last executing test programs: 46.546826806s ago: executing program 2 (id=45): socket$inet6(0xa, 0x1, 0x8010000000000084) socket$kcm(0x11, 0x20000000000000a, 0x300) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'veth0_to_team\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x50, 0x10, 0x401, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4dc1}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_SLAVE1={0x8, 0x1, r2}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}, @IFLA_HSR_VERSION={0x5, 0x6, 0xe3}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x40) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x7, @local}, 0x1c) io_uring_enter(r0, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) 46.472233741s ago: executing program 2 (id=48): r0 = socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 32) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8408, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x4, @perf_config_ext={0x288}, 0xa216, 0x6, 0x11000, 0x4, 0x9484, 0x2001, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) (async, rerun: 32) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a00000001000000e27f000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000780), &(0x7f0000000580), 0x80000002, r1}, 0x38) (async) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000ac0)=@nat={'nat\x00', 0x670, 0x5, 0x450, 0x0, 0x1a0, 0xffffffff, 0x2e8, 0x1a0, 0x3b8, 0x3b8, 0xffffffff, 0x3b8, 0x3b8, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010100, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x16}, 0x0, 0x168, 0x1a0, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x7, 0xc, 'kmp\x00', "4801d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x76, 0x2, {0x1}}}, @common=@unspec=@devgroup={{0x38}, {0x3, 0x0, 0x3, 0x3, 0x81}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0xae, {0xf, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x65, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xfffc, 0xd, 0x1}, {0x2, 0x4, 0x3}, 0x1001, 0x100}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'virt_wifi0\x00', 'veth1_to_bridge\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x24, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @icmp_id=0x66, @icmp_id=0x68}}}}, {{@ip={@loopback, @remote, 0xff, 0x0, 'batadv_slave_1\x00', 'netpci0\x00', {}, {0xff}, 0x6, 0x1, 0x5}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x4, '\\Q', 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x1f, @local, @multicast2, @port=0x4e22, @gre_key=0x5}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0) (async) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0xb, &(0x7f00000000c0)={[{@unhide}, {@mode={'mode', 0x3d, 0x9}}, {@cruft}, {@map_normal}]}, 0x1, 0x54d, &(0x7f0000000580)="$eJzs3VFP21YbwPHHFN7StEKvtqmqEG1P6SaBRFMntKmi3sxzTsJpEzuynQquKlSgQg3tVDppcDP1ptuk7UP0dh9iH2GX077Brqp9gE1jsp3QAAmhUAhC/1/U+mA/9nlOFPnRgdgWAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAglluy7ZwlVeM15lVvbinwa/tsbx9v+p+xZNG1sz/W3/crYsX/ZHRUrqSrrnz2PvJy/N+kTKQ/TchovBiVzYuX/3//0+Gh9v77JHQi1jc2ny02m8svB53IgFS0Z0Lf1JyKVib0VbFQsG/PlUNVNlUdLnz3m64pN9BO5Adqyp1WuWJxVunsgt/wKiWnqtsr793K23ZBPcjWtROEvnf7QTZ050y1arxKEhNvjmPuxR/EhyZSkXZqSq2sNpdn+yUZB+UOEpTvF5S38/lcLp/PFe4W796z7eE9K+xdZE/E4D+0GKzjOZEDhzDUqv9SFSOeNGReVNeXKyUJxJdaj+0trcI//cVtvW+/nfW/XeWvvN88Lkn9v5b+dK1X/e+Ry8m91mVDNuWZLEpTmrIsLwee0cm+KqLFEyOh+GKkJk6yRrXWKClKQQpiy2OZk7KEoqQsRv4nWkJZkFAi0cknypVAtDgSiS+BKJkSV6ZFSU6KUpRZUaIlKwviS0M8qUhJHKmKlhVZTd732X1y3A7KHSQov08Q9R97DLdOWQfe4eOewIEj2GrXfwAAAAAAcGZZyW/f4/n/iFxNWmVT1fag0wIAAAAAAB9R8pf/iXgxEreuisX8HwAAAACAs8ZKrrGzRCQj19NW+0oofgkAAAAAAMAZkfz9/1q8yMSt62Ix/wcAAAAA4Kz5oe899sP6eevXvyQIRqzX9fnPrTUnjnPWzqX7ndt9xKg8fvHvrcRwcqzCcOuQrp6wLqVB2zfBfNdarPTLw/qQBKyx1t47E5Cf5EYac2MpXS61t6S9ZMqmqrOuX72fE8cZG4r0fPTN89VvJRn+j15tzJKV1eZy9smL5lKSy+v4KK/XWjdQ3HMfxX1yeZXcbyG55qLriEeSCzFa/WbSfu3O8Q+luw99QJ9vZDKNmcyky8zO8Y/GfeayvUbfyiJ3xJG/kZtpzM2pm+miSxb5flnkO7M41HtxgCxm+2Uxe8QsAGBQVnpXoX/TIr61u+4e4ix3MtX9jUylMVPjyYl1eLzLGd3ud0a3j1jdftl+BkI7uFeNjfv9eVdVfRvv8LZnv2E1b8Vv4blXa1/L5fWNzVura4tPl58uP8/nZwv2Hdu+m5eRZBitBbUHANBFt2fstGtuOv/v+xQe606fWfUn218pyMoTeSFNWZKZ5GqD5BsHXY+aSfa5kHwNYabPrDXT8YSXmT6zukzHg146Yv/8PW3tiLU6Hi8DAMBZMtmnDh+k/s/0mXdnOr5SONNndtxZywEAwPHQwTsrE31vBYGpP84VizknmtMq8N2HKjClilbGi3TgzjleRat64Ee+61fjxiNT0qEKG/W6H0Sq7Aeq7odmPnnyuwoXwkjXVKhrjhcZN6xXtRNq5fpe5LiRKpnQVfXGV1UTzukg2Tmsa9eUjetExvdU6DcCV2eVCrXuCDQl7UWmbOKmp+qBqTnBgnrkVxs1rUo6dANTj/z0gO2+jFf2g1py2Oyg32wAAE6J9Y3NZ4vN5vLLfo0vDxDTozHoMQIAgJ2o0gAAAAAAAAAAAAAAAAAAAAAAnH6HvKTv7DUufawDbu0Tc0FOwUgP0Tjf/ricknxoHH9jsOclAMfvvwAAAP///GpgUQ==") (async) creat(&(0x7f00000002c0)='./file0\x00', 0x0) (async) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='devpts\x00', 0x101c040, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18030000000000000000000000000000851000000600000018000000000000000000000000000000660000000000165037bdb012d09100001800000000000000000000000000000095000000000000005703000000000000cdd032ba2be5e586ce4003b43b3f329886cc4fc2cdc3a781f7f7a377bf2ed1287b232c1973322dacf1ed206d8cce20f8e305975a54922048d2c60b72b38cedf0d32218d08179b01f948b5acab43db5cafbd3ab7df153285ddce158cfc702e742c5720000000000"], &(0x7f0000000180)='syzkaller\x00'}, 0x94) 46.412797899s ago: executing program 2 (id=49): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'hsr0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@ipmr_delroute={0x34, 0x19, 0x200, 0x70bd29, 0x25dfdbfb, {0x80, 0x20, 0xa0, 0x8, 0xfd, 0x2, 0xc8, 0x7, 0x2900}, [@RTA_DPORT={0x6, 0x1d, 0x4e23}, @RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x29}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x4edd782a75cb0f1e}, 0x24000010) 46.337944853s ago: executing program 2 (id=52): clock_settime(0x0, &(0x7f00000000c0)={0x7, 0xffffffff000}) perf_event_open(&(0x7f0000000140)={0x2, 0x96, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x42710, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000001a80)='./file0\x00', 0xb33328a401cad7d9) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = syz_io_uring_setup(0x110, &(0x7f0000000200)={0x0, 0xfec9, 0x8, 0x5, 0x3d4}, &(0x7f0000000040), &(0x7f0000000140)) exit(0x7) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r1, 0x18, &(0x7f0000000000)={0x8, 0xffffffffffffffff, 0x4, {0x4}, 0x80}, 0x1) connect$can_bcm(r0, &(0x7f0000000540), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001000000000000000000000022a5cfd43437ad6aa4d22763ff5422a995b4240a551e6e7e53edafcf963b78b2d1b665a90e4e441ce72786aa9a56702fbd1572d985dbff1e3b6211feeb6e1ec05ab2c02a64e7fe84493e9f5151966600ff9c818be28ecef925f79dbd5e96e917d91868"], 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x31, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYRESOCT=r1, @ANYRESDEC=r0, @ANYRES16, @ANYBLOB="e1adabd8b5692f77dc42535bbe4027c2a538db897f37771d478603a28e798172"], 0x38}, 0x2}, 0x0) 45.443879209s ago: executing program 2 (id=72): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="04010000100007000000000000000000ff020000000000000000000000000001e0000002000000000000000000000000ffff000000000000000000000200", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff0100000000000000000000000000e0e00000002b000000fc0000000000000000000000000000000000000000000000002000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000070000000000000000000000000000000000040000000000e80a000000000000000000000a0002"], 0x104}}, 0x0) 45.102019658s ago: executing program 2 (id=79): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000002e00000016030000000000005c000000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, 0xffffffffffffffff, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0xfe8e}, 0x3f) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x401, 0x70bd2c, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x0, 0x1c08}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x4}}}, @IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}]}, 0x48}}, 0x800) 45.100300718s ago: executing program 32 (id=79): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000002e00000016030000000000005c000000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, 0xffffffffffffffff, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0xfe8e}, 0x3f) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x401, 0x70bd2c, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x0, 0x1c08}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x4}}}, @IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}]}, 0x48}}, 0x800) 34.333711538s ago: executing program 3 (id=187): r0 = syz_io_uring_setup(0x3d1a, &(0x7f0000000480)={0x0, 0xd03e, 0x10, 0x1}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_enter(r0, 0x0, 0x235c, 0x3, 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000140), 0x2) io_uring_enter(r0, 0x6576, 0xc718, 0x4, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x2014, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb0100180000000000000048000000480000000c000000030000000000000800000000ffffffff04000004ff0f00000500000003000000ff0000000c00000003000000a58dfa810000000002000000010100000300000004000000070000000055002e2e"], 0x0, 0x6c, 0x0, 0x1, 0x3}, 0x28) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080600000c"], 0x48) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000003c0)=0x40000004) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x80890a, &(0x7f0000000100)={[{@orlov}, {@nodioread_nolock}, {}, {@oldalloc}, {@nojournal_checksum}, {@min_batch_time={'min_batch_time', 0x3d, 0xc619}}, {@noload}]}, 0x7, 0x7bf, &(0x7f0000000d00)="$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") mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r4 = dup(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0xff, 0x0, 0x0, 0xf3, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x106441, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x5, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) io_setup(0x81, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r5, 0xf507, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000004380), 0x1814800, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB="2c7766646e6f3d20babc9f2ff064b5cbcbcada7c93471d07e22a4213e327e4ced96809a092b0171f6b389ee3c9f2c8e33fae168d52f9b9ee0d0cd471929b2219e8a8fad66f7632feb00225b54d883b9551f86cd6710fe291cfdc8267f9f18ca99230622c791ea3087036d56fab4bc69df3e378f2103aaa3ae96de0975cff8d7b7d13072c83b227e5c15856e07aa2c5b3", @ANYRESHEX=r4, @ANYBLOB=',k']) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x3}, 0x6025, 0x4005, 0xb, 0x0, 0x1, 0x3000, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdc06, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'xfrm0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0xc, 0x0, 0x0) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="40000000070a010100000000000000000300000a08000b40000000020c00034000000000000000030400048008000940000000030900010050797a3100000000"], 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) unshare(0x22020600) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') r9 = fsopen(&(0x7f0000000400)='ocfs2\x00', 0x1) pwrite64(r9, &(0x7f00000005c0)="c08835dce418866f1d9bda16e3311cb66dbb8c5fdc419d02a480467277f70bcfe0b3e61d42ce2fa705f32e54a60c7386872b1987233855792472c981f8022d1615076c73900c2c59fbbeef076010387924205d23793954f2c0e06451b8a2db311f8f5bcb3252", 0x66, 0x4) lseek(r8, 0xfffd, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000007cc0), 0x8100, 0x0) 31.9648412s ago: executing program 3 (id=204): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x54d, &(0x7f0000000540)={0x0, 0x735d, 0x100, 0x805, 0x350}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_WRITE={0x17, 0x1, 0x2007, @fd_index=0x6, 0xffffffffffffff7f, 0x0, 0x0, 0x6, 0x1}) io_uring_enter(r2, 0x47bc, 0x0, 0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={r5, 0xffffffffffffffff}, 0x4) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000200)={r6, 0x0, 0x0}, 0x20) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) 31.078232697s ago: executing program 3 (id=214): ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000140)={'gretap0\x00', 0x0, 0x8, 0x7, 0x8, 0xc1, {{0x8, 0x4, 0x0, 0x19, 0x20, 0x64, 0x0, 0x4, 0x29, 0x0, @multicast2, @rand_addr=0x64010102, {[@generic={0x86, 0xb, "b2ba8e85728bef66e7"}]}}}}}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000240)={@local, 0x0}, &(0x7f0000000280)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x0, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x1, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', r0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002240)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="08000000040000000400000009"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xa, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0xe8a2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8800, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0xe) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000007c0)=0xf) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f0000000340)=""/23, 0x17}, {&(0x7f0000000500)=""/195, 0xc3}, {&(0x7f0000000380)=""/114, 0x72}, {&(0x7f0000000680)=""/145, 0x91}, {&(0x7f0000000400)=""/25, 0x19}, {&(0x7f0000000800)=""/227, 0xe3}, {&(0x7f0000000740)=""/53, 0x35}], 0x7, 0x7, 0x400) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x2f00020b, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 30.79975694s ago: executing program 3 (id=218): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000740)={@remote}, &(0x7f0000000780)=0x14) socket$kcm(0xa, 0x5, 0x0) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000002300)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x200000a, 0x13, r2, 0x0) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYBLOB="dea09f9605bf37cc734c3b5fa34628fce1eed1e0f375ebbaa46f9cd4dc867463f6b8b107cd60d26524453c5f29599792b35cc9549f260032c38ff8f33fe7effd7144e7c8069b5c27baaa09307221766fbabbeb", @ANYRES32, @ANYRES32=0x0, @ANYRESDEC, @ANYRESDEC, @ANYRES8, @ANYRES16=0x0], 0x2, 0x9fc, &(0x7f0000002680)="$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") r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x40000, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x4, &(0x7f0000000900)=ANY=[@ANYBLOB="180500000800000000000000030046a2b4ba6b578c0e83829aeaa6000085000000110000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r4, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="882f1242a03c3f98722780b605a7", 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001680)={{r5, 0xffffffffffffffff}, &(0x7f0000001600), &(0x7f0000001640)}, 0x20) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x7, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r7, 0x0, 0x23, 0x0, &(0x7f00000007c0)="f6f48180e24c39244904b6994e7c76833eb90015030095ccfd020c768a96ee03c4c99e", 0x0, 0x1, 0x0, 0x2, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50) r8 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9) syz_clone(0x40800000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r10, 0x29, 0x20, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @local}, 0xf, 0x2, 0x0, 0xc, 0x8, 0x48}, &(0x7f0000000080)=0x20) set_mempolicy(0x8000, &(0x7f00000000c0)=0x7, 0xe) socket$inet6_sctp(0xa, 0x5, 0x84) pipe(&(0x7f0000000240)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 30.471684053s ago: executing program 3 (id=225): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x4, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002fc0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8000, 0x0, 0x9, 0x3) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000280)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf10x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xff, 0x4, 0x6, 0x6}, 0x4, r1}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x2000a804) socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x141842, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f00000006c0)={0x0, 'bridge0\x00', {0x101}, 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000900006440000008001b0000000000050010000467d3b6b81cf0"], 0x30}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x80) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100001f000000000000000000", @ANYRES32=r1], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 30.188380444s ago: executing program 3 (id=230): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000380)={0x0, @in6={{0xa, 0x4e21, 0x80000001, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x100}}, 0x80, 0x5}, &(0x7f0000000300)=0x90) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'bridge0\x00'}, @IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x7fffffff, 0xe, 0x5fe5}}]}, {0x4}]}, @IFLA_LINKMODE={0x5, 0x11, 0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x4600}, 0x24044800) 30.129540322s ago: executing program 33 (id=230): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000380)={0x0, @in6={{0xa, 0x4e21, 0x80000001, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x100}}, 0x80, 0x5}, &(0x7f0000000300)=0x90) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'bridge0\x00'}, @IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x7fffffff, 0xe, 0x5fe5}}]}, {0x4}]}, @IFLA_LINKMODE={0x5, 0x11, 0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x4600}, 0x24044800) 4.418946521s ago: executing program 4 (id=496): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) close(0x3) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r2, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000a0000000800000000000006040000000800000001000004f7ffffff0400000001000000000000000030615f5f5f2a2e5f"], 0x0, 0x46, 0x0, 0x9, 0x6}, 0x28) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0xffff, 0x2}, 0x4, 0x0, 0x1, 0x8, 0x2, 0x80000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r4 = socket$unix(0x1, 0x2, 0x0) bind$unix(r4, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$unix(r4, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x303de1f53b11ae}, 0x20008840) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x23, &(0x7f0000000080)=0x40007, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000007c5e0000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="17000000000000000400000003", @ANYRESDEC=r5, @ANYRESHEX=r0], 0x48) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r8 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) ioctl$USBDEVFS_CONTROL(r8, 0xc0185500, &(0x7f00000000c0)={0x80, 0x6, 0xf00, 0xfffe, 0x0, 0xfffffff9, 0x0}) bpf$TOKEN_CREATE(0x24, &(0x7f00000003c0)={0x0, r0}, 0x8) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x17, 0xc, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r8, @ANYRESOCT=r8], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r9, 0x2000000, 0x11, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmmsg(r4, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/57, 0x39}, 0x8}], 0x3ffffffffffff2e, 0x1000400000de, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="5000000027000100000000000000000a01"], 0x50}}, 0x0) 3.221639405s ago: executing program 6 (id=506): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f00000049c0)={0x0, 0x0, &(0x7f0000004980)={&(0x7f0000004900)={0x14, 0x3, 0x1, 0xd03, 0x0, 0x0, {0x5, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x480) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000004b00)={0x0, 0x0, &(0x7f0000004ac0)={&(0x7f0000004a40)={0x14, 0x2, 0x7, 0xa01, 0x0, 0x0, {0x1, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x40000) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x0, 0xa60, &(0x7f0000000d80)="$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") socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) fstat(r2, &(0x7f00000045c0)) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f00000000c0)={@private1}, &(0x7f0000000100)=0x14) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$pptp(0x18, 0x1, 0x2) setsockopt$sock_int(r3, 0x1, 0x3, &(0x7f0000000340)=0xffffffff, 0x4) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'veth0_to_bridge\x00'}) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001340)=@newqdisc={0x38, 0x24, 0xd0f, 0x4703d2d, 0xfffffffd, {0x60, 0x0, 0x0, r7, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xfffffff8}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000040}, 0x44080) 2.818798522s ago: executing program 6 (id=511): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xd, 0x590, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x3}, 0x2000, 0xffff, 0x0, 0x6, 0x8, 0x1, 0x3, 0x0, 0x0, 0x0, 0x20000005}, 0x0, 0x8, 0xffffffffffffffff, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x10) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r3, &(0x7f00000001c0)=ANY=[], 0xff2e) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xf, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x5c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x6a) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) syz_read_part_table(0x105f, &(0x7f0000001080)="$eJzsz7FtwkAYBeDnS2z5lCJVRoiyQTZJnRKJEhZwQ0XBHLAJkzCGEbLNCEDxfc09vSed9Ienarqs/99+ktQkw72e3/exSUoOm4/fNttVkm4aalLLd5LyeWlvRb+fhvNx+aOrS+qbccpD+uy+Ms59+Ts94EQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeHnXAAAA//8SNwwv") r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/timers\x00', 