressed [ 166.269222][ T8873] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1638'. [ 166.294540][ T8873] loop0: detected capacity change from 0 to 128 [ 166.349380][ T8873] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 166.376906][ T8873] ext4 filesystem being mounted at /312/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 166.383525][ T8877] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1639'. [ 166.432838][ T8877] loop6: detected capacity change from 0 to 128 [ 166.464976][ T3328] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 166.470500][ T8877] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 166.503641][ T8877] ext4 filesystem being mounted at /179/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 166.621948][ T8888] x_tables: duplicate underflow at hook 1 [ 166.632926][ T5569] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 166.916899][ T8914] tipc: Started in network mode [ 166.922362][ T8914] tipc: Node identity , cluster identity 4711 [ 167.864026][ T8935] netlink: 'syz.6.1658': attribute type 21 has an invalid length. [ 167.878051][ T8935] netlink: 'syz.6.1658': attribute type 6 has an invalid length. [ 167.886249][ T8935] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1658'. [ 168.030364][ T8955] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1666'. [ 168.067137][ T8958] x_tables: duplicate underflow at hook 1 [ 168.123941][ T8960] bond1 (unregistering): Released all slaves [ 168.145376][ T8963] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1667'. [ 168.402203][ T8974] netlink: 83992 bytes leftover after parsing attributes in process `syz.7.1670'. [ 168.412433][ T8974] net_ratelimit: 20 callbacks suppressed [ 168.418320][ T8974] netlink: zone id is out of range [ 168.423706][ T8974] netlink: zone id is out of range [ 168.441691][ T8974] netlink: zone id is out of range [ 168.447417][ T8974] netlink: zone id is out of range [ 168.452823][ T8974] netlink: zone id is out of range [ 168.458647][ T8974] netlink: zone id is out of range [ 168.464051][ T8974] netlink: zone id is out of range [ 168.469278][ T8974] netlink: zone id is out of range [ 168.474583][ T8974] netlink: zone id is out of range [ 168.480463][ T8974] netlink: zone id is out of range [ 168.521233][ T8972] loop6: detected capacity change from 0 to 512 [ 168.561169][ T8972] msdos: Unknown parameter 'sys_immuta' [ 168.607498][ T29] kauditd_printk_skb: 554 callbacks suppressed [ 168.607517][ T29] audit: type=1326 audit(1768905316.425:5368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8969 comm="syz.5.1672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa330adacb9 code=0x7ffc0000 [ 168.639880][ T29] audit: type=1326 audit(1768905316.425:5369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8969 comm="syz.5.1672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa330adacb9 code=0x7ffc0000 [ 168.665145][ T29] audit: type=1326 audit(1768905316.425:5370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8969 comm="syz.5.1672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa330adacb9 code=0x7ffc0000 [ 168.689925][ T29] audit: type=1326 audit(1768905316.425:5371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8969 comm="syz.5.1672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa330adacb9 code=0x7ffc0000 [ 168.714299][ T29] audit: type=1326 audit(1768905316.425:5372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8969 comm="syz.5.1672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa330adacb9 code=0x7ffc0000 [ 168.739580][ T29] audit: type=1326 audit(1768905316.425:5373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8969 comm="syz.5.1672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa330adacb9 code=0x7ffc0000 [ 168.763926][ T29] audit: type=1326 audit(1768905316.425:5374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8969 comm="syz.5.1672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa330adacb9 code=0x7ffc0000 [ 168.787717][ T29] audit: type=1326 audit(1768905316.425:5375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8969 comm="syz.5.1672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa330adacb9 code=0x7ffc0000 [ 168.814702][ T29] audit: type=1326 audit(1768905316.425:5376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8969 comm="syz.5.1672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fa330adacb9 