last executing test programs: 40.213250449s ago: executing program 1 (id=144): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x60400) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) (fail_nth: 1) 39.865031531s ago: executing program 1 (id=148): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) getsockopt(r3, 0x1, 0x6, &(0x7f0000000140)=""/39, &(0x7f0000000180)=0x27) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000a40)={@fallback=r7, r7, 0x2f}, 0x20) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000a40)={@fallback=r7, r7, 0x2f, 0x0, 0x0, @void, @value=r7}, 0x20) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x7, 0x34328, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0x2}, 0x10026, 0x10003, 0xfffffff8, 0x3, 0x100008, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000001d92357a4e7f701b9e290256147eaf52cca8204ac5dd41e5c2212e0edae4eb222b6fe355379ca0870f5cc6742d398cd7ed96f9e0d72aa7ae63bacb8f662ea143b985b29b394ae19a93e10100000000000000ef6e8f7d28cf38d33b4156605ef7e97a7ff829b96dfe3f8d79397bd9f307bbf751401a3a0fd6fa7e8c84690fc645e70ed3544f0c"], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 37.917260116s ago: executing program 1 (id=157): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f00000006c0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb87, &(0x7f00000017c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) r1 = syz_io_uring_setup(0xb5c, &(0x7f0000000640)={0x0, 0x1780, 0x0, 0x1, 0x164}, &(0x7f0000000dc0)=0x0, &(0x7f0000000200)=0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0xd4, 0x5bd20d9e, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x120}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) r4 = open(&(0x7f0000000280)='.\x00', 0xc8180, 0x0) fcntl$notify(r4, 0x402, 0x8000003d) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000940)={0x0, 0xe, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d215c06007c09e8fe55a10a0015400100142603600e1208000f0000000401a80016002900014009001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) sendmsg$IPSET_CMD_HEADER(r0, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000000c06010200000000000000000000000a0900020073797a31000000000900020073020031000000000900020073797a3000000000"], 0x38}, 0x1, 0x0, 0x0, 0x40001}, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000003c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) 36.832060602s ago: executing program 1 (id=161): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x3000044, &(0x7f00000003c0), 0x1, 0x55e, &(0x7f0000001bc0)="$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") r0 = open(&(0x7f00000000c0)='./file1\x00', 0x4a07e, 0xc6) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c000000490001002cbdf9722cf10e1f03337a18101d9c7ba57002fddbdf250a00", @ANYRES32=0x0, @ANYBLOB="f9ffffff08000200010000000800020004000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4008840}, 0x0) add_key$fscrypt_v1(&(0x7f0000000000), 0xfffffffffffffffd, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x5000) r2 = socket$rds(0x15, 0x5, 0x0) fallocate(r2, 0x2, 0x0, 0x8800000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x8541, 0x1a9) write$binfmt_script(r3, &(0x7f0000000240)={'#! ', './file1'}, 0xb) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setuid(0xee00) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages(r6, 0x5, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) 36.555339652s ago: executing program 1 (id=164): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b7000000fe000000bfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff000000003c040100000000002d400200000000004704000001ed00007b130000000000001d440200000000007a0a00fe00ffffffc3030000e1000000b5f100000000000095"], 0x0, 0xa}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x4}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0xb6) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000c00)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) sendmsg$can_j1939(r0, &(0x7f0000000300)={&(0x7f0000000100)={0x1d, r1, 0x2, {0x2, 0xff, 0x2}}, 0x18, &(0x7f0000000bc0)={0x0}, 0x1, 0x0, 0x0, 0x8850}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xe723, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0xfffffffc, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x8) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$usbfs(0x0, 0x205, 0x8401) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setpipe(r2, 0x407, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x54d, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000340)={0x1d, r5, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x74, r5, {0xb, 0xfff2}, {0x0, 0x9}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) 35.615510483s ago: executing program 1 (id=170): r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) dup(r0) socket$nl_generic(0x10, 0x3, 0x10) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) add_key$keyring(&(0x7f0000000540), 0x0, 0x0, 0x0, 0xffffffffffffffff) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x2, 0xc, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0xfffffffffffffffe, 0x100, 0x0, 0x8, 0x9, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x6, 0x1, 0x1000, 0x7, 0x0, 0x1, 0x0, 0x7, 0x80000000000}) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e9f, 0x0, @mcast1, 0x7}, 0x1c) syz_genetlink_get_family_id$devlink(&(0x7f00000009c0), 0xffffffffffffffff) fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) 35.609007874s ago: executing program 32 (id=170): r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) dup(r0) socket$nl_generic(0x10, 0x3, 0x10) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) add_key$keyring(&(0x7f0000000540), 0x0, 0x0, 0x0, 0xffffffffffffffff) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x2, 0xc, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0xfffffffffffffffe, 0x100, 0x0, 0x8, 0x9, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x6, 0x1, 0x1000, 0x7, 0x0, 0x1, 0x0, 0x7, 0x80000000000}) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e9f, 0x0, @mcast1, 0x7}, 0x1c) syz_genetlink_get_family_id$devlink(&(0x7f00000009c0), 0xffffffffffffffff) fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) 9.596915968s ago: executing program 5 (id=325): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, r2}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00'}) fsopen(0x0, 0x0) sendmsg$nl_route(r4, 0x0, 0x20008840) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) 9.415691354s ago: executing program 5 (id=326): bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000440)='highspeed', 0x9) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) 9.346502826s ago: executing program 5 (id=327): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x2a1008, &(0x7f00000003c0)={[{@noauto_da_alloc}, {@errors_remount}]}, 0x2, 0x53a, &(0x7f0000000c80)="$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") socket$inet6(0xa, 0x3, 0x6) timer_create(0x0, 0x0, &(0x7f0000000300)) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000340)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&\x00\x00\x00\x00\x00\x00\x00'], 0x10) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/key-users\x00', 0x0, 0x0) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) sendfile(r6, r5, &(0x7f0000000000)=0x9, 0x100) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r7, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x9, 0x9}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="8c4fbf7ddef2f9a1000000bd7000003ac2ee2a481c4eb5808c3cf61d9a5a75e077596224c5baa78f8589c29c53becf0ec9da6708732b1a2209c5", @ANYRES32, @ANYBLOB="efb00000800000006c0012800b00010062726964676500005c00028008000500010000000c002e"], 0x8c}, 0x1, 0x0, 0x0, 0x4000084}, 0x14) fchdir(0xffffffffffffffff) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x18) syz_emit_ethernet(0xc7, &(0x7f0000000780)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}, @void, {@ipv4={0x800, @tipc={{0x26, 0x4, 0x1, 0x3, 0xb9, 0x67, 0x0, 0x9, 0x6, 0x0, @rand_addr=0x64010102, @remote, {[@timestamp_addr={0x44, 0x4, 0x25, 0x1, 0x3}, @rr={0x7, 0x23, 0x30, [@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @private=0xa010100, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @remote, @empty]}, @ssrr={0x89, 0xf, 0xb8, [@remote, @multicast1, @dev={0xac, 0x14, 0x14, 0x36}]}, @lsrr={0x83, 0x3, 0x7b}, @timestamp_prespec={0x44, 0x44, 0xa7, 0x3, 0x7, [{@multicast1, 0x6}, {@multicast2}, {@broadcast, 0x3}, {@multicast2, 0x6}, {@local, 0x2}, {@remote, 0x5}, {@multicast1, 0x200}, {@multicast2, 0x8}]}, @timestamp_addr={0x44, 0x4, 0x16, 0x1, 0x6}]}}, @payload_direct={{{{0x21, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x2, 0x8, 0x0, 0x1, 0xd, 0x1, 0x3, 0x3ff, 0x9, 0x1, 0x4e21, 0x4e23}, 0x0, 0x1}}, [0x0]}}}}}, &(0x7f0000000240)={0x1, 0x2, [0x9cb, 0xd8a, 0x28d, 0xf2c]}) write$binfmt_script(r7, &(0x7f00000008c0)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', [{0x20, 'vfat\x00'}, {0x20, 'noauto_da_alloc'}, {0x20, '\x00'}], 0xa, "1eb3b026b20944705a7b3d8a3bba5e8a6d00c854f314737492822b69d023ef0564ecae9fd9305823465b48ddf0a834601f4aa91a5847817868fc9289bb9ac0fd7bf0a6806b014c9e6730f3fb72f7e0fe59292d1b9d8f5d3ad3b37402986c880bb39fbd8a211324c0b77ad13f2fede3a211d0"}, 0x18a) syncfs(r8) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380407b, 0x0, 0x1, 0x0, &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, &(0x7f0000000140)=[@in6={0xa, 0x7, 0xe49, @mcast1, 0x5}, @in={0x2, 0x4e25, @remote}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e22, 0x5, @mcast2, 0x7}, @in6={0xa, 0x4e22, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0xffff}, @in6={0xa, 0x4e21, 0x401, @mcast2, 0x6}], 0x90) 9.091186735s ago: executing program 5 (id=332): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x9, 0x8, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001700)={0x6, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000fcffffff850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000800000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r1}, &(0x7f0000000080), &(0x7f00000000c0)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r1, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20) r2 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x124a, 0x80, 0x0, 0x52}, &(0x7f00000008c0)=0x0, &(0x7f0000000900)=0x0) r5 = syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000001ac0)='./file0\x00', 0x0, &(0x7f0000001a80), 0x3, 0x5bc, &(0x7f0000001440)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) quotactl_fd$Q_SETQUOTA(r6, 0xffffffff80000801, 0xee00, 0x0) r7 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="34000000010401080000000000000000000000060a000200000000060200000008000340000000060a0002001b648b9b99560acc55f8630000100001000000"], 0x34}, 0x1, 0x0, 0x0, 0x48040}, 0x48811) syz_io_uring_submit(r3, r4, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r7, 0xa3d8, &(0x7f0000000340)=[{&(0x7f00000000c0)='\x009', 0x2}], 0x1, 0x0, 0x1, {0x2}}) syncfs(r5) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x4206, r8) io_uring_enter(r2, 0x47f8, 0x0, 0x0, 0x0, 0x0) waitid$P_PIDFD(0x3, r6, &(0x7f00000003c0), 0x2, &(0x7f0000000440)) 8.213004484s ago: executing program 5 (id=340): syz_emit_ethernet(0x32, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000bc0)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) perf_event_open(0x0, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x2) r1 = socket(0x2, 0x80805, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) select(0x20000088, &(0x7f0000000080), 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x300}, &(0x7f0000000200)={0x0, 0x2710}) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000001c0)={'syztnl2\x00', 0x0}) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) ppoll(&(0x7f0000000180)=[{0xffffffffffffffff, 0x100}], 0x1, &(0x7f0000000200), 0x0, 0x0) unshare(0x6a040000) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000040)={r7}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000040)={r7, @in={{0x2, 0x4e21, @multicast2}}}, 0x84) 7.512797668s ago: executing program 5 (id=350): r0 = syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$peeksig(0x4212, r0, &(0x7f0000000140)={0x300000000000000, 0x0, 0x4}, &(0x7f0000001500)) 7.45746316s ago: executing program 33 (id=350): r0 = syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$peeksig(0x4212, r0, &(0x7f0000000140)={0x300000000000000, 0x0, 0x4}, &(0x7f0000001500)) 2.415517849s ago: executing program 2 (id=405): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000080)=0x7, 0x4) syz_emit_ethernet(0x2e, &(0x7f00000000c0)={@broadcast, @empty, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@rr={0x7, 0x3, 0xc5}]}}, {0x0, 0x4e20, 0x8}}}}}, 0x0) 2.415047879s ago: executing program 2 (id=407): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[], 0x50) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$cgroup_subtree(r1, 0x0, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[], 0x5) write$cgroup_subtree(r2, &(0x7f0000000100)={[{0x2d, 'net_cls'}, {0x2d, 'pids'}, {0x2d, 'freezer'}]}, 0x18) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000000040)=@assoc_value={r6, 0x7}, 0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000080)={r6}, &(0x7f00000000c0)=0x8) socket$nl_generic(0x10, 0x3, 0x10) 2.340072062s ago: executing program 2 (id=408): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x10, 0x20, 0x5, 0x6012, {{0x5, 0x4, 0x2, 0x8, 0x14, 0x66, 0x0, 0x1, 0x2f, 0x0, @empty, @empty}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x30da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x1, 0x8}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_PLIMIT={0x8, 0x2, 0x8001}, @TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x12}]}}]}, 0x40}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r9, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff"], 0x15) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) r10 = fspick(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r10, 0x6, 0x0, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000000)={0x8, 0x5, 0x329, 0x5, 0x9, 0x1}) 2.175372807s ago: executing program 4 (id=412): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) 1.582810287s ago: executing program 0 (id=415): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0xee00, 0x0) 1.538218398s ago: executing program 3 (id=416): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) io_setup(0x7fffffff, &(0x7f0000001140)=0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="28dbdf350800030100000000"], 0x28}, 0x1, 0x0, 0x0, 0x4800}, 0x80) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x80800) io_cancel(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x10, r1, &(0x7f00000000c0)="c459ffd2c1e11635345f2aacbbbf6e25af799a2e8d4ee879c4bbbea88e63a7e0456d939994c458ec36f5de172eec56ec9b4d4223e2dbf8b710825e43a92e901f569f257dbc67e6edb79715712bf2c41a74431a440d79bc07267218d889e8d0a00924ae16ca047ffa", 0x68, 0x11, 0x0, 0x1, r1}, &(0x7f0000000180)) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000040)={0x0, 0x0, 0xa2a5}) 1.4811724s ago: executing program 0 (id=417): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x40000) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0b04000000000000000002000000300004802c0001800a0001006c696d6902800c00014000000000000000020c00024000000002000000350900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x84}}, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/pm_debug_messages', 0xc01, 0xce49b1ce904209d7) write$P9_RLERRORu(r1, &(0x7f0000000540)=ANY=[@ANYBLOB='3\x00'], 0xe) (async) r2 = socket$tipc(0x1e, 0x5, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$KDGKBSENT(0xffffffffffffffff, 0x5602, &(0x7f0000000000)={0x0, "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"}) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) semtimedop(0x0, &(0x7f0000000040)=[{}], 0x1f4, &(0x7f0000000140)={0x0, 0x3938700}) (async) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, 0x0, &(0x7f0000000140)) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x638800) (async) bind$tipc(r2, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x41}, 0x3}}, 0x10) (async) listen(r2, 0x0) (async) r4 = syz_create_resource$binfmt(&(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r5 = openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) write$binfmt_script(r5, &(0x7f00000001c0)={'#! ', './file0'}, 0xb) (async) execveat$binfmt(0xffffffffffffff9c, r4, 0x0, 0x0, 0x0) (async) r6 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r6, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x4) close_range(r2, 0xffffffffffffffff, 0x0) (async) r7 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0x4, @loopback}], 0x1c) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) (async) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) (async) setsockopt$inet_sctp_SCTP_MAXSEG(r7, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={0x0, 0x265}, 0x8) (async) setsockopt$inet6_IPV6_DSTOPTS(r7, 0x29, 0x3b, &(0x7f0000000480)=ANY=[@ANYBLOB="211d00000000000007e6"], 0xf0) (async) sendto$inet6(r7, &(0x7f0000000040)="00d8", 0x2, 0x44004, &(0x7f0000000000)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c) 1.48083999s ago: executing program 6 (id=418): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x4, 0x3, &(0x7f0000000700)=ANY=[@ANYBLOB="180200000300000000000000000000008500000022000000850000008b00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84, 0x0, 0x0, 0x10, 0x7ff}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0xffffffff, 0x0, 0x9, 0x0, 0x43, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) mmap$xdp(&(0x7f00003a5000/0x4000)=nil, 0x4000, 0x2000003, 0x13, r6, 0x180000000) perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x11, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000002340)='fdinfo\x00') setresuid(0xee00, 0xee00, 0x0) getdents(r7, &(0x7f0000000200)=""/185, 0xb9) socket$inet_tcp(0x2, 0x1, 0x0) openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) 1.47955375s ago: executing program 3 (id=419): socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000005c0)=ANY=[@ANYBLOB="03000000000000000a004e230000000cff010000000000000000000000000001f8ffffff000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003"], 0x210) r1 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffff7}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f00000005c0)=ANY=[@ANYBLOB="03000000000000000a004e230000000cff010000000000000000000000000001f8ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003c6500"/141], 0xd2) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa2886dd600e005000103aff000000e09eb93f5d167426ff64010101ff020000000000000000000000000001"], 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x23, 0x5, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000000)=0x2) ioctl$PPPIOCSPASS(r3, 0x40107447, &(0x7f0000000180)={0x2, &(0x7f0000000080)=[{0x48, 0x0, 