last executing test programs: 6m29.502006554s ago: executing program 32 (id=108): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000000380)={0x0, 0x1c, &(0x7f0000000400)=[{&(0x7f00000002c0)="d7", 0xffffff2a}], 0x1}, 0x20004001) close(r3) 6m22.449487635s ago: executing program 33 (id=217): socket$packet(0x11, 0xa, 0x300) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2688f54c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) 6m17.21913436s ago: executing program 5 (id=307): syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f00000000c0)={[{@grpjquota}, {@errors_remount}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7fffffff}}, {@barrier_val}]}, 0x3, 0x4f4, &(0x7f0000000740)="$eJzs3E9sVNUeAODfnba0/Hv08Xi8B6IW0dhIbKGgsDAxGE1caGLERF02bSFIoYaWRAjqkBhcGhL3xqVbF27VDTGsTNzi0sSQEMMGMCGOuTP3dqbDzJRppx1Lvy+Z9px7595zzj333Dn3nLkTwLo1lP5JKuEbEbEtIgr1bxiq/Lt7+9LEvduXJqJYKh3/IylvdieNZ7LdxOYsMlyIKHyWVFfUmL1w8fT49PTUuSw+Onfmw9HZCxefPzWQLTl69PChg0deHHuh/UI1SC8t153dn8zs2fX6+1ffnOjNl+ep1ZajU4ZiqFFWyp7pdGJdtrUmnPR2MSO0JT3/0+rqK7f/bdETrSqvuIo5A1ZaqVQq9TdfXSzVu/zAEmDNioFu5wDojvyDPr3/zV+NOgIbVqb70XW3jlVugNJy381eEU+WF+bjIH1197edNBQR7xX//Cp9RbNxiJ4VShwAWJd+OJb3BOv6f4OVmZH756+9nP7/VzaHMhgR/46I7RHxn4jYERH/jYidEfG/iPh/3f7TrkupRfpDdfH59OcnoQo3O1TUhtL+30vZ3Fa1/7cgA4M9WWxrRN5hnjqQHZPh6Os/cWp66mCLNH589Zcvmq2r7f+lrzT9vC+Y5eNmb90A3eT43PiSC1zn1uWI3b315U96I5L5mYAkInZFxO429jtYEz713Dd75iN9C9+3ePnLSg3n0Towz1T6OuLZSO7fvX2pGAvqv5pismB+8sz4yamTU2fH5ucnRwdieurAaHoWHGiYxvWfr7zVLP1Fy//db/WbvHbk++MduylI639Tzfkf+fxttfyDSUQyP187234aV379vOnc6lLP/w3JO+Vwfl/60fjc3LmDERuSNx5cPlbdNo+n/6NYKf/wvsbtf3u2TXokHouI9CR+PCKeiModYpr3vRHxVETsa1H+n155+oO2y19oscMOSss/WXf9q9T8gvqvztc3CyTZ3GCDVT2n99641+Ti8XD1f7gcGs6WNL7+JQsuEc1ymn/apUv+WvbRAwAAgLWhEBFbasaStkShMDJSGQPaEZsK0zOzc/tPzJw/O5muixiMvkI+0lUZD+5L8vHPwZr4WF38UDZu/GXPxnJ8ZGJmerKrJQc2l9t8UhiJeLenpv2nfve9E3j0eV4L1q9W7T/txO+8uoqZAVbVw3/+X/t4RTMCrLqa9t/sCf/iEr73BawB7v+BqsV/6Mc1A9a+krYM61pb7X+/HwGER0lvvD0fXqXnDoF/iKX2/z/tcD6AVbXoc/3LCpT6G68aiAffHAOtd9gTS8vGxgZpdSWQ9qy6kvrGpWyV/5pC0/dEob0d9kdn6vTEMo9G8dzsyZ0dP/lL2XflO12D3zZvp9f7W9TO8gNduRwBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB03N8BAAD//6Yc4S8=") r0 = open(&(0x7f0000000080)='.\x00', 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 6m17.145361675s ago: executing program 5 (id=308): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x300) 6m16.859214041s ago: executing program 5 (id=309): syz_emit_ethernet(0xbe, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 6m16.771167147s ago: executing program 5 (id=310): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9901) mount$bind(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x10a78c0, 0x0) 6m16.770849147s ago: executing program 5 (id=311): sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x98, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8, 0xf, 0xb6}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_LOW={0x8, 0x11, 0x3}, @ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8, 0xa, 0x9}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8, 0xf, 0x281}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_HIGH={0x8, 0x16, 0x40}, @ETHTOOL_A_COALESCE_RX_USECS={0x8, 0x2, 0x7}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_HIGH={0x8, 0x16, 0xe}, @ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8, 0xa, 0x7fff}, @ETHTOOL_A_COALESCE_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x24000080}, 0x10) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newqdisc={0x70, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x1ff, 0x4, 0x0, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x6, 0x8, 0xfffffffe, 0xd99d}}]}]}}}]}, 0x70}}, 0x0) sendto$packet(r0, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c288a8", 0x36, 0x830, &(0x7f0000000440)={0x11, 0x0, r3, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14) 6m16.575137298s ago: executing program 5 (id=314): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000240)=@NCI_OP_CORE_RESET_NTF={0x0, 0x1, 0x3, 0x0, 0x9, {0x45, 0x2, 0x20, 0x2, 0xf, 0x4}}, 0xc) sendmsg$key(0xffffffffffffffff, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="020300001b0000000000000000000000040003000000000000000000000000000000000000000000000000000000000005000600000000"], 0xd8}}, 0x0) write$nci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="500106"], 0x14) 6m16.567324348s ago: executing program 34 (id=314): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000240)=@NCI_OP_CORE_RESET_NTF={0x0, 0x1, 0x3, 0x0, 0x9, {0x45, 0x2, 0x20, 0x2, 0xf, 0x4}}, 0xc) sendmsg$key(0xffffffffffffffff, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="020300001b0000000000000000000000040003000000000000000000000000000000000000000000000000000000000005000600000000"], 0xd8}}, 0x0) write$nci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="500106"], 0x14) 4m47.299052625s ago: executing program 4 (id=1459): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000001c0), 0x3, 0x56a, &(0x7f00000003c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x20) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f0000000100), &(0x7f0000001400)=ANY=[], 0x835, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000240)=ANY=[@ANYBLOB="00fb24010caa0000000000000000000000000000004b63bfa269c3078b68ada79cfe20fca101cc5a0befd84e234da0e91f8574049bd20085228f3c76b490b0ef143bc2bdaad70034b80ecfb36029fb1b2269f082eb956933331e1b369b1e9e38fa1693d95441ad5d14a13fdc394183b9d1e118e1932da53588eea0ebd87c972ec586c4907e955fe97c5bb20a379e6b2d26edb54e225d1c1c1dac931fc76e2d5024d8aa0105556e8e135078e4350518f6a5d04e5ccc6f229e774c7e8f10a58c31d85d7b9874f72d942a695ac3714324a7a52c7f141a8705f16ebf938b3877b92983860fec206cd436"], 0x24, 0x0) 4m46.961135694s ago: executing program 4 (id=1465): r0 = io_uring_setup(0x21dd, &(0x7f00000001c0)={0x0, 0x1fffff, 0x0, 0x2, 0x381}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xd, &(0x7f0000000140)={0x7, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000040)=[{0x0, 0xffffffff00000005}], &(0x7f0000000180)=[0xffffffff, 0x7fffffff, 0x2, 0x6, 0x101, 0x1], 0x7}, 0x20) 4m46.819971102s ago: executing program 4 (id=1466): r0 = io_uring_setup(0x21dd, &(0x7f00000001c0)={0x0, 0x1fffff, 0x0, 0x2, 0x381}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xd, &(0x7f0000000140)={0x7, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000040)=[{0x0, 0xffffffff00000005}], &(0x7f0000000180)=[0xffffffff, 0x7fffffff, 0x2, 0x6, 0x101, 0x1], 0x7}, 0x20) 4m46.819682353s ago: executing program 4 (id=1467): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 4m46.802275154s ago: executing program 4 (id=1468): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000200)) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x141442, 0x38) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$kcm(0x2, 0x5, 0x84) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) syz_mount_image$ext4(&(0x7f0000001d40)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240), 0x1, 0x490, &(0x7f0000000580)="$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") r5 = open(&(0x7f00000001c0)='./bus\x00', 0x4c27e, 0x2) fallocate(r5, 0x0, 0x0, 0x1000f4) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x8) ioprio_set$pid(0x3, 0x0, 0x0) r6 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0xf2de1000) pwritev2(r6, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x57e00}], 0x2, 0x1200, 0x41001, 0x3) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x5c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x4, 0xfff3}, {}, {0xa, 0x2}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffe}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0x8e, 0x1}, {0x6, 0xc0}}}]}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r2, 0x400455c8, 0x0) socket(0x10, 0x803, 0x2) fsetxattr$security_capability(r0, &(0x7f0000000000), &(0x7f0000000040)=@v1={0x1000000, [{0x7}]}, 0xc, 0x3) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @loopback}}}, 0x108) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_debug_messages', 0x42, 0x0) copy_file_range(r7, 0x0, r7, &(0x7f00000000c0)=0xc, 0x3, 0xf00) r8 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r8, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @remote}}}, 0x108) setsockopt$inet_MCAST_MSFILTER(r8, 0x0, 0x30, &(0x7f0000000800)=ANY=[@ANYBLOB="090000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000002000000ac1e000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006e000000000000000000000000000000000000000000000000000000000000000000020000007f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x290) setsockopt$inet_MCAST_MSFILTER(r8, 0x0, 0x30, &(0x7f0000000340)=ANY=[@ANYBLOB="090000000000000002000000e0000002"], 0x110) 4m45.83086919s ago: executing program 4 (id=1473): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82) syz_open_dev$sg(&(0x7f0000000040), 0x80000000002, 0x1) close_range(r1, 0xffffffffffffffff, 0x0) socket$kcm(0x21, 0x2, 0x2) socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000140)={0x4, 0xfffffffffffffc87, 0x27, 0x1, 0x0, 0x0, 0x0, 0x1, 0x18050, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0x6, 0xfff}, 0x1216, 0x10000, 0x80005, 0x0, 0x8, 0x7, 0x3, 0x0, 0x0, 0x0, 0x100000001}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioprio_set$pid(0x2, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000400)={0x18, 0x0, {0x12, @remote, 'lo\x00'}}, 0x1e) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="300000001000010025bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000400080004000006000008001b0000000000"], 0x30}, 0x1, 0x0, 0x0, 0x810}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0xea5bc50b6199d77e) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0xb, 0x1514, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x9, 0x5, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$sndseq(0xffffffffffffff9c, &(0x7f00000021c0), 0x181000) socket(0x840000000002, 0x1, 0xfb) socket$nl_netfilter(0x10, 0x3, 0xc) keyctl$clear(0x3, 0xfffffffffffffffd) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x240b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x3}, 0x0, 0x32, 0x43a1b578, 0x9, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0xc68}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 4m45.675112259s ago: executing program 35 (id=1473): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82) syz_open_dev$sg(&(0x7f0000000040), 0x80000000002, 0x1) close_range(r1, 0xffffffffffffffff, 0x0) socket$kcm(0x21, 0x2, 0x2) socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000140)={0x4, 0xfffffffffffffc87, 0x27, 0x1, 0x0, 0x0, 0x0, 0x1, 0x18050, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0x6, 0xfff}, 0x1216, 0x10000, 0x80005, 0x0, 0x8, 0x7, 0x3, 0x0, 0x0, 0x0, 0x100000001}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioprio_set$pid(0x2, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000400)={0x18, 0x0, {0x12, @remote, 'lo\x00'}}, 0x1e) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="300000001000010025bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000400080004000006000008001b0000000000"], 0x30}, 0x1, 0x0, 0x0, 0x810}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0xea5bc50b6199d77e) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0xb, 0x1514, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x9, 0x5, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$sndseq(0xffffffffffffff9c, &(0x7f00000021c0), 0x181000) socket(0x840000000002, 0x1, 0xfb) socket$nl_netfilter(0x10, 0x3, 0xc) keyctl$clear(0x3, 0xfffffffffffffffd) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x240b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x3}, 0x0, 0x32, 0x43a1b578, 0x9, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0xc68}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 3m40.026890798s ago: executing program 0 (id=2146): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000000)={0x2a, 0x2, 0x7ffe}, 0xc) bind$qrtr(r0, &(0x7f00000000c0)={0x2a, 0x1, 0x4000}, 0xc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000380), r1) sendmsg$NLBL_CIPSOV4_C_LIST(r1, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000c00)={0x1c, r2, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004010}, 0x40000) 3m39.975578731s ago: executing program 0 (id=2148): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioprio_set$pid(0x2, 0x0, 0x0) r0 = fsopen(&(0x7f0000000340)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x86) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f00000005c0)='\"', 0x1, 0x4fed0) sendfile(r2, r2, 0x0, 0xe3aa6ea) 3m39.960712472s ago: executing program 0 (id=2151): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) move_mount(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0/file0\x00', 0x0) 3m39.944939953s ago: executing program 0 (id=2152): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0xc64}, 0x10014, 0x0, 0x800000, 0x0, 0x4, 0x2, 0x6, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000016c0)={@mcast1, @empty, @dev={0xfe, 0x80, '\x00', 0x16}, 0x2, 0x6, 0x8, 0x100, 0x6, 0x100000}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000001c0)={0x0, 