code=0x7ffc0000 [ 168.850110][ T29] audit: type=1326 audit(1768905316.645:5377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8969 comm="syz.5.1672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa330adaa22 code=0x7ffc0000 [ 168.953475][ T8984] FAULT_INJECTION: forcing a failure. [ 168.953475][ T8984] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 168.967868][ T8984] CPU: 0 UID: 0 PID: 8984 Comm: syz.6.1676 Not tainted syzkaller #0 PREEMPT(voluntary) [ 168.967933][ T8984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 168.967945][ T8984] Call Trace: [ 168.967952][ T8984] [ 168.967961][ T8984] __dump_stack+0x1d/0x30 [ 168.967990][ T8984] dump_stack_lvl+0x95/0xd0 [ 168.968087][ T8984] dump_stack+0x15/0x1b [ 168.968105][ T8984] should_fail_ex+0x263/0x280 [ 168.968143][ T8984] should_fail+0xb/0x20 [ 168.968165][ T8984] should_fail_usercopy+0x1a/0x20 [ 168.968194][ T8984] _copy_from_user+0x1c/0xb0 [ 168.968226][ T8984] copy_from_sockptr+0x5e/0x90 [ 168.968325][ T8984] packet_setsockopt+0x941/0xfd0 [ 168.968352][ T8984] ? __pfx_packet_setsockopt+0x10/0x10 [ 168.968373][ T8984] __sys_setsockopt+0x184/0x200 [ 168.968466][ T8984] __x64_sys_setsockopt+0x64/0x80 [ 168.968497][ T8984] x64_sys_call+0x21d5/0x3000 [ 168.968523][ T8984] do_syscall_64+0xc0/0x2a0 [ 168.968615][ T8984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.968640][ T8984] RIP: 0033:0x7f0da079acb9 [ 168.968659][ T8984] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 168.968678][ T8984] RSP: 002b:00007f0d9f1f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 168.968750][ T8984] RAX: ffffffffffffffda RBX: 00007f0da0a15fa0 RCX: 00007f0da079acb9 [ 168.968764][ T8984] RDX: 0000000000000012 RSI: 0000000000000107 RDI: 0000000000000003 [ 168.968777][ T8984] RBP: 00007f0d9f1f7090 R08: 0000000000000004 R09: 0000000000000000 [ 168.968792][ T8984] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000001 [ 168.968808][ T8984] R13: 00007f0da0a16038 R14: 00007f0da0a15fa0 R15: 00007ffea4d7cfd8 [ 168.968829][ T8984] [ 169.248449][ T8988] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 169.321227][ T9004] netlink: 'syz.5.1683': attribute type 21 has an invalid length. [ 169.330770][ T9004] IPv6: NLM_F_CREATE should be specified when creating new route [ 170.358021][ T9046] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1697'. [ 170.418602][ T9025] 8021q: adding VLAN 0 to HW filter on device bond0 [ 170.516435][ T9052] bond1 (unregistering): Released all slaves [ 170.770442][ T9075] netlink: 64 bytes leftover after parsing attributes in process `syz.7.1707'. [ 170.797710][ T9080] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1710'. [ 170.817744][ T9081] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1709'. [ 170.839858][ T9080] loop0: detected capacity change from 0 to 128 [ 170.882528][ T9080] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 170.935422][ T9080] ext4 filesystem being mounted at /327/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 171.009222][ T9098] loop7: detected capacity change from 0 to 512 [ 171.018222][ T9096] loop5: detected capacity change from 0 to 1024 [ 171.044446][ T9096] EXT4-fs: Ignoring removed orlov option [ 171.078136][ T9096] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.082600][ T9098] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.181927][ T3328] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 171.216905][ T3636] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.248662][ T7550] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.343978][ T9105] bond1 (unregistering): Released all slaves [ 171.427047][ T9118] loop7: detected capacity change from 0 to 256 [ 171.436442][ T9118] msdos: Bad value for 'nfs' [ 171.481676][ T9122] __nla_validate_parse: 3 callbacks suppressed [ 171.481720][ T9122] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1723'. [ 171.599511][ T9137] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1729'. [ 171.602483][ T9138] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1728'. [ 171.625967][ T9135] loop0: detected capacity change from 0 to 1024 [ 171.642454][ T9135] EXT4-fs: Ignoring removed orlov option [ 171.662739][ T9135] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.711641][ T3328] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.807772][ T3483] IPVS: starting estimator thread 