0x0, 0x0) close(r5) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000340)=0x80000000) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/pm_test', 0xc3a01, 0x0) write$binfmt_script(r6, &(0x7f0000000380)={'#! ', './file0'}, 0xb) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r6, 0x84, 0x21, &(0x7f00000001c0)=0x7, 0x4) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x5, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x1, 0x20000000000002, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdffffffffbffffff, 0xffffffffffffffff, 0x2) socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000002100)=0xc) openat$cgroup_ro(r5, 0x0, 0x275a, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, 0x0, 0x0) ioctl$SIOCSIFMTU(r7, 0x8922, &(0x7f0000001680)={'dummy0\x00', 0xeb38}) r9 = socket(0x2d, 0x2, 0x0) connect$qrtr(r9, &(0x7f0000000300)={0x2d, 0xffffffff, 0x2}, 0xc) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r9, 0x84, 0xc, &(0x7f00000000c0)=0x2bbe, 0x4) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r10) sendmsg$NLBL_MGMT_C_ADD(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000c80)=ANY=[@ANYRES8=r5, @ANYBLOB="0100000a4000000000000000000008000808ac1414360800070000f1010105000100000000000800020005000000"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0) 2.629725462s ago: executing program 0 (id=512): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x4e20, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x1}, 0x44) close(r1) 2.600105857s ago: executing program 1 (id=513): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x10) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1100"], 0x48) write$binfmt_elf64(r5, &(0x7f0000000880)=ANY=[@ANYBLOB="7f454c4620040000000000000000000002003e00ebffffff7c0000000055c0f74a000000000000000400000000000000ffffffff0600380001"], 0x78) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r6, 0x402, 0x40) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) 2.599644067s ago: executing program 0 (id=514): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f0000000180)}) r0 = socket$kcm(0x15, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000000)=@rc={0xa, @any, 0xff}, 0x80, 0x0}, 0x0) 2.52206907s ago: executing program 0 (id=515): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="04010000100007000000000000000000ff020000000000000000000000000001e0000002000000000000000000000000ffff000000000000000000000200", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff0100000000000000000000000000e0e00000002b000000fc0000000000000000000000000000000000000000000000000000000000006c02000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000070000000000000000000000000000000000040000000000e80a000000000000000000000a0002"], 0x104}}, 0x0) 2.52179447s ago: executing program 0 (id=516): r0 = io_uring_setup(0x1962, &(0x7f00000000c0)={0x0, 0x6, 0x20000, 0x2, 0x35b}) close(r0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv2(r1, &(0x7f0000000040), 0x100001a4, 0x409, 0x0, 0x0) 2.51771191s ago: executing program 0 (id=517): r0 = io_uring_setup(0x4806, &(0x7f0000000000)={0x0, 0xec9b, 0x10000, 0x2, 0x375}) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000000080)={0x253, 0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000340)=""/215, 0xd4}], 0x0}, 0x20) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000240)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x8}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x9}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc0d1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0xc090) r2 = syz_io_uring_setup(0x7011, &(0x7f00000000c0)={0x0, 0x211b, 0x400, 0x3, 0x301}, &(0x7f0000000140)=0x0, &(0x7f0000000680)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000040)=0xffefffdc, 0x0, 0x4) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='>'], 0x38}}, 0x80) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000180), 0x5, 0x8000) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x280000, 0x0) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, r7) write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x6}, 0x204, 0x1, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020025797a31000000000900010073797a3000000000080005400000001c"], 0xe8}}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x8, 0x1, 0xffffffffffffffff, 0x0}) io_uring_enter(r2, 0x3516, 0xc2de, 0x8, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000940)={0x3, 0x0, &(0x7f0000000840)=[{0x0}], &(0x7f00000008c0)=[0x4], 0x1}, 0x20) mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x100, 0x103) creat(&(0x7f0000000280)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x5, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_bp={0x0, 0x6}, 0x19196, 0x20000, 0x43a1bd76, 0x4, 0x2c9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@FILEID_UDF_WITH_PARENT={0x14, 0x52, {{0x3, 0x6, 0x7, 0xa}, 0x10001, 0x9}}, &(0x7f0000000000), 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x0, 0x3b}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) 2.179459689s ago: executing program 0 (id=518): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r0, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)={0x100, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}}, {@pci={{0xffffffcb}, {0x11}}, {0x8, 0xb, 0x3}}]}, 0x100}, 0x1, 0x0, 0x0, 0x8044}, 0x0) (async) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r0, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)={0x100, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}}, {@pci={{0xffffffcb}, {0x11}}, {0x8, 0xb, 0x3}}]}, 0x100}, 0x1, 0x0, 0x0, 0x8044}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x5, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_bp={0x0, 0x6}, 0x19196, 0x20000, 0x43a1bd76, 0x4, 0x2c9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) epoll_create1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() (async) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socket$vsock_stream(0x28, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x2642, 0x0) (async) openat$rfkill(0xffffffffffffff9c, 0x0, 0x2642, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r4, 0x0, 0xf, 0x0, 0x0) r5 = syz_io_uring_setup(0x1215, &(0x7f00000001c0)={0x0, 0x7d0d, 0x80, 0x100000, 0x1a3}, &(0x7f0000000000), &(0x7f0000000580)) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x8401) io_uring_register$IORING_REGISTER_FILE_ALLOC_RANGE(r5, 0x19, &(0x7f0000004cc0)={0x2, 0xe}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r8, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x1006) (async) write$UHID_INPUT(r8, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x1006) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) 1.712216893s ago: executing program 1 (id=521): unshare(0x22020600) r0 = socket(0x2d, 0x2, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x11d, 0x1b, 0x0, &(0x7f00000021c0)) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000180)={r0, &(0x7f0000000000)='net/vlan/config\x00', 0x20a00, &(0x7f0000000040)={@_ha_fsid={[0x0, 0x401]}, {0x2, 0x22, 0x80, 0x8}}, 0x6b7, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000140)=0x7}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@fallback=r0, 0x0, 0x301d4b63a8218d95, 0x25, &(0x7f00000001c0)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000200)=[0x0], &(0x7f0000000240)=[0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x25, 0x0, @val=@tracing={0xffffffffffffffff, 0x5}}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@map=r4, r2, 0xb, 0x2004, 0x0, @value=r5, @void, @void, @void, r3}, 0x20) ptrace(0x10, r1) ptrace$pokeuser(0x6, r1, 0x388, 0x43d9fda7) r6 = syz_open_procfs(0x0, &(0x7f0000000280)='net/vlan/config\x00') pread64(r6, &(0x7f0000000080)=""/79, 0x4f, 0x47) 1.649754041s ago: executing program 5 (id=522): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x6}, 0x204, 0x1, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x6c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = dup(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x208, 0x0, 0x6}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @remote}}, 0x0, 0x9, 0xffff1896, 0x104, 0x24, 0x7ff7}, 0x9c) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3}, &(0x7f0000001fee)='R\x10rust\xe3cusg\x91\xdedn\xe5+\xf0', 0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) write$P9_RREAD(r2, &(0x7f0000002080)=ANY=[@ANYBLOB], 0xec1) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f0000000000)={0x1, 0x4, [@broadcast, @local, @multicast, @local]}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a40)=@newtaction={0x488, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x8000a001, 0x7fffffff, 0x6, 0xe3df, 0xc265, 0x2, 0x800, 0x9, 0x0, 0x10, 0x40, 0x3ff, 0xfff, 0x6, 0x4, 0x1ff, 0x2, 0x6, 0x8918, 0x0, 0x3, 0x4, 0x8, 0x5, 0x9, 0x8, 0x0, 0x1, 0x40, 0x8, 0xe, 0x7, 0x200, 0x400003, 0x8, 0x107a, 0x5, 0x5, 0xd6bc, 0x1ff, 0x831a, 0x2, 0x9, 0x2, 0x30, 0x5, 0x80000001, 0xfff, 0x6, 0xa6, 0x7, 0xffffffff, 0x80ff, 0x1400, 0x7, 0x3, 0x7ff, 0x807fff, 0x4, 0x4, 0xfffff896, 0x2, 0x8, 0x79, 0x0, 0x3ff8000, 0x3, 0x57, 0x8, 0x7fff, 0xf, 0x0, 0xffffffff, 0xa0, 0xffffffff, 0x85, 0x3, 0x1ff, 0x3, 0x85bd, 0x4, 0x865, 0x6, 0xa, 0xfffffff8, 0x2, 0xfffffffa, 0x100, 0x8b, 0x80000000, 0x80000000, 0x8, 0x100, 0x2, 0x101, 0x2, 0x4, 0x3, 0x1400, 0x5, 0x1, 0x103, 0xd4e, 0x65ad, 0x0, 0x5, 0x7, 0x32, 0x5, 0xad8, 0x3, 0x4, 0x8, 0x4, 0xffffffff, 0x6, 0xffffffff, 0x5, 0x0, 0x6, 0xa0, 0x7, 0x6, 0x100, 0x100, 0x200, 0x0, 0x0, 0xffff, 0x3, 0x1, 0x2, 0x3, 0xfff, 0x2, 0x6, 0x200, 0x3, 0x47, 0x0, 0x2, 0xfffffff8, 0x8, 0x7f, 0x87ca, 0x1, 0x80000001, 0x4, 0x408, 0x401, 0xffff0000, 0xed1, 0x9, 0xfffffff7, 0xfffffffb, 0xfffffffb, 0x3, 0x2, 0x0, 0x2, 0x1, 0xffffff89, 0xfff, 0x3, 0x9, 0x5, 0x0, 0x8, 0xfffffffe, 0x7ff, 0x4, 0x5, 0x44, 0x5, 0x0, 0x8000, 0x2, 0x0, 0x8, 0x3ff, 0x405, 0x6, 0xb, 0xca43, 0x3, 0x3, 0x6, 0xfffffffc, 0x9, 0x8, 0x2, 0x8001, 0xf0000000, 0xc, 0x3, 0x3, 0x7, 0x7f, 0x5, 0x4, 0xd, 0xffffffff, 0x2, 0x7f, 0x9, 0x7, 0x8, 0x7, 0xffff, 0x1d, 0xc5, 0x9, 0x0, 0x1, 0x5, 0x0, 0x3, 0x1, 0x9, 0x2, 0x2, 0x9, 0x7, 0x40, 0x3, 0x400, 0x8, 0x2, 0x401, 0x6, 0x9982, 0x5, 0x1ff, 0x2706, 0x2, 0x8001, 0x0, 0x2, 0x400, 0x7e, 0xc806, 0xb, 0x1, 0x1, 0x7, 0x2, 0x5, 0x8, 0x2, 0x2, 0x3, 0x41, 0x3, 0x200, 0x100000c8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x6, 0x3, 0x7, 0x40, {0x4, 0x2, 0x3, 0x7, 0x6, 0x9}, {0x40, 0x2, 0x3, 0x435b, 0x5a44}, 0x8c79, 0x5, 0x6}}]]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x488}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 1.648655661s ago: executing program 6 (id=523): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xfeffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x9}, 0x100100, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x1f, 0x100, 0x8, 0xb, 0x1, 0x0, 0xac, 0x92, 0x9c, 0x1, 0x4, 0x10000, 0x0, 0xf, 0x7, 0x10000, [0x4, 0x200]}}) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000980)=ANY=[@ANYBLOB="12010102020000102505a1a440000102030109023b000310040904007303021700da052406000005240034840d240f0106000000080000e0090905000000000000000a05030210003f0835"], 0x0) 1.629709806s ago: executing program 1 (id=524): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0b00000005000000010001000a00000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000017b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1}, 0xc) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'erspan0\x00', &(0x7f0000000080)={'ip_vti0\x00', 0x0, 0x80, 0x40, 0x2a23, 0x8, {{0x12, 0x4, 0x1, 0x7, 0x48, 0x67, 0x0, 0x2, 0x29, 0x0, @broadcast, @loopback, {[@generic={0x83, 0x7, "0a5451ff69"}, @timestamp_addr={0x44, 0x14, 0xb7, 0x1, 0x9, [{@private=0xa010101, 0xbe5}, {@loopback, 0x96b6}]}, @timestamp={0x44, 0xc, 0x83, 0x0, 0x2, [0x2, 0x3]}, @rr={0x7, 0xb, 0x2f, [@local, @multicast1]}]}}}}}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000780)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x8000000, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xfff7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x2c, 0x2, {{0xfffffffe, 0x2, 0x40, 0x7, 0xe9, 0xcc36}, [@TCA_NETEM_DELAY_DIST={0xe, 0x2, "440c50becc643ee5f645"}]}}}]}, 0x5c}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000007000010010ab4be68e8da23507000000", @ANYRES32=r10, @ANYBLOB="1000018004000480080001"], 0x28}}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x42730a0f740dc38c}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)={0x170, r2, 0x500, 0x70bd25, 0x25dfdbfe, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000400)=ANY=[@ANYBLOB="5b4af5dd3aa50180c200000308060001080006040001aaaaaaaaaa734c3ada97e1e4e7c513bbac1414"], 0x0) 1.575202765s ago: executing program 5 (id=525): r0 = socket$netlink(0x10, 0x3, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x40) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@delneigh={0x30, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r1, 0x40, 0x52, 0x4}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, @NDA_VLAN={0x6, 0x5, 0xfffd}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) mkdir(&(0x7f0000000040)='./file0\x00', 0x40) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@delneigh={0x30, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r1, 0x40, 0x52, 0x4}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, @NDA_VLAN={0x6, 0x5, 0xfffd}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) (async) 1.529786796s ago: executing program 1 (id=526): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000200)={0x2, 0x4e24, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg(r0, &(0x7f0000002280)=[{{0x0, 0x0, &(0x7f0000000500)}}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000000)="f8", 0x9}], 0x1, &(0x7f0000003a00)=ANY=[@ANYBLOB="1000000000000000290080000d000000"], 0x10}}], 0x2, 0x40088c5) r1 = socket$kcm(0x2, 0x5, 0x84) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000840)='./bus\x00', 0x10, &(0x7f0000000540), 0x1, 0x7cc, &(0x7f00000022c0)="$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") perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40009, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) unshare(0x22020400) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x2c020400) sendmsg$inet(r1, &(0x7f00000006c0)={&(0x7f0000000040)={0x2, 0x8, @private=0xa010101}, 0x10, &(0x7f00000002c0)=[{&(0x7f00000000c0)="e0", 0x1}, {&(0x7f0000000580)="167ea455d2f9a1afe649ce96fbceb5a2463eb61e1d46c4bcc557dc74c5c542f9bc422f4fc63f30300584987ca41a7d323922449d99e0207cee1eb45cca32f827625653786aa3d291f5ccb3770fec7c2711f5a72d2c6649113679304c3623309e6dfb1a5ac390a0396b56ecc27448958765d95451215cde0ff2f16145f9b732e72bac798114806aa9f052aa8367edc7a1034af5274a95dbcf3650fae621c83a9eb23c3b7dcb9808429223f4befe26fb996d708b2bb366395d151c7484", 0xbc}], 0x2}, 0xc000) r2 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000300)) setsockopt$packet_int(r2, 0x107, 0x11, &(0x7f0000000340)=0x3, 0x4) r3 = syz_open_dev$rtc(0x0, 0x7, 0x200100) ioctl$RTC_VL_READ(r3, 0x80047013, 0x0) sendmsg$inet(r1, &(0x7f0000000bc0)={&(0x7f0000000100)={0x2, 0x3ff, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000280)="ec", 0x1}], 0x1}, 0x400c040) sendmsg$inet(r1, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1}, 0x8001) socket$kcm(0x10, 0x2, 0x4) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) socket$nl_audit(0x10, 0x3, 0x9) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x6, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000000085000000290000001801000000002020207b1af8ff00000000bfa10000000f2cf72cf82529a20700edfe00000007010000f8ffffffb702000008000000b7030000000000008500"/88], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_netprio_ifpriomap(r4, &(0x7f0000000040), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r5, &(0x7f0000000200)=ANY=[@ANYBLOB='gretap0 8'], 0xa) 1.522258544s ago: executing program 5 (id=527): r0 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) r2 = socket$packet(0x11, 0x2, 0x300) r3 = syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000180)='./file1\x00', 0x1218088, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x4a, 0x2d1, &(0x7f0000000c80)="$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") (async) llistxattr(0x0, &(0x7f00000001c0)=""/152, 0x98) (async) r4 = getpid() (async) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r4, 0x2, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async) connect$unix(0xffffffffffffffff, 0x0, 0x0) (async) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r5 = socket$inet(0x2, 0x3, 0x8) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x8, 0x3, 0x310, 0x0, 0xe138, 0x198, 0x198, 0x198, 0x278, 0x358, 0x358, 0x278, 0x358, 0x3, 0x0, {[{{@uncond, 0x0, 0x150, 0x198, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0004000000000000000404fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c42995560a99952bed40cf5a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000000049", 0x8}}, @common=@socket0={{0x20}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x100, 0x7ff, 0x4, 'snmp_trap\x00', {0x6}}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0xfffffffc, 0x8, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x370) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000080)="18", 0x810, 0x0, &(0x7f00000000c0)={0x11, 0xc, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240"], 0x60}}, 0x0) (async) restart_syscall() sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000030601010000000000000000014000000500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x38000016) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=ANY=[@ANYRES32=r3, @ANYRES32=r1, @ANYBLOB="890c04000000000005001000050000002c0012800b00010067726574617000001c00028005001700000000000800040003000000060003009c"], 0x54}, 0x1, 0x0, 0x0, 0x44801}, 0x0) r8 = socket$inet(0x2, 0x2, 0x0) sendmmsg$inet(r8, &(0x7f0000003380)=[{{&(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f0000001a40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @empty, @rand_addr=0x64010102}}}], 0x20}}], 0x1, 0x4040880) (async) r9 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') syz_io_uring_setup(0x79c1, &(0x7f00000003c0)={0x0, 0xe2e3, 0x40, 0x3, 0xf6, 0x0, r9}, &(0x7f0000000040), &(0x7f0000000540)) (async) writev(r9, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}, {&(0x7f0000000080)='-6', 0x3f}], 0x2) (async) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r9, 0xc0a85320, &(0x7f0000000480)={{0x3, 0x8}, 'port1\x00', 0x64, 0x1b0000, 0xffffff89, 0x0, 0xc7, 0x80000000, 0x81, 0x0, 0x7, 0x6}) 1.427788195s ago: executing program 5 (id=528): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000c3010000f100000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x13}, 0x94) r1 = fcntl$getown(r0, 0x9) capset(&(0x7f0000000100)={0x20071026, r1}, &(0x7f0000000040)={0x5, 0x10ffff, 0x66a6000, 0x6, 0x10001, 0xe}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000f9ffffff0000000000000000850000002c00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x90) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r3, r4, 0x25, 0x0, @val=@iter={0x0}}, 0x20) syz_emit_ethernet(0xdc0, &(0x7f00000000c0)=ANY=[], 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x2, 0x0, 0x0, 0xb, 0x2014, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={0x0, 0xe}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_setup(0x734c, &(0x7f0000000680)={0x0, 0x30bd, 0x2200, 0x1, 0x154}) r6 = io_uring_setup(0xfc6, &(0x7f00000002c0)={0x0, 0x6c02, 0x0, 0x1, 0x20000004}) r7 = socket(0x1e, 0x1, 0x0) connect$tipc(r7, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r7, &(0x7f0000000340), 0x2000011a) close_range(r6, 0xffffffffffffffff, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_GET(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e40)=ANY=[@ANYBLOB="00fc20241ed09b4f6c30a09f389287197b6cc0e2", @ANYRES16=0x0, @ANYBLOB], 0x270}, 0x1, 0x0, 0x0, 0x4000}, 0x40) r9 = socket(0x10, 0x803, 0x0) getsockname$packet(r9, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$nl_route(r5, 0x0, 0x80) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r8) getsockopt$PNPIPE_IFINDEX(r9, 0x113, 0x2, 0x0, &(0x7f0000000240)) syz_emit_ethernet(0x2b, &(0x7f00000003c0)=ANY=[], 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) 1.233821444s ago: executing program 5 (id=529): r0 = socket$nl_route(0x10, 0x3, 0x0) creat(&(0x7f0000000480)='./file0\x00', 0x41) lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000300)=@known='security.apparmor\x00', &(0x7f0000000380)=""/30, 0x1e) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'netdevsim0\x00'}) io_uring_setup(0x3cac, &(0x7f00000000c0)={0x0, 0xd4eb, 0x2, 0x0, 0xe8}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa175) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000100)={0x1d, r2, 0x0, {}, 0xfd}, 0x18) connect$can_j1939(r1, &(0x7f0000000080)={0x1d, r2, 0x0, {0x0, 0x0, 0x2}, 0x2}, 0x18) sendmsg$can_j1939(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000005d80)={0x0, 0x0, &(0x7f0000003f00)=[{&(0x7f00000003c0)={0x24, 0x3c, 0x2, 0x70bd2a, 0x25dfdbfd, "", [@typed={0xc, 0x3d, 0x0, 0x0, @u64=0x6}, @typed={0x8, 0x52, 0x0, 0x0, @fd=r3}]}, 