last executing test programs: 53.393059162s ago: executing program 4 (id=168): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000000)={0x10000, r0, 'id0\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r6 = add_key$user(&(0x7f0000000080), &(0x7f0000000140)={'syz', 0x0}, &(0x7f00000001c0)="03", 0x1, r5) keyctl$setperm(0x5, r6, 0x90000) keyctl$search(0xa, r5, &(0x7f0000000280)='user\x00', &(0x7f00000002c0)={'syz', 0x0}, r5) timerfd_gettime(r1, &(0x7f0000000180)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="280000001400090a0000000000000000021f4800", @ANYRES32=r4, @ANYBLOB="08000200e4"], 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f0000000280)={0xfff, 0x8, 0x1, 0x5, 0x2e7}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x1000003, 0x0, {0x0, 0x0, 0x74, r4}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x4000) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1bfe966350000000000000000400000000000000", @ANYRES32=r1, @ANYBLOB="b000"/20, @ANYRES32=r4, @ANYRES32, @ANYBLOB="000000000500"/28], 0x50) 52.749210279s ago: executing program 4 (id=173): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="fc010000190001000000000000000000fc000000000000000000000000000001ac1414bb00000000000000000000000000000101000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080ffffff00000000000000000000000000000000000000000000000000000000000000000000000044010500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb000000003c00000000000000fe80000000000000000000000000000000000000000000000000000000000000000000007f000001000000000000000000000000000000006c00000000000000ac1414aa0000000000009bdd32f90000000000000000000000000000000000000000000000000000fe8000000000000000000000000000aa00000000330000000000000000000000000000000000ffff000000000100"], 0x1fc}}, 0x0) 52.746901169s ago: executing program 4 (id=175): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYRES16=r1, @ANYRES64=r1, @ANYRES32=r2], 0xa8}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000580)=ANY=[@ANYBLOB="2c0000002975ac296a8ce08f365077e16d79c79ded072f789b9377a335973f4d0ff915b81a03f82fdd725b90c18f860bd30c16b1faa756892b28766203385447df02be9bbd339ac4ac7a8cf76cdf7f030089c7ec53914f91bf6bd7a6a5c183c85cbe45304929591b76db2f1dde852cb4acf11b6fdc3e7eb1a7c04b", @ANYRES16=0x0, @ANYBLOB="1709000000000000000001000000050007000000000008000900000000000600020000000000"], 0x2c}}, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x3) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000540)='./file2\x00', 0x808d, &(0x7f00000000c0), 0xfe, 0x50a, &(0x7f0000002700)="$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") socket$inet(0x2, 0x80000, 0x0) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000001300)={0xc, {"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", 0x857}}, 0x1006) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_config_ext={0x4, 0xa}, 0x9092, 0x0, 0x43a1bd76, 0x9, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4040000000, r4, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000900)=@bpf_ext={0x1c, 0x1d, &(0x7f0000002580)=ANY=[@ANYBLOB="180000000d000000000000000000000018110000abe118b887f3280ac2e4c5907cd513e1dde49a7bdee4ea58f3012080ced4b71ed5ca16c5961692c192646740b974d97127e0d87083737c6b7e70d1122529dc98f6cb5b3f257bff60faa55859a0961bb71efb9af1a64a54ca7fcdec2145074610cfd2b19b6d34d6df5ab3f6724f3a49f110a73873a1921850bace36", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000008520000005000000b7080000000000007b8af8ff00000000b7080000810e00007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a5000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x4, 0xb6, &(0x7f0000000740)=""/182, 0x41100, 0x58, '\x00', r0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000800)={0x3, 0x1, 0x338, 0x8}, 0x10, 0xedd6, 0xffffffffffffffff, 0x6, &(0x7f0000000840)=[r4, r4], &(0x7f0000000880)=[{0x2, 0x4, 0xb}, {0x0, 0x4, 0x0, 0xb}, {0x4, 0x2, 0x7, 0xa}, {0x5, 0x3, 0xb, 0x8}, {0x4, 0x5, 0x5, 0x4}, {0x4, 0x1, 0x4, 0x8}], 0x10, 0x4}, 0x94) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) read$hidraw(r5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000011c0)={0xffffffffffffffff, 0xe0, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000a00)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000a40), 0x0, 0x72, &(0x7f0000000400)=[{}, {}], 0x10, 0x10, &(0x7f0000001000), &(0x7f0000001040), 0x8, 0xd7, 0x8, 0x8, &(0x7f0000001080)}}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000039000900000000000000000001000000040000000c000180060000000547000008"], 0x38}}, 0x0) 52.666118254s ago: executing program 4 (id=182): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$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") r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x107b42, 0x32) ftruncate(r2, 0x6000000) write$P9_RWSTAT(r1, &(0x7f0000000380)={0x7, 0x7f, 0x9}, 0x7) pwrite64(r2, &(0x7f0000000140)='2', 0x1, 0x800) fallocate(r0, 0x0, 0xbf5, 0x2000402) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000380)={r5, 0x2, 0x1ff, 0x0, 0x3c, 0x5}, &(0x7f00000003c0)=0x14) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r0, 0x0, 0x0, 0x0, 0xfffffffffdffffff}) set_mempolicy(0x1, &(0x7f0000000e80)=0x1ff, 0x7582) ftruncate(0xffffffffffffffff, 0xfffffffffffff543) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a48000000060a010400000000000000000a0000040900010073797a31000000000900020073797a32000000001c000480180001800d00010073796e70726f78790000000004000280140000001100010000000000000000000100000a0c580d8d46586a98c57817657a2f3ead1abc6f4c06e6f556e43079a638abc144bbbe0333829d342afb14fddf671fc65e7d7e412f260dc2a6198ef68c6158b4fb5f4435058c572549b6618178b4a1dfdaeb0dfded1ac7c2e18d95de7f401ef6e893236aebf6ea54b8b14e7d7166339255ce46d493c4ea1a5bcfb944f24993831f640c"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) r7 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r7, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r7, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b2c25fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b4003a00", 0x2a}], 0x1}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000140001"], 0x14}}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f0000000680)) syz_clone(0xc3243400, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) 52.316450484s ago: executing program 4 (id=189): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) io_uring_enter(0xffffffffffffffff, 0x82, 0xbc7b, 0x1, 0x0, 0xfffffffffffffe60) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[], 0x48}}, 0x0) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 51.70999388s ago: executing program 4 (id=199): syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6000000000142c00fe800000000000"], 0x0) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0x20, &(0x7f0000000100)={&(0x7f0000000880)=""/255, 0xff, 0x0, &(0x7f00000006c0)=""/99, 0x63}}, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f00000009c0), 0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x10, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x9bf, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x46, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r0}, 0x94) (async) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$netlink(0x10, 0x3, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) ioctl$RTC_ALM_SET(r3, 0x40247007, &(0x7f0000000040)={0x7b, 0xd, 0x9, 0x14, 0x6, 0x1000, 0x1, 0x6c}) (async) write$binfmt_misc(r2, &(0x7f0000000140), 0x4240a2ca) (async) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000180)={'filter\x00', 0x7, 0x4, 0x4e8, 0x110, 0x2f8, 0x110, 0x400, 0x400, 0x400, 0x4, &(0x7f0000000080), {[{{@arp={@remote, @multicast1, 0xff, 0xffffffff, 0x9, 0x1, {@empty, {[0xff, 0xff, 0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0xff, 0x0, 0xff]}}, 0x6, 0x0, 0x7fff, 0x9c, 0xfffb, 0x4, 'batadv_slave_0\x00', 'vlan0\x00', {}, {0xff}, 0x0, 0x1c2}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @empty, @multicast1, @private=0xa010100, 0x4, 0xffffffff}}}, {{@uncond, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x28, 'system_u:object_r:systemd_logind_exec_t:s0\x00'}}}, {{@arp={@empty, @remote, 0x0, 0xff, 0xa, 0x2, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}, {[0x0, 0x0, 0x0, 0xff, 0xff, 0xff]}}, {@mac=@broadcast, {[0x7f, 0xff, 0xff, 0xff, 0xff, 0xff]}}, 0x0, 0x4, 0xe, 0x7f, 0x0, 0x13, 'gretap0\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0x0, 0x350}, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xf55, 'syz0\x00', {0x3}}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x538) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000002110001180090001006c61737400000000480000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000001c0003800c0000800800034000000002"], 0xdc}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r5, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x24044092) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r9, 0x0, 0x39000, 0x0) (async) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) (async) syz_extract_tcp_res$synack(&(0x7f0000000980), 0x1, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) timer_settime(r10, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) (async) splice(r8, 0x0, r7, 0x0, 0x408cd, 0x0) write$binfmt_elf64(r7, &(0x7f0000000100)=ANY=[], 0xfffffe3e) (async) socket$inet_sctp(0x2, 0x5, 0x84) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) (async) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 51.670294752s ago: executing program 32 (id=199): syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6000000000142c00fe800000000000"], 0x0) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0x20, &(0x7f0000000100)={&(0x7f0000000880)=""/255, 0xff, 0x0, &(0x7f00000006c0)=""/99, 0x63}}, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f00000009c0), 0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x10, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x9bf, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x46, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r0}, 0x94) (async) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$netlink(0x10, 0x3, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) ioctl$RTC_ALM_SET(r3, 0x40247007, &(0x7f0000000040)={0x7b, 0xd, 0x9, 0x14, 0x6, 0x1000, 0x1, 0x6c}) (async) write$binfmt_misc(r2, &(0x7f0000000140), 0x4240a2ca) (async) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000180)={'filter\x00', 0x7, 0x4, 0x4e8, 0x110, 0x2f8, 0x110, 0x400, 0x400, 0x400, 0x4, &(0x7f0000000080), {[{{@arp={@remote, @multicast1, 0xff, 0xffffffff, 0x9, 0x1, {@empty, {[0xff, 0xff, 0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0xff, 0x0, 0xff]}}, 0x6, 0x0, 0x7fff, 0x9c, 0xfffb, 0x4, 'batadv_slave_0\x00', 'vlan0\x00', {}, {0xff}, 0x0, 0x1c2}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @empty, @multicast1, @private=0xa010100, 0x4, 0xffffffff}}}, {{@uncond, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x28, 'system_u:object_r:systemd_logind_exec_t:s0\x00'}}}, {{@arp={@empty, @remote, 0x0, 0xff, 0xa, 0x2, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}, {[0x0, 0x0, 0x0, 0xff, 0xff, 0xff]}}, {@mac=@broadcast, {[0x7f, 0xff, 0xff, 0xff, 0xff, 0xff]}}, 0x0, 0x4, 0xe, 0x7f, 0x0, 0x13, 'gretap0\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0x0, 0x350}, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xf55, 'syz0\x00', {0x3}}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x538) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000002110001180090001006c61737400000000480000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000001c0003800c0000800800034000000002"], 0xdc}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r5, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x24044092) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r9, 0x0, 0x39000, 0x0) (async) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) (async) syz_extract_tcp_res$synack(&(0x7f0000000980), 0x1, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) timer_settime(r10, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) (async) splice(r8, 0x0, r7, 0x0, 0x408cd, 0x0) write$binfmt_elf64(r7, &(0x7f0000000100)=ANY=[], 0xfffffe3e) (async) socket$inet_sctp(0x2, 0x5, 0x84) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) (async) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 41.487940931s ago: executing program 1 (id=310): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="fc010000190001000000000000000000fc000000000000000000000000000001ac1414bb00000000000000000000000000000101000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff800000000000000000000000000000000000000000000000000000000000000000000000000044010500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb000000003c00000000000000fe80000000000000000000000000000000000000000000000000000000000000000000007f000001000000000000000000000000000000006c00000000000000ac1414aa0000000000009bdd32f90000000000000000000000000000000000000000000000000000fe8000000000000000000000000000aa00000000330000000000000000000000000000000000ffff000000000100"], 0x1fc}}, 0x0) 41.404047805s ago: executing program 1 (id=312): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r1, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000800}, 0x84) r2 = socket$inet6(0xa, 0x3, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x50, r4, 0x8, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x1}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3ff}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xa, 0xbe, "b26a3bc0e0d9"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f00000002c0)=0x900000, 0x4) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r3) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000380)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000003c0)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x44, r6, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r8}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x440) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, &(0x7f0000000500), 0x6, 0x1) r9 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r9, 0x65, 0x4, &(0x7f0000000540)=0x1, 0x4) r10 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r10, 0x11b, 0x5, &(0x7f0000000580)=0x48, 0x4) sendmsg$NL80211_CMD_GET_STATION(r3, &(0x7f0000000740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000700)={&(0x7f0000000600)={0xf0, r4, 0xa99ff54176cb29c7, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7, 0x4d}}}}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x600}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xbf, 0xac, "25a3c3619940aa7c7c831c5a1fadbb06cac9ed83c01b18b29aa7f95c372e8e27c533787e5f8e405a7176e89265175411bcacdc9c71ad6aa542104b036af7d68ee307880edd1569829b800878b86e82fbfa0e80ac86c3c5abf90c5416728909e615623fbd5cf02ad9f1896224ba08db6a6de0bda5f6b295ddd9f5528f3cf9ec48f83b335716e1c996451183d3a35547dd1d73968679949bc0f9104211b6a2be206bb186fa5ceb7355fb82b7c76e4920cb5e682661f097f8b49db351"}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4008004}, 0x800) sendmsg$nl_generic(r3, &(0x7f0000000bc0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000b80)={&(0x7f00000007c0)={0x384, 0x1d, 0xd00, 0x70bd27, 0x25dfdbfe, {0x1}, [@generic="030f7e202cd43e3a087c49e5f6befcec290d2e25927877c10fa8f81cce609f0163394352bdb04ddc17ccc2c469c2621f6ce3f11bdf4a8e0bc1ea642588197e91624fde7e59da3f42063da4915ca72ca71ffd3b07a61e479edb3185de1d96c9241262d459f5aa9a8c6fcf930fbb5db4f53c", @generic="5c57e7126510d59ae98aee0e3122ece8c1588e2a2048632fa554cb3015e5a56b", @nested={0x111, 0x25, 0x0, 0x1, [@generic="d42309f3e171cc597e0d82696733e75e7d00da460335792cab0c55c5cf872269cfb78a72483d4d10439cf54eae5bf43794812c4c61f933756b0f97b7b8", @typed={0xce, 0x143, 0x0, 0x0, @binary="b357b2d893864826390c80ee55621e38ce5f80cc09b85b9e038e7ebc944d016d031d62dbb12bb94469f8025963a15793bfe313fbdfcbd9a7e891eeea12fc9c48fa486c45e0fac1726a46fc93bb73f5e0aa95bc0002af1af608f4bee83eca1f20b61f4a2bdcdf2ba3fa5afbddf79961b4f9ab5c2695b0673b15eda24d18a3d509c0ada4500f4784a1a32eca6b932cf28623a5cb67395166e92579636ca3ea7d5de7647ef113fcec478b6e84426006e28fcb5e29b4d477b6d9ab51645167785cee7254d39958fb301334cc"}]}, @typed={0x14, 0xc5, 0x0, 0x0, @ipv6=@empty}, @nested={0x1b3, 0x2e, 0x0, 0x1, [@generic="e6f13d2bcbce8bbe0d16c70d5a09768622b256d724315a32139a64a2772e6fd07b18ea7eb51bfef477df1eedaa333f7e38a850ed0b59786a0ab2f3c6cf06fb08dc09753fd263bf2210b3f1ff32c55ec6f0d6c5e37b729fa975e0322e012c27981008c022255afaae09cec3c14b27f6fdd9542879aac569365d50a95e45ccd3ef70849a51cc7c9ce0efaac4262f3918ff16ab99ef695812bfbd9660a7651a0e274cce258f0d44527280c7f460df1747abf9b44b8c672d87a634570504c4f27864d5e1826f7dfc83764bcac6e548c385674487202706565bf475f1e05170acef42aae1cd8f", @typed={0x8, 0x3b, 0x0, 0x0, @u32=0x3}, @typed={0x8, 0x12c, 0x0, 0x0, @ipv4=@broadcast}, @nested={0x4, 0x112}, @nested={0x4, 0x46}, @generic="810c20bcf4dbef8f708cf061057d3b067bd56ed1ad7d53e47f1e661498ffcebde35467d6df4bd3fd78d81075282ff57cfb3114e04997fd2ab7d03409f8414f5d15ea33a7316e5ea88f44b7b3294e99c15ddfe60b39f762c35f72fab8e142d443db43afa18a1535a7b3a845b47ec5d561de271ada1ad45d74a2fc2d7da7552459a2c68092db7093d58fadea4923eb66a5274e927816ab6f461692d4ed3e13e5ea0df0f49a8b3c8ba449078c6adda19c3d4bc3ed"]}]}, 0x384}, 0x1, 0x0, 0x0, 0x8000}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000c40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r3, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x58, r4, 0x200, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x33, 0x7d}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x198}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x70}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000001}, 0x800) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000dc0), r3) sendmsg$TIPC_NL_NET_GET(r3, &(0x7f0000001040)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001000)={&(0x7f0000000e00)={0x1d8, r12, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x40}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x88}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1ff}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xe53}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5cab}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffc}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffc}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x47}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xa}]}, @TIPC_NLA_NODE={0x60, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "17e6f94cc26980dfc5bdb3591fe2aa04cf89f547515017f157ad"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1ff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xc5}]}, @TIPC_NLA_MEDIA={0x64, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xea}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x1d8}}, 0x4) r13 = syz_genetlink_get_family_id$mptcp(&(0x7f00000010c0), r3) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r3, &(0x7f0000001240)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x88014120}, 0xc, &(0x7f0000001200)={&(0x7f0000001100)={0xe0, r13, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x24, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xf}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0xe0}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) setsockopt$XDP_RX_RING(r10, 0x11b, 0x2, &(0x7f0000001280)=0x410, 0x4) r14 = syz_genetlink_get_family_id$smc(&(0x7f0000001300), r3) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000013c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x28, r14, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0xc739cccecc64832f) getpeername$inet6(r2, &(0x7f0000001400)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000001440)=0x1c) 41.311604391s ago: executing program 1 (id=316): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=@base={0x12, 0xa4, 0x8, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0xe, &(0x7f0000001440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="00007b0000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000630000001800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x6}, 0x94) 41.307251971s ago: executing program 1 (id=318): syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f0000000280)='./file0\x00', 0x2000000, &(0x7f0000000b00)=ANY=[], 0x0, 0x709, &(0x7f0000001480)="$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") r0 = syz_io_uring_setup(0xbde, &(0x7f0000001400)={0x0, 0xec25, 0x400, 0x3, 0xd4}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r4 = syz_open_procfs(0x0, 0x0) preadv(r4, 0x0, 0x0, 0xb1, 0x5) timer_settime(r3, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) (async) timer_settime(r3, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r5 = syz_clone(0x0, 0x0, 0x43, 0x0, 0x0, 0x0) process_vm_writev(r5, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETAW(r6, 0x5407, &(0x7f0000000040)={0x5, 0x0, 0x9, 0x1000, 0x16, "0400"}) ioctl$TIOCMSET(r6, 0x5418, &(0x7f0000000000)=0x8001) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) eventfd2(0xd8df, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x6, 0x4007, @fd, 0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000300)=""/157, 0x9d}, {0x0, 0xe}], 0x2, 0x8, 0x1}) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x6, 0x4007, @fd, 0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000300)=""/157, 0x9d}, {0x0, 0xe}], 0x2, 0x8, 0x1}) add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r7 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r7, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e22, 0x100, @private2, 0xfffffffa}, {0xa, 0x4e23, 0x0, @mcast1}, 0x0, {[0x4, 0x2000003, 0x0, 0x2, 0x0, 0xfffffffc, 0x0, 0x8]}}, 0x5c) (async) setsockopt$MRT6_ADD_MFC(r7, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e22, 0x100, @private2, 0xfffffffa}, {0xa, 0x4e23, 0x0, @mcast1}, 0x0, {[0x4, 0x2000003, 0x0, 0x2, 0x0, 0xfffffffc, 0x0, 0x8]}}, 0x5c) ioctl$SIOCGETSGCNT(r7, 0x89e1, &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x27}}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x3000, 0x0, &(0x7f0000001000/0x3000)=nil) socket$pppl2tp(0x18, 0x1, 0x1) (async) r8 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) (async) r9 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r8, &(0x7f0000001080)=@pppol2tpv3={0x18, 0x1, {0x3, r9, {0x41, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}, 0x20021003}}, 0x2e) getsockopt$sock_buf(r8, 0x1, 0x1c, 0x0, &(0x7f00000000c0)=0x3a) (async) getsockopt$sock_buf(r8, 0x1, 0x1c, 0x0, &(0x7f00000000c0)=0x3a) 40.584717062s ago: executing program 1 (id=323): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000001000010400000200000000feffff7f00", @ANYRES32=0x0, @ANYBLOB="0386010000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) 40.205848595s ago: executing program 1 (id=330): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x40938, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x26, 0x1, 0x6, 0x0, 0x0, 0x0, 0xf11b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7a, 0x0, @perf_config_ext={0x6, 