0x38, 0x6}, {0x6, 0xfd, 0x0, 0x5295}]}) write$ppp(r3, &(0x7f0000000140)="1e08", 0x23) syz_io_uring_setup(0x833, &(0x7f0000000180)={0x0, 0x6799, 0x80, 0x7, 0x396}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$rxrpc(0x21, 0x2, 0xa) socket$rxrpc(0x21, 0x2, 0xa) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r6 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x20973, 0x1c080, 0x0, 0x201}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x1a, 0x5, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x19, '\x00', 0x0, 0x38}, 0x94) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r2, 0x80, &(0x7f00000000c0)=@phonet={0x23, 0x94, 0x86, 0xff}}) 1.309211856s ago: executing program 4 (id=420): r0 = syz_open_dev$sg(&(0x7f00000002c0), 0xe6, 0x2602) unshare(0x20000400) poll(&(0x7f00000001c0)=[{r0, 0x22a6}, {0xffffffffffffffff, 0x8010}], 0x2, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) 1.280101347s ago: executing program 0 (id=421): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioprio_set$uid(0x3, 0x0, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x80042, 0x0) sendfile(r0, r0, 0x0, 0x7) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @local}}}}}}, 0x0) 1.181300671s ago: executing program 2 (id=422): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x34, r1, 0x664baf463d4adef3, 0x60bd2a, 0xffdffffc, {0x26}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24044841}, 0x200000000000000) 1.18004382s ago: executing program 0 (id=423): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000080)={r1}, &(0x7f00000000c0)=0x8) 1.163784301s ago: executing program 2 (id=424): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}]}, &(0x7f00000007c0)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) io_setup(0x8, &(0x7f0000000240)=0x0) r3 = eventfd2(0x7, 0x0) io_submit(r2, 0x3, &(0x7f00000003c0)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0xff45, r1, &(0x7f0000000080)="d1", 0x1, 0x7, 0x0, 0x5, r3}, 0x0, 0x0]) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r4, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000640)="91f86e849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000000000ff5c77f56d7c8254cbfc8d42601fa04afdf733400300388c1434bdcbfa40eccb4b1270a3279222da53b47732850bdf3901a6a586dd34c1", 0x78}, {0x0}], 0x2}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)="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", 0x161}, {&(0x7f00000009c0)="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", 0x16f}, {&(0x7f0000000700)="e0cda6472d1ccfb4d1d46bf348a3b7ff9e5b6b3e30ef2266c86af25d37271763c50968fe2e2eb13b9472381bade936f9a85e26aac6ebd21115f086751d870434cf07dbd92e0ea2322f163473dad24cffe6d23ffa95b04a2653e8a7c9ab042ea1b0bf4bde850bc9f6157f1a48e86eec8223fd33fc83374393fbd0721628dae05769c47640774f48fe78540d2f5a1d07d318f0ea31a40211134559caa97b59e9f9d5712ad04136bc2389758aedde006c09c08c8b5171f5dabd0006a40c3519864842f5739b1b7c75c2343f3b8efa7c", 0xce}], 0x3}}], 0x2, 0x2090) sendto$inet(r4, &(0x7f0000001140)="cc816a9a9250e68f7ac20796b232954ff5a51ae0ffc618257a35d82ed7a22051202cfa5c64c4b3a7937502004748ac5451d18a2157afed8b23f1bdf951bddb2b210ef3dc279194746fdfe2d2bc4d04f4f4e7b3b9e6607e66c45e623f0eaac9acc898641148afd55323758ba07cf1181030c23cdd1602ce4df7baee0d38a95f16d75b32cb6bb0eacf1e66a30b653644726a30c8888529353c4d5f343e8d3aa92af6ee3162d2e7b3c0acd0436caaa11d8cdeab40b1425fd173567ae43ede6cbc039c5440", 0xc3, 0x24000004, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.157499001s ago: executing program 0 (id=425): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioprio_set$uid(0x3, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x1b78, &(0x7f0000000040)={0x0, 0xca72, 0xc000, 0x0, 0x20002fb}) socket$xdp(0x2c, 0x3, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2, 0x9}}, 0x20) socket$inet(0x2, 0x80001, 0x84) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000840)=@newtaction={0x18, 0x76, 0x1, 0xfffffffc, 0x1, {0x0, 0x0, 0x81ff}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x24040000}, 0x20008840) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) syz_usb_connect$hid(0x3, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010002000000104c05cc0900000000000109022d00010000d0050904000a0103000122290009058103bf0300fc010905020300022fe76d00000000000000"], 0x0) socket$rxrpc(0x21, 0x2, 0x2) r2 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010102, 0xce21, 0x3, 'fo\x00', 0x12, 0xa7e, 0x71}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'dh\x00', 0x5, 0x8, 0x6c}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0xf6c12eb8213c0b07, 0xcd, 0x1}}, 0x44) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 1.025127976s ago: executing program 4 (id=426): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000140)={0x0, 0x1, 0xffffffffffffffff, 0xc}) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x8, 0x400000, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {0xa}}, './file0\x00'}) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYRES16=0x0, @ANYBLOB="04002bbd7000fedbdf2516000000"], 0x14}, 0x1, 0x0, 0x0, 0x4044020}, 0x4000000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ptrace$ARCH_SHSTK_STATUS(0x1e, 0x0, &(0x7f00000000c0), 0x5005) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000340)=@filter={'filter\x00', 0x42, 0x4, 0x2b0, 0xffffffff, 0x0, 0x180, 0x180, 0xffffffff, 0xffffffff, 0x218, 0x218, 0x218, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'ipvlan0\x00', 'nr0\x00', {}, {}, 0x2f, 0x2}, 0x74000002, 0x70, 0xd0, 0x1ba, {0x46010000, 0x2c000000000000}}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x7, 0x0, 0x0, 0x5], 0x1, 0x5}, {0xffffffffffffffff, [0x1, 0x1, 0x4, 0x6, 0x7], 0x3, 0x6}}}}, {{@ip={@empty, @remote, 0xff, 0x0, 'veth0_to_batadv\x00', 'team_slave_1\x00', {0xff}, {}, 0x16}, 0x287, 0x70, 0xb0, 0x2000000}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x3, {0x100008}}}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) 629.140169ms ago: executing program 3 (id=427): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000004c0)={0x2, &(0x7f0000000040)=[{0x50, 0x0, 0x0, 0x8ed}, {0x6, 0xfc, 0x4, 0x23a8}]}, 0x10) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xfdef) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x20, 0x4, 0x2, 0x0, 0x201}, 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) vmsplice(r2, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2, 0x1) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000a000000080000000200000fffffffff0e0000000000000003000010070000003d0000ca75ffffff00000000000000002e"], &(0x7f00000001c0)=""/237, 0x46, 0xed, 0x8}, 0x28) writev(r2, &(0x7f00000013c0)=[{&(0x7f0000000080)="a8874a4fc65c4dc82f41adf40dc236e13bb05bbca74e3795741f66c3113fa8af371552a7a4ab38fc2c92730838c64c65adfd0da377e638689d7c1dd85206bf8ff8065649074838ce99", 0x49}, {&(0x7f0000000000)="73359be8514e1bc975a802e4885bdd245c793d9908819be54c6c831f5ccffe8533b399a0fec435e2c63d3b", 0x2b}, {&(0x7f0000000200)="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", 0x1000}, {&(0x7f0000000100)="82934fad7f38283cfcb405e3e298658e0afcb72350f1c585035108369c312b79018cccd022df1f8bbd5bda09d4d1cfc743be460950e17454e15d98a51bec02585b7902129b10bf13993ac5eda9753d576ee9a7c16b2570a1244fddc3dcd16db6fe512dc4c1802655d50e0e1736e265f80c3a3bd86dbbad9142843ed798b61d8813c95c2a2f3a00f7d2d11c96dfe6da67d8433fa23b78de5f66fa4fd3d8fa0c480a4a", 0xa2}, {&(0x7f0000001200)="50e951d3937f899d576242a9cd75d0b44d5830c2953ad89f87413c89d1023d3d5fc0ef108a54b4cbe5a332c3cb2ae2fbc2b8561d3cb67efc05bb0574ec7f09ec8e74edf170c1c7c13ac17fcc717680ea87c808c27cff5c510dd012d3da073d223beba5a481004b9c5aad026caa9ddc7225d18b620fbeaa1eee1eaf526882393bb5e6cd2dad15ff28e4021b5d18fdc7083a7753a51bc7706607cc444bdd9f6b7245c5a73fb2d08b91874692", 0xab}, {&(0x7f00000012c0)="1420faa02f1e172412c1ae94c4ad73fd1f7d860ea221c50b37448af831ec1e5ab99a2e239c1e70a924fceafe9ade30222da9ad00a353c56a420c454808c076f441696cdf3cc1c9a7757176ea71b652d89fbd1cc29ac5ae42e91b2263d6edccf487ceb2766234e9c5e6bc73ebac7fec95dfb57a7c4d6cb332776b98dcb0da13021094adbc8140dd1fa0cf33fb2ed0f48df7f29a6a3faaf4f10cc7f8545f3dc698632d4bd2ba524e75", 0xa8}, {&(0x7f0000001380)="4dc3a843b576e0bf5b397c9786c245ffd1e0f41c5451bc97b9fdf659d0c029df2b09a20587416c244222581ac9668f2176fd51b7b0da2185a7b8ec2d15126896", 0x40}], 0x7) 578.487791ms ago: executing program 0 (id=428): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000200)=[{0x6, 0xf5, 0x9, 0x7fff0000}]}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000200)=[{0x6, 0xf5, 0x9, 0x7fff0000}]}) epoll_create1(0x0) (async) epoll_create1(0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000001fc0), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000001fc0), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1e, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x8010, &(0x7f0000000380)=ANY=[@ANYBLOB="696f636861727365743d61736369692c00125c6f3ad370264551e3ffff7e80e44939e902bdf759e02dbdff45399cd965a877fb80b6f99d249537cb3ccf29a605586bcc81c95f7bdb69711ae6935ce36b"], 0x1, 0x566, &(0x7f0000000540)="$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") syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r0) (async) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x24, r4, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2cf}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1ff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008881}, 0x20000000) r5 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000ac0)={{{@in6=@initdev, @in=@broadcast}}, {{@in=@private}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8) (async) getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000ac0)={{{@in6=@initdev, @in=@broadcast}}, {{@in=@private}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4042, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) getdents64(r6, &(0x7f0000000040)=""/225, 0xe1) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) sigaltstack(&(0x7f0000000480)={&(0x7f0000004000)=""/4126, 0x80000001, 0x101e}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) timer_settime(r7, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) fcntl$setpipe(r3, 0x407, 0x6) (async) fcntl$setpipe(r3, 0x407, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x9, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xf}, @generic={0x7e, 0x0, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffffd}, @exit]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) socket$nl_route(0x10, 0x3, 0x0) timerfd_create(0x0, 0x0) (async) timerfd_create(0x0, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f00000020c0)={0x0, 0x0, &(0x7f0000002080)={&(0x7f0000002000)={0x50, r1, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3f, 0x3}}, {0x8, 0xb, 0x3ff}, {0x6, 0x11, 0x10}, {0x8, 0x15, 0x80}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x2000c080) 578.235581ms ago: executing program 6 (id=429): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b82, 0x0, @perf_bp={0x0, 0x1}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x6, 0x7, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12011, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0xa, 0x300) recvmsg$unix(0xffffffffffffffff, 0x0, 0x10102) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000019000000010000010900010073797a31000000002c000000030a01020000000000000000010000000900030073797a32000000000900010073797a31000000002c000000030a05000000000000000000010000000c00024000000000000000010900010073797a310000000028"], 0xc8}}, 0x0) 498.575723ms ago: executing program 3 (id=430): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b82, 0x0, @perf_bp={0x0, 0x1}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x6, 0x7, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12011, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0xa, 0x300) recvmsg$unix(0xffffffffffffffff, 0x0, 0x10102) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000019000000010000010900010073797a31000000002c000000030a01020000000000000000010000000900030073797a32000000000900010073797a31000000002c000000030a05000000000000000000010000000c00024000000000000000010900010073797a310000000028"], 0xc8}}, 0x0) (fail_nth: 1) 333.910219ms ago: executing program 6 (id=431): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 333.621629ms ago: executing program 6 (id=432): capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x9, 0x10ffff, 0x6, 0x0, 0x1, 0xffffff80}) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x39, &(0x7f0000000400)=@srh={0x5c, 0x0, 0x4, 0x0, 0x7, 0x60, 0x7}, 0x8) listen(r0, 0xfffffffc) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00') preadv(r3, &(0x7f0000000580)=[{&(0x7f0000000300)=""/91, 0x5b}], 0x1, 0x64, 0x100) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x4, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x8}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x840}, 0x4000000) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000004c0)={0x28, 0x14, 0x1, 0x3ff, 0x0, {0x28}, [@INET_DIAG_REQ_BYTECODE={0x11, 0x1, "e5363baca15dc31a278b00447f"}]}, 0x28}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f00000002c0)=[{&(0x7f00000000c0)="5788320090104726cf8e1eaa8ec8aa9d6ec153296d0e247b51611f55da70c5fd166c32521182409362a0a83eedeee875608aaebccc649971d1e068e255163964c4a04ace2761025284f4b88778f2d09cb0080d4dff09751d86281357c18a4ee86512eaf0f3442bd44046d63d848986f1a65f3077ea4c94c49c266a5e0c4a0be9fccf09526d59e24fc711e6bebd0b9f7a9a6b5a2e2d96bfd992127b", 0x9b}, {&(0x7f0000000000)="cee5dcacf7", 0x5}, {&(0x7f0000000180)="5192d63060f135b265464e6d50577cbd3c85688908bbbed73083ef4a18dff8912c2efa9b0377262f3b339bf1742efe568da29c91748e8e72e7913d82c3bb681b3334b500044b41f50119f1d7d58b92285e9d469e53c9ab31a66f33201ea0809b3caffcd6e54f8cdf178620330a4c33a740bf21d8382d4b54007413730abd", 0x7e}, {&(0x7f0000000200)="4d068bffc60d94f09f0f8185352072285e6cc11f4421a1f0ef6013718a5860316313fb75b4205d66342de8c2698b8cc19b4e2644006b4a569b1bc7f5f9cea50901e0e55a3bd658750827e68e307ed0f2ad5476912e95ce7f00dba9c1ecc87b829abd6b21d45415089649361d5387883fe64e37e0f597", 0x76}, {&(0x7f0000000280)="29af82fb3867e70b092faf5a5d5256", 0xf}], 0x5) 271.961271ms ago: executing program 6 (id=433): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b82, 0x0, @perf_bp={0x0, 0x1}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x6, 0x7, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) fstat(r0, &(0x7f0000000140)) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={0x100, 0x1403, 0x300, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_hsr\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'wg1\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'syzkaller1\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wlan0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bridge0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x100}, 0x1, 0x0, 0x0, 0x2000000}, 0x80) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12011, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0xa, 0x300) recvmsg$unix(0xffffffffffffffff, 0x0, 0x10102) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000019000000010000010900010073797a31000000002c000000030a01020000000000000000010000000900030073797a32000000000900010073797a31000000002c000000030a05000000000000000000010000000c00024000000000000000010900010073797a310000000028"], 0xc8}}, 0x0) 271.840971ms ago: executing program 3 (id=434): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d0020073f0000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a800800", @ANYRES16=r2], 0x44}}, 0x2000040) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008804}, 0x20040040) (fail_nth: 1) 95.816417ms ago: executing program 4 (id=435): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000080)={r1}, &(0x7f00000000c0)=0x8) 84.468177ms ago: executing program 3 (id=436): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = creat(&(0x7f0000000100)='./file0\x00', 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000040004000b7040000001f000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r5, 0x0, 0x0}, 0x10) r6 = syz_io_uring_setup(0x7e10, &(0x7f00000004c0)={0x0, 0xaee4, 0x8000, 0x2, 0x1fc, 0x0, r3}, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r6, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x5c7000, 0x12345}) io_uring_enter(r6, 0x47f6, 0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(r6, 0x47f6, 0x0, 0x0, 0x0, 0x0) r9 = fsmount(r2, 0x0, 0x0) fchdir(r9) r10 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000180)=0x0) tkill(r11, 0x36) (async) tkill(r11, 0x36) ftruncate(r10, 0x2007ffb) sendfile(r10, r10, 0x0, 0x1000000201005) (async) sendfile(r10, r10, 0x0, 0x1000000201005) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) 69.182348ms ago: executing program 4 (id=437): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000300)={0x204, 0x1, 0x1, 0x101, 0x0, 0x0, {0x7, 0x0, 0xa}, [@CTA_LABELS_MASK={0x20, 0x17, [0x401, 0x4, 0x8, 0xfb3, 0x10, 0xfffff660, 0x8]}, @CTA_TUPLE_REPLY={0x84, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3e}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_NAT_DST={0x64, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @local}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}]}, @CTA_NAT_PROTO={0x2c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast1}]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x1}, @CTA_NAT_SRC={0x90, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @broadcast}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast1}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}, @CTA_NAT_V4_MINIP={0x8, 0x1, @empty}, @CTA_NAT_PROTO={0x44, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}]}, @CTA_NAT_PROTO={0x1c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}]}]}, @CTA_PROTOINFO={0x28, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x24, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x3, 0x5}}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0xb, 0x7}}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0xa}, @CTA_PROTOINFO_TCP_WSCALE_ORIGINAL={0x5, 0x2, 0x8}]}}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x9}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @empty}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r3 = socket(0x10, 0xa, 0x2) syz_open_pts(0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d0020073f0000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a800800", @ANYRES16=r3], 0x44}}, 0x2000040) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008804}, 0x20040040) 1.01207ms ago: executing program 4 (id=438): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioprio_set$uid(0x3, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x1b78, &(0x7f0000000040)={0x0, 0xca72, 0xc000, 0x0, 0x20002fb}) socket$xdp(0x2c, 0x3, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2, 0x9}}, 0x20) socket$inet(0x2, 0x80001, 0x84) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000840)=@newtaction={0x18, 0x76, 0x1, 0xfffffffc, 0x1, {0x0, 0x0, 