last executing test programs: 6m33.513524289s ago: executing program 1 (id=68): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x1a, 0x4, 0x0, 0x1, 0x8000, 0x1, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, @value=r1}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_open_procfs(0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x300c001, &(0x7f0000000180)={[{@bsdgroups}]}, 0x2c, 0x516, &(0x7f0000000740)="$eJzs3c9vG1kdAPCvnV9umm6ysIcFAVuWhYKq2om7G632wnJBQqvVIi2cEGqjxI2i2HEUO6UJkUjPXJGoxAn+BA5IHJB64s4NblzKAalABWqQEPJq7HGbOHFiNXHcxp+PNPJ7MxN/v8/SvBc/2/MCGFpXI2I3IsYj4nZETKf7M+kWH7a25LynT3YW957sLGai0fj0n6PpmTuL7fPbLqfPmYv4JKlPHBG3trW9ulAulzbSeqFeWS/UtrZvrFQWlkvLpbVicX5ufvb9m+8Vz6ytb1V++/i7Kx/98A+///KjP+1+66dJzt9OjyVtO7NA+7Rel7GY2rcveeU+6kewARhJ2zM+6ER4IdmI+FxEvJ2Wn8kNLicAoL8ajeloTO+vd5fp4RwA4OWXvOefikw2n77/n4psNp9vzuHl3ojJbLlaq1+/U91cW4rmHNZMjGXvrJRLs+lc4UyMZZL6XLP8vF7sqN+MiNcj4hcTl5r1/GK1vDSof3oAYMhd7hj//zPRGv974BMCAHiVGckBYPgcHv/HBpIHAHB+vP8HgOGzb/w/6re6AMAFlOv47T8AcPGdOP//Zvzsx+eTCgBwTnz+DwBD5fsff5xsjb30/tdLd7c2V6t3byyVaqv5yuZifrG6sZ5frlaXm/fsqZz0fOVqdX3u3di8V6iXavVCbWv7VqW6uVa/1byv962SHxYAwOC9/tbDv2QiYveDS80t2ms5+EIAXHgucxheI4NOABiY0UEnAAyM+Xggc8Lxrl8RetD9by6dIh+g/659ocv8//H/G/y/cT7pAX1k/h+G1+nm/80ewKvM/D8Mr0YjYz1/ABgyPbyD9xVBuOBe+PN/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGGJTzS2TzadrgU9FNpvPR1yJiJkYy9xZKZdmI+K1iPjzxNhEUp8bdNIAwCll/55J1/+6Nv3OVOfR8cx/J5qPEfGTX336y3sL9frGXLL/X8/21x+k+4tHBpjofxsAgH1GO3e0x+n2ON5e3/fpk53F9naeCT7+Tmtx0STuXrq1U28ln4uxiJj8d+ZAYzJntDDx7v2IeLOz/dlnx2fSlU874yexr/QtfjRbOHUgfvZA/GzzWOsxeS0+fwa5wLB5mPQ/Hx51/WXjavMxvf4yBzvTXPz8cOf6Atr9316js/9rXe+fXMk1+5qj+r+rvcZ494/f63rs/kjji6MRe4f63/aK0Llm6aj47/QY/69f+srb3Y41fh1xLY6L3yoV6pX1Qm1r+8ZKZWG5tFxaKxbn5+Zn37/5XrHQnKMutGeqD/vHB9df697+iMku8XMntP/rPbb/N/+7/aOvHhP/m187Kn423jgmfjImfqPH+AuTv+u6fHcSf6lL+0cPxB8/8HfJvus9xn/0t+2lHk8FAM5BbWt7daFcLm0onLaQ69czX35JGqhwTGEkyu35qJcin1MXBtwxAX33/KIfdCYAAAAAAAAAAAAAAEA3tR+kt/zr44/hBt1GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALq7PAgAA//+iDcmp") r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xe, 0x3, 0x1, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)=@newqdisc={0x2c, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x7fff}]}, 0x2c}}, 0x24008004) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@ipmr_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {0x80, 0x20, 0x20, 0x0, 0x0, 0x11, 0x0, 0x5}}, 0x1c}}, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x190) open(&(0x7f00000000c0)='./file0\x00', 0x9803, 0xd5) 6m31.254141863s ago: executing program 1 (id=73): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000880), &(0x7f0000003200)='./file1\x00', 0x4604, &(0x7f0000003240)=ANY=[], 0x3, 0x335, &(0x7f0000000a40)="$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") r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r3, r1, 0x0, r0}, 0x10) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r2, 0x4048587b, &(0x7f0000000740)={{r2, 0x0, 0x40000, 0x0, 0x100, 0x0, &(0x7f0000000100)=0xa}, 0x0, 0x0}) setsockopt$packet_rx_ring(r4, 0x107, 0x5, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000540)='net/ipv6_route\x00') socket$nl_route(0x10, 0x3, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 6m29.81479306s ago: executing program 1 (id=76): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) io_setup(0x6, &(0x7f0000001380)=0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00') io_submit(r1, 0x1, &(0x7f00000000c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, r2}]) ioctl$HIDIOCGREPORT(r0, 0x400c4807, &(0x7f0000000000)={0x3, 0x3, 0x3}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000900)=ANY=[@ANYBLOB="24010000160011092cbd7000fedbdf25ac1414aa000000000000000000000000fc0200000000000000000000000000004e2400004e2400060a0020a03c000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000000000000ffffac1414bb000004d46c0000000000000000000000000000000000000109000000000000000000000000000000ffffffffffffff7f00000000003000000902008000800000000000000000000001800000000000004ed2000000000000ccacffffffffffff0500000000000000030000000000000039640000000000000600000009000000060000002bbd7000073500000a00014148000000000000000400000004000000200017000100000025bd700027bd70002abd700026bd700000000080c60000000a0020"], 0x124}, 0x1, 0x0, 0x0, 0xc804}, 0x24040000) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'ip6gretap0\x00', 0x0}) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40), 0xfc, 0x586, &(0x7f0000000900)="$eJzs3V1rHNUbAPBnNpv09f9vCqWoF1LohZXaTZP4UkGwXooWC3pfl2QbSjbdkt2UJhZsBXvjjRRBxIL4Abz3svgF/BQFLRQpQS9EWJnNbLpNdvO6dbfZ3w+mOWdnpmeenHkm5+zsMgEMrBPpP7mIFyPi6yTiSMu6fGQrT6xst/z45lS6JFGvf/xHEkn2WnP7JPt5KKu8EBG/fBlxOre+3eri0myxXC7NZ/Wx2ty1seri0pkrc8WZ0kzp6sTk5Lk3JifefuvNXUQ39FTt1Yt/fffR/ffPfXVy+dufHh69m8T5OJyta41jF261Vk4U/8lKw3F+zYbjXWisnyS9PgB2ZCjL8+FIrwFHYijLemDv+zwi6sCASuQ/DKjmOKA5t+/SPPi58ei9lQlQI/aR1vjzK++NxP7G3OjgcvLUzCid7452of20jZ9/v3c3XWLj9yEObFIH2JZbtyPibD6//vqfZNe/nTvbePN4Y2vbGLS/P9BL99Pxz2vtxn+51fFPtBn/HGqTuzuxef7nHnahmY7S8d87bce/q5eu0aGs9r/GmG84uXylXDobEf9vjAzrnW99fDHS+HFu+UG90yat4790SdtvjgWz43iY3/f0PtPFWjEiRnYTd9Oj2xEv5dvFn6z2f9Km/9Pfx8UttnG8dO/lTus2j//Zqv8Y8Urb/n/SrcnG9yfHGufDWPOsWO/PO8d/7dR+r+NP+//gxvGPJq33a6vbb+OH/X+XOq3b6fk/knzSKDeT4EaxVpsfjxhJPlz/+sSTfZv15vZp/KdObnz9a3f+p5OvT7cY/51jdzpu2g/9P92p/1dmmGv6f/uFBx989v3O40/7//VG6VT2Snb9ay87V7Z6gF34FQIAAAAAAEDfyEXE4UhyhdVyLlcorHy+41gczJUr1drpy5WFq9PR+K7saAznmne6j7R8HmI8+zxssz6xpj4ZEUcj4puhA416YapSnu518AAAAAAAAAAAAAAAAAAAANAnDnX4/n/qt6FeHx3wzDUebLCv10cB9MKmj/xf+5SmrT75B+h7m+Y/sGfJfxhc8h8Gl/yHwSX/YXDJfxhc8h8Gl/wHAAAAAAAAAAAAAAAAAAAAAAAAAACArrp44UK61Jcf35xK69PXFxdmK9fPTJeqs4W5hanCVGX+WmGmUpkplwpTlbnN/r9ypXJtfCIWbozVStXaWHVx6dJcZeFq7dKVueJM6VJp+D+JCgAAAAAAAAAAAAAAAAAAAJ4v1cWl2WK5XJpX6Fh4N/riMOrJswtwxY52z++q9VxE9Ecv793C7ax7t7dXDy9KAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALDGvwEAAP//hkUw0Q==") chdir(&(0x7f0000000040)='./file0\x00') r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) lseek(r7, 0xfffffffffffffffc, 0x2) getdents(r7, 0x0, 0x58) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r0, 0x58, &(0x7f0000000280)}, 0x10) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@mpls_newroute={0x210, 0x18, 0x100, 0x70bd27, 0x25dfdbfe, {0x1c, 0x80, 0x14, 0x40, 0xfe, 0x3, 0xfe, 0xa}, [@RTA_VIA={0x14, 0x12, {0x26, "625879a84f01de62061551dfe354"}}, @RTA_NEWDST={0x84, 0x13, [{0xffff9, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0x100, 0x0, 0x1}, {0x7fff}, {0x100}, {0x571, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x9}, {0x3}, {0xffffd, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x5}, {0xab, 0x0, 0x1}, {0x2}, {0x81}, {0x9, 0x0, 0x1}, {0x6, 0x0, 0x1}, {0xb1f}, {0x3}, {0xfff01, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0x7ff}, {0x40, 0x0, 0x1}, {0x1000}, {0x2}, {0x8, 0x0, 0x1}, {0x4}, {0x80}, {0x5, 0x0, 0x1}, {0x485, 0x0, 0x1}]}, @RTA_VIA={0x14, 0x12, {0x1a, "62f5967319000000518f2c8d76c0"}}, @RTA_NEWDST={0x84, 0x13, [{0x5, 0x0, 0x1}, {0xbae}, {0x2, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x5}, {0xeb, 0x0, 0x1}, {0xffff9, 0x0, 0x1}, {0xc, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0xe2c, 0x0, 0x1}, {0x1}, {0x40, 0x0, 0x1}, {0xad4, 0x0, 0x1}, {0x6}, {0x3, 0x0, 0x1}, {0x9}, {0x723}, {0x56}, {0x0, 0x0, 0x1}, {0x401}, {0x5, 0x0, 0x1}, {0x3}, {0xff, 0x0, 0x1}, {0xffff, 0x0, 0x1}, {0x8}, {0x0, 0x0, 0x1}, {0x4}, {0x6, 0x0, 0x1}, {0x6}]}, @RTA_OIF={0x8, 0x4, r6}, @RTA_OIF={0x8}, @RTA_OIF={0x8, 0x4, r6}, @RTA_VIA={0x14, 0x12, {0x10, "31b1cde29b4764db269e04521ae6"}}, @RTA_NEWDST={0x84, 0x13, [{0xf89}, {}, {0xfff3c, 0x0, 0x1}, {0xeb, 0x0, 0x1}, {0xf, 0x0, 0x1}, {0x6}, {0x2}, {0x4}, {0xfc000, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x5}, {0x4d}, {0xffffc, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x7fff}, {0x800, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x3}, {}, {0x8000, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0x400}, {0x3fe}, {0xd}, {0x200}, {0x7, 0x0, 0x1}, {0xee, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0x2}, {0xb6, 0x0, 0x1}]}, @RTA_VIA={0x14, 0x12, {0x22, "ba07a491e9185f7ec58f716c6a99"}}]}, 0x210}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x70bd2b, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x1c}}, 0x0) 6m28.520165212s ago: executing program 1 (id=79): r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000000c0)={[{@grpquota}, {@nogrpid}, {@quota}, {@nobh}]}, 0xff, 0x511, &(0x7f0000000ac0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x143042, 0x80) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) quotactl_fd$Q_GETFMT(r1, 0xffffffff80000400, 0x0, &(0x7f0000000180)) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000300)=ANY=[@ANYBLOB="69505e14e57a0e987189af0627481af7a918936884a133a795bc6871", @ANYRES64=r2, @ANYBLOB="a977fe0685d42c48c22313aa166cf62aa3efdccbfa0c68a11094f59f68426a7510ffd65037a4e3e22e7c92abd38312dbeae2a8de676d6370aa123b777da0baaa6f53c19b68b4cc13558553eb7cca6286f8eb6f08d5de79f540caf3fba576c9bba57f6d3570e5786286dbd89957fc5bc5712a7528e214f2b716c1a60e024809c7ab43aefd0f949c9f4f5a4707e8f24b516623ceee5aa635f11598980c2d862a9d85ad38ff41ba625125df492e3d2f30ec4f29175e2afe68072601c7ea317f9399d14de1c65acef5a43543ad0fdc0fb90bc4716dabc8899914199477fe9235ae1c2a318b40166aa6248f1de48ae2629f8d3c5f740119e5b35d38", @ANYRES64=r1, @ANYRES32=0x0], 0x18) 6m26.955943757s ago: executing program 1 (id=82): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x702, 0x0, 0x0, &(0x7f0000000540), 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x783}, 0x50) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000480)='/sys/power/mem_sleep', 0x149a42, 0x1a0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) write$cgroup_int(r1, 0x0, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000040)=0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) r6 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r6, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r7, 0x4004551e, &(0x7f0000000040)=0x101) ioctl$USBDEVFS_CONTROL(r7, 0xc0105500, &(0x7f00000001c0)={0x1, 0x9, 0x23, 0x0, 0x0, 0xffffa, 0x0}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") r8 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r8, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6a000}], 0x1, 0x7000, 0x29000, 0x3) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000240)={{{@in=@private, @in6=@private2}}, {{@in6=@empty}, 0x0, @in6=@ipv4={""/10, ""/2, @local}}}, &(0x7f0000000140)=0xe8) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, 0x0, 0x0) r9 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000240), 0x2000cc0, r9}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r9, 0x0, &(0x7f0000000100)=""/120}, 0x20) 6m25.172460023s ago: executing program 1 (id=86): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000880), &(0x7f0000003200)='./file1\x00', 0x4604, &(0x7f0000003240)=ANY=[], 0x3, 0x335, &(0x7f0000000a40)="$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") r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r3, r1, 0x0, r0}, 0x10) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r2, 0x4048587b, &(0x7f0000000740)={{r2, 0x0, 0x40000, 0x0, 0x100, 0x0, &(0x7f0000000100)=0xa}, 0x0, 0x0}) setsockopt$packet_rx_ring(r4, 0x107, 0x5, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000540)='net/ipv6_route\x00') socket$nl_route(0x10, 0x3, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 6m25.103239072s ago: executing program 32 (id=86): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000880), &(0x7f0000003200)='./file1\x00', 0x4604, &(0x7f0000003240)=ANY=[], 0x3, 0x335, &(0x7f0000000a40)="$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") r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r3, r1, 0x0, r0}, 0x10) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r2, 0x4048587b, &(0x7f0000000740)={{r2, 0x0, 0x40000, 0x0, 0x100, 0x0, &(0x7f0000000100)=0xa}, 0x0, 0x0}) setsockopt$packet_rx_ring(r4, 0x107, 0x5, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000540)='net/ipv6_route\x00') socket$nl_route(0x10, 0x3, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 3.235170529s ago: executing program 3 (id=3923): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000804}, 0x24040801) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r9 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r10], 0x5c}}, 0x40) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r11}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x4c}}, 0x884) 2.459352132s ago: executing program 3 (id=3946): ioprio_set$pid(0x3, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x14bb42, 0x8c) pwritev2(r0, &(0x7f0000000540)=[{&(0x7f0000000000)="f0901534", 0x4}], 0x1, 0x5412, 0x2000a, 0x6) 2.372056617s ago: executing program 3 (id=3947): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x6, 0x7, 0x1, 0x0, "6006"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x5c}, 0x1, 0x0, 0x0, 0x840}, 0x0) 2.156278839s ago: executing program 3 (id=3949): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.014073464s ago: executing program 3 (id=3951): syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x2010410, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001440)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xffffffff}}], 0x18}}], 0x1, 0x80) 1.742641216s ago: executing program 0 (id=3955): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') preadv(r0, 0x0, 0x0, 0x8, 0xffffffff) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x2076) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x6, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x7, 0xf60d}, 0x9092, 0x4, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x49, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) socket(0xb, 0x80000, 0x2) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x80) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) r3 = getpid() r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r5, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) 1.604215232s ago: executing program 3 (id=3958): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) sched_setscheduler(0x0, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x4851, &(0x7f0000000100), 0x0, 0x4ed, &(0x7f0000000440)="$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") getxattr(0x0, 0x0, 0x0, 0x0) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) socket(0x1e, 0x4, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x8, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x900}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) 1.372205622s ago: executing program 5 (id=3963): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001000ffff27bd7000f7dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="fda45d0521860000140012800c0001006d616376746170000400028008000500", @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) 1.354868628s ago: executing program 5 (id=3965): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000007c0)={'wpan0\x00'}) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048084}, 0x800) 1.321080332s ago: executing program 5 (id=3967): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x8, &(0x7f00000000c0)={[{@lazytime}, {@errors_remount}]}, 0x2, 0x53a, &(0x7f0000000c80)="$eJzs3c9vI1cdAPDvOPHmR7NNCj0AArqUwoJW6yTeNqp6YXsBoaoSouLEYRsSN4pir6PYK5qwh+yReyVW4gT8B9w4IPXEgRs3kDj0Ug5IC6xADRIHoxlPEjexE7dJ7ST+fKTJzHszO9/34n3veV5kvwBG1o2I2I2IaxHxdkTM5vlJvsXd9pZe99HThyt7Tx+uJNFqvfXPJDuf5kXHv0k9k99zMiJ++L2InyTH4za2dzaWq9XKVp6eb9Y25xvbO7fXC3lOeWlxaeHVO6+Uz62uL9R+++S762/86Pe/+8qHf9r99s/SYs38/Hp2rrMeh4pnjpnk95npyBuPiDfOfOeLYzz//8Plk7a2z0XEi1n7n42x7NUEAK6yVms2WrOdaQDgqkuf/2ciKZTyuYCZKBRKpfYc3vMxXajWG81bs/UH91cjm8Oai2LhnfVqZSGfK5yLYpKmF7Pjw3T5Y+n3Knci4rmIeG9iKjtfWqlXV4f5xgcARtgzR8b//0y0x/9OZ/8rGABw4UwOuwAAwMB1jP9zwywHADA4nv8BYPR8gvHfpwMB4Irw/A8Ao8f4DwCj59Tx/9FgygEADMQP3nwz3Vp77e+/3v+m7turlcZGqfZgpbRS39osrdXra9VKaaXVOu1+1Xp9c/Hlg2Rje+derf7gfvPeem15rXKv4rsEAGD4nnvh/b+kg/7ua1PZFh1rORir4WorDLsAwNCMDbsAwND4PA+Mrj6e8U0DwBXXZYnetnyCIOl1wWOLv8JldfOL5v9hVJ1l/t/cAVxun27+/zvnXg5g8IzhMLparcSa/wAwYszxAz3//p/r+RUhj/u4+d1PXh4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4DGayLSmUsrXAd9OfhVIp4npEzEUxeWe9WlmIiGcj4s8TxYk0vTjsQgMAZ1T4e5Kv/3Vz9qWZo2evJf+dyPYR8dNfvvWLd5ebza3FNP9fB/nNx2n+VHOrfG0YFQAAOu2vu/nBYVY2fpfzfceD/EdPH67sb4Ms4pPXI2JyKou/l2/tM+Mxnu0noxgR0/9O8nRb+n5l7Bzi7z6KiC/s138y3u2IMJPNgbRXPj0aP419/dzjd/7+j8YvfKy+hexcui9mv4vPx5HCAad6//V2P5m3vbSJ5+2vEDeyfff2P5n1UGeX9n9pc9071v8VDvq/sWPxk6zN3zhIn1ySJy//4fvHMluz7XOPIr403i1+chA/6d7/Fl/qs44ffPmrL/Y61/pVxM2u9d9fkbqWdbPzzdrmfGN75/Z6bXmtsla5Xy4vLS4tvHrnlfJ8Nkfd/vnHbjH+8dqtZ3vFT+s/3SP+5Mn1j2/0Wf9f/+/tH3/thPjf+nr31//5E+KnY+I3+4y/PH235/LdafzVHvU/5fWPW33G//BvO6t9XgoADEBje2djuVqtbJ1ykL7XPO0aB/0fpM/2F6AY2UHsRpzXDbNJiYjoek36jvpiVPmzOkiGFv03533DYfdMwGftsNH3vuavgywQAAAAAAAAAAAAAABwTGN7Z2Oi+6e1zu1g2HUEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg6vp/AAAA//9W1cZQ") fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8ffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58) copy_file_range(r0, 0x0, r0, &(0x7f00000000c0)=0xf000, 0x863, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000380)='./file0/file0\x00', 0x400) 1.149708523s ago: executing program 2 (id=3970): write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @loopback}, {0xa, 0x0, 0xfffffffe, @empty}}}, 0x48) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4008804) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000180)=[{0x0}, {0x0}], 0x2}, 0x8400) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9, 0x1, 0x0, 0x0, 0x0, 0xf, 0x9211, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, @perf_bp={0x0, 0xc}, 0x14ce3, 0x100004, 0x0, 0x2, 0x20006, 0xf7ffffff, 0x5, 0x0, 0x0, 0x0, 0x40}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c00)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000500), 0x0, 0x100, 0x60000000, 0x0, 0xe1, 0x0, &(0x7f0000000280)="8dc92a8ff39080a675b6565efa3ed46f2a2756e4686c04020000002599fc2b73f432c834dac249597b646035045af99decf86f5b32dc0404e599f56091e15e581ff6805ee283c0313298a5b8ba1c84f1850c217b5a2c2bc547eaf4585e5ba878d1660fa871a275fb61d1fec75942919083919f8d8fdad79615bc06003fa40e054d38d49dfbebc2f137fc7110f48727f3ac3d6c83f6fda9222d2acdb0b3b9374206648707f4f5aeabd986d5f491389e9114ba8bd9aeeeed448e227802a455d6ba62aebeebc45885165e2501c30dc33fa47f5627e572e86278239ca2d8aeec7a25c4"}, 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x439, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1040, 0x44100}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @local}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x81}]}}}]}, 0x40}}, 0x4040000) statx(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x400, 0x1, &(0x7f0000000180)) socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e21, @broadcast}, 0x2, 0x9800, 0xfffffffd}}, 