0x8}, 0x90d2, 0x0, 0x43a5bd76, 0x9, 0x9, 0x8, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0xb, 0xffffffffffffffff, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) gettimeofday(0x0, 0xffffffffffffffff) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6000000000142c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa0600ff"], 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r4, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff6, 0x0, 0x0, 0x10, 0x3}, 0x94) r6 = accept$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14) r7 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000019200), 0x904c1, 0x0) lseek(r7, 0x7a4d, 0x2) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0xfffffffd) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x1, 0x800001, 0x0, 0x0, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mlock2(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x1) r10 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') pread64(r10, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x9c00, 0x0, 0x3) r11 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r9, @ANYBLOB="00000000100000001c001a80080002802d00", @ANYRES16=r11, @ANYRES32=r11], 0x44}}, 0x2000800) bind$packet(r6, &(0x7f0000000240)={0x11, 0x1, r9, 0x1, 0x83, 0x6, @multicast}, 0x14) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0xffffffffffffff62, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x7000000}, 0x48) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x70bd26, 0x1000000, {0x0, 0x0, 0x0, 0x0, 0x157f}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e22}]}}}]}, 0x3c}}, 0x40800) 40.176259527s ago: executing program 33 (id=330): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x40938, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x26, 0x1, 0x6, 0x0, 0x0, 0x0, 0xf11b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7a, 0x0, @perf_config_ext={0x6, 0x8}, 0x90d2, 0x0, 0x43a5bd76, 0x9, 0x9, 0x8, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0xb, 0xffffffffffffffff, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) gettimeofday(0x0, 0xffffffffffffffff) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6000000000142c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa0600ff"], 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r4, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff6, 0x0, 0x0, 0x10, 0x3}, 0x94) r6 = accept$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14) r7 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000019200), 0x904c1, 0x0) lseek(r7, 0x7a4d, 0x2) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0xfffffffd) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x1, 0x800001, 0x0, 0x0, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mlock2(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x1) r10 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') pread64(r10, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x9c00, 0x0, 0x3) r11 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r9, @ANYBLOB="00000000100000001c001a80080002802d00", @ANYRES16=r11, @ANYRES32=r11], 0x44}}, 0x2000800) bind$packet(r6, &(0x7f0000000240)={0x11, 0x1, r9, 0x1, 0x83, 0x6, @multicast}, 0x14) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0xffffffffffffff62, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x7000000}, 0x48) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x70bd26, 0x1000000, {0x0, 0x0, 0x0, 0x0, 0x157f}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e22}]}}}]}, 0x3c}}, 0x40800) 4.246493534s ago: executing program 5 (id=854): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x3, 0x4, &(0x7f0000000ac0)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', r0, @fallback=0x10, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x1}, 0x10}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYRES16=r2, @ANYRES64=r2, @ANYRES32=r3], 0xa8}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000580)=ANY=[@ANYBLOB="2c0000002975ac296a8ce08f365077e16d79c79ded072f789b9377a335973f4d0ff915b81a03f82fdd725b90c18f860bd30c16b1faa756892b28766203385447df02be9bbd339ac4ac7a8cf76cdf7f030089c7ec53914f91bf6bd7a6a5c183c85cbe45304929591b76db2f1dde852cb4acf11b6fdc3e7eb1a7c04b", @ANYRES16=0x0, @ANYBLOB="1709000000000000000001000000050007000000000008000900000000000600020000000000"], 0x2c}}, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x3) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000540)='./file2\x00', 0x808d, &(0x7f00000000c0), 0xfe, 0x50a, &(0x7f0000002700)="$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") socket$inet(0x2, 0x80000, 0x0) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000001300)={0xc, {"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", 0x857}}, 0x1006) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_config_ext={0x4, 0xa}, 0x9092, 0x0, 0x43a1bd76, 0x9, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4040000000, r5, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000900)=@bpf_ext={0x1c, 0x1d, &(0x7f0000002580)=ANY=[@ANYBLOB="180000000d000000000000000000000018110000abe118b887f3280ac2e4c5907cd513e1dde49a7bdee4ea58f3012080ced4b71ed5ca16c5961692c192646740b974d97127e0d87083737c6b7e70d1122529dc98f6cb5b3f257bff60faa55859a0961bb71efb9af1a64a54ca7fcdec2145074610cfd2b19b6d34d6df5ab3f6724f3a49f110a73873a1921850bace36", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000008520000005000000b7080000000000007b8af8ff00000000b7080000810e00007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a5000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x4, 0xb6, &(0x7f0000000740)=""/182, 0x41100, 0x58, '\x00', r0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000800)={0x3, 0x1, 0x338, 0x8}, 0x10, 0xedd6, r1, 0x6, &(0x7f0000000840)=[r5, r5], &(0x7f0000000880)=[{0x2, 0x4, 0xb}, {0x0, 0x4, 0x0, 0xb}, {0x4, 0x2, 0x7, 0xa}, {0x5, 0x3, 0xb, 0x8}, {0x4, 0x5, 0x5, 0x4}, {0x4, 0x1, 0x4, 0x8}], 0x10, 0x4}, 0x94) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) read$hidraw(r6, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000011c0)={0xffffffffffffffff, 0xe0, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000a00)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000a40), 0x0, 0x72, &(0x7f0000000400)=[{}, {}], 0x10, 0x10, &(0x7f0000001000), &(0x7f0000001040), 0x8, 0xd7, 0x8, 0x8, &(0x7f0000001080)}}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000039000900000000000000000001000000040000000c000180060000000547000008"], 0x38}}, 0x0) 4.030078047s ago: executing program 5 (id=859): perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x8, 0x0, 0x0, 0x0, 0x0, 0x10000, 0xe2514, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x4}, 0x109281, 0x0, 0x1000, 0x3, 0x7, 0x0, 0x4, 0x0, 0x2}, 0x0, 0xffeffffffffffffb, 0xffffffffffffffff, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) socket$pppoe(0x18, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0}, 0x25c3d0f6441143b2, 0x0, 0x11000, 0x6, 0x2, 0x80000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdffffffffeffffff, 0xffffffffffffffff, 0xb) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_io_uring_setup(0x414, &(0x7f0000000400)={0x0, 0x2003f73, 0x100, 0x4, 0x70}, &(0x7f0000000340)=0x0, &(0x7f0000000600)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0xffffffffffffff3a, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r4, 0x0, 0x0, 0x0, 0x2000, 0x1, {0x1}}) socket$phonet_pipe(0x23, 0x5, 0x2) io_uring_enter(r1, 0x3516, 0xf4f5, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd020f4c0c8c56147d66527da307bf731fef97861750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3665f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447c2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2acb72e7ead0509d380578673f8b6e74ce23877a6b24db0000000000000003629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d7b90dfae158b94f50adab988dd8e12b1b56073d0d10f7067c881434af5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf77bfc95769a9294df517d90bdc01e73835efd98ad5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b31592479ecf2392548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbe1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5646ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4766e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec859c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f250057931d828ec78e116ae46c4897e2795b6ff92e9a1f63a6ed8fb4f8f3a6ec4e76f8621e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403f02734137ff47257f164391c673b6071b6ad0f05eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb79f5589829b6b0679b5d65a81826fc9b38f791c8f1892b51ad65a89bc84646ebf78f5d5d4804d9abb071fd711b5e7cc163b42a6510b8f5ee6747df0b560eabe0499bf1fef7c18bb9f55effa018679845c6598fb78bf1b8d9d9f04a5f6062c2bbb91952755b3f7c948268cb647d0a0bb1286480615941154a01d23734bcafe3b164474e2f2efa77850686ee4541f3e79efa63545a7ae53d5f0c40cc86473f7eb093980bd0d97bb4750128d9c519984c5f731ea259e71b2f12d67ce12e52c283e74594dfc933e625737ed231d61263721d46daf093f770357cd78fe1431aef52b4a0a933f1a5334ad03f3876fc8a8e187f80318427b4c922075cf829e3cc49d71d52137"], 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) close_range(r0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000000000"], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) read$msr(r0, &(0x7f0000000540)=""/133, 0x85) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000003, 0x20031, 0xffffffffffffffff, 0xffffe000) mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3, &(0x7f0000000000)=0x3, 0xa, 0x0) get_mempolicy(0x0, 0x0, 0x7fffffffffffffff, &(0x7f0000ffd000/0x2000)=nil, 0x2) 2.514568985s ago: executing program 2 (id=874): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="fc010000190001000000000000000000fc000000000000000000000000000001ac1414bb00000000000000000000000000000101000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000044010500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb000000003c00000000000000fe80000000000000000000000000000000000000000000000000000000000000000000007f000001000000000000000000000000000000006c00000000000000ac1414aa0000000000009bdd32f90000000000000000000000000000000000000000000000000000fe8000000000000000000000000000aa00000000330000000000000000000000000000000000ffff000000000100"], 0x1fc}}, 0x0) 2.478521546s ago: executing program 2 (id=875): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=@base={0x12, 0xa4, 0x8, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0xe, &(0x7f0000001440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="000000001d000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000630000001800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x6}, 0x94) 2.397679901s ago: executing program 2 (id=877): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x8000, &(0x7f0000000740)=ANY=[], 0x1, 0x2a4, &(0x7f0000000480)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0xc4142, 0x12) writev(r1, &(0x7f0000001000)=[{&(0x7f0000000880)="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", 0x107}, {&(0x7f0000000300)="f720545dd3b03efebdc5e0fccd4ebd5a12deb78fb2c5b13465656b6d7bbd6359c662bc2d12228e8af99d9f1012e0d43912798e5d1291ed84aeef6e", 0x3b}, {&(0x7f0000000cc0)}], 0x3) sendfile(r1, r0, 0x0, 0x7fffeff9) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x39000, 0x0) r4 = memfd_create(&(0x7f0000000340)='K=\t\xeb\xf8\xa7\x04\x9f\xe1hO\x8e\xd7\xb5\x93}\x8d\xed\x01L`\x9b`;\x1c\xfce5W\xb8B\xf8\xd2\xdeK\xc1=\xa06p\x19\x9c\xb5w>\xd6r\x90\xd65\xa6\x89\xab\xd7\xbd\x96\x9f\xfd\xacU\x0e\xd7\x12r\x7f|\xfa\x85;}\xdc\xc1j%-_\xb9+\v\xe0\xa5\xd9K*\x84[\xfcu#\xfc\x04\x96]\x9a/\xea\xd3<\xb1\xfc\x12\xccs\x88=\xc4\xcf\xe3\xe8\xb9w!\xb0H\x0e\x1c\x050\xdf\xab\xd9>\xa4d\x83O\x14\xf61\xf9\x12\x84\x91\x00\xc3\xe0^\xf1\xacC\x87\xb15\xab\xa1\x19x\vY@\xe3\x9dD\xaf>\x96\x97\x17\xafO\xf3\x14\xb8\xdb\xa2\xaa\xe7\xe7\x1e{,\xac\x9fQ\xe7\xa7\x830\xd5\xed\'\xb0\x1f\xda\t\xb2f/\x00\xd8[\xd2\xe8\f\\.\xfc\xdbj\xa2Gl\x9f\xb3\xdb\xa05(\xf0\xe5\xd7[\xbcm\xdaLn\xb98\xd0\x99\x84\xac\xee\v\x7fMZ;\xab\xd7\xbdf\xe3\xc7 *\xac]\xac\xb6n\x0fq\xfe\xd9\x90kut\x83\x93\xf1`gW\x01{\x17-V\xbc\xcd', 0x2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) splice(r2, 0x0, r4, 0x0, 0x408cd, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfffffe3e) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, &(0x7f0000000700)={{r4}, "3d306a3bcf61e1887c8edfbb26b3faa445cf33f1d18769047a0282a17879b71aa79af5682c2912e26eb842498227f0acad8850aadf7590f0c64b75e3c2cf9c75110e1ec1f72e29a753707256402ca386bd111d862771bd30d2dc7ac50a169d6d10e2225e72c8c0d50bb4e320aa88362f348de90f9d67556291033ea51366e87af6cf8f342686307cf002cd35f7971164ab9bba5c340fa298213248e14d6788eeedb9b1a3fd51d776bfa607f261e8485dcaee60b61c537923920cf7ea1b3786988df9e384ebe54566476a077804f80d284544e048182fd9d3aba98dc35e0bcec8291352a43dc57b44bc9a56f952c3aceff6889e39097c206aaade449dbe97873f21af8ae9199bda409945bd71ee9c4ebb045bf65a7dd3ab388772515b9319ca54e88dddcf0702327de0d64f6da15f0d25ab15cdbf6564cd4cc1ba75f100aea3dfc6284fad227c8390321e9bd0b82e1b250b5d38523ac32d66242687a67c35b312cb5dc755812fc61806022e298011eab488fb67ae6351c5afdc9449dbd73f18f8d7b2312c4955c14312903dff503315bad3db985a36373f3458a256e30791c02b1a6ddea16ab55066d516ed7966b01a9130dac1b5fbf10032a61f182df3e4f76278368995941e105ee9203556e1d05ed43465289f3760f85def14694e9d546e88334b40f9cc719a27323241b758d5348ac8e49c52b48ea639a1d968af0b41dcbdfb1f8082a82fa8a33773fa8b2215d1beb58bee342dc7b0f4a23ff2ab398cd6a3c7865145912de4042ca0cc2bf8d84d8234f6e784312215084cdf70029cf1e09bc9a5e11b9ac832fe992398fff38127942bcdabcbd0605d1aef5ce8063688d35956769808b41b4caaf504e1ad5976d9f9e1ff4e99ddeb34401a88a4a7a3372c914f7e6394d8753334681fddcc03c8ebc680275c10a2da46888e877400cfeda927c9f29d8f885fdf93a5caf89610aa177d3c37f4061227e5224250dcf88f031d2b745339347dbcc70ce68a3fc3b62a142cf0624526fde981a26128c648bdca4a54a4c4994f2567dde860bd4a60e6afb91923eea874086e0abc5a7b138e1fe0c32243798899a48c0466e0a9cbca98549fa7ac5bd59dd621523ab02e5e15c2a9ae5fb7980fd919732ef75eaab8f6a446b51be8a7ce69756b018fadba632b37c6a17795869a244aad66d1a2a3d8c3c648e0d62467deea97bb32dcddddc057967bc14843b5b6c467aba1f660adcdd6a28544d7b44dd015db5f54d41d476075c724cbc287bece569b0f68151769f64506b05cd7a71c3dc9f8a5c2f5eedd10de7aa6a8b2eed0d57e8d256a79a629582d2eea12b4840144d753b6c603b92c7074cbc4bce3db038d7536d83fec2471795c097ab8a626dc019d85436ba3a02f661703ce22ecde218e8e7cbe2c93339f27167cd2841e2f3d1fd086659c358ab6a151f1a6dad386028f132a59d5dfd347f47a3f3972f3fd052f848ba4beab86f8d7bfaf8fb618dd35f16abbe67f3b5ae58540e5207ee3c4e038463a11d01d0cc8f9554b12cfe86728a19adb0f9334c1ef71bc006b51695c31d94fb3f1e607aa0a52e405a306dcf6a4e9861a3f5e6950d768e36c683976d432eae38c189f44365259076378290c5d05926143bf638074ea72584d15a6ffb86e430078b118b5f4876c9336e74b267d8937d8912ba45b1887dd0460a23bd37f999ca5dfea405ad68e308eb50143682a1d0af8f2a061bb079adacaeba5be9de2299d6a606b195974c8181c94360c07248a70da12b977d3c27efb6adfef94a3143a323068c346bb1aa79ff60425fa4d10cdcca83065f84200834cb1fb0924160a7a09a23a0f7b172faf3f847d5c64e646363aac4052b1a436c6bc8de9c3bca67a235cee533c88e063202e420a307422a75e2f5eae18f931da5628df04052cf2d7109daa09e5ccedafd57e909dc38e95e3e4cb7ddcb858c7b176d5ea38a44ab337cc41bfa86c790e98afed2a8c1bc7f10ee30b0356ba0ffeefef49fd4e189411b42b6f07cd444e113ad815aa1fee8d3c8653938daddf82ba58cd4b32db17bd708d5b74cf93c3088138d9de748021eb7e89355e045081e1a007a365d214fad9f8b5fa32e55846747e026710a1eeb767455cb080387ac88030c36b0d1fcdf10eb3246253697fd4ae66b1d35c761187a18273eab9bf56d33dede573d4cee116d97e4f55a4205ef669b26e70f81876b8ecff1a97f03f7b7afb9f88a90b49fe36028bc248d4bfefabf651d49cddbf5b0cb09ac809b1d9ad80d0bb7f8b37aa158f4fa45fc62eb6c34a4e84e87ba71986dfd8b3f56623c703dec59f34a450bdca0fb68b9a126856229a63dec08835847aefbd28e92936fda628a8d4f41defd34b0afe8bd2462a461527d71bc6e84594101d01fb3955c64b1760781000ac9515167058e96e5fa3467e94e72dc5aab150d5e2f3b31477e28e0ef22d5959a1bc4bdcba98bfb07319ea1cf0c518f261abc84b3d0636fd485c76a4bbc7e96875c05db795b720b49fb0f8e9927e75b830fe440619178b3c5c3ae5942330c6ed8ed8bc194c5b201c109098aa962d137c15028acf247f039b594e97c0bfb1704d493ae3bd3455cf28b70250aa94d47068a0c6a0800a3d26153322e778677fb9d0d007bdaef0afc4d5fa3a1a9cf43beb631f813bcf0fdd5f712c6e5e1bbc8d4e07352da323aaf6e32efe095ed77ef5f54e7328ce192ff6fdc2d5bea8a9d33f9aa47c151f473796384b4517893a2f080bf52260f903bf2da6ea02a4d85f0f59b272eec84a993c10d80bd7ffcf30e44d27e67e3d32d8a4063bce39dc7ffed65b98a49a95eaf420952b7f56378afa8800c60847cc4866a4aba7a3bc7670a42ceeb5073c5ef9e1df4ebb626d5029baf3cc02c27d1fdf4c44d23d74472d5ed86c4cd6430362da5bc389a5e7b02bcda99da5689fcc0258de04cbe4567b14e0198c3635b7e1e81685a81c35fece3fa6de353eb4d85deb299b257ab17fa8f07c192bc597dc75bf93918ebe6189689da2bc27cd308c2c4718454f7223ae8eba91eddae1205e38ed6252a88d2cb5164dcd54856efbbfff4da45b0fa9117a1e3d84d8d21d7e9e5abd27041cbab9469694ae549f251437823c712cf8d15e41fd1fc4090aeb88962dcd758853638d6d18b86823ad93412e19084e2972ef053f2f9e02adf68381cb363b08418f2fa04d3690ff1962b51b21da1e10dab2497f54b553ddb3a35df5e4f71a175365307eeece038b987c48b49d4cd16e16e2db881028b9688a3204cdaf57933550a42e409c178eabf3bf9a1281f45338bd4e779d1cc93f3abfd6f6ff0a5c17df1277c47c57706531d1dfa4299662a933548cdf1a7e5b44e362a51ea62a98bba2bf52452e5130a1da0f97a17ec8dbb9c6aca81afabdc34e32c6eceebabf64e96064a0708f333e2665271bed5d3560c3bd87d1ac298603ad0d8d06f6bb45fae30ad8b1dfd2c97d6ee819ad43861f64fa3d314143cfec697d0d15d458f5e43e3fea61dbbda6597c18bcb844f54ea818689c8565b2d5badc77d424b0fb9b765cbc2bf81f551d04498d7680a3ebd1f5f4045537378df2760cdf39d259fc599837f9664770ea94c46c3f8d0cbbae521744f11ed6810c1a8093a7629bf22fbaa366966bab27bbe65f0ff8e94cd75aea4bec896bda56e0fc7979968d824e583eac16df4859537af7f353543ac3c09cfe46d6a47e83be1e6839cee10a5dbf94ac65f55b8a13a2474288cf85fed72fa8e0244a7807e6918fba767e8f7a475b6de4822bb51589354d01abe991f7cf6c558d87c1bdc7652f84c60a471f40f15e51a43f1d774966a407abf8c6aa8b42cbbbce1930237e3053635e7ab9fa8814df441ffcdff78bcbefa3cc388a0b3934e204e5222b56843ad4ff6b34140d05969a655487967abb45139268eb07aacc5993acba9ac400183ba230d03c42cd66489e22892cb21b0871f1f1d3880aba34d9f86d34dbd4a8255e19cf2c92e4304998f744457fe5ba7a713a0f793338fbcb102e345ed4acb4c0dd9b2dfb16fe11a6dfd059262187f5cbfa09f72d330a78b0ef376a7a19ca27b9faa2d2cead473007dd20b581f661edf8e4b33c0d363c5a7987a67432f93764726dee2b576b41370f31dbfc5737b780c8ac15d22bd1042a823ae26deed9d663736301d36acaea2351cdc56b5fea9fa0cf3e29abdb377079f0209688e806e951cbd545bf85063caa0d316172e667d4d3e3d07581b48f1c94091fb55d0dfab6a5a434e6ea619086bcd226239dc44a0b8bba24ab6332aa5b79352183f79ab54a53028df23d196b981537d24f4ef2b47ecfd9c91a74f94daa2ae7138c2442ee26f04d4ab4c1de3d0618d00832ee51721bbf09011bbf28a8aaa0e98d8d46ed5ee88140e0240fc956aa0c207b0bc9abba91d7addf33b93144a374924acba14e1a25dc2c0387fc6d3a13434b0aec9103b112316e2ae537973aecd43dc38c73cdc5e780c479f0cdbca0dd9ff56cb76018998fa20f9928d58b67632b84e68bc64844c1235a1f8c114ca56892acd192211a05b81ebdc6def8c7bd1f24e7126ac4b2358e1e238d5d91e5aa187bd6b0b542eedd6273656e1c8747558b3b813cd9419730dfdcba756030f8331f96db658d99e038b0cb2fd982e7964b217d8b3e7bb1258507d2f0eaa8726d7aca9c6b93722736b82c93b9a6949d35df162457038e1e6722d8fcff2c2c79eeb348333fc658ac2021e5b2bc3dee80f96849404db30d18107dc89ffade0087f43db5b03683f3e2cd83d8a3c753738cfad0007666b328c6646fbaa9134f1003f5731109bd306d54cd01362e4d1ef45b8478f5471d4477206cd859389087f911ca7b6b356d3408d2f3b28062f2fe896a00f59ca8af24a01534c44e4f7faac623eb89790a0b543fb2e7d0398c1e6416ba44561d1881e43b0c3ae52c72195f99aca50eee260208c8ecbb14238702d7c96ac8210491027c25e83b2541d5e1539974f3898c9a6d5d3931794fb1a888cf478b01fd5da1d0bed37c72b69b242f30acecb1806e734b51aada9bc426d7111a9684a9def3bbbd011c5b2e1f0af869ff651aa472892355b97674853cf5bbcd75aee0090b475152f42465a6d6c68ae7a2284f107f241b667051d1621b0883c3a641333250b6ead2ba7a8d9718d6db30b9908df893e53749b5021b7be23e94722dc30951a09ef81d4955af42f4f1847901dfd2988b90c54f4f32c9928798633aab4722ba741b54c3fb7bf530dc34c042160e52c0aa01bd24bbee4bcfc59cfb2fb264f8688efe0b54d6f68ecd0dad668fa56083f5589a69236e753fbd4c169b9cff9730e792e22bea8e7b95b1a294e701f3a4860ba6c1fafdb9dd3d81cbc7516f0a2825db56b51181f92382763b720bc715e09331698f097263dfed812bd558ea0d2873aad0a55685b6165c102ae24a656eac7b2fc159ca6c72440a3891936f678687ad6f2fae0b602ffa0da46518b0302da5a61328a223b6df8e049d57a2f6636989be9a32fdb05ae22176576aeef96e6c18afadfdec217e45e1b146c4ac9081c557c56c0fb73d3bd7d36a3d54df3dc19ea7b2bd99d3ddbf75f576d028a6adc16782d83ae1cbde795d6842465b2792413a333b5f702552d7b6dd4978097ffc13b6a30923c02167714d8252ba8a6eaf4b3fb6596b7a98bc3cc12bc48f043cfa848401e5fcea9fb7ad9a8ee2171785a723961161ac52c85060f2606f48320586e68a5da57ba84f711e9ece1202d01b47fc362e14ae5560c165c0ab0b53afc79070ded025e94f8211eeae7019d3"}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_MSG_RING={0x28, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3}) io_uring_enter(0xffffffffffffffff, 0x4c6e, 0xc67a, 0x8, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f1, &(0x7f0000000080)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t%\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c\x87\x1e|C\xd8\x01\xd0\xf5\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajnW\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) pread64(r7, &(0x7f0000000100)=""/166, 0xfffffffffffffe9c, 0x8) 1.780758267s ago: executing program 5 (id=885): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000140)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21}, 0x94) r1 = socket$inet6(0xa, 0x3, 0x3) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'bond_slave_1\x00', 0x0}) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x7, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x89f9b000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) pread64(0xffffffffffffffff, &(0x7f00000005c0)=""/139, 0x8b, 0x80000000) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r3) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000280), r3) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x41280}, 0xc, &(0x7f0000000380)={&(0x7f0000000680)=ANY=[@ANYBLOB="a80000009ee558902b116a8ccfc2824b2f0c7058a542f77b5612ecffffffff0dce02bcbcfcb13ead86de57e991a2d473cf7b318001856d1173e6081cad1399e69dcd0f9b48243422c5d573b23dc03415", @ANYRES16=r5, @ANYBLOB="100026bd7000fedbdf2504000000080005006401010214000300fc010000000000000000000000000001140006006772653000000000000000000000000005000100000000003100070073797374656d5f753a6f626a6563745f723a73797374656d645f746d7066696c65735f657865635f743a733000000000140006006e69637666300000000000000000000014000300fe80000000000000000000000000000e"], 0xa8}, 0x1, 0x0, 0x0, 0xc4800}, 0x800) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001040010000000000000000000000000a58000000060a010400000000000000000200ffff2c000480280001800b0001006f62c9b125f275616a7265660000180002000140000000080900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x80}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r7, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r8, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c00050004000002000002000800010003000000050002000300000005000200"], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000000c0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_TX_POWER(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0x28, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYRESHEX=r8, @ANYRES64, @ANYRES16=r3, @ANYBLOB="08000300", @ANYRES32=r9, @ANYBLOB="55e65b3c8f0300", @ANYRES8=r5, @ANYRES16, @ANYRES16=r3, @ANYBLOB="a2395c62a71f2d5530be4e9e82974cf9d24aa0b797288922d0733e50f08a5809c76eb3b565aedfb2de7eac787c0b7892a1d4c3391c55bd38b255eac57e585e4b15e809f57bccd4f8248aa4c45c52ea2c544f041541e4849a4159a137e71fca39bde6976196ae78cf9e9899294502be"], 