0x81ff}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x24040000}, 0x20008840) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) syz_usb_connect$hid(0x3, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010002000000104c05cc0900000000000109022d00010000d0050904000a0103000122290009058103bf0300fc010905020300022fe76d00000000000000"], 0x0) socket$rxrpc(0x21, 0x2, 0x2) r2 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010102, 0xce21, 0x3, 'fo\x00', 0x12, 0xa7e, 0x71}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'dh\x00', 0x5, 0x8, 0x6c}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0xf6c12eb8213c0b07, 0xcd, 0x1}}, 0x44) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 290.13µs ago: executing program 2 (id=439): syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@ipv6_delrule={0x4c, 0x21, 0x1, 0x0, 0x25dfdbfc, {0xa, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000c}, [@FRA_DST={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}, @FRA_SRC={0x14, 0x2, @mcast2}, @FIB_RULE_POLICY=@FRA_FWMARK={0x8, 0xa, 0xb}]}, 0x4c}, 0x1, 0x0, 0x0, 0x14}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2, 0x32}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0xfc}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r3) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={0x0, 0x601, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="1709000000000000000001000000050007000000000008000900fffffffe060002000000000008000a000100000008001800ac1414aa08001900e000000214001b0017"], 0x58}}, 0x0) r5 = syz_open_dev$sg(&(0x7f00000002c0), 0xe6, 0x2602) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) ioctl$SG_BLKSECTGET(r5, 0x1267, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 0s ago: executing program 6 (id=440): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'dvmrp1\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x10) r0 = syz_io_uring_setup(0x2df8, &(0x7f00000000c0)={0x0, 0x2e87, 0x10, 0x3, 0x1d2}, 0x0, 0x0) syz_io_uring_setup(0x378, &(0x7f0000000200)={0x0, 0x29fc, 0x40, 0x3, 0x312, 0x0, r0}, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x802c, @mcast2, 0x5}, 0x1c) setitimer(0x2, 0x0, &(0x7f0000000080)) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="61154c00000000006113500000000000bfa00000000000001503000008004e002d3501000000000095004160000000006916640000000000bf67000000000000350605000fff07206706000005000000160302000ee60060bf670000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffbd4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe01c5473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc2300000008ac86d8a297dff0445a15f21dce4de9f29eff65aadc841848c9b562a31e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076ebae3f55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932c9a6aa57f1ad2e99e0e67ab93716d20000009fbb0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000207b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000f4000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c6939628950000000000000001c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b30410856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fb9fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff010404faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202ee1192b81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9b5a8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce95798adc2dca871073f6bd61dc18487b6feb89752cd600000000abc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db059acaba9eaea93f811d434e00000000000000000000d154ba10a8e51489a614e69722bac30000000000000000000000000000c5dfd188ff555285b9743d3aac000583f42d168613151d681a2f71373f20d92c9048407c91fabecfe8b3f2d5454d127edab14ba61ba1cfc4336324c86f3dcb43e9a58208077e90f6ec1c7ac756f61dcc372cdd30b82507489f0bbfbd3c3f21752e81319c0161e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a80756447322207b4007dff12eb95066cc6bc256f0a12282224d718b06ca80b57aa183dd0c3eee45891441f2b89b4c67aa9882281393954972046974f18df232cd7fca610e33f51c2d062020f403d85ff36c26e2f6bd1d82f4d3ceb3472d9a77e0057a3bfe697d9ab7585f4a1b381343d2cf855689232f4fc5135790662dc1419a374be9d7b3e5be2886d23add90d862f1a682ff11c798e338af3e5bb0f9d3952b15bf3e0c618c89d20ca1e18a031397693bf3cfbd8417e5b55e641c898c280356f2da222d5d68919d98158578dcf18efa404e508bcbbb8cfcf70086821ebdf34c9a1dff45af873df904c2bdbef81f246d26f4b40df949e12bdac18533d4e11c608cc31d60cb591c40a7b386fa1c753336d7220a35118d4919b45eff32aab684e62c6691de14e97aa7e9dc8ecf0cd50540246d2b746e41e5b4e2c095039dfe0f71db6265f7580d098be40ef36faee5d1695830d4242a23e541e6ce9fa1998d8961cf4fe3c8e8fbb566f148c8befc229614a4b7f80d237b8abc6fd0407de31d6e5532f360d379f20f054692b47207922fe6c14eba96c9a7ae906abc1ae1ae8c4fae92883cfa1978a04bbff4bbe0000000000000000000000000044585397feaadda3fcc64e7b0c08f7ac5c64cb190f1712a3b10fc34eb758705f1751d8c8b712eb39d2b8ad44f129c2c9aedb15"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="2d01620000000900509072fb60cb08000300"], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r6, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r1], 0x4}}, 0x0) sendfile(r4, r2, 0x0, 0x100000000) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x18, 0x32, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x0) kernel console output (not intermixed with test programs): [1, 0] type 2 family 0 port 6081 - 0 [ 39.170216][ T28] audit: type=1400 audit(1774673518.881:149): avc: denied { setopt } for pid=3562 comm="syz.0.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 39.205221][ T309] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.237232][ T309] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.307492][ T3594] loop4: detected capacity change from 0 to 128 [ 39.314507][ T3594] msdos: Bad value for 'gid' [ 39.325460][ T3594] msdos: Bad value for 'gid' [ 39.342121][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.381629][ T3594] netlink: 8 bytes leftover after parsing attributes in process `syz.4.22'. [ 39.476597][ T3596] netlink: 132 bytes leftover after parsing attributes in process `syz.3.24'. [ 39.477181][ T3596] netlink: 'syz.3.24': attribute type 12 has an invalid length. [ 39.477197][ T3596] netlink: 132 bytes leftover after parsing attributes in process `syz.3.24'. [ 39.514364][ T3601] loop1: detected capacity change from 0 to 1024 [ 39.514783][ T3601] EXT4-fs: Ignoring removed bh option [ 39.533835][ T3601] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.796194][ T3609] EXT4-fs error (device loop1): ext4_lookup:1777: inode #2: comm syz.1.25: bad inode number: 12 [ 39.800758][ T3609] EXT4-fs (loop1): Remounting filesystem read-only [ 42.045908][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.167628][ T3626] netlink: 132 bytes leftover after parsing attributes in process `syz.1.29'. [ 42.173914][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 42.174004][ T28] audit: type=1400 audit(1774673522.541:157): avc: denied { write } for pid=3625 comm="syz.1.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 42.174033][ T28] audit: type=1400 audit(1774673522.541:158): avc: denied { connect } for pid=3625 comm="syz.1.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 42.174070][ T28] audit: type=1400 audit(1774673522.541:159): avc: denied { name_connect } for pid=3625 comm="syz.1.29" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 42.290200][ T3631] loop3: detected capacity change from 0 to 4096 [ 43.145505][ T28] audit: type=1400 audit(1774673523.491:160): avc: denied { name_bind } for pid=3627 comm="syz.0.31" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 43.145542][ T28] audit: type=1400 audit(1774673523.491:161): avc: denied { node_bind } for pid=3627 comm="syz.0.31" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 43.232074][ T3631] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.276309][ T3643] loop0: detected capacity change from 0 to 1024 [ 43.284244][ T3643] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869) [ 43.284354][ T3643] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 43.284390][ T3643] EXT4-fs error (device loop0): ext4_get_journal_inode:5863: comm syz.0.34: inode #4294967295: comm syz.0.34: iget: illegal inode # [ 43.284418][ T3643] loop0: lost filesystem error report for type 5 error -117 [ 43.284570][ T3643] EXT4-fs (loop0): no journal found [ 43.284641][ T3643] EXT4-fs (loop0): can't get journal size [ 43.285066][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 43.285086][ C0] EXT4-fs (loop0): initial error at time 1774673523: ext4_get_journal_inode:5863 [ 43.285110][ C0] EXT4-fs (loop0): last error at time 1774673523: ext4_get_journal_inode:5863 [ 43.291032][ T3643] EXT4-fs (loop0): failed to initialize system zone (-22) [ 43.291070][ T3643] EXT4-fs (loop0): mount failed [ 43.301405][ T28] audit: type=1400 audit(1774673523.651:162): avc: denied { read append open } for pid=3628 comm="syz.3.30" path="/9/file0/cpuacct.usage_sys" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 43.407163][ T28] audit: type=1400 audit(1774673523.781:163): avc: denied { ioctl } for pid=3628 comm="syz.3.30" path="/9/file0/cpuacct.usage_sys" dev="loop3" ino=18 ioctlcmd=0x6628 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 43.407621][ T28] audit: type=1400 audit(1774673523.781:164): avc: denied { watch watch_reads } for pid=3628 comm="syz.3.30" path="/9/file0" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 43.408017][ T3646] netlink: 'syz.3.30': attribute type 21 has an invalid length. [ 43.581767][ T3603] syz.2.23 (3603) used greatest stack depth: 9976 bytes left [ 44.426193][ T3657] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 44.444814][ T28] audit: type=1400 audit(1774673524.811:165): avc: denied { ioctl } for pid=3656 comm="syz.1.35" path="socket:[4938]" dev="sockfs" ino=4938 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 44.495237][ T28] audit: type=1400 audit(1774673524.861:166): avc: denied { create } for pid=3658 comm="syz.2.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 44.498467][ T3638] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 44.517717][ T3659] loop2: detected capacity change from 0 to 512 [ 44.545191][ T3646] netlink: 120 bytes leftover after parsing attributes in process `syz.3.30'. [ 44.568423][ T3645] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.686541][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.726997][ T3667] Zero length message leads to an empty skb [ 45.613967][ T3671] hub 8-0:1.0: USB hub found [ 45.619114][ T3671] hub 8-0:1.0: 8 ports detected [ 45.643400][ T3671] netlink: 'syz.0.37': attribute type 36 has an invalid length. [ 45.660248][ T3671] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 45.670636][ T3671] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 45.706164][ T3645] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.856234][ T3671] netlink: 'syz.0.37': attribute type 10 has an invalid length. [ 45.910568][ T3671] macvlan1: entered allmulticast mode [ 45.919919][ T3671] veth1_vlan: entered allmulticast mode [ 45.931365][ T3671] team0: Port device macvlan1 added [ 45.979262][ T3645] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.106197][ T3645] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.156622][ T3671] syz.0.37 (3671) used greatest stack depth: 9400 bytes left [ 46.169912][ T3677] netlink: 132 bytes leftover after parsing attributes in process `syz.2.42'. [ 47.334227][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 47.334248][ T28] audit: type=1400 audit(1774673527.001:174): avc: denied { mount } for pid=3688 comm="syz.1.46" name="/" dev="ramfs" ino=5535 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 49.596235][ T28] audit: type=1400 audit(1774673529.961:175): avc: denied { connect } for pid=3686 comm="syz.3.45" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 49.626502][ T3715] bond1: ARP target 9.0.0.0 is already present [ 49.633043][ T3715] bond1: option arp_ip_target: invalid value (9) [ 49.688274][ T3715] bond1 (unregistering): Released all slaves [ 49.698181][ T28] audit: type=1400 audit(1774673530.071:176): avc: denied { connect } for pid=3713 comm="syz.1.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 49.728750][ T3707] ªªªªªª: renamed from vlan0 (while UP) [ 49.734447][ T28] audit: type=1400 audit(1774673530.071:177): avc: denied { write } for pid=3713 comm="syz.1.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 49.946577][ T12] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.050568][ T3728] hub 8-0:1.0: USB hub found [ 50.055787][ T3728] hub 8-0:1.0: 8 ports detected [ 50.076622][ T3728] netlink: 'syz.1.51': attribute type 36 has an invalid length. [ 50.096491][ T3724] loop2: detected capacity change from 0 to 4096 [ 50.118976][ T3724] EXT4-fs: Ignoring removed bh option [ 50.129025][ T3729] netlink: 'syz.1.51': attribute type 10 has an invalid length. [ 50.183805][ T3729] macvlan1: entered allmulticast mode [ 50.192681][ T3729] veth1_vlan: entered allmulticast mode [ 50.202258][ T3729] team0: Port device macvlan1 added [ 50.230630][ T3728] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 50.240806][ T3728] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 50.273832][ T30] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.354528][ T30] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.471924][ T30] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.596446][ T3724] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.618786][ T3734] loop0: detected capacity change from 0 to 1024 [ 50.638913][ T28] audit: type=1400 audit(1774673531.001:178): avc: denied { search } for pid=3723 comm="syz.2.50" name="/" dev="configfs" ino=1001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 50.662351][ T3734] EXT4-fs: Ignoring removed bh option [ 50.700929][ T3734] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.704766][ T3737] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.722270][ T28] audit: type=1400 audit(1774673531.071:179): avc: denied { ioctl } for pid=3736 comm="syz.3.53" path="socket:[5034]" dev="sockfs" ino=5034 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 50.785387][ T3737] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.809191][ T3738] loop4: detected capacity change from 0 to 8192 [ 50.848463][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.046288][ T3751] EXT4-fs error (device loop0): ext4_lookup:1777: inode #2: comm syz.0.52: bad inode number: 12 [ 51.067988][ T3751] EXT4-fs (loop0): Remounting filesystem read-only [ 52.974604][ T28] audit: type=1400 audit(1774673533.341:180): avc: denied { create } for pid=3735 comm="syz.4.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 52.975139][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.101459][ T3761] netlink: zone id is out of range [ 53.118356][ T3761] netlink: 236 bytes leftover after parsing attributes in process `syz.1.59'. [ 53.147838][ T3761] netlink: 236 bytes leftover after parsing attributes in process `syz.1.59'. [ 53.238429][ T28] audit: type=1400 audit(1774673533.341:181): avc: denied { getopt } for pid=3735 comm="syz.4.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 53.258419][ T28] audit: type=1400 audit(1774673533.341:182): avc: denied { connect } for pid=3735 comm="syz.4.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 53.810064][ T3771] ªªªªªª: renamed from vlan0 (while UP) [ 53.974388][ T3779] loop0: detected capacity change from 0 to 128 [ 54.029901][ T3782] loop3: detected capacity change from 0 to 1024 [ 54.047512][ T3783] loop1: detected capacity change from 0 to 4096 [ 54.054401][ T3783] EXT4-fs: Ignoring removed bh option [ 54.064396][ T3779] FAT-fs (loop0): bogus number of reserved sectors [ 54.076743][ T3779] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 54.096618][ T3782] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.102699][ T3783] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.124115][ T3785] netlink: 'syz.4.63': attribute type 2 has an invalid length. [ 54.145787][ T28] audit: type=1400 audit(1774673534.491:183): avc: denied { map } for pid=3776 comm="syz.4.63" path="/proc/25/numa_maps" dev="proc" ino=5081 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 54.147220][ T3779] FAT-fs (loop0): Can't find a valid FAT filesystem [ 54.168565][ T3785] netlink: 191880 bytes leftover after parsing attributes in process `syz.4.63'. [ 54.243260][ T28] audit: type=1400 audit(1774673534.491:184): avc: denied { create } for pid=3776 comm="syz.4.