0x0}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) brk(0x200000ffc000) 3m39.914005804s ago: executing program 0 (id=2155): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002080)=@newtaction={0x48, 0x30, 0x25, 0x0, 0x0, {}, [{0x34, 0x1, [@m_pedit={0x30, 0x1, 0x0, 0x0, {{0xa}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 3m39.896830526s ago: executing program 0 (id=2156): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) vmsplice(r0, &(0x7f00000004c0)=[{&(0x7f00000008c0)="ff", 0x1}], 0x1, 0x0) (async) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x23}, @printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xe, 0x0, &(0x7f0000000300)="0101000071a78326c799dbe888a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r6}}) splice(r5, 0x0, r3, 0x0, 0xffffffffffff8000, 0x0) (async) write$P9_RLERRORu(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="275d39fe8f000000000021020002"], 0xe) (async) writev(r1, &(0x7f00000004c0)=[{0x0}, {&(0x7f0000000180)="f35949b9", 0x4}], 0x2) (async) r7 = socket$inet_smc(0x2b, 0x1, 0x0) (async) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) (async) r9 = socket(0x1, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000640), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r9}}) (async) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r8, 0xc0406618, &(0x7f0000000100)={@id={0x2, 0x0, @a}}) (async) r10 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x4, &(0x7f00000001c0)=@raw=[@exit, @btf_id={0x18, 0x3, 0x3, 0x0, 0x2}, @generic={0xb7, 0x2, 0x2, 0xfffe, 0x7}], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) (async) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@dellinkprop={0x4c, 0x6d, 0x2ec9b2c728e3c67, 0x70bd2b, 0x25dfdaff, {0x0, 0x0, 0x0, 0x0, 0x41001, 0x2e804}, [@IFLA_PROP_LIST={0x18, 0x34, 0x0, 0x1, [{0x14, 0x35, 'macsec0\x00'}]}, @IFLA_IFNAME={0x14, 0x3, 'veth1_to_bond\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x20000800) setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, &(0x7f0000002400)=@raw={'raw\x00', 0x4001, 0x3, 0x488, 0x1f0, 0x0, 0x148, 0x0, 0x148, 0x3f0, 0x240, 0x240, 0x3f0, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @multicast1, 0x0, 0xff000000, 'ip6tnl0\x00', 'wlan1\x00', {}, {}, 0x88, 0x3, 0x7c}, 0x0, 0x190, 0x1f0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x1, 0x1, 'syz1\x00', 0xc}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [0xffffff00, 0xffffff00, 0x0, 0xffffff00], 0x4e22, 0x4e22, 0x4e20, 0x4e23, 0x8, 0x2, 0x5f4a, 0x100, 0x2}}}, {{@ip={@empty, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 'macvtap0\x00', 'pimreg1\x00', {}, {0xff}, 0xb2e42f315b2af51, 0x1, 0x5}, 0x0, 0x198, 0x200, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x9, 0x5, 0x1, 'syz1\x00'}}, @common=@inet=@dccp={{0x30}, {[0x4e20, 0x4e20], [0x4e23, 0x4e22], 0x2, 0x5, 0x40, 0x1}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1, 0xff, 0x2, 0x2, 'snmp_trap\x00', 'syz0\x00', {0x7}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4e8) 3m24.875048601s ago: executing program 36 (id=2156): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) vmsplice(r0, &(0x7f00000004c0)=[{&(0x7f00000008c0)="ff", 0x1}], 0x1, 0x0) (async) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x23}, @printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xe, 0x0, &(0x7f0000000300)="0101000071a78326c799dbe888a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r6}}) splice(r5, 0x0, r3, 0x0, 0xffffffffffff8000, 0x0) (async) write$P9_RLERRORu(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="275d39fe8f000000000021020002"], 0xe) (async) writev(r1, &(0x7f00000004c0)=[{0x0}, {&(0x7f0000000180)="f35949b9", 0x4}], 0x2) (async) r7 = socket$inet_smc(0x2b, 0x1, 0x0) (async) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) (async) r9 = socket(0x1, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000640), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r9}}) (async) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r8, 0xc0406618, &(0x7f0000000100)={@id={0x2, 0x0, @a}}) (async) r10 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x4, &(0x7f00000001c0)=@raw=[@exit, @btf_id={0x18, 0x3, 0x3, 0x0, 0x2}, @generic={0xb7, 0x2, 0x2, 0xfffe, 0x7}], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) (async) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@dellinkprop={0x4c, 0x6d, 0x2ec9b2c728e3c67, 0x70bd2b, 0x25dfdaff, {0x0, 0x0, 0x0, 0x0, 0x41001, 0x2e804}, [@IFLA_PROP_LIST={0x18, 0x34, 0x0, 0x1, [{0x14, 0x35, 'macsec0\x00'}]}, @IFLA_IFNAME={0x14, 0x3, 'veth1_to_bond\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x20000800) setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, &(0x7f0000002400)=@raw={'raw\x00', 0x4001, 0x3, 0x488, 0x1f0, 0x0, 0x148, 0x0, 0x148, 0x3f0, 0x240, 0x240, 0x3f0, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @multicast1, 0x0, 0xff000000, 'ip6tnl0\x00', 'wlan1\x00', {}, {}, 0x88, 0x3, 0x7c}, 0x0, 0x190, 0x1f0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x1, 0x1, 'syz1\x00', 0xc}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [0xffffff00, 0xffffff00, 0x0, 0xffffff00], 0x4e22, 0x4e22, 0x4e20, 0x4e23, 0x8, 0x2, 0x5f4a, 0x100, 0x2}}}, {{@ip={@empty, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 'macvtap0\x00', 'pimreg1\x00', {}, {0xff}, 0xb2e42f315b2af51, 0x1, 0x5}, 0x0, 0x198, 0x200, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x9, 0x5, 0x1, 'syz1\x00'}}, @common=@inet=@dccp={{0x30}, {[0x4e20, 0x4e20], [0x4e23, 0x4e22], 0x2, 0x5, 0x40, 0x1}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1, 0xff, 0x2, 0x2, 'snmp_trap\x00', 'syz0\x00', {0x7}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4e8) 2m28.823421031s ago: executing program 9 (id=3552): ioctl$AUTOFS_IOC_SETTIMEOUT(0xffffffffffffffff, 0x80049367, &(0x7f00000001c0)=0x7fff) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x74, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300, 0x40000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r1}, @IFLA_EVENT={0x8, 0x2c, 0x6}, @IFLA_PORT_SELF={0x20, 0x19, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x4}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "7c47066079ed5cadb33dec873f43db65"}]}, @IFLA_MTU={0x8, 0x4, 0xa}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000040}, 0x84) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x34, &(0x7f0000000000)='/s/net/ipv4\x00\x00s\x00\x00\x00\x00c_\xe6\xf1e\xf44.\x15\x00\x00\x00\x00wo\x00'/52}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r2) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffffffff, 0xfc}, 0x6220, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={0x44, r4, 0x511, 0x400000, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_bond\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40850}, 0x0) 2m28.729324646s ago: executing program 9 (id=3554): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f00000001c0)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x3ff, @private0, 0x9}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000480)='\r', 0x1}], 0x1}}], 0x1, 0x931766f6319eed40) shutdown(r0, 0x1) getsockopt$bt_hci(r0, 0x84, 0x83, &(0x7f0000001c40)=""/4130, &(0x7f0000000000)=0x913) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x15, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x800007d}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xa8}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x56, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0x1, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000440)={'team0\x00', 0x0}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0x20, &(0x7f00000006c0)={&(0x7f0000000540)=""/206, 0xce, 0x0, &(0x7f0000000640)=""/67, 0x43}}, 0x10) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_tracing={0x1a, 0x1c, &(0x7f0000000740)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x101}, {}, {}, [@jmp={0x5, 0x1, 0xa, 0xb, 0x8, 0xfffffffffffffffd, 0xfffffffffffffffc}, @generic={0x5, 0xd, 0x2, 0x2, 0x9}, @call={0x85, 0x0, 0x0, 0x8a}, @ldst={0x2, 0x1, 0x6, 0x9, 0x2, 0x0, 0xfffffffffffffffc}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8}, @generic={0x4, 0x6, 0x7, 0xffff, 0xf}, @map_idx={0x18, 0x6, 0x5, 0x0, 0x7}, @ringbuf_query], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000840)='GPL\x00', 0x5, 0x39, &(0x7f0000000880)=""/57, 0x40f00, 0x7, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f00000008c0)={0x7, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x20474, 0xffffffffffffffff, 0x5, &(0x7f0000000900)=[0x1, 0x1, 0x1], &(0x7f0000000940)=[{0x3, 0x1, 0xe, 0x1}, {0x2, 0x5, 0x0, 0x1}, {0x5, 0x3, 0x1, 0xc}, {0x0, 0x1, 0x1, 0xa}, {0x5, 0x3, 0xc}], 0x10, 0xfffeffff}, 0x94) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000a80)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000b00)={r0, 0xffffffffffffffff}, 0x4) r10 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0xc04, &(0x7f0000000580), 0x3, 0x448, &(0x7f0000000e40)="$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") r11 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r11, 0x0) fsconfig$FSCONFIG_SET_PATH(r11, 0x3, 0x0, 0x0, r10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000bc0)={{r0, 0xffffffffffffffff}, &(0x7f0000000b40), &(0x7f0000000b80)}, 0x20) r13 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r13, &(0x7f0000000140)='2', 0x1, 0x8080c61) fallocate(r13, 0x3, 0x2, 0x8000c62) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=@base={0x12, 0x9, 0xa82, 0x1, 0x1, 0xffffffffffffffff, 0xf00, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x1c, 0x27, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffff7}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@btf_id={0x18, 0x1, 0x3, 0x0, 0x2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x40}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @ldst={0x0, 0x1, 0x7, 0x5, 0x5, 0x2, 0xfffffffffffffff0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7}, @call={0x85, 0x0, 0x0, 0x21}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='syzkaller\x00', 0x4, 0xe7, &(0x7f0000000340)=""/231, 0x41100, 0x1, '\x00', r5, @fallback=0x2f, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000500)={0x4, 0x3, 0xf, 0xbe}, 0x10, r6, r7, 0x6, &(0x7f0000000c80)=[r8, r9, r11, r12, r13, r14], &(0x7f0000000cc0)=[{0x2, 0x5, 0x3, 0x4}, {0x1, 0x3, 0x8}, {0x4, 0x2, 0x9, 0xc}, {0x3, 0x1, 0xb, 0xb}, {0x2, 0x2, 0xa, 0xa}, {0x5, 0x1, 0xe, 0x5}], 0x10, 0x1}, 0x94) 2m28.344092648s ago: executing program 9 (id=3559): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000000)=0x4, 0x3, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 2m27.439302592s ago: executing program 9 (id=3568): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x3, 0x0, 0x0, 0x0, 0x3ff}, 0x0, 0x0, 0xffffffffffffffff, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) write$UHID_INPUT2(r0, &(0x7f0000003200)=ANY=[], 0x41) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$poke(0x420f, r1, 0x0, 0x1) r2 = perf_event_open(&(0x7f0000000580)={0x5, 0x80, 0xec, 0xa, 0x40, 0x7, 0x0, 0x0, 0xd000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x2, @perf_bp={0x0, 0x2}, 0x986, 0xfc, 0x4, 0x9, 0x81, 0x9, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x24208, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0xda5, 0x5}, 0x0, 0x8}, 0x0, 0xffffffffffffffff, r2, 0x0) perf_event_open(&(0x7f0000000580)={0x5, 0x80, 0xec, 0x7, 0x40, 0x8, 0x0, 0x0, 0xd000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x2, @perf_bp={0x0, 0x2}, 0x986, 0xfc, 0x4, 0x0, 0x81, 0x9, 0x81, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4016, &(0x7f0000000780)={[{@dioread_nolock}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@noauto_da_alloc}, {@lazytime}, {@grpjquota}, {@quota}]}, 0x1, 0x43c, &(0x7f0000000280)="$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") socket$igmp6(0xa, 0x3, 0x2) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2000, 0x2dd8806920477201, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x80044940, 0x0) r5 = openat$misdntimer(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x80044940, 0x0) syz_mount_image$msdos(&(0x7f00000003c0), &(0x7f0000000340)='.