0x54}}, 0x4004011) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r4, @ANYBLOB="010000000000000000000100000008000100000000000400048008000c8004000b800800020001000000a00008801c000780080077144ebb000008000500"], 0xd0}}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000400)={r0, r2, 0x25, 0x2, @void}, 0x10) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000006800010027900a8eeeb1e82b47000000000000000c0002"], 0x24}}, 0x4004000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r0, r2, 0x25, 0x0, @val=@netkit}, 0x1c) r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r11, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @ib_path={0x0, r12}}, 0x20) 1.563853939s ago: executing program 2 (id=886): syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@nodots}, {@fat=@errors_continue}, {@dots}, {@nodots}, {}, {@fat=@nfs_nostale_ro}, {@nodots}, {@dots}, {@nodots}]}, 0x1, 0x159, &(0x7f00000004c0)="$eJzs27GKE0EcBvB/TKJRm9RisWBjFdQnUCSCuKAoKbRSiDaJBEyz2phH8QUFSZVuRPdI7nLJkRzs7ZH8fk0++GZgpsgOs7Af738dDSfTL5M38+g0GtF6GlksGtGNG9GM0iwAgEOySCn+pJTSrVnc/hUppXNDftayMACgMjuc/wDAgXH+A8Dxcf4DwPF59/7Dq2d53n+bZZ2I37NiUAzK37J/8TLvP8r+665mzYti0Fz2j8s+O9u3485J/2RjfzMePij7f93z1/lafzeG1W8fAAAAjkIvW9p4v+/1tvVlOvV+YO3+3op7rSvbBgCwh+n3H6NP4/Hnb3uFiMvMOojQjohrsAxBqDbU/WQCqrb609e9EgAAAAAAAAAAAAAAYJudvwfqXDx4kbZPr3uPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsO5vAAAA//9XS09N") name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240)={0x8c0, 0x8c, 0x1}, 0x18) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet(0xa, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x1, @rand_addr=0x64010102}, 0x10) r2 = gettid() r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) read$ptp(r3, 0x0, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r4, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x7, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) socket$inet_udp(0x2, 0x2, 0x0) r5 = socket(0x27, 0x5, 0x0) setsockopt$RDS_RECVERR(r5, 0x114, 0x5, &(0x7f0000000300)=0x1, 0x4) write(r5, &(0x7f0000000000)="240000001a005f04000fc6171909042180202000000000000000000d0ade01da58000000", 0x24) r6 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) ioctl$NS_GET_OWNER_UID(r6, 0xb704, &(0x7f0000000400)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000007c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}]}, &(0x7f00000005c0)='syzkaller\x00'}, 0x94) 1.430307057s ago: executing program 5 (id=890): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cf", 0x2}], 0x1}, 0x0) sendmsg$rds(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x44, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x528, 0x0, @perf_bp={0x0, 0x1}, 0x419, 0x40000000, 0x0, 0x8, 0x103fb, 0x1ff, 0x1ff, 0x0, 0x0, 0x0, 0x400000000000007}, 0x0, 0x1, 0xffffffffffffffff, 0xb) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) syz_usbip_server_init(0x0) syz_io_uring_setup(0x42e6, &(0x7f00000002c0)={0x0, 0x5eda, 0x10100, 0x6, 0x25d}, &(0x7f00000000c0), &(0x7f0000000140)) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 1.304343774s ago: executing program 0 (id=891): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) io_uring_enter(0xffffffffffffffff, 0x82, 0xbc7b, 0x1, 0x0, 0xfffffffffffffe60) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000010400000000000000", @ANYRES32=0x0], 0x48}}, 0x0) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 1.268436927s ago: executing program 3 (id=893): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) recvmsg(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) 1.178731601s ago: executing program 3 (id=894): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x89f9b000) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0xc082}, 0xc000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_io_uring_setup(0x49a9, 0x0, 0x0, 0x0) r2 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x2) r3 = syz_io_uring_setup(0xbdc, &(0x7f0000000080)={0x0, 0xec21, 0x80, 0x1, 0x40000333}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r2, 0x0, &(0x7f0000000140)=[{&(0x7f0000001800)=""/201, 0xc9}], 0x1, 0x0, 0x1}) io_uring_enter(r3, 0x847ba, 0x2000, 0xe, 0x0, 0x0) 1.02245314s ago: executing program 6 (id=895): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) io_uring_enter(0xffffffffffffffff, 0x82, 0xbc7b, 0x1, 0x0, 0xfffffffffffffe60) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0], 0x48}}, 0x0) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) (fail_nth: 5) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 1.014378361s ago: executing program 0 (id=896): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="300000002000010027bd7000ffdbdf250a00004000000007060000000c0014"], 0x30}, 0x1, 0x0, 0x0, 0x24048860}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) (async) r1 = semget$private(0x0, 0x5, 0x80) (async) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@rand_addr=0x64010101, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x3f}, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0x10001}, 0x70bd2a, 0x3501, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'lzs\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) (async) semop(r1, &(0x7f0000000040)=[{0x1, 0x8}], 0x1) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xe, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x9c}, @jmp={0x5, 0x0, 0x9}], &(0x7f0000000280)='GPL\x00'}, 0x94) 916.679647ms ago: executing program 0 (id=897): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="fc010000190001000000000000000000fc000000000000000000000000000001ac1414bb00000000000000000000000000000101000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000044010500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb000000003c00000000000000fe80000000000000000000000000000000000000000000000000000000000000000000007f000001000000000000000000000000000000006c00000000000000ac1414aa0000000000009bdd32f90000000000000000000000000000000000000000000000000000fe8000000000000000000000000000aa00000000330000000000000000000000000000000000ffff000000000100"], 0x1fc}}, 0x0) 911.681657ms ago: executing program 0 (id=898): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='\t\x00\x00\x00\a\x00\x00'], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x16, &(0x7f0000001bc0)={@link_local, @random="0b1b04f62e78", @val={@val={0x88a8, 0x4, 0x0, 0x2}, {0x8100, 0x4, 0x0, 0x3}}, {@generic={0x201}}}, 0x0) 780.591445ms ago: executing program 0 (id=899): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="180000006a000105fefdffffffdbdf2500020004a69b0000ca76977d18bb4683a044c12108c5d244944523c29106d6f2bd0a31d2da7ab22adee04cfff2cc928ceb48ea7affd0b550d5b98dda4a4b8659e6579952536c1a9c434ea97924bad58935c0f2a581da31981491a1c6267a1a908d6272988fbab553c7e127cbe91fc931148fdfeb3d2a7b4cd2f06d88bba5be9b051bd887f1d3f7aa4a64119f5fab12d25090009e3e"], 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x20008000) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000040)={'ip_vti0\x00', &(0x7f0000000000)={'sit0\x00', 0x0, 0x1, 0x20, 0x5, 0x1d, {{0x6, 0x4, 0x0, 0x4, 0x18, 0x66, 0x0, 0x18, 0x4, 0x0, @remote, @local, {[@noop]}}}}}) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) epoll_create1(0x80000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000010000000000000000000000a5000000a000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x7, 0x8, 0x22}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xe, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000440)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="04"], 0x10) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), r3) r7 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDFONTOP_SET(r7, 0x560d, &(0x7f0000000080)={0x0, 0xfffffff8, 0x11, 0x1c, 0x11f, 0x0}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r8, 0x25, &(0x7f00000000c0)={0x1, 0x0, 0x4004, 0xffffffffffffffff}) fcntl$lock(r8, 0x5, &(0x7f00000001c0)={0x0, 0x0, 0x1000000, 0x200}) sendmsg$NLBL_MGMT_C_ADD(r3, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000a4000f9dbdf25010000000800c6dfac1e01014800f8ffab1414270500a717dc738cd08727d13e01000000"], 0x34}, 0x1, 0x0, 0x0, 0x400c080}, 0x4004000) r9 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r9, &(0x7f00000000c0)=ANY=[], 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xca, 0xca, 0x7, [@struct={0x6, 0x4, 0x0, 0x4, 0x1, 0x4, [{0x6, 0x0, 0x7fffffff}, {0x4, 0x3, 0x7fffffff}, {0x8, 0x4, 0x6}, {0xb, 0x4, 0x80000000}]}, @datasec={0xe, 0x1, 0x0, 0xf, 0x2, [{0x1, 0x3, 0xff}], 'Rz'}, @typedef={0x7}, @const={0x5, 0x0, 0x0, 0xa, 0x1}, @enum={0xa, 0x7, 0x0, 0x6, 0x4, [{0xe, 0x81}, {0x6, 0x6f}, {0x3, 0x5}, {0x5, 0x200}, {0xf, 0x7}, {0xb, 0x80}, {0xe, 0x400}]}, @struct={0xa, 0x1, 0x0, 0x4, 0x0, 0x80000000, [{0x5, 0x4, 0x81}]}]}, {0x0, [0x2e, 0x0, 0x30, 0x5f, 0x30]}}, &(0x7f00000004c0)=""/189, 0xeb, 0xbd, 0x0, 0x2}, 0x28) r10 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x12, r10, 0x0) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x6, 0x2, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff020000000000000000000000000001"], 0x0) r11 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r11, &(0x7f00000000c0)=ANY=[], 0x20) perf_event_open(&(0x7f0000000a40)={0x8, 0x80, 0x0, 0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x10290, 0x0, 0x0, 0x0, 0x7, 0x0, 0x2, 0x0, 0x2, 0x0, 0x808000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@dellink={0x34, 0x11, 0x0, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, 0x1020, 0x40000}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_vlan\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x24000002) 594.564125ms ago: executing program 2 (id=900): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000140)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21}, 0x94) r0 = socket$inet6(0xa, 0x3, 0x3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bond_slave_1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x7, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x89f9b000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) pread64(0xffffffffffffffff, &(0x7f00000005c0)=""/139, 0x8b, 0x80000000) 589.926136ms ago: executing program 5 (id=901): sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x4, 0x8001, 0x0, 0x80000000b49, 0x200000000002, 0x4, 0xa, 0x3}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x83) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x205) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x22d00, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x4004743d, 0x110e22fff6) close(r1) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000001c0)={0x40000008}) socket$nl_netfilter(0x10, 0x3, 0xc) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000180), 0x8000, &(0x7f00000003c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@directio}, {@cache_mmap}, {@noxattr}, {@posixacl}, {@privport}, {@loose}, {@afid={'afid', 0x3d, 0x2}}], [{@pcr={'pcr', 0x3d, 0x37}}, {@fsname={'fsname', 0x3d, '/proc/sys/fs/binfmt_misc/register\x00'}}]}}) 560.441298ms ago: executing program 3 (id=902): r0 = syz_open_dev$loop(&(0x7f0000000000), 0x6, 0x40000) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000080)={0x3, 0x0, 0x98, &(0x7f0000000400)={0x8, 0x7fffffffffffffff, 0x8}}) 460.700623ms ago: executing program 6 (id=903): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x963b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) ioctl$EVIOCGKEY(r0, 0x80404518, 0x0) 460.327193ms ago: executing program 3 (id=904): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) recvmsg(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) 457.807823ms ago: executing program 6 (id=905): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000180)={0xffff1d94, 0xc1b, 0x82}, 0xc) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB="f8000000160001000000000000000000fe880000000000000000000000000001bf52864432ff010000010000000c7effca0018000000f2528ea07fc034d30000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe880000000000000000000000000001000000006c"], 0xf8}, 0x1, 0x0, 0x0, 0x4004010}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c030000160001000000000000000000fc010000000000000000000000000000fe88000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000006c000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000025bd7000000000000000000000000000000000000300000006"], 0x34c}, 0x1, 0x0, 0xa00}, 0x0) 416.830466ms ago: executing program 3 (id=906): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r1 = syz_io_uring_setup(0x111, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x10000004, 0x30f}, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x2, r0, 0x0, &(0x7f00000014c0)={&(0x7f0000001040)=@phonet, 0x80, &(0x7f0000001440)=[{&(0x7f00000010c0)=""/84, 0x54}, {&(0x7f0000001140)=""/236, 0xec}, {&(0x7f0000001240)=""/34, 0x22}, {&(0x7f0000001280)=""/13, 0xd}, {&(0x7f00000012c0)}, {&(0x7f0000001300)}, {&(0x7f0000001340)}, {&(0x7f0000001380)=""/181, 0xb5}], 0x8}, 0x0, 0x0, 0xc49b3f9feedb6577}) io_uring_enter(r1, 0x7277, 0x0, 0x28, 0x0, 0x0) 411.146156ms ago: executing program 6 (id=907): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) io_uring_enter(0xffffffffffffffff, 0x82, 0xbc7b, 0x1, 0x0, 0xfffffffffffffe60) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRES32=r0], 0x50) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket$kcm(0x29, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_TYPE(r1, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x4c, 0xd, 0x6, 0x301, 0x0, 0x0, {0xa, 0x0, 0x7}, [@IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2}, 0x4008801) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0], 0x48}}, 0x0) sendmmsg$inet(r3, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) madvise(&(0x7f00005c5000/0x3000)=nil, 0x3000, 0x9) 394.510677ms ago: executing program 5 (id=908): r0 = socket$nl_route(0x10, 0x3, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x100, 0x0) (async) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x100, 0x0) execve(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@map, 0x1e, 0x0, 0xfffffeff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4d) syz_emit_ethernet(0x52, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd60020000001c06fffc010000000000000000000000000002fe8000000000000000000000000000aa000040018a9726a5b7c547c70d761fdfc04138cfe84b8f257ba843a805cec574c2db694e586d34b4366c5a9c69c8f843302f49094d86b30d8b9c26", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="700200009078000022068e7458e20302"], 0x0) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) (async) sendto$inet6(r2, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001400030500008000ffdbdf25021856ff", @ANYRES32=r4, @ANYBLOB="080002007f"], 0x20}, 0x1, 0x0, 0x0, 0xc090}, 0x48006) (async) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001400030500008000ffdbdf25021856ff", @ANYRES32=r4, @ANYBLOB="080002007f"], 0x20}, 0x1, 0x0, 0x0, 0xc090}, 0x48006) recvfrom$inet6(r2, &(0x7f0000000000)=""/42, 0x2a, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) socket$inet6(0x10, 0x3, 0x0) (async) r5 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r5, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) futex(&(0x7f000000cffc)=0x2, 0x189, 0x2, 0x0, 0x0, 0x1) (async) futex(&(0x7f000000cffc)=0x2, 0x189, 0x2, 0x0, 0x0, 0x1) futex(&(0x7f000000cffc), 0x8a, 0x0, 0x0, 0x0, 0x100007) ioctl$FICLONE(r1, 0x40049409, 0xffffffffffffffff) (async) ioctl$FICLONE(r1, 0x40049409, 0xffffffffffffffff) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x801, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x62404}, [@IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8, 0x8, r0}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x19}, @IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x44}}, 0x0) 384.317368ms ago: executing program 3 (id=909): r0 = open_tree(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x1000) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r0, 0x1e, 0x0, 0x1) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='numa_maps\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001b80)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040), 0x10}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="1307", 0x2}], 0x1}, 0x4051) recvmsg$unix(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x2122) recvmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x14006) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 329.874291ms ago: executing program 0 (id=910): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x23, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x40, 0x24, 0xf0b, 0xfffffffd, 0x203, {0x60, 0x0, 0x0, r2, {0x0, 0x3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x10, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x3b9aca00f}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x44040) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f00000000c0)={0x1, [0x4]}, &(0x7f0000000100)=0x6) r3 = io_uring_setup(0x2f04, &(0x7f0000000b80)={0x0, 0xa868, 0x8040, 0x20001, 0x42d6}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000580)=[{0x0}], 0x1) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1e, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0xfd026, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xef, 0xec}, 0x400, 0xc, 0x43a1bd76, 0x7, 0x203, 0x6, 0x2, 0x0, 0x3, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)=ANY=[]) splice(r5, 0x0, r4, 0x0, 0xffffffffffff8000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000100)=ANY=[@ANYRES32=r6, @ANYRES32=r4, @ANYBLOB="0b00000020008dfd00000000", @ANYRES32=0x0, @ANYRES64=0x0], 0x20) write$P9_RLERRORu(r4, &(0x7f0000000100)=ANY=[], 0xe) openat$ptmx(0xffffffffffffff9c, 0x0, 0x144000, 0x0) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000f40), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000cc0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010027bd7000fcdbdf250700000018000180140002006970364114b7c8300000000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="1006fedbd36c5374df250b0000041c00018008d4d9665ce85064a182604b06472b63717385c380b8a03a63eb7e234c", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="2810018008000100", @ANYRES32=r2, @ANYBLOB="14000200767863616e3100000000000000000000080003000100000018000180140002006970365f767469300000000000000000"], 0x70}, 0x1, 0x0, 0x0, 0xc004}, 0x4008041) 117.032773ms ago: executing program 6 (id=911): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e22, 0xc, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000000)={0xfff, 0x4}, 0x10) write(r4, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r4) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x0, 0x4, 0x0, 0x0, 0xffffffff}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xfffffffb, 0x0, 0x0, 0x1000}}]}]}}}]}, 0x6c}}, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}, 0x1c) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="d8000000200081054e81f782db4cb904021d080006007c09e8fe04a1180008800a00142603600e1208000f", 0x2b}], 0x1}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="680000000101010200000000000000000a00000908001a4000010000080015400000496d0c001880080003400000397d38000e"], 0x68}, 0x1, 0x0, 0x0, 0x4800}, 0x4) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$phonet(0x23, 0x2, 0x1) r8 = dup3(r7, r6, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r8, &(0x7f0000003f00)={&(0x7f0000003e00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000003ec0)={0x0}, 0x1, 0x0, 0x0, 0x80c5}, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008102e00f80ecdb4cb9f207c804a00d0000000500000ada1b40d80800c500c50083b8000000000000", 0x2e}], 0x1, 0x0, 0x0, 0x5865}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e22, 0xc, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00'}) (async) socket(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000000)={0xfff, 0x4}, 0x10) (async) write(r4, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r4) (async) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x0, 0x4, 0x0, 0x0, 0xffffffff}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xfffffffb, 0x0, 0x0, 0x1000}}]}]}}}]}, 0x6c}}, 0x0) (async) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}, 0x1c) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="d8000000200081054e81f782db4cb904021d080006007c09e8fe04a1180008800a00142603600e1208000f", 0x2b}], 0x1}, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="680000000101010200000000000000000a00000908001a4000010000080015400000496d0c001880080003400000397d38000e"], 0x68}, 0x1, 0x0, 0x0, 0x4800}, 0x4) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) socket$phonet(0x23, 0x2, 0x1) (async) dup3(r7, r6, 0x0) (async) sendmsg$ETHTOOL_MSG_COALESCE_SET(r8, &(0x7f0000003f00)={&(0x7f0000003e00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000003ec0)={0x0}, 0x1, 0x0, 0x0, 0x80c5}, 0x0) (async) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008102e00f80ecdb4cb9f207c804a00d0000000500000ada1b40d80800c500c50083b8000000000000", 0x2e}], 0x1, 0x0, 0x0, 0x5865}, 0x0) (async) 116.270543ms ago: executing program 2 (id=912): r0 = socket(0x1e, 0x1, 0x0) r1 = syz_io_uring_setup(0x188f, &(0x7f0000000300)={0x0, 0x20aedf, 0x0, 0x0, 0x162}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x85c3}}) io_uring_enter(r1, 0x32d7, 0x0, 0x46, 0x0, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e21, 0x3, @ipv4={'\x00', '\xff\xff', @loopback}, 0x4}, 0x1c) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2000001, 0x13, r5, 0x0) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) write$binfmt_misc(r0, &(0x7f0000000400), 0x2000011a) r6 = open(&(0x7f0000000100)='./bus\x00', 0x24040, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) getrusage(0x0, &(0x7f00000011c0)) finit_module(r6, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x2c, r8, 0x1, 0x0, 0x0, {0x23}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}]}, 0x2c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x5, r6}, 0x94) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x64}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x24044840) 0s ago: executing program 6 (id=913): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000400)={[{@nouid32}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x5}}, {@delalloc}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x8}}, {}]}, 0x1, 0x5d2, &(0x7f0000001a40)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42041, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x145402, 0x8) writev(r2, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x100000}], 0x1) write$UHID_INPUT(r1, &(0x7f0000002040)={0x8, {"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", 0x1000}}, 0x1006) r3 = syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x80c406, &(0x7f00000003c0)=ANY=[@ANYBLOB='dots,dots,dmask=000000000200000,nodots,discard,nfs=nostale_ro,gid=', @ANYRESHEX=r0, @ANYRES16=0x0], 0x1, 0x2a5, &(0x7f0000000900)="$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") syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000100)='.