0... [ 171.837868][ T9161] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1738'. [ 171.902231][ T9155] IPVS: using max 2496 ests per chain, 124800 per kthread [ 172.111829][ T9186] loop1: detected capacity change from 0 to 512 [ 172.374811][ T9186] EXT4-fs: Mount option(s) incompatible with ext3 [ 172.920162][ T9220] FAULT_INJECTION: forcing a failure. [ 172.920162][ T9220] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 172.934737][ T9220] CPU: 0 UID: 0 PID: 9220 Comm: syz.7.1758 Not tainted syzkaller #0 PREEMPT(voluntary) [ 172.934818][ T9220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 172.934833][ T9220] Call Trace: [ 172.934840][ T9220] [ 172.934850][ T9220] __dump_stack+0x1d/0x30 [ 172.934874][ T9220] dump_stack_lvl+0x95/0xd0 [ 172.934894][ T9220] dump_stack+0x15/0x1b [ 172.935114][ T9220] should_fail_ex+0x263/0x280 [ 172.935213][ T9220] should_fail+0xb/0x20 [ 172.935234][ T9220] should_fail_usercopy+0x1a/0x20 [ 172.935260][ T9220] _copy_from_user+0x1c/0xb0 [ 172.935289][ T9220] ___sys_sendmsg+0xc1/0x1e0 [ 172.935396][ T9220] __x64_sys_sendmsg+0xd4/0x160 [ 172.935452][ T9220] x64_sys_call+0x17ba/0x3000 [ 172.935475][ T9220] do_syscall_64+0xc0/0x2a0 [ 172.935496][ T9220] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.935516][ T9220] RIP: 0033:0x7f15ae57acb9 [ 172.935571][ T9220] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 172.935594][ T9220] RSP: 002b:00007f15acfd7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 172.935619][ T9220] RAX: ffffffffffffffda RBX: 00007f15ae7f5fa0 RCX: 00007f15ae57acb9 [ 172.935634][ T9220] RDX: 0000000000000004 RSI: 00002000000001c0 RDI: 0000000000000003 [ 172.935715][ T9220] RBP: 00007f15acfd7090 R08: 0000000000000000 R09: 0000000000000000 [ 172.935730][ T9220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 172.935745][ T9220] R13: 00007f15ae7f6038 R14: 00007f15ae7f5fa0 R15: 00007ffd9767fbc8 [ 172.935767][ T9220] [ 173.143377][ T9217] loop6: detected capacity change from 0 to 256 [ 173.150308][ T9217] vfat: Unknown parameter ' [ 173.150308][ T9217] ' [ 173.193413][ T9237] netlink: 240 bytes leftover after parsing attributes in process `syz.7.1761'. [ 173.222741][ T9241] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1766'. [ 173.297689][ T9252] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1770'. [ 173.301488][ T9249] netlink: 'syz.7.1769': attribute type 10 has an invalid length. [ 173.326073][ T9252] bond4 (unregistering): Released all slaves [ 173.399771][ T9259] netlink: 240 bytes leftover after parsing attributes in process `syz.5.1773'. [ 173.451354][ T9268] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1777'. [ 173.480930][ T9271] netlink: 2 bytes leftover after parsing attributes in process `syz.5.1776'. [ 173.498420][ T9268] ================================================================== [ 173.506991][ T9268] BUG: KCSAN: data-race in bq_flush_to_queue / cpu_map_kthread_run [ 173.516132][ T9268] [ 173.518483][ T9268] write to 0xffff88810cb79800 of 8 bytes by task 9272 on cpu 0: [ 173.526491][ T9268] cpu_map_kthread_run+0x4e7/0x1650 [ 173.531796][ T9268] kthread+0x488/0x510 [ 173.536259][ T9268] ret_from_fork+0x148/0x280 [ 173.541210][ T9268] ret_from_fork_asm+0x1a/0x30 [ 173.546246][ T9268] [ 173.548663][ T9268] read to 0xffff88810cb79800 of 8 bytes by task 9268 on cpu 1: [ 173.556565][ T9268] bq_flush_to_queue+0x124/0x350 [ 173.561526][ T9268] cpu_map_enqueue+0x1a5/0x1c0 [ 173.566504][ T9268] xdp_do_redirect_frame+0x27b/0x560 [ 173.571895][ T9268] bpf_test_run_xdp_live+0xac3/0x1360 [ 173.577555][ T9268] bpf_prog_test_run_xdp+0x57b/0xa10 [ 173.583569][ T9268] bpf_prog_test_run+0x204/0x340 [ 173.588795][ T9268] __sys_bpf+0x4c0/0x7b0 [ 173.593049][ T9268] __x64_sys_bpf+0x41/0x50 [ 173.597694][ T9268] x64_sys_call+0x28e1/0x3000 [ 173.602492][ T9268] do_syscall_64+0xc0/0x2a0 [ 173.607283][ T9268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.613463][ T9268] [ 173.616435][ T9268] value changed: 0xffff888115dfc070 -> 0x0000000000000000 [ 173.623836][ T9268] [ 173.626351][ T9268] Reported by Kernel Concurrency Sanitizer on: [ 173.632863][ T9268] CPU: 1 UID: 0 PID: 9268 Comm: syz.6.1777 Not tainted syzkaller #0 PREEMPT(voluntary) [ 173.643630][ T9268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 173.654055][ T9268] ==================================================================