0x24}, {&(0x7f0000005dc0)={0x2c, 0x3a, 0x400, 0x70bd2d, 0x25dfdbfd, "", [@nested={0x1c, 0x4f, 0x0, 0x1, [@nested={0x4, 0xe2}, @typed={0x14, 0x30, 0x0, 0x0, @ipv6=@loopback}]}]}, 0x2c}], 0x2, 0x0, 0x0, 0x44011}, 0x40830) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f0000005000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 927.756192ms ago: executing program 6 (id=530): sendmsg(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, 0x0}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f727400"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32, @ANYBLOB="28000e001c"], 0x74}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r1, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x24, r3, 0x300, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x7a5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) close(r6) 781.937552ms ago: executing program 4 (id=531): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r0) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="b64257ec7000fedbdf25100000080005000900"/30], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRESDEC, @ANYBLOB="43da2e5f"], 0x48) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x5c, r2, 0x917, 0xa7, 0x1000000, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3f}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback={0xffffffffffffffe4}}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @broadcast}}, @L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x5c}}, 0x0) 781.413141ms ago: executing program 4 (id=532): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000018c0)={'team0\x00'}) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x50}}, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_pts(0xffffffffffffffff, 0x20a881) syz_io_uring_setup(0x1e1e, &(0x7f0000000280)={0x0, 0x86f7, 0x10100, 0x0, 0x8000}, 0x0, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c03000017"], 0x34c}}, 0x0) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000180)='./file1\x00', 0x804800, &(0x7f00000002c0)=ANY=[@ANYRES8=0x0, @ANYRES32=0x0], 0xf9, 0x1213, &(0x7f0000000600)="$eJzs3E9rXFUYB+A3Y2rS1PxRa7Vd6AtuxMWlycKVIEFSkAwotRFaQbg1Ex0yzpTcITAiVldu/Ryu3Ql+g2z8DO6y6bIL8UrvNG1SU4vQZMQ+z2Luyz3nxzkHhoEz3HP33/3xq+2tqtgqh9GamorWrYi8m5HRigOvr4+v12+sr7bba1czr6xeW34nMxfe+PXTb2Yi4twnPy/8MhN7S5/t31n5fe/C3sX9P6992a2yW2V/MMwybw4Gw/JmbyE3u9V2kflRr1NWnez2q87OofZObr0dEaMs+5vzc7d2OlWVZX+U251RDgc53Bll+UXZ7WdRFDk/FzzWmSd32fjpbl3XEXV9Jp6Puq7rszEX5+KFmI+F+C4iXoyX4uU4H6/EhXg1XouLTa/TmD4AAAAAAAAAAAAAAAAAAAA8O/7p/P9iLDn/DwAAAAAAAAAAAAAAAAAAAKfg4+s31lfb7bWrmbMRvR92N3Y3xtdx+9K9j1504nIsxh/RnP4fG9dXPmivXc7GUnzfu30/f3t347kmv3qQX25eJ3A/P920HeSXx/k8mp+JuXv5reg2+ZVYjPPHj79ybH423nrzUL6Ixfjt8xhELzabsR/mv13OfP/D9iP5S00/AAAA+D8o8oFj9+9F8bj2cf7B/vrJ/w88sr+ejkvTk107EdXo6+2y1evsNEXvoJj9252TK+IUx3q6RcSduilmjja1TmjQVkx8yYeKqf/GNBRPpzgbR+9M+peJ0/DwazDpmQAAAAAAAAAAAPBvnPBzhdNxzJNl701mqQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPzFDhwLAAAAAAjzt06jYwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGCoAAP//qH3FUA==") mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x100000b, 0x2013, 0xffffffffffffffff, 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000180)=ANY=[@ANYBLOB="20000000020000"], 0x0) socket$isdn(0x22, 0x2, 0x10) socket$isdn(0x22, 0x2, 0x2) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="240000000009010200000000eeb72fe20200000508000340000000000800064000000000"], 0x24}, 0x1, 0x0, 0x0, 0x20000011}, 0x4884) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000000)=0x10002, 0x29) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000540)={0xa, 0x4e22, 0x7, @empty, 0x200}, 0x1c) socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r5, 0x29, 0x4b, &(0x7f0000000100)=0x401, 0x4) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22, 0x3, @loopback={0x100000}, 0x6}, 0x1c) listen(r5, 0x6) listen(r1, 0x0) splice(r0, &(0x7f0000000000)=0x3, r0, &(0x7f0000000040)=0x7fff, 0x3, 0x7) 679.223981ms ago: executing program 6 (id=533): r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f00000046c0), 0x0, 0x4000010) r1 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x38) prlimit64(0x0, 0xb, &(0x7f0000000000), 0x0) fcntl$setsig(r1, 0xa, 0x21) fcntl$setlease(r1, 0x400, 0x1) open$dir(&(0x7f0000000080)='./file0\x00', 0x2, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000cc0), r2) sendmsg$IEEE802154_LLSEC_ADD_DEV(r2, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="09022bbd7000fcdbdf252a000000ea14004021a67cd45e6a539746891ce005739f21b8fd0f859eb0360683d3487f4aa98be295f7b3526fabba43534d77f36ca4cb0cc0e9c40ea9831af056db1bf586240fc6d0540f7e9328d195bab84e078cb20709c4bceb76ee0de558fc3418e9eebcbceee2c26cafd11f65395885562bee0ed26cad31f62bb06487733f7db4dfa0581ba79f0e379fd198ac3685cb31a5a6a102496d5c1d7544cf2eb7ff3612a9a7ea877d259a3f86beb226de28003f99cb86727dd9b321"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8010) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r4, 0x8983, &(0x7f0000000280)) write$P9_RLERRORu(r4, &(0x7f0000000300)=ANY=[@ANYRESHEX], 0x10) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x5, [@struct={0xfffffffc, 0x4, 0x0, 0x4, 0x0, 0x0, [{0x5, 0x1, 0x2}, {0x3, 0x4, 0x99}, {0x4, 0x3, 0x1}, {0xf, 0x3, 0x3}]}]}, {0x0, [0x5f, 0x30, 0x30]}}, 0x0, 0x59}, 0x28) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="00000100", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000000000000850000008600000018410000f8ffffff00000000000000005e68000803000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x9c) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r6, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x8, &(0x7f0000001680)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x8b, 0x0, 0x0, 0x200, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x106020, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, 0xffffffffffffffff) syz_io_uring_setup(0x5c6, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) ptrace(0x10, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f0000000080)={[{@grpquota}, {@delalloc}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101a42, 0xa3) ioctl$FS_IOC_SETFLAGS(r8, 0x40086602, &(0x7f00000005c0)) pwritev2(r8, &(0x7f0000000cc0)=[{&(0x7f0000000240)=';', 0xffffffbc}], 0x1, 0xfff, 0xc, 0x4) 668.797989ms ago: executing program 1 (id=534): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000280)={[{@delalloc}, {@nodelalloc}, {@init_itable_val={'init_itable', 0x3d, 0x3}}, {@inlinecrypt}, {@data_err_ignore}, {@nodiscard}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x5, 0x557, &(0x7f0000000fc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1400000010000100000000000000e4ffffffff0901030000000000000000010000000900010073797a31000000001400000011"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@gettfilter={0x24, 0x2e, 0x400, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1, 0x3}, {0xd, 0xf}, {0xffe0, 0xa}}}, 0x24}}, 0x20004880) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) rt_sigqueueinfo(0x0, 0x21, &(0x7f0000000000)) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc) 401.797543ms ago: executing program 4 (id=535): r0 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) r1 = socket(0x10, 0x803, 0x0) (rerun: 64) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$nl_netfilter(0x10, 0x3, 0xc) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) socket(0x10, 0x3, 0x0) (async) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4480, &(0x7f0000000b40)=ANY=[], 0x83, 0x235, &(0x7f0000000280)="$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") setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) getdents64(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffdffffe, 0x2, @perf_bp={0x0, 0xb}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x1) (async) unshare(0x68040200) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r4, &(0x7f0000002200)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f0000001f00)=ANY=[@ANYBLOB="780000000301010800000000000000000a0000054400028009000340000300000c0002800500010021"], 0x78}}, 0x8000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfdffa000) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c00020008000100"], 0x3c}}, 0x0) (async) set_mempolicy(0x2, &(0x7f0000000040)=0x306, 0x9) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010001fff000000008100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000200012800b00010067656e657665000010000280060005004e24000004000e0008000a00", @ANYRES32=r2], 0x48}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) (async) getsockopt$inet_udp_int(r1, 0x11, 0xa, 0x0, &(0x7f0000000140)) 397.497002ms ago: executing program 1 (id=536): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000002c0)='./file0\x00', 0x8000, &(0x7f0000000000)=ANY=[], 0x1, 0x2d5, &(0x7f0000000900)="$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") r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x4640}, 0x2, 0x0, 0x0, 0x8084}, 0x4004) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) r7 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="230900000000000000000100000005000700000000000800090000000000060002000100000008000a000000000008001700", @ANYRES32=r7], 0x3c}}, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x48, r6, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private2={0xfc, 0x2, '\x00', 0xa}}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x49000}, 0x4014) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r3, &(0x7f00000000c0)="0002", 0xfffffffffffffc94, 0x24000000, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@journal_ioprio}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x1, 0x56a, &(0x7f00000015c0)="$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") r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r8, 0x0) openat(0xffffffffffffff9c, 0x0, 0x48042, 0x8c) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r9 = syz_io_uring_setup(0x67e5, 0x0, 0x0, 0x0) io_uring_setup(0x48a, &(0x7f0000000040)={0x0, 0xc89c, 0xc000, 0x400001, 0x2ab, 0x0, r9}) recvmsg(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000780)=""/243, 0x11000}], 0x1}, 0x142) 337.50283ms ago: executing program 5 (id=537): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f00000049c0)={0x0, 0x0, &(0x7f0000004980)={&(0x7f0000004900)={0x14, 0x3, 0x1, 0xd03, 0x0, 0x0, {0x5, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x480) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000004b00)={0x0, 0x0, &(0x7f0000004ac0)={&(0x7f0000004a40)={0x14, 0x2, 0x7, 0xa01, 0x0, 0x0, {0x1, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x40000) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x0, 0xa60, &(0x7f0000000d80)="$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") socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) fstat(r2, &(0x7f00000045c0)) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f00000000c0)={@private1}, &(0x7f0000000100)=0x14) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$pptp(0x18, 0x1, 0x2) setsockopt$sock_int(r3, 0x1, 0x3, &(0x7f0000000340)=0xffffffff, 0x4) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'veth0_to_bridge\x00'}) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001340)=@newqdisc={0x38, 0x24, 0xd0f, 0x4703d2d, 0xfffffffd, {0x60, 0x0, 0x0, r7, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xfffffff8}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000040}, 0x44080) 328.878358ms ago: executing program 4 (id=538): socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) (async) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_clone(0x8002000, &(0x7f0000000580)="e8e5947779e25e653f", 0x9, &(0x7f00000005c0), &(0x7f0000000600), &(0x7f0000000740)="f2143f6391bbf3bb190f9b49871ad570d97b253d003627d2001014ee3159fe23405594dc358349934bc1c8a6441d04567447c4011868b88c51f88c645dc6e05aa588b77a6e518d0b52cb762bc828b6af7d193bfb7cfdc47318a1") prlimit64(r1, 0xc, &(0x7f00000007c0)={0x4, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) timerfd_create(0x3, 0x80800) (async) timerfd_create(0x3, 0x80800) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) (async) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3af, 0x4}, 0x100000, 0x0, 0x0, 0x7, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80000000}, 0x1c) connect$inet6(r0, &(0x7f0000001dc0)={0xa, 0x4e20, 0x3, @dev={0xfe, 0x80, '\x00', 0x44}, 0x7ff}, 0x1c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x104) (async) r4 = creat(&(0x7f0000000140)='./file0\x00', 0x104) recvmsg$kcm(r4, &(0x7f0000000640)={&(0x7f0000000180), 0x80, &(0x7f0000000440)=[{&(0x7f0000000340)=""/251, 0x132}, {&(0x7f0000000200)=""/153, 0x99}, {&(0x7f00000004c0)=""/171, 0xab}, {&(0x7f0000000680)=""/137, 0x89}], 0x4}, 0x2000) write$binfmt_script(r3, &(0x7f0000000480), 0x4) (async) write$binfmt_script(r3, &(0x7f0000000480), 0x4) ioctl$FITHAW(r4, 0xc0045878) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0xd, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000fffffff3180100006400000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000c800000095"], &(0x7f0000000300)='GPL\x00', 0x9, 0xff6, &(0x7f0000001e00)=""/4086}, 0x94) 198.200071ms ago: executing program 6 (id=539): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x106020, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) getdents(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, 0x0, 0x40080) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x40003}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x46801}, 0x4000000) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)={0x98, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_PEERS={0x4c, 0x8, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ALLOWEDIPS={0x20, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}]}]}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x98}}, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') writev(r5, &(0x7f0000001240)=[{0x0}, {&(0x7f0000001740)="9b", 0x1}], 0x2) bind$tipc(r5, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x3}}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="800000001000390400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0dfdffff03010200600012800b00010062726964676500005000028008001b00d7ab000008001b00080000000c002300010000000100000008001c00"], 0x80}, 0x1, 0x0, 0x0, 0x840}, 0x0) 0s ago: executing program 4 (id=540): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000300)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@minixdf}, {@quota}]}, 0x3, 0x442, &(0x7f0000001180)="$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") r0 = socket$netlink(0x10, 0x3, 0x5) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000080)=0xc) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f00000000c0), 0x2, 0xbd1, &(0x7f0000001340)="$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") getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) lremovexattr(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)=@known='system.posix_acl_access\x00') sendmsg$netlink(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000840)={0x2c, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x2, 0x0, 0x0, @uid=r2}, @nested={0xb, 0x2, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0x5, 0x1, 0x0, 0x1, [@generic='8']}]}, 0x2c}], 0x1}, 0xcc000) r3 = fsopen(&(0x7f00000002c0)='exofs\x00', 0x1) fsmount(r3, 0x1, 0xf) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r0) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x38, r4, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10000}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x10001}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xe}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x840}, 0x4000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x48042, 0x0) ioctl$USBDEVFS_RESET(r5, 0x5514) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r5, 0x2000) r6 = open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x178) pwritev2(r6, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) kernel console output (not intermixed with test programs): e 2 family 0 port 6081 - 0 [ 29.881344][ T3493] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5'. [ 29.911233][ T59] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.932806][ T28] kauditd_printk_skb: 47 callbacks suppressed [ 29.932824][ T28] audit: type=1400 audit(1771961501.610:127): avc: denied { create } for pid=3479 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 29.974001][ T59] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.001298][ T28] audit: type=1400 audit(1771961501.680:128): avc: denied { create } for pid=3490 comm="syz.1.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 30.004146][ T59] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.031390][ T3493] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3493 comm=syz.4.5 [ 30.087792][ T28] audit: type=1400 audit(1771961501.770:129): avc: denied { tracepoint } for pid=3497 comm="syz.0.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 30.160132][ T28] audit: type=1400 audit(1771961501.820:130): avc: denied { create } for pid=3492 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 30.214483][ T3501] netlink: 'syz.2.3': attribute type 9 has an invalid length. [ 30.223348][ T28] audit: type=1400 audit(1771961501.820:131): avc: denied { read } for pid=3492 comm="syz.4.5" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 30.275347][ T28] audit: type=1400 audit(1771961501.850:132): avc: denied { create } for pid=3500 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 30.309919][ T28] audit: type=1400 audit(1771961501.850:133): avc: denied { write } for pid=3500 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 30.357907][ T28] audit: type=1400 audit(1771961501.850:134): avc: denied { nlmsg_write } for pid=3500 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 30.378383][ T28] audit: type=1400 audit(1771961501.850:135): avc: denied { read } for pid=3500 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 30.398418][ T28] audit: type=1400 audit(1771961501.860:136): avc: denied { bind } for pid=3490 comm="syz.1.