\x00', 0x19624bc, &(0x7f00000037c0)=ANY=[@ANYRES8=r3, @ANYRES32=r3, @ANYRESOCT=r3, @ANYBLOB="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", @ANYRES32=r3, @ANYRES64, @ANYBLOB="67b492c11f8bc8985216c4cb38d9a93a392abd659f72c8ddd8f58c9d9d05d41f1bb4e21e5dbbe0dedcbed6ef4959285fb758eb158538fc238492f1d7f2845ff901fd53796e415c579db2d5cc4e9316589a2f7cdb164d4cbc166904ede9898e0b4e4966456c91c5e7ccb625b13a132380983fe05c119e74e90a1cb51b8b7b085ec526494bd0a67c4b0245110daea7b6b8968469e4c24b962f94bbaf36f5d0b8b61b22cc392bc11dc7844950a09b9538f30786074bb2c23878fc62a080be83c41c367e2d3ee816c769a99093b7517b617ae2c048b3abdeb7b7fdef17b37a6afe05adf138da4098688af7525db73fc082dd6254afc2bf1a00a6e1c583b0cea95c6f97ef23f2e321c182f24a061f7024ef710b90c3807cf15e2407dfba4233aab1d69c3f13949f7cdf92ac459802ae50d724ea690938f56ce56a25e1f72ef23fdc033eece09a2ec288401d977213a128746c17e5da8dc6aa0c7e26a2df8a11de556e4a60eac1b02d1720e236bb44959a2dfa8777f9945c1acee99c7cd3d10f4d1cf7241069c49d1a67830fa6f09a1457c0caa4981e2b8c2148c808fa71", @ANYRES8=r3, @ANYRES32=r3, @ANYRESHEX=r3], 0x0, 0x0, &(0x7f0000000000)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x4842, 0x0) writev(r4, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x64000}], 0x1) kernel console output (not intermixed with test programs): verlaps block group descriptors [ 75.307443][ T4104] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 75.327774][ T4102] batadv_slave_1: entered promiscuous mode [ 75.337174][ T4101] batadv_slave_1: left promiscuous mode [ 75.343410][ T4104] EXT4-fs (loop0): invalid journal inode [ 75.349971][ T4104] EXT4-fs (loop0): can't get journal size [ 75.361963][ T4104] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 75.440937][ T4117] loop4: detected capacity change from 0 to 512 [ 75.470397][ T4117] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 75.498483][ T4117] EXT4-fs (loop4): orphan cleanup on readonly fs [ 75.522857][ T4117] EXT4-fs warning (device loop4): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 75.617372][ T4117] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 75.650881][ T4117] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #16: comm syz.4.175: inode has both inline data and extents flags [ 75.666857][ T4123] loop2: detected capacity change from 0 to 512 [ 75.678508][ T4123] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 75.690858][ T4117] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.175: couldn't read orphan inode 16 (err -117) [ 75.708106][ T4117] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 75.770160][ T4130] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 75.808767][ T4117] netlink: 12 bytes leftover after parsing attributes in process `syz.4.175'. [ 75.817844][ T4117] openvswitch: netlink: Flow actions attr not present in new flow. [ 75.861522][ T3328] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.910314][ T4139] loop4: detected capacity change from 0 to 128 [ 75.944794][ T3322] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.958371][ T4139] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 76.009094][ T4139] ext4 filesystem being mounted at /42/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 76.043168][ T4146] netlink: 596 bytes leftover after parsing attributes in process `syz.0.180'. [ 76.159807][ T4157] loop1: detected capacity change from 0 to 256 [ 76.170940][ T4154] bond2: option arp_validate: mode dependency failed, not supported in mode balance-tlb(5) [ 76.182547][ T4154] bond2 (unregistering): Released all slaves [ 76.192814][ T4150] batadv_slave_1: entered promiscuous mode [ 76.205448][ T4149] batadv_slave_1: left promiscuous mode [ 76.223882][ T3328] EXT4-fs error (device loop4): ext4_readdir:224: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 76.238374][ T3328] EXT4-fs error (device loop4): ext4_readdir:224: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 76.253585][ T3328] EXT4-fs error (device loop4): ext4_empty_dir:3107: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 76.269341][ T3328] EXT4-fs error (device loop4): ext4_readdir:224: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 76.285570][ T3328] EXT4-fs error (device loop4): ext4_readdir:224: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 76.300743][ T3328] EXT4-fs error (device loop4): ext4_empty_dir:3107: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 76.318032][ T4162] netlink: 'syz.0.190': attribute type 10 has an invalid length. [ 76.318954][ T3328] EXT4-fs error (device loop4): ext4_readdir:224: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 76.340833][ T4162] hsr0: entered promiscuous mode [ 76.349248][ T4162] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 76.359601][ T4162] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 76.362261][ T3328] EXT4-fs error (device loop4): ext4_readdir:224: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 76.372038][ T4162] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 76.394686][ T3328] EXT4-fs error (device loop4): ext4_empty_dir:3107: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 76.408505][ T3328] EXT4-fs error (device loop4): ext4_readdir:224: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 76.450398][ T4168] loop3: detected capacity change from 0 to 512 [ 76.474160][ T4168] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 76.499476][ T4168] EXT4-fs (loop3): orphan cleanup on readonly fs [ 76.506094][ T4168] EXT4-fs warning (device loop3): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 76.521823][ T4168] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 76.528952][ T4168] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #16: comm syz.3.192: inode has both inline data and extents flags [ 76.542919][ T4168] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.192: couldn't read orphan inode 16 (err -117) [ 76.574473][ T4168] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 76.662441][ T4168] netlink: 12 bytes leftover after parsing attributes in process `syz.3.192'. [ 76.671406][ T4168] openvswitch: netlink: Flow actions attr not present in new flow. [ 76.698111][ T3329] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.718204][ T4179] netlink: 596 bytes leftover after parsing attributes in process `syz.3.196'. [ 76.837986][ T3328] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 76.849847][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.919667][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.997071][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.080936][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.232736][ T12] bridge_slave_1: left allmulticast mode [ 77.238513][ T12] bridge_slave_1: left promiscuous mode [ 77.244460][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.253973][ T12] bridge_slave_0: left allmulticast mode [ 77.259817][ T12] bridge_slave_0: left promiscuous mode [ 77.265479][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.344463][ T4220] netlink: 596 bytes leftover after parsing attributes in process `syz.3.208'. [ 77.370299][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 77.388805][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 77.399006][ T12] bond0 (unregistering): Released all slaves [ 77.407073][ T12] bond1 (unregistering): Released all slaves [ 77.455345][ T12] hsr_slave_0: left promiscuous mode [ 77.467095][ T12] hsr_slave_1: left promiscuous mode [ 77.474342][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 77.481828][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 77.512155][ T12] veth1_macvtap: left promiscuous mode [ 77.541650][ T12] veth0_macvtap: left promiscuous mode [ 77.563043][ T12] veth1_vlan: left promiscuous mode [ 77.580068][ T12] veth0_vlan: left promiscuous mode [ 77.634790][ T4224] netlink: 40 bytes leftover after parsing attributes in process `syz.3.209'. [ 77.686104][ T12] team0 (unregistering): Port device team_slave_1 removed [ 77.696058][ T12] team0 (unregistering): Port device team_slave_0 removed [ 77.741214][ T4244] macvtap1: entered allmulticast mode [ 77.746757][ T4244] team0: entered allmulticast mode [ 77.751926][ T4244] team_slave_0: entered allmulticast mode [ 77.757832][ T4244] team_slave_1: entered allmulticast mode [ 77.763844][ T4244] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 77.772399][ T4244] team0: left allmulticast mode [ 77.777441][ T4244] team_slave_0: left allmulticast mode [ 77.783110][ T4244] team_slave_1: left allmulticast mode [ 77.796650][ T4193] chnl_net:caif_netlink_parms(): no params data found [ 77.934242][ T4193] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.941697][ T4193] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.979412][ T4275] EXT4-fs: Ignoring removed nomblk_io_submit option [ 77.986394][ T4275] EXT4-fs: Ignoring removed bh option [ 77.988196][ T4193] bridge_slave_0: entered allmulticast mode [ 78.012974][ T4193] bridge_slave_0: entered promiscuous mode [ 78.023730][ T4275] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 78.041256][ T4193] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.048514][ T4193] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.055911][ T4193] bridge_slave_1: entered allmulticast mode [ 78.063096][ T4193] bridge_slave_1: entered promiscuous mode [ 78.071809][ T4275] EXT4-fs error (device loop3): mb_free_blocks:2037: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 78.093904][ T4275] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #11: comm syz.3.216: corrupted inode contents [ 78.106101][ T4275] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #11: comm syz.3.216: mark_inode_dirty error [ 78.123882][ T4275] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.216: invalid indirect mapped block 1 (level 1) [ 78.133090][ T4193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.138009][ T4275] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #11: comm syz.3.216: corrupted inode contents [ 78.160018][ T4275] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 78.173412][ T4193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.182895][ T4275] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #11: comm syz.3.216: corrupted inode contents [ 78.207036][ T4275] EXT4-fs error (device loop3): ext4_truncate:4635: inode #11: comm syz.3.216: mark_inode_dirty error [ 78.218328][ T4193] team0: Port device team_slave_0 added [ 78.225235][ T4193] team0: Port device team_slave_1 added [ 78.254864][ T4275] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 78.267699][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.274748][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.300872][ T4193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.320332][ T4275] EXT4-fs (loop3): 1 truncate cleaned up [ 78.326584][ T4275] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.360505][ T4275] syz.3.216 uses obsolete (PF_INET,SOCK_PACKET) [ 78.367461][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.374561][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.400575][ T4193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.559808][ T4193] hsr_slave_0: entered promiscuous mode [ 78.577856][ T4193] hsr_slave_1: entered promiscuous mode [ 78.595806][ T4193] debugfs: 'hsr0' already exists in 'hsr' [ 78.601673][ T4193] Cannot create hsr debugfs directory [ 78.659277][ T3329] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.771273][ T4193] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 78.787975][ T4193] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 78.810906][ T4193] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 78.845253][ T4193] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 78.913926][ T4306] vlan2: entered promiscuous mode [ 78.921395][ T4306] dummy0: entered promiscuous mode [ 78.952863][ T4193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.977892][ T4193] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.995461][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.002615][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.046202][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.053349][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.195253][ T4193] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 79.205721][ T4193] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 79.225008][ T4325] netlink: 'syz.2.224': attribute type 1 has an invalid length. [ 79.232863][ T4325] netlink: 'syz.2.224': attribute type 4 has an invalid length. [ 79.240662][ T4325] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.224'. [ 79.318088][ T4332] netlink: 'syz.2.224': attribute type 1 has an invalid length. [ 79.325854][ T4332] netlink: 'syz.2.224': attribute type 4 has an invalid length. [ 79.437450][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.460984][ T4341] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.468324][ T4341] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.742404][ T4193] veth0_vlan: entered promiscuous mode [ 79.760613][ T4193] veth1_vlan: entered promiscuous mode [ 79.799621][ T4193] veth0_macvtap: entered promiscuous mode [ 79.817088][ T4193] veth1_macvtap: entered promiscuous mode [ 79.841372][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.860695][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.015890][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 80.015909][ T29] audit: type=1400 audit(1769039023.713:274): avc: denied { mounton } for pid=4193 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 80.075794][ T348] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.100347][ T348] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.134755][ T4365] set_capacity_and_notify: 4 callbacks suppressed [ 80.134777][ T4365] loop0: detected capacity change from 0 to 512 [ 80.153236][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.171849][ T4368] loop3: detected capacity change from 0 to 256 [ 80.183993][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.202796][ T4365] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 80.211516][ T4365] EXT4-fs (loop0): orphan cleanup on readonly fs [ 80.218137][ T4365] Quota error (device loop0): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 80.228969][ T4365] EXT4-fs warning (device loop0): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 80.244022][ T4365] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 80.261656][ T4365] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #16: comm syz.0.229: inode has both inline data and extents flags [ 80.275156][ T4365] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.229: couldn't read orphan inode 16 (err -117) [ 80.288034][ T4365] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 80.400012][ T29] audit: type=1400 audit(1769039024.203:275): avc: denied { write } for pid=4386 comm="syz.5.234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 80.419250][ T29] audit: type=1400 audit(1769039024.203:276): avc: denied { create } for pid=4386 comm="syz.5.234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 80.438819][ T29] audit: type=1400 audit(1769039024.203:277): avc: denied { getopt } for pid=4386 comm="syz.5.234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 80.509364][ T4397] __nla_validate_parse: 2 callbacks suppressed [ 80.509411][ T4397] netlink: 12 bytes leftover after parsing attributes in process `syz.0.229'. [ 80.524576][ T4397] openvswitch: netlink: Flow actions attr not present in new flow. [ 80.687832][ T3322] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.203108][ T4426] netlink: 596 bytes leftover after parsing attributes in process `syz.0.238'. [ 83.801863][ T29] audit: type=1400 audit(1769039027.613:278): avc: denied { listen } for pid=4439 comm="syz.0.246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 83.837742][ T29] audit: type=1400 audit(1769039027.633:279): avc: denied { connect } for pid=4439 comm="syz.0.246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 83.857357][ T29] audit: type=1400 audit(1769039027.633:280): avc: denied { write } for pid=4439 comm="syz.0.246" path="socket:[7761]" dev="sockfs" ino=7761 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 83.880571][ T29] audit: type=1400 audit(1769039027.633:281): avc: denied { accept } for pid=4439 comm="syz.0.246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 83.900415][ T29] audit: type=1400 audit(1769039027.633:282): avc: denied { read } for pid=4439 comm="syz.0.246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 83.932734][ T4446] team_slave_0: entered promiscuous mode [ 83.938470][ T4446] team_slave_1: entered promiscuous mode [ 83.944872][ T4446] macvtap1: entered allmulticast mode [ 83.950338][ T4446] team0: entered allmulticast mode [ 83.955487][ T4446] team_slave_0: entered allmulticast mode [ 83.961281][ T4446] team_slave_1: entered allmulticast mode [ 83.973267][ T4446] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 84.000479][ T4450] loop0: detected capacity change from 0 to 256 [ 84.007476][ T4446] team0: left allmulticast mode [ 84.012395][ T4446] team_slave_0: left allmulticast mode [ 84.018027][ T4446] team_slave_1: left allmulticast mode [ 84.023578][ T4446] team_slave_0: left promiscuous mode [ 84.029116][ T4446] team_slave_1: left promiscuous mode [ 84.099930][ T4454] netlink: 4 bytes leftover after parsing attributes in process `syz.1.253'. [ 84.377296][ T4454] syz.1.253 (4454) used greatest stack depth: 10344 bytes left [ 84.441907][ T4463] FAULT_INJECTION: forcing a failure. [ 84.441907][ T4463] name failslab, interval 1, probability 0, space 0, times 0 [ 84.454610][ T4463] CPU: 1 UID: 0 PID: 4463 Comm: syz.2.256 Not tainted syzkaller #0 PREEMPT(voluntary) [ 84.454695][ T4463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 84.454740][ T4463] Call Trace: [ 84.454747][ T4463] [ 84.454754][ T4463] __dump_stack+0x1d/0x30 [ 84.454778][ T4463] dump_stack_lvl+0x95/0xd0 [ 84.454797][ T4463] dump_stack+0x15/0x1b [ 84.454815][ T4463] should_fail_ex+0x263/0x280 [ 84.454874][ T4463] should_failslab+0x8c/0xb0 [ 84.454969][ T4463] kmem_cache_alloc_noprof+0x68/0x490 [ 84.455005][ T4463] ? skb_clone+0x151/0x1f0 [ 84.455116][ T4463] skb_clone+0x151/0x1f0 [ 84.455162][ T4463] packet_rcv+0x3c4/0xab0 [ 84.455283][ T4463] ? __pfx_packet_rcv+0x10/0x10 [ 84.455310][ T4463] deliver_skb+0xee/0x160 [ 84.455339][ T4463] __netif_receive_skb_core+0x139b/0x1950 [ 84.455366][ T4463] ? __alloc_frozen_pages_noprof+0x161/0x350 [ 84.455416][ T4463] ? alloc_pages_mpol+0x217/0x260 [ 84.455489][ T4463] ? alloc_frozen_pages_noprof+0x8f/0x110 [ 84.455550][ T4463] ? mod_node_page_state+0x1c/0xa0 [ 84.455575][ T4463] __netif_receive_skb_list_core+0x113/0x500 [ 84.455628][ T4463] netif_receive_skb_list_internal+0x47d/0x5f0 [ 84.455746][ T4463] netif_receive_skb_list+0x31/0x1f0 [ 84.455771][ T4463] bpf_test_run_xdp_live+0x104c/0x1360 [ 84.455796][ T4463] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 84.455823][ T4463] ? 0xffffffffa02054c0 [ 84.455915][ T4463] ? bpf_test_run_xdp_live+0x434/0x1360 [ 84.455959][ T4463] bpf_prog_test_run_xdp+0x57b/0xa10 [ 84.456006][ T4463] ? __rcu_read_unlock+0x4e/0x70 [ 84.456029][ T4463] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 84.456079][ T4463] bpf_prog_test_run+0x204/0x340 [ 84.456115][ T4463] __sys_bpf+0x4c0/0x7b0 [ 84.456140][ T4463] __x64_sys_bpf+0x41/0x50 [ 84.456197][ T4463] x64_sys_call+0x28e1/0x3000 [ 84.456234][ T4463] do_syscall_64+0xc0/0x2a0 [ 84.456263][ T4463] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.456283][ T4463] RIP: 0033:0x7f0ea6bcacb9 [ 84.456330][ T4463] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 84.456345][ T4463] RSP: 002b:00007f0ea5627028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 84.456363][ T4463] RAX: ffffffffffffffda RBX: 00007f0ea6e45fa0 RCX: 00007f0ea6bcacb9 [ 84.456375][ T4463] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 84.456386][ T4463] RBP: 00007f0ea5627090 R08: 0000000000000000 R09: 0000000000000000 [ 84.456399][ T4463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 84.456434][ T4463] R13: 00007f0ea6e46038 R14: 00007f0ea6e45fa0 R15: 00007ffcde589ee8 [ 84.456452][ T4463] [ 84.764954][ T4466] netlink: 596 bytes leftover after parsing attributes in process `syz.5.257'. [ 84.800665][ T4468] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5133 sclass=netlink_route_socket pid=4468 comm=syz.5.258 [ 84.932112][ T4478] netlink: 'syz.5.263': attribute type 1 has an invalid length. [ 85.004493][ T4486] capability: warning: `syz.3.265' uses deprecated v2 capabilities in a way that may be insecure [ 85.030154][ T4486] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 85.044012][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 85.044028][ T29] audit: type=1400 audit(1769039028.843:288): avc: denied { ioctl } for pid=4485 comm="syz.3.265" path="socket:[8953]" dev="sockfs" ino=8953 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 85.103626][ T29] audit: type=1400 audit(1769039028.893:289): avc: denied { write } for pid=4485 comm="syz.3.265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 85.279333][ T29] audit: type=1400 audit(1769039029.093:290): avc: denied { read write } for pid=4501 comm="syz.3.268" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 85.303188][ T29] audit: type=1400 audit(1769039029.093:291): avc: denied { open } for pid=4501 comm="syz.3.268" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 85.380354][ T29] audit: type=1400 audit(1769039029.093:292): avc: denied { ioctl } for pid=4501 comm="syz.3.268" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x9371 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 85.405494][ T29] audit: type=1400 audit(1769039029.193:293): avc: denied { read } for pid=4514 comm="syz.2.271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 85.498099][ T4519] delete_channel: no stack [ 85.508920][ T29] audit: type=1400 audit(1769039029.303:294): avc: denied { create } for pid=4518 comm="syz.5.272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 85.562009][ T29] audit: type=1400 audit(1769039029.343:295): avc: denied { getopt } for pid=4518 comm="syz.5.272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 85.793246][ T29] audit: type=1400 audit(1769039029.603:296): avc: denied { mounton } for pid=4535 comm="syz.1.279" path="/proc/151/cgroup" dev="proc" ino=9004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 85.834057][ T4541] loop0: detected capacity change from 0 to 1024 [ 85.867231][ T4541] EXT4-fs: inline