\x00', 0x126a4b5, &(0x7f0000000400)=ANY=[@ANYRESDEC, @ANYBLOB="668bbc76be2486287eb89ce25f354a37ce3bbc4df2d0aa9c43ce1f015fded314df04950610efa618e46e3b6b62f1f7c59edc4785e4568fbe7d5b8623947ef72911676265f6aecfbd86c8dc64bd826e1b7f78e68d757b60f77453d1ed5f1324bc8a3339acd12db25178bf336db652dc36d677739f9fc68f55327dbeafdb633b0b214e2c1b3ac7a9cee91ea716247e5a051c6712916356a7b97496b398b8a6a9ead0c644e45c923d"], 0x5, 0x0, &(0x7f0000000000)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f00000cac40)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f00000cb040)={0xffffffffffff1ad0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x4, "e2bc60e69ec3c0"}) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_clone3(&(0x7f0000000080)={0x801400, &(0x7f0000000040), 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$urandom(0xffffffffffffff9c, &(0x7f0000000100), 0x20000, 0x0) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x880) syz_io_uring_setup(0x4172, &(0x7f0000000780)={0x0, 0x4f5c, 0x10100}, &(0x7f00000000c0), &(0x7f0000000140)) 2m25.541183002s ago: executing program 9 (id=3594): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r3, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r2, 0x0}]) write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600]}}], 0xffc8) lseek(r0, 0x289e0cb5, 0x0) r4 = socket(0x200000000000011, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) 2m24.699750651s ago: executing program 9 (id=3607): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x304}, "b39625e03be22ead", "8da0640c9e8f6b81143f1a1a6d81ee2b", "3b0e7088", "19a4216dfdbf6602"}, 0x28) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x1, 0x2, 0x107fff, 0x10, 0x4, 0x8000009, 0x200000a4, 0xffb, 0x7, 0xb6b, 0x800c1, 0x4, 0x4, 0x3, 0x9, 0xff, 0x1000, 0xc, 0x3, 0x3, 0x90000000, 0xfffffffa, 0x0, 0x1, 0x9, 0x4, 0xfffffffc, 0x5, 0x100000, 0x762, 0x3, 0x63c, 0xe, 0x6, 0x100, 0x6, 0x1bfe, 0xc, 0x40, 0x40bed4, 0x8, 0x6, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x5, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xa, 0x1fa0860a, 0x7, 0x0, 0x81, 0x2, 0x17ffff, 0x4003, 0x6f9f, 0x5, 0x9c56, 0x3, 0x400, 0x2, 0x1, 0x9, 0x80000004, 0x7, 0x4009, 0x80000000, 0x4, 0x100002, 0x8, 0xc, 0x0, 0x3, 0x0, 0x10000, 0x3f6, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0xffeffffe, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x4, 0x20006, 0xc50, 0x2, 0xb, 0x2, 0xd9a, 0x100, 0x2a2, 0xfffffffd, 0x2, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x20000008, 0x3be, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x3, 0x101, 0x1ff, 0xffffffff]}}) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 2m24.699575141s ago: executing program 37 (id=3607): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x304}, "b39625e03be22ead", "8da0640c9e8f6b81143f1a1a6d81ee2b", "3b0e7088", "19a4216dfdbf6602"}, 0x28) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x1, 0x2, 0x107fff, 0x10, 0x4, 0x8000009, 0x200000a4, 0xffb, 0x7, 0xb6b, 0x800c1, 0x4, 0x4, 0x3, 0x9, 0xff, 0x1000, 0xc, 0x3, 0x3, 0x90000000, 0xfffffffa, 0x0, 0x1, 0x9, 0x4, 0xfffffffc, 0x5, 0x100000, 0x762, 0x3, 0x63c, 0xe, 0x6, 0x100, 0x6, 0x1bfe, 0xc, 0x40, 0x40bed4, 0x8, 0x6, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x5, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xa, 0x1fa0860a, 0x7, 0x0, 0x81, 0x2, 0x17ffff, 0x4003, 0x6f9f, 0x5, 0x9c56, 0x3, 0x400, 0x2, 0x1, 0x9, 0x80000004, 0x7, 0x4009, 0x80000000, 0x4, 0x100002, 0x8, 0xc, 0x0, 0x3, 0x0, 0x10000, 0x3f6, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0xffeffffe, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x4, 0x20006, 0xc50, 0x2, 0xb, 0x2, 0xd9a, 0x100, 0x2a2, 0xfffffffd, 0x2, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x20000008, 0x3be, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x3, 0x101, 0x1ff, 0xffffffff]}}) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 23.034655937s ago: executing program 3 (id=5499): openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x10, 0xf}}, [@qdisc_kind_options=@q_mq={0x7}, @TCA_RATE={0x6, 0x5, {0x3, 0x6}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 21.846863576s ago: executing program 3 (id=5513): socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet6(0xa, 0x2, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x2000000000000) poll(&(0x7f0000000080)=[{r3, 0x2104}], 0x1, 0x35aa) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x1e, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x9, 0xb, &(0x7f0000000000)=@framed={{}, [@printk={@lx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f0000000c40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00'}) socket$nl_route(0x10, 0x3, 0x0) 20.897182521s ago: executing program 3 (id=5531): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000780)={&(0x7f0000000840)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2f}}, 0x10, 0x0, 0x0, &(0x7f0000000940)=[@ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_retopts={{0x10}}], 0x28}, 0x4000000) 20.840841705s ago: executing program 3 (id=5532): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000002c0)={[{@noauto_da_alloc}, {@jqfmt_vfsold}, {@noquota}, {@norecovery}, {}]}, 0x1, 0x4be, &(0x7f0000000540)="$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") r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) 20.774919568s ago: executing program 3 (id=5535): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f0000008309"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) openat2(0xffffffffffffff9c, 0x0, &(0x7f00000000c0)={0x20900, 0x16a, 0x19}, 0x31) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_usb_control_io$hid(r0, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) 19.919102078s ago: executing program 3 (id=5548): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000000100)={'sit0\x00', 0x0}) 19.89330364s ago: executing program 38 (id=5548): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000000100)={'sit0\x00', 0x0}) 3.08996141s ago: executing program 7 (id=5869): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x30}, 0xc) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x4, @empty, 0x4}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) ioctl$FS_IOC_RESVSP(r1, 0x4030582b, &(0x7f00000001c0)={0x1100, 0x1, 0x8000000000000, 0x3, 0x0, 0xfdfd}) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000140)=0xfffffff9) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r1, 0x0, 0x98, 0x52, &(0x7f0000000280)="0265367bd9cab04653b09a826e9ee8fcc427fc535a1edeb05c54deb010ec8af3dccbe28a58dd36b1b49a3b0dee601cd06542ff4e5437ef5352cc603be5307dae182f3ec418730e9b0063b7ea49eb03777705fa519cd634fe85946fa9213cbe9197d42b842e2898edf32ebaa5588c83fd9fbbb6fc427b24579f5fd3623ca5b1af53cd830ebff86447fd1229596192e2e3353e061e71504867", &(0x7f0000000100)=""/82, 0x4, 0x0, 0x0, 0x7f, 0x0, &(0x7f0000000480)="8d9f6db0011912a815adeb87efe620f7316baf5b471c23d102f223397b9ff47c80a3a6377b618821d61eb8a34b815246f11f2d1839d589d0e95aa428eb7799aa7231e5b6ec7c1caab0ed341fbb6c7da1d0d5c4a6b53de45ed7daf60d766abd2ac0b36a4589510256c296231fdb194ef3ce5c6a2df14a2ee919db2d6e90bfee", 0x2, 0x0, 0x1000}, 0x50) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000c80)="7cffa9061b2f8b082b6f69ae50430c8a8b6aa3162ba083c4a52e1ab0ac50ed4a19b1a69988000d5bed4433daaa4932dbb1cb3550dee8b23579d76ce37d574b43fca1eed8ebd38d1303240ed0d84517692128dd5aef5c4d60a6659952a1437c6f0ac3ed75806011ccbaa504f41a7e0abcf8823bc4a71ef8c52c2b297b539eaf752c56ebfe9b0542543069257dafcbf76c958d4cbf4eaaa67c5c2bd9e6518be34b56add7613ab83d389724b664e62c154e1a5aac073a53a0e8cadcf51ef495ebbcc77d5e36ff24c3f282289cc077374b714e08fbfecbdc8f14ef3fd409af4caf6fcb7d663beab335f239a1e93b399c93d7c036e1b39a7c477945f82b6dde53b1c21b590a58ba688ac4fb530d2c5b1195a127d2eaec840ab59f090d7047c278611e080cebe7b28588c11a44be99fe6f88c73441bf625b70565669997f4c3cda5afe1d6429908a69a459d35ba8c2f28076d8711f2667de749a783fac94ebd02680f20fb723c35c287a1f45064846385750665ffa74579083fbb1b1d6b7c90168252b1c5313544569203e7adb8e271a94f7413e5cfd6aa3157c4fc29bddba3683fcd032aecb513b2f27530fbefa0000000000000003c058e812d8db87de5e3eceae268b91f7d59daf77646fa4df99877dd5a9540934c7af91b96486eea62897be6acbe1bae8e46b112f1385e7cea9e4daccc6f1b98ce3b4322af8299a45ddcb5be8d3e469fdde9896ca324a2f3c88c616a7dccde331698ce2d39f96220251011b4dfbec953b5c30e94adb5586cec0af234859805bb7df1101ae80318ff127e913178d79cfa918d54585b6184255e872e2dc33a5c7c30a756bbd63c32a3e6a22863781747d185acb64583976c4289394d642b07d18e2932d0a78bd2ccf92b3e94e82f1e9239fa272402f4c9efcf068709a44d6f652a4f23df89f9a15e6bf0c7e65d8f3e32c35e83d30298074d16cb5ff4ded1df81009bbae888fceb9a8109ba319605e1776e52d2069b5cd7de07cf8dc488ba6a9c7559ff49674a490991f323736f302004007d0ccf2e5eaceac6b56f48f2b00592d7a378f118d8b3e5ecd2035c8252374c91bc79cf26ac11ddffe2c09e1aa032da0713732387f950e3f4e301eb1d26e5a2b19318e50d555c832e279894d8c9b03e8940738c0fe391b29907d0d5f9214d6e697a19247f4e8221aca2ac47debd7c45b8344941cbecbaf44af343b24a4f88caf207d72002fb8b7d156997cb7275f535e6a9d6480046246e60bea0cf6f54abc69ff9418b6cb9301eb6890227215b633a886fb13c89698e51e482c42ca99613b20e22e5ce15272f5bda8b18cf53d49130a94135dd8a9692c", 0x34000, 0xbcff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080), 0xc) writev(r0, &(0x7f0000000380)=[{&(0x7f00000000c0)='l', 0x1}], 0x1) 2.996845706s ago: executing program 2 (id=5872): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r2 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace(0x8, r2) r3 = syz_pidfd_open(r2, 0x0) process_mrelease(r3, 0x700000000000000) 2.438887948s ago: executing program 6 (id=5882): r0 = socket$caif_stream(0x25, 0x1, 0x4) sendto(r0, 0x0, 0x0, 0x8000, 0x0, 0x0) 2.438645608s ago: executing program 6 (id=5883): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) listen(r1, 0x0) close(r1) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r3, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) syz_emit_ethernet(0x82, &(0x7f00000001c0)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0xfe, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x1, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @rand_addr, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x3, 0x2}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@multicast1=0xe0000006}, {@dev}, {@dev}, {@remote}, {@private}, {@remote}, {@local, 0x7}]}]}}}}}}}, 0x0) 2.387937601s ago: executing program 1 (id=5884): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x35}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8}, 0x94) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x804810, &(0x7f0000000200)={[{@jqfmt_vfsv0}, {@i_version}]}, 0x22, 0x75d, &(0x7f0000000b00)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40000000000800061114c00000000008510000002000000850000000000000095000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0xce, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x70) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) memfd_create(0xfffffffffffffffe, 0x1d) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x1c3) r2 = open(&(0x7f0000000000)='./file1\x00', 0x817039935f68c997, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ftruncate(r2, 0x2007ffb) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0xa7, 0x0) syz_open_dev$rtc(0x0, 0x9, 0x10000) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="180000005600230d0000000000000000070000007a745b89eb78ab97f7e07e1b740d32eb850b4458c67c21e9da42f244bf89a54fc1cc2f67be33c8eddda5004f7a989218adfd632a21710755fa74be2cab77df6e73656a02e51909e06e6c81e50e73b8a627aa1b061617f690de76db90c00f9937328997a5466e7189637d861b3123f82bd874b010bff02fc9d7ce23639453143a7d1a2f5264b5", @ANYRES32=0x0], 0x18}}, 0x4040000) chdir(&(0x7f0000000240)='./file0\x00') r5 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0), 0x82002, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pwritev2(r5, &(0x7f0000000440)=[{&(0x7f0000000340)="7f96f3", 0x3}], 0x1, 0x148a233c, 0x0, 0x1) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r6, 0x107, 0x13, 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.155344904s ago: executing program 6 (id=5895): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000019c0)=@filter={'filter\x00', 0xe, 0x6, 0x90, [0x0, 0x200000001080, 0x2000000013b4, 0x2000000016b0], 0x0, 0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="10000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000000000000000000000000000e9ffffffffffffff0000000000000000004000000000000002000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000800000004000000ffffffff00000000"]}, 0x108) 1.875027311s ago: executing program 7 (id=5887): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000001}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x6, @remote, 0x2}}, 0x0, 0x0, 0x6, 0x0, "3f114438efdaca16d374b49a365be44d5e860ea3ba676c0b5047b80e2c3535d5bd9db3c8572560f4d1be5cd41f7716082ee3589f099942e6f1c395ddb8160381baadf27900"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x0, 0x20000000, @remote}}, 0x0, 0x0, 0x0, 0x0, "ddfd3b7ed7c6a1c172a987ae5ce3cafd64c9a736831a5912d606798fb75c9981c4b3ac0e06891ff18bc5543ed57215a3c45f9154dfa319e52a15a2b9acf80c07fb1a854dad742eef6187f2304844c296"}, 0xd8) sendto$inet6(r0, 0x0, 0x0, 0x20004002, &(0x7f0000b63fe4)={0xa, 0x2, 0x80000000}, 0x1c) prlimit64(0x0, 0xe, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@nobarrier}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r3, &(0x7f00000001c0)="f1", 0x1) sendfile(r3, r1, 0x0, 0x40001) sendfile(r3, r2, 0x0, 0x7ffff000) 1.854920132s ago: executing program 6 (id=5888): unshare(0x22020600) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r0, &(0x7f0000000200)={0x2, @none={0x0, 0xffff}}, 0x14) 1.53988607s ago: executing program 6 (id=5889): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) syz_genetlink_get_family_id$SEG6(&(0x7f0000000180), r0) sendmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000002c0)="bc", 0x1}], 0x1, &(0x7f0000000700)=ANY=[@ANYBLOB="10"], 0x10}}], 0x1, 0x440440c4) 1.407072498s ago: executing program 1 (id=5891): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0xffff, @ipv4={'\x00', '\xff\xff', @local}, 