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 54.243923][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.317653][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.379048][ T28] audit: type=1400 audit(1774673534.751:185): avc: denied { write } for pid=3793 comm="syz.3.66" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 54.458500][ T28] audit: type=1400 audit(1774673534.831:186): avc: denied { name_connect } for pid=3778 comm="syz.0.58" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 54.574871][ T28] audit: type=1400 audit(1774673534.871:187): avc: denied { accept } for pid=3778 comm="syz.0.58" lport=35717 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 54.625135][ T28] audit: type=1400 audit(1774673534.871:188): avc: denied { write } for pid=3778 comm="syz.0.58" lport=35717 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 54.687206][ T28] audit: type=1400 audit(1774673534.871:189): avc: denied { setopt } for pid=3778 comm="syz.0.58" lport=35717 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 55.458769][ T3815] loop0: detected capacity change from 0 to 512 [ 55.479275][ T3815] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 55.804068][ T3822] loop3: detected capacity change from 0 to 8192 [ 55.878043][ T3796] bridge_slave_0: left allmulticast mode [ 55.878401][ T3796] bridge_slave_0: left promiscuous mode [ 55.881454][ T3796] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.269079][ T3796] bridge_slave_1: left allmulticast mode [ 56.285827][ T3796] bridge_slave_1: left promiscuous mode [ 56.304490][ T3796] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.405330][ T3796] bond0: (slave bond_slave_0): Releasing backup interface [ 56.489114][ T3825] FAULT_INJECTION: forcing a failure. [ 56.489114][ T3825] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 56.502942][ T3825] CPU: 0 UID: 0 PID: 3825 Comm: syz.3.75 Not tainted syzkaller #0 PREEMPT(full) [ 56.502974][ T3825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 56.503059][ T3825] Call Trace: [ 56.503067][ T3825] [ 56.503075][ T3825] __dump_stack+0x1d/0x30 [ 56.503166][ T3825] dump_stack_lvl+0x95/0xd0 [ 56.503194][ T3825] dump_stack+0x15/0x1b [ 56.503271][ T3825] should_fail_ex+0x263/0x280 [ 56.503312][ T3825] should_fail+0xb/0x20 [ 56.503338][ T3825] should_fail_usercopy+0x1a/0x20 [ 56.503410][ T3825] _copy_from_user+0x1c/0xb0 [ 56.503443][ T3825] __copy_msghdr+0x244/0x300 [ 56.503559][ T3825] ___sys_sendmsg+0x10c/0x1e0 [ 56.503592][ T3825] ? path_openat+0x1b01/0x2050 [ 56.503641][ T3825] __sys_sendmmsg+0x185/0x320 [ 56.503778][ T3825] __x64_sys_sendmmsg+0x57/0x70 [ 56.503818][ T3825] x64_sys_call+0x27aa/0x3020 [ 56.503849][ T3825] do_syscall_64+0x12c/0x370 [ 56.503877][ T3825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.503903][ T3825] RIP: 0033:0x7f8d06e2c799 [ 56.503952][ T3825] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 56.503972][ T3825] RSP: 002b:00007f8d0587f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 56.504049][ T3825] RAX: ffffffffffffffda RBX: 00007f8d070a5fa0 RCX: 00007f8d06e2c799 [ 56.504067][ T3825] RDX: 0000000000000002 RSI: 0000200000000600 RDI: 0000000000000003 [ 56.504081][ T3825] RBP: 00007f8d0587f090 R08: 0000000000000000 R09: 0000000000000000 [ 56.504097][ T3825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 56.504111][ T3825] R13: 00007f8d070a6038 R14: 00007f8d070a5fa0 R15: 00007ffc10ff09e8 [ 56.504134][ T3825] [ 56.696922][ T3796] bond0: (slave bond_slave_1): Releasing backup interface [ 56.747120][ T3796] team0: Port device team_slave_0 removed [ 56.786726][ T3796] team0: Port device team_slave_1 removed [ 56.812893][ T3796] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 56.821706][ T3796] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 56.859881][ T3796] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 56.868877][ T3796] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 56.949351][ T3796] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 56.979802][ T3828] bond1: invalid ARP target 0.0.0.0 specified for addition [ 56.987150][ T3828] bond1: option arp_ip_target: invalid value (0) [ 56.994578][ T3828] bond1 (unregistering): Released all slaves [ 57.004365][ T3813] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 57.013667][ T3813] infiniband syz!: RDMA CMA: cma_listen_on_dev, error -98 [ 57.024432][ T3797] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.064049][ T3832] loop2: detected capacity change from 0 to 4096 [ 57.072126][ T3832] EXT4-fs: Ignoring removed bh option [ 57.114310][ T3832] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.135569][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.156606][ T3797] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.220668][ T3841] netlink: 124 bytes leftover after parsing attributes in process `syz.4.80'. [ 57.259774][ T3797] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.289764][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.430163][ T3857] hub 8-0:1.0: USB hub found [ 57.434944][ T3857] hub 8-0:1.0: 8 ports detected [ 57.453613][ T3857] netlink: 'syz.4.83': attribute type 36 has an invalid length. [ 57.471035][ T3857] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 57.481097][ T3857] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 57.503365][ T3857] netlink: 'syz.4.83': attribute type 10 has an invalid length. [ 57.526105][ T3857] macvlan1: entered allmulticast mode [ 57.536124][ T3857] veth1_vlan: entered allmulticast mode [ 57.547525][ T3857] team0: Port device macvlan1 added [ 57.612993][ T3797] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.003783][ T36] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.108702][ T3863] loop2: detected capacity change from 0 to 256 [ 58.288355][ T3863] FAT-fs (loop2): Directory bread(block 64) failed [ 58.294953][ T3863] FAT-fs (loop2): Directory bread(block 65) failed [ 58.301730][ T3863] FAT-fs (loop2): Directory bread(block 66) failed [ 58.308313][ T3863] FAT-fs (loop2): Directory bread(block 67) failed [ 58.315143][ T3863] FAT-fs (loop2): Directory bread(block 68) failed [ 58.321761][ T3863] FAT-fs (loop2): Directory bread(block 69) failed [ 58.328393][ T3863] FAT-fs (loop2): Directory bread(block 70) failed [ 58.335021][ T3863] FAT-fs (loop2): Directory bread(block 71) failed [ 58.341868][ T3863] FAT-fs (loop2): Directory bread(block 72) failed [ 58.348454][ T3863] FAT-fs (loop2): Directory bread(block 73) failed [ 58.446135][ T311] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.475835][ T311] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.521714][ T311] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.594359][ T3869] vlan0: entered promiscuous mode [ 58.599920][ T3869] vlan0: entered allmulticast mode [ 58.605949][ T3869] hsr_slave_1: entered allmulticast mode [ 58.802240][ T3873] netlink: 8 bytes leftover after parsing attributes in process `syz.1.90'. [ 58.884889][ T28] kauditd_printk_skb: 184 callbacks suppressed [ 58.884907][ T28] audit: type=1326 audit(1774673539.251:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3874 comm="syz.1.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c4016c799 code=0x7ffc0000 [ 58.914888][ T28] audit: type=1326 audit(1774673539.271:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3874 comm="syz.1.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c4016c799 code=0x7ffc0000 [ 58.939300][ T3857] syz.4.83 (3857) used greatest stack depth: 9208 bytes left [ 58.989223][ T28] audit: type=1326 audit(1774673539.331:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3874 comm="syz.1.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c4016c799 code=0x7ffc0000 [ 59.035311][ T28] audit: type=1326 audit(1774673539.331:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3874 comm="syz.1.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c4016c799 code=0x7ffc0000 [ 59.068490][ T3882] netlink: 124 bytes leftover after parsing attributes in process `syz.2.94'. [ 59.096065][ T28] audit: type=1326 audit(1774673539.331:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3874 comm="syz.1.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f8c4016c799 code=0x7ffc0000 [ 59.140034][ T3886] netlink: 'syz.2.96': attribute type 2 has an invalid length. [ 59.183495][ T28] audit: type=1326 audit(1774673539.331:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3874 comm="syz.1.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c4016c799 code=0x7ffc0000 [ 59.214934][ T28] audit: type=1326 audit(1774673539.331:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3874 comm="syz.1.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c4016c799 code=0x7ffc0000 [ 59.225300][ T3884] loop0: detected capacity change from 0 to 4096 [ 59.276526][ T28] audit: type=1326 audit(1774673539.331:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3874 comm="syz.1.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c4016c799 code=0x7ffc0000 [ 59.301100][ T28] audit: type=1326 audit(1774673539.331:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3874 comm="syz.1.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f8c4016c799 code=0x7ffc0000 [ 59.324841][ T28] audit: type=1326 audit(1774673539.331:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3874 comm="syz.1.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c4016c799 code=0x7ffc0000 [ 59.346781][ T3884] EXT4-fs: Ignoring removed bh option [ 59.375841][ T3901] sch_fq: defrate 7 ignored. [ 59.760304][ T3884] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.669996][ T3915] FAULT_INJECTION: forcing a failure. [ 60.669996][ T3915] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 60.686640][ T3915] CPU: 1 UID: 0 PID: 3915 Comm: syz.4.102 Not tainted syzkaller #0 PREEMPT(full) [ 60.686674][ T3915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 60.686689][ T3915] Call Trace: [ 60.686714][ T3915] [ 60.686745][ T3915] __dump_stack+0x1d/0x30 [ 60.686779][ T3915] dump_stack_lvl+0x95/0xd0 [ 60.686808][ T3915] dump_stack+0x15/0x1b [ 60.686835][ T3915] should_fail_ex+0x263/0x280 [ 60.686874][ T3915] should_fail+0xb/0x20 [ 60.686933][ T3915] should_fail_usercopy+0x1a/0x20 [ 60.686963][ T3915] _copy_from_iter+0xcf/0xea0 [ 60.686991][ T3915] ? perf_trace_kfree+0xc2/0x100 [ 60.687036][ T3915] ? file_tty_write+0x1d4/0x690 [ 60.687108][ T3915] ? kfree+0x303/0x380 [ 60.687185][ T3915] file_tty_write+0x322/0x690 [ 60.687212][ T3915] ? __pfx_tty_write+0x10/0x10 [ 60.687235][ T3915] tty_write+0x25/0x30 [ 60.687258][ T3915] vfs_write+0x5a6/0x9f0 [ 60.687279][ T3915] ksys_write+0xdc/0x1a0 [ 60.687343][ T3915] __x64_sys_write+0x40/0x50 [ 60.687367][ T3915] x64_sys_call+0x27e1/0x3020 [ 60.687395][ T3915] do_syscall_64+0x12c/0x370 [ 60.687420][ T3915] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.687442][ T3915] RIP: 0033:0x7fb264a9c799 [ 60.687508][ T3915] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 60.687526][ T3915] RSP: 002b:00007fb2634ef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 60.687554][ T3915] RAX: ffffffffffffffda RBX: 00007fb264d15fa0 RCX: 00007fb264a9c799 [ 60.687571][ T3915] RDX: 00000000fffffedf RSI: 0000200000000000 RDI: 0000000000000004 [ 60.687633][ T3915] RBP: 00007fb2634ef090 R08: 0000000000000000 R09: 0000000000000000 [ 60.687712][ T3915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 60.687780][ T3915] R13: 00007fb264d16038 R14: 00007fb264d15fa0 R15: 00007fff8009c598 [ 60.687803][ T3915] [ 61.105827][ T3932] IPVS: set_ctl: invalid protocol: 47 10.1.1.1:20001 [ 61.121438][ T3932] x_tables: duplicate underflow at hook 2 [ 61.134735][ T3935] netlink: 132 bytes leftover after parsing attributes in process `syz.1.107'. [ 61.162827][ T3936] vlan2: entered promiscuous mode [ 61.186366][ T3936] vlan2: entered allmulticast mode [ 61.195562][ T3936] hsr_slave_1: entered allmulticast mode [ 61.262812][ T3937] loop3: detected capacity change from 0 to 128 [ 61.592318][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.704254][ T3942] netlink: 4 bytes leftover after parsing attributes in process `syz.1.110'. [ 62.195210][ T3958] IPv6: NLM_F_REPLACE set, but no existing node found! [ 64.197706][ T3981] loop3: detected capacity change from 0 to 128 [ 65.733269][ T28] kauditd_printk_skb: 834 callbacks suppressed [ 65.733288][ T28] audit: type=1400 audit(1774673802.106:1215): avc: denied { mount } for pid=3985 comm="syz.0.119" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 65.793509][ T3989] netlink: 132 bytes leftover after parsing attributes in process `syz.4.120'. [ 66.978337][ T4009] netlink: 48 bytes leftover after parsing attributes in process `syz.4.124'. [ 66.995128][ T4009] netlink: 20 bytes leftover after parsing attributes in process `syz.4.124'. [ 67.096152][ T4013] loop4: detected capacity change from 0 to 2048 [ 67.286709][ T4017] netlink: 1010 bytes leftover after parsing attributes in process `syz.2.125'. [ 67.296243][ T4017] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 68.082070][ T28] audit: type=1400 audit(1774673804.456:1216): avc: denied { create } for pid=4026 comm="syz.0.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 68.370539][ T28] audit: type=1400 audit(1774673804.726:1217): avc: denied { ioctl } for pid=4026 comm="syz.0.126" path="socket:[7490]" dev="sockfs" ino=7490 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 68.422933][ T28] audit: type=1400 audit(1774673804.726:1218): avc: denied { setopt } for pid=4026 comm="syz.0.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 68.517778][ T4013] Alternate GPT is invalid, using primary GPT. [ 68.527642][ T4013] loop4: p2 p3 p7 [ 69.252247][ T4038] hub 8-0:1.0: USB hub found [ 69.257644][ T4038] hub 8-0:1.0: 8 ports detected [ 69.279206][ T4038] netlink: 'syz.0.128': attribute type 36 has an invalid length. [ 69.294902][ T4038] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 69.304877][ T4038] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 69.326321][ T4038] netlink: 'syz.0.128': attribute type 10 has an invalid length. [ 69.334609][ T4038] veth1_vlan: left allmulticast mode [ 70.581756][ T4057] netlink: 132 bytes leftover after parsing attributes in process `syz.0.133'. [ 70.612549][ T4063] netlink: 24 bytes leftover after parsing attributes in process `syz.1.135'. [ 70.625203][ T28] audit: type=1400 audit(1774673806.986:1219): avc: denied { getopt } for pid=4058 comm="syz.1.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 70.649102][ T28] audit: type=1400 audit(1774673806.986:1220): avc: denied { ioctl } for pid=4058 comm="syz.1.135" path="socket:[7562]" dev="sockfs" ino=7562 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 70.691455][ T28] audit: type=1400 audit(1774673807.006:1221): avc: denied { create } for pid=4059 comm="syz.4.134" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 70.722540][ T28] audit: type=1400 audit(1774673807.066:1222): avc: denied { unlink } for pid=3315 comm="syz-executor" name="file0" dev="tmpfs" ino=134 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 71.056706][ T28] audit: type=1400 audit(1774673807.156:1223): avc: denied { write } for pid=4058 comm="syz.1.135" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 71.130515][ T28] audit: type=1400 audit(1774673807.156:1224): avc: denied { setopt } for pid=4058 comm="syz.1.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 72.126823][ T4083] loop0: detected capacity change from 0 to 2048 [ 72.135444][ T28] audit: type=1400 audit(1774673807.156:1225): avc: denied { read } for pid=4058 comm="syz.1.135" path="socket:[7575]" dev="sockfs" ino=7575 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 72.248595][ T28] audit: type=1400 audit(1774673807.266:1226): avc: denied { perfmon } for pid=4066 comm="syz.4.138" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 72.287416][ T4086] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4086 comm=syz.1.141 [ 72.325591][ T28] audit: type=1400 audit(1774673807.476:1227): avc: denied { bpf } for pid=4064 comm="syz.2.137" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 72.350710][ T4088] netlink: 'syz.4.143': attribute type 46 has an invalid length. [ 72.350966][ T28] audit: type=1400 audit(1774673807.486:1228): avc: denied { module_request } for pid=4064 comm="syz.2.137" kmod="netdev-syztnl2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 72.382548][ T28] audit: type=1400 audit(1774673808.616:1229): avc: denied { create } for pid=4085 comm="syz.1.141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 72.402367][ T28] audit: type=1400 audit(1774673808.616:1230): avc: denied { setopt } for pid=4085 comm="syz.1.141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 72.422199][ T4088] netlink: 55 bytes leftover after parsing attributes in process `syz.4.143'. [ 72.432910][ T4091] FAULT_INJECTION: forcing a failure. [ 72.432910][ T4091] name failslab, interval 1, probability 0, space 0, times 0 [ 72.451407][ T4088] loop4: detected capacity change from 0 to 1024 [ 72.458148][ T4091] CPU: 1 UID: 0 PID: 4091 Comm: syz.2.142 Not tainted syzkaller #0 PREEMPT(full) [ 72.458177][ T4091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 72.458253][ T4091] Call Trace: [ 72.458261][ T4091] [ 72.458270][ T4091] __dump_stack+0x1d/0x30 [ 72.458301][ T4091] dump_stack_lvl+0x95/0xd0 [ 72.458330][ T4091] dump_stack+0x15/0x1b [ 72.458356][ T4091] should_fail_ex+0x263/0x280 [ 72.458463][ T4091] should_failslab+0x8c/0xb0 [ 72.458564][ T4091] kmem_cache_alloc_noprof+0x66/0x400 [ 72.458589][ T4091] ? __anon_vma_prepare+0x70/0x2f0 [ 72.458751][ T4091] __anon_vma_prepare+0x70/0x2f0 [ 72.458805][ T4091] do_wp_page+0x196b/0x2590 [ 72.458893][ T4091] ? css_rstat_updated+0xbb/0x280 [ 72.458917][ T4091] ? __rcu_read_lock+0x36/0x50 [ 72.458961][ T4091] handle_mm_fault+0x8cb/0x3020 [ 72.458997][ T4091] ? vma_start_read+0x1c7/0x2c0 [ 72.459024][ T4091] do_user_addr_fault+0x62f/0x1050 [ 72.459071][ T4091] ? ksys_mmap_pgoff+0xc1/0x310 [ 72.459160][ T4091] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 72.459193][ T4091] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 72.459218][ T4091] ? trace_page_fault_user+0x1f/0xe0 [ 72.459307][ T4091] exc_page_fault+0x62/0xa0 [ 72.459331][ T4091] asm_exc_page_fault+0x26/0x30 [ 72.459375][ T4091] RIP: 0033:0x7f2c19613a63 [ 72.459394][ T4091] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 72.459413][ T4091] RSP: 002b:00007f2c181ae3c0 EFLAGS: 00010202 [ 72.459431][ T4091] RAX: 00000000000001c0 RBX: 00007f2c181ae480 RCX: 00007f2c0fd8f000 [ 72.459445][ T4091] RDX: 00007f2c181ae620 RSI: 0000000000000001 RDI: 00007f2c181ae520 [ 72.459458][ T4091] RBP: 00000000000000bd R08: 0000000000000006 R09: 0000000000000021 [ 72.459472][ T4091] R10: 0000000000000024 R11: 00007f2c181ae480 R12: 0000000000000001 [ 72.459556][ T4091] R13: 00007f2c19812620 R14: 0000000000000002 R15: 00007f2c181ae520 [ 72.459579][ T4091] [ 72.459590][ T4091] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 72.525097][ T4097] FAULT_INJECTION: forcing a failure. [ 72.525097][ T4097] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 72.528886][ T4088] EXT4-fs: Ignoring removed i_version option [ 72.579755][ T4097] CPU: 0 UID: 0 PID: 4097 Comm: syz.1.144 Not tainted syzkaller #0 PREEMPT(full) [ 72.579843][ T4097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 72.579856][ T4097] Call Trace: [ 72.579865][ T4097] [ 72.579873][ T4097] __dump_stack+0x1d/0x30 [ 72.579969][ T4097] dump_stack_lvl+0x95/0xd0 [ 72.579995][ T4097] dump_stack+0x15/0x1b [ 72.580018][ T4097] should_fail_ex+0x263/0x280 [ 72.580117][ T4097] should_fail+0xb/0x20 [ 72.580142][ T4097] should_fail_usercopy+0x1a/0x20 [ 72.580171][ T4097] _copy_to_user+0x20/0xa0 [ 72.580228][ T4097] simple_read_from_buffer+0xb5/0x130 [ 72.580254][ T4097] proc_fail_nth_read+0x10e/0x150 [ 72.580286][ T4097] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 72.580364][ T4097] vfs_read+0x1ab/0x7f0 [ 72.580403][ T4097] ? kmem_cache_free+0xc8/0x380 [ 72.580431][ T4097] ? putname+0x7c/0xc0 [ 72.580531][ T4097] ksys_read+0xdc/0x1a0 [ 72.580551][ T4097] __x64_sys_read+0x40/0x50 [ 72.580571][ T4097] x64_sys_call+0x2886/0x3020 [ 72.580665][ T4097] do_syscall_64+0x12c/0x370 [ 72.580693][ T4097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.580716][ T4097] RIP: 0033:0x7f8c4012cfce [ 72.580733][ T4097] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 72.580783][ T4097] RSP: 002b:00007f8c3eb9dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 72.580806][ T4097] RAX: ffffffffffffffda RBX: 00007f8c3eb9e6c0 RCX: 00007f8c4012cfce [ 72.580835][ T4097] RDX: 000000000000000f RSI: 00007f8c3eb9e0a0 RDI: 0000000000000003 [ 72.580849][ T4097] RBP: 00007f8c3eb9e090 R08: 0000000000000000 R09: 0000000000000000 [ 72.580863][ T4097] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 72.580877][ T4097] R13: 00007f8c403e6128 R14: 00007f8c403e6090 R15: 00007ffd154ce348 [ 72.580896][ T4097] [ 72.617066][ T4091] loop2: detected capacity change from 0 to 2048 [ 72.643928][ T4088] ext4: Unknown parameter 'noacl' [ 72.649874][ T28] audit: type=1400 audit(1774673808.666:1231): avc: denied { bind } for pid=4085 comm="syz.1.141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 72.734840][ T4088] process 'syz.4.143' launched './file1' with NULL argv: empty string added [ 72.745860][ T4100] loop3: detected capacity change from 0 to 512 [ 72.746540][ T4100] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 72.763761][ T28] audit: type=1400 