encryption not supported [ 85.874606][ T4541] EXT4-fs (loop0): orphan cleanup on readonly fs [ 85.890696][ T4541] EXT4-fs (loop0): 1 truncate cleaned up [ 85.905939][ T4541] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 85.939153][ T3322] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.053823][ T4511] syz.3.268 (4511) used greatest stack depth: 10280 bytes left [ 86.061486][ T4502] syz.3.268 (4502) used greatest stack depth: 7416 bytes left [ 86.061764][ T4536] Cannot find set identified by id 0 to match [ 86.235538][ T29] audit: type=1400 audit(1769039030.043:297): avc: denied { create } for pid=4559 comm="syz.3.288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 86.320326][ T4577] loop3: detected capacity change from 0 to 128 [ 86.365210][ T4582] SET target dimension over the limit! [ 86.388215][ T4582] loop2: detected capacity change from 0 to 1024 [ 86.446515][ T4584] netlink: 24 bytes leftover after parsing attributes in process `syz.1.291'. [ 86.479976][ T4584] xfrm1: entered allmulticast mode [ 86.497709][ T4582] loop2: detected capacity change from 0 to 1024 [ 86.521764][ T4582] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.666321][ T4613] ipip0: entered promiscuous mode [ 86.707331][ T4618] netlink: 134744 bytes leftover after parsing attributes in process `syz.0.298'. [ 86.732077][ T4618] netlink: zone id is out of range [ 86.737411][ T4618] netlink: zone id is out of range [ 86.742708][ T4618] netlink: get zone limit has 4 unknown bytes [ 86.840159][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.044496][ T4663] macvtap1: entered allmulticast mode [ 87.050088][ T4663] team0: entered allmulticast mode [ 87.055241][ T4663] team_slave_0: entered allmulticast mode [ 87.061304][ T4663] team_slave_1: entered allmulticast mode [ 87.095344][ T4663] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 87.104923][ T4663] team0: left allmulticast mode [ 87.109980][ T4663] team_slave_0: left allmulticast mode [ 87.115523][ T4663] team_slave_1: left allmulticast mode [ 87.293823][ T4695] loop1: detected capacity change from 0 to 164 [ 87.495274][ T4717] netlink: 'syz.5.319': attribute type 1 has an invalid length. [ 87.515453][ T4716] netlink: 'syz.5.319': attribute type 1 has an invalid length. [ 87.787259][ T4723] loop5: detected capacity change from 0 to 128 [ 87.802451][ T4723] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 512 [ 87.942540][ T3323] rock: directory entry would overflow storage [ 87.948790][ T3323] rock: sig=0x4f50, size=4, remaining=3 [ 87.954385][ T3323] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 87.982892][ T3323] rock: directory entry would overflow storage [ 87.989263][ T3323] rock: sig=0x4f50, size=4, remaining=3 [ 87.995085][ T3323] iso9660: Corrupted directory entry in block 3 of inode 1856 [ 88.006848][ T3323] VFS: Lookup of '' in iso9660 loop1 would have caused loop [ 88.035031][ T3323] VFS: Lookup of '' in iso9660 loop1 would have caused loop [ 88.167315][ T4736] netlink: 176 bytes leftover after parsing attributes in process `syz.5.324'. [ 88.186013][ T4738] loop0: detected capacity change from 0 to 128 [ 88.281972][ T4361] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.311348][ T4745] loop2: detected capacity change from 0 to 256 [ 88.330532][ T4361] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.393789][ T4361] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.455220][ T4749] loop2: detected capacity change from 0 to 128 [ 88.465349][ T4361] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.565211][ T4361] bridge_slave_1: left allmulticast mode [ 88.571044][ T4361] bridge_slave_1: left promiscuous mode [ 88.576870][ T4361] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.597868][ T4361] bridge_slave_0: left allmulticast mode [ 88.603580][ T4361] bridge_slave_0: left promiscuous mode [ 88.609995][ T4361] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.771436][ T4361] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 88.789166][ T4361] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 88.808703][ T4361] bond0 (unregistering): Released all slaves [ 88.861865][ T4361] hsr_slave_0: left promiscuous mode [ 88.867787][ T4361] hsr_slave_1: left promiscuous mode [ 88.879952][ T4361] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 88.887555][ T4361] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 88.920594][ T4361] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 88.928088][ T4361] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 88.974446][ T4361] veth1_macvtap: left promiscuous mode [ 88.989152][ T4361] veth0_macvtap: left promiscuous mode [ 89.008523][ T4361] veth1_vlan: left promiscuous mode [ 89.042004][ T4361] veth0_vlan: left promiscuous mode [ 89.209750][ T4361] team0 (unregistering): Port device team_slave_1 removed [ 89.230103][ T4361] team0 (unregistering): Port device team_slave_0 removed [ 89.455408][ T4793] bond1: ARP target 9.0.0.0 is already present [ 89.462016][ T4793] bond1: option arp_ip_target: invalid value (9) [ 89.478374][ T4793] bond1 (unregistering): Released all slaves [ 89.486058][ T4798] netlink: 'syz.5.338': attribute type 16 has an invalid length. [ 89.494094][ T4798] netlink: 'syz.5.338': attribute type 17 has an invalid length. [ 89.648042][ T4798] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 89.700096][ T4750] chnl_net:caif_netlink_parms(): no params data found [ 89.876862][ T4821] loop5: detected capacity change from 0 to 2048 [ 89.893134][ T4750] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.900662][ T4750] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.927699][ T9] kernel write not supported for file /ppp (pid: 9 comm: kworker/0:0) [ 89.942054][ T4821] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.958123][ T4821] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.990951][ T4750] bridge_slave_0: entered allmulticast mode [ 90.014479][ T4750] bridge_slave_0: entered promiscuous mode [ 90.046559][ T4821] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.342: bg 0: block 345: padding at end of block bitmap is not set [ 90.061050][ T4821] EXT4-fs (loop5): Remounting filesystem read-only [ 90.076543][ T4750] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.083767][ T4750] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.093340][ T4750] bridge_slave_1: entered allmulticast mode [ 90.100119][ T4750] bridge_slave_1: entered promiscuous mode [ 90.128412][ T4750] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.139110][ T4750] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.161084][ T4750] team0: Port device team_slave_0 added [ 90.188363][ T4193] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.198132][ T4750] team0: Port device team_slave_1 added [ 90.277528][ T4750] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.284576][ T4750] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.310772][ T4750] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.336813][ T29] kauditd_printk_skb: 26 callbacks suppressed [ 90.336833][ T29] audit: type=1400 audit(1769039034.133:324): avc: denied { create } for pid=4839 comm="syz.0.352" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 90.408680][ T4750] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.415725][ T4750] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.441750][ T4750] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.669179][ T29] audit: type=1400 audit(1769039034.483:325): avc: denied { unlink } for pid=3322 comm="syz-executor" name="file0" dev="tmpfs" ino=394 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 90.768395][ T4750] hsr_slave_0: entered promiscuous mode [ 90.808786][ T4750] hsr_slave_1: entered promiscuous mode [ 90.827704][ T4750] debugfs: 'hsr0' already exists in 'hsr' [ 90.833500][ T4750] Cannot create hsr debugfs directory [ 90.853870][ T4842] bond1: ARP target 9.0.0.0 is already present [ 90.860244][ T4842] bond1: option arp_ip_target: invalid value (9) [ 90.884963][ T4842] bond1 (unregistering): Released all slaves [ 91.036990][ T29] audit: type=1400 audit(1769039034.853:326): avc: denied { getopt } for pid=4874 comm="syz.0.348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 91.181736][ T4878] netlink: 596 bytes leftover after parsing attributes in process `syz.0.349'. [ 92.310614][ T4750] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 92.319855][ T4750] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 92.329222][ T4750] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 92.338631][ T4750] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 93.385231][ T4899] set_capacity_and_notify: 1 callbacks suppressed [ 93.385252][ T4899] loop0: detected capacity change from 0 to 128 [ 93.440625][ T29] audit: type=1400 audit(1769039037.253:327): avc: denied { unmount } for pid=4193 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 93.474769][ T4750] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.561556][ T4750] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.624457][ T4361] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.631813][ T4361] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.723033][ T4361] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.730170][ T4361] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.749395][ T4903] FAULT_INJECTION: forcing a failure. [ 93.749395][ T4903] name failslab, interval 1, probability 0, space 0, times 0 [ 93.762175][ T4903] CPU: 0 UID: 0 PID: 4903 Comm: syz.3.356 Not tainted syzkaller #0 PREEMPT(voluntary) [ 93.762206][ T4903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 93.762219][ T4903] Call Trace: [ 93.762241][ T4903] [ 93.762249][ T4903] __dump_stack+0x1d/0x30 [ 93.762287][ T4903] dump_stack_lvl+0x95/0xd0 [ 93.762313][ T4903] dump_stack+0x15/0x1b [ 93.762338][ T4903] should_fail_ex+0x263/0x280 [ 93.762366][ T4903] should_failslab+0x8c/0xb0 [ 93.762390][ T4903] kmem_cache_alloc_bulk_noprof+0x62/0x3e0 [ 93.762447][ T4903] bpf_test_run_xdp_live+0xf16/0x1360 [ 93.762474][ T4903] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 93.762511][ T4903] ? 0xffffffffa02054c0 [ 93.762530][ T4903] ? bpf_test_run_xdp_live+0x434/0x1360 [ 93.762636][ T4903] bpf_prog_test_run_xdp+0x57b/0xa10 [ 93.762695][ T4903] ? __rcu_read_unlock+0x4e/0x70 [ 93.762725][ T4903] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 93.762820][ T4903] bpf_prog_test_run+0x204/0x340 [ 93.762845][ T4903] __sys_bpf+0x4c0/0x7b0 [ 93.762876][ T4903] __x64_sys_bpf+0x41/0x50 [ 93.762933][ T4903] x64_sys_call+0x28e1/0x3000 [ 93.762958][ T4903] do_syscall_64+0xc0/0x2a0 [ 93.763074][ T4903] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.763156][ T4903] RIP: 0033:0x7f78e5aaacb9 [ 93.763175][ T4903] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.763193][ T4903] RSP: 002b:00007f78e4507028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 93.763213][ T4903] RAX: ffffffffffffffda RBX: 00007f78e5d25fa0 RCX: 00007f78e5aaacb9 [ 93.763305][ T4903] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 93.763318][ T4903] RBP: 00007f78e4507090 R08: 0000000000000000 R09: 0000000000000000 [ 93.763330][ T4903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 93.763342][ T4903] R13: 00007f78e5d26038 R14: 00007f78e5d25fa0 R15: 00007ffc40031a38 [ 93.763430][ T4903] [ 94.045272][ T4750] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 94.055697][ T4750] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 94.115243][ T4920] loop5: detected capacity change from 0 to 128 [ 94.294741][ T29] audit: type=1400 audit(1769039038.083:328): avc: denied { setopt } for pid=4928 comm="syz.3.361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 94.369271][ T4750] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.451520][ T4939] loop2: detected capacity change from 0 to 256 [ 94.731648][ T4750] veth0_vlan: entered promiscuous mode [ 94.739141][ T4750] veth1_vlan: entered promiscuous mode [ 94.758688][ T4750] veth0_macvtap: entered promiscuous mode [ 94.760704][ T4750] veth1_macvtap: entered promiscuous mode [ 94.780095][ T4750] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.793612][ T4750] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.807915][ T52] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.809438][ T52] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.809481][ T52] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.820127][ T52] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.989515][ T4990] netlink: 8 bytes leftover after parsing attributes in process `syz.3.364'. [ 94.993473][ T29] audit: type=1400 audit(1769039038.803:329): avc: denied { nlmsg_read } for pid=4988 comm="syz.3.364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 95.021784][ T4985] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4985 comm=syz.6.331 [ 95.038764][ T4989] loop5: detected capacity change from 0 to 512 [ 95.052104][ T4989] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 95.094602][ T4989] EXT4-fs (loop5): orphan cleanup on readonly fs [ 95.105919][ T29] audit: type=1400 audit(1769039038.833:330): avc: denied { bind } for pid=4981 comm="syz.6.331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 95.151403][ T4989] Quota error (device loop5): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 95.172156][ T4996] team_slave_0: entered promiscuous mode [ 95.177970][ T4996] team_slave_1: entered promiscuous mode [ 95.194457][ T29] audit: type=1326 audit(1769039039.003:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4898 comm="syz.0.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c3c45acb9 code=0x7ffc0000 [ 95.196950][ T4989] EXT4-fs warning (device loop5): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 95.219587][ T29] audit: type=1326 audit(1769039039.033:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4898 comm="syz.0.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c3c45acb9 code=0x7ffc0000 [ 95.243139][ T4996] macvtap1: entered allmulticast mode [ 95.261511][ T4996] team0: entered allmulticast mode [ 95.266660][ T4996] team_slave_0: entered allmulticast mode [ 95.272615][ T4996] team_slave_1: entered allmulticast mode [ 95.280201][ T4989] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 95.287713][ T4996] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 95.295363][ T4989] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #16: comm syz.5.365: inode has both inline data and extents flags [ 95.310268][ T4989] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.365: couldn't read orphan inode 16 (err -117) [ 95.323076][ T4996] team0: left allmulticast mode [ 95.328191][ T4996] team_slave_0: left allmulticast mode [ 95.333710][ T4996] team_slave_1: left allmulticast mode [ 95.337778][ T4989] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 95.339444][ T4996] team_slave_0: left promiscuous mode [ 95.357144][ T4996] team_slave_1: left promiscuous mode [ 95.434552][ T4989] netlink: 12 bytes leftover after parsing attributes in process `syz.5.365'. [ 95.443621][ T4989] openvswitch: netlink: Flow actions attr not present in new flow. [ 95.561186][ T4193] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.716386][ T5030] loop3: detected capacity change from 0 to 128 [ 96.504318][ T5045] lo speed is unknown, defaulting to 1000 [ 96.567087][ T5045] lo speed is unknown, defaulting to 1000 [ 96.583469][ T5045] lo speed is unknown, defaulting to 1000 [ 96.638701][ T5045] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 96.695565][ T5045] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 96.741688][ T5056] loop3: detected capacity change from 0 to 256 [ 96.762419][ T5045] lo speed is unknown, defaulting to 1000 [ 96.789577][ T5045] lo speed is unknown, defaulting to 1000 [ 96.827231][ T5045] lo speed is unknown, defaulting to 1000 [ 96.857317][ T5045] lo speed is unknown, defaulting to 1000 [ 96.881898][ T5045] lo speed is unknown, defaulting to 1000 [ 96.966377][ T5063] loop2: detected capacity change from 0 to 512 [ 97.033647][ T5063] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 97.085268][ T5063] EXT4-fs (loop2): orphan cleanup on readonly fs [ 97.123120][ T5063] __quota_error: 6 callbacks suppressed [ 97.123208][ T5063] Quota error (device loop2): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 97.216571][ T5063] EXT4-fs warning (device loop2): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 97.248515][ T5071] netlink: 596 bytes leftover after parsing attributes in process `syz.3.387'. [ 97.269017][ T5063] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 97.275897][ T5063] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #16: comm syz.2.384: inode has both inline data and extents flags [ 97.289391][ T5063] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.384: couldn't read orphan inode 16 (err -117) [ 97.301959][ T5063] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 97.464283][ T5063] netlink: 12 bytes leftover after parsing attributes in process `syz.2.384'. [ 97.473249][ T5063] openvswitch: netlink: Flow actions attr not present in new flow. [ 97.539264][ T29] audit: type=1400 audit(1769039041.333:339): avc: denied { getopt } for pid=5077 comm="syz.3.389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 97.559879][ T29] audit: type=1400 audit(1769039041.333:340): avc: denied { setopt } for pid=5077 comm="syz.3.389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 97.653393][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.746567][ T29] audit: type=1400 audit(1769039041.553:341): avc: denied { ioctl } for pid=5092 comm="syz.3.395" path="socket:[9868]" dev="sockfs" ino=9868 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 97.788463][ T5095] loop6: detected capacity change from 0 to 256 [ 97.821590][ T5099] pimreg: entered allmulticast mode [ 97.873983][ T29] audit: type=1400 audit(1769039041.683:342): avc: denied { setopt } for pid=5103 comm="syz.3.399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 97.893713][ T29] audit: type=1400 audit(1769039041.683:343): avc: denied { ioctl } for pid=5103 comm="syz.3.399" path="socket:[11254]" dev="sockfs" ino=11254 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 97.944582][ T5104] loop3: detected capacity change from 0 to 1024 [ 97.983146][ T29] audit: type=1400 audit(1769039041.793:344): avc: denied { lock } for pid=5103 comm="syz.3.399" path="socket:[11267]" dev="sockfs" ino=11267 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 98.065604][ T5113] lo speed is unknown, defaulting to 1000 [ 98.085159][ T29] audit: type=1400 audit(1769039041.823:345): avc: denied { create } for pid=5103 comm="syz.3.399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 98.158826][ T5119] loop3: detected capacity change from 0 to 512 [ 98.197231][ T5119] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.217564][ T5119] ext4 filesystem being mounted at /85/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 98.245962][ T5102] netlink: 40 bytes leftover after parsing attributes in process `syz.5.398'. [ 98.258957][ T5119] EXT4-fs error (device loop3): ext4_lookup:1785: inode #12: comm syz.3.404: iget: bad i_size value: 2533274857506816 [ 98.368219][ T3329] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.550357][ T5138] loop2: detected capacity change from 0 to 256 [ 98.726738][ T29] audit: type=1400 audit(1769039042.533:346): avc: denied { append } for pid=5144 comm="syz.5.411" name="event3" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 98.750019][ T29] audit: type=1400 audit(1769039042.533:347): avc: denied { ioctl } for pid=5144 comm="syz.5.411" path="/dev/input/event3" dev="devtmpfs" ino=246 ioctlcmd=0x4590 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 98.781379][ T5154] loop2: detected capacity change from 0 to 512 [ 98.842748][ T5154] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 98.853994][ T5158] netlink: 20 bytes leftover after parsing attributes in process `syz.5.416'. [ 98.863207][ T5158] netlink: 152 bytes leftover after parsing attributes in process `syz.5.416'. [ 98.902842][ T5154] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.925640][ T5154] ext4 filesystem being mounted at /73/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 98.945114][ T5167] netlink: 596 bytes leftover after parsing attributes in process `syz.3.418'. [ 98.967051][ T5158] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.974299][ T5158] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.018605][ T5173] loop3: detected capacity change from 0 to 1024 [ 99.036805][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.049039][ T5175] loop0: detected capacity change from 0 to 256 [ 99.056382][ T5173] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 99.070796][ T5173] ext4 filesystem being mounted at /91/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.092385][ T5173] EXT4-fs error (device loop3): ext4_map_blocks:825: inode #15: block 1: comm syz.3.421: lblock 1 mapped to illegal pblock 1 (length 5) [ 99.114106][ T5173] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 5 with error 117 [ 99.126621][ T5173] EXT4-fs (loop3): This should not happen!! Data will be lost [ 99.126621][ T5173] [ 99.167751][ T5158] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.182770][ T5173] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #15: block 1: comm syz.3.421: lblock 1 mapped to illegal pblock 1 (length 3) [ 99.187731][ T5158] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.206536][ T5173] netlink: 24 bytes leftover after parsing attributes in process `syz.3.421'. [ 99.215804][ T5185] loop2: detected capacity change from 0 to 128 [ 99.223863][ T5185] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 99.253448][ T5185] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 99.274793][ T5187] loop0: detected capacity change from 0 to 512 [ 99.290676][ T5158] ipip0: left promiscuous mode [ 99.307060][ T5187] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 99.315856][ T1720] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.325313][ T5187] EXT4-fs (loop0): orphan cleanup on readonly fs [ 99.328296][ T5173] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5173 comm=syz.3.421 [ 99.342012][ T5187] EXT4-fs warning (device loop0): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 99.344817][ T4361] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.360305][ T5187] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 99.375160][ T1720] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.384631][ T1720] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.394287][ T5187] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #16: comm syz.0.426: corrupted inode contents [ 99.406538][ T5187] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #16: comm syz.0.426: mark_inode_dirty error [ 99.423045][ T5187] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #16: comm syz.0.426: corrupted inode contents [ 99.435475][ T5187] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.426: mark_inode_dirty error [ 99.447052][ T5187] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #16: comm syz.0.426: corrupted inode contents [ 99.459360][ T5187] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 99.468132][ T5187] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #16: comm syz.0.426: corrupted inode contents [ 99.481198][ T5187] EXT4-fs error (device loop0): ext4_truncate:4635: inode #16: comm syz.0.426: mark_inode_dirty error [ 99.493067][ T5187] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 99.493534][ T12] EXT4-fs error (device loop3): ext4_map_blocks:825: inode #15: block 8: comm kworker/u8:0: lblock 8 mapped to illegal pblock 8 (length 8) [ 99.503314][ T5187] EXT4-fs (loop0): 1 truncate cleaned up [ 99.517579][ T12] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 99.527503][ T5187] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 99.534422][ T12] EXT4-fs (loop3): This should not happen!! Data will be lost [ 99.534422][ T12] [ 99.558347][ T3329] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 99.565553][ T5187] netlink: 12 bytes leftover after parsing attributes in process `syz.0.426'. [ 99.579370][ T5187] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 99.971592][ T5211] netlink: 'syz.2.433': attribute type 13 has an invalid length. [ 99.991250][ T5213] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 99.997832][ T5213] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 100.005647][ T5213] vhci_hcd vhci_hcd.0: Device attached [ 100.108048][ T5221] __nla_validate_parse: 1 callbacks suppressed [ 100.108068][ T5221] netlink: 8 bytes leftover after parsing attributes in process `syz.2.433'. [ 100.123210][ T5221] netlink: 24 bytes leftover after parsing attributes in process `syz.2.433'. [ 100.152137][ T5222] loop5: detected capacity change from 0 to 512 [ 100.207366][ T5222] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 100.260618][ T5222] EXT4-fs (loop5): orphan cleanup on readonly fs [ 100.275442][ T5211] gretap0: refused to change device tx_queue_len [ 100.281975][ T1039] usb 2-1: SetAddress Request (2) to port 0 [ 100.292752][ T1039] usb 2-1: new SuperSpeed USB device number 2 using vhci_hcd [ 100.307190][ T5222] EXT4-fs warning (device loop5): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 100.332483][ T5214] vhci_hcd: connection closed [ 100.332809][ T322] vhci_hcd vhci_hcd.0: stop threads [ 100.342893][ T322] vhci_hcd vhci_hcd.0: release socket [ 100.348412][ T322] vhci_hcd vhci_hcd.0: disconnect device [ 100.363614][ T1039] usb 2-1: enqueue for inactive port 0 [ 100.371483][ T5211] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 100.391486][ T1039] usb 2-1: enqueue for inactive port 0 [ 100.403390][ T5222] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 100.410412][ T1039] usb 2-1: enqueue for inactive port 0 [ 100.429633][ T5222] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #16: comm syz.5.436: inode has both inline data and extents flags [ 100.468154][ T5222] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.436: couldn't read orphan inode 16 (err -117) [ 100.480950][ T5222] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 100.519830][ T1039] usb 2-1: new SuperSpeed USB device number 2 using vhci_hcd [ 100.535302][ T5217] bridge_slave_0: left allmulticast mode [ 100.542241][ T5217] bridge_slave_0: left promiscuous mode [ 100.552672][ T5217] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.583416][ T1039] usb 2-1: enqueue for inactive port 0 [ 100.583496][ T1039] usb 2-1: enqueue for inactive port 0 [ 100.583518][ T1039] usb 2-1: enqueue for inactive port 0 [ 100.604360][ T5238] loop3: detected capacity change from 0 to 256 [ 100.608272][ T5217] bridge_slave_1: left allmulticast mode [ 100.612414][ T5238] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 100.618082][ T5217] bridge_slave_1: left promiscuous mode [ 100.640889][ T5217] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.667181][ T5222] netlink: 12 bytes leftover after parsing attributes in process `syz.5.436'. [ 100.676163][ T5222] openvswitch: netlink: Flow actions attr not present in new flow. [ 100.734165][ T5217] bond0: (slave bond_slave_0): Releasing backup interface [ 100.746243][ T4193] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.800872][ T5217] bond0: (slave bond_slave_1): Releasing backup interface [ 100.813849][ T5217] team0: Port device team_slave_0 removed [ 100.820802][ T5217] team0: Port device team_slave_1 removed [ 100.822525][ T5245] loop5: detected capacity change from 0 to 1024 [ 100.827780][ T5217] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 100.841101][ T5217] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 100.854116][ T5217] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 100.877905][ T5245] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 100.901864][ T5245] ext4 filesystem being mounted at /51/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.927732][ T5245] netlink: 186928 bytes leftover after parsing attributes in process `syz.5.443'. [ 100.983055][ T5245] EXT4-fs error (device loop5): ext4_map_blocks:825: inode #15: comm syz.5.443: lblock 0 mapped to illegal pblock 0 (length 6) [ 101.005578][ T5245] EXT4-fs error (device loop5): ext4_ext_remove_space:2955: inode #15: comm syz.5.443: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 101.030390][ T5245] ext4: Unknown parameter '01777777777777777777777Xcv:Q' [ 101.048353][ T5245] EXT4-fs error (device loop5): ext4_map_blocks:825: inode #15: comm syz.5.443: lblock 0 mapped to illegal pblock 0 (length 5) [ 101.075306][ T3322] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.087770][ T5245] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 5 with error 117 [ 101.100334][ T5245] EXT4-fs (loop5): This should not happen!! Data will be lost [ 101.100334][ T5245] [ 101.121036][ T5245] EXT4-fs error (device loop5): ext4_map_blocks:825: inode #15: comm syz.5.443: lblock 0 mapped to illegal pblock 0 (length 5) [ 101.134795][ T5245] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 5 with error 117 [ 101.147319][ T5245] EXT4-fs (loop5): This should not happen!! Data will be lost [ 101.147319][ T5245] [ 101.176950][ T37] EXT4-fs error (device loop5): ext4_map_blocks:825: inode #15: block 8: comm kworker/u8:2: lblock 8 mapped to illegal pblock 8 (length 8) [ 101.206184][ T37] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 101.218606][ T37] EXT4-fs (loop5): This should not happen!! Data will be lost [ 101.218606][ T37] [ 101.770293][ T5277] loop3: detected capacity change from 0 to 256 [ 101.939164][ T5281] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 101.998957][ T5281] ext4 filesystem being mounted at /100/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.048836][ T5281] SELinux: Context system_u:object_r:dhcpd_var_run_t:s0 is not valid (left unmapped). [ 102.099659][ T4193] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 102.126113][ T3329] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 102.227468][ T5294] netlink: 596 bytes leftover after parsing attributes in process `syz.5.460'. [ 102.275539][ T29] kauditd_printk_skb: 490 callbacks suppressed [ 102.275556][ T29] audit: type=1400 audit(1769039046.083:836): avc: denied { mounton } for pid=5297 comm="syz.3.462" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 102.275630][ T5298] tmpfs: Bad value for 'mpol' [ 102.310728][ T1039] usb usb2-port1: attempt power cycle [ 102.358641][ T5298] EXT4-fs (loop3): #blocks per group too big: 1000000 [ 102.368800][ T5298] tmpfs: Bad value for 'mpol' [ 102.410190][ T29] audit: type=1400 audit(1769039046.223:837): avc: denied { create } for pid=5302 comm="syz.5.464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 102.712898][ T5311] netlink: 40 bytes leftover after parsing attributes in process `syz.3.466'. [ 103.251627][ T5330] netlink: 596 bytes leftover after parsing attributes in process `syz.2.473'. [ 103.379382][ T5337] netlink: 80 bytes leftover after parsing attributes in process `syz.5.475'. [ 103.448224][ T5349] netlink: 4 bytes leftover after parsing attributes in process `syz.2.478'. [ 103.469461][ T5349] netlink: 'syz.2.478': attribute type 10 has an invalid length. [ 103.487163][ T5349] netlink: 'syz.2.478': attribute type 10 has an invalid length. [ 103.498338][ T5349] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 103.783498][ T29] audit: type=1400 audit(1769039047.593:838): avc: denied { accept } for pid=5370 comm="syz.2.484" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 104.416864][ T29] audit: type=1326 audit(1769039048.223:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5395 comm="syz.3.489" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f78e5aaacb9 code=0x0 [ 104.612593][ T5408] set_capacity_and_notify: 3 callbacks suppressed [ 104.612614][ T5408] loop0: detected capacity change from 0 to 512 [ 104.632959][ T5408] EXT4-fs (loop0): 1 orphan inode deleted [ 104.639483][ T5408] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.652185][ T53] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 104.662045][ T53] EXT4-fs error (device loop0): ext4_release_dquot:7022: comm kworker/u8:4: Failed to release dquot type 1 [ 104.674801][ T5408] ext4 filesystem being mounted at /93/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.724933][ T5408] EXT4-fs error (device loop0): ext4_add_entry:2415: inode #2: comm syz.0.491: Directory hole found for htree leaf block 0 [ 104.819130][ T3322] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.835924][ T29] audit: type=1400 audit(1769039048.643:840): avc: denied { create } for pid=5415 comm="syz.6.493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 104.856599][ T4361] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 104.866757][ T4361] EXT4-fs error (device loop0): ext4_release_dquot:7022: comm kworker/u8:14: Failed to release dquot type 1 [ 104.876614][ T5421] netlink: 8 bytes leftover after parsing attributes in process `syz.3.495'. [ 104.928810][ T5429] loop6: detected capacity change from 0 to 512 [ 104.954733][ T5429] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 104.964891][ T5429] EXT4-fs (loop6): orphan cleanup on readonly fs [ 104.972428][ T5429] Quota error (device loop6): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 104.987074][ T5429] EXT4-fs warning (device loop6): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 104.987482][ T1039] usb usb2-port1: unable to enumerate USB device [ 105.008403][ T5431] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001157 ! [ 105.026038][ T5429] EXT4-fs (loop6): Cannot turn on quotas: error -117 [ 105.033193][ T5429] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #16: comm syz.6.497: inode has both inline data and extents flags [ 105.048420][ T5429] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.497: couldn't read orphan inode 16 (err -117) [ 105.062774][ T5429] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 105.112937][ T5442] loop3: detected capacity change from 0 to 128 [ 105.129167][ T5439] loop0: detected capacity change from 0 to 256 [ 105.162502][ T5429] netlink: 12 bytes leftover after parsing attributes in process `syz.6.497'. [ 105.171500][ T5429] openvswitch: netlink: Flow actions attr not present in new flow. [ 105.197009][ T29] audit: type=1400 audit(1769039049.013:841): avc: denied { create } for pid=5447 comm="syz.5.504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 105.226128][ T4750] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.250358][ T5448] Cannot find del_set index 0 as target [ 105.256106][ T5453] netlink: 'syz.0.506': attribute type 3 has an invalid length. [ 105.290286][ T5448] lo speed is unknown, defaulting to 1000 [ 105.296258][ T29] audit: type=1400 audit(1769039049.103:842): avc: denied { setopt } for pid=5452 comm="syz.0.506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 105.346151][ T5458] netlink: 'syz.5.504': attribute type 12 has an invalid length. [ 105.893443][ T5493] loop5: detected capacity change from 0 to 512 [ 105.936397][ T5493] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 106.007776][ T5493] EXT4-fs (loop5): orphan cleanup on readonly fs [ 106.054190][ T5502] loop2: detected capacity change from 0 to 256 [ 106.063810][ T5493] EXT4-fs warning (device loop5): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 106.174401][ T5493] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 106.229889][ T5493] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #16: comm syz.5.515: inode has both inline data and extents flags [ 106.246186][ T5514] loop3: detected capacity change from 0 to 1024 [ 106.316260][ T5493] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.515: couldn't read orphan inode 16 (err -117) [ 106.341198][ T5514] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.377845][ T5493] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 106.507078][ T5493] netlink: 12 bytes leftover after parsing attributes in process `syz.5.515'. [ 106.516017][ T5493] openvswitch: netlink: Flow actions attr not present in new flow. [ 106.533259][ T5533] lo speed is unknown, defaulting to 1000 [ 106.538216][ T3329] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.605164][ T4193] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.640197][ T5544] loop0: detected capacity change from 0 to 512 [ 106.697882][ T5551] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5551 comm=syz.5.522 [ 106.758981][ T5558] loop0: detected capacity change from 0 to 1024 [ 106.802006][ T5558] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 106.825841][ T5563] loop6: detected capacity change from 0 to 128 [ 106.845754][ T5558] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.524: Invalid block bitmap block 0 in block_group 0 [ 106.861408][ T5563] FAT-fs (loop6): Directory bread(block 414) failed [ 106.876314][ T5563] FAT-fs (loop6): Directory bread(block 415) failed [ 106.877775][ T5565] netlink: 172 bytes leftover after parsing attributes in process `syz.5.527'. [ 106.884059][ T5558] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.524: Failed to acquire dquot type 0 [ 106.914706][ T5563] FAT-fs (loop6): Directory bread(block 416) failed [ 106.926767][ T5563] FAT-fs (loop6): Directory bread(block 417) failed [ 106.933893][ T5563] FAT-fs (loop6): Directory bread(block 418) failed [ 106.983692][ T5558] EXT4-fs error (device loop0): ext4_free_blocks:6728: comm syz.0.524: Freeing blocks not in datazone - block = 0, count = 4096 [ 107.006482][ T5528] netlink: 40 bytes leftover after parsing attributes in process `syz.2.519'. [ 107.017401][ T5563] FAT-fs (loop6): Directory bread(block 419) failed [ 107.024144][ T5563] FAT-fs (loop6): Directory bread(block 420) failed [ 107.031170][ T5558] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.524: Invalid inode bitmap blk 0 in block_group 0 [ 107.044203][ T5563] FAT-fs (loop6): Directory bread(block 421) failed [ 107.058821][ T12] EXT4-fs error (device loop0): ext4_release_dquot:7022: comm kworker/u8:0: Failed to release dquot type 0 [ 107.070853][ T5558] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem [ 107.090473][ T5563] FAT-fs (loop6): FAT read failed (blocknr 128) [ 107.092288][ T5575] EXT4-fs: Mount option(s) incompatible with ext2 [ 107.119536][ T5575] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.530'. [ 107.137974][ T5558] EXT4-fs (loop0): 1 orphan inode deleted [ 107.154701][ T5558] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.227479][ T5575] EXT4-fs: Mount option(s) incompatible with ext2 [ 107.234365][ T5581] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 107.242790][ T5581] EXT4-fs (loop6): orphan cleanup on readonly fs [ 107.249858][ T5581] EXT4-fs warning (device loop6): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 107.266373][ T5581] EXT4-fs (loop6): Cannot turn on quotas: error -117 [ 107.274942][ T5581] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #16: comm syz.6.532: inode has both inline data and extents flags [ 107.288814][ T5581] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.532: couldn't read orphan inode 16 (err -117) [ 107.291125][ T29] kauditd_printk_skb: 139 callbacks suppressed [ 107.291169][ T29] audit: type=1400 audit(1769039051.093:977): avc: denied { setattr } for pid=5556 comm="syz.0.524" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 107.330252][ T29] audit: type=1326 audit(1769039051.103:978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5572 comm="syz.3.529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f78e5aa4ad7 code=0x7ffc0000 [ 107.353457][ T29] audit: type=1326 audit(1769039051.103:979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5572 comm="syz.3.529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f78e5a4c0d9 code=0x7ffc0000 [ 107.376759][ T29] audit: type=1326 audit(1769039051.103:980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5572 comm="syz.3.529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f78e5aaacb9 code=0x7ffc0000 [ 107.418941][ T5581] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 107.438188][ T3322] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.469849][ T348] Quota error (device loop0): do_check_range: Getting block 0 out of range 1-7 [ 107.478914][ T348] EXT4-fs error (device loop0): ext4_release_dquot:7022: comm kworker/u8:7: Failed to release dquot type 0 [ 107.532725][ T5590] netlink: 12 bytes leftover after parsing attributes in process `syz.6.532'. [ 107.541742][ T5590] openvswitch: netlink: Flow actions attr not present in new flow. [ 107.551283][ T5593] netlink: 80 bytes leftover after parsing attributes in process `syz.0.534'. [ 107.567440][ T5593] audit: audit_backlog=66 > audit_backlog_limit=64 [ 107.574169][ T5593] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 107.581876][ T5593] audit: backlog limit exceeded [ 107.596717][ T29] audit: type=1326 audit(1769039051.203:981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5572 comm="syz.3.529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f78e5a6b58e code=0x7ffc0000 [ 107.618299][ T5591] audit: audit_backlog=65 > audit_backlog_limit=64 [ 107.623852][ T5597] netlink: 64 bytes leftover after parsing attributes in process `syz.0.534'. [ 107.650750][ T4750] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.736361][ T5591] lo speed is unknown, defaulting to 1000 [ 107.782584][ T5607] netlink: 24 bytes leftover after parsing attributes in process `syz.5.541'. [ 107.814819][ T5613] EXT4-fs (loop6): can't read group descriptor 0 [ 107.857855][ T5607] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5607 comm=syz.5.541 [ 107.896315][ T5607] delete_channel: no stack [ 108.000864][ T5628] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 108.019349][ T5628] EXT4-fs (loop0): orphan cleanup on readonly fs [ 108.084337][ T5628] EXT4-fs warning (device loop0): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 108.146023][ T5644] netlink: 40 bytes leftover after parsing attributes in process `syz.2.546'. [ 108.198741][ T5628] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 108.217638][ T5628] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #16: comm syz.0.549: inode has both inline data and extents flags [ 108.247092][ T5628] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.549: couldn't read orphan inode 16 (err -117) [ 108.259625][ T5628] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 108.316587][ T5628] openvswitch: netlink: Flow actions attr not present in new flow. [ 108.396661][ T3322] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.407430][ T5660] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.458690][ T5667] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 108.481379][ T5667] EXT4-fs error (device loop5): xattr_find_entry:337: inode #15: comm syz.5.558: corrupted xattr entries [ 108.490907][ T5666] lo speed is unknown, defaulting to 1000 [ 108.527671][ T5667] EXT4-fs (loop5): 1 orphan inode deleted [ 108.528684][ T5667] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.611120][ T5667] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.628374][ T3329] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.643957][ T5667] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 108.654036][ T5667] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 108.743697][ T5686] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 108.781952][ T5686] ext4 filesystem being mounted at /105/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 108.820481][ T5680] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 108.843264][ T3322] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 108.909684][ T5694] 9p: Bad value for 'rfdno' [ 108.996490][ T5704] EXT4-fs: inline encryption not supported [ 109.007736][ T5702] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 109.024102][ T5704] ext4: Unknown parameter 'func' [ 109.047261][ T5702] EXT4-fs (loop2): orphan cleanup on readonly fs [ 109.114409][ T5702] EXT4-fs warning (device loop2): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 109.147430][ T5702] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 109.169351][ T5702] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #16: comm syz.2.571: inode has both inline data and extents flags [ 109.186335][ T5715] rock: directory entry would overflow storage [ 109.192668][ T5715] rock: sig=0x5245, size=8, remaining=5 [ 109.221631][ T5702] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.571: couldn't read orphan inode 16 (err -117) [ 109.234384][ T5702] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 109.279492][ T5702] openvswitch: netlink: Flow actions attr not present in new flow. [ 109.298933][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.335200][ T5724] 9p: Bad value for 'rfdno' [ 109.407857][ T5729] FAULT_INJECTION: forcing a failure. [ 109.407857][ T5729] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 109.421025][ T5729] CPU: 0 UID: 0 PID: 5729 Comm: syz.3.582 Not tainted syzkaller #0 PREEMPT(voluntary) [ 109.421086][ T5729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 109.421102][ T5729] Call Trace: [ 109.421111][ T5729] [ 109.421122][ T5729] __dump_stack+0x1d/0x30 [ 109.421163][ T5729] dump_stack_lvl+0x95/0xd0 [ 109.421187][ T5729] dump_stack+0x15/0x1b [ 109.421285][ T5729] should_fail_ex+0x263/0x280 [ 109.421323][ T5729] should_fail+0xb/0x20 [ 109.421344][ T5729] should_fail_usercopy+0x1a/0x20 [ 109.421371][ T5729] _copy_from_user+0x1c/0xb0 [ 109.421403][ T5729] ucma_write+0xd8/0x260 [ 109.421474][ T5729] ? __pfx_ucma_write+0x10/0x10 [ 109.421507][ T5729] vfs_write+0x269/0x9f0 [ 109.421544][ T5729] ? __rcu_read_unlock+0x4e/0x70 [ 109.421617][ T5729] ? __fget_files+0x184/0x1c0 [ 109.421645][ T5729] ksys_write+0xdc/0x1a0 [ 109.421670][ T5729] __x64_sys_write+0x40/0x50 [ 109.421699][ T5729] x64_sys_call+0x2847/0x3000 [ 109.421730][ T5729] do_syscall_64+0xc0/0x2a0 [ 