0x80000000}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) ioctl$sock_SIOCGSKNS(r1, 0x894c, &(0x7f00000002c0)=0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000ffffffff00000000000000001801000011646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.406775338s ago: executing program 8 (id=5892): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f00000000c0)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711639000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) unshare(0x2c020400) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x200, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 1.316649643s ago: executing program 2 (id=5893): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000010000000000000000003a008500000087000000850000000500000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x28, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 722.662448ms ago: executing program 7 (id=5894): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x8}, {0x4}}]}, 0x34}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004cc311ec8500000075000000a70000000800000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = socket(0x1e, 0x4, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000800)={r3, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000240)="b9ff030768441a8cb89e14f00800e075702b1c1d23f4347dfde4a10fa01ebdf22117", 0x0, 0x4, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x401, 0xfffffffe, 0x0, 0xffffffff}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x14, 0x0, 0x401, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) close(r2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0xc4}, 0x4000810) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r8 = gettid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010028bd7000ffdbdf2514000000080001000100000008001c00", @ANYRES32=r8, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) 659.002262ms ago: executing program 7 (id=5896): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vti={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VTI_REMOTE={0x8, 0x5, @remote}, @vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r2}]]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040080}, 0x0) 658.699802ms ago: executing program 7 (id=5897): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newtaction={0x68, 0x30, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2, 0x1, 0x4, 0x8be6, 0x5}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) 658.314092ms ago: executing program 7 (id=5898): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{}, 0x0, &(0x7f0000000180)}, 0x20) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1}, 0x6e) listen(r0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(r2, 0x0, 0x0) connect$unix(r1, 0x0, 0x0) accept4(r0, 0xfffffffffffffffd, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x2000c015}, 0x2404c8c0) pipe(&(0x7f0000000540)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x7f, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41100, 0x39, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0xa, 0x200008, 0x5, 0x1ffff}, 0x10, 0x0, r5, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r4], 0x4c}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000001000010025bdce00ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="3a2906000300000008001b000000"], 0x28}, 0x1, 0x0, 0x0, 0x40845}, 0x4000000) 526.09729ms ago: executing program 6 (id=5899): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000880), 0x3) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x88d0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000180)=@gcm_128={{0x303}, "ab97d464109a85a4", "236c298d71cb4ee92f49ca79eb8df6ae", "0200", "58d4534a3f9014e2"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) 492.541541ms ago: executing program 8 (id=5900): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180500000000000000000000000000001800000020696c2500000000002020207b0af8ff00000000bd510000000000000701000000feffffb702000008000000b703000000000000850000001900000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x20, &(0x7f0000003e40)=""/222}, 0x94) 398.814547ms ago: executing program 1 (id=5901): socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket(0x10, 0x803, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet(0x2b, 0x801, 0x0) socket$packet(0x11, 0x2, 0x300) socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x70bd2d, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x20, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x7}}}}]}]}, 0x70}}, 0x20040000) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) 361.521829ms ago: executing program 1 (id=5902): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x1, 0x20d}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x800, 0x2, 0x1, 0xb, 0x0, 0x7}, 0x20) 356.269529ms ago: executing program 2 (id=5903): ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)={[{0x2b, 'cpu'}]}, 0x5) openat$cgroup_int(r0, &(0x7f0000000180)='cpu.weight\x00', 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r3, &(0x7f0000000180)='cpu.weight\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f00000001c0)={[{0x2d, 'cpu'}]}, 0x5) 337.94257ms ago: executing program 1 (id=5904): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000180)={0x29}, 0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7010fddbdf2505000000080009000200000008000c00a80a0000060001000500000008000b"], 0x3c}}, 0x20000034) 262.070615ms ago: executing program 2 (id=5905): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f0000000040)=0x8005, 0x4) 261.228735ms ago: executing program 2 (id=5906): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000850000002300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x18000000000002a0, 0x36, 0x0, &(0x7f0000000000)="b9ffed306844248cb89614f086dd3bb0e02218db259c4cef446601213aabce4ff0d48bb80eaeff32f950c639ab160f8d562a872399ea", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 238.612286ms ago: executing program 1 (id=5907): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000001}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x6, @remote, 0x2}}, 0x0, 0x0, 0x6, 0x0, "3f114438efdaca16d374b49a365be44d5e860ea3ba676c0b5047b80e2c3535d5bd9db3c8572560f4d1be5cd41f7716082ee3589f099942e6f1c395ddb8160381baadf27900"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x0, 0x20000000, @remote}}, 0x0, 0x0, 0x0, 0x0, "ddfd3b7ed7c6a1c172a987ae5ce3cafd64c9a736831a5912d606798fb75c9981c4b3ac0e06891ff18bc5543ed57215a3c45f9154dfa319e52a15a2b9acf80c07fb1a854dad742eef6187f2304844c296"}, 0xd8) sendto$inet6(r0, 0x0, 0x0, 0x20004002, &(0x7f0000b63fe4)={0xa, 0x2, 0x80000000}, 0x1c) prlimit64(0x0, 0xe, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@nobarrier}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r3, &(0x7f00000001c0)="f1", 0x1) sendfile(r3, r1, 0x0, 0x40001) sendfile(r3, r2, 0x0, 0x7ffff000) 207.942848ms ago: executing program 2 (id=5908): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40000, &(0x7f0000000180)={0xa, 0x4e20, 0x8001, @loopback, 0x5}, 0x1c) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3}, 0x80) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002d80)={r4, r3, 0x25, 0x8, @void}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x800) r6 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r6, 0x0, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800) 116.452694ms ago: executing program 8 (id=5909): socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000180)="a2", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f00000001c0)={'nat\x00', 0x0, 0x0, 0x90, [0x4, 0x80, 0xffffffffffffffc0, 0xfff, 0xfffffffffffffff7, 0xd], 0x0, 0x0, 0x0}, &(0x7f0000000240)=0x108) 82.835255ms ago: executing program 8 (id=5910): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}}, 0x24}}, 0x0) 19.111289ms ago: executing program 8 (id=5911): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0xffff, @ipv4={'\x00', '\xff\xff', @local}, 0x80000000}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000ffffffff00000000000000001801000011646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 8 (id=5912): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000180)=0x3a7c, 0x4) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @empty}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000040)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x10000}], 0x1, 0x40000020, 0x0) kernel console output (not intermixed with test programs): t sctp_assoc_value instead [ 334.986674][T18192] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.014723][T16038] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 335.053768][ T52] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.072879][T18299] siw: device registration error -23 [ 335.083730][ T52] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.116069][T18304] __nla_validate_parse: 2 callbacks suppressed [ 335.116084][T18304] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4174'. [ 335.135461][ T52] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.156517][ T52] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.192900][T18307] loop2: detected capacity change from 0 to 2048 [ 335.255239][T18310] usb usb7: usbfs: process 18310 (syz.3.4175) did not claim interface 0 before use [ 335.328809][T18307] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 335.400931][T18307] ext4 filesystem being mounted at /93/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 335.476140][T18307] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.4172: corrupted xattr block 128: overlapping e_value [ 335.494542][T18328] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18328 comm=syz.6.4179 [ 335.501144][T18321] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18321 comm=syz.7.4178 [ 335.539701][T18307] EXT4-fs (loop2): Remounting filesystem read-only [ 335.545621][T18328] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4179'. [ 335.546434][T18307] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 335.555312][T18328] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4179'. [ 335.610139][T18307] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 335.619352][T18307] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 335.655044][T16038] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 335.712380][T18337] Cannot find del_set index 4 as target [ 335.728583][T18338] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4181'. [ 335.971771][T18349] siw: device registration error -23 [ 335.980081][T18349] loop2: detected capacity change from 0 to 128 [ 335.995166][T18349] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 336.031777][T18349] ext4 filesystem being mounted at /95/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 336.067147][T18349] EXT4-fs warning (device loop2): verify_group_input:137: Cannot add at group 5 (only 1 groups) [ 336.157777][T18355] sctp: [Deprecated]: syz.6.4186 (pid 18355) Use of int in max_burst socket option. [ 336.157777][T18355] Use struct sctp_assoc_value instead [ 336.234402][T16038] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 336.277333][ T2965] IPVS: starting estimator thread 0... [ 336.364207][T18368] IPVS: using max 2208 ests per chain, 110400 per kthread [ 336.480788][T18377] netlink: 4580 bytes leftover after parsing attributes in process `syz.2.4195'. [ 336.490087][T18377] netlink: 4580 bytes leftover after parsing attributes in process `syz.2.4195'. [ 336.549227][T18377] netlink: 4580 bytes leftover after parsing attributes in process `syz.2.4195'. [ 336.558517][T18377] netlink: 4580 bytes leftover after parsing attributes in process `syz.2.4195'. [ 336.680227][T18388] 9p: Bad value for 'rfdno' [ 336.694496][T18386] Cannot find del_set index 4 as target [ 336.905663][T18406] siw: device registration error -23 [ 336.979598][T18397] loop3: detected capacity change from 0 to 128 [ 336.991907][T18397] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 337.036574][T18414] IPVS: length: 11 != 8 [ 337.079775][T18397] ext4 filesystem being mounted at /13/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 337.190576][T18397] EXT4-fs warning (device loop3): verify_group_input:137: Cannot add at group 5 (only 1 groups) [ 337.218108][T18417] netlink: 'syz.2.4208': attribute type 3 has an invalid length. [ 337.226013][T18417] netlink: 13435 bytes leftover after parsing attributes in process `syz.2.4208'. [ 337.246452][T18421] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4210'. [ 337.586920][T18428] geneve2: entered promiscuous mode [ 337.592205][T18428] geneve2: entered allmulticast mode [ 337.616193][T14218] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 337.633538][T14218] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 337.660304][T14218] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 337.669771][T14218] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 337.772867][T18036] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 337.779146][T18438] loop6: detected capacity change from 0 to 128 [ 