audit(1774673808.826:1232): avc: denied { watch } for pid=4087 comm="syz.4.143" path="/24" dev="tmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 72.976662][ T4100] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.146: Invalid inode bitmap blk 4 in block_group 0 [ 72.989591][ T4100] loop3: lost filesystem error report for type 5 error -117 [ 72.995076][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 73.008891][ C1] EXT4-fs (loop3): initial error at time 1774673809: ext4_read_inode_bitmap:139 [ 73.017968][ C1] EXT4-fs (loop3): last error at time 1774673809: ext4_read_inode_bitmap:139 [ 73.061087][ T4100] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.288964][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.392709][ T4116] tipc: Failed to obtain node identity [ 73.440795][ T4116] tipc: Enabling of bearer rejected, failed to enable media [ 73.705400][ T4122] loop2: detected capacity change from 0 to 512 [ 73.748219][ T4122] EXT4-fs error (device loop2): ext4_iget_extra_inode:5025: inode #15: comm syz.2.153: corrupted in-inode xattr: invalid size in ea xattr [ 73.825610][ T4122] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 73.825813][ T4122] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.153: couldn't read orphan inode 15 (err -117) [ 73.835316][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 73.835345][ C0] EXT4-fs (loop2): initial error at time 1774673810: ext4_iget_extra_inode:5025: inode 15 [ 73.835376][ C0] EXT4-fs (loop2): last error at time 1774673810: ext4_iget_extra_inode:5025: inode 15 [ 73.893802][ T4125] loop3: detected capacity change from 0 to 4096 [ 73.972320][ T4125] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.009313][ T4125] netlink: 'syz.3.154': attribute type 21 has an invalid length. [ 74.035135][ T4125] netlink: 120 bytes leftover after parsing attributes in process `syz.3.154'. [ 74.044304][ T4122] loop2: lost filesystem error report for type 5 error -117 [ 74.044937][ T4122] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.255756][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.704790][ T4132] EXT4-fs error (device loop2): ext4_find_dest_de:2050: inode #2: block 13: comm syz.2.153: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 74.929640][ T4135] loop1: detected capacity change from 0 to 4096 [ 75.056524][ T4135] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.532170][ T4135] netlink: 'syz.1.157': attribute type 21 has an invalid length. [ 75.592570][ T4135] netlink: 120 bytes leftover after parsing attributes in process `syz.1.157'. [ 75.625974][ T4149] loop4: detected capacity change from 0 to 512 [ 75.658105][ T4149] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 75.806476][ T4146] siw: device registration error -23 [ 75.875916][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.939791][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.950022][ T4156] loop1: detected capacity change from 0 to 1024 [ 75.976910][ T4156] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.097992][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 76.098010][ T28] audit: type=1400 audit(1774673812.476:1245): avc: denied { remove_name } for pid=3317 comm="syz-executor" name="lost+found" dev="loop1" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 76.128279][ T28] audit: type=1400 audit(1774673812.506:1246): avc: denied { rmdir } for pid=3317 comm="syz-executor" name="lost+found" dev="loop1" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 76.129312][ T3317] EXT4-fs error (device loop1): ext4_lookup:1785: inode #16: comm syz-executor: iget: bad extended attribute block 8 [ 76.151681][ T28] audit: type=1400 audit(1774673812.506:1247): avc: denied { unlink } for pid=3317 comm="syz-executor" name="file0" dev="loop1" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 76.203006][ T3317] EXT4-fs error (device loop1): ext4_lookup:1785: inode #16: comm syz-executor: iget: bad extended attribute block 8 [ 76.238585][ T4166] lo speed is unknown, defaulting to 1000 [ 76.244694][ T4166] lo speed is unknown, defaulting to 1000 [ 76.250711][ T4166] lo speed is unknown, defaulting to 1000 [ 76.257987][ T4166] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 76.271898][ T4166] lo speed is unknown, defaulting to 1000 [ 76.278390][ T4166] lo speed is unknown, defaulting to 1000 [ 76.284806][ T4166] lo speed is unknown, defaulting to 1000 [ 76.291491][ T4166] lo speed is unknown, defaulting to 1000 [ 76.297954][ T4166] lo speed is unknown, defaulting to 1000 [ 76.383986][ T4166] lo speed is unknown, defaulting to 1000 [ 76.442975][ T28] audit: type=1400 audit(1774673812.506:1248): avc: denied { unlink } for pid=3317 comm="syz-executor" name="file1" dev="loop1" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 76.977228][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.084906][ T4178] loop0: detected capacity change from 0 to 4096 [ 77.125446][ T4178] EXT4-fs: Ignoring removed bh option [ 77.176298][ T4178] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.244448][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.293959][ T12] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.347578][ T4189] loop0: detected capacity change from 0 to 1024 [ 77.383807][ T4189] EXT4-fs: Ignoring removed bh option [ 77.391171][ T12] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.427825][ T4189] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.516103][ T12] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.557350][ T4182] lo speed is unknown, defaulting to 1000 [ 77.578128][ T28] audit: type=1326 audit(1774674069.928:1249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4188 comm="syz.0.172" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd5b7bfc799 code=0x0 [ 77.648538][ T4189] netlink: 112 bytes leftover after parsing attributes in process `syz.0.172'. [ 77.659345][ T4189] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2858: Unable to expand inode 2. Delete some EAs or run e2fsck. [ 77.673518][ T12] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.695107][ T28] audit: type=1400 audit(1774674069.988:1250): avc: denied { setattr } for pid=4188 comm="syz.0.172" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 77.729527][ T28] audit: type=1400 audit(1774674070.018:1251): avc: denied { create } for pid=4188 comm="syz.0.172" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 77.788939][ T28] audit: type=1400 audit(1774674070.048:1252): avc: denied { write open } for pid=4188 comm="syz.0.172" path="/35/file1/.pending_reads" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 77.816846][ T4182] chnl_net:caif_netlink_parms(): no params data found [ 78.017318][ T12] bond0 (unregistering): Released all slaves [ 78.151659][ T12] hsr_slave_0: left promiscuous mode [ 78.174285][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.183815][ T12] hsr_slave_1: left promiscuous mode [ 78.235175][ T12] veth1_macvtap: left promiscuous mode [ 78.258967][ T12] veth0_macvtap: left promiscuous mode [ 78.264588][ T12] veth1_vlan: left allmulticast mode [ 78.285132][ T12] veth1_vlan: left promiscuous mode [ 78.290406][ T12] veth0_vlan: left promiscuous mode [ 78.344618][ T28] audit: type=1400 audit(1774674070.708:1253): avc: denied { create } for pid=4226 comm="syz.0.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 78.392231][ T28] audit: type=1400 audit(1774674070.708:1254): avc: denied { ioctl } for pid=4226 comm="syz.0.177" path="socket:[6832]" dev="sockfs" ino=6832 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 78.393107][ T4171] syz.3.166 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 78.446989][ T4171] CPU: 1 UID: 0 PID: 4171 Comm: syz.3.166 Not tainted syzkaller #0 PREEMPT(full) [ 78.447018][ T4171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 78.447031][ T4171] Call Trace: [ 78.447039][ T4171] [ 78.447048][ T4171] __dump_stack+0x1d/0x30 [ 78.447077][ T4171] dump_stack_lvl+0x95/0xd0 [ 78.447154][ T4171] dump_stack+0x15/0x1b [ 78.447176][ T4171] dump_header+0x80/0x240 [ 78.447275][ T4171] oom_kill_process+0x295/0x350 [ 78.447301][ T4171] out_of_memory+0x97d/0xb80 [ 78.447323][ T4171] try_charge_memcg+0x62e/0xa10 [ 78.447367][ T4171] obj_cgroup_charge_pages+0x23/0xc0 [ 78.447482][ T4171] __memcg_kmem_charge_page+0x9e/0x170 [ 78.447517][ T4171] __alloc_frozen_pages_noprof+0x18a/0x360 [ 78.447571][ T4171] alloc_pages_mpol+0xb3/0x260 [ 78.447603][ T4171] alloc_pages_noprof+0x8f/0x130 [ 78.447635][ T4171] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 78.447754][ T4171] __kvmalloc_node_noprof+0x3d4/0x650 [ 78.447781][ T4171] ? futex_hash_allocate+0x190/0x9d0 [ 78.447838][ T4171] ? futex_hash_allocate+0x190/0x9d0 [ 78.447875][ T4171] futex_hash_allocate+0x190/0x9d0 [ 78.447912][ T4171] ? __se_sys_prctl+0x92/0x13f0 [ 78.447977][ T4171] futex_hash_prctl+0xd8/0xf0 [ 78.448009][ T4171] __se_sys_prctl+0xa3d/0x13f0 [ 78.448038][ T4171] __x64_sys_prctl+0x67/0x80 [ 78.448068][ T4171] x64_sys_call+0x2533/0x3020 [ 78.448154][ T4171] do_syscall_64+0x12c/0x370 [ 78.448183][ T4171] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.448231][ T4171] RIP: 0033:0x7f8d06e2c799 [ 78.448248][ T4171] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 78.448271][ T4171] RSP: 002b:00007f8d0587f028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 78.448375][ T4171] RAX: ffffffffffffffda RBX: 00007f8d070a5fa0 RCX: 00007f8d06e2c799 [ 78.448391][ T4171] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 78.448407][ T4171] RBP: 00007f8d06ec2c99 R08: 0000000000000000 R09: 0000000000000000 [ 78.448424][ T4171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 78.448439][ T4171] R13: 00007f8d070a6038 R14: 00007f8d070a5fa0 R15: 00007ffc10ff09e8 [ 78.448463][ T4171] [ 78.450417][ T4171] memory: usage 307200kB, limit 307200kB, failcnt 2713 [ 78.681797][ T4171] memory+swap: usage 309404kB, limit 9007199254740988kB, failcnt 0 [ 78.689849][ T4171] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 78.697382][ T4171] Memory cgroup stats for /syz3: [ 78.697771][ T4171] cache 0 [ 78.708799][ T4171] rss 0 [ 78.711759][ T4171] shmem 0 [ 78.714737][ T4171] mapped_file 0 [ 78.719426][ T4235] loop0: detected capacity change from 0 to 128 [ 78.725898][ T4171] dirty 0 [ 78.728901][ T4171] writeback 0 [ 78.732231][ T4171] workingset_refault_anon 87 [ 78.737557][ T4171] workingset_refault_file 714 [ 78.742558][ T12] team0 (unregistering): Port device macvlan1 removed [ 78.743788][ T4171] swap 2256896 [ 78.753345][ T4171] swapcached 4349952 [ 78.757849][ T4171] pgpgin 80793 [ 78.762993][ T4171] pgpgout 80793 [ 78.792571][ T4171] pgfault 59027 [ 78.796533][ T4171] pgmajfault 79 [ 78.800051][ T4171] inactive_anon 0 [ 78.803731][ T4171] active_anon 0 [ 78.807552][ T4171] inactive_file 0 [ 78.811645][ T4171] active_file 0 [ 78.842210][ T4171] unevictable 0 [ 78.846243][ T4238] loop0: detected capacity change from 0 to 4096 [ 78.852787][ T4171] hierarchical_memory_limit 314572800 [ 78.864015][ T4238] EXT4-fs: Ignoring removed bh option [ 78.870208][ T4171] hierarchical_memsw_limit 9223372036854771712 [ 78.876660][ T4171] total_cache 0 [ 78.880446][ T4171] total_rss 0 [ 78.885112][ T4182] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.894837][ T4182] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.896045][ T4171] total_shmem 0 [ 78.912612][ T4182] bridge_slave_0: entered allmulticast mode [ 78.921276][ T4238] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.925756][ T4182] bridge_slave_0: entered promiscuous mode [ 78.935346][ T4171] total_mapped_file 0 [ 78.947137][ T4171] total_dirty 0 [ 78.951345][ T4171] total_writeback 0 [ 78.955527][ T4171] total_workingset_refault_anon 87 [ 78.960857][ T4171] total_workingset_refault_file 714 [ 78.962030][ T4182] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.966254][ T4171] total_swap 2256896 [ 78.977426][ T4171] total_swapcached 4349952 [ 78.982026][ T4171] total_pgpgin 80793 [ 78.986006][ T4171] total_pgpgout 80793 [ 78.990120][ T4171] total_pgfault 59027 [ 78.994160][ T4171] total_pgmajfault 79 [ 78.998234][ T4171] total_inactive_anon 0 [ 78.998824][ T4182] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.002871][ T4171] total_active_anon 0 [ 79.013756][ T4171] total_inactive_file 0 [ 79.017993][ T4171] total_active_file 0 [ 79.020105][ T4182] bridge_slave_1: entered allmulticast mode [ 79.022015][ T4171] total_unevictable 0 [ 79.022027][ T4171] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.166,pid=4170,uid=0 [ 79.040682][ T4182] bridge_slave_1: entered promiscuous mode [ 79.046863][ T4171] Memory cgroup out of memory: Killed process 4170 (syz.3.166) total-vm:100580kB, anon-rss:1228kB, file-rss:26600kB, shmem-rss:0kB, UID:0 pgtables:152kB oom_score_adj:1000 [ 79.075868][ T4191] syz.3.166 (4191) used greatest stack depth: 8760 bytes left [ 79.084874][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.156499][ T4182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.186428][ T4182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.239760][ T4182] team0: Port device team_slave_0 added [ 79.254907][ T4245] loop0: detected capacity change from 0 to 512 [ 79.270674][ T4182] team0: Port device team_slave_1 added [ 79.335132][ T4245] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 79.365565][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.372740][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.399163][ T4182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.410893][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.418000][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.444327][ T4182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.483721][ T4182] hsr_slave_0: entered promiscuous mode [ 79.491758][ T4182] hsr_slave_1: entered promiscuous mode [ 79.587477][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.632022][ T4264] loop0: detected capacity change from 0 to 128 [ 79.705243][ T4264] syz.0.184: attempt to access beyond end of device [ 79.705243][ T4264] loop0: rw=2049, sector=138, nr_sectors = 16 limit=128 [ 79.726445][ T4182] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 79.738214][ T4264] syz.0.184: attempt to access beyond end of device [ 79.738214][ T4264] loop0: rw=2049, sector=170, nr_sectors = 16 limit=128 [ 79.757270][ T4182] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 79.767965][ T4264] syz.0.184: attempt to access beyond end of device [ 79.767965][ T4264] loop0: rw=2049, sector=202, nr_sectors = 16 limit=128 [ 79.769761][ T4182] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 79.788784][ T4264] syz.0.184: attempt to access beyond end of device [ 79.788784][ T4264] loop0: rw=2049, sector=234, nr_sectors = 16 limit=128 [ 79.804738][ T4264] syz.0.184: attempt to access beyond end of device [ 79.804738][ T4264] loop0: rw=2049, sector=154, nr_sectors = 8 limit=128 [ 79.827874][ T4182] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 79.844341][ T12] kworker/u8:0: attempt to access beyond end of device [ 79.844341][ T12] loop0: rw=1, sector=138, nr_sectors = 2 limit=128 [ 79.946421][ T4182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.994397][ T4282] netlink: 1004 bytes leftover after parsing attributes in process `syz.3.187'. [ 80.007086][ T4182] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.039407][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.046516][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.087225][ T4289] loop3: detected capacity change from 0 to 1024 [ 80.116599][ T4289] EXT4-fs: Ignoring removed bh option [ 80.123939][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.131242][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.171465][ T4289] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.248813][ T4285] loop0: detected capacity change from 0 to 512 [ 80.284880][ T4285] EXT4-fs: Ignoring removed oldalloc option [ 80.355536][ T4285] EXT4-fs error (device loop0): ext4_get_branch:178: inode #11: block 4294967295: comm syz.0.188: invalid block [ 80.382307][ T4285] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 80.385070][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 80.400834][ C1] EXT4-fs (loop0): initial error at time 1774674072: ext4_get_branch:178: inode 11: block 4294967295 [ 80.412831][ C1] EXT4-fs (loop0): last error at time 1774674072: ext4_get_branch:178: inode 11: block 4294967295 [ 80.455416][ T4298] loop4: detected capacity change from 0 to 8192 [ 80.463906][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.481688][ T4285] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.188: invalid indirect mapped block 4294967295 (level 1) [ 80.503209][ T4182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.512977][ T4285] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 80.517079][ T4285] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.188: invalid indirect mapped block 4294967295 (level 1) [ 80.548102][ T4285] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 80.598209][ T4308] EXT4-fs error (device loop3): ext4_lookup:1777: inode #2: comm syz.3.189: bad inode number: 12 [ 80.650679][ T4308] EXT4-fs (loop3): Remounting filesystem read-only [ 80.811568][ T4285] EXT4-fs (loop0): 2 truncates cleaned up [ 80.871821][ T4285] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.421091][ T4315] 9p: Bad value for 'rfdno' [ 81.437588][ T4315] tmpfs: Bad value for 'mpol' [ 81.643710][ T4319] loop2: detected capacity change from 0 to 4096 [ 81.691329][ T4319] EXT4-fs: Ignoring removed bh option [ 81.728232][ T4319] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.226739][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.295082][ T4196] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 82.300705][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.345546][ T4182] veth0_vlan: entered promiscuous mode [ 82.351977][ T4337] loop3: detected capacity change from 0 to 512 [ 82.360857][ T4182] veth1_vlan: entered promiscuous mode [ 82.382425][ T4182] veth0_macvtap: entered promiscuous mode [ 82.392068][ T4182] veth1_macvtap: entered promiscuous mode [ 82.421287][ T4337] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 82.429175][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.459360][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.478438][ T4337] siw: device registration error -23 [ 82.486330][ T311] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.517092][ T311] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.058842][ T28] audit: type=1400 audit(1774674075.428:1255): avc: denied { mounton } for pid=4182 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=538 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 83.072415][ T311] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.091876][ T311] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.194626][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.770296][ T4369] netlink: 1004 bytes leftover