109.421818][ T5729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.421873][ T5729] RIP: 0033:0x7f78e5aaacb9 [ 109.421893][ T5729] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 109.421917][ T5729] RSP: 002b:00007f78e4507028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 109.421940][ T5729] RAX: ffffffffffffffda RBX: 00007f78e5d25fa0 RCX: 00007f78e5aaacb9 [ 109.421954][ T5729] RDX: 0000000000000020 RSI: 0000200000000040 RDI: 0000000000000003 [ 109.422014][ T5729] RBP: 00007f78e4507090 R08: 0000000000000000 R09: 0000000000000000 [ 109.422027][ T5729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 109.422039][ T5729] R13: 00007f78e5d26038 R14: 00007f78e5d25fa0 R15: 00007ffc40031a38 [ 109.422063][ T5729] [ 109.707804][ T5741] set_capacity_and_notify: 17 callbacks suppressed [ 109.707861][ T5741] loop5: detected capacity change from 0 to 256 [ 109.734382][ T5744] loop6: detected capacity change from 0 to 128 [ 109.749129][ T5746] tipc: Started in network mode [ 109.754058][ T5746] tipc: Node identity ff020000000000000000000000000001, cluster identity 4711 [ 109.763029][ T5746] tipc: Enabling of bearer rejected, failed to enable media [ 109.809618][ T5749] loop2: detected capacity change from 0 to 512 [ 109.830310][ T5749] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 109.839880][ T5749] EXT4-fs (loop2): orphan cleanup on readonly fs [ 109.857353][ T5749] EXT4-fs warning (device loop2): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 109.887996][ T5758] 9p: Bad value for 'rfdno' [ 109.893193][ T5749] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 109.900332][ T5749] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #16: comm syz.2.590: inode has both inline data and extents flags [ 109.913870][ T5749] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.590: couldn't read orphan inode 16 (err -117) [ 109.928497][ T5749] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 109.969242][ T5749] openvswitch: netlink: Flow actions attr not present in new flow. [ 109.996341][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.101141][ T5772] loop2: detected capacity change from 0 to 256 [ 110.131727][ T5773] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5773 comm=syz.5.596 [ 110.213191][ T5779] loop0: detected capacity change from 0 to 256 [ 110.249608][ T5764] __nla_validate_parse: 7 callbacks suppressed [ 110.249651][ T5764] netlink: 40 bytes leftover after parsing attributes in process `syz.3.593'. [ 110.253912][ T5781] netlink: 8 bytes leftover after parsing attributes in process `syz.2.600'. [ 110.276263][ T5781] netlink: 12 bytes leftover after parsing attributes in process `syz.2.600'. [ 110.291837][ T5781] 8021q: adding VLAN 0 to HW filter on device bond1 [ 110.307194][ T5781] netlink: 64 bytes leftover after parsing attributes in process `syz.2.600'. [ 110.316202][ T5781] netlink: 64 bytes leftover after parsing attributes in process `syz.2.600'. [ 110.332920][ T5785] FAULT_INJECTION: forcing a failure. [ 110.332920][ T5785] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 110.346068][ T5785] CPU: 1 UID: 0 PID: 5785 Comm: syz.0.602 Not tainted syzkaller #0 PREEMPT(voluntary) [ 110.346177][ T5785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 110.346190][ T5785] Call Trace: [ 110.346198][ T5785] [ 110.346207][ T5785] __dump_stack+0x1d/0x30 [ 110.346240][ T5785] dump_stack_lvl+0x95/0xd0 [ 110.346269][ T5785] dump_stack+0x15/0x1b [ 110.346296][ T5785] should_fail_ex+0x263/0x280 [ 110.346354][ T5785] ? __pfx_ucma_set_option+0x10/0x10 [ 110.346388][ T5785] should_fail+0xb/0x20 [ 110.346420][ T5785] should_fail_usercopy+0x1a/0x20 [ 110.346553][ T5785] _copy_from_user+0x1c/0xb0 [ 110.346587][ T5785] ucma_set_option+0x54/0x7b0 [ 110.346636][ T5785] ? _parse_integer+0x27/0x40 [ 110.346738][ T5785] ? kstrtoull+0x111/0x140 [ 110.346782][ T5785] ? kstrtouint+0x76/0xc0 [ 110.346823][ T5785] ? kstrtouint_from_user+0xa8/0xf0 [ 110.346866][ T5785] ? should_fail_ex+0xd9/0x280 [ 110.346891][ T5785] ? __pfx_ucma_set_option+0x10/0x10 [ 110.346927][ T5785] ucma_write+0x1c9/0x260 [ 110.346958][ T5785] ? __pfx_ucma_write+0x10/0x10 [ 110.346985][ T5785] vfs_write+0x269/0x9f0 [ 110.347095][ T5785] ? __rcu_read_unlock+0x4e/0x70 [ 110.347120][ T5785] ? __fget_files+0x184/0x1c0 [ 110.347152][ T5785] ksys_write+0xdc/0x1a0 [ 110.347177][ T5785] __x64_sys_write+0x40/0x50 [ 110.347200][ T5785] x64_sys_call+0x2847/0x3000 [ 110.347253][ T5785] do_syscall_64+0xc0/0x2a0 [ 110.347291][ T5785] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.347320][ T5785] RIP: 0033:0x7f9c3c45acb9 [ 110.347422][ T5785] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 110.347440][ T5785] RSP: 002b:00007f9c3aeb7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 110.347514][ T5785] RAX: ffffffffffffffda RBX: 00007f9c3c6d5fa0 RCX: 00007f9c3c45acb9 [ 110.347533][ T5785] RDX: 0000000000000020 RSI: 0000200000000040 RDI: 0000000000000003 [ 110.347551][ T5785] RBP: 00007f9c3aeb7090 R08: 0000000000000000 R09: 0000000000000000 [ 110.347569][ T5785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 110.347585][ T5785] R13: 00007f9c3c6d6038 R14: 00007f9c3c6d5fa0 R15: 00007ffefc94ee18 [ 110.347652][ T5785] [ 110.589562][ T5788] netlink: 596 bytes leftover after parsing attributes in process `syz.6.603'. [ 110.645992][ T5790] 9p: Bad value for 'wfdno' [ 110.660481][ T5794] loop6: detected capacity change from 0 to 512 [ 110.691837][ T5794] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 110.712688][ T5794] EXT4-fs (loop6): orphan cleanup on readonly fs [ 110.726969][ T5792] loop3: detected capacity change from 0 to 8192 [ 110.744908][ T5794] EXT4-fs warning (device loop6): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 110.759911][ T5794] EXT4-fs (loop6): Cannot turn on quotas: error -117 [ 110.767047][ T5794] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #16: comm syz.6.606: inode has both inline data and extents flags [ 110.785251][ T5794] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.606: couldn't read orphan inode 16 (err -117) [ 110.798835][ T5794] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 110.854712][ T5809] loop0: detected capacity change from 0 to 256 [ 110.873078][ T5794] netlink: 12 bytes leftover after parsing attributes in process `syz.6.606'. [ 110.882133][ T5794] openvswitch: netlink: Flow actions attr not present in new flow. [ 110.933023][ T4750] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.945076][ T5813] FAULT_INJECTION: forcing a failure. [ 110.945076][ T5813] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 110.958278][ T5813] CPU: 0 UID: 0 PID: 5813 Comm: syz.5.615 Not tainted syzkaller #0 PREEMPT(voluntary) [ 110.958317][ T5813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 110.958330][ T5813] Call Trace: [ 110.958341][ T5813] [ 110.958349][ T5813] __dump_stack+0x1d/0x30 [ 110.958379][ T5813] dump_stack_lvl+0x95/0xd0 [ 110.958476][ T5813] dump_stack+0x15/0x1b [ 110.958502][ T5813] should_fail_ex+0x263/0x280 [ 110.958528][ T5813] ? __pfx_ucma_set_option+0x10/0x10 [ 110.958565][ T5813] should_fail+0xb/0x20 [ 110.958588][ T5813] should_fail_usercopy+0x1a/0x20 [ 110.958666][ T5813] _copy_from_user+0x1c/0xb0 [ 110.958700][ T5813] memdup_user+0x5e/0xd0 [ 110.958740][ T5813] ucma_set_option+0xee/0x7b0 [ 110.958856][ T5813] ? _parse_integer+0x27/0x40 [ 110.958894][ T5813] ? kstrtoull+0x111/0x140 [ 110.958926][ T5813] ? kstrtouint+0x76/0xc0 [ 110.959034][ T5813] ? kstrtouint_from_user+0xa8/0xf0 [ 110.959057][ T5813] ? should_fail_ex+0xd9/0x280 [ 110.959083][ T5813] ? __pfx_ucma_set_option+0x10/0x10 [ 110.959110][ T5813] ucma_write+0x1c9/0x260 [ 110.959181][ T5813] ? __pfx_ucma_write+0x10/0x10 [ 110.959211][ T5813] vfs_write+0x269/0x9f0 [ 110.959246][ T5813] ? __rcu_read_unlock+0x4e/0x70 [ 110.959306][ T5813] ? __fget_files+0x184/0x1c0 [ 110.959338][ T5813] ksys_write+0xdc/0x1a0 [ 110.959384][ T5813] __x64_sys_write+0x40/0x50 [ 110.959473][ T5813] x64_sys_call+0x2847/0x3000 [ 110.959500][ T5813] do_syscall_64+0xc0/0x2a0 [ 110.959530][ T5813] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.959553][ T5813] RIP: 0033:0x7fb500a8acb9 [ 110.959575][ T5813] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 110.959595][ T5813] RSP: 002b:00007fb4ff4e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 110.959616][ T5813] RAX: ffffffffffffffda RBX: 00007fb500d05fa0 RCX: 00007fb500a8acb9 [ 110.959630][ T5813] RDX: 0000000000000020 RSI: 0000200000000040 RDI: 0000000000000003 [ 110.959649][ T5813] RBP: 00007fb4ff4e7090 R08: 0000000000000000 R09: 0000000000000000 [ 110.959663][ T5813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 110.959676][ T5813] R13: 00007fb500d06038 R14: 00007fb500d05fa0 R15: 00007fff87512e68 [ 110.959777][ T5813] [ 110.959965][ T5807] loop3: detected capacity change from 0 to 8192 [ 111.230933][ T5807] netlink: 'syz.3.611': attribute type 1 has an invalid length. [ 111.393759][ T5824] loop6: detected capacity change from 0 to 128 [ 111.403041][ T5819] 9p: Bad value for 'wfdno' [ 111.438519][ T5807] 8021q: adding VLAN 0 to HW filter on device bond2 [ 111.578721][ T5832] netlink: 596 bytes leftover after parsing attributes in process `syz.2.621'. [ 112.688373][ T29] kauditd_printk_skb: 306 callbacks suppressed [ 112.688389][ T29] audit: type=1400 audit(1769039055.883:1282): avc: denied { setopt } for pid=5839 comm="syz.3.624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 113.209622][ T29] audit: type=1400 audit(1769039056.663:1283): avc: denied { read } for pid=5839 comm="syz.3.624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 113.229421][ T29] audit: type=1326 audit(1769039056.773:1284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5848 comm="syz.6.626" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd7c54aacb9 code=0x0 [ 113.252307][ T29] audit: type=1400 audit(1769039056.903:1285): avc: denied { bind } for pid=5856 comm="syz.3.629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 113.271497][ T29] audit: type=1400 audit(1769039056.943:1286): avc: denied { bind } for pid=5860 comm="syz.0.630" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 113.349808][ T5861] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.363097][ T29] audit: type=1400 audit(1769039057.173:1287): avc: denied { watch watch_reads } for pid=5860 comm="syz.0.630" path="/118/file1" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 113.430023][ T5861] bridge_slave_0: left allmulticast mode [ 113.435935][ T5861] bridge_slave_0: left promiscuous mode [ 113.441724][ T5861] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.447673][ T5872] new mount options do not match the existing superblock, will be ignored [ 113.456021][ T29] audit: type=1400 audit(1769039057.243:1288): avc: denied { mount } for pid=5873 comm="syz.2.634" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 113.480888][ T5861] bridge_slave_1: left allmulticast mode [ 113.486612][ T5861] bridge_slave_1: left promiscuous mode [ 113.492319][ T5861] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.502369][ T5861] bond0: (slave bond_slave_0): Releasing backup interface [ 113.512634][ T5861] bond0: (slave bond_slave_1): Releasing backup interface [ 113.524894][ T5861] team0: Port device team_slave_0 removed [ 113.535939][ T5861] team0: Port device team_slave_1 removed [ 113.542971][ T5861] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.550439][ T5861] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 113.560592][ T5861] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.565357][ T29] audit: type=1400 audit(1769039057.363:1289): avc: denied { mount } for pid=5855 comm="syz.6.628" name="/" dev="cgroup" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 113.568138][ T5861] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 113.601664][ T5861] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 113.617886][ T3551] lo speed is unknown, defaulting to 1000 [ 113.689455][ T3322] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.706057][ T5883] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 113.731976][ T5883] EXT4-fs (loop2): orphan cleanup on readonly fs [ 113.757448][ T5889] xt_hashlimit: size too large, truncated to 1048576 [ 113.764315][ T5889] xt_hashlimit: max too large, truncated to 1048576 [ 113.779432][ T29] audit: type=1400 audit(1769039057.593:1290): avc: denied { unmount } for pid=4750 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 113.789264][ T5883] Quota error (device loop2): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 113.880092][ T5883] EXT4-fs warning (device loop2): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 113.907038][ T5899] netlink: 4 bytes leftover after parsing attributes in process `syz.6.644'. [ 113.932136][ T5883] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 113.959878][ T5883] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #16: comm syz.2.637: inode has both inline data and extents flags [ 114.006064][ T5883] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.637: couldn't read orphan inode 16 (err -117) [ 114.043903][ T5883] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 114.186442][ T5907] netlink: 12 bytes leftover after parsing attributes in process `syz.2.637'. [ 114.195654][ T5907] openvswitch: netlink: Flow actions attr not present in new flow. [ 114.225116][ T3551] page_pool_release_retry() stalled pool shutdown: id 30, 1 inflight 60 sec [ 114.298347][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.390359][ T5913] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 114.425593][ T5913] EXT4-fs (loop3): orphan cleanup on readonly fs [ 114.454575][ T5913] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.648: bg 0: block 16: invalid block bitmap [ 114.499790][ T5913] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 114.532904][ T5913] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.648: invalid indirect mapped block 5 (level 0) [ 114.609520][ T5913] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.648: invalid indirect mapped block 4294967295 (level 1) [ 114.661708][ T5913] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.648: invalid indirect mapped block 4294967295 (level 2) [ 114.711338][ T5913] EXT4-fs (loop3): 1 truncate cleaned up [ 114.736174][ T5913] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 114.802665][ T3329] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.965768][ T5938] set_capacity_and_notify: 6 callbacks suppressed [ 114.965788][ T5938] loop6: detected capacity change from 0 to 512 [ 114.980700][ T5938] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 114.996907][ T5938] EXT4-fs (loop6): orphan cleanup on readonly fs [ 115.016966][ T5938] EXT4-fs warning (device loop6): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 115.100016][ T5938] EXT4-fs (loop6): Cannot turn on quotas: error -117 [ 115.131291][ T5938] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #16: comm syz.6.658: inode has both inline data and extents flags [ 115.161878][ T5938] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.658: couldn't read orphan inode 16 (err -117) [ 115.214269][ T5955] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 115.250693][ T5938] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 115.329613][ T5938] __nla_validate_parse: 1 callbacks suppressed [ 115.329633][ T5938] netlink: 12 bytes leftover after parsing attributes in process `syz.6.658'. [ 115.344820][ T5938] openvswitch: netlink: Flow actions attr not present in new flow. [ 115.397336][ T4750] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.525039][ T6002] ieee802154 phy0 wpan0: encryption failed: -22 [ 115.545855][ T6003] TCP: TCP_TX_DELAY enabled [ 115.568175][ T6002] loop3: detected capacity change from 0 to 8192 [ 115.789678][ T6013] netlink: 'syz.3.684': attribute type 5 has an invalid length. [ 115.831539][ T6016] netlink: 12 bytes leftover after parsing attributes in process `syz.0.685'. [ 115.885203][ T6021] loop5: detected capacity change from 0 to 1024 [ 115.918790][ T6021] EXT4-fs (loop5): can't mount with data=, fs mounted w/o journal [ 115.996045][ T6030] loop0: detected capacity change from 0 to 512 [ 116.004451][ T6029] vlan2: entered allmulticast mode [ 116.128084][ T6040] netlink: 4 bytes leftover after parsing attributes in process `syz.5.694'. [ 116.135907][ T6039] loop0: detected capacity change from 0 to 1024 [ 116.148215][ T6040] hsr_slave_1 (unregistering): left promiscuous mode [ 116.181989][ T6039] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.307418][ T6046] loop5: detected capacity change from 0 to 2048 [ 116.357534][ T6046] loop5: p1 < > p4 < > [ 116.416992][ T6048] netlink: 596 bytes leftover after parsing attributes in process `syz.3.697'. [ 116.439217][ T3322] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.451125][ T6050] netlink: 12 bytes leftover after parsing attributes in process `syz.5.698'. [ 116.637839][ T6074] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.657151][ T6078] veth1_to_bond: entered promiscuous mode [ 116.716920][ T6077] netlink: 12 bytes leftover after parsing attributes in process `syz.3.708'. [ 116.725866][ T6077] netlink: 28 bytes leftover after parsing attributes in process `syz.3.708'. [ 116.734806][ T6077] netlink: 12 bytes leftover after parsing attributes in process `syz.3.708'. [ 116.764542][ T6081] bridge0: entered promiscuous mode [ 116.771765][ T6082] loop6: detected capacity change from 0 to 128 [ 116.778666][ T6082] msdos: Unknown parameter 'xܱkWej]l<ڥvizR\(Ui 4H!CHlA' [ 116.800178][ T6081] macsec1: entered promiscuous mode [ 116.809393][ T6074] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.871265][ T6074] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.936380][ T6074] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.997463][ T6093] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6093 comm=syz.0.713 [ 117.072562][ T37] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.097171][ T37] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.108443][ T6106] SELinux: Context system_u:object_r:inetd_exec_t:s0 is not valid (left unmapped). [ 117.165950][ T37] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.221596][ T37] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.279668][ T6091] netlink: 'syz.3.712': attribute type 39 has an invalid length. [ 117.365251][ T6101] lo speed is unknown, defaulting to 1000 [ 117.467581][ T6074] veth1_to_bond: left promiscuous mode [ 117.575971][ T36] kernel write not supported for file bpf-prog (pid: 36 comm: kworker/1:1) [ 117.621016][ T6117] netlink: 24 bytes leftover after parsing attributes in process `syz.0.721'. [ 117.630020][ T6117] netlink: 24 bytes leftover after parsing attributes in process `syz.0.721'. [ 117.670206][ T6135] loop3: detected capacity change from 0 to 2048 [ 117.686100][ T6135] EXT4-fs: Ignoring removed mblk_io_submit option [ 117.720499][ T6135] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.816316][ T6163] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.825145][ T6163] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.016551][ T1720] Bluetooth: hci0: Frame reassembly failed (-84) [ 118.459524][ T29] kauditd_printk_skb: 33 callbacks suppressed [ 118.459544][ T29] audit: type=1400 audit(1769039062.273:1323): avc: denied { ioctl } for pid=6182 comm="syz.2.740" path="/dev/nvram" dev="devtmpfs" ino=98 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 118.462390][ T6184] netlink: 'syz.2.740': attribute type 83 has an invalid length. [ 118.569990][ T3329] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.736552][ T6201] loop6: detected capacity change from 0 to 256 [ 118.753217][ T6201] sctp: [Deprecated]: syz.6.748 (pid 6201) Use of int in maxseg socket option. [ 118.753217][ T6201] Use struct sctp_assoc_value instead [ 118.818524][ T6205] loop6: detected capacity change from 0 to 128 [ 118.833873][ T6205] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 118.856946][ T6205] ext4 filesystem being mounted at /72/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 119.154585][ T4750] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 119.186411][ T29] audit: type=1326 audit(1769039062.993:1324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6220 comm="syz.6.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7c54aacb9 code=0x7ffc0000 [ 119.227115][ T29] audit: type=1326 audit(1769039062.993:1325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6220 comm="syz.6.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7c54aacb9 code=0x7ffc0000 [ 119.250583][ T29] audit: type=1326 audit(1769039063.023:1326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6220 comm="syz.6.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7c54aacb9 code=0x7ffc0000 [ 119.274081][ T29] audit: type=1326 audit(1769039063.023:1327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6220 comm="syz.6.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7c54aacb9 code=0x7ffc0000 [ 119.297501][ T29] audit: type=1326 audit(1769039063.023:1328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6220 comm="syz.6.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=191 compat=0 ip=0x7fd7c54aacb9 code=0x7ffc0000 [ 119.320913][ T29] audit: type=1326 audit(1769039063.023:1329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6220 comm="syz.6.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7c54aacb9 code=0x7ffc0000 [ 119.344392][ T29] audit: type=1326 audit(1769039063.023:1330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6220 comm="syz.6.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7c54aacb9 code=0x7ffc0000 [ 119.367994][ T29] audit: type=1326 audit(1769039063.023:1331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6220 comm="syz.6.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7c54aacb9 code=0x7ffc0000 [ 119.391564][ T29] audit: type=1326 audit(1769039063.023:1333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6220 comm="syz.6.