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 30.473804][ T3510] syz.4.9 uses obsolete (PF_INET,SOCK_PACKET) [ 30.631041][ T3513] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10'. [ 30.903688][ T3521] netlink: 'syz.2.12': attribute type 1 has an invalid length. [ 31.064150][ T3522] Zero length message leads to an empty skb [ 31.299908][ T9] kernel read not supported for file /mdstat (pid: 9 comm: kworker/0:0) [ 31.320817][ T3532] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14'. [ 31.398230][ T3536] netlink: 'syz.0.16': attribute type 18 has an invalid length. [ 31.406520][ T3536] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16'. [ 31.440414][ T3536] netlink: 'syz.0.16': attribute type 18 has an invalid length. [ 31.515281][ T1691] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 31.533098][ T30] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 31.550116][ T30] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 31.570151][ T3536] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16'. [ 31.576967][ T30] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 31.600242][ T3541] loop3: detected capacity change from 0 to 512 [ 31.718798][ T3550] loop3: detected capacity change from 0 to 1024 [ 31.731379][ T3549] loop1: detected capacity change from 0 to 512 [ 31.751759][ T3550] ======================================================= [ 31.751759][ T3550] WARNING: The mand mount option has been deprecated and [ 31.751759][ T3550] and is ignored by this kernel. Remove the mand [ 31.751759][ T3550] option from the mount to silence this warning. [ 31.751759][ T3550] ======================================================= [ 31.790161][ T3528] loop2: detected capacity change from 0 to 512 [ 31.857735][ T3550] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 31.872317][ T3549] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 31.873558][ T3550] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 31.896319][ T3549] ------------[ cut here ]------------ [ 31.901823][ T3549] EA inode 11 i_nlink=2 [ 31.901838][ T3549] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x313/0x350, CPU#1: syz.1.19/3549 [ 31.916701][ T3549] Modules linked in: [ 31.920615][ T3549] CPU: 1 UID: 0 PID: 3549 Comm: syz.1.19 Not tainted syzkaller #0 PREEMPT(full) [ 31.929761][ T3549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 31.940011][ T3549] RIP: 0010:ext4_xattr_inode_update_ref+0x332/0x350 [ 31.946710][ T3549] Code: 14 61 99 ff 4c 8d 2d 1d f0 5d 05 49 8d 7e 40 e8 94 f2 b5 ff 49 8b 6e 40 4c 89 e7 e8 c8 ed b5 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 02 ff ff ff e8 7f 3b dd 03 66 66 66 66 66 66 2e [ 31.966492][ T3549] RSP: 0018:ffffc90001cb7778 EFLAGS: 00010246 [ 31.972654][ T3549] RAX: ffff888101d40a78 RBX: ffff888107a2e4a8 RCX: ffffffff81bff418 [ 31.973471][ T3550] EXT4-fs error (device loop3): ext4_map_blocks:818: inode #15: comm syz.3.20: lblock 0 mapped to illegal pblock 0 (length 1) [ 31.980702][ T3549] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff871de420 [ 31.994571][ T3528] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 32.001802][ T3549] RBP: 000000000000000b R08: 0001888107a2e45b R09: 0000000000000000 [ 32.001854][ T3549] R10: ffffc90001cb76a8 R11: 0001c90001cb76a8 R12: ffff888107a2e458 [ 32.001871][ T3549] R13: ffffffff871de420 R14: ffff888107a2e410 R15: 0000000000000001 [ 32.001888][ T3549] FS: 00007ff5320016c0(0000) GS:ffff8882ae9db000(0000) knlGS:0000000000000000 [ 32.001909][ T3549] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 32.001926][ T3549] CR2: 0000000034747865 CR3: 000000011cbbc000 CR4: 00000000003506f0 [ 32.001947][ T3549] Call Trace: [ 32.001954][ T3549] [ 32.001964][ T3549] ext4_xattr_inode_dec_ref_all+0x57c/0x880 [ 32.002038][ T3549] ? errseq_check+0x2c/0x50 [ 32.002070][ T3549] ext4_xattr_delete_inode+0x6c1/0x7a0 [ 32.002158][ T3549] ? ext4_truncate+0x92b/0xb00 [ 32.002191][ T3549] ext4_evict_inode+0xa1f/0xd60 [ 32.002316][ T3549] ? __pfx_ext4_evict_inode+0x10/0x10 [ 32.002347][ T3549] evict+0x2af/0x510 [ 32.002436][ T3549] ? __dquot_initialize+0x146/0x7c0 [ 32.002467][ T3549] iput+0x41a/0x580 [ 32.033989][ T3550] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 32.034902][ T3549] ext4_process_orphan+0x1a9/0x1c0 [ 32.044942][ T3550] EXT4-fs (loop3): This should not happen!! Data will be lost [ 32.044942][ T3550] [ 32.050536][ T3549] ext4_orphan_cleanup+0x6a8/0xa00 [ 32.078721][ T3528] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.13: invalid indirect mapped block 4294967295 (level 1) [ 32.080657][ T3549] ext4_fill_super+0x3408/0x37c0 [ 32.080691][ T3549] ? set_blocksize+0x14c/0x270 [ 32.080762][ T3549] ? setup_bdev_super+0x30e/0x370 [ 32.080796][ T3549] ? __pfx_ext4_fill_super+0x10/0x10 [ 32.080902][ T3549] get_tree_bdev_flags+0x291/0x300 [ 32.080935][ T3549] ? __pfx_ext4_fill_super+0x10/0x10 [ 32.080959][ T3549] get_tree_bdev+0x1f/0x30 [ 32.081026][ T3549] ext4_get_tree+0x1c/0x30 [ 32.081047][ T3549] vfs_get_tree+0x57/0x1d0 [ 32.081082][ T3549] do_new_mount+0x288/0x8d0 [ 32.081105][ T3549] path_mount+0x4d0/0xbc0 [ 32.081128][ T3549] __se_sys_mount+0x28c/0x2e0 [ 32.107118][ T3528] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 32.109219][ T3549] __x64_sys_mount+0x67/0x80 [ 32.109250][ T3549] x64_sys_call+0x2d61/0x3020 [ 32.109312][ T3549] do_syscall_64+0x12c/0x370 [ 32.109351][ T3549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 32.109377][ T3549] RIP: 0033:0x7ff5335dd8ca [ 32.109396][ T3549] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 32.109416][ T3549] RSP: 002b:00007ff532000e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 32.109494][ T3549] RAX: ffffffffffffffda RBX: 00007ff532000ee0 RCX: 00007ff5335dd8ca [ 32.109537][ T3549] RDX: 00002000000009c0 RSI: 0000200000000540 RDI: 00007ff532000ea0 [ 32.109554][ T3549] RBP: 00002000000009c0 R08: 00007ff532000ee0 R09: 0000000000800718 [ 32.109570][ T3549] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000540 [ 32.109585][ T3549] R13: 00007ff532000ea0 R14: 000000000000048d R15: 0000200000000200 [ 32.109605][ T3549] [ 32.123146][ T3550] EXT4-fs error (device loop3): ext4_map_blocks:776: inode #15: comm syz.3.20: lblock 0 mapped to illegal pblock 0 (length 1) [ 32.127066][ T3549] ---[ end trace 0000000000000000 ]--- [ 32.165499][ T3528] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.13: invalid indirect mapped block 4294967295 (level 1) [ 32.172952][ T3549] EXT4-fs (loop1): 1 orphan inode deleted [ 32.177021][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 32.182458][ T3549] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.381110][ C0] EXT4-fs (loop2): initial error at time 1771961503: ext4_free_branches:1023: inode 11 [ 32.391090][ C0] EXT4-fs (loop2): last error at time 1771961503: ext4_free_branches:1023: inode 11 [ 32.405722][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 32.406562][ T3528] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 32.441589][ T3528] EXT4-fs (loop2): 2 truncates cleaned up [ 32.476844][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.484749][ T3528] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.509125][ T3566] mmap: syz.3.24 (3566) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 32.631765][ T3582] syz.1.28 (3582) used greatest stack depth: 9328 bytes left [ 32.733974][ T3586] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma? [ 32.747027][ T3586] SELinux: Context âŒ_Ôø·Áü v‘x% is not valid (left unmapped). [ 32.768723][ T3528] syz.2.13 (3528) used greatest stack depth: 8776 bytes left [ 32.791075][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.807274][ T3574] loop3: detected capacity change from 0 to 512 [ 32.964799][ T3574] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.975953][ T3603] netlink: 48 bytes leftover after parsing attributes in process `syz.4.36'. [ 32.981794][ T3574] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.998676][ T3600] loop2: detected capacity change from 0 to 512 [ 33.000769][ T3600] EXT4-fs: inline encryption not supported [ 33.028333][ T3600] EXT4-fs: Ignoring removed i_version option [ 33.042822][ T3600] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 33.042876][ T3600] EXT4-fs: failed to create workqueue [ 33.058790][ T3574] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 33.075195][ T3598] loop1: detected capacity change from 0 to 512 [ 33.083879][ T3600] EXT4-fs (loop2): mount failed [ 33.113239][ T3608] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 33.132470][ T3603] loop4: detected capacity change from 0 to 512 [ 33.168089][ T3613] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 33.202285][ T3598] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.230325][ T3598] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.270161][ T3603] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.275796][ T3598] netlink: 488 bytes leftover after parsing attributes in process `syz.1.34'. [ 33.300274][ T3613] netlink: 104 bytes leftover after parsing attributes in process `syz.2.37'. [ 33.311640][ T3603] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.347705][ T3618] netlink: 12 bytes leftover after parsing attributes in process `syz.2.38'. [ 33.360369][ T3618] netlink: 12 bytes leftover after parsing attributes in process `syz.2.38'. [ 33.360369][ T12] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 33.378237][ T12] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 33.401764][ T12] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 33.412692][ T12] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 33.423639][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.480635][ T3627] loop3: detected capacity change from 0 to 512 [ 33.487535][ T3627] EXT4-fs: Ignoring removed bh option [ 33.497217][ T3627] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 33.510942][ T3627] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 33.526559][ T3627] EXT4-fs (loop3): 1 truncate cleaned up [ 33.537350][ T3627] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.537671][ T3636] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=3636 comm=syz.0.42 [ 33.563209][ T3632] loop2: detected capacity change from 0 to 128 [ 33.593032][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.650960][ T3641] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.725303][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.780920][ T3654] EXT4-fs: inline encryption not supported [ 33.787331][ T3654] EXT4-fs: Ignoring removed nobh option [ 33.793251][ T3654] EXT4-fs: Ignoring removed bh option [ 33.829481][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.842395][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.852100][ T3654] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.052071][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.159159][ T3696] capability: warning: `syz.1.59' uses 32-bit capabilities (legacy support in use) [ 34.195404][ T3701] rock: directory entry would overflow storage [ 34.203474][ T3701] rock: sig=0x4654, size=5, remaining=4 [ 34.311397][ T3705] EXT4-fs: Ignoring removed nobh option [ 34.320147][ T3705] EXT4-fs (loop1): orphan cleanup on readonly fs [ 34.328408][ T3705] EXT4-fs warning (device loop1): ext4_xattr_inode_get:560: inode #11: comm syz.1.62: EA inode hash validation failed [ 34.341270][ T3705] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 34.355227][ T3705] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #15: comm syz.1.62: corrupted inode contents [ 34.367398][ T3705] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 34.367672][ T3705] EXT4-fs error (device loop1): ext4_dirty_inode:6450: inode #15: comm syz.1.62: mark_inode_dirty error [ 34.377004][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 34.377035][ C0] EXT4-fs (loop1): initial error at time 1771961506: ext4_do_update_inode:5569: inode 15 [ 34.377065][ C0] EXT4-fs (loop1): last error at time 1771961506: ext4_do_update_inode:5569: inode 15 [ 34.414653][ T3705] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 34.415109][ T3705] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #15: comm syz.1.62: corrupted inode contents [ 34.436195][ T3705] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 34.436461][ T3705] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2999: inode #15: comm syz.1.62: mark_inode_dirty error [ 34.457564][ T3705] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 34.457884][ T3705] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3002: inode #15: comm syz.1.62: mark inode dirty (error -117) [ 34.479896][ T3705] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 34.480322][ T3705] EXT4-fs warning (device loop1): ext4_evict_inode:275: xattr delete (err -117) [ 34.498737][ T3705] EXT4-fs (loop1): 1 orphan inode deleted [ 34.505284][ T3705] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 34.529498][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.604611][ T3715] Attempt to read inode for relocated directory [ 34.687966][ T3721] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.911931][ T3736] __nla_validate_parse: 2 callbacks suppressed [ 34.911948][ T3736] netlink: 12 bytes leftover after parsing attributes in process `syz.4.73'. [ 34.982621][ T28] kauditd_printk_skb: 83 callbacks suppressed [ 34.982638][ T28] audit: type=1400 audit(1771961506.650:220): avc: denied { name_bind } for pid=3734 comm="syz.0.75" src=18464 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 35.023487][ T3745] netlink: 'syz.3.77': attribute type 2 has an invalid length. [ 35.031088][ T3745] netlink: 40 bytes leftover after parsing attributes in process `syz.3.77'. [ 35.050030][ T28] audit: type=1400 audit(1771961506.730:221): avc: denied { name_bind } for pid=3742 comm="syz.0.76" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 35.087485][ T3748] netlink: 8 bytes leftover after parsing attributes in process `syz.0.78'. [ 35.097307][ T3748] netlink: 4 bytes leftover after parsing attributes in process `syz.0.78'. [ 35.103454][ T28] audit: type=1400 audit(1771961506.740:222): avc: denied { read } for pid=3729 comm="syz.4.73" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 35.212689][ T3752] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #11: comm syz.3.81: ea_inode with extended attributes [ 35.244420][ T3752] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 35.244540][ T3752] EXT4-fs (loop3): Remounting filesystem read-only [ 35.254103][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 35.254124][ C0] EXT4-fs (loop3): initial error at time 1771961506: ext4_xattr_inode_iget:441: inode 11 [ 35.254158][ C0] EXT4-fs (loop3): last error at time 1771961506: ext4_xattr_inode_iget:441: inode 11 [ 35.290777][ T3752] EXT4-fs warning (device loop3): ext4_evict_inode:275: xattr delete (err -30) [ 35.305933][ T3752] EXT4-fs (loop3): 1 orphan inode deleted [ 35.313164][ T3752] EXT4-fs (loop3): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.336402][ T50] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 35.372834][ T28] audit: type=1400 audit(1771961507.050:223): avc: denied { nlmsg_read } for pid=3751 comm="syz.3.81" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 35.374786][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.394964][ T50] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.414972][ T3316] EXT4-fs (loop3): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 35.461274][ T28] audit: type=1400 audit(1771961507.140:224): avc: denied { setopt } for pid=3762 comm="syz.1.82" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 35.497446][ T3765] netlink: 8 bytes leftover after parsing attributes in process `syz.4.84'. [ 35.512879][ T28] audit: type=1400 audit(1771961507.190:225): avc: denied { create } for pid=3760 comm="syz.3.83" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=rawip_socket permissive=1 [ 35.535630][ T50] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 35.548674][ T28] audit: type=1400 audit(1771961507.190:226): avc: denied { create } for pid=3760 comm="syz.3.83" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=icmp_socket permissive=1 [ 35.551213][ T50] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.568661][ T28] audit: type=1400 audit(1771961507.190:227): avc: denied { ioctl } for pid=3760 comm="syz.3.83" path="socket:[5776]" dev="sockfs" ino=5776 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=icmp_socket permissive=1 [ 35.608740][ T28] audit: type=1400 audit(1771961507.190:228): avc: denied { module_request } for pid=3753 comm="syz-executor" kmod="nr5" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 35.630460][ T28] audit: type=1400 audit(1771961507.220:229): avc: denied { read } for pid=3762 comm="syz.1.82" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 35.653928][ T3765] bridge0: entered promiscuous mode [ 35.677646][ T50] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 35.692524][ T50] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.747870][ T3782] 9p: Could not find request transport: uni^ek}¨útoرÞ—½Òò)ê&KªpñJwÍs ¶A²ßÌ4}(3‰…†ëÝ’Ù [ 35.782908][ T3783] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 35.817615][ T50] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 35.845009][ T50] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.852917][ T3783] ext4 filesystem being mounted at /9/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 35.970570][ T3753] chnl_net:caif_netlink_parms(): no params data found [ 35.984296][ T3788] EXT4-fs: Ignoring removed mblk_io_submit option [ 36.034000][ T3788] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 36.051180][ T50] bridge_slave_1: left allmulticast mode [ 36.057490][ T50] bridge_slave_1: left promiscuous mode [ 36.064158][ T3788] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.075052][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.084380][ T50] bridge_slave_0: left allmulticast mode [ 36.090195][ T50] bridge_slave_0: left promiscuous mode [ 36.096674][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.201388][ T3783] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 36.215398][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 36.234409][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 36.244228][ T50] bond0 (unregistering): Released all slaves [ 36.282659][ T3753] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.290445][ T3753] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.322878][ T3753] bridge_slave_0: entered allmulticast mode [ 36.329363][ T3753] bridge_slave_0: entered promiscuous mode [ 36.338100][ T3753] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.345496][ T3753] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.353187][ T3753] bridge_slave_1: entered allmulticast mode [ 36.359693][ T3753] bridge_slave_1: entered promiscuous mode [ 36.421352][ T50] hsr_slave_0: left promiscuous mode [ 36.440794][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 36.454467][ T50] hsr_slave_1: left promiscuous mode [ 36.460099][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 36.490924][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 36.542697][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 36.550224][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 36.577406][ T50] veth1_macvtap: left promiscuous mode [ 36.594991][ T50] veth0_macvtap: left promiscuous mode [ 36.595547][ T3839] netlink: 20 bytes leftover after parsing attributes in process `syz.1.93'. [ 36.600603][ T50] veth1_vlan: left promiscuous mode [ 36.632923][ T50] veth0_vlan: left promiscuous mode [ 36.781967][ T50] team0 (unregistering): Port device team_slave_1 removed [ 36.814466][ T50] team0 (unregistering): Port device team_slave_0 removed [ 36.860313][ T3848] set_capacity_and_notify: 10 callbacks suppressed [ 36.860410][ T3848] loop0: detected capacity change from 0 to 164 [ 36.881920][ T3848] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 36.896660][ T3839] bridge1: entered promiscuous mode [ 36.918588][ T3839] bridge1: entered allmulticast mode [ 36.925046][ T3853] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 36.933513][ T3853] Symlink component flag not implemented [ 36.939186][ T3853] Symlink component flag not implemented [ 36.951509][ T3753] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.957211][ T3853] Symlink component flag not implemented (7) [ 36.981753][ T3753] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.991623][ T3853] Symlink component flag not implemented (116) [ 36.992495][ T3858] netlink: 4 bytes leftover after parsing attributes in process `syz.3.96'. [ 37.017915][ T3859] netlink: 12 bytes leftover after parsing attributes in process `syz.3.96'. [ 37.041999][ T3753] team0: Port device team_slave_0 added [ 37.057904][ T3860] netlink: 12 bytes leftover after parsing attributes in process `syz.3.96'. [ 37.068514][ T3753] team0: Port device team_slave_1 added [ 37.099057][ T3753] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.123231][ T3753] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.152609][ T3753] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.164759][ T3753] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.204520][ T3753] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.239947][ T3753] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.345891][ T3753] hsr_slave_0: entered promiscuous mode [ 37.352147][ T3753] hsr_slave_1: entered promiscuous mode [ 37.358328][ T3753] debugfs: 'hsr0' already exists in 'hsr' [ 37.364770][ T3753] Cannot create hsr debugfs directory [ 37.376961][ T3890] SET target dimension over the limit! [ 37.470661][ T3898] loop1: detected capacity change from 0 to 128 [ 37.631935][ T3912] syz.1.102: attempt to access beyond end of device [ 37.631935][ T3912] loop1: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 37.647665][ T3753] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 37.667046][ T3753] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 37.679879][ T3910] xt_hashlimit: size too large, truncated to 1048576 [ 37.697090][ T3753] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 37.712825][ T3912] syz.1.102: attempt to access beyond end of device [ 37.712825][ T3912] loop1: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 37.728475][ T3753] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 37.741717][ T3912] syz.1.102: attempt to access beyond end of device [ 37.741717][ T3912] loop1: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 37.780004][ T3913] netlink: 80 bytes leftover after parsing attributes in process `syz.1.102'. [ 37.796583][ T3912] syz.1.102: attempt to access beyond end of device [ 37.796583][ T3912] loop1: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 37.833330][ T3912] syz.1.102: attempt to access beyond end of device [ 37.833330][ T3912] loop1: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 37.871041][ T3753] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.901155][ T3753] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.923893][ T3912] syz.1.102: attempt to access beyond end of device [ 37.923893][ T3912] loop1: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 37.924950][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.944369][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.978007][ T3753] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 37.988837][ T3753] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.012815][ T3912] syz.1.102: attempt to access beyond end of device [ 38.012815][ T3912] loop1: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 38.034732][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.041840][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.106418][ T3912] syz.1.102: attempt to access beyond end of device [ 38.106418][ T3912] loop1: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 38.145681][ T3912] syz.1.102: attempt to access beyond end of device [ 38.145681][ T3912] loop1: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 38.159790][ T3912] syz.1.102: attempt to access beyond end of device [ 38.159790][ T3912] loop1: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 38.180956][ T3753] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.512429][ T3963] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 