after parsing attributes in process `syz.2.198'. [ 83.840025][ T4371] loop3: detected capacity change from 0 to 128 [ 83.954242][ T4371] tmpfs: Bad value for 'mpol' [ 83.959068][ T28] audit: type=1400 audit(1774674076.318:1256): avc: denied { mounton } for pid=4370 comm="syz.3.197" path="/42/file0/file0" dev="loop3" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 83.975851][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.137114][ T4381] tipc: Started in network mode [ 84.142167][ T4381] tipc: Node identity , cluster identity 4711 [ 84.148866][ T4381] tipc: Failed to set node id, please configure manually [ 84.749534][ T4381] tipc: Enabling of bearer rejected, failed to enable media [ 85.153851][ T4389] loop3: detected capacity change from 0 to 4096 [ 85.161764][ T4389] EXT4-fs: Ignoring removed bh option [ 85.212966][ T4395] netlink: 16 bytes leftover after parsing attributes in process `syz.4.205'. [ 85.233764][ T4389] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.255999][ T4395] netlink: 16 bytes leftover after parsing attributes in process `syz.4.205'. [ 85.303392][ T4395] FAULT_INJECTION: forcing a failure. [ 85.303392][ T4395] name failslab, interval 1, probability 0, space 0, times 0 [ 85.355353][ T4395] CPU: 0 UID: 0 PID: 4395 Comm: syz.4.205 Not tainted syzkaller #0 PREEMPT(full) [ 85.355388][ T4395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 85.355402][ T4395] Call Trace: [ 85.355416][ T4395] [ 85.355427][ T4395] __dump_stack+0x1d/0x30 [ 85.355463][ T4395] dump_stack_lvl+0x95/0xd0 [ 85.355487][ T4395] dump_stack+0x15/0x1b [ 85.355509][ T4395] should_fail_ex+0x263/0x280 [ 85.355552][ T4395] ? __hw_addr_add_ex+0x15b/0x3b0 [ 85.355585][ T4395] should_failslab+0x8c/0xb0 [ 85.355623][ T4395] __kmalloc_cache_noprof+0x5f/0x410 [ 85.355656][ T4395] __hw_addr_add_ex+0x15b/0x3b0 [ 85.355690][ T4395] ? __pfx_hsr_dev_setup+0x10/0x10 [ 85.355716][ T4395] dev_addr_init+0xb1/0x120 [ 85.355776][ T4395] alloc_netdev_mqs+0x1ca/0xa40 [ 85.355816][ T4395] rtnl_create_link+0x239/0x720 [ 85.355850][ T4395] rtnl_newlink_create+0x174/0x650 [ 85.355934][ T4395] ? security_capable+0x7b/0x90 [ 85.355969][ T4395] ? netlink_ns_capable+0x86/0xa0 [ 85.356077][ T4395] rtnl_newlink+0x10a0/0x1330 [ 85.356132][ T4395] ? __memcg_slab_free_hook+0x14b/0x240 [ 85.356162][ T4395] ? __rcu_read_unlock+0x4e/0x70 [ 85.356182][ T4395] ? avc_has_perm_noaudit+0xab/0x130 [ 85.356269][ T4395] ? cred_has_capability+0x224/0x2a0 [ 85.356302][ T4395] ? selinux_capable+0x31/0x40 [ 85.356400][ T4395] ? security_capable+0x7b/0x90 [ 85.356428][ T4395] ? ns_capable+0x7c/0xb0 [ 85.356500][ T4395] ? __pfx_rtnl_newlink+0x10/0x10 [ 85.356526][ T4395] rtnetlink_rcv_msg+0x64b/0x720 [ 85.356554][ T4395] netlink_rcv_skb+0x123/0x220 [ 85.356591][ T4395] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 85.356622][ T4395] rtnetlink_rcv+0x1c/0x30 [ 85.356725][ T4395] netlink_unicast+0x5c0/0x690 [ 85.356756][ T4395] netlink_sendmsg+0x5c8/0x6f0 [ 85.356931][ T4395] ? __pfx_netlink_sendmsg+0x10/0x10 [ 85.356969][ T4395] ____sys_sendmsg+0x563/0x5b0 [ 85.357002][ T4395] ___sys_sendmsg+0x195/0x1e0 [ 85.357110][ T4395] ? path_openat+0x1b01/0x2050 [ 85.357159][ T4395] __sys_sendmmsg+0x185/0x320 [ 85.357197][ T4395] __x64_sys_sendmmsg+0x57/0x70 [ 85.357252][ T4395] x64_sys_call+0x27aa/0x3020 [ 85.357283][ T4395] do_syscall_64+0x12c/0x370 [ 85.357315][ T4395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.357429][ T4395] RIP: 0033:0x7fb264a9c799 [ 85.357448][ T4395] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 85.357469][ T4395] RSP: 002b:00007fb2634ef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 85.357494][ T4395] RAX: ffffffffffffffda RBX: 00007fb264d15fa0 RCX: 00007fb264a9c799 [ 85.357512][ T4395] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 85.357529][ T4395] RBP: 00007fb2634ef090 R08: 0000000000000000 R09: 0000000000000000 [ 85.357578][ T4395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 85.357591][ T4395] R13: 00007fb264d16038 R14: 00007fb264d15fa0 R15: 00007fff8009c598 [ 85.357609][ T4395] [ 85.895981][ T4399] hub 9-0:1.0: USB hub found [ 85.905207][ T4399] hub 9-0:1.0: 8 ports detected [ 85.915996][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.998160][ T28] audit: type=1400 audit(1774674334.368:1257): avc: denied { append } for pid=4403 comm="syz.4.208" name="001" dev="devtmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 86.097910][ T4404] netlink: 132 bytes leftover after parsing attributes in process `syz.4.208'. [ 86.123640][ T28] audit: type=1400 audit(1774674334.468:1258): avc: denied { bind } for pid=4403 comm="syz.4.208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 86.187239][ T28] audit: type=1400 audit(1774674334.468:1259): avc: denied { node_bind } for pid=4403 comm="syz.4.208" saddr=ff01::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 86.209298][ T4409] loop3: detected capacity change from 0 to 512 [ 86.222537][ T4412] netlink: 1004 bytes leftover after parsing attributes in process `syz.2.209'. [ 86.240089][ T4409] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 86.271691][ T4417] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.280273][ T4417] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.289956][ T3534] IPVS: starting estimator thread 0... [ 86.301994][ T4409] siw: device registration error -23 [ 86.436926][ T4418] IPVS: using max 2688 ests per chain, 134400 per kthread [ 86.485720][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.524094][ T28] audit: type=1400 audit(1774674334.888:1260): avc: denied { read } for pid=4425 comm="syz.3.214" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 86.546927][ T4424] netlink: 20 bytes leftover after parsing attributes in process `syz.2.213'. [ 86.547184][ T28] audit: type=1400 audit(1774674334.888:1261): avc: denied { open } for pid=4425 comm="syz.3.214" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 86.581973][ T4428] FAULT_INJECTION: forcing a failure. [ 86.581973][ T4428] name failslab, interval 1, probability 0, space 0, times 0 [ 86.595074][ T4428] CPU: 1 UID: 0 PID: 4428 Comm: syz.0.215 Not tainted syzkaller #0 PREEMPT(full) [ 86.595105][ T4428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 86.595119][ T4428] Call Trace: [ 86.595127][ T4428] [ 86.595135][ T4428] __dump_stack+0x1d/0x30 [ 86.595214][ T4428] dump_stack_lvl+0x95/0xd0 [ 86.595268][ T4428] dump_stack+0x15/0x1b [ 86.595298][ T4428] should_fail_ex+0x263/0x280 [ 86.595375][ T4428] ? alloc_pipe_info+0xad/0x340 [ 86.595399][ T4428] should_failslab+0x8c/0xb0 [ 86.595422][ T4428] __kmalloc_cache_noprof+0x5f/0x410 [ 86.595450][ T4428] alloc_pipe_info+0xad/0x340 [ 86.595472][ T4428] splice_direct_to_actor+0x591/0x670 [ 86.595500][ T4428] ? __pfx_direct_splice_actor+0x10/0x10 [ 86.595561][ T4428] ? selinux_file_permission+0x633/0x690 [ 86.595622][ T4428] do_splice_direct+0x119/0x1a0 [ 86.595647][ T4428] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 86.595707][ T4428] do_sendfile+0x382/0x650 [ 86.595739][ T4428] __x64_sys_sendfile64+0x105/0x150 [ 86.595763][ T4428] x64_sys_call+0x2dc4/0x3020 [ 86.595789][ T4428] do_syscall_64+0x12c/0x370 [ 86.595862][ T4428] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.595889][ T4428] RIP: 0033:0x7fd5b7bfc799 [ 86.595906][ T4428] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 86.595952][ T4428] RSP: 002b:00007fd5b664f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 86.595975][ T4428] RAX: ffffffffffffffda RBX: 00007fd5b7e75fa0 RCX: 00007fd5b7bfc799 [ 86.595992][ T4428] RDX: 0000000000000000 RSI: 000000000000000d RDI: 000000000000000f [ 86.596012][ T4428] RBP: 00007fd5b664f090 R08: 0000000000000000 R09: 0000000000000000 [ 86.596028][ T4428] R10: 0000000100000000 R11: 0000000000000246 R12: 0000000000000001 [ 86.596044][ T4428] R13: 00007fd5b7e76038 R14: 00007fd5b7e75fa0 R15: 00007ffd2cd22538 [ 86.596067][ T4428] [ 86.679634][ T4433] netlink: 8 bytes leftover after parsing attributes in process `syz.3.217'. [ 86.847412][ T4437] loop0: detected capacity change from 0 to 4096 [ 86.861271][ T4437] EXT4-fs: Ignoring removed bh option [ 86.869572][ T4434] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 86.890396][ T4437] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.976922][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.064399][ T4448] hub 8-0:1.0: USB hub found [ 87.069757][ T4448] hub 8-0:1.0: 8 ports detected [ 87.088843][ T4448] netlink: 'syz.4.220': attribute type 36 has an invalid length. [ 87.104015][ T4448] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 87.113914][ T4448] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 87.136886][ T4448] netlink: 'syz.4.220': attribute type 10 has an invalid length. [ 87.145265][ T4448] veth1_vlan: left allmulticast mode [ 87.260516][ T4450] netlink: 1004 bytes leftover after parsing attributes in process `syz.0.222'. [ 87.375548][ T4452] tmpfs: Unknown parameter 'm' [ 87.582781][ T4456] loop0: detected capacity change from 0 to 512 [ 87.619358][ T4459] netlink: 72 bytes leftover after parsing attributes in process `syz.3.226'. [ 87.629463][ T4456] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 87.642800][ T28] audit: type=1400 audit(1774674336.008:1262): avc: denied { append } for pid=4458 comm="syz.3.226" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 87.750799][ T28] audit: type=1400 audit(1774674336.108:1263): avc: denied { map } for pid=4464 comm="syz.5.228" path="socket:[8523]" dev="sockfs" ino=8523 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 87.811387][ T28] audit: type=1400 audit(1774674336.118:1264): avc: denied { create } for pid=4462 comm="syz.3.227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 87.868464][ T4469] lo speed is unknown, defaulting to 1000 [ 87.896210][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.958398][ T4475] loop5: detected capacity change from 0 to 128 [ 88.010876][ T4475] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 88.029807][ T4475] ext4 filesystem being mounted at /4/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 88.053618][ T4475] netlink: 8 bytes leftover after parsing attributes in process `syz.5.232'. [ 88.130669][ T4482] loop0: detected capacity change from 0 to 164 [ 88.415598][ T4484] lo speed is unknown, defaulting to 1000 [ 88.582942][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 88.582960][ T28] audit: type=1400 audit(1774674336.948:1267): avc: denied { create } for pid=4478 comm="syz.0.233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 88.651394][ T28] audit: type=1400 audit(1774674336.978:1268): avc: denied { ioctl } for pid=4478 comm="syz.0.233" path="socket:[9459]" dev="sockfs" ino=9459 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 88.776978][ T4489] tmpfs: Bad value for 'mpol' [ 88.871115][ T4491] netlink: 1004 bytes leftover after parsing attributes in process `syz.4.235'. [ 88.970792][ T4182] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 89.033233][ T4502] loop5: detected capacity change from 0 to 512 [ 89.074925][ T4502] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 89.076208][ T4500] loop4: detected capacity change from 0 to 8192 [ 89.113964][ T4502] siw: device registration error -23 [ 89.156883][ T4469] loop3: detected capacity change from 0 to 2048 [ 89.167934][ T3303] loop4: p1 < > p2 p4 < p5 > [ 89.173012][ T3303] loop4: partition table partially beyond EOD, truncated [ 89.185491][ T3303] loop4: p1 start 134217728 is beyond EOD, truncated [ 89.192387][ T3303] loop4: p2 size 591360 extends beyond EOD, truncated [ 89.219581][ T3303] loop4: p5 size 591360 extends beyond EOD, truncated [ 89.245498][ T28] audit: type=1400 audit(1774674337.618:1269): avc: denied { read write } for pid=4499 comm="syz.4.239" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 89.249779][ T4500] loop4: p1 < > p2 p4 < p5 > [ 89.270242][ T28] audit: type=1400 audit(1774674337.618:1270): avc: denied { open } for pid=4499 comm="syz.4.239" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 89.295304][ T4500] loop4: partition table partially beyond EOD, truncated [ 89.308395][ T4500] loop4: p1 start 134217728 is beyond EOD, truncated [ 89.317897][ T4500] loop4: p2 size 591360 extends beyond EOD, truncated [ 89.342524][ T4500] loop4: p5 size 591360 extends beyond EOD, truncated [ 89.490422][ T4469] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.606530][ T4469] ext4 filesystem being mounted at /51/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.627854][ T4496] bridge_slave_0: left allmulticast mode [ 89.635388][ T4496] bridge_slave_0: left promiscuous mode [ 89.644927][ T4496] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.667174][ T28] audit: type=1400 audit(1774674338.028:1271): avc: denied { add_name } for pid=4468 comm="syz.3.229" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 89.758545][ T28] audit: type=1400 audit(1774674338.128:1272): avc: denied { ioctl } for pid=4468 comm="syz.3.229" path="/51/file0/file1" dev="loop3" ino=15 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 89.825189][ T4522] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.229: bg 0: block 345: padding at end of block bitmap is not set [ 89.866195][ T4522] EXT4-fs (loop3): Remounting filesystem read-only [ 89.899229][ T4496] bridge_slave_1: left allmulticast mode [ 89.907659][ T4496] bridge_slave_1: left promiscuous mode [ 89.920769][ T4496] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.988459][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.087630][ T4496] bond0: (slave bond_slave_0): Releasing backup interface [ 90.108646][ T4496] bond0: (slave bond_slave_1): Releasing backup interface [ 90.139611][ T4524] loop3: detected capacity change from 0 to 2048 [ 90.172037][ T4524] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.222267][ T4496] team0: Port device team_slave_0 removed [ 90.304407][ T4496] team0: Port device team_slave_1 removed [ 90.332793][ T4496] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 90.340908][ T4496] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 90.359188][ T4496] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 90.367494][ T4496] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 90.398063][ T4496] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 90.419035][ T4503] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.454334][ T4182] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.483353][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.510629][ T28] audit: type=1400 audit(1774674338.878:1273): avc: denied { setopt } for pid=4531 comm="syz.0.245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 90.544932][ T4503] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.738008][ T4503] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.760165][ T4541] hub 8-0:1.0: USB hub found [ 91.094176][ T4547] lo speed is unknown, defaulting to 1000 [ 91.189664][ T4549] netlink: 'syz.5.243': attribute type 36 has an invalid length. [ 91.209212][ T4541] hub 8-0:1.0: 8 ports detected [ 91.238684][ T4541] netlink: 'syz.5.243': attribute type 10 has an invalid length. [ 91.476924][ T4538] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.517707][ T4549] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 91.529795][ T4549] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 91.541966][ T4541] macvlan1: entered allmulticast mode [ 91.549614][ T4541] veth1_vlan: entered allmulticast mode [ 91.568097][ T4541] team0: Port device macvlan1 added [ 91.587896][ T4503] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.679932][ T4538] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.739892][ T4556] tap0: tun_chr_ioctl cmd 1074025677 [ 91.745450][ T4556] tap0: linktype set to 778 [ 91.775589][ T3490] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.787891][ T3490] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.908932][ T4538] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.095954][ T3490] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.116008][ T3490] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.134020][ T4561] netlink: 1004 bytes leftover after parsing attributes in process `syz.2.249'. [ 92.465695][ T4538] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.704493][ T4568] loop2: detected capacity change from 0 to 128 [ 92.773440][ T4563] lo speed is unknown, defaulting to 1000 [ 92.840193][ T4568] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 92.853652][ T4568] ext4 filesystem being mounted at /46/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 93.089567][ T4568] netlink: 8 bytes leftover after parsing attributes in process `syz.2.250'. [ 93.849911][ T4580] lo speed is unknown, defaulting to 1000 [ 93.993150][ T4587] loop4: detected capacity change from 0 to 4096 [ 94.018186][ T4587] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.091836][ T28] audit: type=1400 audit(1774674342.458:1274): avc: denied { read append } for pid=4586 comm="syz.4.255" path="/51/file0/cpuacct.usage_sys" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 94.118707][ T4589] loop0: detected capacity change from 0 to 512 [ 94.177484][ T28] audit: type=1400 audit(1774674342.458:1275): avc: denied { ioctl } for pid=4586 comm="syz.4.255" path="/51/file0/cpuacct.usage_sys" dev="loop4" ino=18 ioctlcmd=0x6628 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 94.193872][ T4589] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 94.216313][ T28] audit: type=1400 audit(1774674342.458:1276): avc: denied { watch watch_reads } for pid=4586 comm="syz.4.255" path="/51/file0" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 94.258264][ T28] audit: type=1400 audit(1774674342.618:1277): avc: denied { getattr } for pid=4593 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=514 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 94.298493][ T28] audit: type=1400 audit(1774674342.668:1278): avc: denied { read } for pid=4596 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=514 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 94.320963][ T28] audit: type=1400 audit(1774674342.688:1279): avc: denied { open } for pid=4596 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=514 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 94.356069][ T4597] loop5: detected capacity change from 0 to 128 [ 94.367352][ T4597] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 94.395283][ T28] audit: type=1400 audit(1774674342.758:1280): avc: denied { setopt } for pid=4595 comm="syz.5.256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 94.423766][ T28] audit: type=1400 audit(1774674342.788:1281): avc: denied { bind } for pid=4595 comm="syz.5.256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 94.444014][ T3314] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 94.456007][ T28] audit: type=1400 audit(1774674342.788:1282): avc: denied { name_bind } for pid=4595 