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd7c54aacb9 code=0x7ffc0000 [ 119.436858][ T6222] syzkaller1: entered promiscuous mode [ 119.442443][ T6222] syzkaller1: entered allmulticast mode [ 119.467897][ T6231] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.759: error while reading EA inode 32 err=-116 [ 119.499996][ T6231] EXT4-fs (loop2): Remounting filesystem read-only [ 119.507034][ T6231] EXT4-fs warning (device loop2): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 119.517732][ T6231] EXT4-fs (loop2): 1 orphan inode deleted [ 119.524281][ T6231] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.583582][ T6231] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.896058][ T6253] bond2 (unregistering): Released all slaves [ 119.986771][ T23] delete_channel: no stack [ 120.001177][ T6260] set_capacity_and_notify: 3 callbacks suppressed [ 120.001197][ T6260] loop2: detected capacity change from 0 to 512 [ 120.016805][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 120.016876][ T3591] Bluetooth: hci0: command 0x1003 tx timeout [ 120.031711][ T6260] EXT4-fs error (device loop2): __ext4_fill_super:5553: inode #2: comm syz.2.769: iget: checksum invalid [ 120.043324][ T6260] EXT4-fs (loop2): get root inode failed [ 120.049071][ T6260] EXT4-fs (loop2): mount failed [ 120.496608][ T6266] cgroup: fork rejected by pids controller in /syz5 [ 121.020744][ T6175] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 121.189391][ T6324] loop2: detected capacity change from 0 to 128 [ 121.409355][ T6321] __nla_validate_parse: 7 callbacks suppressed [ 121.409449][ T6321] netlink: 40 bytes leftover after parsing attributes in process `syz.0.780'. [ 121.653311][ T6331] loop0: detected capacity change from 0 to 128 [ 121.782202][ T6339] netlink: 28 bytes leftover after parsing attributes in process `syz.6.784'. [ 121.791183][ T6339] netlink: 28 bytes leftover after parsing attributes in process `syz.6.784'. [ 121.803824][ T6339] loop6: detected capacity change from 0 to 512 [ 121.813538][ T6339] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 121.829885][ T6339] EXT4-fs (loop6): warning: checktime reached, running e2fsck is recommended [ 121.839206][ T6339] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 121.847633][ T6339] System zones: 0-2, 18-18, 34-34 [ 121.853312][ T6339] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz.6.784: bad orphan inode 15 [ 121.864231][ T6339] ext4_test_bit(bit=14, block=18) = 1 [ 121.869756][ T6339] is_bad_inode(inode)=0 [ 121.873937][ T6339] NEXT_ORPHAN(inode)=2264924160 [ 121.878838][ T6339] max_ino=32 [ 121.882058][ T6339] i_nlink=0 [ 121.885650][ T6339] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #15: comm syz.6.784: corrupted inode contents [ 121.900137][ T6339] EXT4-fs error (device loop6): ext4_dirty_inode:6502: inode #15: comm syz.6.784: mark_inode_dirty error [ 121.911755][ T6339] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #15: comm syz.6.784: corrupted inode contents [ 121.924505][ T6339] EXT4-fs error (device loop6): ext4_xattr_delete_inode:3001: inode #15: comm syz.6.784: mark_inode_dirty error [ 121.937399][ T6339] EXT4-fs error (device loop6): ext4_xattr_delete_inode:3004: inode #15: comm syz.6.784: mark inode dirty (error -117) [ 122.004983][ T6342] lo speed is unknown, defaulting to 1000 [ 122.013122][ T6339] EXT4-fs warning (device loop6): ext4_evict_inode:273: xattr delete (err -117) [ 122.044525][ T6350] netlink: 16 bytes leftover after parsing attributes in process `syz.2.790'. [ 122.050614][ T6339] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.087442][ T6339] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.186993][ T6358] tmpfs: Bad value for 'mpol' [ 122.284290][ T6369] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56110 sclass=netlink_route_socket pid=6369 comm=syz.6.794 [ 122.313005][ T6372] mmap: syz.2.797 (6372) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 122.327024][ T6376] netlink: 28 bytes leftover after parsing attributes in process `syz.3.786'. [ 122.665150][ T6396] loop2: detected capacity change from 0 to 1024 [ 122.681615][ T6365] netlink: 40 bytes leftover after parsing attributes in process `syz.5.795'. [ 122.715791][ T6396] EXT4-fs: inline encryption not supported [ 122.731300][ T6396] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.764709][ T6396] EXT4-fs error (device loop2): mb_free_blocks:2037: group 0, inode 15: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 122.786373][ T6396] EXT4-fs (loop2): Remounting filesystem read-only [ 122.804875][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.844507][ T6404] netlink: 204 bytes leftover after parsing attributes in process `syz.0.805'. [ 122.880985][ T6411] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 122.895544][ T6399] netlink: 164 bytes leftover after parsing attributes in process `syz.0.805'. [ 122.930129][ T6415] netlink: 40 bytes leftover after parsing attributes in process `syz.5.809'. [ 122.941702][ T6417] netlink: 64 bytes leftover after parsing attributes in process `syz.2.810'. [ 122.987317][ T6422] netlink: 'syz.2.811': attribute type 10 has an invalid length. [ 123.001628][ T6427] bond0: option all_slaves_active: invalid value (60) [ 123.033848][ T6427] loop5: detected capacity change from 0 to 2048 [ 123.052862][ T6433] loop3: detected capacity change from 0 to 256 [ 123.073397][ T6433] netlink: 'syz.3.816': attribute type 16 has an invalid length. [ 123.081244][ T6433] netlink: 'syz.3.816': attribute type 2 has an invalid length. [ 123.090785][ T4063] Alternate GPT is invalid, using primary GPT. [ 123.097347][ T4063] loop5: p1 p2 p3 [ 123.101150][ T4063] loop5: partition table partially beyond EOD, truncated [ 123.108598][ T6433] ucma_write: process 466 (syz.3.816) changed security contexts after opening file descriptor, this is not allowed. [ 123.140973][ T6427] Alternate GPT is invalid, using primary GPT. [ 123.147376][ T6427] loop5: p1 p2 p3 [ 123.151125][ T6427] loop5: partition table partially beyond EOD, truncated [ 123.302819][ T6452] loop6: detected capacity change from 0 to 512 [ 123.326545][ T6452] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 123.335189][ T6452] EXT4-fs (loop6): orphan cleanup on readonly fs [ 123.342032][ T6452] EXT4-fs warning (device loop6): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 123.356920][ T6452] EXT4-fs (loop6): Cannot turn on quotas: error -117 [ 123.363853][ T6452] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #16: comm syz.6.824: inode has both inline data and extents flags [ 123.377642][ T6452] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.824: couldn't read orphan inode 16 (err -117) [ 123.393748][ T6452] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 123.472957][ T6452] openvswitch: netlink: Flow actions attr not present in new flow. [ 123.522079][ T4750] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.748028][ T6493] loop3: detected capacity change from 0 to 8192 [ 123.802055][ T6498] loop5: detected capacity change from 0 to 512 [ 123.810995][ T6498] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 123.819778][ T6498] EXT4-fs (loop5): orphan cleanup on readonly fs [ 123.826448][ T6498] __quota_error: 73 callbacks suppressed [ 123.826469][ T6498] Quota error (device loop5): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 123.845306][ T6498] EXT4-fs warning (device loop5): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 123.860755][ T6498] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 123.868342][ T6498] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #16: comm syz.5.840: inode has both inline data and extents flags [ 123.882158][ T6498] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.840: couldn't read orphan inode 16 (err -117) [ 123.894977][ T6498] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 123.908806][ T29] audit: type=1400 audit(1769039067.723:1405): avc: denied { unmount } for pid=3329 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 123.969116][ T6506] EXT4-fs: Ignoring removed i_version option [ 123.975192][ T6506] EXT4-fs: Ignoring removed nobh option [ 123.981151][ T6498] openvswitch: netlink: Flow actions attr not present in new flow. [ 123.989525][ T6506] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 124.005292][ T6506] EXT4-fs (loop3): 1 truncate cleaned up [ 124.011705][ T6506] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.025238][ T4193] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.046048][ T29] audit: type=1400 audit(1769039067.853:1406): avc: denied { listen } for pid=6510 comm="syz.5.843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 124.070018][ T6506] 8021q: adding VLAN 0 to HW filter on device bond3 [ 124.107644][ T3329] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.179878][ T6521] EXT4-fs: Ignoring removed nobh option [ 124.185626][ T6521] EXT4-fs: Ignoring removed nomblk_io_submit option [ 124.201066][ T6521] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.342411][ T3329] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.358323][ T6540] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 124.366552][ T6540] EXT4-fs (loop5): orphan cleanup on readonly fs [ 124.373842][ T6540] Quota error (device loop5): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 124.384431][ T6540] EXT4-fs warning (device loop5): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 124.399868][ T6540] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 124.407113][ T6540] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #16: comm syz.5.854: inode has both inline data and extents flags [ 124.420729][ T6540] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.854: couldn't read orphan inode 16 (err -117) [ 124.433632][ T6540] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 124.490331][ T6540] openvswitch: netlink: Flow actions attr not present in new flow. [ 124.545859][ T4193] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.717926][ T6571] team_slave_0: entered promiscuous mode [ 124.723663][ T6571] team_slave_1: entered promiscuous mode [ 124.729725][ T6571] macvtap1: entered allmulticast mode [ 124.735144][ T6571] team0: entered allmulticast mode [ 124.741038][ T6571] team_slave_0: entered allmulticast mode [ 124.746930][ T6571] team_slave_1: entered allmulticast mode [ 124.754785][ T6571] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 124.764652][ T6571] team0: left allmulticast mode [ 124.769646][ T6571] team_slave_0: left allmulticast mode [ 124.775162][ T6571] team_slave_1: left allmulticast mode [ 124.780788][ T6571] team_slave_0: left promiscuous mode [ 124.786295][ T6571] team_slave_1: left promiscuous mode [ 125.394968][ T29] audit: type=1400 audit(1769039069.203:1407): avc: denied { cpu } for pid=6581 comm="syz.2.868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 125.479792][ T6586] set_capacity_and_notify: 6 callbacks suppressed [ 125.479815][ T6586] loop6: detected capacity change from 0 to 512 [ 125.594814][ T6586] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 125.624205][ T6586] EXT4-fs (loop6): orphan cleanup on readonly fs [ 125.654881][ T6586] Quota error (device loop6): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 125.685758][ T6586] EXT4-fs warning (device loop6): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 125.732118][ T6591] FAULT_INJECTION: forcing a failure. [ 125.732118][ T6591] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 125.737176][ T6586] EXT4-fs (loop6): Cannot turn on quotas: error -117 [ 125.745441][ T6591] CPU: 0 UID: 0 PID: 6591 Comm: syz.2.870 Not tainted syzkaller #0 PREEMPT(voluntary) [ 125.745533][ T6591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 125.745620][ T6591] Call Trace: [ 125.745651][ T6591] [ 125.745732][ T6591] __dump_stack+0x1d/0x30 [ 125.745816][ T6591] dump_stack_lvl+0x95/0xd0 [ 125.745891][ T6591] dump_stack+0x15/0x1b [ 125.745964][ T6591] should_fail_ex+0x263/0x280 [ 125.746037][ T6591] should_fail+0xb/0x20 [ 125.746094][ T6591] should_fail_usercopy+0x1a/0x20 [ 125.746169][ T6591] _copy_from_iter+0xcf/0xea0 [ 125.746246][ T6591] ? __alloc_skb+0x397/0x4b0 [ 125.746312][ T6591] ? __alloc_skb+0x219/0x4b0 [ 125.746459][ T6591] netlink_sendmsg+0x4ae/0x6f0 [ 125.746564][ T6591] ? __pfx_netlink_sendmsg+0x10/0x10 [ 125.746626][ T6591] __sock_sendmsg+0x145/0x170 [ 125.746760][ T6591] ____sys_sendmsg+0x345/0x4a0 [ 125.746941][ T6591] ___sys_sendmsg+0x195/0x1e0 [ 125.747149][ T6591] __sys_sendmmsg+0x185/0x320 [ 125.747272][ T6591] __x64_sys_sendmmsg+0x57/0x70 [ 125.747354][ T6591] x64_sys_call+0x1e28/0x3000 [ 125.747449][ T6591] do_syscall_64+0xc0/0x2a0 [ 125.747587][ T6591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.747668][ T6591] RIP: 0033:0x7f0ea6bcacb9 [ 125.747730][ T6591] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 125.747944][ T6591] RSP: 002b:00007f0ea5627028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 125.748017][ T6591] RAX: ffffffffffffffda RBX: 00007f0ea6e45fa0 RCX: 00007f0ea6bcacb9 [ 125.748062][ T6591] RDX: 0000000000000001 RSI: 0000200000005200 RDI: 0000000000000003 [ 125.748120][ T6591] RBP: 00007f0ea5627090 R08: 0000000000000000 R09: 0000000000000000 [ 125.748181][ T6591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 125.748306][ T6591] R13: 00007f0ea6e46038 R14: 00007f0ea6e45fa0 R15: 00007ffcde589ee8 [ 125.748378][ T6591] [ 125.944856][ T6586] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #16: comm syz.6.869: inode has both inline data and extents flags [ 125.977168][ T6586] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.869: couldn't read orphan inode 16 (err -117) [ 125.997408][ T6586] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 126.020337][ T6598] loop3: detected capacity change from 0 to 128 [ 126.079254][ T6586] openvswitch: netlink: Flow actions attr not present in new flow. [ 126.098971][ T4750] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.149491][ T6611] loop2: detected capacity change from 0 to 256 [ 126.242441][ T6613] 9p: Bad value for 'rfdno' [ 126.310594][ T6619] loop6: detected capacity change from 0 to 8192 [ 126.329410][ T6619] netlink: 'syz.6.880': attribute type 1 has an invalid length. [ 126.345338][ T6619] 8021q: adding VLAN 0 to HW filter on device bond1 [ 126.366465][ T6619] bond1: (slave geneve2): making interface the new active one [ 126.376084][ T6619] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 126.605501][ T6627] loop6: detected capacity change from 0 to 1024 [ 126.618123][ T6627] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.658938][ T4750] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.698366][ T29] audit: type=1326 audit(1769039070.513:1408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6631 comm="syz.6.884" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd7c54aacb9 code=0x0 [ 126.971520][ T6635] __nla_validate_parse: 12 callbacks suppressed [ 126.971541][ T6635] netlink: 24 bytes leftover after parsing attributes in process `syz.5.885'. [ 126.987140][ T6635] netlink: 24 bytes leftover after parsing attributes in process `syz.5.885'. [ 126.998525][ T6635] netlink: 204 bytes leftover after parsing attributes in process `syz.5.885'. [ 127.020088][ T6644] loop2: detected capacity change from 0 to 128 [ 127.041065][ T6635] netlink: 64 bytes leftover after parsing attributes in process `syz.5.885'. [ 127.050516][ T6635] netlink: 8 bytes leftover after parsing attributes in process `syz.5.885'. [ 127.079725][ T6645] sctp: [Deprecated]: syz.3.887 (pid 6645) Use of int in maxseg socket option. [ 127.079725][ T6645] Use struct sctp_assoc_value instead [ 127.097010][ T6649] bond0: option all_slaves_active: invalid value (60) [ 127.119159][ T6649] loop0: detected capacity change from 0 to 2048 [ 127.148146][ T4063] Alternate GPT is invalid, using primary GPT. [ 127.154468][ T4063] loop0: p1 p2 p3 [ 127.158372][ T4063] loop0: partition table partially beyond EOD, truncated [ 127.173088][ T6649] Alternate GPT is invalid, using primary GPT. [ 127.179532][ T6649] loop0: p1 p2 p3 [ 127.183298][ T6649] loop0: partition table partially beyond EOD, truncated [ 127.245083][ T4066] udevd[4066]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 127.257446][ T4063] udevd[4063]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 127.268744][ T5691] udevd[5691]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 127.280717][ T6659] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 127.315103][ T5691] udevd[5691]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 127.328283][ T4063] udevd[4063]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 127.339609][ T4066] udevd[4066]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 127.477088][ T6656] netlink: 40 bytes leftover after parsing attributes in process `syz.0.891'. [ 127.685491][ T6668] FAULT_INJECTION: forcing a failure. [ 127.685491][ T6668] name failslab, interval 1, probability 0, space 0, times 0 [ 127.698191][ T6668] CPU: 0 UID: 0 PID: 6668 Comm: syz.6.895 Not tainted syzkaller #0 PREEMPT(voluntary) [ 127.698260][ T6668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 127.698275][ T6668] Call Trace: [ 127.698283][ T6668] [ 127.698294][ T6668] __dump_stack+0x1d/0x30 [ 127.698323][ T6668] dump_stack_lvl+0x95/0xd0 [ 127.698399][ T6668] dump_stack+0x15/0x1b [ 127.698421][ T6668] should_fail_ex+0x263/0x280 [ 127.698446][ T6668] should_failslab+0x8c/0xb0 [ 127.698469][ T6668] kmem_cache_alloc_noprof+0x68/0x490 [ 127.698493][ T6668] ? skb_clone+0x151/0x1f0 [ 127.698600][ T6668] skb_clone+0x151/0x1f0 [ 127.698626][ T6668] dev_queue_xmit_nit+0x13e/0x510 [ 127.698741][ T6668] ? validate_xmit_xfrm+0x43/0x7a0 [ 127.698782][ T6668] dev_hard_start_xmit+0xd3/0x3e0 [ 127.698811][ T6668] __dev_queue_xmit+0xdb1/0x1f20 [ 127.698837][ T6668] ? __dev_queue_xmit+0x148/0x1f20 [ 127.698948][ T6668] ? should_fail_ex+0xd9/0x280 [ 127.698971][ T6668] ? __copy_skb_header+0x22f/0x2b0 [ 127.699018][ T6668] ? __skb_clone+0x2a6/0x2d0 [ 127.699067][ T6668] __netlink_deliver_tap+0x3c3/0x500 [ 127.699102][ T6668] netlink_unicast+0x66b/0x690 [ 127.699130][ T6668] netlink_sendmsg+0x5c8/0x6f0 [ 127.699163][ T6668] ? __pfx_netlink_sendmsg+0x10/0x10 [ 127.699196][ T6668] __sock_sendmsg+0x145/0x170 [ 127.699228][ T6668] ____sys_sendmsg+0x345/0x4a0 [ 127.699259][ T6668] ___sys_sendmsg+0x195/0x1e0 [ 127.699318][ T6668] __sys_sendmmsg+0x185/0x320 [ 127.699355][ T6668] __x64_sys_sendmmsg+0x57/0x70 [ 127.699382][ T6668] x64_sys_call+0x1e28/0x3000 [ 127.699411][ T6668] do_syscall_64+0xc0/0x2a0 [ 127.699571][ T6668] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.699598][ T6668] RIP: 0033:0x7fd7c54aacb9 [ 127.699618][ T6668] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 127.699651][ T6668] RSP: 002b:00007fd7c3f07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 127.699674][ T6668] RAX: ffffffffffffffda RBX: 00007fd7c5725fa0 RCX: 00007fd7c54aacb9 [ 127.699731][ T6668] RDX: 0000000000000001 RSI: 0000200000005200 RDI: 0000000000000003 [ 127.699746][ T6668] RBP: 00007fd7c3f07090 R08: 0000000000000000 R09: 0000000000000000 [ 127.699762][ T6668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 127.699850][ T6668] R13: 00007fd7c5726038 R14: 00007fd7c5725fa0 R15: 00007ffcef569c48 [ 127.699873][ T6668] [ 127.701150][ T6668] netlink: 40 bytes leftover after parsing attributes in process `syz.6.895'. [ 127.930863][ T6680] lo speed is unknown, defaulting to 1000 [ 128.108468][ T6696] 9p: Bad value for 'rfdno' [ 128.207746][ T6705] netlink: 1347 bytes leftover after parsing attributes in process `syz.5.908'. [ 128.297408][ T6705] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 128.394280][ T29] audit: type=1400 audit(1769039072.203:1409): avc: denied { create } for pid=6702 comm="syz.6.907" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 128.417506][ T6703] netlink: 40 bytes leftover after parsing attributes in process `syz.6.907'. [ 128.500121][ T29] audit: type=1400 audit(1769039072.313:1410): avc: denied { write } for pid=6720 comm="syz.6.911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 128.560161][ T6727] loop6: detected capacity change from 0 to 1024 [ 128.571684][ T29] audit: type=1400 audit(1769039072.353:1411): avc: denied { connect } for pid=6718 comm="syz.2.912" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 128.616427][ T6719] ================================================================== [ 128.624583][ T6719] BUG: KCSAN: data-race in __tipc_sendstream / tipc_poll [ 128.631664][ T6719] [ 128.634017][ T6719] read-write to 0xffff888103bcbf26 of 2 bytes by task 6726 on cpu 0: [ 128.642298][ T6719] __tipc_sendstream+0x804/0xb60 [ 128.647292][ T6719] tipc_sendstream+0x3e/0x60 [ 128.651937][ T6719] __sock_sendmsg+0x145/0x170 [ 128.652244][ T6727] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 128.656662][ T6719] sock_write_iter+0x1d2/0x210 [ 128.656697][ T6719] vfs_write+0x5a6/0x9f0 [ 128.656739][ T6719] ksys_write+0xdc/0x1a0 [ 128.656759][ T6719] __x64_sys_write+0x40/0x50 [ 128.656777][ T6719] x64_sys_call+0x2847/0x3000 [ 128.656809][ T6719] do_syscall_64+0xc0/0x2a0 [ 128.696312][ T6719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.702243][ T6719] [ 128.704599][ T6719] read to 0xffff888103bcbf26 of 2 bytes by task 6719 on cpu 1: [ 128.712261][ T6719] tipc_poll+0x1f9/0x340 [ 128.716558][ T6719] sock_poll+0x21c/0x240 [ 128.720839][ T6719] __io_arm_poll_handler+0x1ee/0xb60 [ 128.726169][ T6719] io_poll_add+0x69/0xf0 [ 128.730450][ T6719] __io_issue_sqe+0xfd/0x2d0 [ 128.735086][ T6719] io_issue_sqe+0x56/0xa70 [ 128.739555][ T6719] io_submit_sqes+0x78a/0x11b0 [ 128.740465][ T6727] ext4 filesystem being mounted at /109/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.744491][ T6719] __se_sys_io_uring_enter+0x1bf/0x1c70 [ 128.760478][ T6719] __x64_sys_io_uring_enter+0x78/0x90 [ 128.765917][ T6719] x64_sys_call+0x27e4/0x3000 [ 128.770645][ T6719] do_syscall_64+0xc0/0x2a0 [ 128.775200][ T6719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.781232][ T6719] [ 128.783627][ T6719] value changed: 0x0000 -> 0x0041 [ 128.788676][ T6719] [ 128.791026][ T6719] Reported by Kernel Concurrency Sanitizer on: [ 128.791475][ T6727] EXT4-fs error (device loop6): ext4_map_blocks:825: inode #15: comm syz.6.913: lblock 0 mapped to illegal pblock 0 (length 6) [ 128.797199][ T6719] CPU: 1 UID: 0 PID: 6719 Comm: syz.2.912 Not tainted syzkaller #0 PREEMPT(voluntary) [ 128.797234][ T6719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 128.829608][ T6727] EXT4-fs error (device loop6): ext4_ext_remove_space:2955: inode #15: comm syz.6.913: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 128.830140][ T6719] ================================================================== [ 128.881131][ T6727] ext4: Unknown parameter '01777777777777777777777Xcv:Q' [ 128.892241][ T6727] EXT4-fs error (device loop6): ext4_map_blocks:825: inode #15: comm syz.6.913: lblock 0 mapped to illegal pblock 0 (length 5) [ 128.921558][ T6727] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 5 with error 117 [ 128.934071][ T6727] EXT4-fs (loop6): This should not happen!! Data will be lost [ 128.934071][ T6727] [ 128.977367][ T6727] EXT4-fs error (device loop6): ext4_map_blocks:825: inode #15: comm syz.6.913: lblock 0 mapped to illegal pblock 0 (length 5) [ 129.006463][ T6727] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 5 with error 117 [ 129.018982][ T6727] EXT4-fs (loop6): This should not happen!! Data will be lost [ 129.018982][ T6727] [ 129.094306][ T4361] EXT4-fs error (device loop6): ext4_map_blocks:825: inode #15: block 8: comm kworker/u8:14: lblock 8 mapped to illegal pblock 8 (length 8) [ 129.118534][ T4361] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 129.130891][ T4361] EXT4-fs (loop6): This should not happen!! Data will be lost [ 129.130891][ T4361] [ 129.148209][ T4750] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000.