0x2e) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x3}}, 0x26) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$PPPIOCATTCHAN(r5, 0x40047438, &(0x7f0000000500)=0x1) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) 1.104660765s ago: executing program 5 (id=3972): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x8, 0x1, 0x400, 0x0, {0xa, 0x0, 0xe38, @private0}}}, 0x32) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001280), r3) close(0x3) sendmsg$L2TP_CMD_TUNNEL_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="250300000000"], 0x14}}, 0x0) 1.058591646s ago: executing program 2 (id=3973): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x1ce}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, 0x0) bind$can_j1939(r3, &(0x7f0000000340)={0x1d, 0x0, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) read(r3, &(0x7f0000000100)=""/13, 0xd) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4048081) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x5, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r0, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x12345}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) 1.057514336s ago: executing program 0 (id=3974): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newsa={0xf8, 0x10, 0x713, 0x70bd26, 0x0, {{@in=@rand_addr=0x64010101, @in6=@private1, 0x4e22, 0x0, 0x4e23, 0x7, 0x2, 0x0, 0x0, 0x3a, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x4d3, 0x32}, @in=@rand_addr=0x64010101, {0x0, 0x0, 0x8, 0xa, 0x6, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x2, 0xfffffffffffffff5}, {0xc, 0x0, 0x2}, 0x70bd29, 0x0, 0x2, 0x1, 0x0, 0x28}, [@tfcpad={0x8, 0x16, 0x2}]}, 0xf8}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 1.032992342s ago: executing program 0 (id=3975): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001000ffff27bd7000f7dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="fda45d0521860000140012800c0001006d616376746170000400028008000500", @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) 953.439478ms ago: executing program 0 (id=3976): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000000000ff000000000000100085000000530000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000080)='syzkaller\x00'}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'bond0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x54, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x220005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c02000100000000000040000280ffffff05000500000000000a"], 0x80}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fc00000000000000000000000000000164010101000000000000000000000000000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac141433000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000100000000feffffffffffffff02000000fcffffff000000002abd700004350000020001002000000000000000480003dd6465666c61746500"/240], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x18, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in=@empty, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x80, 0x21}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x40000000809ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffb}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b70300001a000000850000003300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYRES8=r4, @ANYRES32=0x0, @ANYRES64=r4], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r6}, &(0x7f0000000400), 0x0}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r7, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="3c02000007dfec7ac7f0b2495613f67ef925f76f1900010000040000fedbdf25fe8000000000000000000000000000bbe000000100000000001300000000000000000000002000000a000000000000006a2b720fff6534d5fa5108b3040014765720779c49eb9a55eeef78b2fecdf9409f5362c4248cdc5aa76220fb5adb5de2bee46a7ce544d6e7afa8eb6093e6e7498ea64d66c1c560", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000084010500ac1414aa000000000000000000000000000004d53300000000000000fe8000000000000000000000000000aa00000000010000000000000000000000feffffffffffffff000000000000000000000000000000003c00000000000000fe80000000000000000000000000000000000000000300000000000000000000000000007f000001000000000000000000000000000000006c000000000000007f0000010000000000000000000000000000000004000000030000000000000000000000fe8000000000000000000000000000aa000000003300000000000000fc020000000000000000000000000000000000000000fd0004020000000000000000000000000000000000000000000000000001000000006c00000000000000fe88000000000000000000000000000100000000030000000000000000000000070000007f00000100000000000000000000000000000000320000000a000000fc01000000000000000000000000000000000000010000000080000000000000ffffffff"], 0x23c}}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) 924.702503ms ago: executing program 5 (id=3977): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000804}, 0x24040801) r4 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r9 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r10], 0x5c}}, 0x40) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x4c}}, 0x884) 901.603639ms ago: executing program 0 (id=3978): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000300)={0x20, 0x16, 0x52, "6c16557a73091a116b354db8474f816a755fbf3a8aa7d65aead45c510ee528aadfb8e5351e37e9fa1859703ad421bbe326d9618676d2c1c63fcc38b2894711bc1059c37a367f4a8ec980869cf7429b1252df"}, 0x0, 0x0, 0x0, 0x0}) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000340)={0x0, 0x312000, 0x800, 0x0, 0x5}, 0x20) 474.040654ms ago: executing program 4 (id=3982): r0 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xff}}, {0x1, @local}, 0x0, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2}}}) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) ioctl$sock_inet_SIOCSARP(r0, 0x8953, 0x0) 455.65206ms ago: executing program 4 (id=3983): write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @loopback}, {0xa, 0x0, 0xfffffffe, @empty}}}, 0x48) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4008804) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000180)=[{0x0}, {0x0}], 0x2}, 0x8400) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9, 0x1, 0x0, 0x0, 0x0, 0xf, 0x9211, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, @perf_bp={0x0, 0xc}, 0x14ce3, 0x100004, 0x0, 0x2, 0x20006, 0xf7ffffff, 0x5, 0x0, 0x0, 0x0, 0x40}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c00)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000500), 0x0, 0x100, 0x60000000, 0x0, 0xe1, 0x0, &(0x7f0000000280)="8dc92a8ff39080a675b6565efa3ed46f2a2756e4686c04020000002599fc2b73f432c834dac249597b646035045af99decf86f5b32dc0404e599f56091e15e581ff6805ee283c0313298a5b8ba1c84f1850c217b5a2c2bc547eaf4585e5ba878d1660fa871a275fb61d1fec75942919083919f8d8fdad79615bc06003fa40e054d38d49dfbebc2f137fc7110f48727f3ac3d6c83f6fda9222d2acdb0b3b9374206648707f4f5aeabd986d5f491389e9114ba8bd9aeeeed448e227802a455d6ba62aebeebc45885165e2501c30dc33fa47f5627e572e86278239ca2d8aeec7a25c4"}, 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x439, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1040, 0x44100}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @local}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x81}]}}}]}, 0x40}}, 0x4040000) statx(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x400, 0x1, &(0x7f0000000180)) socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e21, @broadcast}, 0x2, 0x9800, 0xfffffffd}}, 0x2e) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x3}}, 0x26) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$PPPIOCATTCHAN(r5, 0x40047438, &(0x7f0000000500)=0x1) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) 356.106643ms ago: executing program 4 (id=3984): r0 = socket$inet_smc(0x2b, 0x1, 0x0) ppoll(&(0x7f0000000180)=[{r0}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f6003300", 0x10) listen(r0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000200)=0x2, 0x43) shutdown(r0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000356ffc)=0xffbfff40, 0x4) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x33, &(0x7f00000a2000)={0x0, &(0x7f0000f07000)}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[], 0x134}}, 0x40008) write$binfmt_elf64(r1, &(0x7f0000000f80)=ANY=[], 0x540) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) shutdown(0xffffffffffffffff, 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r5, 0x0, 0x40) 337.97875ms ago: executing program 0 (id=3985): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') preadv(r0, 0x0, 0x0, 0x8, 0xffffffff) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x2076) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x6, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x7, 0xf60d}, 0x9092, 0x4, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x49, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) socket(0xb, 0x80000, 0x2) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x80) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) r3 = getpid() r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r5, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) 293.167222ms ago: executing program 4 (id=3986): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001000ffff27bd7000f7dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="fda45d0521860000140012800c0001006d616376746170000400028008000500", @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) 263.434677ms ago: executing program 5 (id=3987): syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x2010410, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$eJzs3D1rW1cYB/AjWa6tlhZPhXbpoV3a5bb10qVDS3GhVNCSRCEv0zWWEyFFAl8NksmgOVM+RwhkCWQL+QL+DFmymYDx5Ck3OJKs2NixE0dy4vx+ix6e/z1X5+jARVy9bP5+91ZjNUtW004ozRdC8Y/QDzuFsBCKYaQffnpwZfvOxavX/v2zUlm6MDvsx/jVd4+v377//ZPOF5cf7nYKIYStxWcbX298s/ni0s16FutZbLU7MY3L7XYnXW7W4ko9ayQx/t+spVkt1ltZbW1fvtpsj5861LIspq1ebNR6sdOOnbVeTG+k9VZMkiTOB06lem8nz8NWnuf5XD/kef62JyhMZl5Myyn3n4/c3kU97l5Nn/e71W518DjI//6nsvRLfGVhPGq7263O7OW/DvK4P58Nnw/zxUPzz8KPPwzy3eyv/yoH8nJYmfzyAQAAAADgXErinkPv7yfJUfmgeu3zgQP370vh29K4MzP5pQAAAABHyHrrjbS5Mrs2KJq1Myvmwv7Ob4+GUzxu+M9Pjz9mQsWXwyK843nKIYSjjymGM9+U6RSj75EPO6PfF5xseOl9TaP8gbwao2I+HBaVw3pjbjqbAgAAnC/jN/0nHlKc6IQAAAAAAAAAAAAAAAAAAADgEzSNPzM76zUCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALzJywAAAP//ixdW4w==") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001440)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xffffffff}}], 0x18}}], 0x1, 0x80) 229.092371ms ago: executing program 4 (id=3988): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x8, 0x1, 0x400, 0x0, {0xa, 0x0, 0xe38, @private0}}}, 0x32) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001280), r3) close(0x3) sendmsg$L2TP_CMD_TUNNEL_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="250300000000"], 0x14}}, 0x0) 216.721329ms ago: executing program 2 (id=3989): r0 = syz_open_dev$loop(0x0, 0x7, 0x180862) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/mem_sleep', 0x80802, 0xcd) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x2, 0x6010000000000ffd, 0x0, 0x0, 0x19, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "42d8cc26f7061a74df2cfc1fc89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd0c7f3f800b2f7b6aa54cc50c1fcaed1e831fa79a00", "141802c4daf4162e43ac61b7ad3300", [0xbffffffffffffce8, 0x100]}}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000001000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0xfffffffffffffed1) bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) 177.486312ms ago: executing program 2 (id=3990): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x2, 0x6, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8, 0xfc}, 0xe) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@ipv6_newroute={0x34, 0x18, 0x111, 0x1, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8}, [@RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_ID={0xc, 0x1, 0x8}}, @RTA_EXPIRES={0x8, 0x17, 0xffffffff}]}, 0x34}, 0x1, 0x0, 0x0, 0x4805}, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="24000000140001002abd7000fcdbdf252c380f000100d55542593d709ad3d81e5900000092a879801b4910af78855503184218ea291e35c5d4699ee9dc2d286a70c6e1f6e1d29420b72474dfae3a692321201b63a537de82004060a1c6424b014a983a9233b65a4c4d76aa2b115575d557bd2c6933cab8475e0d943f2104087961340ea7d110b7"], 0x24}, 0x1, 0x0, 0x0, 0xc010}, 0x20000000) shutdown(r0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="1400000010000100000000821bd468000300000a580000000c0a010100000000000000000a00000a0900020073"], 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) 126.653152ms ago: executing program 4 (id=3991): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$tipc(0x1e, 0x2, 0x0) socket(0x2, 0x80805, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) 71.750023ms ago: executing program 2 (id=3992): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000005a0000008500000022000000180100002020702500000000002020200100000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r2, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xd32, &(0x7f0000000a00)={@local, @link_local, @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x1, 0x2, 0xd24, 0x65, 0x0, 0x2, 0x21, 0x0, @private=0xa010102, @empty}, {{0x4e24, 0x4e20, 0x4, 0x1, 0x7, 0x0, 0x0, 0x6, 0x0, "a95f5f", 0x1, "5893f9"}, "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"}}}}}, 0x0) 0s ago: executing program 2 (id=3993): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, &(0x7f00000027c0)=ANY=[@ANYRES64=r1, @ANYRES8=r2, @ANYRESDEC=r0, @ANYBLOB="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", @ANYRESHEX=r1, @ANYBLOB="cbf92aeec4140985242c1cfb4d4c337aa97875ec4ca67d73825e0481b6cbedea66a8a3433a131754e6d2504857a16db18594ce975352d0fc86e79cf9b0a675fd55d227729158ae6f2330d25bc2c5efb1f31b788ed5afb942fef0349633af96bd0d1e35b032f1199f3a77779656b240341da0d7787d4012978b19e41977450ec6fdf9a31057458d85c12cdf545ffa96d8bed5848d67"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, 0xd}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4004045) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r8, 0x107, 0x5, &(0x7f0000000140)=@req3={0x101000, 0x1000037, 0x800, 0x13a, 0x7, 0xd83, 0x7ff}, 0x1c) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001f80)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r7, {0x10}, {0x0, 0xfff1}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0xfffffffe, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x6, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x7fc, 0xffff8000, 0x6, 0x401, 0x9, 0xb89, 0xffffe4f5, 0xd6, 0x2, 0xffff, 0x7, 0x0, 0x2, 0x101, 0x101, 0xfffffffc, 0x4, 0x1, 0x1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x2, 0x6, 0x7, 0xfffffff7, 0x1, 0x50fdb443, 0x9, 0x9, 0x44, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x80000001, 0x400, 0x8, 0xfffffa72, 0xcd, 0xffffff80, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x2010001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x7a02, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x2, 0x0, 0x3, 0x1000, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4, 0xffffffff, 0x80000000, 0x1966f9ab, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x6, 0x102, 0x2d5421e8, 0x7, 0x10000, 0xffffffff, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x0, 0x2, 0x5, 0x8, 0x3, 0x1, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x80000009, 0x6, 0x5, 0x5, 0x4d15, 0x1ff, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x1, 0x8, 0x2042ba, 0x4, 0x9, 0x3, 0x8, 0x10007, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0xfff, 0x1ff, 0x8000, 0x3, 0x8, 0x3, 0x9, 0x9a6, 0xe4cb, 0x8, 0x1, 0x1ff, 0x3e, 0x401, 0x4, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x1, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x4, 0x100001, 0x6, 0x1fd, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x8, 0x200006, 0xd, 0x400, 0x0, 0x3, 0x5, 0x10000, 0x7, 0x6, 0x81, 0x0, 0x8, 0x0, 0x9, 0x5, 0xc0000, 0x8001, 0x1, 0x8000, 0x1, 0x8da5, 0x1, 0x4, 0xfffffffe, 0x6, 0x58, 0x7, 0x6f, 0x8, 0x3, 0x4, 0x9, 0x4, 0x4, 0x9, 0x6, 0x80000001, 0x3, 0x1, 0xd4, 0x100, 0xa, 0xfff, 0x8, 0x9, 0x7, 0x7fffffff, 0xf4b3, 0x1, 0x0, 0x8, 0x18, 0x6, 0xd815, 0xfffffff9, 0x2, 0x401, 0x9, 0x36, 0xf, 0x74, 0xbbc, 0x9, 0x0, 0x2, 0x8, 0x5, 0x6, 0xb, 0x5, 0x5, 0x4e3, 0x200, 0x0, 0x9, 0x8001, 0x2, 0x1000, 0x7fffffff, 0x46a3, 0x4, 0x2, 0x1dd50645, 0x401, 0x5, 0x101, 0xbf, 0x0, 0x9, 0x3, 0x65, 0x4, 0x2, 0xe, 0x1a3f, 0x2, 0x389c, 0x4, 0x3, 0x3ff, 0x4, 0x4, 0x6, 0xf3bb, 0x1ff, 0x8, 0xf, 0xb, 0x401, 0x4, 0x1000, 0x1, 0x8, 0x1, 0x7ff, 0x7fff, 0x8, 0x408, 0x3ff, 0x4, 0x1, 0xffff, 0x7fff, 0x2, 0x9, 0x1, 0xfff, 0x0, 0xfffffffe, 0x4, 0x0, 0x101, 0x78f0, 0xf, 0x7, 0x0, 0x3, 0xf1c7, 0x100, 0x3, 0x4, 0xfffffffe, 0xffffff7f, 0x3, 0x0, 0x6, 0xd, 0x3, 0x9, 0x8, 0x200, 0x0, 0x400, 0x9, 0x6, 0x132f, 0xaba3, 0x1, 0x3, 0x1, 0x5, 0x6f788000, 0xc, 0x1ff, 0x40, 0x8, 0x3, 0x2, 0x1, 0x0, 0x71, 0xb13, 0x4, 0xbc5, 0x0, 0x7, 0xffff, 0x100, 0x7b58, 0x1, 0x807, 0x1ff, 0x3, 0x400, 0x80000000, 0x1040, 0x3, 0xfffffffa, 0x9a5, 0x8, 0x5, 0x1, 0x9, 0x3, 0x9, 0x7, 0x3, 0x1, 0x101, 0x2, 0x6, 0x598f, 0x5, 0x8e, 0xf2, 0xa, 0x9, 0x1000, 0x8, 0xd00f, 0x2, 0x1, 0x6, 0x2a, 0x7, 0x100, 0x24e, 0xbd, 0x2, 0x2800000, 0x807, 0x0, 0x401, 0x6, 0x2, 0x9, 0x7039, 0x4, 0x1ff, 0x9, 0x1, 0xb18, 0x2, 0xfffffffe, 0x26e, 0x6, 0x5c, 0x8, 0x100, 0x3ff, 0x1, 0x0, 0xb, 0x10000, 0x8, 0x6, 0x2, 0x6, 0x7, 0x2, 0x7ff, 0x1, 0x1, 0x8001, 0x3]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_open_dev$loop(0x0, 0x2, 0x2001) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000480), r9) sendmsg$TIPC_NL_LINK_SET(r9, &(0x7f00000006c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="000225bd70000000000009000000500005804c00028008000200000000800800040000000000080002000d00000008000300050000000800030001000000080001001c0000000800040000000100080004000600000008000300020000003c0002800400040008000100050000000c0003800800020001000000080002000600000008000100000400000800020046e40000080001000000000848000780080001005e0000000c0004000600000000000000080001008001000008000100d70000000c00030007000000000000000c000300010000000000000008000200050000004c000680080006000b0000003d00040067636d28616573290000000000000000000000000000000000000000000000001500000093d3311f309fecd6d514c8dfef8c21cb46c6e900a1000000400005801c00028008000400050000000800030006000000080003000d0000000800010065746800080001007564700008000100756470000800010075647000240003800800010029540000080002000400000008000100070000000800010006000000"], 0x198}, 0x1, 0x0, 0x0, 0x8850}, 0x880) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x7, @local}, 0x1c) r11 = socket(0x22, 0x2, 0x3) setsockopt$kcm_KCM_RECV_DISABLE(r11, 0x119, 0x1, &(0x7f0000000280)=0x8000, 0x4) bind$inet6(r11, &(0x7f0000000400)={0xa, 0x4e22, 0x1bd, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x2}, 