38.547449][ T3967] loop1: detected capacity change from 0 to 512 [ 38.600425][ T3967] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 38.609668][ T3753] veth0_vlan: entered promiscuous mode [ 38.645159][ T3967] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.113: invalid indirect mapped block 2683928664 (level 1) [ 38.661164][ T3753] veth1_vlan: entered promiscuous mode [ 38.667831][ T3967] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 38.672751][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 38.688376][ C0] EXT4-fs (loop1): initial error at time 1771961510: ext4_free_branches:1023: inode 13 [ 38.698115][ C0] EXT4-fs (loop1): last error at time 1771961510: ext4_free_branches:1023: inode 13 [ 38.707669][ T3967] EXT4-fs (loop1): Remounting filesystem read-only [ 38.714539][ T3967] EXT4-fs (loop1): 1 truncate cleaned up [ 38.720594][ T3967] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.745770][ T3753] veth0_macvtap: entered promiscuous mode [ 38.763292][ T3753] veth1_macvtap: entered promiscuous mode [ 38.803166][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.817372][ T3753] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.829621][ T3753] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.847520][ T262] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.859891][ T262] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.878168][ T3988] tipc: Started in network mode [ 38.883270][ T3988] tipc: Node identity 5208eb7a86b9, cluster identity 4711 [ 38.902960][ T3988] tipc: Enabled bearer , priority 0 [ 38.910333][ T262] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.945207][ T3988] syzkaller0: entered promiscuous mode [ 38.950983][ T3988] syzkaller0: entered allmulticast mode [ 38.965106][ T262] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.040369][ T3991] tipc: Resetting bearer [ 39.112983][ T3993] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 39.172308][ T3986] loop3: detected capacity change from 0 to 512 [ 39.251866][ T3986] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 39.329960][ T3986] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz.3.116: invalid block [ 39.363840][ T3986] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 39.367489][ T3986] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.116: invalid indirect mapped block 4294967295 (level 1) [ 39.377828][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 39.378174][ C0] EXT4-fs (loop3): initial error at time 1771961511: ext4_get_branch:178: inode 11: block 4294967295 [ 39.378507][ C0] EXT4-fs (loop3): last error at time 1771961511: ext4_get_branch:178: inode 11: block 4294967295 [ 39.430114][ T3986] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 39.431624][ T3986] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.116: invalid indirect mapped block 4294967295 (level 1) [ 39.471114][ T3986] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 39.475034][ T3986] EXT4-fs (loop3): 2 truncates cleaned up [ 39.497705][ T4014] loop5: detected capacity change from 0 to 512 [ 39.499755][ T3986] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.522004][ T4014] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 39.578614][ T4014] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043c11c, mo2=0002] [ 39.622249][ T4014] System zones: 1-12 [ 39.638971][ T4014] EXT4-fs error (device loop5): ext4_iget_extra_inode:5025: inode #15: comm syz.5.124: corrupted in-inode xattr: e_value size too large [ 39.670510][ T4020] loop4: detected capacity change from 0 to 164 [ 39.710568][ T3988] tipc: Resetting bearer [ 39.727148][ T3988] tipc: Disabling bearer [ 39.737845][ T4014] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 39.741090][ T4014] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.124: couldn't read orphan inode 15 (err -117) [ 39.750289][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 39.750311][ C0] EXT4-fs (loop5): initial error at time 1771961511: ext4_iget_extra_inode:5025: inode 15 [ 39.750344][ C0] EXT4-fs (loop5): last error at time 1771961511: ext4_iget_extra_inode:5025: inode 15 [ 39.808595][ T4014] loop5: lost filesystem error report for type 5 error -117 [ 39.809483][ T4014] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.843501][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.895264][ T4033] loop3: detected capacity change from 0 to 512 [ 39.912575][ T4038] xt_hashlimit: max too large, truncated to 1048576 [ 39.921359][ T4033] EXT4-fs: Ignoring removed bh option [ 39.947783][ T4033] EXT4-fs: Ignoring removed mblk_io_submit option [ 39.990040][ T4033] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 40.019688][ T4033] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 40.038279][ T4049] loop4: detected capacity change from 0 to 512 [ 40.039685][ T4033] EXT4-fs (loop3): orphan cleanup on readonly fs [ 40.061621][ T4033] __quota_error: 55 callbacks suppressed [ 40.061639][ T4033] Quota error (device loop3): do_insert_tree: Free block already used in tree: block 4 [ 40.077184][ T4033] Quota error (device loop3): qtree_write_dquot: Error -5 occurred while creating quota [ 40.087198][ T4033] EXT4-fs error (device loop3): ext4_acquire_dquot:7001: comm syz.3.127: Failed to acquire dquot type 1 [ 40.087582][ T4049] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 40.098886][ T4033] loop3: lost filesystem error report for type 5 error -5 [ 40.111620][ T4033] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.127: Invalid block bitmap block 0 in block_group 0 [ 40.118803][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 40.118843][ C1] EXT4-fs (loop3): last error at time 1771961511: ext4_acquire_dquot:7001 [ 40.142934][ T4049] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 40.147691][ T4033] loop3: lost filesystem error report for type 5 error -117 [ 40.156056][ T4033] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.127: Invalid block bitmap block 0 in block_group 0 [ 40.192057][ T4049] EXT4-fs (loop4): orphan cleanup on readonly fs [ 40.194992][ T4033] loop3: lost filesystem error report for type 5 error -117 [ 40.198724][ T4033] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.127: Invalid block bitmap block 0 in block_group 0 [ 40.215151][ T4053] loop1: detected capacity change from 0 to 512 [ 40.221241][ T4033] loop3: lost filesystem error report for type 5 error -117 [ 40.225956][ T4033] Quota error (device loop3): write_blk: dquota write failed [ 40.228430][ T4049] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.130: bad orphan inode 15 [ 40.251007][ T4033] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 40.269606][ T4033] EXT4-fs error (device loop3): ext4_acquire_dquot:7001: comm syz.3.127: Failed to acquire dquot type 1 [ 40.280914][ T4049] loop4: lost filesystem error report for type 5 error -117 [ 40.281134][ T4049] ext4_test_bit(bit=14, block=18) = 1 [ 40.288447][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 40.288463][ C0] EXT4-fs (loop4): initial error at time 1771961511: ext4_orphan_get:1417 [ 40.288479][ C0] EXT4-fs (loop4): last error at time 1771961511: ext4_orphan_get:1417 [ 40.313152][ T4033] loop3: lost filesystem error report for type 5 error -28 [ 40.317938][ T4049] is_bad_inode(inode)=0 [ 40.325802][ T4033] Quota error (device loop3): write_blk: dquota write failed [ 40.337769][ T4033] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 40.347741][ T4033] EXT4-fs error (device loop3): ext4_acquire_dquot:7001: comm syz.3.127: Failed to acquire dquot type 1 [ 40.359347][ T4033] loop3: lost filesystem error report for type 5 error -28 [ 40.359737][ T4033] EXT4-fs (loop3): 1 orphan inode deleted [ 40.360352][ T4053] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #3: comm syz.1.131: corrupted inode contents [ 40.384880][ T4053] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 40.385283][ T4053] EXT4-fs error (device loop1): ext4_dirty_inode:6450: inode #3: comm syz.1.131: mark_inode_dirty error [ 40.387363][ T4049] NEXT_ORPHAN(inode)=1023 [ 40.394344][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 40.394368][ C0] EXT4-fs (loop1): initial error at time 1771961512: ext4_do_update_inode:5569: inode 3 [ 40.425995][ C0] EXT4-fs (loop1): last error at time 1771961512: ext4_do_update_inode:5569: inode 3 [ 40.428674][ T4049] max_ino=32 [ 40.435848][ T4053] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 40.439682][ T4033] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 40.461858][ T4053] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #3: comm syz.1.131: corrupted inode contents [ 40.470134][ T3753] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.482691][ T4053] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 40.483048][ T4049] i_nlink=0 [ 40.495522][ T4053] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #3: comm syz.1.131: mark_inode_dirty error [ 40.515738][ T4053] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 40.516949][ T4053] Quota error (device loop1): write_blk: dquota write failed [ 40.535031][ T4033] __nla_validate_parse: 7 callbacks suppressed [ 40.535126][ T4033] netlink: 176 bytes leftover after parsing attributes in process `syz.3.127'. [ 40.539322][ T4053] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 40.560413][ T4049] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2970: inode #15: comm syz.4.130: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 40.577329][ T28] audit: type=1400 audit(1771961512.250:285): avc: denied { read } for pid=4056 comm="syz.5.132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 40.596575][ T4053] EXT4-fs error (device loop1): ext4_acquire_dquot:7001: comm syz.1.131: Failed to acquire dquot type 0 [ 40.607815][ T4049] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 40.607970][ T4049] EXT4-fs warning (device loop4): ext4_evict_inode:275: xattr delete (err -117) [ 40.626529][ T4053] loop1: lost filesystem error report for type 5 error -117 [ 40.626865][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.627329][ T4049] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 40.655379][ T4053] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #16: comm syz.1.131: corrupted inode contents [ 40.667334][ T4053] EXT4-fs error (device loop1): ext4_dirty_inode:6450: inode #16: comm syz.1.131: mark_inode_dirty error [ 40.712137][ T4053] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #16: comm syz.1.131: corrupted inode contents [ 40.724361][ T4053] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #16: comm syz.1.131: mark_inode_dirty error [ 40.724564][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.736350][ T4053] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #16: comm syz.1.131: corrupted inode contents [ 40.785315][ T4053] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 40.794103][ T4053] loop1: lost filesystem error report for type 5 error -117 [ 40.794267][ T4053] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #16: comm syz.1.131: corrupted inode contents [ 40.815335][ T4053] EXT4-fs error (device loop1): ext4_truncate:4587: inode #16: comm syz.1.131: mark_inode_dirty error [ 40.829958][ T4053] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 40.839730][ T4053] EXT4-fs (loop1): 1 truncate cleaned up [ 40.856981][ T4066] loop0: detected capacity change from 0 to 512 [ 40.860324][ T4053] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.884955][ T4053] ext4 filesystem being mounted at /35/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.898536][ T4066] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 40.909773][ T4066] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043c11c, mo2=0002] [ 40.918011][ T4066] System zones: 1-12 [ 40.924277][ T4066] EXT4-fs error (device loop0): ext4_iget_extra_inode:5025: inode #15: comm syz.0.136: corrupted in-inode xattr: e_value size too large [ 40.939064][ T4066] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.136: couldn't read orphan inode 15 (err -117) [ 40.950863][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 40.950883][ C1] EXT4-fs (loop0): initial error at time 1771961512: ext4_iget_extra_inode:5025: inode 15 [ 40.950919][ C1] EXT4-fs (loop0): last error at time 1771961512: ext4_iget_extra_inode:5025: inode 15 [ 40.978656][ T4066] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.016822][ T4053] EXT4-fs warning (device loop1): ext4_es_cache_extent:1082: inode #3: comm syz.1.131: ES cache extent failed: add [1,1,41,0x1] conflict with existing [1,-2,576460752303423487,0x18] [ 41.016822][ T4053] [ 41.038554][ T28] audit: type=1400 audit(1771961512.700:286): avc: denied { setattr } for pid=4052 comm="syz.1.131" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 41.068353][ T4079] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.134'. [ 41.074394][ T4053] netlink: 8 bytes leftover after parsing attributes in process `syz.1.131'. [ 41.083814][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.086473][ T4053] netlink: 8 bytes leftover after parsing attributes in process `syz.1.131'. [ 41.096121][ T4074] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.134'. [ 41.184202][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.244551][ T4091] netlink: 20 bytes leftover after parsing attributes in process `syz.1.141'. [ 41.254208][ T4083] loop0: p1 < > p2 p4 < p5 > [ 41.258959][ T4083] loop0: partition table partially beyond EOD, truncated [ 41.267308][ T4085] netlink: 'syz.3.140': attribute type 1 has an invalid length. [ 41.280242][ T4085] 8021q: adding VLAN 0 to HW filter on device bond1 [ 41.285851][ T4083] loop0: p1 start 134217728 is beyond EOD, truncated [ 41.294068][ T4083] loop0: p2 size 591360 extends beyond EOD, truncated [ 41.308370][ T4083] loop0: p5 size 591360 extends beyond EOD, truncated [ 41.320264][ T4096] netlink: 8 bytes leftover after parsing attributes in process `syz.4.143'. [ 41.359651][ T4098] netlink: 12 bytes leftover after parsing attributes in process `syz.4.145'. [ 41.397647][ T4086] bond1: (slave veth3): Enslaving as an active interface with a down link [ 41.422885][ T4107] netlink: 15678 bytes leftover after parsing attributes in process `syz.4.145'. [ 41.465412][ T4086] bond1: (slave dummy0): making interface the new active one [ 41.483684][ T4086] dummy0: entered promiscuous mode [ 41.533517][ T4086] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 41.648665][ T4127] usb usb7: usbfs: interface 0 claimed by hub while 'syz.4.151' resets device [ 41.662082][ T4092] bond1 (unregistering): (slave veth3): Releasing active interface [ 41.679458][ T4129] EXT4-fs: Ignoring removed nomblk_io_submit option [ 41.702104][ T4129] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.151: iget: bad extended attribute block 262144 [ 41.716986][ T4092] bond1 (unregistering): (slave dummy0): Releasing active interface [ 41.725298][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 41.725331][ C1] EXT4-fs (loop4): initial error at time 1771961513: ext4_orphan_get:1391: inode 15 [ 41.725402][ C1] EXT4-fs (loop4): last error at time 1771961513: ext4_orphan_get:1391: inode 15 [ 41.743170][ T4129] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.151: couldn't read orphan inode 15 (err -117) [ 41.764629][ T4092] bond1 (unregistering): Released all slaves [ 41.775675][ T4129] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.917261][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 41.917298][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop0p5, 10) failed: No such file or directory [ 41.918654][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 41.918880][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.006266][ T4144] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 42.019931][ T4144] team0: Port device batadv1 added [ 42.121828][ T4166] netlink: 28 bytes leftover after parsing attributes in process `syz.1.160'. [ 42.157222][ T4164] 9p: Bad value for 'rfdno' [ 42.332607][ T4178] process 'syz.3.159' launched './file1' with NULL argv: empty string added [ 43.122498][ T4210] set_capacity_and_notify: 2 callbacks suppressed [ 43.122515][ T4210] loop3: detected capacity change from 0 to 164 [ 43.139047][ T4207] loop0: detected capacity change from 0 to 764 [ 43.166322][ T4211] Symlink component flag not implemented [ 43.175261][ T4214] loop4: detected capacity change from 0 to 128 [ 43.179210][ T4207] Symlink component flag not implemented (116) [ 43.370839][ T4224] bond1: option arp_all_targets: invalid value (262144) [ 44.881899][ T4232] loop4: detected capacity change from 0 to 1024 [ 44.888611][ T4232] EXT4-fs: Ignoring removed bh option [ 44.972790][ T4232] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal [ 44.994533][ T4224] bond1 (unregistering): Released all slaves [ 45.070828][ T4249] loop3: detected capacity change from 0 to 2048 [ 45.128173][ T3302] Alternate GPT is invalid, using primary GPT. [ 45.128285][ T3302] loop3: p2 p3 p7 [ 45.337011][ T4249] Alternate GPT is invalid, using primary GPT. [ 45.337243][ T4249] loop3: p2 p3 p7 [ 45.353417][ T28] kauditd_printk_skb: 50 callbacks suppressed [ 45.353435][ T28] audit: type=1400 audit(1771961517.040:337): avc: denied { read write } for pid=4244 comm="syz.3.178" name="loop3p3" dev="devtmpfs" ino=683 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 45.353640][ T28] audit: type=1400 audit(1771961517.040:338): avc: denied { open } for pid=4244 comm="syz.3.178" path="/dev/loop3p3" dev="devtmpfs" ino=683 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 45.368305][ T4246] syzkaller0: tun_chr_ioctl cmd 1074812118 [ 45.368370][ T4246] syzkaller0: tun_chr_ioctl cmd 1074812117 [ 45.368490][ T4246] syzkaller0: tun_chr_ioctl cmd 1074025681 [ 45.370094][ T4246] netlink: 'syz.3.178': attribute type 1 has an invalid length. [ 45.568539][ T4257] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 45.659005][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 45.660917][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 45.663303][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 45.741527][ T4269] syzkaller0: entered promiscuous mode [ 45.741621][ T4269] syzkaller0: entered allmulticast mode [ 45.747898][ T4269] erspan0: mtu less than device minimum [ 45.821166][ T4277] loop4: detected capacity change from 0 to 2048 [ 45.869252][ T3302] loop4: p1 < > p3 < > p4 < > [ 45.869264][ T3302] loop4: partition table partially beyond EOD, truncated [ 45.869322][ T3302] loop4: p1 start 3405774849 is beyond EOD, truncated [ 45.869437][ T3302] loop4: p3 start 2304 is beyond EOD, truncated [ 45.874428][ T28] audit: type=1400 audit(1771961517.550:339): avc: denied { allowed } for pid=4278 comm="syz.3.187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 45.945936][ T4280] loop3: detected capacity change from 0 to 2048 [ 45.947647][ T4277] loop4: p1 < > p3 < > p4 < > [ 45.947660][ T4277] loop4: partition table partially beyond EOD, truncated [ 45.947785][ T4277] loop4: p1 start 3405774849 is beyond EOD, truncated [ 45.947826][ T4277] loop4: p3 start 2304 is beyond EOD, truncated [ 45.952513][ T4280] EXT4-fs: Ignoring removed orlov option [ 45.952542][ T4280] EXT4-fs: Ignoring removed oldalloc option [ 45.960865][ T4280] EXT4-fs (loop3): filesystem too large to mount safely on this system [ 45.968576][ T28] audit: type=1400 audit(1771961517.650:340): avc: denied { mounton } for pid=4278 comm="syz.3.187" path="/38/file0" dev="tmpfs" ino=232 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 45.968605][ T4280] 9p: Bad value for 'rfdno' [ 45.983412][ T4280] xfrm0 speed is unknown, defaulting to 1000 [ 45.984034][ T4280] xfrm0 speed is unknown, defaulting to 1000 [ 45.984356][ T4280] xfrm0 speed is unknown, defaulting to 1000 [ 46.007167][ T4282] netlink: 'syz.5.188': attribute type 1 has an invalid length. [ 46.010296][ T4282] vlan2: entered promiscuous mode [ 46.010316][ T4282] veth1_to_batadv: entered promiscuous mode [ 46.010423][ T4282] vlan2: entered allmulticast mode [ 46.010440][ T4282] veth1_to_batadv: entered allmulticast mode [ 46.038316][ T28] audit: type=1400 audit(1771961517.720:341): avc: denied { create } for pid=4276 comm="syz.4.186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 46.103187][ T28] audit: type=1400 audit(1771961517.790:342): avc: denied { read } for pid=4278 comm="syz.3.187" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 46.103218][ T28] audit: type=1400 audit(1771961517.790:343): avc: denied { open } for pid=4278 comm="syz.3.187" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 46.155001][ T4280] infiniband syz1: set active [ 46.155054][ T4280] infiniband syz1: added xfrm0 [ 46.206307][ T4280] RDS/IB: syz1: added [ 46.206355][ T4280] smc: adding ib device syz1 with port count 1 [ 46.206371][ T4280] smc: ib device syz1 port 1 has no pnetid [ 46.220391][ T3378] xfrm0 speed is unknown, defaulting to 1000 [ 46.220465][ T4280] xfrm0 speed is unknown, defaulting to 1000 [ 46.222799][ T3392] xfrm0 speed is unknown, defaulting to 1000 [ 46.228025][ T4295] loop1: detected capacity change from 0 to 512 [ 46.233145][ T4298] __nla_validate_parse: 71 callbacks suppressed [ 46.233162][ T4298] netlink: 