337.881142][T18438] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 337.903100][T18438] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 337.918804][T18438] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 337.928098][T18438] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 338.370984][T18471] sctp: [Deprecated]: syz.2.4229 (pid 18471) Use of int in maxseg socket option. [ 338.370984][T18471] Use struct sctp_assoc_value instead [ 338.509387][T17713] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 338.555779][T18471] sctp: [Deprecated]: syz.2.4229 (pid 18471) Use of int in max_burst socket option. [ 338.555779][T18471] Use struct sctp_assoc_value instead [ 339.125254][T18514] bond5: option broadcast_neighbor: invalid value (30) [ 339.157297][T18514] bond5 (unregistering): Released all slaves [ 339.577473][T18528] x_tables: duplicate underflow at hook 1 [ 339.758471][T18538] loop6: detected capacity change from 0 to 1024 [ 339.788402][T18538] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 339.840682][T18538] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 339.905473][ T29] kauditd_printk_skb: 698 callbacks suppressed [ 339.911733][ T29] audit: type=1326 audit(1769431377.693:17531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18546 comm="syz.8.4255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcb501aeb9 code=0x7ffc0000 [ 339.935457][ T29] audit: type=1326 audit(1769431377.693:17532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18546 comm="syz.8.4255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcb501aeb9 code=0x7ffc0000 [ 339.996976][T18538] EXT4-fs error (device loop6): ext4_free_blocks:6728: comm syz.6.4252: Freeing blocks not in datazone - block = 0, count = 16 [ 340.047871][T17713] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 340.119134][ T29] audit: type=1326 audit(1769431377.743:17533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18546 comm="syz.8.4255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=151 compat=0 ip=0x7fbcb501aeb9 code=0x7ffc0000 [ 340.142989][ T29] audit: type=1326 audit(1769431377.743:17534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18546 comm="syz.8.4255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcb501aeb9 code=0x7ffc0000 [ 340.166743][ T29] audit: type=1326 audit(1769431377.743:17535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18546 comm="syz.8.4255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcb501aeb9 code=0x7ffc0000 [ 340.513771][T18569] __nla_validate_parse: 3 callbacks suppressed [ 340.513791][T18569] netlink: 272 bytes leftover after parsing attributes in process `syz.7.4263'. [ 340.640836][T18582] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4266'. [ 340.729093][ T29] audit: type=1326 audit(1769431378.513:17536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18586 comm="syz.7.4268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa78c74aeb9 code=0x7ffc0000 [ 340.775102][ T29] audit: type=1326 audit(1769431378.533:17537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18586 comm="syz.7.4268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa78c74aeb9 code=0x7ffc0000 [ 340.799307][ T29] audit: type=1326 audit(1769431378.533:17538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18586 comm="syz.7.4268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa78c74aeb9 code=0x7ffc0000 [ 340.823058][ T29] audit: type=1326 audit(1769431378.533:17539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18586 comm="syz.7.4268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fa78c74aeb9 code=0x7ffc0000 [ 340.846770][ T29] audit: type=1326 audit(1769431378.533:17540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18586 comm="syz.7.4268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa78c74ac22 code=0x7ffc0000 [ 341.428666][ T9115] IPVS: starting estimator thread 0... [ 341.524224][T18619] IPVS: using max 2208 ests per chain, 110400 per kthread [ 341.544477][T18625] vlan2: entered allmulticast mode [ 341.549678][T18625] macvlan0: entered allmulticast mode [ 341.555405][T18625] veth1_vlan: entered allmulticast mode [ 341.877870][T18638] FAULT_INJECTION: forcing a failure. [ 341.877870][T18638] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 341.891365][T18638] CPU: 1 UID: 0 PID: 18638 Comm: syz.7.4285 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 341.891400][T18638] Tainted: [W]=WARN [ 341.891407][T18638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 341.891419][T18638] Call Trace: [ 341.891436][T18638] [ 341.891446][T18638] __dump_stack+0x1d/0x30 [ 341.891478][T18638] dump_stack_lvl+0x95/0xd0 [ 341.891511][T18638] dump_stack+0x15/0x1b [ 341.891531][T18638] should_fail_ex+0x263/0x280 [ 341.891638][T18638] should_fail+0xb/0x20 [ 341.891675][T18638] should_fail_usercopy+0x1a/0x20 [ 341.891784][T18638] _copy_from_user+0x1c/0xb0 [ 341.891847][T18638] ___sys_sendmsg+0xc1/0x1e0 [ 341.891889][T18638] __x64_sys_sendmsg+0xd4/0x160 [ 341.891917][T18638] x64_sys_call+0x17ba/0x3000 [ 341.892029][T18638] do_syscall_64+0xc0/0x2a0 [ 341.892082][T18638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.892138][T18638] RIP: 0033:0x7fa78c74aeb9 [ 341.892159][T18638] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 341.892184][T18638] RSP: 002b:00007fa78b1a7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 341.892211][T18638] RAX: ffffffffffffffda RBX: 00007fa78c9c5fa0 RCX: 00007fa78c74aeb9 [ 341.892230][T18638] RDX: 0000000000000010 RSI: 0000200000000080 RDI: 0000000000000003 [ 341.892258][T18638] RBP: 00007fa78b1a7090 R08: 0000000000000000 R09: 0000000000000000 [ 341.892273][T18638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 341.892315][T18638] R13: 00007fa78c9c6038 R14: 00007fa78c9c5fa0 R15: 00007ffe9785c8a8 [ 341.892342][T18638] [ 342.358934][T18642] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4287'. [ 342.397694][T18644] Cannot find del_set index 4 as target [ 342.587071][T18655] futex_wake_op: syz.2.4293 tries to shift op by 36; fix this program [ 342.587162][T18648] loop6: detected capacity change from 0 to 2048 [ 342.662023][T18657] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18657 comm=syz.7.4294 [ 342.682171][T18648] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 342.695084][T18665] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4296'. [ 342.705666][T18657] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4294'. [ 342.714856][T18657] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4294'. [ 342.740999][T18648] ext4 filesystem being mounted at /51/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 342.843426][T18673] SELinux: Context system_u:object_r:cron_spool_t:s0 is not valid (left unmapped). [ 342.895971][T18675] loop7: detected capacity change from 0 to 256 [ 342.915229][T18677] loop2: detected capacity change from 0 to 512 [ 342.928189][T18675] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 342.944723][T18648] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #15: comm syz.6.4290: corrupted xattr block 128: overlapping e_value [ 342.958975][T18648] EXT4-fs (loop6): Remounting filesystem read-only [ 342.965606][T18648] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 342.980582][T18677] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 343.024488][T18648] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 343.059703][T18677] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 343.075249][T18648] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 343.100773][T18682] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 343.109413][T18682] FAT-fs (loop7): Filesystem has been set read-only [ 343.127783][T18677] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.4299: bg 0: block 248: padding at end of block bitmap is not set [ 343.163210][T17713] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 343.176795][T18677] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.4299: Failed to acquire dquot type 1 [ 343.210354][T18677] EXT4-fs (loop2): 1 truncate cleaned up [ 343.217301][T18677] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 343.701257][T16038] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 343.750085][T18692] loop7: detected capacity change from 0 to 128 [ 343.781764][T18692] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 343.800611][T18692] ext4 filesystem being mounted at /43/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 343.865458][T18701] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4308'. [ 343.903514][T18692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 343.929138][T18703] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4309'. [ 343.938248][T18703] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4309'. [ 343.960295][T18706] netlink: 348 bytes leftover after parsing attributes in process `syz.6.4310'. [ 343.964536][T18692] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 344.064234][T18708] loop2: detected capacity change from 0 to 2048 [ 344.102192][T18708] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 344.124538][T18708] ext4 filesystem being mounted at /124/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 344.253276][T18722] tipc: Enabling of bearer rejected, failed to enable media [ 344.264896][T18708] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.4312: corrupted xattr block 128: overlapping e_value [ 344.316231][T18708] EXT4-fs (loop2): Remounting filesystem read-only [ 344.322799][T18708] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 344.341381][T18708] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 344.395629][T18708] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 344.435064][T16038] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.506427][T18736] netlink: 'syz.2.4321': attribute type 1 has an invalid length. [ 344.579200][T18738] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 344.589630][T18738] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 344.602753][T17833] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 344.671210][T18738] bond1: (slave ip6gre1): making interface the new active one [ 344.680253][T18738] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 344.751627][T18736] bond1: option fail_over_mac: unable to set because the bond device has slaves [ 345.125874][T18744] Cannot find del_set index 4 as target [ 345.213844][ T29] kauditd_printk_skb: 247 callbacks suppressed [ 345.213863][ T29] audit: type=1326 audit(1769431382.993:17786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18743 comm="syz.2.4323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb60dfaeb9 code=0x7ffc0000 [ 345.318345][ T29] audit: type=1326 audit(1769431383.033:17787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18743 comm="syz.2.4323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb60dfaeb9 code=0x7ffc0000 [ 345.342122][ T29] audit: type=1326 audit(1769431383.033:17789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18743 comm="syz.2.4323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdb60dfaeb9 code=0x7ffc0000 [ 345.365975][ T29] audit: type=1326 audit(1769431383.033:17788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18743 comm="syz.2.4323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb60dfaeb9 code=0x7ffc0000 [ 345.389981][ T29] audit: type=1326 audit(1769431383.033:17791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18743 comm="syz.2.4323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb60dfaeb9 code=0x7ffc0000 [ 345.413649][ T29] audit: type=1326 audit(1769431383.033:17790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18743 comm="syz.2.4323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb60dfaeb9 code=0x7ffc0000 [ 345.438543][ T29] audit: type=1326 audit(1769431383.033:17792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18743 comm="syz.2.4323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb60dfaeb9 code=0x7ffc0000 [ 345.462165][ T29] audit: type=1326 audit(1769431383.033:17793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18743 comm="syz.2.4323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb60dfaeb9 code=0x7ffc0000 [ 345.485831][ T29] audit: type=1326 audit(1769431383.033:17794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18743 comm="syz.2.4323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb60dfaeb9 code=0x7ffc0000 [ 345.509545][ T29] audit: type=1326 audit(1769431383.033:17795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18743 comm="syz.2.4323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdb60dfaeb9 code=0x7ffc0000 [ 345.565025][T18747] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4325'. [ 345.574117][T18747] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4325'. [ 345.705153][T18768] loop2: detected capacity change from 0 to 2048 [ 345.761092][T18768] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 345.805662][T18768] ext4 filesystem being mounted at /128/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 345.841065][T18768] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.4331: corrupted xattr block 128: overlapping e_value [ 345.855173][T18768] EXT4-fs (loop2): Remounting filesystem read-only [ 345.861719][T18768] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 345.870939][T18768] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 345.880386][T18768] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 345.902413][T16038] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.085990][T18801] loop2: detected capacity change from 0 to 164 [ 346.192849][T18805] loop6: detected capacity change from 0 to 4096 [ 346.237330][T18805] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 346.254999][T18807] siw: device registration error -23 [ 346.266281][T18807] loop2: detected capacity change from 0 to 128 [ 346.301634][T18807] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 346.334543][T18807] ext4 filesystem being mounted at /131/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 346.375448][T18818] loop6: detected capacity change from 0 to 128 [ 346.385739][T18818] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 346.403042][T18807] EXT4-fs warning (device loop2): verify_group_input:137: Cannot add at group 5 (only 1 groups) [ 346.416141][T18818] ext4 filesystem being mounted at /66/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 346.417118][T18817] loop7: detected capacity change from 0 to 2048 [ 346.485655][T18817] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 346.504239][T18817] ext4 filesystem being mounted at /52/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 346.516958][T18817] EXT4-fs error (device loop7): ext4_xattr_block_get:597: inode #15: comm syz.7.4349: corrupted xattr block 128: overlapping e_value [ 346.547047][T18817] EXT4-fs (loop7): Remounting filesystem read-only [ 346.548395][T17713] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 346.553811][T18817] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 346.563527][T16038] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 346.611851][T18817] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 346.621444][T18817] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 346.670809][T17833] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.830529][T18842] sctp: [Deprecated]: syz.6.4358 (pid 18842) Use of int in maxseg socket option. [ 346.830529][T18842] Use struct sctp_assoc_value instead [ 346.873720][T18847] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.927918][T18847] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.963127][T18849] siw: device registration error -23 [ 346.977997][T18847] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.002483][T18842] sctp: [Deprecated]: syz.6.4358 (pid 18842) Use of int in max_burst socket option. [ 347.002483][T18842] Use struct sctp_assoc_value instead [ 347.030248][T18847] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.082633][ T3755] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.095094][ T3755] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.113056][T18857] tipc: Failed to obtain node identity [ 347.118860][T18857] tipc: Enabling of bearer rejected, failed to enable media [ 347.133749][ T3755] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.147746][ T3755] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.330982][T18876] loop6: detected capacity change from 0 to 512 [ 347.345339][T18877] loop3: detected capacity change from 0 to 1024 [ 347.386790][T18877] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 347.506184][T18036] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.347091][T18948] lo speed is unknown, defaulting to 1000 [ 348.606272][T18948] lo speed is unknown, defaulting to 1000 [ 348.676970][T18948] cgroup: fork rejected by pids controller in /syz7 [ 349.185686][T19026] sit0: entered allmulticast mode [ 349.199179][T19026] sit0: entered promiscuous mode [ 349.641393][T19056] lo speed is unknown, defaulting to 1000 [ 349.689854][T19056] lo speed is unknown, defaulting to 1000 [ 350.310989][T19084] bridge0: port 3(bond0) entered blocking state [ 350.317382][T19084] bridge0: port 3(bond0) entered disabled state [ 350.339295][T19084] bond0: entered allmulticast mode [ 350.344600][T19084] bond_slave_0: entered allmulticast mode [ 350.350408][T19084] bond_slave_1: entered allmulticast mode [ 350.366991][T19084] bond0: entered promiscuous mode [ 350.372362][T19084] bond_slave_0: entered promiscuous mode [ 350.378337][T19084] bond_slave_1: entered promiscuous mode [ 350.385923][T19084] bridge0: port 3(bond0) entered blocking state [ 350.392335][T19084] bridge0: port 3(bond0) entered forwarding state [ 350.762738][T19111] lo speed is unknown, defaulting to 1000 [ 350.825170][T19111] lo speed is unknown, defaulting to 1000 [ 350.878910][T14219] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.935904][T14219] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.962025][T19117] lo speed is unknown, defaulting to 1000 [ 350.997388][T14219] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.040058][T19117] lo speed is unknown, defaulting to 1000 [ 351.069598][T14219] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.105502][T19122] lo speed is unknown, defaulting to 1000 [ 351.227892][T19122] lo speed is unknown, defaulting to 1000 [ 351.234345][T14219] bridge_slave_1: left allmulticast mode [ 351.240035][T14219] bridge_slave_1: left promiscuous mode [ 351.245882][T14219] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.267595][T14219] bridge_slave_0: left allmulticast mode [ 351.273411][T14219] bridge_slave_0: left promiscuous mode [ 351.279246][T14219] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.399001][T14219] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 351.418092][T14219] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 351.431648][T14219] bond0 (unregistering): Released all slaves [ 351.440178][T14219] bond1 (unregistering): Released all slaves [ 351.454074][T19158] tap0: tun_chr_ioctl cmd 1074812117 [ 351.487651][T19145] lo speed is unknown, defaulting to 1000 [ 351.641141][T19145] lo speed is unknown, defaulting to 1000 [ 351.682234][T19122] chnl_net:caif_netlink_parms(): no params data found [ 351.723631][T14219] hsr_slave_0: left promiscuous mode [ 351.733289][T14219] hsr_slave_1: left promiscuous mode [ 351.742598][T14219] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 351.750098][T14219] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 351.775574][T14219] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 351.783091][T14219] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 351.805270][T14219] veth1_macvtap: left promiscuous mode [ 351.810996][T14219] veth0_macvtap: left promiscuous mode [ 351.817707][T14219] veth1_vlan: left promiscuous mode [ 351.823182][T14219] veth0_vlan: left promiscuous mode [ 351.917221][T14219] team0 (unregistering): Port device team_slave_1 removed [ 351.928488][T14219] team0 (unregistering): Port device team_slave_0 removed [ 352.046772][T19122] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.053919][T19122] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.061825][T19122] bridge_slave_0: entered allmulticast mode [ 352.068629][T19122] bridge_slave_0: entered promiscuous mode [ 352.075920][T19122] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.083107][T19122] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.090912][T19122] bridge_slave_1: entered allmulticast mode [ 352.097876][T19122] bridge_slave_1: entered promiscuous mode [ 352.127586][T19122] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 352.155320][T19122] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 352.236226][T19122] team0: Port device team_slave_0 added [ 352.243589][T19122] team0: Port device team_slave_1 added [ 352.259552][T14219] IPVS: stop unused estimator thread 0... [ 352.321802][T19122] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 352.329009][T19122] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 352.355063][T19122] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 352.374867][T19122] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 352.381863][T19122] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 352.408025][T19122] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 352.518340][T19122] hsr_slave_0: entered promiscuous mode [ 352.538257][T19122] hsr_slave_1: entered promiscuous mode [ 352.548016][T19122] debugfs: 'hsr0' already exists in 'hsr' [ 352.553810][T19122] Cannot create hsr debugfs directory [ 353.038910][T19293] lo speed is unknown, defaulting to 1000 [ 353.151432][T19293] lo speed is unknown, defaulting to 1000 [ 353.242118][T19122] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 353.274854][T19122] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 353.293827][T19122] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 353.303227][T19122] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 353.386560][T19122] 8021q: adding VLAN 0 to HW filter on device bond0 [ 353.406543][T19122] 8021q: adding VLAN 0 to HW filter on device team0 [ 353.443201][T14219] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.450401][T14219] bridge0: port 1(bridge_slave_0) entered forwarding state [ 353.502194][T19122] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 353.512700][T19122] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 353.578594][T14219] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.585730][T14219] bridge0: port 2(bridge_slave_1) entered forwarding state [ 353.735225][T19122] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 354.087674][T19122] veth0_vlan: entered promiscuous mode [ 354.125743][T19122] veth1_vlan: entered promiscuous mode [ 354.168279][T19122] veth0_macvtap: entered promiscuous mode [ 354.183908][T19122] veth1_macvtap: entered promiscuous mode [ 354.231240][T19122] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 354.278665][T19122] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 354.302101][T14219] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.406870][T14219] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.420006][T19421] wg2: entered promiscuous mode [ 354.425345][T19421] wg2: entered allmulticast mode [ 354.451918][T14219] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.486307][T14219] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.660570][T19452] lo speed is unknown, defaulting to 1000 [ 354.821149][T19452] lo speed is unknown, defaulting to 1000 [ 355.534790][T19508] lo speed is unknown, defaulting to 1000 [ 355.672519][T19508] lo speed is unknown, defaulting to 1000 [ 355.692335][T19511] lo speed is unknown, defaulting to 1000 [ 355.770489][T19511] lo speed is unknown, defaulting to 1000 [ 355.992560][T19551] bridge0: port 3(bond0) entered disabled state [ 356.000097][T19551] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.010020][T19551] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.021608][T19551] bridge0: entered allmulticast mode [ 356.067580][T19554] bond0: left allmulticast mode [ 356.072496][T19554] bond_slave_0: left allmulticast mode [ 356.078082][T19554] bond_slave_1: left allmulticast mode [ 356.083632][T19554] bond0: left promiscuous mode [ 356.088484][T19554] bond_slave_0: left promiscuous mode [ 356.094040][T19554] bond_slave_1: left promiscuous mode [ 356.100241][T19554] bridge0: port 3(bond0) entered disabled state [ 356.127093][T19554] bridge_slave_1: left allmulticast mode [ 356.133238][T19554] bridge_slave_1: left promiscuous mode [ 356.139003][T19554] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.158123][T19554] bridge_slave_0: left allmulticast mode [ 356.163855][T19554] bridge_slave_0: left promiscuous mode [ 356.169715][T19554] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.259948][T19511] chnl_net:caif_netlink_parms(): no params data found [ 356.291144][T19558] : renamed from bond_slave_0 (while UP) [ 356.464398][T19511] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.471581][T19511] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.512422][T19511] bridge_slave_0: entered allmulticast mode [ 356.532393][T19511] bridge_slave_0: entered promiscuous mode [ 356.571717][T14218] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 356.581665][T14218] netdevsim netdevsim8 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 356.616283][T19511] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.623603][T19511] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.644725][T19511] bridge_slave_1: entered allmulticast mode [ 356.651361][T19511] bridge_slave_1: entered promiscuous mode [ 356.658376][T19580] sit0: entered promiscuous mode [ 356.663613][T19580] sit0: entered allmulticast mode [ 356.689394][T14218] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 356.699382][T14218] netdevsim netdevsim8 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 356.763878][T19511] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 356.776001][T14218] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 356.786107][T14218] netdevsim netdevsim8 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 