0x1c) r12 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r3, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000700)=ANY=[@ANYBLOB="b40000006810a2447a4c0065fd6c21d9675c23ee1cde9c147cbeb02cb460499100de9bc26c0cd3070ba2bf90d408d0e0dad14162f63e23e78db7d6ff9eb10f10a6f194884057eb863a3e98f166a8e2f673daa27f383710abca85240cda64639b6b7259190b87a7e56d244b7a30cc4c01e771caf53d4a853e8527da0e83e23693ed8a4f78e6b82c3c3d280abdf34bd7279f086dec32ebf7d57753d94803654d3b1e03dff2f426583891df5df9cff21614e05378710ee0e4b74bfbc81cb4829b2fd0cc665ec43cde562821ba1ae5d1b1f4c142886db31f853bc243ef844c53eb8d5f310d1acc565065", @ANYRES16=r12, @ANYBLOB="000825bd7000fddbdf250b000000080002000000000008000400080000000800020004000000080002000000000008000400ffffffff3c00018008000300ffffffff0500020001000000140004000000000000000000000000000000000114000400ff02000000000000000000000000000124000680080006000a000000060001000a000000060005004e240000080003000a010101080003000700000008000400090000000500050002000000"], 0xb4}, 0x1, 0x0, 0x0, 0x40400c0}, 0x4000000) kernel console output (not intermixed with test programs): dit: type=1400 audit(1773010735.695:1493): avc: denied { unmount } for pid=3318 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 334.041202][T16960] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4222: comm syz.3.2581: Allocating blocks 497-513 which overlap fs metadata [ 334.069679][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 334.072750][ T28] audit: type=1400 audit(1773010735.745:1494): avc: denied { unlink } for pid=3318 comm="syz-executor" name="bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 334.303332][T16970] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 334.379800][T16989] netlink: 'syz.2.2590': attribute type 10 has an invalid length. [ 334.397950][T16989] team0 (unregistering): Port device team_slave_0 removed [ 334.410030][T16989] team0 (unregistering): Port device team_slave_1 removed [ 334.526263][T16993] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.562274][T16996] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.574325][T16993] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.596661][T16954] EXT4-fs (loop3): pa ffff888107ec27e0: logic 48, phys. 177, len 21 [ 334.604796][T16954] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5465: group 0, free 0, pa_free 1 [ 334.620125][T16996] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.635439][T16993] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.641568][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 334.659825][T16996] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.699680][T16993] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.739391][T16996] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.774496][ T8851] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.789453][ T64] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.805907][ T64] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.814836][ T64] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.834961][ T64] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.847583][ T64] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.863086][ T64] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.881523][ T64] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.928830][T17018] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 334.999330][T17029] loop5: detected capacity change from 0 to 1024 [ 335.005961][T17029] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 335.073450][T17033] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.086253][T17033] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.106252][T17033] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.114928][T17033] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.151016][ T28] audit: type=1400 audit(1773010736.825:1495): avc: denied { ioctl } for pid=17038 comm="syz.4.2606" path="socket:[45644]" dev="sockfs" ino=45644 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 335.227252][T17046] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2608'. [ 335.306618][T17059] siw: device registration error -23 [ 335.344174][T17059] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 335.563738][ T28] audit: type=1326 audit(1773010737.225:1496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17073 comm="syz.2.2617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bc32ac799 code=0x7ffc0000 [ 336.547785][ T28] audit: type=1326 audit(1773010737.225:1497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17073 comm="syz.2.2617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bc32ac799 code=0x7ffc0000 [ 336.571457][ T28] audit: type=1326 audit(1773010737.225:1498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17073 comm="syz.2.2617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2bc32ac799 code=0x7ffc0000 [ 337.518023][ T28] audit: type=1326 audit(1773010737.225:1499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17073 comm="syz.2.2617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bc32ac799 code=0x7ffc0000 [ 337.552116][ T8855] net_ratelimit: 1021 callbacks suppressed [ 337.552128][ T8855] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.842967][ T28] audit: type=1326 audit(1773010737.225:1500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17073 comm="syz.2.2617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bc32ac799 code=0x7ffc0000 [ 337.867090][ T64] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.880892][ T28] audit: type=1326 audit(1773010737.235:1501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17073 comm="syz.2.2617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=312 compat=0 ip=0x7f2bc32ac799 code=0x7ffc0000 [ 337.904662][ T28] audit: type=1326 audit(1773010737.235:1502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17073 comm="syz.2.2617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bc32ac799 code=0x7ffc0000 [ 337.928282][ T28] audit: type=1326 audit(1773010737.235:1503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17073 comm="syz.2.2617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bc32ac799 code=0x7ffc0000 [ 337.952068][ T28] audit: type=1326 audit(1773010737.235:1504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17073 comm="syz.2.2617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7f2bc32ac799 code=0x7ffc0000 [ 338.002637][T17086] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2619'. [ 338.022684][T17086] veth2: entered allmulticast mode [ 338.034719][T17086] veth3: entered promiscuous mode [ 338.056574][T17090] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2621'. [ 338.188416][ T8851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.196651][ T8851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.489741][T17130] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.498190][T17130] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.506332][T17130] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.528067][T17130] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.537680][T17130] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.550943][T17132] tipc: Started in network mode [ 338.561300][T17132] tipc: Node identity ac1414aa, cluster identity 4711 [ 338.566801][T17130] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.574886][T17132] tipc: New replicast peer: 10.1.1.2 [ 338.588094][T17132] tipc: Enabled bearer , priority 10 [ 338.879752][T17143] hsr0: entered promiscuous mode [ 338.959689][T17149] syzkaller0: entered promiscuous mode [ 338.965221][T17149] syzkaller0: entered allmulticast mode [ 339.504636][T17164] syzkaller0: entered promiscuous mode [ 339.521104][T17164] syzkaller0: entered allmulticast mode [ 339.681975][T11601] tipc: Node number set to 2886997162 [ 340.091493][T17177] loop3: detected capacity change from 0 to 8192 [ 340.149013][T17177] loop3: p1 < > p2 p4 < p5 > [ 340.176968][T17177] loop3: partition table partially beyond EOD, truncated [ 340.200993][T17177] loop3: p1 start 134217728 is beyond EOD, truncated [ 340.220629][T17177] loop3: p2 size 591360 extends beyond EOD, truncated [ 340.247392][T17177] loop3: p5 size 591360 extends beyond EOD, truncated [ 340.709071][T17181] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2653'. [ 341.379779][T17210] xt_hashlimit: size too large, truncated to 1048576 [ 343.030911][T17259] netem: invalid attributes len -9 [ 343.048036][T17259] netem: change failed [ 343.065267][T17259] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2681'. [ 343.094919][T17259] vlan0: entered allmulticast mode [ 343.102716][T17259] macsec0: entered allmulticast mode [ 343.108369][T17259] veth1_macvtap: entered allmulticast mode [ 343.230815][T17243] xfrm0 speed is unknown, defaulting to 1000 [ 343.272107][T17243] lo speed is unknown, defaulting to 1000 [ 343.278328][T17243] lo speed is unknown, defaulting to 1000 [ 343.308926][ T8855] net_ratelimit: 1022 callbacks suppressed [ 343.308940][ T8855] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.323747][ T8825] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.480956][T17243] chnl_net:caif_netlink_parms(): no params data found [ 344.042587][ T64] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.150497][T17243] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.027428][T17295] xt_CT: You must specify a L4 protocol and not use inversions on it [ 345.088160][T17243] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.095330][T17243] bridge_slave_0: entered allmulticast mode [ 345.194702][T17243] bridge_slave_0: entered promiscuous mode [ 345.243043][T17243] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.592948][T17243] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.875068][T17301] loop2: detected capacity change from 0 to 1024 [ 345.881898][T17301] EXT4-fs: Ignoring removed orlov option [ 345.887554][T17301] EXT4-fs: Ignoring removed nobh option [ 345.893211][T17301] EXT4-fs: Ignoring removed nomblk_io_submit option [ 345.899828][T17301] EXT4-fs: Invalid journal IO priority (must be 0-7) [ 346.404335][T17243] bridge_slave_1: entered allmulticast mode [ 346.411262][T17243] bridge_slave_1: entered promiscuous mode [ 346.428347][T17243] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 346.438827][T17243] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 347.983468][ T8851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.027027][T17300] xfrm0 speed is unknown, defaulting to 1000 [ 348.061193][T17300] lo speed is unknown, defaulting to 1000 [ 348.067330][T17300] lo speed is unknown, defaulting to 1000 [ 348.154424][T17243] team0: Port device team_slave_0 added [ 348.164412][T17307] loop5: detected capacity change from 0 to 128 [ 348.171843][T17243] team0: Port device team_slave_1 added [ 348.190138][T17307] vfat: Unknown parameter ':պ' [ 348.359257][T17243] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 348.457628][T17243] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 348.580794][T17243] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 348.947799][T17243] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 349.034881][T17243] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 349.078405][ T8825] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.087081][ T64] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.097066][T17243] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 349.591746][T17329] syzkaller0: entered promiscuous mode [ 349.597455][T17329] syzkaller0: entered allmulticast mode [ 349.634267][T17243] hsr_slave_0: entered promiscuous mode [ 349.648519][T17243] hsr_slave_1: entered promiscuous mode [ 349.664975][T17243] debugfs: 'hsr0' already exists in 'hsr' [ 349.677514][ T28] kauditd_printk_skb: 44 callbacks suppressed [ 349.677526][ T28] audit: type=1400 audit(1773010751.355:1549): avc: denied { create } for pid=17333 comm="syz.3.2700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 349.704495][T17243] Cannot create hsr debugfs directory [ 349.711765][ T64] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.790112][ T28] audit: type=1400 audit(1773010751.385:1550): avc: denied { create } for pid=17333 comm="syz.3.2700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 349.823456][ T28] audit: type=1400 audit(1773010751.405:1551): avc: denied { append } for pid=17333 comm="syz.3.2700" name="qrtr-tun" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 349.910859][T17243] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 349.920865][T17243] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 350.025371][T17354] syzkaller0: entered promiscuous mode [ 350.031215][T17354] syzkaller0: entered allmulticast mode [ 350.442871][T17243] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 350.461179][T17243] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 350.530297][T17243] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 350.546341][T17243] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 350.589972][T17243] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 350.602991][T17243] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 350.696194][T17243] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 350.729810][T17358] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2706'. [ 350.763180][T17243] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 350.772881][T17243] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 350.774690][T17360] FAULT_INJECTION: forcing a failure. [ 350.774690][T17360] name failslab, interval 1, probability 0, space 0, times 0 [ 350.792579][T17360] CPU: 0 UID: 0 PID: 17360 Comm: syz.5.2707 Tainted: G W syzkaller #0 PREEMPT(full) [ 350.792607][T17360] Tainted: [W]=WARN [ 350.792615][T17360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 350.792628][T17360] Call Trace: [ 350.792634][T17360] [ 350.792642][T17360] __dump_stack+0x1d/0x30 [ 350.792734][T17360] dump_stack_lvl+0x95/0xd0 [ 350.792754][T17360] dump_stack+0x15/0x1b [ 350.792777][T17360] should_fail_ex+0x263/0x280 [ 350.792800][T17360] should_failslab+0x8c/0xb0 [ 350.792836][T17360] __kmalloc_noprof+0xb8/0x4e0 [ 350.792859][T17360] ? bpf_test_init+0x86/0x130 [ 350.792885][T17360] bpf_test_init+0x86/0x130 [ 350.792979][T17360] bpf_prog_test_run_xdp+0x306/0xa10 [ 350.793007][T17360] ? __rcu_read_unlock+0x4e/0x70 [ 350.793109][T17360] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 350.793137][T17360] bpf_prog_test_run+0x204/0x340 [ 350.793162][T17360] __sys_bpf+0x52e/0x7e0 [ 350.793187][T17360] __x64_sys_bpf+0x41/0x50 [ 350.793340][T17360] x64_sys_call+0x10cb/0x3020 [ 350.793378][T17360] do_syscall_64+0x12c/0x370 [ 350.793401][T17360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.793419][T17360] RIP: 0033:0x7f09aecdc799 [ 350.793432][T17360] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 350.793518][T17360] RSP: 002b:00007f09ad72f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 350.793579][T17360] RAX: ffffffffffffffda RBX: 00007f09aef55fa0 RCX: 00007f09aecdc799 [ 350.793642][T17360] RDX: 000000000000001f RSI: 0000200000000b80 RDI: 000000000000000a [ 350.793657][T17360] RBP: 00007f09ad72f090 R08: 0000000000000000 R09: 0000000000000000 [ 350.793671][T17360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 350.793684][T17360] R13: 00007f09aef56038 R14: 00007f09aef55fa0 R15: 00007ffd939b33b8 [ 350.793744][T17360] [ 350.880488][T17243] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 351.101197][T17243] 8021q: adding VLAN 0 to HW filter on device bond0 [ 351.112176][T17243] 8021q: adding VLAN 0 to HW filter on device team0 [ 351.155891][T17243] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 351.173174][T17243] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 351.186215][ T8851] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.193330][ T8851] bridge0: port 1(bridge_slave_0) entered forwarding state [ 351.202140][ T8851] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.209183][ T8851] bridge0: port 2(bridge_slave_1) entered forwarding state [ 351.237524][T17385] netlink: 'syz.3.2712': attribute type 83 has an invalid length. [ 351.305493][T17383] loop5: detected capacity change from 0 to 512 [ 351.477413][T17243] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 351.510534][T17383] EXT4-fs (loop5): 1 truncate cleaned up [ 351.533508][T17383] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 351.930454][T17243] veth0_vlan: entered promiscuous mode [ 351.946849][T17243] veth1_vlan: entered promiscuous mode [ 351.980529][T17243] veth0_macvtap: entered promiscuous mode [ 352.006666][T17243] veth1_macvtap: entered promiscuous mode [ 352.043433][T17243] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 352.087825][T17405] syzkaller0: entered promiscuous mode [ 352.103602][T17405] syzkaller0: entered allmulticast mode [ 352.124109][T17243] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 352.148923][ T64] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.167866][ T64] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.176873][ T64] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.186046][ T3549] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.227385][ T64] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.255945][ T28] audit: type=1400 audit(1773010753.925:1552): avc: denied { mount } for pid=17243 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 352.278345][ T28] audit: type=1400 audit(1773010753.925:1553): avc: denied { mounton } for pid=17243 comm="syz-executor" path="/root/syzkaller.QK0UmH/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=47474 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 352.544055][T17411] bridge4: the hash_elasticity option has been deprecated and is always 16 [ 352.563036][T17417] FAULT_INJECTION: forcing a failure. [ 352.563036][T17417] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 352.607948][ T6538] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.617046][T17417] CPU: 0 UID: 0 PID: 17417 Comm: syz.4.2674 Tainted: G W syzkaller #0 PREEMPT(full) [ 352.617128][T17417] Tainted: [W]=WARN [ 352.617135][T17417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 352.617145][T17417] Call Trace: [ 352.617151][T17417] [ 352.617157][T17417] __dump_stack+0x1d/0x30 [ 352.617181][T17417] dump_stack_lvl+0x95/0xd0 [ 352.617264][T17417] dump_stack+0x15/0x1b [ 352.617287][T17417] should_fail_ex+0x263/0x280 [ 352.617318][T17417] should_fail+0xb/0x20 [ 352.617339][T17417] should_fail_usercopy+0x1a/0x20 [ 352.617426][T17417] _copy_to_user+0x20/0xa0 [ 352.617453][T17417] simple_read_from_buffer+0xb5/0x130 [ 352.617473][T17417] proc_fail_nth_read+0x10e/0x150 [ 352.617536][T17417] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 