20 bytes leftover after parsing attributes in process `syz.4.189'. [ 46.251524][ T4295] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 46.261740][ T4295] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 46.261942][ T4295] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.190: bg 0: block 248: padding at end of block bitmap is not set [ 46.261974][ T4295] fserror_report: 3 callbacks suppressed [ 46.261986][ T4295] loop1: lost filesystem error report for type 5 error -117 [ 46.262191][ T4295] Quota error (device loop1): write_blk: dquota write failed [ 46.262208][ T4295] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 46.262225][ T4295] EXT4-fs error (device loop1): ext4_acquire_dquot:7001: comm syz.1.190: Failed to acquire dquot type 1 [ 46.262246][ T4295] loop1: lost filesystem error report for type 5 error -117 [ 46.262748][ C0] EXT4-fs (loop1): error count since last fsck: 2 [ 46.262766][ C0] EXT4-fs (loop1): last error at time 1771961517: ext4_acquire_dquot:7001 [ 46.263704][ T4295] EXT4-fs (loop1): 1 truncate cleaned up [ 46.264212][ T4295] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 46.284470][ T28] audit: type=1400 audit(1771961517.950:344): avc: denied { mount } for pid=4296 comm="syz.4.189" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 46.323402][ T4280] xfrm0 speed is unknown, defaulting to 1000 [ 46.466048][ T4295] EXT4-fs error (device loop1): ext4_acquire_dquot:7001: comm syz.1.190: Failed to acquire dquot type 1 [ 46.534908][ T4280] xfrm0 speed is unknown, defaulting to 1000 [ 46.589875][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 46.797011][ T4280] xfrm0 speed is unknown, defaulting to 1000 [ 46.833931][ T4327] netlink: 20 bytes leftover after parsing attributes in process `syz.0.197'. [ 47.033987][ T4280] xfrm0 speed is unknown, defaulting to 1000 [ 47.515404][ T4338] 8021q: adding VLAN 0 to HW filter on device bond2 [ 47.981487][ T4348] netlink: 4 bytes leftover after parsing attributes in process `syz.5.201'. [ 47.981510][ T4348] netlink: 348 bytes leftover after parsing attributes in process `syz.5.201'. [ 47.981600][ T4348] netlink: 4 bytes leftover after parsing attributes in process `syz.5.201'. [ 47.981613][ T4348] netlink: 348 bytes leftover after parsing attributes in process `syz.5.201'. [ 47.981653][ T4348] netlink: 4 bytes leftover after parsing attributes in process `syz.5.201'. [ 48.052998][ T4280] xfrm0 speed is unknown, defaulting to 1000 [ 48.210374][ T4362] loop5: detected capacity change from 0 to 512 [ 48.212836][ T4362] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 48.220759][ T4362] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 48.220780][ T4362] EXT4-fs (loop5): failed to initialize system zone (-117) [ 48.220839][ T4362] EXT4-fs (loop5): mount failed [ 48.291791][ T4367] team0: No ports can be present during mode change [ 48.490642][ T4374] loop1: detected capacity change from 0 to 512 [ 48.490951][ T4374] ext4: Unknown parameter ' [ 48.490951][ T4374] ' [ 48.902322][ T4389] loop5: detected capacity change from 0 to 512 [ 48.924713][ T4389] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 48.955527][ T4389] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #16: comm syz.5.210: invalid indirect mapped block 4294967295 (level 0) [ 48.983279][ T4394] TCP: tcp_parse_options: Illegal window scaling value 47 > 14 received [ 49.001172][ T4389] fserror_report: 9 callbacks suppressed [ 49.001188][ T4389] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 49.039329][ T4389] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #16: comm syz.5.210: invalid indirect mapped block 4294967295 (level 1) [ 49.048596][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 49.048620][ C0] EXT4-fs (loop5): initial error at time 1771961520: ext4_free_branches:1023: inode 16 [ 49.048650][ C0] EXT4-fs (loop5): last error at time 1771961520: ext4_free_branches:1023: inode 16 [ 49.121897][ T4389] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 49.123056][ T4386] loop4: detected capacity change from 0 to 128 [ 49.143290][ T4389] EXT4-fs (loop5): 1 orphan inode deleted [ 49.149054][ T4389] EXT4-fs (loop5): 1 truncate cleaned up [ 49.169575][ T4389] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.195250][ T4386] ext4: Unknown parameter 'subj_type' [ 49.358866][ T4411] netlink: 20 bytes leftover after parsing attributes in process `syz.4.217'. [ 49.377982][ T3753] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.418808][ T4415] sit0: entered promiscuous mode [ 49.446076][ T4415] netlink: 'syz.5.215': attribute type 1 has an invalid length. [ 49.477231][ T4415] netlink: 1 bytes leftover after parsing attributes in process `syz.5.215'. [ 49.493674][ T4419] loop3: detected capacity change from 0 to 1764 [ 49.527228][ T4419] xfrm0 speed is unknown, defaulting to 1000 [ 49.532194][ T4425] loop4: detected capacity change from 0 to 128 [ 49.547684][ T4428] loop5: detected capacity change from 0 to 1024 [ 49.595780][ T4428] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.706684][ T4437] loop1: detected capacity change from 0 to 736 [ 49.726502][ T3316] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 49.763320][ T3316] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 49.812928][ T4425] loop4: detected capacity change from 0 to 512 [ 49.842998][ T4425] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 49.873806][ T3753] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.888630][ T4425] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.221: invalid indirect mapped block 4294967295 (level 0) [ 49.951888][ T4425] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 49.952771][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 49.968389][ C0] EXT4-fs (loop4): initial error at time 1771961521: ext4_free_branches:1023: inode 16 [ 49.968632][ T4425] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.221: invalid indirect mapped block 4294967295 (level 1) [ 49.978084][ C0] EXT4-fs (loop4): last error at time 1771961521: ext4_free_branches:1023: inode 16 [ 50.003603][ T4425] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 50.005655][ T4425] EXT4-fs (loop4): 1 orphan inode deleted [ 50.020552][ T4459] netlink: 20 bytes leftover after parsing attributes in process `syz.5.229'. [ 50.023887][ T4425] EXT4-fs (loop4): 1 truncate cleaned up [ 50.058994][ T4460] xfrm0 speed is unknown, defaulting to 1000 [ 50.072008][ T4464] loop5: detected capacity change from 0 to 512 [ 50.078840][ T4425] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.087287][ T4464] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 50.201670][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.359187][ T4495] netlink: 'syz.0.235': attribute type 7 has an invalid length. [ 50.380738][ T55] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.391220][ T28] kauditd_printk_skb: 23 callbacks suppressed [ 50.391304][ T28] audit: type=1400 audit(1771961522.060:366): avc: denied { setopt } for pid=4481 comm="syz.4.233" laddr=::1 lport=255 faddr=::1 fport=256 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 50.422062][ T28] audit: type=1400 audit(1771961522.060:367): avc: denied { read } for pid=4481 comm="syz.4.233" laddr=::1 lport=255 faddr=::1 fport=256 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 50.459202][ T4495] netlink: 'syz.0.235': attribute type 7 has an invalid length. [ 50.487240][ T4474] xfrm0 speed is unknown, defaulting to 1000 [ 50.501283][ T28] audit: type=1400 audit(1771961522.060:368): avc: denied { mounton } for pid=4481 comm="syz.4.233" path="/52/file0" dev="loop4" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 50.531188][ T55] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.569861][ T4510] capability: warning: `syz.4.236' uses deprecated v2 capabilities in a way that may be insecure [ 50.583352][ T28] audit: type=1400 audit(1771961522.100:369): avc: denied { read } for pid=4481 comm="syz.4.233" path="socket:[9239]" dev="sockfs" ino=9239 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 50.649429][ T28] audit: type=1400 audit(1771961522.190:370): avc: denied { connect } for pid=4502 comm="syz.0.237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 50.671378][ T4516] netlink: 'syz.4.239': attribute type 11 has an invalid length. [ 50.683526][ T55] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.704404][ T4513] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.238: invalid indirect mapped block 256 (level 2) [ 50.717867][ T23] IPVS: starting estimator thread 0... [ 50.717875][ T4513] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 50.718260][ T4513] EXT4-fs (loop0): 2 truncates cleaned up [ 50.723446][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 50.723466][ C0] EXT4-fs (loop0): initial error at time 1771961522: ext4_free_branches:1023: inode 11 [ 50.723512][ C0] EXT4-fs (loop0): last error at time 1771961522: ext4_free_branches:1023: inode 11 [ 50.732858][ T28] audit: type=1400 audit(1771961522.190:371): avc: denied { write } for pid=4502 comm="syz.0.237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 50.732884][ T28] audit: type=1400 audit(1771961522.190:372): avc: denied { ioctl } for pid=4502 comm="syz.0.237" path="socket:[9247]" dev="sockfs" ino=9247 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 50.833388][ T4513] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.875208][ T55] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.892850][ T4522] IPVS: using max 2400 ests per chain, 120000 per kthread [ 50.908611][ T28] audit: type=1400 audit(1771961522.580:373): avc: denied { map } for pid=4512 comm="syz.0.238" path="/40/file1/cpu.stat" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 51.007856][ T4474] chnl_net:caif_netlink_parms(): no params data found [ 51.050394][ T28] audit: type=1400 audit(1771961522.630:374): avc: denied { write } for pid=4535 comm="syz.5.240" path="socket:[8690]" dev="sockfs" ino=8690 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 51.459761][ T4474] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.468006][ T4474] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.483075][ T4474] bridge_slave_0: entered allmulticast mode [ 51.489688][ T4474] bridge_slave_0: entered promiscuous mode [ 51.519369][ T4474] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.527288][ T4474] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.534538][ T4474] bridge_slave_1: entered allmulticast mode [ 51.541028][ T4474] bridge_slave_1: entered promiscuous mode [ 51.555552][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.600039][ T4566] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.625956][ T4474] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.638768][ T4576] __nla_validate_parse: 3 callbacks suppressed [ 51.638784][ T4576] netlink: 24 bytes leftover after parsing attributes in process `syz.4.247'. [ 51.639287][ T4474] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.673786][ T4577] futex_wake_op: syz.0.246 tries to shift op by 32; fix this program [ 51.675556][ T4474] team0: Port device team_slave_0 added [ 51.709956][ T4474] team0: Port device team_slave_1 added [ 51.720390][ T4566] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 51.736868][ T28] audit: type=1400 audit(1771961523.400:375): avc: denied { setattr } for pid=4559 comm="syz.5.243" name=".pending_reads" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 51.786487][ T4566] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 3 with error 28 [ 51.801160][ T4578] sch_tbf: burst 88 is lower than device veth3 mtu (1514) ! [ 51.802772][ T4566] EXT4-fs (loop5): This should not happen!! Data will be lost [ 51.802772][ T4566] [ 51.819063][ T4581] netlink: 20 bytes leftover after parsing attributes in process `syz.4.247'. [ 51.835591][ T4474] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.842560][ T4474] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 51.869231][ T4585] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4585 comm=syz.5.243 [ 51.871283][ T4474] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.893002][ T55] bridge_slave_1: left allmulticast mode [ 51.898663][ T55] bridge_slave_1: left promiscuous mode [ 51.904566][ T55] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.905104][ T4566] EXT4-fs (loop5): Total free blocks count 0 [ 51.919451][ T55] bridge_slave_0: left allmulticast mode [ 51.927803][ T55] bridge_slave_0: left promiscuous mode [ 51.943060][ T55] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.962820][ T4566] EXT4-fs (loop5): Free/Dirty block details [ 51.993811][ T4566] EXT4-fs (loop5): free_blocks=2415919504 [ 52.011286][ T4566] EXT4-fs (loop5): dirty_blocks=16 [ 52.017456][ T4566] EXT4-fs (loop5): Block reservation details [ 52.032891][ T4566] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 52.039535][ T40] smc: removing ib device syz1 [ 52.126721][ T55] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 52.166429][ T55] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 52.178549][ T55] bond0 (unregistering): Released all slaves [ 52.243150][ T4474] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.250181][ T4474] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 52.312612][ T4474] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.334037][ T3402] xfrm0 speed is unknown, defaulting to 1000 [ 52.340662][ T3402] syz1: Port: 1 Link DOWN [ 52.396452][ T3753] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.432259][ T4625] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 52.447820][ T4625] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 52.461576][ T4625] EXT4-fs (loop5): 1 truncate cleaned up [ 52.468310][ T4625] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.476109][ T4474] hsr_slave_0: entered promiscuous mode [ 52.500415][ T4625] Driver unsupported XDP return value 0 on prog (id 54) dev N/A, expect packet loss! [ 52.512759][ T4474] hsr_slave_1: entered promiscuous mode [ 52.525047][ T4474] debugfs: 'hsr0' already exists in 'hsr' [ 52.530799][ T4474] Cannot create hsr debugfs directory [ 52.563866][ T55] hsr_slave_0: left promiscuous mode [ 52.569590][ T55] hsr_slave_1: left promiscuous mode [ 52.575296][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 52.582935][ T55] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 52.590505][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 52.598341][ T55] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 52.608650][ T55] veth1_macvtap: left promiscuous mode [ 52.614379][ T55] veth0_macvtap: left promiscuous mode [ 52.617930][ T4619] FAT-fs (loop0): error, invalid access to FAT (entry 0x0fff0000) [ 52.620073][ T55] veth1_vlan: left promiscuous mode [ 52.620097][ T55] veth0_vlan: left promiscuous mode [ 52.694649][ T4619] FAT-fs (loop0): Filesystem has been set read-only [ 52.709693][ T4619] FAT-fs (loop0): error, invalid access to FAT (entry 0x0fff0000) [ 52.729372][ T55] team0 (unregistering): Port device team_slave_1 removed [ 52.739582][ T55] team0 (unregistering): Port device team_slave_0 removed [ 52.741708][ T3753] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.898610][ T4652] netlink: 20 bytes leftover after parsing attributes in process `syz.0.262'. [ 53.173159][ T4670] loop5: p1 p2 p3 [ 53.177205][ T4670] loop5: p1 size 4719617 extends beyond EOD, truncated [ 53.267369][ T4474] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 53.324247][ T4670] loop5: p3 start 117772289 is beyond EOD, truncated [ 53.346510][ T4474] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 53.404821][ T4474] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 53.489246][ T4474] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 53.529949][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 53.543404][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 53.579340][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 53.593092][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 53.616957][ T4679] netlink: 8 bytes leftover after parsing attributes in process `syz.4.268'. [ 53.701163][ T4474] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.737315][ T4474] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.781123][ T4705] set_capacity_and_notify: 6 callbacks suppressed [ 53.781143][ T4705] loop5: detected capacity change from 0 to 1764 [ 53.805875][ T4708] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=4708 comm=syz.1.271 [ 53.819935][ T4474] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 53.830707][ T4705] iso9660: Bad value for 'check' [ 53.831819][ T4708] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=50 sclass=netlink_tcpdiag_socket pid=4708 comm=syz.1.271 [ 53.860324][ T4474] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 53.877492][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.884605][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.904743][ T4715] netlink: 20 bytes leftover after parsing attributes in process `syz.5.273'. [ 53.924320][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.931523][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.178644][ T4474] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.436275][ T4782] loop1: detected capacity change from 0 to 1024 [ 54.452159][ T4785] netlink: 20 bytes leftover after parsing attributes in process `syz.4.283'. [ 54.486452][ T4474] veth0_vlan: entered promiscuous mode [ 54.501875][ T4782] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.548388][ T4474] veth1_vlan: entered promiscuous mode [ 54.570548][ T4474] veth0_macvtap: entered promiscuous mode [ 54.578049][ T4474] veth1_macvtap: entered promiscuous mode [ 54.607079][ T4474] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.636627][ T4474] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.771335][ T4797] loop5: detected capacity change from 0 to 1764 [ 54.782004][ T50] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.796086][ T50] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.826024][ T4797] iso9660: Bad value for 'check' [ 54.845467][ T50] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.898524][ T50] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.936797][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.188123][ T4823] loop6: detected capacity change from 0 to 512 [ 55.195418][ T4823] EXT4-fs (loop6): couldn't mount as ext2 due to feature incompatibilities [ 55.224075][ T4828] netlink: 20 bytes leftover after parsing attributes in process `syz.5.294'. [ 55.267635][ T4829] loop4: detected capacity change from 0 to 128 [ 55.323275][ T4822] bio_check_eod: 101 callbacks suppressed [ 55.323294][ T4822] syz.4.292: attempt to access beyond end of device [ 55.323294][ T4822] loop4: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 55.483245][ T4831] loop5: detected capacity change from 0 to 512 [ 55.514519][ T4831] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.527125][ T4831] ext4 filesystem being mounted at /46/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.547218][ T4833] loop4: detected capacity change from 0 to 2048 [ 55.565100][ T4833] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.651138][ T4840] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 55.683654][ T4840] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 3 with error 28 [ 55.696115][ T4840] EXT4-fs (loop4): This should not happen!! Data will be lost [ 55.696115][ T4840] [ 55.706272][ T4840] EXT4-fs (loop4): Total free blocks count 0 [ 55.712321][ T4840] EXT4-fs (loop4): Free/Dirty block details [ 55.718759][ T4840] EXT4-fs (loop4): free_blocks=2415919504 [ 55.724680][ T4840] EXT4-fs (loop4): dirty_blocks=16 [ 55.729942][ T4840] EXT4-fs (loop4): Block reservation details [ 55.734975][ T4841] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4841 comm=syz.4.295 [ 55.736268][ T4840] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 55.874465][ T28] kauditd_printk_skb: 116 callbacks suppressed [ 55.874480][ T28] audit: type=1400 audit(1771961527.560:492): avc: denied { ioctl } for pid=4844 comm="syz.0.297" path="socket:[9215]" dev="sockfs" ino=9215 ioctlcmd=0x8935 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 55.945519][ T262] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 55.981871][ T262] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 33 with error 28 [ 55.995043][ T28] audit: type=1326 audit(1771961527.660:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4853 comm="syz.1.300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5335dc629 code=0x7ffc0000 [ 56.022550][ T262] EXT4-fs (loop5): This should not happen!! Data will be lost [ 56.022550][ T262] [ 56.051095][ T262] EXT4-fs (loop5): Total free blocks count 0 [ 56.064721][ T28] audit: type=1326 audit(1771961527.660:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4853 comm="syz.1.300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5335dc629 code=0x7ffc0000 [ 56.088381][ T262] EXT4-fs (loop5): Free/Dirty block details [ 56.096231][ T262] EXT4-fs (loop5): free_blocks=65280 [ 56.101607][ T262] EXT4-fs (loop5): dirty_blocks=33 [ 56.106956][ T262] EXT4-fs (loop5): Block reservation details [ 56.232952][ T28] audit: type=1326 audit(1771961527.660:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4853 comm="syz.1.300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7ff5335dc629 code=0x7ffc0000 [ 56.262802][ T262] EXT4-fs (loop5): i_reserved_data_blocks=33 [ 56.273569][ T28] audit: type=1326 audit(1771961527.660:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4853 comm="syz.1.300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5335dc629 code=0x7ffc0000 [ 56.323098][ T28] audit: type=1326 audit(1771961527.660:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4853 comm="syz.1.300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7ff5335dc629 code=0x7ffc0000 [ 56.399207][ T3753] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.418149][ T28] audit: type=1326 audit(1771961527.720:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4853 comm="syz.1.300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5335dc629 code=0x7ffc0000 [ 56.464158][ T28] audit: type=1326 audit(1771961527.800:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4853 comm="syz.1.300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5335dc629 code=0x7ffc0000 [ 56.488723][ T28] audit: type=1326 audit(1771961527.800:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4853 comm="syz.1.300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff5335dc629 code=0x7ffc0000 [ 56.512499][ T28] audit: type=1326 audit(1771961527.800:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4853 comm="syz.1.300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5335dc629 code=0x7ffc0000 [ 56.523448][ T4858] loop0: detected capacity change from 0 to 1764 [ 56.558006][ T4860] loop1: detected capacity change from 0 to 256 [ 56.570511][ T4858] iso9660: Bad value for 'check' [ 56.602692][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.639998][ T4867] netlink: 'syz.4.303': attribute type 64 has an invalid length. [ 56.647910][ T4867] netlink: 12 bytes leftover after parsing attributes in process `syz.4.303'. [ 56.674010][ T4870] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2584 sclass=netlink_route_socket pid=4870 comm=syz.4.304 [ 56.686744][ T4870] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2562 sclass=netlink_route_socket pid=4870 comm=syz.4.304 [ 56.742256][ T4873] netlink: 20 bytes leftover after parsing attributes in process `syz.0.306'. [ 56.778393][ T4864] loop5: detected capacity change from 0 to 8192 [ 56.829464][ T4860] FAT-fs (loop1): Directory bread(block 64) failed [ 56.852603][ T4860] FAT-fs (loop1): Directory bread(block 65) failed [ 56.863399][ T4864] loop5: p1 p3 p4 [ 56.881407][ T4864] loop5: p1 size 477167616 extends beyond EOD, truncated [ 56.906513][ T4860] FAT-fs (loop1): Directory bread(block 66) failed [ 56.925993][ T4860] FAT-fs (loop1): Directory bread(block 67) failed [ 56.935254][ T4860] FAT-fs (loop1): Directory bread(block 68) failed [ 56.942625][ T4860] FAT-fs (loop1): Directory bread(block 69) failed [ 56.951806][ T4860] FAT-fs (loop1): Directory bread(block 70) failed [ 56.973319][ T4860] FAT-fs (loop1): Directory bread(block 71) failed [ 56.981251][ T4860] FAT-fs (loop1): Directory bread(block 72) failed [ 56.989747][ T4860] FAT-fs (loop1): Directory bread(block 73) failed [ 57.062917][ T4864] loop5: p3 start 4294901760 is beyond EOD, truncated [ 57.070220][ T4864] loop5: p4 size 32768 extends beyond EOD, truncated [ 57.243867][ T2998] loop5: p1 p3 p4 [ 57.247939][ T2998] loop5: p1 size 477167616 extends beyond EOD, truncated [ 57.268616][ T2998] loop5: p3 start 4294901760 is beyond EOD, truncated [ 57.348024][ T2998] loop5: p4 size 32768 extends beyond EOD, truncated [ 57.492815][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 57.512853][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 57.551255][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 57.562559][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 57.597826][ T4894] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #15: comm syz.5.311: inode has both inline data and extents flags [ 57.634907][ T4894] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 57.637071][ T4894] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.311: couldn't read orphan inode 15 (err -117) [ 57.646278][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 57.646297][ C0] EXT4-fs (loop5): initial error at time 1771961529: ext4_orphan_get:1391: inode 15 [ 57.646332][ C0] EXT4-fs (loop5): last error at time 1771961529: ext4_orphan_get:1391: inode 15 [ 57.712823][ T4894] loop5: lost filesystem error report for type 5 error -117 [ 57.717283][ T4894] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.815363][ T3753] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.970221][ T4905] netlink: 68 bytes leftover after parsing attributes in process `syz.5.313'. [ 58.110580][ T4908] netlink: 83992 bytes leftover after parsing attributes in process `syz.4.316'. [ 58.135883][ T4912] netlink: 'syz.5.318': attribute type 1 has an invalid length. [ 58.149897][ T4912] 8021q: adding VLAN 0 to HW filter on device bond1 [ 58.160384][ T4908] netlink: zone id is out of range [ 58.166785][ T4912] bond1: (slave gretap1): making interface the new active one [ 58.175449][ T4908] netlink: zone id is out of range [ 58.187426][ T4908] netlink: zone id is out of range [ 58.193490][ T4912] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 58.233888][ T4908] netlink: set zone limit has 8 unknown bytes [ 58.338500][ T4916] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.403953][ T4916] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.446446][ T4908] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.519280][ T4930] netlink: 'syz.5.321': attribute type 1 has an invalid length. [ 58.537548][ T4908] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 58.544909][ T4908] IPv6: NLM_F_CREATE should be set when creating new route [ 58.560481][ T4930] netlink: 6 bytes leftover after parsing attributes in process `syz.5.321'. [ 58.576067][ T4474] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.649358][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.491308][ T23] Process accounting resumed [ 59.592936][ T4963] set_capacity_and_notify: 4 callbacks suppressed [ 59.592966][ T4963] loop6: detected capacity change from 0 to 512 [ 59.612197][ T4987] netlink: 20 bytes leftover after parsing attributes in process `syz.1.335'. [ 59.655365][ T4991] netlink: 112 bytes leftover after parsing attributes in process `syz.1.339'. [ 59.678673][ T4963] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 59.729074][ T4995] loop0: detected capacity change from 0 to 512 [ 59.733622][ T5001] loop1: detected capacity change from 0 to 512 [ 59.752052][ T4963] EXT4-fs (loop6): 1 truncate cleaned up [ 59.752586][ T5001] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 59.772263][ T5001] EXT4-fs (loop1): orphan cleanup on readonly fs [ 59.778569][ T4963] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.810205][ T4997] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 59.835602][ T4995] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.838045][ T4997] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 59.863126][ T5001] EXT4-fs error (device loop1): ext4_quota_enable:7188: comm syz.1.342: Bad quota inum: 2, type: 2 [ 59.863797][ T4995] ext4 filesystem being mounted at /70/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.873932][ T5001] loop1: lost filesystem error report for type 5 error -117 [ 59.902224][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 59.916974][ C0] EXT4-fs (loop1): last error at time 1771961531: ext4_quota_enable:7188 [ 59.920285][ T5001] EXT4-fs warning (device loop1): ext4_enable_quotas:7236: Failed to enable quota tracking (type=2, err=-117, ino=2). Please run e2fsck to fix. [ 59.943952][ T4997] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 59.951982][ T4997] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 59.961408][ T5001] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 59.978980][ T5001] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 60.025498][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.046746][ T5012] loop5: detected capacity change from 0 to 512 [ 60.068907][ T5012] EXT4-fs: Ignoring removed bh option [ 60.083817][ T5012] EXT4-fs: Ignoring removed oldalloc option [ 60.102523][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.124155][ T5012] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 60.172067][ T5012] EXT4-fs (loop5): 1 truncate cleaned up [ 60.179555][ T5012] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.195583][ T5018] loop0: detected capacity change from 0 to 128 [ 60.220039][ T5012] netlink: 32 bytes leftover after parsing attributes in process `syz.5.345'. [ 60.233684][ T5018] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 60.293890][ T5018] ext4 filesystem being mounted at /71/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 60.439965][ T3753] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.506176][ T5043] loop4: detected capacity change from 0 to 512 [ 60.513173][ T5043] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 60.547134][ T5043] EXT4-fs (loop4): 1 truncate cleaned up [ 60.553495][ T5043] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.585833][ T4474] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.634725][ T5050] netlink: 20 bytes leftover after parsing attributes in process `syz.6.350'. [ 60.684435][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.763673][ T5061] IPVS: sync thread started: state = MASTER, mcast_ifn = dummy0, syncid = 0, id = 0 [ 60.958871][ T3399] IPVS: starting estimator thread 0... [ 61.075995][ T5062] IPVS: using max 2448 ests per chain, 122400 per kthread [ 61.145091][ T3309] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 61.208210][ T5067] loop4: detected capacity change from 0 to 1024 [ 61.235332][ T5067] EXT4-fs: inline encryption not supported [ 61.459206][ T5083] loop0: detected capacity change from 0 to 1764 [ 61.468823][ T5083] iso9660: Bad value for 'check' [ 61.542630][ T28] kauditd_printk_skb: 96 callbacks suppressed [ 61.549198][ T28] audit: type=1326 audit(1771961533.220:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5077 comm="syz.0.356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd58cbc629 code=0x7ffc0000 [ 61.578471][ T5095] sctp: [Deprecated]: syz.1.361 (pid 5095) Use of struct sctp_assoc_value in delayed_ack socket option. [ 61.578471][ T5095] Use struct sctp_sack_info instead [ 61.597169][ T28] audit: type=1326 audit(1771961533.260:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5077 comm="syz.0.356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=5 compat=0 ip=0x7fdd58cbc629 code=0x7ffc0000 [ 61.621204][ T28] audit: type=1326 audit(1771961533.260:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5077 comm="syz.0.356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd58cbc629 code=0x7ffc0000 [ 61.645151][ T28] audit: type=1326 audit(1771961533.260:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5077 comm="syz.0.356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd58cbc629 code=0x7ffc0000 [ 61.697089][ T28] audit: type=1326 audit(1771961533.260:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5077 comm="syz.0.356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fdd58cbc629 code=0x7ffc0000 [ 61.746654][ T28] audit: type=1326 audit(1771961533.260:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5077 comm="syz.0.356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd58cbc629 code=0x7ffc0000 [ 61.765398][ T5107] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 61.777548][ T5107] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 61.799371][ T5106] loop6: detected capacity change from 0 to 1024 [ 61.813763][ T5107] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 61.816407][ T28] audit: type=1326 audit(1771961533.260:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5077 comm="syz.0.356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdd58cbc629 code=0x7ffc0000 [ 61.840749][ T5107] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 61.855849][ T5106] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 61.865856][ T5106] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 61.876345][ T5106] EXT4-fs (loop6): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 61.886976][ T28] audit: type=1326 audit(1771961533.260:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5077 comm="syz.0.356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd58cbc629 code=0x7ffc0000 [ 61.887054][ T5106] EXT4-fs error (device loop6): ext4_get_journal_inode:5863: inode #32: comm syz.6.364: iget: special inode unallocated [ 61.914290][ T5114] sctp: [Deprecated]: syz.4.372 (pid 5114) Use of int in max_burst socket option deprecated. [ 61.914290][ T5114] Use struct sctp_assoc_value instead [ 61.948448][ T28] audit: type=1326 audit(1771961533.260:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5077 comm="syz.0.356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdd58cbc629 code=0x7ffc0000 [ 61.976785][ T28] audit: type=1326 audit(1771961533.260:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5077 comm="syz.0.356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd58cbc629 code=0x7ffc0000 [ 62.000568][ T5106] loop6: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117 [ 62.000824][ T5106] EXT4-fs (loop6): no journal found [ 62.010026][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 62.010049][ C0] EXT4-fs (loop6): initial error at time 1771961533: ext4_get_journal_inode:5863: inode 32 [ 62.010094][ C0] EXT4-fs (loop6): last error at time 1771961533: ext4_get_journal_inode:5863: inode 32 [ 62.041918][ T5106] EXT4-fs (loop6): can't get journal size [ 62.055832][ T5106] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 62.077081][ T5106] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.202384][ T5133] 9p: Bad value for 'rfdno' [ 62.421304][ T5138] loop5: detected capacity change from 0 to 512 [ 62.450685][ T5138] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 62.496637][ T5138] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.374: invalid indirect mapped block 4294967295 (level 1) [ 62.516052][ T5138] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 62.519046][ T5138] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.374: invalid indirect mapped block 4294967295 (level 1) [ 62.529628][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 62.529906][ C0] EXT4-fs (loop5): initial error at time 1771961534: ext4_free_branches:1023: inode 11 [ 62.530518][ C0] EXT4-fs (loop5): last error at time 1771961534: ext4_free_branches:1023: inode 11 [ 62.569471][ T5146] iso9660: Bad value for 'check' [ 62.592701][ T5138] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 62.596342][ T5138] EXT4-fs (loop5): 2 truncates cleaned up [ 62.633435][ T5138] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.699880][ T50] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 62.736644][ T50] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 62.770726][ T5162] netlink: 8988 bytes leftover after parsing attributes in process `syz.0.382'. [ 62.780194][ T50] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 62.810297][ T40] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 62.839786][ T5162] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.848467][ T5162] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.191087][ T3753] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.290747][ T5174] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 63.305062][ T5174] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 63.324473][ T5174] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 63.331955][ T5174] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 63.458036][ T5204] netlink: 8 bytes leftover after parsing attributes in process `syz.5.390'. [ 63.631481][ T5213] iso9660: Bad value for 'check' [ 63.663042][ T5215] netlink: 72 bytes leftover after parsing attributes in process `syz.0.391'. [ 66.548897][ T5228] xt_hashlimit: size too large, truncated to 1048576 [ 66.560413][ T5236] set_capacity_and_notify: 3 callbacks suppressed [ 66.560484][ T5236] loop0: detected capacity change from 0 to 512 [ 66.589727][ T5237] wg2: entered promiscuous mode [ 66.602565][ T5233] loop4: detected capacity change from 0 to 2048 [ 66.610946][ T5237] wg2: entered allmulticast mode [ 66.623604][ T5233] EXT4-fs: Ignoring removed orlov option [ 66.629325][ T5233] EXT4-fs: Ignoring removed oldalloc option [ 66.674778][ T5238] loop5: detected capacity change from 0 to 2048 [ 66.677679][ T5233] EXT4-fs (loop4): filesystem too large to mount safely on this system [ 66.733619][ T5238] Alternate GPT is invalid, using primary GPT. [ 66.758047][ T5238] loop5: p1 p2 p3 [ 66.770694][ T5233] 9p: Bad value for 'rfdno' [ 66.888441][ T5252] loop0: detected capacity change from 0 to 1024 [ 66.940876][ T28] kauditd_printk_skb: 61 callbacks suppressed [ 66.940894][ T28] audit: type=1400 audit(1771961538.620:669): avc: denied { create } for pid=5232 comm="syz.4.399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 67.013359][ T5252] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 67.032965][ T5252] EXT4-fs (loop0): group descriptors corrupted! [ 67.087811][ T28] audit: type=1400 audit(1771961538.770:670): avc: denied { mount } for pid=5250 comm="syz.0.401" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 67.181098][ T5277] netlink: 8 bytes leftover after parsing attributes in process `syz.1.403'. [ 67.190507][ T5277] netlink: 4 bytes leftover after parsing attributes in process `syz.1.403'. [ 67.209186][ T28] audit: type=1400 audit(1771961538.890:671): avc: denied { write } for pid=5278 comm="syz.0.406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 67.290896][ T5282] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.319489][ T5274] loop4: detected capacity change from 0 to 8192 [ 67.346269][ T5274] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 67.399370][ T5295] loop6: detected capacity change from 0 to 1764 [ 67.418200][ T5282] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 67.424698][ T5295] iso9660: Bad value for 'check' [ 67.439202][ T5293] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 67.449388][ T5293] FAT-fs (loop4): Filesystem has been set read-only [ 67.470253][ T5293] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 67.489066][ T5293] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 67.509356][ T5293] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 67.529205][ T5304] netlink: 'syz.0.409': attribute type 12 has an invalid length. [ 67.532888][ T5293] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 67.549507][ T28] audit: type=1326 audit(1771961539.230:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5287 comm="syz.6.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0141b0c629 code=0x7ffc0000 [ 67.584517][ T5293] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 67.612296][ T5293] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 67.622894][ T28] audit: type=1326 audit(1771961539.230:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5287 comm="syz.6.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=5 compat=0 ip=0x7f0141b0c629 code=0x7ffc0000 [ 67.626711][ T5314] netlink: 20 bytes leftover after parsing attributes in process `syz.6.410'. [ 67.655217][ T5293] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 67.664354][ T5293] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 67.674219][ T28] audit: type=1326 audit(1771961539.230:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5287 comm="syz.6.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0141b0c629 code=0x7ffc0000 [ 67.686652][ T5314] loop6: detected capacity change from 0 to 512 [ 67.708091][ T28] audit: type=1326 audit(1771961539.230:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5287 comm="syz.6.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f0141b0c629 code=0x7ffc0000 [ 67.731574][ T28] audit: type=1326 audit(1771961539.230:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5287 comm="syz.6.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0141b0c629 code=0x7ffc0000 [ 67.735464][ T5314] ext4: Unknown parameter 'noacl' [ 67.760207][ T5293] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 67.832984][ T28] audit: type=1326 audit(1771961539.230:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5287 comm="syz.6.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0141b0c629 code=0x7ffc0000 [ 67.870764][ T5325] tmpfs: Bad value for 'mpol' [ 67.989278][ T28] audit: type=1326 audit(1771961539.230:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5287 comm="syz.6.