356.818526][T19511] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 356.887524][T14218] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 356.897830][T14218] netdevsim netdevsim8 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 356.995372][T19511] team0: Port device team_slave_0 added [ 357.053098][T19511] team0: Port device team_slave_1 added [ 357.105521][T19511] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 357.112548][T19511] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 357.138662][T19511] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 357.180519][T19511] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 357.187612][T19511] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 357.213718][T19511] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 357.331800][T19617] wg2: entered promiscuous mode [ 357.337291][T19617] wg2: entered allmulticast mode [ 357.354473][T19511] hsr_slave_0: entered promiscuous mode [ 357.361098][T19511] hsr_slave_1: entered promiscuous mode [ 357.374578][T19511] debugfs: 'hsr0' already exists in 'hsr' [ 357.380385][T19511] Cannot create hsr debugfs directory [ 357.462046][T14218] veth0_to_bridge: left allmulticast mode [ 357.467892][T14218] veth0_to_bridge: left promiscuous mode [ 357.473748][T14218] bridge0: port 3(veth0_to_bridge) entered disabled state [ 357.487692][T14218] bridge_slave_1: left allmulticast mode [ 357.493415][T14218] bridge_slave_1: left promiscuous mode [ 357.499139][T14218] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.532040][T14218] bridge_slave_0: left allmulticast mode [ 357.537890][T14218] bridge_slave_0: left promiscuous mode [ 357.543687][T14218] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.659113][T14218] bond1 (unregistering): (slave gretap1): Releasing backup interface [ 357.856248][T14218] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 357.866613][T14218] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 357.876599][T14218] bond0 (unregistering): Released all slaves [ 357.884464][T14218] bond1 (unregistering): Released all slaves [ 357.893394][T14218] bond2 (unregistering): Released all slaves [ 357.902333][T14218] bond3 (unregistering): Released all slaves [ 357.911469][T14218] bond4 (unregistering): Released all slaves [ 357.943494][T14218] IPVS: stopping backup sync thread 13662 ... [ 357.964681][T19633] syzkaller0: entered promiscuous mode [ 357.970298][T19633] syzkaller0: entered allmulticast mode [ 358.041494][T19648] lo speed is unknown, defaulting to 1000 [ 358.174285][T14218] hsr_slave_0: left promiscuous mode [ 358.208264][T14218] hsr_slave_1: left promiscuous mode [ 358.222819][T14218] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 358.230451][T14218] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 358.240130][T14218] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 358.247626][T14218] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 358.282006][T14218] batman_adv: batadv0: Removing interface: macvtap1 [ 358.291187][T14218] batman_adv: batadv0: Removing interface: macvtap2 [ 358.304613][T14218] batman_adv: batadv0: Removing interface: macvtap3 [ 358.312424][T14218] batman_adv: batadv0: Removing interface: macvtap4 [ 358.319925][T14218] batman_adv: batadv0: Removing interface: macvtap5 [ 358.327399][T14218] batman_adv: batadv0: Removing interface: macvtap6 [ 358.334744][T14218] batman_adv: batadv0: Removing interface: macvtap8 [ 358.341767][T14218] batman_adv: batadv0: Removing interface: macvtap0 [ 358.349287][T14218] batman_adv: batadv0: Removing interface: macvtap9 [ 358.364621][T14218] batman_adv: batadv0: Removing interface: macvtap10 [ 358.372128][T14218] batman_adv: batadv0: Removing interface: macvtap11 [ 358.386911][T14218] veth1_macvtap: left promiscuous mode [ 358.392522][T14218] veth1_vlan: left promiscuous mode [ 358.399346][T14218] veth0_vlan: left promiscuous mode [ 358.492976][T14218] team0 (unregistering): Port device team_slave_1 removed [ 358.504240][T14218] team0 (unregistering): Port device team_slave_0 removed [ 358.544962][T19648] lo speed is unknown, defaulting to 1000 [ 358.551538][ T52] smc: removing ib device syz1 [ 358.571832][ T4825] lo speed is unknown, defaulting to 1000 [ 358.577655][ T4825] syz1: Port: 1 Link DOWN [ 358.969624][T19511] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 359.013413][T19511] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 359.037080][T19511] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 359.053822][T19511] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 359.175767][T14218] IPVS: stop unused estimator thread 0... [ 359.208211][T19511] 8021q: adding VLAN 0 to HW filter on device bond0 [ 359.268514][T19511] 8021q: adding VLAN 0 to HW filter on device team0 [ 359.290106][ T3745] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.297233][ T3745] bridge0: port 1(bridge_slave_0) entered forwarding state [ 359.552701][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.559829][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 359.673697][T19511] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 359.684225][T19511] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 360.148366][T19511] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 360.283048][T19773] lo speed is unknown, defaulting to 1000 [ 360.704364][T19511] veth0_vlan: entered promiscuous mode [ 360.716922][T19511] veth1_vlan: entered promiscuous mode [ 360.740740][T19511] veth0_macvtap: entered promiscuous mode [ 360.748574][T19511] veth1_macvtap: entered promiscuous mode [ 360.790199][T19511] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 360.834862][T19511] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 360.849656][T14219] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.889227][T14219] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.903053][T19821] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.910475][T19821] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.924377][T19821] bridge0: entered allmulticast mode [ 360.958938][T14219] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.973497][T14219] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.017184][T19821] bridge_slave_1: left allmulticast mode [ 361.022987][T19821] bridge_slave_1: left promiscuous mode [ 361.029064][T19821] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.046225][T19821] bridge_slave_0: left allmulticast mode [ 361.052335][T19821] bridge_slave_0: left promiscuous mode [ 361.058514][T19821] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.237216][T19829] syzkaller0: entered promiscuous mode [ 361.242773][T19829] syzkaller0: entered allmulticast mode [ 361.889357][T19855] syzkaller0: entered promiscuous mode [ 361.895028][T19855] syzkaller0: entered allmulticast mode [ 362.414523][T19870] veth0_vlan: entered allmulticast mode [ 362.758092][T19889] sit0: left promiscuous mode [ 362.989244][T19907] cgroup: fork rejected by pids controller in /syz8 [ 363.058125][T19892] lo speed is unknown, defaulting to 1000 [ 363.954278][ T31] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.054190][ T31] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.163019][ T31] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.186289][T19949] lo speed is unknown, defaulting to 1000 [ 364.203917][ T29] kauditd_printk_skb: 192 callbacks suppressed [ 364.203937][ T29] audit: type=1400 audit(1769431401.983:17988): avc: denied { create } for pid=19962 comm="syz.3.4718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 364.295731][ T31] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.652232][T19984] syzkaller0: entered promiscuous mode [ 364.657953][T19984] syzkaller0: entered allmulticast mode [ 364.715473][T19958] lo speed is unknown, defaulting to 1000 [ 364.723356][ T31] bridge_slave_1: left allmulticast mode [ 364.729112][ T31] bridge_slave_1: left promiscuous mode [ 364.734940][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.743864][ T31] bridge_slave_0: left allmulticast mode [ 364.749606][ T31] bridge_slave_0: left promiscuous mode [ 364.755426][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.910101][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 364.926915][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 364.941307][ T31] bond0 (unregistering): Released all slaves [ 364.961907][T19997] lo speed is unknown, defaulting to 1000 [ 365.011372][T20022] lo speed is unknown, defaulting to 1000 [ 365.058104][ T31] hsr_slave_0: left promiscuous mode [ 365.067799][ T31] hsr_slave_1: left promiscuous mode [ 365.073707][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 365.081313][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 365.100109][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 365.107657][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 365.127008][ T31] veth1_macvtap: left promiscuous mode [ 365.132561][ T31] veth0_macvtap: left promiscuous mode [ 365.142978][ T31] veth1_vlan: left promiscuous mode [ 365.148388][ T31] veth0_vlan: left promiscuous mode [ 365.259533][ T31] team0 (unregistering): Port device team_slave_1 removed [ 365.270478][ T31] team0 (unregistering): Port device team_slave_0 removed [ 365.389190][T19958] chnl_net:caif_netlink_parms(): no params data found [ 365.539106][T19958] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.546419][T19958] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.553875][T19958] bridge_slave_0: entered allmulticast mode [ 365.560676][T19958] bridge_slave_0: entered promiscuous mode [ 365.568295][T19958] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.575471][T19958] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.582975][T19958] bridge_slave_1: entered allmulticast mode [ 365.589887][T19958] bridge_slave_1: entered promiscuous mode [ 365.620613][T19958] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 365.631705][T19958] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 365.661739][T19958] team0: Port device team_slave_0 added [ 365.668870][T19958] team0: Port device team_slave_1 added [ 365.716709][T19958] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 365.723814][T19958] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 365.749817][T19958] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 365.853529][T19958] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 365.860635][T19958] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 365.886748][T19958] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 365.940842][T19958] hsr_slave_0: entered promiscuous mode [ 365.951585][T19958] hsr_slave_1: entered promiscuous mode [ 365.958231][T19958] debugfs: 'hsr0' already exists in 'hsr' [ 365.964038][T19958] Cannot create hsr debugfs directory [ 366.234570][T20142] lo speed is unknown, defaulting to 1000 [ 366.241815][T20147] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 366.275642][T20147] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 366.505674][T20105] lo speed is unknown, defaulting to 1000 [ 366.557202][T19958] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 366.668898][T19958] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 366.704096][T19958] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 366.749042][T20181] loop2: detected capacity change from 0 to 1764 [ 366.764561][T19958] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 366.894991][T19958] 8021q: adding VLAN 0 to HW filter on device bond0 [ 366.922104][ T29] audit: type=1400 audit(1769431404.693:17989): avc: denied { read write } for pid=20202 comm="syz.3.4784" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 366.946222][ T29] audit: type=1400 audit(1769431404.693:17990): avc: denied { open } for pid=20202 comm="syz.3.4784" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 366.978357][T19958] 8021q: adding VLAN 0 to HW filter on device team0 [ 367.007237][ T3745] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.014378][ T3745] bridge0: port 1(bridge_slave_0) entered forwarding state [ 367.064044][ T3745] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.071219][ T3745] bridge0: port 2(bridge_slave_1) entered forwarding state [ 367.137605][T20216] SELinux: failed to load policy [ 367.148727][T20216] loop2: detected capacity change from 0 to 512 [ 367.157443][ T29] audit: type=1400 audit(1769431404.893:17991): avc: denied { connect } for pid=20210 comm="syz.3.4786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 367.169397][T20216] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 367.177399][ T29] audit: type=1400 audit(1769431404.923:17992): avc: denied { load_policy } for pid=20215 comm="syz.2.4787" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 367.225166][T20216] EXT4-fs (loop2): 1 truncate cleaned up [ 367.241909][T20216] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 367.256778][T20211] Dead loop on virtual device ip6_vti0, fix it urgently! [ 367.281231][ T29] audit: type=1400 audit(1769431405.053:17993): avc: denied { name_bind } for pid=20210 