352.617562][T17417] vfs_read+0x1ab/0x7f0 [ 352.617590][T17417] ? __rcu_read_unlock+0x4e/0x70 [ 352.617620][T17417] ? __fget_files+0x184/0x1c0 [ 352.617640][T17417] ? mutex_lock+0x57/0x90 [ 352.617665][T17417] ksys_read+0xdc/0x1a0 [ 352.617731][T17417] __x64_sys_read+0x40/0x50 [ 352.617746][T17417] x64_sys_call+0x2886/0x3020 [ 352.617828][T17417] do_syscall_64+0x12c/0x370 [ 352.617848][T17417] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.617870][T17417] RIP: 0033:0x7f2c9b75cfce [ 352.617887][T17417] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 352.617904][T17417] RSP: 002b:00007f2c9a1f6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 352.617971][T17417] RAX: ffffffffffffffda RBX: 00007f2c9a1f76c0 RCX: 00007f2c9b75cfce [ 352.617985][T17417] RDX: 000000000000000f RSI: 00007f2c9a1f70a0 RDI: 0000000000000004 [ 352.618000][T17417] RBP: 00007f2c9a1f7090 R08: 0000000000000000 R09: 0000000000000000 [ 352.618014][T17417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 352.618033][T17417] R13: 00007f2c9ba16038 R14: 00007f2c9ba15fa0 R15: 00007ffc5724dd68 [ 352.618053][T17417] [ 352.830779][T17419] IPv6: NLM_F_REPLACE set, but no existing node found! [ 352.847004][T17419] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2717'. [ 352.862657][T17419] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.870936][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.963384][T17425] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 352.988112][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.996340][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.039572][T17433] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2723'. [ 353.114216][T17440] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 353.135162][T17445] loop5: detected capacity change from 0 to 128 [ 353.138911][T17440] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.145594][T17445] vfat: Unknown parameter ':պ' [ 353.157777][T17446] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2725'. [ 353.183593][T17443] netlink: 92 bytes leftover after parsing attributes in process `syz.3.2726'. [ 353.192730][T17443] netlink: 92 bytes leftover after parsing attributes in process `syz.3.2726'. [ 353.216845][T17443] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17443 comm=syz.3.2726 [ 353.270001][T17440] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 353.280020][T17440] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.299491][T17449] siw: device registration error -23 [ 353.321732][T17449] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 353.426475][T17440] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 353.437211][T17440] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.492159][T17440] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 353.502167][T17440] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.552263][ T8848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.587545][ T8848] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 353.596560][ T8848] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.622688][ T8848] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 353.636807][ T8848] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.658947][ T8848] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 353.675213][ T8848] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.705210][ T8848] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 353.733348][ T8848] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.111194][T17457] xfrm0 speed is unknown, defaulting to 1000 [ 354.147460][T17457] lo speed is unknown, defaulting to 1000 [ 354.154012][T17457] lo speed is unknown, defaulting to 1000 [ 354.160176][T17458] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2730'. [ 354.190078][ T8848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.340020][T17461] IPv6: NLM_F_REPLACE set, but no existing node found! [ 354.366579][T17461] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2731'. [ 354.661300][T17471] xt_CT: You must specify a L4 protocol and not use inversions on it [ 354.838455][ T8829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.306521][T17489] loop4: detected capacity change from 0 to 1024 [ 355.327912][T17489] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 355.347388][T17489] System zones: 0-1, 3-36 [ 355.352722][T17489] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.2742: bad orphan inode 134217728 [ 355.363828][T17489] loop4: lost filesystem error report for type 5 error -117 [ 355.364414][T17489] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 355.421702][T17243] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 355.469190][ T64] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.780273][T17506] xfrm0 speed is unknown, defaulting to 1000 [ 355.843133][T17506] lo speed is unknown, defaulting to 1000 [ 355.849929][T17506] lo speed is unknown, defaulting to 1000 [ 356.040488][T17509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 356.685202][T17509] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 356.700934][T17519] tipc: Started in network mode [ 356.711682][T17519] tipc: Node identity 84e, cluster identity 4711 [ 356.728143][T17519] tipc: Node number set to 2126 [ 356.868437][T17523] vhci_hcd vhci_hcd.4: default hub control req: 0330 v8a49 i0001 l0 [ 357.065840][T17531] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.074779][T17531] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.083657][T17531] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.156707][T17532] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.187396][T17532] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.312016][ T28] audit: type=1400 audit(1773010758.985:1554): avc: denied { connect } for pid=17535 comm="syz.0.2760" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 357.351120][T17534] xfrm0 speed is unknown, defaulting to 1000 [ 357.393547][T17534] lo speed is unknown, defaulting to 1000 [ 357.403299][T17534] lo speed is unknown, defaulting to 1000 [ 357.883828][T17552] netlink: 'syz.3.2765': attribute type 26 has an invalid length. [ 358.085075][T17558] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 358.096727][T17558] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 358.127466][T17564] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(14) [ 358.134083][T17564] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 358.141902][T17564] vhci_hcd vhci_hcd.0: Device attached [ 358.149721][T17564] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(16) [ 358.156317][T17564] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 358.166446][T17564] vhci_hcd vhci_hcd.0: Device attached [ 358.173067][T17564] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(18) [ 358.179663][T17564] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 358.188118][T17564] vhci_hcd vhci_hcd.0: Device attached [ 358.206738][T17564] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(20) [ 358.213364][T17564] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 358.310640][T17564] vhci_hcd vhci_hcd.0: Device attached [ 358.316733][T17564] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(22) [ 358.323322][T17564] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 358.354005][T17564] vhci_hcd vhci_hcd.0: Device attached [ 358.470209][T17564] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 358.479492][T17564] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 359.189309][ T8853] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.213077][T17564] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 359.342108][T17577] vhci_hcd: connection closed [ 359.342535][T17571] vhci_hcd: connection closed [ 359.368700][T17581] vhci_hcd: connection closed [ 359.388209][T17567] vhci_hcd: connection closed [ 359.393052][T17565] vhci_hcd: connection closed [ 359.397866][ T3549] usb 5-1: new low-speed USB device number 2 using vhci_hcd [ 359.439370][ T8829] vhci_hcd vhci_hcd.2: stop threads [ 359.448944][ T8829] vhci_hcd vhci_hcd.2: release socket [ 359.464653][ T8829] vhci_hcd vhci_hcd.2: disconnect device [ 359.508119][ T8829] vhci_hcd vhci_hcd.2: stop threads [ 359.525351][ T8829] vhci_hcd vhci_hcd.2: release socket [ 359.535201][T17566] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 359.558244][ T8829] vhci_hcd vhci_hcd.2: disconnect device [ 359.564042][ T8829] vhci_hcd vhci_hcd.2: stop threads [ 359.572537][ T8829] vhci_hcd vhci_hcd.2: release socket [ 359.588104][ T8829] vhci_hcd vhci_hcd.2: disconnect device [ 359.843802][ T8829] vhci_hcd vhci_hcd.2: stop threads [ 359.880048][ T8829] vhci_hcd vhci_hcd.2: release socket [ 359.904585][ T8829] vhci_hcd vhci_hcd.2: disconnect device [ 359.936260][ T8829] vhci_hcd vhci_hcd.2: stop threads [ 359.950819][ T8848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.965304][ T8829] vhci_hcd vhci_hcd.2: release socket [ 359.996067][ T8829] vhci_hcd vhci_hcd.2: disconnect device [ 360.097039][ T28] audit: type=1400 audit(1773010761.765:1555): avc: denied { write } for pid=17612 comm="syz.5.2786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 360.322123][T17633] loop4: detected capacity change from 0 to 164 [ 360.372800][T17636] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2797'. [ 360.485775][T17647] loop4: detected capacity change from 0 to 128 [ 360.509486][T17647] bio_check_eod: 25 callbacks suppressed [ 360.509499][T17647] syz.4.2800: attempt to access beyond end of device [ 360.509499][T17647] loop4: rw=2049, sector=154, nr_sectors = 8 limit=128 [ 360.529467][T17647] syz.4.2800: attempt to access beyond end of device [ 360.529467][T17647] loop4: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 360.584845][T17647] Buffer I/O error on dev loop4, logical block 80, lost async page write [ 360.596306][ T8829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.622824][T17647] syz.4.2800: attempt to access beyond end of device [ 360.622824][T17647] loop4: rw=8390657, sector=154, nr_sectors = 2 limit=128 [ 360.653098][T17647] Buffer I/O error on dev loop4, logical block 77, lost async page write [ 360.662993][T17647] syz.4.2800: attempt to access beyond end of device [ 360.662993][T17647] loop4: rw=8390657, sector=156, nr_sectors = 2 limit=128 [ 360.677344][T17647] Buffer I/O error on dev loop4, logical block 78, lost async page write [ 360.686179][T17647] syz.4.2800: attempt to access beyond end of device [ 360.686179][T17647] loop4: rw=8390657, sector=158, nr_sectors = 2 limit=128 [ 360.793607][T17660] netlink: 'syz.2.2804': attribute type 3 has an invalid length. [ 360.830422][T17647] Buffer I/O error on dev loop4, logical block 79, lost async page write [ 360.863060][T17647] syz.4.2800: attempt to access beyond end of device [ 360.863060][T17647] loop4: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 360.883571][T17647] Buffer I/O error on dev loop4, logical block 80, lost async page write [ 360.993720][T17664] loop2: detected capacity change from 0 to 512 [ 361.051931][T17664] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.2804: invalid indirect mapped block 256 (level 2) [ 361.067912][T17664] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 361.068729][T17664] EXT4-fs (loop2): 2 truncates cleaned up [ 361.083626][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 361.083648][ C1] EXT4-fs (loop2): initial error at time 1773010762: ext4_free_branches:1023: inode 11 [ 361.083691][ C1] EXT4-fs (loop2): last error at time 1773010762: ext4_free_branches:1023: inode 11 [ 361.109559][T17664] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 361.228182][ T3418] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.236307][ T8855] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.764909][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 361.877795][T17700] loop2: detected capacity change from 0 to 256 [ 361.896519][T17700] FAT-fs (loop2): codepage cp936 not found [ 361.923368][T17703] loop2: detected capacity change from 0 to 512 [ 361.930671][T17703] EXT4-fs: Ignoring removed orlov option [ 361.940020][T17703] EXT4-fs: Mount option(s) incompatible with ext2 [ 362.034793][ T28] audit: type=1400 audit(1773010763.705:1556): avc: denied { execute_no_trans } for pid=17702 comm="syz.2.2818" path=2F6D656D66643AA39F6EB4645204693502ACCEE1889D5B4038D7CE1F2039497F151D933DB5E75C274CE6D28EBC294A7454447181CF81BAE531F520C8103EC95C85174CBFCF91DF4DF3025E542A202864656C6574656429 dev="hugetlbfs" ino=48621 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 362.223683][T17709] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 362.233070][T17709] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 362.363443][T17731] loop5: detected capacity change from 0 to 512 [ 362.381176][T17731] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 362.393864][T17731] ext4 filesystem being mounted at /537/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 362.407621][ T28] audit: type=1400 audit(1773010764.085:1557): avc: denied { link } for pid=17730 comm="syz.5.2831" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 362.407766][T17731] Quota error (device loop5): write_blk: dquota write failed [ 362.437298][T17731] Quota error (device loop5): qtree_write_dquot: Error -28 occurred while creating quota [ 362.447159][T17731] EXT4-fs error (device loop5): ext4_acquire_dquot:7001: comm syz.5.2831: Failed to acquire dquot type 1 [ 362.458578][T17731] EXT4-fs (loop5): Remounting filesystem read-only [ 362.477670][ T6538] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 362.733709][ T28] audit: type=1400 audit(1773010764.405:1558): avc: denied { create } for pid=17753 comm="syz.0.2841" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 363.706443][T17780] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 363.715223][T17780] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 363.823125][T17781] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2847'. [ 364.277309][T17796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 364.287637][T17796] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 364.518054][ T3549] usb 5-1: enqueue for inactive port 0 [ 364.523532][ T3549] usb 5-1: enqueue for inactive port 0 [ 364.608171][ T3549] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 364.614555][ T28] audit: type=1400 audit(1773010766.285:1559): avc: denied { override_creds } for pid=17817 comm="syz.4.2866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 364.918670][T17826] netlink: 'syz.5.2869': attribute type 1 has an invalid length. [ 365.089603][ T8829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.393289][T17843] 9p: Bad value for 'rfdno' [ 365.681154][T17846] netlink: 'syz.0.2877': attribute type 1 has an invalid length. [ 365.761664][T17850] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 365.802939][T17850] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 365.854968][T17846] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2877'. [ 365.894152][ T64] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.926652][ T28] audit: type=1400 audit(1773010767.595:1560): avc: denied { write } for pid=17844 comm="syz.0.2877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 365.947515][T17846] 8021q: adding VLAN 0 to HW filter on device bond1 [ 365.970622][T17854] bond1: (slave gretap1): making interface the new active one [ 366.002111][T17854] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.014213][T17854] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 366.031543][T17846] macvlan2: entered promiscuous mode [ 366.051323][T17846] macvlan2: entered allmulticast mode [ 366.069307][T17846] bond1: entered promiscuous mode [ 366.082649][T17846] gretap1: entered promiscuous mode [ 366.097652][T17846] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 366.123045][T17846] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.158102][T17846] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.210966][T17846] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 366.238674][T17846] bond1: left promiscuous mode [ 366.248435][T17846] gretap1: left promiscuous mode [ 366.260089][T17846] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.285591][T17846] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.328260][ T3423] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.337890][ T8829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.359454][ T64] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.037584][ T28] audit: type=1400 audit(1773010768.705:1561): avc: denied { unmount } for pid=3309 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 367.185249][T17883] loop5: detected capacity change from 0 to 512 [ 367.389418][T17883] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 367.451852][T17883] ext4 filesystem being mounted at /553/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 367.536705][T17883] Quota error (device loop5): write_blk: dquota write failed [ 367.583278][T17883] Quota error (device loop5): qtree_write_dquot: Error -28 occurred while creating quota [ 367.636805][T17883] EXT4-fs error (device loop5): ext4_acquire_dquot:7001: comm syz.5.2891: Failed to acquire dquot type 1 [ 367.736678][T17883] EXT4-fs (loop5): Remounting filesystem read-only [ 367.838434][ T6538] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 367.937385][T17924] loop2: detected capacity change from 0 to 1024 [ 367.954711][T17918] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.961835][T17918] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.994334][T17924] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 368.088323][ T28] audit: type=1400 audit(1773010769.765:1562): avc: denied { add_name } for pid=17922 comm="syz.2.2907" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 368.151835][T17918] xfrm0: left promiscuous mode [ 368.179425][T17934] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 368.235880][T17918] macsec1: left promiscuous mode [ 368.242399][T17934] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 368.351396][T17918] veth2: left allmulticast mode [ 368.366937][T17918] veth3: left promiscuous mode [ 368.374821][ T8851] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 368.388061][ T8851] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.429953][ T8851] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 368.483490][ T8851] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.531996][ T8851] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 368.567115][ T8851] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.577209][T17934] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 368.596030][T17934] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 368.643742][ T8851] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 