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0141b0c629 code=0x7ffc0000 [ 68.096183][ T5346] loop1: detected capacity change from 0 to 512 [ 68.128732][ T5346] /dev/loop1: Can't open blockdev [ 68.131535][ T5361] netlink: 44 bytes leftover after parsing attributes in process `syz.4.418'. [ 68.357245][ T5364] loop6: detected capacity change from 0 to 1764 [ 68.364396][ T5364] iso9660: Bad value for 'check' [ 68.442209][ T5387] loop4: detected capacity change from 0 to 2048 [ 68.464833][ T5387] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.009887][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.291220][ T5464] netlink: 4 bytes leftover after parsing attributes in process `syz.5.427'. [ 69.344722][ T5475] netlink: 8 bytes leftover after parsing attributes in process `syz.0.428'. [ 69.367279][ T5475] netlink: 36 bytes leftover after parsing attributes in process `syz.0.428'. [ 69.473853][ T5475] vlan2: entered allmulticast mode [ 69.479131][ T5475] vlan0: entered allmulticast mode [ 69.495102][ T5475] veth0_vlan: entered allmulticast mode [ 69.503880][ T5478] netlink: 'syz.4.426': attribute type 1 has an invalid length. [ 69.582142][ T5490] netlink: 'syz.1.429': attribute type 8 has an invalid length. [ 69.609227][ T5478] 8021q: adding VLAN 0 to HW filter on device bond3 [ 69.744302][ T5478] bond3: (slave veth5): Enslaving as an active interface with a down link [ 69.829250][ T5543] netlink: 24 bytes leftover after parsing attributes in process `syz.1.441'. [ 69.857156][ T5485] bond3: (slave dummy0): making interface the new active one [ 69.866530][ T5485] dummy0: entered promiscuous mode [ 69.871761][ T5485] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 69.925223][ T5485] bond3 (unregistering): (slave veth5): Releasing active interface [ 69.963682][ T5554] netlink: 44 bytes leftover after parsing attributes in process `syz.0.433'. [ 69.984591][ T5485] bond3 (unregistering): (slave dummy0): Releasing active interface [ 70.013292][ T5560] netlink: 'syz.1.446': attribute type 3 has an invalid length. [ 70.023968][ T5485] bond3 (unregistering): Released all slaves [ 70.046186][ T5560] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5560 comm=syz.1.446 [ 70.235132][ T5573] iso9660: Bad value for 'check' [ 70.517916][ T5590] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.530467][ T5590] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.558495][ T5590] FAT-fs (loop6): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 70.562778][ T5584] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 70.596994][ T5584] EXT4-fs error (device loop0): ext4_get_branch:178: inode #11: block 4294967295: comm syz.0.443: invalid block [ 70.610602][ T5584] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 70.612199][ T5584] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.443: invalid indirect mapped block 4294967295 (level 1) [ 70.627836][ T5595] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 70.627903][ T5595] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 70.627933][ T5595] vhci_hcd vhci_hcd.0: Device attached [ 70.628720][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 70.628776][ C1] EXT4-fs (loop0): initial error at time 1771961542: ext4_get_branch:178: inode 11: block 4294967295 [ 70.629154][ C1] EXT4-fs (loop0): last error at time 1771961542: ext4_get_branch:178: inode 11: block 4294967295 [ 70.695625][ T5584] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 70.697060][ T5584] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.443: invalid indirect mapped block 4294967295 (level 1) [ 70.722049][ T5584] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 70.723899][ T5584] EXT4-fs (loop0): 2 truncates cleaned up [ 70.744377][ T5584] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.801002][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.845476][ T5602] netlink: 8 bytes leftover after parsing attributes in process `syz.0.449'. [ 70.922779][ T35] usb 4-1: SetAddress Request (2) to port 0 [ 70.929909][ T35] usb 4-1: new SuperSpeed USB device number 2 using vhci_hcd [ 71.065383][ T5602] Set syz1 is full, maxelem 65536 reached [ 71.136632][ T5617] xt_hashlimit: size too large, truncated to 1048576 [ 71.178296][ T5623] netlink: 8 bytes leftover after parsing attributes in process `syz.4.454'. [ 71.229436][ T5629] netlink: 48 bytes leftover after parsing attributes in process `syz.5.456'. [ 71.244389][ T3302] Alternate GPT is invalid, using primary GPT. [ 71.252981][ T3302] loop6: p1 p2 p3 [ 71.254682][ T5621] netlink: 'syz.0.453': attribute type 1 has an invalid length. [ 71.280406][ T5621] 8021q: adding VLAN 0 to HW filter on device bond3 [ 71.280483][ T5631] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 71.322866][ T5631] System zones: 0-1, 3-36 [ 71.344462][ T5624] Alternate GPT is invalid, using primary GPT. [ 71.351490][ T5631] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.454: bad orphan inode 134217728 [ 71.363519][ T5624] loop6: p1 p2 p3 [ 71.371651][ T5631] loop4: lost filesystem error report for type 5 error -117 [ 71.372740][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 71.379870][ T5621] bond3: (slave veth3): Enslaving as an active interface with a down link [ 71.380070][ C0] EXT4-fs (loop4): initial error at time 1771961543: ext4_orphan_get:1417 [ 71.380094][ C0] EXT4-fs (loop4): last error at time 1771961543: ext4_orphan_get:1417 [ 71.418955][ T5631] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.440142][ T5629] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.457153][ T5629] ext4 filesystem being mounted at /81/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.489979][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.570620][ T5627] bond3: (slave dummy0): making interface the new active one [ 71.579305][ T5627] dummy0: entered promiscuous mode [ 71.588625][ T5627] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 71.611240][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 71.620375][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 71.624791][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 71.650362][ T5627] bond3 (unregistering): (slave veth3): Releasing active interface [ 71.673260][ T5627] bond3 (unregistering): (slave dummy0): Releasing active interface [ 71.683324][ T5627] bond3 (unregistering): Released all slaves [ 71.706037][ T5649] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5649 comm=syz.6.459 [ 71.782970][ T5652] tipc: Started in network mode [ 71.787959][ T5652] tipc: Node identity 7f000001, cluster identity 4711 [ 71.795145][ T5652] tipc: Enabling of bearer rejected, failed to enable media [ 71.861356][ T5657] netlink: 4 bytes leftover after parsing attributes in process `syz.4.460'. [ 71.903035][ T5596] vhci_hcd: connection reset by peer [ 71.917360][ T5446] vhci_hcd vhci_hcd.1: stop threads [ 71.927139][ T5446] vhci_hcd vhci_hcd.1: release socket [ 71.932927][ T5446] vhci_hcd vhci_hcd.1: disconnect device [ 71.970793][ T5663] xt_CT: No such helper "snmp" [ 72.002177][ T5674] set_capacity_and_notify: 8 callbacks suppressed [ 72.002195][ T5674] loop4: detected capacity change from 0 to 512 [ 72.015229][ T28] kauditd_printk_skb: 219 callbacks suppressed [ 72.015243][ T28] audit: type=1326 audit(1771961543.700:898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5656 comm="syz.6.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f0141b0c629 code=0x7ffc0000 [ 72.029842][ T5674] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 72.347125][ T5683] netlink: 'syz.4.470': attribute type 1 has an invalid length. [ 72.666772][ T3753] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.858459][ T5712] netlink: 'syz.5.472': attribute type 4 has an invalid length. [ 72.868774][ T28] audit: type=1400 audit(1771961544.550:899): avc: denied { connect } for pid=5713 comm="syz.1.476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 72.973176][ T28] audit: type=1400 audit(1771961544.660:900): avc: denied { accept } for pid=5713 comm="syz.1.476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 72.993046][ T5718] loop4: detected capacity change from 0 to 1024 [ 73.052624][ T5718] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 73.070386][ T5718] ext4 filesystem being mounted at /104/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.084025][ T5717] EXT4-fs error (device loop4): ext4_map_blocks:818: inode #15: comm syz.4.477: lblock 0 mapped to illegal pblock 0 (length 1) [ 73.106223][ T5717] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 73.119704][ T5717] EXT4-fs (loop4): This should not happen!! Data will be lost [ 73.119704][ T5717] [ 73.164532][ T5718] __nla_validate_parse: 1 callbacks suppressed [ 73.164552][ T5718] netlink: 76 bytes leftover after parsing attributes in process `syz.4.477'. [ 73.186025][ T5718] tc_dump_action: action bad kind [ 73.191669][ T5717] EXT4-fs error (device loop4): ext4_map_blocks:776: inode #15: comm syz.4.477: lblock 0 mapped to illegal pblock 0 (length 1) [ 73.224793][ T5717] EXT4-fs error (device loop4): ext4_map_blocks:818: inode #15: block 3: comm syz.4.477: lblock 3 mapped to illegal pblock 3 (length 3) [ 73.240067][ T5717] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 73.252658][ T5717] EXT4-fs (loop4): This should not happen!! Data will be lost [ 73.252658][ T5717] [ 73.284402][ T5729] netlink: 'syz.1.480': attribute type 9 has an invalid length. [ 73.314076][ T5731] netlink: 24 bytes leftover after parsing attributes in process `syz.0.481'. [ 73.326896][ T5426] EXT4-fs error (device loop4): ext4_map_blocks:818: inode #15: block 8: comm kworker/u8:12: lblock 8 mapped to illegal pblock 8 (length 8) [ 73.425359][ T5735] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5735 comm=syz.0.481 [ 73.576150][ T5426] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 73.600059][ T5426] EXT4-fs (loop4): This should not happen!! Data will be lost [ 73.600059][ T5426] [ 73.620996][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 73.694968][ T5738] loop4: detected capacity change from 0 to 128 [ 73.722537][ T5738] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 73.757507][ T5738] ext4 filesystem being mounted at /105/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.770154][ T28] audit: type=1400 audit(1771961545.450:901): avc: denied { rename } for pid=5737 comm="syz.4.483" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 73.793051][ T5738] sg_write: data in/out 49116/154 bytes for SCSI command 0x0-- guessing data in; [ 73.793051][ T5738] program syz.4.483 not setting count and/or reply_len properly [ 73.986486][ T3312] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 74.091662][ T5749] netlink: 4 bytes leftover after parsing attributes in process `syz.0.486'. [ 74.133292][ T5750] loop4: detected capacity change from 0 to 1764 [ 74.142271][ T5750] iso9660: Bad value for 'check' [ 74.340450][ T5753] loop1: detected capacity change from 0 to 128 [ 74.362744][ T28] audit: type=1326 audit(1771961546.040:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5745 comm="syz.4.485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad7689c629 code=0x7ffc0000 [ 74.483773][ T28] audit: type=1326 audit(1771961546.040:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5745 comm="syz.4.485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad7689c629 code=0x7ffc0000 [ 74.507993][ T28] audit: type=1326 audit(1771961546.040:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5745 comm="syz.4.485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=5 compat=0 ip=0x7fad7689c629 code=0x7ffc0000 [ 74.531850][ T28] audit: type=1326 audit(1771961546.040:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5745 comm="syz.4.485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad7689c629 code=0x7ffc0000 [ 74.559050][ T28] audit: type=1326 audit(1771961546.040:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5745 comm="syz.4.485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad7689c629 code=0x7ffc0000 [ 74.583129][ T28] audit: type=1326 audit(1771961546.040:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5745 comm="syz.4.485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fad7689c629 code=0x7ffc0000 [ 74.889351][ T5751] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 74.916537][ T5764] loop1: detected capacity change from 0 to 256 [ 75.035572][ T5772] netlink: 44 bytes leftover after parsing attributes in process `syz.1.491'. [ 75.870628][ T5787] vhci_hcd vhci_hcd.4: invalid port number 254 [ 75.943971][ T5791] netlink: 96 bytes leftover after parsing attributes in process `syz.0.498'. [ 75.987582][ T35] usb 4-1: device descriptor read/8, error -110 [ 76.313787][ T5807] netlink: 24 bytes leftover after parsing attributes in process `syz.5.500'. [ 76.682772][ T35] usb 4-1: new SuperSpeed USB device number 2 using vhci_hcd [ 76.712800][ T35] usb 4-1: enqueue for inactive port 0 [ 76.718324][ T35] usb 4-1: enqueue for inactive port 0 [ 76.733001][ T5813] netlink: 44 bytes leftover after parsing attributes in process `syz.5.502'. [ 76.752766][ T35] usb 4-1: enqueue for inactive port 0 [ 76.856656][ T5789] No such timeout policy "syz1" [ 76.913131][ T5816] netlink: 20 bytes leftover after parsing attributes in process `syz.0.503'. [ 77.056079][ T5823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.069078][ T5823] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.141544][ T5830] loop6: detected capacity change from 0 to 1764 [ 77.168261][ T5830] iso9660: Bad value for 'check' [ 77.199982][ T5832] loop1: detected capacity change from 0 to 512 [ 77.209009][ T28] kauditd_printk_skb: 3170 callbacks suppressed [ 77.209025][ T28] audit: type=1326 audit(1771961548.890:4078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5824 comm="syz.6.506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0141b0c629 code=0x7ffc0000 [ 77.245125][ T5832] EXT4-fs (loop1): failed to initialize system zone (-117) [ 77.249342][ T28] audit: type=1326 audit(1771961548.890:4079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5824 comm="syz.6.506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=5 compat=0 ip=0x7f0141b0c629 code=0x7ffc0000 [ 77.254424][ T5832] EXT4-fs (loop1): mount failed [ 77.284168][ T28] audit: type=1326 audit(1771961548.890:4080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5824 comm="syz.6.506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0141b0c629 code=0x7ffc0000 [ 77.309480][ T28] audit: type=1326 audit(1771961548.890:4081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5824 comm="syz.6.506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f0141b0c629 code=0x7ffc0000 [ 77.333108][ T28] audit: type=1326 audit(1771961548.890:4082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5824 comm="syz.6.506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0141b0c629 code=0x7ffc0000 [ 77.357317][ T28] audit: type=1326 audit(1771961548.890:4083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5824 comm="syz.6.506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0141b0c629 code=0x7ffc0000 [ 77.403695][ T5840] netlink: 28 bytes leftover after parsing attributes in process `syz.5.510'. [ 77.426068][ T28] audit: type=1326 audit(1771961548.890:4084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5824 comm="syz.6.506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0141b0c629 code=0x7ffc0000 [ 77.450100][ T28] audit: type=1326 audit(1771961548.890:4085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5824 comm="syz.6.506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0141b0c629 code=0x7ffc0000 [ 77.522737][ T28] audit: type=1326 audit(1771961548.890:4086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5824 comm="syz.6.506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0141b0c629 code=0x7ffc0000 [ 77.559401][ T5845] netlink: 8 bytes leftover after parsing attributes in process `syz.1.509'. [ 77.569514][ T28] audit: type=1326 audit(1771961548.890:4087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5824 comm="syz.6.506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f0141b0c629 code=0x7ffc0000 [ 77.608420][ T5844] loop6: detected capacity change from 0 to 8192 [ 77.733814][ T5844] loop6: p1 < > p2 p4 < p5 > [ 77.738678][ T5844] loop6: partition table partially beyond EOD, truncated [ 77.752253][ T5844] loop6: p1 start 134217728 is beyond EOD, truncated [ 77.769310][ T5844] loop6: p2 size 591360 extends beyond EOD, truncated [ 77.803271][ T35] usb usb4-port1: attempt power cycle [ 77.889926][ T5844] loop6: p5 size 591360 extends beyond EOD, truncated [ 78.692479][ T5887] loop1: detected capacity change from 0 to 2048 [ 78.708319][ T5884] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.744040][ T5887] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.756944][ T5884] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.473319][ T5916] netlink: 'syz.4.532': attribute type 29 has an invalid length. [ 79.489110][ T5916] netlink: 'syz.4.532': attribute type 29 has an invalid length. [ 79.506431][ T5916] __nla_validate_parse: 1 callbacks suppressed [ 79.506446][ T5916] netlink: 500 bytes leftover after parsing attributes in process `syz.4.532'. [ 79.564571][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.609128][ T5920] loop1: detected capacity change from 0 to 1024 [ 79.617380][ T5916] loop4: detected capacity change from 0 to 8192 [ 79.624163][ T5920] EXT4-fs: inline encryption not supported [ 79.640262][ T5918] loop6: detected capacity change from 0 to 512 [ 79.649205][ T5916] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 79.664587][ T5918] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.679116][ T5920] EXT4-fs: Ignoring removed nobh option [ 79.696252][ T5920] EXT4-fs: Ignoring removed bh option [ 79.722958][ T5918] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.746534][ T5920] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.759337][ T5915] delete_channel: no stack [ 79.801769][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.811067][ T35] usb usb4-port1: unable to enumerate USB device [ 79.878492][ T5929] loop1: detected capacity change from 0 to 256 [ 80.038235][ T4474] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.065509][ T5937] loop5: detected capacity change from 0 to 1764 [ 80.078160][ T5929] loop1: detected capacity change from 0 to 1024 [ 80.093147][ T5929] EXT4-fs: Ignoring removed nomblk_io_submit option [ 80.124212][ T5937] iso9660: Bad value for 'check' [ 80.142446][ T5929] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.233423][ T3312] ================================================================== [ 80.241557][ T3312] BUG: KCSAN: data-race in shmem_add_to_page_cache / shmem_getattr [ 80.249492][ T3312] [ 80.251835][ T3312] read-write to 0xffff88811f9b2810 of 8 bytes by task 5940 on cpu 0: [ 80.259921][ T3312] shmem_add_to_page_cache+0x4b2/0x5b0 [ 80.265404][ T3312] shmem_get_folio_gfp+0x4f3/0xd60 [ 80.270539][ T3312] shmem_write_begin+0xfc/0x1f0 [ 80.275407][ T3312] generic_perform_write+0x183/0x490 [ 80.280704][ T3312] shmem_file_write_iter+0xc5/0xf0 [ 80.285841][ T3312] __kernel_write_iter+0x319/0x590 [ 80.290981][ T3312] dump_user_range+0xa7d/0xdb0 [ 80.295772][ T3312] elf_core_dump+0x21a2/0x2330 [ 80.300567][ T3312] coredump_write+0xacc/0xdd0 [ 80.305272][ T3312] vfs_coredump+0x26c7/0x3130 [ 80.309973][ T3312] get_signal+0xd80/0xf60 [ 80.314330][ T3312] arch_do_signal_or_restart+0x96/0x450 [ 80.319897][ T3312] irqentry_exit+0xf7/0x520 [ 80.324425][ T3312] exc_general_protection+0x153/0x1e0 [ 80.329814][ T3312] asm_exc_general_protection+0x26/0x30 [ 80.335369][ T3312] [ 80.337694][ T3312] read to 0xffff88811f9b2810 of 8 bytes by task 3312 on cpu 1: [ 80.345234][ T3312] shmem_getattr+0x68/0x200 [ 80.349753][ T3312] vfs_getattr_nosec+0x146/0x1e0 [ 80.354715][ T3312] vfs_getattr+0x48/0x60 [ 80.358970][ T3312] vfs_statx_path+0x28/0x140 [ 80.363577][ T3312] vfs_statx+0xc4/0x170 [ 80.367739][ T3312] vfs_fstatat+0x118/0x170 [ 80.372155][ T3312] __se_sys_newfstatat+0x55/0x3e0 [ 80.377189][ T3312] __x64_sys_newfstatat+0x55/0x70 [ 80.382221][ T3312] x64_sys_call+0x2c64/0x3020 [ 80.386911][ T3312] do_syscall_64+0x12c/0x370 [ 80.391514][ T3312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.397408][ T3312] [ 80.399730][ T3312] value changed: 0x00000000000006f7 -> 0x00000000000006fa [ 80.406834][ T3312] [ 80.409154][ T3312] Reported by Kernel Concurrency Sanitizer on: [ 80.415303][ T3312] CPU: 1 UID: 0 PID: 3312 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(full) [ 80.426333][ T3312] Tainted: [W]=WARN [ 80.430134][ T3312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 80.440188][ T3312] ================================================================== [ 80.464375][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.523669][ T5948] SELinux: Context › is not valid (left unmapped). [ 80.530637][ T5948] netlink: 40 bytes leftover after parsing attributes in process `syz.6.539'. [ 80.592985][ T5950] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 80.616891][ T5950] EXT4-fs (loop4): 1 truncate cleaned up [ 80.646616][ T5950] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.677379][ T5943] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 80.706418][ T5948] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 80.743149][ T5948] bridge1: entered promiscuous mode [ 80.904525][ T5950] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=5950 comm=syz.4.540 [ 81.246843][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.