comm="syz.5.256" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 94.479995][ T28] audit: type=1400 audit(1774674342.788:1283): avc: denied { node_bind } for pid=4595 comm="syz.5.256" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 94.502057][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.599803][ T4613] netlink: 1004 bytes leftover after parsing attributes in process `syz.2.260'. [ 94.641751][ T117] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.878476][ T4628] netlink: 'syz.4.258': attribute type 36 has an invalid length. [ 94.929121][ T4630] netlink: 'syz.4.258': attribute type 10 has an invalid length. [ 95.294365][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.544422][ T4634] loop5: detected capacity change from 0 to 8192 [ 95.578018][ T4628] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 95.588177][ T4628] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 95.608502][ T4633] lo speed is unknown, defaulting to 1000 [ 95.635363][ T3302] loop5: p1 < > p2 p4 < p5 > [ 95.640242][ T3302] loop5: partition table partially beyond EOD, truncated [ 95.647599][ T3302] loop5: p1 start 134217728 is beyond EOD, truncated [ 95.654636][ T3302] loop5: p2 size 591360 extends beyond EOD, truncated [ 95.666327][ T3302] loop5: p5 size 591360 extends beyond EOD, truncated [ 95.681583][ T4634] loop5: p1 < > p2 p4 < p5 > [ 95.708792][ T4634] loop5: partition table partially beyond EOD, truncated [ 95.720953][ T4634] loop5: p1 start 134217728 is beyond EOD, truncated [ 95.728788][ T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.731087][ T4634] loop5: p2 size 591360 extends beyond EOD, truncated [ 95.755832][ T4634] loop5: p4 could not be added: -ENOMEM [ 95.761782][ T4634] loop5: p5 size 591360 extends beyond EOD, truncated [ 95.846722][ T4658] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 95.886685][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 95.886724][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop5p5, 10) failed: No such file or directory [ 95.908197][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 95.931523][ T3399] lo speed is unknown, defaulting to 1000 [ 95.974028][ T4676] loop5: detected capacity change from 0 to 128 [ 95.974660][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop5p5, 10) failed: No such file or directory [ 96.011647][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 96.026126][ T4676] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 96.042452][ T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.075921][ T4676] ext4 filesystem being mounted at /14/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 96.145926][ T4676] netlink: 8 bytes leftover after parsing attributes in process `syz.5.268'. [ 96.206479][ T4679] loop4: detected capacity change from 0 to 8192 [ 96.306632][ T117] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.387118][ T4686] loop0: detected capacity change from 0 to 4096 [ 96.407841][ T4686] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.446559][ T4694] loop3: detected capacity change from 0 to 4096 [ 96.470986][ T4694] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.495976][ T4694] netlink: 'syz.3.272': attribute type 21 has an invalid length. [ 96.503977][ T4694] netlink: 120 bytes leftover after parsing attributes in process `syz.3.272'. [ 96.642755][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.654386][ T4709] capability: warning: `syz.2.273' uses deprecated v2 capabilities in a way that may be insecure [ 96.706974][ T4709] netlink: 68 bytes leftover after parsing attributes in process `syz.2.273'. [ 96.734482][ T4712] blktrace: Concurrent blktraces are not allowed on sg0 [ 96.772154][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.859480][ T4717] netlink: 4 bytes leftover after parsing attributes in process `syz.0.277'. [ 97.024740][ T4730] random: crng reseeded on system resumption [ 97.267937][ T4733] lo speed is unknown, defaulting to 1000 [ 97.524813][ T4182] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 97.594247][ T4738] loop4: detected capacity change from 0 to 4096 [ 97.653754][ T4740] netlink: 8 bytes leftover after parsing attributes in process `syz.5.281'. [ 97.676951][ T4738] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.715350][ T4740] ip6erspan0: entered allmulticast mode [ 97.751423][ T4741] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 97.831410][ T4754] loop3: detected capacity change from 0 to 1024 [ 97.838309][ T4754] EXT4-fs: Ignoring removed bh option [ 97.865253][ T4754] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.890961][ T4758] loop0: detected capacity change from 0 to 1024 [ 97.926187][ T4758] EXT4-fs: Ignoring removed mblk_io_submit option [ 98.078341][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.093138][ T4758] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.180477][ T4762] EXT4-fs error (device loop3): ext4_lookup:1777: inode #2: comm syz.3.284: bad inode number: 12 [ 98.193315][ T4762] EXT4-fs (loop3): Remounting filesystem read-only [ 98.209819][ T4773] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: comm syz.0.285: inode #926365495: comm syz.0.285: iget: illegal inode # [ 98.237727][ T4773] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.285: error while reading EA inode 926365495 err=-117 [ 98.357093][ T4784] IPv6: Can't replace route, no match found [ 98.377502][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.728950][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.793477][ T4794] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 98.793739][ T4794] ext4 filesystem being mounted at /59/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 98.943744][ T4794] netlink: 8 bytes leftover after parsing attributes in process `syz.3.291'. [ 98.961836][ T4798] bridge_slave_0: left allmulticast mode [ 98.961872][ T4798] bridge_slave_0: left promiscuous mode [ 98.962001][ T4798] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.001145][ T4798] bridge_slave_1: left allmulticast mode [ 99.001171][ T4798] bridge_slave_1: left promiscuous mode [ 99.001280][ T4798] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.010257][ T4798] bond0: (slave bond_slave_0): Releasing backup interface [ 99.020532][ T4798] bond0: (slave bond_slave_1): Releasing backup interface [ 99.026006][ T4798] team0: Port device team_slave_0 removed [ 99.028999][ T4798] team0: Port device team_slave_1 removed [ 99.030473][ T4798] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.030548][ T4798] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 99.038965][ T4798] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.038984][ T4798] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 99.041936][ T4798] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 99.052158][ T4803] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.140642][ T4803] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.370611][ T4812] lo speed is unknown, defaulting to 1000 [ 99.513999][ T3399] syz!: Port: 1 Link DOWN [ 99.628823][ T4803] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.691916][ T4803] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.834183][ T3310] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 99.887369][ T50] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.898880][ T117] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.983151][ T50] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.031740][ T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.382786][ T4828] lo speed is unknown, defaulting to 1000 [ 101.275393][ T4844] set_capacity_and_notify: 1 callbacks suppressed [ 101.275414][ T4844] loop5: detected capacity change from 0 to 1024 [ 101.302284][ T4844] EXT4-fs: Ignoring removed bh option [ 101.558852][ T4855] EXT4-fs error (device loop5): ext4_lookup:1777: inode #2: comm syz.5.301: bad inode number: 12 [ 101.576576][ T4855] EXT4-fs (loop5): Remounting filesystem read-only [ 101.598041][ T4866] netlink: 24 bytes leftover after parsing attributes in process `syz.4.310'. [ 101.612033][ T4866] netlink: 32 bytes leftover after parsing attributes in process `syz.4.310'. [ 101.642315][ T28] kauditd_printk_skb: 261 callbacks suppressed [ 101.642334][ T28] audit: type=1400 audit(1774674350.008:1545): avc: denied { block_suspend } for pid=4862 comm="syz.0.309" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 101.737672][ T28] audit: type=1400 audit(1774674350.108:1546): avc: denied { create } for pid=4865 comm="syz.4.310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 102.176048][ T28] audit: type=1326 audit(1774674350.548:1547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4889 comm="syz.5.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b645bc799 code=0x7ffc0000 [ 102.199920][ T28] audit: type=1326 audit(1774674350.568:1548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4889 comm="syz.5.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b645bc799 code=0x7ffc0000 [ 102.225349][ T28] audit: type=1326 audit(1774674350.568:1549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4889 comm="syz.5.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b645bc799 code=0x7ffc0000 [ 102.249540][ T28] audit: type=1326 audit(1774674350.568:1550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4889 comm="syz.5.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f9b645bc799 code=0x7ffc0000 [ 102.338077][ T28] audit: type=1326 audit(1774674350.568:1551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4889 comm="syz.5.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b645bc799 code=0x7ffc0000 [ 102.384491][ T28] audit: type=1326 audit(1774674350.568:1552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4889 comm="syz.5.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f9b645bc502 code=0x7ffc0000 [ 102.435358][ T28] audit: type=1326 audit(1774674350.568:1553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4889 comm="syz.5.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f9b645bc597 code=0x7ffc0000 [ 102.486702][ T4895] bridge_slave_0: left allmulticast mode [ 102.506139][ T4895] bridge_slave_0: left promiscuous mode [ 102.528845][ T4895] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.535061][ T28] audit: type=1326 audit(1774674350.568:1554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4889 comm="syz.5.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f9b64579491 code=0x7ffc0000 [ 102.594135][ T4895] bridge_slave_1: left allmulticast mode [ 102.615210][ T4895] bridge_slave_1: left promiscuous mode [ 102.621635][ T4895] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.651076][ T4895] bond0: (slave bond_slave_0): Releasing backup interface [ 102.662688][ T4895] bond0: (slave bond_slave_1): Releasing backup interface [ 102.675740][ T4895] team0: Port device team_slave_0 removed [ 102.684781][ T4895] team0: Port device team_slave_1 removed [ 102.692184][ T4895] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.700089][ T4895] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 102.709703][ T4895] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.718775][ T4895] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 102.728615][ T4895] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 102.765746][ T4902] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.816074][ T4906] ªªªªªª: renamed from vlan0 (while UP) [ 102.887261][ T4902] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.938675][ T4918] loop5: detected capacity change from 0 to 128 [ 103.006920][ T4902] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.057434][ T4902] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.076698][ T50] kworker/u8:3: attempt to access beyond end of device [ 103.076698][ T50] loop5: rw=1, sector=833, nr_sectors = 208 limit=128 [ 103.096707][ T50] kworker/u8:3: attempt to access beyond end of device [ 103.096707][ T50] loop5: rw=1, sector=825, nr_sectors = 8 limit=128 [ 103.209233][ T50] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.251686][ T50] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.291573][ T50] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.330538][ T50] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.456675][ T4928] loop5: detected capacity change from 0 to 512 [ 103.493081][ T4930] loop4: detected capacity change from 0 to 512 [ 103.545588][ T4930] EXT4-fs mount: 2 callbacks suppressed [ 103.545608][ T4930] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.567443][ T4936] netlink: 'syz.2.330': attribute type 39 has an invalid length. [ 103.632439][ T4942] loop5: detected capacity change from 0 to 512 [ 103.660283][ T4940] loop0: detected capacity change from 0 to 512 [ 103.672760][ T4940] EXT4-fs: Ignoring removed mblk_io_submit option [ 103.684646][ T4942] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.709317][ T4930] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.720620][ T4940] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 103.776799][ T4940] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.795158][ T4940] ext4 filesystem being mounted at /72/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 103.843177][ T4930] tipc: Started in network mode [ 103.848329][ T4930] tipc: Node identity ac14140f, cluster identity 4711 [ 103.855248][ T4930] tipc: New replicast peer: 255.255.255.255 [ 103.865447][ T4930] tipc: Enabled bearer , priority 10 [ 103.872170][ T4930] netlink: 76 bytes leftover after parsing attributes in process `syz.4.328'. [ 103.894893][ T4930] EXT4-fs error (device loop4): ext4_lookup:1785: inode #12: comm syz.4.328: iget: bad i_size value: 2533274857506816 [ 103.914306][ T4930] EXT4-fs error (device loop4): ext4_lookup:1785: inode #12: comm syz.4.328: iget: bad i_size value: 2533274857506816 [ 103.989075][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.096880][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.499073][ T4182] EXT4-fs error (device loop5): ext4_readdir:225: inode #12: comm syz-executor: path /28/file0/file0: directory fails checksum at offset 0 [ 104.586759][ T4182] EXT4-fs error (device loop5): ext4_empty_dir:3078: inode #12: comm syz-executor: Directory block failed checksum [ 104.608728][ T4182] EXT4-fs error (device loop5): ext4_readdir:225: inode #12: comm syz-executor: path /28/file0/file0: directory fails checksum at offset 0 [ 104.688175][ T4182] EXT4-fs error (device loop5): ext4_empty_dir:3078: inode #12: comm syz-executor: Directory block failed checksum [ 104.701056][ T4182] EXT4-fs error (device loop5): ext4_readdir:225: inode #12: comm syz-executor: path /28/file0/file0: directory fails checksum at offset 0 [ 104.722380][ T4182] EXT4-fs error (device loop5): ext4_empty_dir:3078: inode #12: comm syz-executor: Directory block failed checksum [ 104.745399][ T4182] EXT4-fs error (device loop5): ext4_readdir:225: inode #12: comm syz-executor: path /28/file0/file0: directory fails checksum at offset 0 [ 104.766803][ T4182] EXT4-fs error (device loop5): ext4_empty_dir:3078: inode #12: comm syz-executor: Directory block failed checksum [ 104.779673][ T4182] EXT4-fs error (device loop5): ext4_readdir:225: inode #12: comm syz-executor: path /28/file0/file0: directory fails checksum at offset 0 [ 104.794696][ T4182] EXT4-fs error (device loop5): ext4_empty_dir:3078: inode #12: comm syz-executor: Directory block failed checksum [ 105.006455][ T3502] tipc: Node number set to 2886997007 [ 105.068005][ T4980] loop2: detected capacity change from 0 to 164 [ 105.150564][ T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.170454][ T4947] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.180371][ T4994] netlink: 32 bytes leftover after parsing attributes in process `syz.4.348'. [ 105.180393][ T4994] IPv6: NLM_F_CREATE should be specified when creating new route [ 105.192939][ T4980] rock: directory entry would overflow storage [ 105.193002][ T4980] rock: sig=0x66, size=4, remaining=3 [ 105.216666][ T4992] gtp0: entered promiscuous mode [ 105.216686][ T4992] gtp0: entered allmulticast mode [ 105.223893][ T4994] netlink: 28 bytes leftover after parsing attributes in process `syz.4.348'. [ 105.223918][ T4994] netlink: 2 bytes leftover after parsing attributes in process `syz.4.348'. [ 105.224189][ T4994] netlink: 28 bytes leftover after parsing attributes in process `syz.4.348'. [ 105.224228][ T4994] netlink: 28 bytes leftover after parsing attributes in process `syz.4.348'. [ 105.224250][ T4994] netlink: 2 bytes leftover after parsing attributes in process `syz.4.348'. [ 105.224358][ T4994] netlink: 28 bytes leftover after parsing attributes in process `syz.4.348'. [ 105.264642][ T4992] loop3: detected capacity change from 0 to 1024 [ 105.283145][ T4992] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 105.295260][ T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.310566][ T4992] EXT4-fs error (device loop3): ext4_map_blocks:818: inode #3: block 1: comm syz.3.346: lblock 1 mapped to illegal pblock 1 (length 1) [ 105.377821][ T5001] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 105.434059][ T4992] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 105.434260][ T4992] EXT4-fs error (device loop3): ext4_acquire_dquot:7001: comm syz.3.346: Failed to acquire dquot type 0 [ 105.443371][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 105.443409][ C0] EXT4-fs (loop3): initial error at time 1774674353: ext4_map_blocks:818: inode 3: block 1 [ 105.443459][ C0] EXT4-fs (loop3): last error at time 1774674353: ext4_map_blocks:818: inode 3: block 1 [ 105.452291][ T4980] rock: directory entry would overflow storage [ 105.454927][ T4992] loop3: lost filesystem error report for type 5 error -117 [ 105.485497][ T4992] EXT4-fs error (device loop3): ext4_free_blocks:6724: comm syz.3.346: Freeing blocks not in datazone - block = 0, count = 4096 [ 105.485536][ T4992] loop3: lost filesystem error report for type 5 error -117 [ 105.485702][ T4992] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.346: Invalid inode bitmap blk 0 in block_group 0 [ 105.485732][ T4992] loop3: lost filesystem error report for type 5 error -117 [ 105.485927][ T4992] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem [ 105.485948][ T4992] loop3: lost filesystem error report for type 5 error -117 [ 105.550525][ T4980] rock: sig=0x66, size=4, remaining=3 [ 105.550776][ T311] EXT4-fs error (device loop3): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 105.550816][ T311] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 105.575454][ T311] EXT4-fs error (device loop3): ext4_release_dquot:7037: comm kworker/u8:7: Failed to release dquot type 0 [ 105.584927][ T4980] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 105.589703][ T4992] EXT4-fs (loop3): 1 orphan inode deleted [ 105.590131][ T4992] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.651587][ T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.675793][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.690687][ T4980] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 105.722816][ T5009] netlink: 'syz.0.354': attribute type 8 has an invalid length. [ 105.801645][ T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.906156][ T5034] loop0: detected capacity change from 0 to 128 [ 105.917132][ T5034] FAT-fs (loop0): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 106.002365][ T5039] xt_HMARK: proto mask must be zero with L3 mode [ 106.010378][ T12] bridge_slave_1: left allmulticast mode [ 106.021619][ T12] bridge_slave_1: left promiscuous mode [ 106.035231][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.056523][ T12] bridge_slave_0: left allmulticast mode [ 106.065143][ T12] bridge_slave_0: left promiscuous mode [ 106.081102][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.106309][ T5045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.120512][ T5045] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.248737][ T311] kworker/u8:7: attempt to access beyond end of device [ 106.248737][ T311] loop0: rw=1, sector=129, nr_sectors = 8 limit=128 [ 106.275220][ T311] kworker/u8:7: attempt to access beyond end of device [ 106.275220][ T311] loop0: rw=1, sector=145, nr_sectors = 8 limit=128 [ 106.290837][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 106.300641][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 106.300641][ T311] kworker/u8:7: attempt to access beyond end of device [ 106.300641][ T311] loop0: rw=1, sector=161, nr_sectors = 8 limit=128 [ 106.300683][ T311] kworker/u8:7: attempt to access beyond end of device [ 106.300683][ T311] loop0: rw=1, sector=177, nr_sectors = 8 limit=128 [ 106.337208][ T311] kworker/u8:7: attempt to access beyond end of device [ 106.337208][ T311] loop0: rw=1, sector=193, nr_sectors = 8 limit=128 [ 106.337442][ T12] bond0 (unregistering): Released all slaves [ 106.350846][ T311] kworker/u8:7: attempt to access beyond end of device [ 106.350846][ T311] loop0: rw=1, sector=209, nr_sectors = 8 limit=128 [ 106.370329][ T311] kworker/u8:7: attempt to access beyond end of device [ 106.370329][ T311] loop0: rw=1, sector=225, nr_sectors = 8 limit=128 [ 106.394748][ T311] kworker/u8:7: attempt to access beyond end of device [ 106.394748][ T311] loop0: rw=1, sector=241, nr_sectors = 8 limit=128 [ 106.410377][ T311] FAT-fs (loop0): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 106.411644][ T5002] lo speed is unknown, defaulting to 1000 [ 106.453690][ T12] hsr_slave_0: left promiscuous mode [ 106.485171][ T12] hsr_slave_1: left promiscuous mode [ 106.500175][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.515285][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 106.528044][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.551062][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.582229][ T12] veth1_macvtap: left promiscuous mode [ 106.590782][ T12] veth0_macvtap: left promiscuous mode [ 106.606715][ T12] veth1_vlan: left allmulticast mode [ 106.631352][ T12] veth1_vlan: left promiscuous mode [ 106.641327][ T12] veth0_vlan: left promiscuous mode [ 106.704061][ T12] team0 (unregistering): Port device macvlan1 removed [ 106.720980][ T28] kauditd_printk_skb: 48 callbacks suppressed [ 106.720998][ T28] audit: type=1400 audit(1774674355.088:1598): avc: denied { bind } for pid=5070 comm="syz.4.368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 106.747064][ T12] team0 (unregistering): Port device team_slave_1 removed [ 106.763268][ T12] team0 (unregistering): Port device team_slave_0 removed [ 106.918195][ T5098] loop3: detected capacity change from 0 to 512 [ 106.953056][ T5098] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.976403][ T5098] ext4 filesystem being mounted at /83/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.994688][ T5108] __nla_validate_parse: 24 callbacks suppressed [ 106.994708][ T5108] netlink: 20 bytes leftover after parsing attributes in process `syz.4.373'. [ 107.003367][ T5100] loop2: detected capacity change from 0 to 4096 [ 107.040671][ T28] audit: type=1400 audit(1774674355.398:1599): avc: denied { map } for pid=5091 comm="syz.3.370" path="/83/file1/memory.events" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 107.074134][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.074521][ T5100] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.138645][ T5002] chnl_net:caif_netlink_parms(): no params data found [ 107.285511][ T5002] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.296995][ T5002] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.490866][ T5002] bridge_slave_0: entered allmulticast mode [ 107.516921][ T5002] bridge_slave_0: entered promiscuous mode [ 107.814817][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.825341][ T5002] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.833605][ T5002] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.840860][ T5002] bridge_slave_1: entered allmulticast mode [ 107.847668][ T5002] bridge_slave_1: entered promiscuous mode [ 107.877993][ T5133] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 107.929470][ T5002] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.952422][ T5002] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.962528][ T5139] loop0: detected capacity change from 0 to 8192 [ 107.978442][ T5142] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.978778][ T5002] team0: Port device team_slave_0 added [ 107.987331][ T5142] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.995558][ T5002] team0: Port device team_slave_1 added [ 108.012890][ T5142] IPVS: fo: FWM 3 0x00000003 - no destination available [ 108.029627][ T5002] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 108.036646][ T5002] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 108.062880][ T5002] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 108.075622][ T5002] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 108.082455][ T5139] loop0: p1 < > p2 p3 < p5 p6 > p4 [ 108.083000][ T5002] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 108.105153][ T5139] loop0: partition table partially beyond EOD, truncated [ 108.114691][ T5002] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 108.132908][ T5139] loop0: p1 start 100664320 is beyond EOD, truncated [ 108.147258][ T5139] loop0: p2 size 134217732 extends beyond EOD, truncated [ 108.173525][ T5139] loop0: p4 start 67108864 is beyond EOD, truncated [ 108.182762][ T5002] hsr_slave_0: entered promiscuous mode [ 108.189260][ T5002] hsr_slave_1: entered promiscuous mode [ 108.195267][ T5139] loop0: p5 size 134217732 extends beyond EOD, truncated [ 108.210545][ T28] audit: type=1400 audit(1774674356.578:1600): avc: denied { ioctl } for pid=5146 comm="syz.3.383" path="socket:[10958]" dev="sockfs" ino=10958 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 108.237800][ T5139] loop0: p6 start 67108864 is beyond EOD, truncated [ 108.365286][ T28] audit: type=1400 audit(1774674356.728:1601): avc: denied { create } for pid=5146 comm="syz.3.383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 108.550675][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop0p5, 10) failed: No such file or directory [ 108.555083][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 108.558117][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 108.648526][ T5002] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 108.654861][ T5002] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 108.670655][ T5002] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 108.675428][ T5179] netlink: 4 bytes leftover after parsing attributes in process `syz.0.386'. [ 108.676075][ T5172] netlink: 'syz.0.386': attribute type 3 has an invalid length. [ 108.676093][ T5172] netlink: 8 bytes leftover after parsing attributes in process `syz.0.386'. [ 108.678031][ T5002] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 108.789515][ T5188] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 109.152051][ T5221] loop2: detected capacity change from 0 to 8192 [ 109.196418][ T3302] loop2: p1 p2 p4 [ 109.201395][ T3302] loop2: p4 size 262912 extends beyond EOD, truncated [ 109.212378][ T5221] loop2: p1 p2 p4 [ 109.218265][ T5221] loop2: p4 size 262912 extends beyond EOD, truncated [ 109.374580][ T5195] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 109.417535][ T5211] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 109.435516][ T5212] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.455716][ T5210] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.474225][ T5002] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.487928][ T5212] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.502324][ T5002] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.512880][ T3490] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.520065][ T3490] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.531004][ T5210] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.545916][ T3490] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.553113][ T3490] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.566093][ T5212] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.588528][ T5210] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.627806][ T5212] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.652515][ T5002] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.667918][ T5210] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.727086][ T117] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.740740][ T3490] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.753946][ T309] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.767045][ T117] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.795349][ T117] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.809394][ T117] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.825134][ T117] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.839811][ T12] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.850804][ T5002] veth0_vlan: entered promiscuous mode [ 109.859618][ T5002] veth1_vlan: entered promiscuous mode [ 109.876801][ T5002] veth0_macvtap: entered promiscuous mode [ 109.884693][ T5002] veth1_macvtap: entered promiscuous mode [ 109.900945][ T5002] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.910257][ T5002] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.923935][ T309] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.939569][ T309] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.952538][ T309] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.961491][ T5244] loop3: detected capacity change from 0 to 8192 [ 109.978699][ T28] audit: type=1400 audit(1774674358.348:1602): avc: denied { mounton } for pid=5002 comm="syz-executor" path="/root/syzkaller.oGkGSg/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=11252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 110.007099][ T309] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.037321][ T4998] udevd[4998]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 110.038761][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 110.049019][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 110.077198][ T5244] loop3: p1 < > p2 p4 < p5 > [ 110.085558][ T5244] loop3: partition table partially beyond EOD, truncated [ 110.094862][ T5244] loop3: p1 start 134217728 is beyond EOD, truncated [ 110.103245][ T5249] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.398'. [ 110.103434][ T5244] loop3: p2 size 591360 extends beyond EOD, truncated [ 110.113304][ T5251] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.398'. [ 110.121328][ T5244] loop3: p5 size 591360 extends beyond EOD, truncated [ 110.267449][ T5265] tmpfs: Bad value for 'mpol' [ 110.319711][ T5270] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 110.440545][ T5279] loop4: detected capacity change from 0 to 128 [ 110.548913][ T5276] 9pnet: p9_errstr2errno: server reported unknown error [ 110.595576][ T5290] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.604163][ T5290] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.133467][ T5295] netlink: 104 bytes leftover after parsing attributes in process `syz.6.414'. [ 111.145096][ T28] audit: type=1400 audit(1774674359.498:1603): avc: denied { nlmsg_read } for pid=5292 comm="syz.6.414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 111.173930][ T5300] program syz.3.416 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 111.203482][ T28] audit: type=1400 audit(1774674359.498:1604): avc: denied { write } for pid=5292 comm="syz.6.414" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 111.227869][ T5302] netlink: 28 bytes leftover after parsing attributes in process `syz.0.417'. [ 111.237350][ T5302] netlink: 24 bytes leftover after parsing attributes in process `syz.0.417'. [ 111.237384][ T28] audit: type=1400 audit(1774674359.538:1605): avc: denied { write } for pid=5299 comm="syz.3.416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 111.319288][ T28] audit: type=1400 audit(1774674359.688:1606): avc: denied { write } for pid=5305 comm="syz.3.419" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 111.363606][ T28] audit: type=1400 audit(1774674359.718:1607): avc: denied { ioctl } for pid=5305 comm="syz.3.419" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 111.574107][ T5325] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.582745][ T5325] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.595284][ T3535] IPVS: starting estimator thread 0... [ 111.695182][ T5327] IPVS: using max 3504 ests per chain, 175200 per kthread [ 112.169104][ T5341] FAULT_INJECTION: forcing a failure. [ 112.169104][ T5341] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 112.182718][ T5341] CPU: 0 UID: 0 PID: 5341 Comm: syz.3.430 Not tainted syzkaller #0 PREEMPT(full) [ 112.182821][ T5341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 112.182834][ T5341] Call Trace: [ 112.182840][ T5341] [ 112.182916][ T5341] __dump_stack+0x1d/0x30 [ 112.183000][ T5341] dump_stack_lvl+0x95/0xd0 [ 112.183035][ T5341] dump_stack+0x15/0x1b [ 112.183057][ T5341] should_fail_ex+0x263/0x280 [ 112.183123][ T5341] should_fail+0xb/0x20 [ 112.183149][ T5341] should_fail_usercopy+0x1a/0x20 [ 112.183180][ T5341] _copy_from_user+0x1c/0xb0 [ 112.183216][ T5341] ___sys_sendmsg+0xc1/0x1e0 [ 112.183286][ T5341] __x64_sys_sendmsg+0xd4/0x160 [ 112.183322][ T5341] x64_sys_call+0x194c/0x3020 [ 112.183348][ T5341] do_syscall_64+0x12c/0x370 [ 112.183391][ T5341] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.183418][ T5341] RIP: 0033:0x7f8d06e2c799 [ 112.183440][ T5341] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.183462][ T5341] RSP: 002b:00007f8d0587f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 112.183635][ T5341] RAX: ffffffffffffffda RBX: 00007f8d070a5fa0 RCX: 00007f8d06e2c799 [ 112.183649][ T5341] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 112.183662][ T5341] RBP: 00007f8d0587f090 R08: 0000000000000000 R09: 0000000000000000 [ 112.183675][ T5341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 112.183688][ T5341] R13: 00007f8d070a6038 R14: 00007f8d070a5fa0 R15: 00007ffc10ff09e8 [ 112.183711][ T5341] [ 112.420669][ T5349] FAULT_INJECTION: forcing a failure. [ 112.420669][ T5349] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 112.434184][ T5349] CPU: 1 UID: 0 PID: 5349 Comm: syz.3.434 Not tainted syzkaller #0 PREEMPT(full) [ 112.434285][ T5349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 112.434299][ T5349] Call Trace: [ 112.434307][ T5349] [ 112.434327][ T5349] __dump_stack+0x1d/0x30 [ 112.434406][ T5349] dump_stack_lvl+0x95/0xd0 [ 112.434434][ T5349] dump_stack+0x15/0x1b [ 112.434460][ T5349] should_fail_ex+0x263/0x280 [ 112.434516][ T5349] should_fail+0xb/0x20 [ 112.434543][ T5349] should_fail_usercopy+0x1a/0x20 [ 112.434574][ T5349] _copy_from_user+0x1c/0xb0 [ 112.434610][ T5349] ___sys_sendmsg+0xc1/0x1e0 [ 112.434690][ T5349] __x64_sys_sendmsg+0xd4/0x160 [ 112.434750][ T5349] x64_sys_call+0x194c/0x3020 [ 112.434780][ T5349] do_syscall_64+0x12c/0x370 [ 112.434838][ T5349] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.434928][ T5349] RIP: 0033:0x7f8d06e2c799 [ 112.434949][ T5349] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.434970][ T5349] RSP: 002b:00007f8d0587f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 112.435033][ T5349] RAX: ffffffffffffffda RBX: 00007f8d070a5fa0 RCX: 00007f8d06e2c799 [ 112.435095][ T5349] RDX: 0000000020040040 RSI: 0000200000000000 RDI: 0000000000000005 [ 112.435111][ T5349] RBP: 00007f8d0587f090 R08: 0000000000000000 R09: 0000000000000000 [ 112.435126][ T5349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 112.435141][ T5349] R13: 00007f8d070a6038 R14: 00007f8d070a5fa0 R15: 00007ffc10ff09e8 [ 112.435179][ T5349] [ 112.600984][ T5336] loop0: detected capacity change from 0 to 736 [ 112.689623][ T5359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.690977][ T5361] netlink: 'syz.2.439': attribute type 27 has an invalid length. [ 112.698440][ T5359] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.722620][ T5354] ================================================================== [ 112.730830][ T5354] BUG: KCSAN: data-race in filemap_splice_read / filemap_splice_read [ 112.738921][ T5354] [ 112.741249][ T5354] write to 0xffff88812ba45a68 of 8 bytes by task 5353 on cpu 1: [ 112.748879][ T5354] filemap_splice_read+0x523/0x780 [ 112.754006][ T5354] splice_direct_to_actor+0x26e/0x670 [ 112.759387][ T5354] do_splice_direct+0x119/0x1a0 [ 112.764242][ T5354] do_sendfile+0x382/0x650 [ 112.768669][ T5354] __x64_sys_sendfile64+0x105/0x150 [ 112.773876][ T5354] x64_sys_call+0x2dc4/0x3020 [ 112.778823][ T5354] do_syscall_64+0x12c/0x370 [ 112.783429][ T5354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.789340][ T5354] [ 112.791668][ T5354] write to 0xffff88812ba45a68 of 8 bytes by task 5354 on cpu 0: [ 112.799298][ T5354] filemap_splice_read+0x523/0x780 [ 112.804421][ T5354] splice_direct_to_actor+0x26e/0x670 [ 112.809892][ T5354] do_splice_direct+0x119/0x1a0 [ 112.814840][ T5354] do_sendfile+0x382/0x650 [ 112.819363][ T5354] __x64_sys_sendfile64+0x105/0x150 [ 112.824657][ T5354] x64_sys_call+0x2dc4/0x3020 [ 112.829350][ T5354] do_syscall_64+0x12c/0x370 [ 112.833950][ T5354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.840023][ T5354] [ 112.842433][ T5354] value changed: 0x0000000000157000 -> 0x000000000017a000 [ 112.849712][ T5354] [ 112.852038][ T5354] Reported by Kernel Concurrency Sanitizer on: [ 112.858361][ T5354] CPU: 0 UID: 0 PID: 5354 Comm: syz.3.436 Not tainted syzkaller #0 PREEMPT(full) [ 112.867996][ T5354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 112.878057][ T5354] ================================================================== [ 112.924145][ T5364] syz.6.440 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 112.964421][ T5364] tc_dump_action: action bad kind