368.689248][ T8851] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.994570][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 369.021211][ T28] audit: type=1400 audit(1773010770.695:1563): avc: denied { name_connect } for pid=17952 comm="syz.5.2904" dest=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 369.177453][T17964] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 369.221726][T17964] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 369.366221][T17971] syzkaller0: entered promiscuous mode [ 369.371894][T17971] syzkaller0: entered allmulticast mode [ 369.519356][T17974] syz.3.2925: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 369.545635][T17976] netlink: 'syz.4.2926': attribute type 1 has an invalid length. [ 369.637006][T17977] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 369.678948][T17974] CPU: 0 UID: 0 PID: 17974 Comm: syz.3.2925 Tainted: G W syzkaller #0 PREEMPT(full) [ 369.678986][T17974] Tainted: [W]=WARN [ 369.679039][T17974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 369.679051][T17974] Call Trace: [ 369.679058][T17974] [ 369.679066][T17974] __dump_stack+0x1d/0x30 [ 369.679096][T17974] dump_stack_lvl+0x95/0xd0 [ 369.679190][T17974] dump_stack+0x15/0x1b [ 369.679224][T17974] warn_alloc+0x145/0x1c0 [ 369.679287][T17974] ? __schedule+0x93c/0xd40 [ 369.679314][T17974] __vmalloc_node_range_noprof+0xa0/0x12b0 [ 369.679413][T17974] ? __perf_event_task_sched_in+0xa65/0xad0 [ 369.679514][T17974] ? preempt_schedule_irq+0x2d/0x50 [ 369.679610][T17974] ? raw_irqentry_exit_cond_resched+0x4b/0x60 [ 369.679709][T17974] ? avc_has_perm_noaudit+0xab/0x130 [ 369.679733][T17974] ? should_fail_ex+0x30/0x280 [ 369.679757][T17974] ? xskq_create+0x36/0xe0 [ 369.679852][T17974] vmalloc_user_noprof+0x7d/0xb0 [ 369.679876][T17974] ? xskq_create+0x80/0xe0 [ 369.679951][T17974] xskq_create+0x80/0xe0 [ 369.679968][T17974] xsk_init_queue+0x70/0xb0 [ 369.679985][T17974] xsk_setsockopt+0x3f5/0x640 [ 369.680015][T17974] ? __pfx_xsk_setsockopt+0x10/0x10 [ 369.680061][T17974] __sys_setsockopt+0x184/0x200 [ 369.680086][T17974] __x64_sys_setsockopt+0x64/0x80 [ 369.680212][T17974] x64_sys_call+0x2327/0x3020 [ 369.680236][T17974] do_syscall_64+0x12c/0x370 [ 369.680254][T17974] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.680273][T17974] RIP: 0033:0x7febba6fc799 [ 369.680289][T17974] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 369.680326][T17974] RSP: 002b:00007febb9136028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 369.680349][T17974] RAX: ffffffffffffffda RBX: 00007febba976090 RCX: 00007febba6fc799 [ 369.680366][T17974] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 369.680381][T17974] RBP: 00007febba792bd9 R08: 0000000000000004 R09: 0000000000000000 [ 369.680399][T17974] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 369.680411][T17974] R13: 00007febba976128 R14: 00007febba976090 R15: 00007fff459f3fc8 [ 369.680517][T17974] [ 369.689155][T17974] Mem-Info: [ 369.792289][T17977] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 369.796858][T17974] active_anon:30055 inactive_anon:7146 isolated_anon:0 [ 369.796858][T17974] active_file:23192 inactive_file:4550 isolated_file:0 [ 369.796858][T17974] unevictable:0 dirty:169 writeback:0 [ 369.796858][T17974] slab_reclaimable:3978 slab_unreclaimable:25631 [ 369.796858][T17974] mapped:35318 shmem:28327 pagetables:5685 [ 369.796858][T17974] sec_pagetables:0 bounce:0 [ 369.796858][T17974] kernel_misc_reclaimable:0 [ 369.796858][T17974] free:1734485 free_pcp:20500 free_cma:0 [ 370.011462][T17974] Node 0 active_anon:109896kB inactive_anon:28584kB active_file:92768kB inactive_file:18200kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:125844kB dirty:676kB writeback:0kB shmem:101940kB kernel_stack:4976kB pagetables:22740kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 370.039650][T17974] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 370.046161][T17976] bond1: (slave gretap1): making interface the new active one [ 370.070168][T17974] lowmem_reserve[]: 0 2879 7857 7857 [ 370.082907][T17974] Node 0 DMA32 free:2944560kB boost:0kB min:4128kB low:7052kB high:9976kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2948188kB mlocked:0kB bounce:0kB free_pcp:3628kB local_pcp:3524kB free_cma:0kB [ 370.118544][T17976] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 370.147590][T17974] lowmem_reserve[]: 0 0 4978 4978 [ 370.167856][T17974] Node 0 Normal free:3985952kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:110824kB inactive_anon:28584kB active_file:92768kB inactive_file:18200kB unevictable:0kB writepending:676kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:80780kB local_pcp:24616kB free_cma:0kB [ 370.204038][T17974] lowmem_reserve[]: [ 370.204036][T17976] macvlan2: entered promiscuous mode [ 370.204053][T17976] macvlan2: entered allmulticast mode [ 370.207975][T17974] 0 [ 370.213959][T17976] bond1: entered promiscuous mode [ 370.218635][T17974] 0 [ 370.221219][T17976] gretap1: entered promiscuous mode [ 370.226234][T17974] 0 [ 370.229399][T17976] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 370.233974][T17974] 0 [ 370.244328][T17976] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 370.245912][T17974] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 370.270241][T17974] Node 0 [ 370.270241][T17976] bond1: left promiscuous mode [ 370.270259][T17976] gretap1: left promiscuous mode [ 370.273215][T17974] DMA32: 2*4kB (M) 1*8kB (M) 4*16kB (M) 3*32kB (M) 4*64kB (M) 1*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2944560kB [ 370.301096][T17974] Node 0 Normal: 1560*4kB (UME) 1960*8kB (UM) 926*16kB (UME) 534*32kB (UME) 359*64kB (UM) 158*128kB (UME) 197*256kB (U) 173*512kB (UME) 180*1024kB (UME) 147*2048kB (UME) 797*4096kB (UME) = 3985920kB [ 370.321109][T17974] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 370.330559][T17974] 53391 total pagecache pages [ 370.336929][T17974] 209 pages in swap cache [ 370.341579][T17974] Free swap = 20008kB [ 370.345781][T17974] Total swap = 124996kB [ 370.350288][T17974] 2097051 pages RAM [ 370.354126][T17974] 0 pages HighMem/MovableOnly [ 370.359500][T17974] 81604 pages reserved [ 370.489152][T17996] hub 8-0:1.0: USB hub found [ 370.493930][T17996] hub 8-0:1.0: 8 ports detected [ 371.030495][T18007] loop5: detected capacity change from 0 to 8192 [ 371.054449][T18007] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 371.092487][T18007] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 371.108160][T18007] FAT-fs (loop5): Filesystem has been set read-only [ 371.118543][T18007] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 371.138625][T18007] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 371.160944][T18007] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 371.189996][T18007] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 371.208105][T18007] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 371.217379][T18007] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 371.238359][T18007] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 371.255396][T18007] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 371.281913][T18007] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 371.504980][T18030] loop4: detected capacity change from 0 to 128 [ 371.536617][T18030] syz.4.2948: attempt to access beyond end of device [ 371.536617][T18030] loop4: rw=2049, sector=138, nr_sectors = 16 limit=128 [ 371.563516][T18030] syz.4.2948: attempt to access beyond end of device [ 371.563516][T18030] loop4: rw=2049, sector=170, nr_sectors = 16 limit=128 [ 371.583042][T18030] syz.4.2948: attempt to access beyond end of device [ 371.583042][T18030] loop4: rw=2049, sector=202, nr_sectors = 8 limit=128 [ 371.613463][ T64] kworker/u8:4: attempt to access beyond end of device [ 371.613463][ T64] loop4: rw=1, sector=138, nr_sectors = 2 limit=128 [ 371.626923][T18033] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2949'. [ 371.651326][T18033] bond1: (slave vxcan5): The slave device specified does not support setting the MAC address [ 371.674761][T18033] bond1: (slave vxcan5): Error -95 calling set_mac_address [ 371.716757][T18037] macvlan0: entered promiscuous mode [ 371.724431][T18037] macvlan0: entered allmulticast mode [ 371.738029][T18037] bond1: (slave macvlan0): Error -98 calling set_mac_address [ 372.198124][T18051] sock: sock_timestamping_bind_phc: sock not bind to device [ 372.419390][T18085] tipc: Started in network mode [ 372.424285][T18085] tipc: Node identity 84e, cluster identity 4711 [ 372.430947][T18085] tipc: Node number set to 2126 [ 372.457883][ T28] audit: type=1400 audit(1773010774.125:1564): avc: denied { name_bind } for pid=18089 comm="syz.4.2971" src=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 372.462822][T18092] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2972'. [ 373.642344][T18110] : renamed from lo (while UP) [ 374.050640][T18125] tipc: Cannot configure node identity twice [ 374.266833][T18134] netlink: 'syz.5.2985': attribute type 1 has an invalid length. [ 374.486960][T18149] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2992'. [ 374.636023][T18164] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.643215][T18164] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.681349][T18173] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3003'. [ 374.724896][T18164] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 374.734275][T18164] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 374.745660][T18164] hsr0: left promiscuous mode [ 374.755495][T18164] veth1_macvtap: left allmulticast mode [ 374.788264][ T8853] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.796769][ T8853] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.808992][ T8853] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.834259][ T8853] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.097431][T18183] loop5: detected capacity change from 0 to 256 [ 375.201281][T18183] FAT-fs (loop5): codepage cp932 not found [ 375.430163][T18201] gretap0: left promiscuous mode [ 375.490645][T18201] xfrm0: left promiscuous mode [ 375.511152][T18201] hsr0: left promiscuous mode [ 375.519250][T18206] blktrace: Concurrent blktraces are not allowed on loop9 [ 375.533713][T11601] speed is unknown, defaulting to 1000 [ 375.768878][T18237] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 375.779028][T18237] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 375.833828][T18239] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3031'. [ 375.843251][T18239] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3031'. [ 376.318187][T18257] loop4: detected capacity change from 0 to 128 [ 376.338982][T18257] EXT4-fs (loop4): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 376.356882][T18259] usb usb7: usbfs: process 18259 (syz.3.3040) did not claim interface 0 before use [ 376.370847][ T3302] udevd[3302]: incorrect ext4 checksum on /dev/loop4 [ 376.403869][T18261] loop4: detected capacity change from 0 to 1024 [ 376.435071][T18261] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 376.586142][T17243] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.680467][T18272] xfrm0 speed is unknown, defaulting to 1000 [ 376.744680][T18272] lo speed is unknown, defaulting to 1000 [ 376.752115][T18272] speed is unknown, defaulting to 1000 [ 376.823521][T18272] chnl_net:caif_netlink_parms(): no params data found [ 376.871995][T18309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 376.890454][T18309] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 376.899939][T18272] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.907297][T18272] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.915500][T18272] bridge_slave_0: entered allmulticast mode [ 376.922097][T18272] bridge_slave_0: entered promiscuous mode [ 376.929097][T18272] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.936183][T18272] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.943665][T18272] bridge_slave_1: entered allmulticast mode [ 376.950449][T18272] bridge_slave_1: entered promiscuous mode [ 376.973640][T18272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 376.984000][T18272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 377.002285][T18272] team0: Port device team_slave_0 added [ 377.008860][T18272] team0: Port device team_slave_1 added [ 377.032396][T18272] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 377.039797][T18272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 377.067595][T18272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 377.845792][T11601] hid-generic 0019:0000:0001.0003: item fetching failed at offset 0/2 [ 377.858741][T18272] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 377.895690][T11601] hid-generic 0019:0000:0001.0003: probe with driver hid-generic failed with error -22 [ 377.931820][T18272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 377.957943][T18272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 378.033559][T18272] hsr_slave_0: entered promiscuous mode [ 378.040895][T18272] hsr_slave_1: entered promiscuous mode [ 378.046747][T18272] debugfs: 'hsr0' already exists in 'hsr' [ 378.052902][T18272] Cannot create hsr debugfs directory [ 378.610569][T18356] netlink: 'syz.4.3073': attribute type 1 has an invalid length. [ 378.647358][T18358] loop5: detected capacity change from 0 to 512 [ 378.737109][T18361] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3073'. [ 378.748411][T18358] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 378.761279][T18358] ext4 filesystem being mounted at /577/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 378.781396][T18359] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 378.800147][ T6538] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.800713][T18359] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 378.834969][T18361] 8021q: adding VLAN 0 to HW filter on device bond2 [ 378.860665][T18356] macvlan2: entered promiscuous mode [ 378.872024][T18356] macvlan2: entered allmulticast mode [ 378.892918][T18356] bond2: entered promiscuous mode [ 378.899123][T18356] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 378.910719][T18356] bond2: left promiscuous mode [ 378.943981][T18370] sock: sock_timestamping_bind_phc: sock not bind to device [ 378.948249][T18272] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 378.969929][T18272] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 378.990624][T18272] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 379.009311][T18272] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 379.108413][T18272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 379.140715][T18272] 8021q: adding VLAN 0 to HW filter on device team0 [ 379.153375][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.160495][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 379.179313][ T8851] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.186445][ T8851] bridge0: port 2(bridge_slave_1) entered forwarding state [ 379.257150][T18394] loop5: detected capacity change from 0 to 128 [ 379.285350][T18394] syz.5.3083: attempt to access beyond end of device [ 379.285350][T18394] loop5: rw=2049, sector=154, nr_sectors = 8 limit=128 [ 379.309545][T18394] syz.5.3083: attempt to access beyond end of device [ 379.309545][T18394] loop5: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 379.326025][T18272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 379.341631][T18394] Buffer I/O error on dev loop5, logical block 80, lost async page write [ 379.351564][T18394] syz.5.3083: attempt to access beyond end of device [ 379.351564][T18394] loop5: rw=2049, sector=162, nr_sectors = 8 limit=128 [ 379.367058][T18394] syz.5.3083: attempt to access beyond end of device [ 379.367058][T18394] loop5: rw=8390657, sector=168, nr_sectors = 2 limit=128 [ 379.381532][T18394] Buffer I/O error on dev loop5, logical block 84, lost async page write [ 379.395212][T18394] syz.5.3083: attempt to access beyond end of device [ 379.395212][T18394] loop5: rw=2049, sector=186, nr_sectors = 8 limit=128 [ 379.410400][T18272] veth0_vlan: entered promiscuous mode [ 379.417151][T18394] syz.5.3083: attempt to access beyond end of device [ 379.417151][T18394] loop5: rw=8390657, sector=192, nr_sectors = 2 limit=128 [ 379.427487][T18272] veth1_vlan: entered promiscuous mode [ 379.436562][T18394] Buffer I/O error on dev loop5, logical block 96, lost async page write [ 379.448344][T18394] syz.5.3083: attempt to access beyond end of device [ 379.448344][T18394] loop5: rw=2049, sector=194, nr_sectors = 8 limit=128 [ 379.464864][T18272] veth0_macvtap: entered promiscuous mode [ 379.468928][T18394] syz.5.3083: attempt to access beyond end of device [ 379.468928][T18394] loop5: rw=8390657, sector=200, nr_sectors = 2 limit=128 [ 379.484725][T18272] veth1_macvtap: entered promiscuous mode [ 379.485055][T18394] Buffer I/O error on dev loop5, logical block 100, lost async page write [ 379.501268][T18394] syz.5.3083: attempt to access beyond end of device [ 379.501268][T18394] loop5: rw=2049, sector=218, nr_sectors = 8 limit=128 [ 379.512202][T18272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 379.522479][T18394] syz.5.3083: attempt to access beyond end of device [ 379.522479][T18394] loop5: rw=8390657, sector=224, nr_sectors = 2 limit=128 [ 379.543077][T18272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 379.555757][ T28] audit: type=1400 audit(1773010781.235:1565): avc: denied { read } for pid=18409 comm="syz.2.3086" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 379.581313][ T8833] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.585324][T18394] Buffer I/O error on dev loop5, logical block 112, lost async page write [ 379.601911][T18394] Buffer I/O error on dev loop5, logical block 116, lost async page write [ 379.611113][ T8851] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.620070][ T8851] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.628906][ T8851] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.641640][T18394] Buffer I/O error on dev loop5, logical block 88, lost async page write [ 379.651497][T18394] Buffer I/O error on dev loop5, logical block 92, lost async page write [ 379.677034][T18394] Buffer I/O error on dev loop5, logical block 120, lost async page write [ 379.687329][T18394] Buffer I/O error on dev loop5, logical block 124, lost async page write [ 380.396874][T18446] xfrm0 speed is unknown, defaulting to 1000 [ 380.506077][T18446] lo speed is unknown, defaulting to 1000 [ 380.518039][ T28] audit: type=1400 audit(1773010782.165:1566): avc: denied { cmd } for pid=18422 comm="syz.2.3092" path="socket:[51026]" dev="sockfs" ino=51026 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 380.554937][T18446] speed is unknown, defaulting to 1000 [ 380.582336][T18457] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 380.598645][T18457] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 380.618804][T18446] chnl_net:caif_netlink_parms(): no params data found [ 380.659518][T18446] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.667116][T18446] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.674653][T18446] bridge_slave_0: entered allmulticast mode [ 380.681325][T18446] bridge_slave_0: entered promiscuous mode [ 380.691610][T18446] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.698790][T18446] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.706132][T18446] bridge_slave_1: entered allmulticast mode [ 380.713121][T18446] bridge_slave_1: entered promiscuous mode [ 380.732370][T18446] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 380.737470][T18472] netlink: 7 bytes leftover after parsing attributes in process `syz.2.3104'. [ 380.752676][T18446] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 380.772832][T18446] team0: Port device team_slave_0 added [ 380.780355][T18446] team0: Port device team_slave_1 added [ 380.810519][T18446] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 380.819466][T18446] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 380.845633][T18446] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 380.877918][T18446] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 380.885736][T18446] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 380.919320][T18446] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 380.943595][ T64] bridge_slave_1: left allmulticast mode [ 380.958530][ T64] bridge_slave_1: left promiscuous mode [ 380.965580][ T64] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.976607][ T64] bridge_slave_0: left allmulticast mode [ 380.985424][ T64] bridge_slave_0: left promiscuous mode [ 380.991548][ T64] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.034002][ T64] bond1 (unregistering): (slave gretap1): Releasing active interface [ 381.046252][ T64] dvmrp1 (unregistering): left allmulticast mode [ 381.151982][ T64] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 381.169126][ T64] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 381.184581][ T64] bond0 (unregistering): Released all slaves [ 381.192955][ T64] bond1 (unregistering): Released all slaves [ 381.247117][T18446] hsr_slave_0: entered promiscuous mode [ 381.255873][T18446] hsr_slave_1: entered promiscuous mode [ 381.262420][T18446] debugfs: 'hsr0' already exists in 'hsr' [ 381.268280][T18446] Cannot create hsr debugfs directory [ 381.275964][ T64] tipc: Left network mode [ 381.407431][ T64] team0 (unregistering): Port device team_slave_1 removed [ 381.428203][ T64] team0 (unregistering): Port device team_slave_0 removed [ 381.534907][T18572] netlink: 'syz.4.3137': attribute type 10 has an invalid length. [ 381.574912][T18572] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 381.591300][T18572] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 381.598957][T18578] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 381.611263][T18578] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 381.630505][T18572] loop4: detected capacity change from 0 to 512 [ 381.651646][T18572] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 381.690401][T18572] EXT4-fs (loop4): orphan cleanup on readonly fs [ 381.705036][T18572] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:517: comm syz.4.3137: Block bitmap for bg 0 marked uninitialized [ 381.732708][T18572] loop4: lost filesystem error report for type 5 error -117 [ 381.732978][T18572] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 381.740518][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 381.740544][ C0] EXT4-fs (loop4): initial error at time 1773010783: ext4_read_block_bitmap_nowait:517 [ 381.740582][ C0] EXT4-fs (loop4): last error at time 1773010783: ext4_read_block_bitmap_nowait:517 [ 381.775291][T18572] loop4: lost filesystem error report for type 5 error -117 [ 381.775778][T18572] EXT4-fs (loop4): 1 orphan inode deleted [ 381.792784][T18572] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 381.831684][ T64] IPVS: stop unused estimator thread 0... [ 381.863196][T18598] usb usb7: usbfs: process 18598 (syz.3.3142) did not claim interface 0 before use [ 381.978802][T18446] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 381.989491][ T28] audit: type=1400 audit(1773010783.665:1567): avc: denied { read } for pid=18622 comm="syz.5.3147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 382.010418][T18446] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 382.020150][T18446] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 382.030335][T18446] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 382.097418][T18446] 8021q: adding VLAN 0 to HW filter on device bond0 [ 382.111568][T18644] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 382.125189][T18446] 8021q: adding VLAN 0 to HW filter on device team0 [ 382.141486][ T8848] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.148557][ T8848] bridge0: port 1(bridge_slave_0) entered forwarding state [ 382.171637][ T8833] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.178692][ T8833] bridge0: port 2(bridge_slave_1) entered forwarding state [ 382.249515][ T28] audit: type=1400 audit(1773010783.905:1568): avc: denied { create } for pid=18633 comm="syz.5.3151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 382.323351][T18446] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 382.369762][T17243] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.471674][T18446] veth0_vlan: entered promiscuous mode [ 382.490107][T18446] veth1_vlan: entered promiscuous mode [ 382.535998][T18697] bridge0: port 1(macvtap1) entered blocking state [ 382.553710][T18697] bridge0: port 1(macvtap1) entered disabled state [ 382.576500][T18697] macvtap1: entered allmulticast mode [ 382.596229][T18697] bridge0: entered allmulticast mode [ 382.613544][T18697] macvtap1: left allmulticast mode [ 382.630497][T18697] bridge0: left allmulticast mode [ 382.679293][T18446] veth0_macvtap: entered promiscuous mode [ 382.704937][T18446] veth1_macvtap: entered promiscuous mode [ 382.738617][T18446] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 382.768404][T18446] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 382.802707][ T8851] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.835946][ T8851] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.866659][ T8851] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.894631][ T64] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.121725][T18715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 383.141087][T18715] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 383.288062][T11591] IPVS: starting estimator thread 0... [ 383.377793][T18728] loop4: detected capacity change from 0 to 128 [ 383.386206][T18722] IPVS: using max 2352 ests per chain, 117600 per kthread [ 383.399008][T18728] FAT-fs (loop4): bogus number of reserved sectors [ 383.443036][T18728] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 383.460770][T18728] FAT-fs (loop4): Can't find a valid FAT filesystem [ 383.945376][T18776] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3189'. [ 383.980430][T18776] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3189'. [ 383.992821][T18787] loop3: detected capacity change from 0 to 512 [ 384.018105][T18787] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.3193: bad orphan inode 13 [ 384.028626][T18787] loop3: lost filesystem error report for type 5 error -117 [ 384.028794][T18787] ext4_test_bit(bit=12, block=4) = 1 [ 384.041406][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 384.041441][ C1] EXT4-fs (loop3): initial error at time 1773010785: ext4_orphan_get:1417 [ 384.041459][ C1] EXT4-fs (loop3): last error at time 1773010785: ext4_orphan_get:1417 [ 384.065406][T18787] is_bad_inode(inode)=0 [ 384.069876][T18787] NEXT_ORPHAN(inode)=0 [ 384.073948][T18787] max_ino=32 [ 384.077136][T18787] i_nlink=1 [ 384.092650][T18787] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 384.135888][T18775] xfrm0 speed is unknown, defaulting to 1000 [ 384.157857][T18272] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.267593][T18775] lo speed is unknown, defaulting to 1000 [ 384.287094][T18775] speed is unknown, defaulting to 1000 [ 384.436684][ T8853] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.501608][ T8853] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.535437][T18775] chnl_net:caif_netlink_parms(): no params data found [ 384.578240][ T8853] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.661269][ T8853] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.693014][T18775] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.731259][T18775] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.747364][T18887] loop3: detected capacity change from 0 to 256 [ 384.757801][T18775] bridge_slave_0: entered allmulticast mode [ 384.765563][T18775] bridge_slave_0: entered promiscuous mode [ 384.772638][T18775] bridge0: port 2(bridge_slave_1) entered blocking state [ 384.779935][T18775] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.787216][T18775] bridge_slave_1: entered allmulticast mode [ 384.798672][T18775] bridge_slave_1: entered promiscuous mode [ 384.805192][T18887] FAT-fs (loop3): codepage cp863 not found [ 384.819542][T18881] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3230'. [ 384.842905][T18881] netlink: 'syz.4.3230': attribute type 12 has an invalid length. [ 384.869618][T18881] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3230'. [ 384.898438][T18775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 384.911133][T18775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 385.171576][ T8853] bond0 (unregistering): (slave lo): Releasing backup interface [ 385.181542][ T8853] bond0 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 385.195137][ T8853] bond0 (unregistering): Released all slaves [ 385.204741][ T8853] bond1 (unregistering): Released all slaves [ 385.230618][T18881] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3230'. [ 385.260909][T18881] netlink: 'syz.4.3230': attribute type 12 has an invalid length. [ 385.306363][T18775] team0: Port device team_slave_0 added [ 385.325599][T18881] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3230'. [ 385.341770][T18775] team0: Port device team_slave_1 added [ 385.358828][T11593] lo speed is unknown, defaulting to 1000 [ 385.364595][ T3423] lo speed is unknown, defaulting to 1000 [ 385.370639][ T64] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 385.395667][ T3423] syz0: Port: 1 Link DOWN [ 385.445240][ T64] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 385.487928][ T64] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 385.515895][ T8833] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 385.526950][ T8853] hsr_slave_0: left promiscuous mode [ 385.534356][ T8853] hsr_slave_1: left promiscuous mode [ 385.541965][ T8853] veth1_macvtap: left promiscuous mode [ 385.553840][ T8853] veth0_macvtap: left promiscuous mode [ 385.624254][T18775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 385.633478][T18775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 385.659932][T18775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 385.671649][T18775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 385.678649][T18775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 385.704787][T18775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 385.739060][T18948] 9p: Bad value for 'wfdno' [ 385.759524][T18775] hsr_slave_0: entered promiscuous mode [ 385.765860][T18775] hsr_slave_1: entered promiscuous mode [ 385.771943][T18775] debugfs: 'hsr0' already exists in 'hsr' [ 385.777684][T18775] Cannot create hsr debugfs directory [ 385.814576][ T28] audit: type=1400 audit(1773010787.485:1569): avc: denied { getopt } for pid=18954 comm="syz.0.3257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 385.931817][ T28] audit: type=1400 audit(1773010787.605:1570): avc: denied { write } for pid=18958 comm="syz.0.3258" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 385.933952][T18967] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3260'. [ 386.138362][ T8853] IPVS: stop unused estimator thread 0... [ 386.138818][T18978] loop4: detected capacity change from 0 to 128 [ 386.164680][T18978] vfat: Unknown parameter '00000000000000000004' [ 386.249536][T18992] : renamed from lo (while UP) [ 386.438655][T19006] netlink: 'syz.2.3272': attribute type 21 has an invalid length. [ 386.438786][T18775] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 386.446483][T19006] netlink: 'syz.2.3272': attribute type 4 has an invalid length. [ 386.446497][T19006] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3272'. [ 386.476424][T18775] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 386.504832][T19013] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3274'. [ 386.510066][T18775] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 386.545503][T18775] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 386.625543][T19040] loop4: detected capacity change from 0 to 764 [ 386.664116][T19040] Symlink component flag not implemented [ 386.687497][T18775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 386.694355][T19040] Symlink component flag not implemented [ 386.717107][T19040] Symlink component flag not implemented (129) [ 386.733161][T18775] 8021q: adding VLAN 0 to HW filter on device team0 [ 386.739870][T19040] Symlink component flag not implemented (6) [ 386.753614][T19064] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3286'. [ 386.774013][ T8855] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.781477][ T8855] bridge0: port 1(bridge_slave_0) entered forwarding state [ 386.802558][ T8855] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.809738][ T8855] bridge0: port 2(bridge_slave_1) entered forwarding state [ 386.825003][ T28] audit: type=1400 audit(1773010788.495:1571): avc: denied { shutdown } for pid=19060 comm="syz.3.3285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 387.036175][T18775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 388.105856][T18775] veth0_vlan: entered promiscuous mode [ 388.152890][T18775] veth1_vlan: entered promiscuous mode [ 388.213488][T18775] veth0_macvtap: entered promiscuous mode [ 388.220636][T18775] veth1_macvtap: entered promiscuous mode [ 388.230936][T18775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 388.239672][T18775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 388.282390][ T8855] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.296188][ T8855] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.315885][ T8855] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.330598][T19122] netlink: 'syz.2.3300': attribute type 1 has an invalid length. [ 388.342445][ T8855] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.358381][T19124] loop5: detected capacity change from 0 to 512 [ 388.372875][T19127] 9p: Bad value for 'wfdno' [ 388.397755][T19122] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 388.398139][T19124] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 388.420538][T19124] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 388.431410][T19122] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 388.454864][T18775] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 388.498443][T19131] 8021q: adding VLAN 0 to HW filter on device bond2 [ 389.511708][T19177] 9p: Bad value for 'wfdno' [ 389.697404][T19161] xfrm0 speed is unknown, defaulting to 1000 [ 389.741000][T19161] speed is unknown, defaulting to 1000 [ 389.777790][T19196] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 389.800230][T19196] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 389.871939][T19161] chnl_net:caif_netlink_parms(): no params data found [ 389.926361][T19208] __nla_validate_parse: 3 callbacks suppressed [ 389.926403][T19208] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3329'. [ 389.963044][T19211] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3330'. [ 390.031199][T19161] bridge0: port 1(bridge_slave_0) entered blocking state [ 390.042503][T19217] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3332'. [ 390.058533][T19161] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.072126][T19161] bridge_slave_0: entered allmulticast mode [ 390.088755][T19161] bridge_slave_0: entered promiscuous mode [ 390.132791][T19161] bridge0: port 2(bridge_slave_1) entered blocking state [ 390.132942][T19225] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3336'. [ 390.143749][T19161] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.165961][T19161] bridge_slave_1: entered allmulticast mode [ 390.172658][T19161] bridge_slave_1: entered promiscuous mode [ 390.189079][T19161] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 390.199398][T19161] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 390.238272][T19161] team0: Port device team_slave_0 added [ 390.277001][T19161] team0: Port device team_slave_1 added [ 390.759543][ T28] audit: type=1400 audit(1773010792.375:1572): avc: denied { connect } for pid=19231 comm="syz.4.3339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 390.791247][T19161] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 390.800568][T19161] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 390.826558][T19161] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 390.838017][T19161] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 390.847544][T19161] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 390.874808][T19161] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 390.920009][T19161] hsr_slave_0: entered promiscuous mode [ 390.926026][T19161] hsr_slave_1: entered promiscuous mode [ 390.933025][T19161] debugfs: 'hsr0' already exists in 'hsr' [ 390.942981][T19161] Cannot create hsr debugfs directory [ 391.254563][T19267] loop4: detected capacity change from 0 to 512 [ 391.511883][T19269] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.3350'. [ 391.564282][T19267] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 391.693391][T19267] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 391.767270][T19161] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.834123][T19267] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.3351: bg 0: block 248: padding at end of block bitmap is not set [ 391.854552][T19267] loop4: lost filesystem error report for type 5 error -117 [ 391.854760][T19267] Quota error (device loop4): write_blk: dquota write failed [ 391.862156][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 391.862177][ C1] EXT4-fs (loop4): last error at time 1773010793: ext4_validate_block_bitmap:441 [ 391.886222][T19267] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 391.896374][T19267] EXT4-fs error (device loop4): ext4_acquire_dquot:7001: comm syz.4.3351: Failed to acquire dquot type 1 [ 391.907875][T19267] loop4: lost filesystem error report for type 5 error -117 [ 391.908544][T19267] EXT4-fs (loop4): 1 truncate cleaned up [ 391.922131][T19267] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 391.922313][T19161] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.023673][T19161] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.034794][T17243] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 392.100368][T19292] loop4: detected capacity change from 0 to 512 [ 392.126842][T19161] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.140491][T19292] EXT4-fs: Ignoring removed oldalloc option [ 392.171746][T19292] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 392.252799][T19292] EXT4-fs (loop4): 1 truncate cleaned up [ 392.277554][T19161] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 392.288219][T19161] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 392.300419][T19161] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 392.310973][T19161] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 392.402988][T19292] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 392.447451][T19161] 8021q: adding VLAN 0 to HW filter on device bond0 [ 392.459824][T19161] 8021q: adding VLAN 0 to HW filter on device team0 [ 392.487721][ T8825] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.494799][ T8825] bridge0: port 1(bridge_slave_0) entered forwarding state [ 392.534078][T19161] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 392.548830][T19161] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 392.564219][ T8825] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.571316][ T8825] bridge0: port 2(bridge_slave_1) entered forwarding state [ 392.687695][T19161] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 392.838627][T19161] veth0_vlan: entered promiscuous mode [ 392.849280][T19161] veth1_vlan: entered promiscuous mode [ 392.877041][T19161] veth0_macvtap: entered promiscuous mode [ 392.886161][T17243] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 392.898619][T19161] veth1_macvtap: entered promiscuous mode [ 392.915768][T19161] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 392.930572][T19161] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 392.941807][ T8827] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.952803][T19317] loop4: detected capacity change from 0 to 128 [ 392.965152][ T8833] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.989457][ T8833] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.999164][T19317] bio_check_eod: 18 callbacks suppressed [ 392.999178][T19317] syz.4.3361: attempt to access beyond end of device [ 392.999178][T19317] loop4: rw=2049, sector=154, nr_sectors = 8 limit=128 [ 393.019965][ T8855] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.020957][T19317] syz.4.3361: attempt to access beyond end of device [ 393.020957][T19317] loop4: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 393.054517][T19317] buffer_io_error: 4 callbacks suppressed [ 393.054532][T19317] Buffer I/O error on dev loop4, logical block 80, lost async page write [ 393.245787][T19340] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3369'. [ 393.280799][ T28] audit: type=1400 audit(1773010794.955:1573): avc: denied { unmount } for pid=18272 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 393.376346][T19361] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3375'. [ 393.403696][T19363] loop3: detected capacity change from 0 to 128 [ 393.435749][T19367] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3382'. [ 393.455899][T19363] syz.3.3380: attempt to access beyond end of device [ 393.455899][T19363] loop3: rw=2049, sector=154, nr_sectors = 8 limit=128 [ 393.503890][T19363] syz.3.3380: attempt to access beyond end of device [ 393.503890][T19363] loop3: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 393.539495][T19363] Buffer I/O error on dev loop3, logical block 80, lost async page write [ 393.750272][T19391] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3392'. [ 393.824229][T19397] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3394'. [ 394.054883][T19414] netlink: 'syz.4.3401': attribute type 1 has an invalid length. [ 394.104395][T19414] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 394.123232][T19414] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 394.157426][T19423] 8021q: adding VLAN 0 to HW filter on device bond3 [ 394.176345][T19426] loop5: detected capacity change from 0 to 764 [ 394.189954][T19423] macvlan2: entered promiscuous mode [ 394.195582][T19423] macvlan2: entered allmulticast mode [ 394.206016][T19423] bond3: entered promiscuous mode [ 394.211602][T19423] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 394.233773][T19423] bond3: left promiscuous mode [ 394.239035][ T28] audit: type=1400 audit(1773010795.905:1574): avc: denied { ioctl } for pid=19429 comm="syz.0.3409" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 395.194955][T19476] syzkaller0: entered promiscuous mode [ 395.200525][T19476] syzkaller0: entered allmulticast mode [ 395.607826][T19525] loop5: detected capacity change from 0 to 512 [ 395.626515][T19525] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 395.678032][T19525] ext4 filesystem being mounted at /38/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 396.017105][ T28] audit: type=1400 audit(1773010797.565:1575): avc: denied { setattr } for pid=19524 comm="syz.5.3453" name="" dev="pipefs" ino=53736 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 396.220382][T19538] syzkaller0: entered promiscuous mode [ 396.260904][T19538] syzkaller0: entered allmulticast mode [ 396.300015][T19543] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.343047][T19546] __nla_validate_parse: 1 callbacks suppressed [ 396.343064][T19546] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3459'. [ 396.402726][T19543] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.521854][T19553] syzkaller0: entered promiscuous mode [ 396.527897][T19553] syzkaller0: entered allmulticast mode [ 396.655718][T18775] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 396.670383][T19543] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.754312][T19543] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.892481][ T8855] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.931545][ T8855] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.976002][ T8855] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.035409][ T8855] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.411189][T19569] loop3: detected capacity change from 0 to 128 [ 397.427342][T19569] vfat: Unknown parameter ':պ' [ 397.869766][T19577] loop3: detected capacity change from 0 to 764 [ 398.611954][T19595] syzkaller0: entered promiscuous mode [ 398.618605][T19595] syzkaller0: entered allmulticast mode [ 398.830596][T19599] loop5: detected capacity change from 0 to 128 [ 398.873591][T19599] vfat: Unknown parameter ':պ' [ 399.186064][T19609] IPv6: NLM_F_REPLACE set, but no existing node found! [ 399.196129][T19609] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3485'. [ 399.206263][T19609] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3485'. [ 399.327511][T19624] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3493'. [ 399.440703][T19636] IPv6: NLM_F_REPLACE set, but no existing node found! [ 399.475812][T19636] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3499'. [ 399.508268][T19636] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3499'. [ 399.679680][T19654] loop3: detected capacity change from 0 to 512 [ 399.698355][T19654] EXT4-fs: Ignoring removed oldalloc option [ 399.727338][T19654] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 399.755129][T19664] IPv6: NLM_F_REPLACE set, but no existing node found! [ 399.762962][T19664] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3512'. [ 399.778274][T19664] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3512'. [ 399.792339][T19654] EXT4-fs (loop3): 1 truncate cleaned up [ 399.808182][T19654] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 399.879316][T18272] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 399.902571][T19673] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.949633][T19673] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.014665][T19673] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.091020][T19673] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.847151][T19741] siw: device registration error -23 [ 401.882561][T19741] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 402.252207][T19775] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 402.354301][ T8855] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.471523][ T8846] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.514336][ T8855] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.648157][T19803] loop5: detected capacity change from 0 to 512 [ 402.722813][T19803] EXT4-fs: Ignoring removed oldalloc option [ 402.789884][T19809] loop3: detected capacity change from 0 to 764 [ 402.816832][T19803] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 402.866919][T19813] loop4: detected capacity change from 0 to 128 [ 402.877794][T19813] vfat: Unknown parameter ':պ' [ 402.939711][T19803] EXT4-fs (loop5): 1 truncate cleaned up [ 402.950975][ T8855] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.968705][T19803] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 403.055475][T18775] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 403.112079][T19821] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.127230][T19826] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3578'. [ 403.143387][T19821] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.170631][T19830] IPv6: NLM_F_REPLACE set, but no existing node found! [ 403.178741][T19830] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3580'. [ 403.234988][T19821] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.306803][T19821] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.346911][T19845] syzkaller0: entered promiscuous mode [ 403.353179][T19845] syzkaller0: entered allmulticast mode [ 403.387705][ T8827] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.400675][ T8827] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.413624][ T8827] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.425431][ T8827] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.023835][T19911] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 404.034737][T19911] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.073071][T19911] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 404.083568][T19911] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.095787][T19915] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3619'. [ 404.141623][T19911] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 404.153477][T19911] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.223133][T19911] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 404.233979][T19911] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.264303][ T8846] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 404.272645][ T8846] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.288096][ T8825] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 404.296412][ T8825] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.304660][ T8825] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 404.312879][ T8825] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.323493][ T8825] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 404.331741][ T8825] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.874432][T19943] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3632'. [ 404.951952][T19951] xt_hashlimit: size too large, truncated to 1048576 [ 404.993507][T19955] syzkaller0: entered promiscuous mode [ 405.002314][T19955] syzkaller0: entered allmulticast mode [ 405.018329][T19956] vxcan0: tx drop: invalid sa for name 0x0000000000000001 [ 405.123672][T19968] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3643'. [ 405.221378][T19986] xt_hashlimit: size too large, truncated to 1048576 [ 405.263761][T19996] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3657'. [ 405.283644][T19998] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3658'. [ 405.293066][T19999] vxcan0: tx drop: invalid sa for name 0x0000000000000001 [ 405.431229][T20022] loop3: detected capacity change from 0 to 128 [ 405.437981][T20022] vfat: Unknown parameter ':պ' [ 405.684272][T20034] syzkaller0: entered promiscuous mode [ 405.690120][T20034] syzkaller0: entered allmulticast mode [ 405.728959][T20038] netlink: 'syz.4.3674': attribute type 1 has an invalid length. [ 405.769124][T20038] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 405.781341][T20038] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 405.794017][T20049] IPv6: NLM_F_REPLACE set, but no existing node found! [ 405.805198][T20049] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3679'. [ 405.828971][T20053] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3674'. [ 405.831736][T20052] xfrm0 speed is unknown, defaulting to 1000 [ 405.891182][T20052] speed is unknown, defaulting to 1000 [ 405.960487][T20044] xfrm0 speed is unknown, defaulting to 1000 [ 405.998619][T20038] macvlan2: entered promiscuous mode [ 406.015495][T20060] loop5: detected capacity change from 0 to 128 [ 406.019472][T20038] macvlan2: entered allmulticast mode [ 406.027505][T20038] bond4: entered promiscuous mode [ 406.032249][T20060] vfat: Unknown parameter ':պ' [ 406.034623][T20038] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 406.051505][T20038] bond4: left promiscuous mode [ 406.381602][T20044] speed is unknown, defaulting to 1000 [ 406.799985][T20079] syzkaller0: entered promiscuous mode [ 406.814231][T20079] syzkaller0: entered allmulticast mode [ 407.043104][T20089] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 407.053086][T20089] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.160056][T20089] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 407.176886][T20089] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.240219][T20089] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 407.251615][T20089] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.364732][T20089] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 407.388109][T20089] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.632468][T20112] siw: device registration error -23 [ 407.646245][T20112] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 408.074558][T20134] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3715'. [ 408.249879][T20150] loop5: detected capacity change from 0 to 512 [ 408.256603][T20150] EXT4-fs: Ignoring removed nomblk_io_submit option [ 408.265363][T20150] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 408.281216][T20150] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 408.303783][T20150] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4222: comm syz.5.3723: Allocating blocks 41-42 which overlap fs metadata [ 408.317765][T20150] loop5: lost filesystem error report for type 5 error -117 [ 408.317948][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 408.333484][ C0] EXT4-fs (loop5): initial error at time 1773010809: ext4_mb_mark_diskspace_used:4222 [ 408.343046][ C0] EXT4-fs (loop5): last error at time 1773010809: ext4_mb_mark_diskspace_used:4222 [ 408.361442][T20150] EXT4-fs (loop5): Remounting filesystem read-only [ 408.370717][T20150] Quota error (device loop5): write_blk: dquota write failed [ 408.378464][T20150] Quota error (device loop5): find_free_dqentry: Can't write quota data block 5 [ 408.387820][T20150] Quota error (device loop5): write_blk: dquota write failed [ 408.398405][T20150] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 408.418096][T20150] EXT4-fs (loop5): 1 truncate cleaned up [ 408.436678][T20150] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 408.466415][T20161] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3727'. [ 408.467840][ T28] audit: type=1326 audit(1773010810.135:1576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20149 comm="syz.5.3723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe4f31c799 code=0x7ffc0000 [ 408.500384][ T28] audit: type=1326 audit(1773010810.175:1577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20149 comm="syz.5.3723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe4f31c799 code=0x7ffc0000 [ 408.524141][ T28] audit: type=1326 audit(1773010810.175:1578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20149 comm="syz.5.3723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=303 compat=0 ip=0x7fbe4f31c799 code=0x7ffc0000 [ 408.548342][ T28] audit: type=1326 audit(1773010810.175:1579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20149 comm="syz.5.3723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe4f31c799 code=0x7ffc0000 [ 408.559194][T20163] syzkaller0: entered promiscuous mode [ 408.579910][ T28] audit: type=1326 audit(1773010810.175:1580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20149 comm="syz.5.3723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe4f31c799 code=0x7ffc0000 [ 408.589859][T20163] syzkaller0: entered allmulticast mode [ 408.628173][T18775] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 408.645059][T20168] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3730'. [ 408.654338][T20168] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3730'. [ 408.779710][T20184] IPv6: NLM_F_REPLACE set, but no existing node found! [ 408.790013][T20184] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3738'. [ 409.055438][T20200] xt_CT: You must specify a L4 protocol and not use inversions on it [ 409.926743][T20217] loop3: detected capacity change from 0 to 512 [ 409.934533][T20217] EXT4-fs: Ignoring removed oldalloc option [ 409.938009][ T8827] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 409.952065][ T8827] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.952841][T20217] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 409.975563][T20217] EXT4-fs (loop3): 1 truncate cleaned up [ 409.986775][T20217] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 410.024937][ T8827] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 410.033487][ T8827] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.045065][ T8855] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 410.058661][ T8855] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.066951][ T8855] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 410.080239][ T8855] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.163047][T18272] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 410.237092][T20244] netlink: 92 bytes leftover after parsing attributes in process `syz.5.3762'. [ 410.269600][T20244] netlink: 92 bytes leftover after parsing attributes in process `syz.5.3762'. [ 412.430061][T20274] IPv6: NLM_F_REPLACE set, but no existing node found! [ 412.437669][T20261] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.450225][T20276] netlink: 92 bytes leftover after parsing attributes in process `syz.2.3773'. [ 412.459710][T20276] netlink: 92 bytes leftover after parsing attributes in process `syz.2.3773'. [ 412.469395][T20274] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3772'. [ 412.479409][T20272] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 412.485311][T20272] syzkaller0: linktype set to 0 [ 412.535664][T20261] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.632063][T20261] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.759958][T20261] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.923725][T20303] xt_CT: You must specify a L4 protocol and not use inversions on it [ 413.379676][ T8848] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.859149][ T64] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.891399][T20307] netlink: 92 bytes leftover after parsing attributes in process `syz.0.3785'. [ 413.900586][ T8855] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.938691][ T8855] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.942553][T20307] netlink: 92 bytes leftover after parsing attributes in process `syz.0.3785'. [ 414.077497][T20320] netlink: 'syz.3.3789': attribute type 1 has an invalid length. [ 414.236334][T20320] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 414.248489][T20320] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 414.397805][T20329] bond1: (slave gretap1): making interface the new active one [ 414.464886][T20329] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 414.546118][T20320] macvlan2: entered promiscuous mode [ 414.551599][T20320] macvlan2: entered allmulticast mode [ 414.557419][T20320] bond1: entered promiscuous mode [ 414.562816][T20320] gretap1: entered promiscuous mode [ 414.572668][T20320] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 414.587171][T20320] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 414.599186][T20320] bond1: left promiscuous mode [ 414.608015][T20320] gretap1: left promiscuous mode [ 414.815283][T20347] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 414.826492][T20347] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.895448][T20355] xt_CT: You must specify a L4 protocol and not use inversions on it [ 415.091964][T20347] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 415.120673][T20347] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.168340][T20353] xt_CT: You must specify a L4 protocol and not use inversions on it [ 415.239882][T20347] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 415.286422][T20347] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.350316][T20347] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 415.368536][T20347] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.491712][T20368] syzkaller0: entered promiscuous mode [ 415.497747][T20368] syzkaller0: entered allmulticast mode [ 416.100325][T20381] tipc: Started in network mode [ 416.108831][T20381] tipc: Node identity 84e, cluster identity 4711 [ 416.115362][T20381] tipc: Node number set to 2126 [ 417.007400][ T8825] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 417.046136][ T8825] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.098294][ T8825] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 417.117440][ T8825] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.187149][T20393] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3815'. [ 417.196246][ T8825] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 417.212148][ T8825] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.223098][ T8825] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 417.231446][ T8825] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.244162][T20393] bridge0: entered promiscuous mode [ 417.296821][T20399] xt_hashlimit: size too large, truncated to 1048576 [ 417.354096][T20401] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.379875][T20402] vxcan0: tx drop: invalid sa for name 0x0000000000000001 [ 417.401237][T20405] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3819'. [ 417.444104][T20401] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.519445][T20401] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.580880][T20401] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.619377][T20419] siw: device registration error -23 [ 417.640209][T20419] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 417.656284][ T64] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.668975][ T64] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.683708][ T64] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.698126][ T64] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.879375][T20433] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3832'. [ 417.896604][T20436] IPv6: NLM_F_REPLACE set, but no existing node found! [ 418.254173][T20446] netlink: 92 bytes leftover after parsing attributes in process `syz.0.3837'. [ 418.298166][T20446] netlink: 92 bytes leftover after parsing attributes in process `syz.0.3837'. [ 418.429969][T20454] siw: device registration error -23 [ 418.439631][T20454] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 418.528334][T20464] IPv6: NLM_F_REPLACE set, but no existing node found! [ 418.553961][T20466] tipc: Started in network mode [ 418.559051][T20466] tipc: Node identity 84e, cluster identity 4711 [ 418.565409][T20466] tipc: Node number set to 2126 [ 418.583546][T20468] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3847'. [ 418.596231][T20468] bridge0: entered promiscuous mode [ 418.769119][T20483] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3854'. [ 418.805294][T20485] netlink: 92 bytes leftover after parsing attributes in process `syz.2.3855'. [ 420.102467][T20519] __nla_validate_parse: 1 callbacks suppressed [ 420.102481][T20519] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3870'. [ 420.121949][T20521] loop5: detected capacity change from 0 to 512 [ 420.139642][T20521] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 420.161293][T20521] ext4 filesystem being mounted at /127/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 420.972456][T18775] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 421.110544][T20551] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3882'. [ 421.190368][T20557] netlink: 'syz.5.3885': attribute type 1 has an invalid length. [ 421.210143][T20557] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 421.221325][T20557] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 421.240841][T20560] netlink: 92 bytes leftover after parsing attributes in process `syz.2.3886'. [ 421.249866][T20560] netlink: 92 bytes leftover after parsing attributes in process `syz.2.3886'. [ 421.256932][T20561] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3885'. [ 421.268628][T20561] 8021q: adding VLAN 0 to HW filter on device bond1 [ 421.283208][T20557] bond1: (slave gretap1): making interface the new active one [ 421.291450][T20557] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 421.303793][T20557] macvlan2: entered promiscuous mode [ 421.309210][T20557] macvlan2: entered allmulticast mode [ 421.315071][T20557] bond1: entered promiscuous mode [ 421.320142][T20557] gretap1: entered promiscuous mode [ 421.325862][T20557] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 421.335601][T20557] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 421.347267][T20557] bond1: left promiscuous mode [ 421.352114][T20557] gretap1: left promiscuous mode [ 421.575191][T20585] netlink: 92 bytes leftover after parsing attributes in process `syz.0.3898'. [ 421.584336][T20585] netlink: 92 bytes leftover after parsing attributes in process `syz.0.3898'. [ 421.650247][T20590] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3900'. [ 421.954257][T20619] loop3: detected capacity change from 0 to 512 [ 421.961252][T20619] EXT4-fs: Ignoring removed oldalloc option [ 421.970349][T20619] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 421.990959][T20619] EXT4-fs (loop3): 1 truncate cleaned up [ 421.997064][T20619] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 422.027625][T18272] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 422.048956][T20628] netlink: 92 bytes leftover after parsing attributes in process `syz.5.3918'. [ 422.058399][T20628] netlink: 92 bytes leftover after parsing attributes in process `syz.5.3918'. [ 422.178473][T20639] netlink: 'syz.3.3923': attribute type 1 has an invalid length. [ 422.211441][T20639] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 422.230085][T20639] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 422.290113][T20643] 8021q: adding VLAN 0 to HW filter on device bond2 [ 422.300767][T20643] macvlan2: entered promiscuous mode [ 422.306061][T20643] macvlan2: entered allmulticast mode [ 422.318097][T20643] bond2: entered promiscuous mode [ 422.323563][T20643] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 422.332840][T20643] bond2: left promiscuous mode [ 422.371732][T20651] loop5: detected capacity change from 0 to 512 [ 422.382144][T20651] EXT4-fs: Ignoring removed oldalloc option [ 422.390355][T20651] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 422.410260][T20651] EXT4-fs (loop5): 1 truncate cleaned up [ 422.416808][T20651] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 422.445213][T18775] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 422.657653][T20660] syzkaller0: entered promiscuous mode [ 422.666827][T20660] syzkaller0: entered allmulticast mode [ 422.743197][T20677] loop4: detected capacity change from 0 to 512 [ 422.785332][T20677] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 422.798182][T20677] ext4 filesystem being mounted at /220/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 422.958979][T20697] netlink: 'syz.5.3945': attribute type 3 has an invalid length. [ 423.439969][T20712] loop3: detected capacity change from 0 to 128 [ 423.456744][T20712] syz.3.3951: attempt to access beyond end of device [ 423.456744][T20712] loop3: rw=2049, sector=154, nr_sectors = 8 limit=128 [ 423.474424][T20712] syz.3.3951: attempt to access beyond end of device [ 423.474424][T20712] loop3: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 423.488279][T20712] Buffer I/O error on dev loop3, logical block 80, lost async page write [ 423.497231][T20712] syz.3.3951: attempt to access beyond end of device [ 423.497231][T20712] loop3: rw=2049, sector=162, nr_sectors = 8 limit=128 [ 423.510860][T20714] tipc: Started in network mode [ 423.528099][T20714] tipc: Node identity 84e, cluster identity 4711 [ 423.538648][T20714] tipc: Node number set to 2126 [ 423.543991][T20711] syz.3.3951: attempt to access beyond end of device [ 423.543991][T20711] loop3: rw=8390657, sector=154, nr_sectors = 2 limit=128 [ 423.563634][T20711] Buffer I/O error on dev loop3, logical block 77, lost async page write [ 423.572158][T20711] syz.3.3951: attempt to access beyond end of device [ 423.572158][T20711] loop3: rw=8390657, sector=156, nr_sectors = 2 limit=128 [ 423.585894][T20711] Buffer I/O error on dev loop3, logical block 78, lost async page write [ 423.601687][T20711] syz.3.3951: attempt to access beyond end of device [ 423.601687][T20711] loop3: rw=8390657, sector=158, nr_sectors = 2 limit=128 [ 423.616550][T17243] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 423.637567][T20711] Buffer I/O error on dev loop3, logical block 79, lost async page write [ 423.646365][T20711] syz.3.3951: attempt to access beyond end of device [ 423.646365][T20711] loop3: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 423.667498][T20711] Buffer I/O error on dev loop3, logical block 80, lost async page write [ 423.677089][T20711] syz.3.3951: attempt to access beyond end of device [ 423.677089][T20711] loop3: rw=2049, sector=162, nr_sectors = 8 limit=128 [ 423.692892][T20720] tipc: Started in network mode [ 423.697882][T20720] tipc: Node identity 84e, cluster identity 4711 [ 423.710583][T20720] tipc: Node number set to 2126 [ 423.731208][T20721] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.769750][T20721] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.819510][T20728] loop3: detected capacity change from 0 to 512 [ 423.820164][T20721] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.837203][T20728] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002] [ 423.848205][T20728] System zones: 1-12 [ 423.852243][T20728] EXT4-fs (loop3): orphan cleanup on readonly fs [ 423.888148][T20728] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.3958: invalid indirect mapped block 8 (level 2) [ 423.901841][T20728] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 423.902063][T20728] EXT4-fs (loop3): 1 truncate cleaned up [ 423.911213][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 423.911235][ C0] EXT4-fs (loop3): initial error at time 1773010825: ext4_free_branches:1023: inode 11 [ 423.911267][ C0] EXT4-fs (loop3): last error at time 1773010825: ext4_free_branches:1023: inode 11 [ 423.949462][T20728] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 423.951517][T20721] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.103966][T20748] loop5: detected capacity change from 0 to 512 [ 424.112833][ T64] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.135174][ T64] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.164194][ T64] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.178105][ T64] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.187668][T20748] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 424.242307][T20748] ext4 filesystem being mounted at /156/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 424.304019][T20760] xt_hashlimit: size too large, truncated to 1048576 [ 424.306470][T18775] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 424.350994][T20763] vxcan0: tx drop: invalid sa for name 0x0000000000000001 [ 424.493491][T20775] netlink: 'syz.5.3977': attribute type 1 has an invalid length. [ 424.515422][T20775] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 424.537506][T20775] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 424.578024][T20779] 8021q: adding VLAN 0 to HW filter on device bond2 [ 425.121064][T20799] __nla_validate_parse: 5 callbacks suppressed [ 425.121150][T20799] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3986'. [ 425.145258][T20796] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.147007][T20801] loop5: detected capacity change from 0 to 128 [ 425.206131][T20801] syz.5.3987: attempt to access beyond end of device [ 425.206131][T20801] loop5: rw=2049, sector=154, nr_sectors = 8 limit=128 [ 425.235209][T20796] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.240368][T20801] syz.5.3987: attempt to access beyond end of device [ 425.240368][T20801] loop5: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 425.260032][T20801] Buffer I/O error on dev loop5, logical block 80, lost async page write [ 425.268880][T20807] IPv6: NLM_F_REPLACE set, but no existing node found! [ 425.278772][T20807] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3990'. [ 425.309888][T20796] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.336990][T20801] Buffer I/O error on dev loop5, logical block 84, lost async page write [ 425.356713][T20801] Buffer I/O error on dev loop5, logical block 96, lost async page write [ 425.366633][T20801] Buffer I/O error on dev loop5, logical block 100, lost async page write [ 425.379686][T20796] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.388734][T20801] Buffer I/O error on dev loop5, logical block 112, lost async page write [ 425.429968][ T8835] ================================================================== [ 425.438066][ T8835] BUG: KCSAN: data-race in __fat_write_inode / copy_folio_from_iter_atomic [ 425.446661][ T8835] [ 425.448974][ T8835] write to 0xffff88813f3e7c1c of 4 bytes by task 20801 on cpu 0: [ 425.456686][ T8835] __fat_write_inode+0x236/0x530 [ 425.461929][ T8835] fat_sync_inode+0x1a/0x30 [ 425.466435][ T8835] fat_truncate_blocks+0x1cc/0x5a0 [ 425.471552][ T8835] fat_write_end+0xba/0x160 [ 425.476059][ T8835] generic_perform_write+0x311/0x490 [ 425.481335][ T8835] __generic_file_write_iter+0x9e/0x120 [ 425.486882][ T8835] generic_file_write_iter+0x8d/0x310 [ 425.492259][ T8835] vfs_write+0x5a6/0x9f0 [ 425.496505][ T8835] ksys_write+0xdc/0x1a0 [ 425.500746][ T8835] __x64_sys_write+0x40/0x50 [ 425.505327][ T8835] x64_sys_call+0x27e1/0x3020 [ 425.510007][ T8835] do_syscall_64+0x12c/0x370 [ 425.514598][ T8835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.520491][ T8835] [ 425.522806][ T8835] read to 0xffff88813f3e7c00 of 1024 bytes by task 8835 on cpu 1: [ 425.530602][ T8835] copy_folio_from_iter_atomic+0x75f/0x1170 [ 425.536504][ T8835] generic_perform_write+0x2c1/0x490 [ 425.541783][ T8835] shmem_file_write_iter+0xc5/0xf0 [ 425.546894][ T8835] lo_rw_aio+0x67d/0x730 [ 425.551132][ T8835] loop_process_work+0x56c/0xac0 [ 425.556066][ T8835] loop_workfn+0x31/0x40 [ 425.560306][ T8835] process_scheduled_works+0x4de/0x9e0 [ 425.565765][ T8835] worker_thread+0x581/0x770 [ 425.570352][ T8835] kthread+0x22a/0x280 [ 425.574414][ T8835] ret_from_fork+0x150/0x360 [ 425.579007][ T8835] ret_from_fork_asm+0x1a/0x30 [ 425.583768][ T8835] [ 425.586077][ T8835] Reported by Kernel Concurrency Sanitizer on: [ 425.592223][ T8835] CPU: 1 UID: 0 PID: 8835 Comm: kworker/u8:18 Tainted: G W syzkaller #0 PREEMPT(full) [ 425.603338][ T8835] Tainted: [W]=WARN [ 425.607126][ T8835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 425.617170][ T8835] Workqueue: loop5 loop_workfn [ 425.621932][ T8835] ================================================================== [ 426.142703][T18272] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 428.502837][ T8848] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.513831][ T8848] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.524898][ T8848] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.536020][ T8848] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0