comm="syz.3.4786" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 367.434433][T19958] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 367.606351][T16038] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 367.622176][T20214] lo speed is unknown, defaulting to 1000 [ 367.686264][T20263] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 367.695559][T20263] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 367.767352][T20266] loop6: detected capacity change from 0 to 128 [ 367.964511][T20242] lo speed is unknown, defaulting to 1000 [ 367.996235][T20278] loop6: detected capacity change from 0 to 764 [ 368.020879][T20278] Symlink component flag not implemented [ 368.026620][T20278] Symlink component flag not implemented [ 368.050901][T20278] Symlink component flag not implemented (129) [ 368.057336][T20278] Symlink component flag not implemented (6) [ 368.238478][T19958] veth0_vlan: entered promiscuous mode [ 368.266488][T19958] veth1_vlan: entered promiscuous mode [ 368.272751][T20296] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 368.287921][T20296] vhci_hcd vhci_hcd.2: default hub control req: 0300 v0002 i0006 l0 [ 368.385425][T20306] loop7: detected capacity change from 0 to 512 [ 368.410654][T20306] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 368.453571][T20306] EXT4-fs (loop7): 1 truncate cleaned up [ 368.460547][T20306] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 368.476668][ T29] audit: type=1400 audit(1769431406.263:17994): avc: denied { ioctl } for pid=20305 comm="syz.7.4812" path="/51/file2/file2" dev="loop7" ino=16 ioctlcmd=0x6611 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 368.512667][T19958] veth0_macvtap: entered promiscuous mode [ 368.521095][T19958] veth1_macvtap: entered promiscuous mode [ 368.533703][T19958] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 368.561064][T19122] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 368.571007][T19958] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 368.589301][ T52] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.625542][ T52] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.676768][ T52] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.718211][T20304] lo speed is unknown, defaulting to 1000 [ 368.720871][ T52] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.949855][T20331] netlink: 32 bytes leftover after parsing attributes in process `syz.8.4817'. [ 369.038523][T20335] lo speed is unknown, defaulting to 1000 [ 369.181727][T20339] loop6: detected capacity change from 0 to 128 [ 369.196952][T20341] loop8: detected capacity change from 0 to 512 [ 369.211207][T20341] EXT4-fs error (device loop8): ext4_orphan_get:1417: comm syz.8.4820: bad orphan inode 15 [ 369.224366][T20341] ext4_test_bit(bit=14, block=18) = 1 [ 369.229824][T20341] is_bad_inode(inode)=0 [ 369.234181][T20341] NEXT_ORPHAN(inode)=1023 [ 369.238539][T20341] max_ino=32 [ 369.241734][T20341] i_nlink=0 [ 369.272177][T20344] loop6: detected capacity change from 0 to 512 [ 369.284816][T20341] EXT4-fs error (device loop8): ext4_xattr_delete_inode:2972: inode #15: comm syz.8.4820: corrupted xattr block 19: invalid header [ 369.286481][T20346] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 369.301530][T20341] EXT4-fs warning (device loop8): ext4_evict_inode:273: xattr delete (err -117) [ 369.322845][T20344] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 369.336005][T20341] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none. [ 369.349468][T20346] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 369.357605][T20341] ext4 filesystem being mounted at /4/qY3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 369.389976][T17713] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 369.400480][T19958] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0009-000000000000. [ 369.420522][T20350] loop6: detected capacity change from 0 to 128 [ 369.429969][T20350] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 369.457187][T20350] ext4 filesystem being mounted at /169/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 369.479740][ T29] audit: type=1326 audit(1769431407.263:17995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20352 comm="syz.8.4824" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f270682aeb9 code=0x0 [ 369.505293][T17713] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 369.612100][T20363] loop6: detected capacity change from 0 to 1024 [ 369.620938][T20363] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 369.638298][T20363] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.4828: Invalid block bitmap block 0 in block_group 0 [ 369.653977][T20363] EXT4-fs (loop6): Remounting filesystem read-only [ 369.660635][T20363] Quota error (device loop6): write_blk: dquota write failed [ 369.668145][T20363] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 369.678406][T20363] EXT4-fs (loop6): 1 orphan inode deleted [ 369.684813][T20363] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 369.696034][T20365] Dead loop on virtual device ip6_vti0, fix it urgently! [ 369.716226][T17713] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 369.736386][T20368] netlink: 'syz.6.4830': attribute type 4 has an invalid length. [ 369.816452][T20377] EXT4-fs: Ignoring removed bh option [ 369.823949][T20377] EXT4-fs (loop7): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 369.845997][T20377] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 369.861717][T20377] EXT4-fs error (device loop7): ext4_check_all_de:659: inode #12: block 7: comm syz.7.4834: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=108 fake=0 [ 369.881855][T20377] EXT4-fs (loop7): Remounting filesystem read-only [ 369.901193][T19122] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 370.046446][T20396] EXT4-fs: test_dummy_encryption option not supported [ 370.205180][ T29] audit: type=1400 audit(1769431407.973:17996): avc: denied { unmount } for pid=20400 comm="syz.7.4843" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 371.135338][T20429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 371.244666][T20429] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 371.298094][T20434] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 371.311393][T20434] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 371.932336][T20454] set_capacity_and_notify: 3 callbacks suppressed [ 371.932357][T20454] loop3: detected capacity change from 0 to 128 [ 371.952678][T20455] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 371.962181][T20454] EXT4-fs: test_dummy_encryption option not supported [ 372.133788][T20468] loop2: detected capacity change from 0 to 2048 [ 372.334561][T20468] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 372.493592][T16038] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 372.714194][T20490] loop2: detected capacity change from 0 to 512 [ 372.721668][T20490] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 372.745237][T20490] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 372.763346][T20490] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.4881: bg 0: block 248: padding at end of block bitmap is not set [ 372.778232][T20490] Quota error (device loop2): write_blk: dquota write failed [ 372.785790][T20490] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 372.815020][T20490] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.4881: Failed to acquire dquot type 1 [ 372.857329][T20490] EXT4-fs (loop2): 1 truncate cleaned up [ 372.867498][T20490] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 372.894293][T20490] EXT4-fs (loop2): shut down requested (1) [ 372.927415][T20505] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 372.957369][T20505] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 372.965851][T16038] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 373.489986][T20532] loop6: detected capacity change from 0 to 512 [ 373.567718][T20532] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 373.663305][T20538] loop5: detected capacity change from 0 to 7 [ 373.685374][T17713] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 373.768139][T18378] loop5: [ 373.785880][T20538] loop5: [ 374.883756][T20554] loop6: detected capacity change from 0 to 512 [ 374.924041][T20554] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 374.932609][ T29] audit: type=1400 audit(1769431412.320:17997): avc: denied { write } for pid=20553 comm="syz.6.4907" path="socket:[58397]" dev="sockfs" ino=58397 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 374.976313][T20554] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 375.025508][T20568] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4912'. [ 375.060641][ T23] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 375.080338][ T23] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 375.212644][T20575] lo speed is unknown, defaulting to 1000 [ 375.219089][T20582] loop2: detected capacity change from 0 to 1024 [ 375.228399][T20582] EXT4-fs: Ignoring removed oldalloc option [ 375.234637][T20582] EXT4-fs: Ignoring removed bh option [ 375.272143][T20582] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 375.370419][T20567] lo speed is unknown, defaulting to 1000 [ 375.997047][ T29] audit: type=1400 audit(1769431413.308:17998): avc: denied { unmount } for pid=17713 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 376.062337][T20610] lo speed is unknown, defaulting to 1000 [ 376.145487][T20617] loop6: detected capacity change from 0 to 512 [ 376.167397][T20617] EXT4-fs: Ignoring removed bh option [ 376.211573][T20617] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 376.250122][T20621] loop3: detected capacity change from 0 to 512 [ 376.272235][T20617] ext4 filesystem being mounted at /191/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 376.310727][T20621] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 376.365226][T20621] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 376.370403][T20586] lo speed is unknown, defaulting to 1000 [ 376.407896][T20621] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.4929: bg 0: block 248: padding at end of block bitmap is not set [ 376.453148][T16038] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.472609][T20621] Quota error (device loop3): write_blk: dquota write failed [ 376.480117][T20621] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 376.494072][T20621] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.4929: Failed to acquire dquot type 1 [ 376.514887][T20626] loop2: detected capacity change from 0 to 128 [ 376.521791][T20626] EXT4-fs: test_dummy_encryption option not supported [ 376.546719][T20621] EXT4-fs (loop3): 1 truncate cleaned up [ 376.567015][T20621] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 376.618977][T17713] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.641849][T20628] rock: directory entry would overflow storage [ 376.648080][T20628] rock: sig=0x3b10, size=4, remaining=3 [ 376.653807][T20621] EXT4-fs (loop3): shut down requested (1) [ 376.687826][T18036] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 377.101197][T20656] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 377.144130][T20661] EXT4-fs error (device loop6): ext4_iget_extra_inode:5073: inode #15: comm syz.6.4942: corrupted in-inode xattr: invalid ea_ino [ 377.174996][T20661] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.4942: couldn't read orphan inode 15 (err -117) [ 377.198040][T20661] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 377.909713][T20677] set_capacity_and_notify: 2 callbacks suppressed [ 377.909733][T20677] loop2: detected capacity change from 0 to 512 [ 377.934532][T20677] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 377.944900][T20677] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e12c, mo2=0002] [ 377.953030][T20677] System zones: 1-12 [ 377.953440][T20679] loop8: detected capacity change from 0 to 512 [ 377.957557][T20677] EXT4-fs (loop2): orphan cleanup on readonly fs [ 377.983977][T20677] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.4950: bg 0: block 361: padding at end of block bitmap is not set [ 378.000383][T20677] EXT4-fs (loop2): Remounting filesystem read-only [ 378.007064][T20677] EXT4-fs (loop2): 1 truncate cleaned up [ 378.013198][T20677] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 378.036621][T20677] EXT4-fs warning (device loop2): dx_probe:791: inode #2: lblock 0: comm syz.2.4950: error -117 reading directory block [ 378.062557][T14219] bridge_slave_1: left allmulticast mode [ 378.068249][T14219] bridge_slave_1: left promiscuous mode [ 378.074135][T14219] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.112553][T17713] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.125860][T14219] bridge_slave_0: left allmulticast mode [ 378.131547][T14219] bridge_slave_0: left promiscuous mode [ 378.137290][T14219] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.139429][T20679] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 378.188349][ T9116] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 378.196408][T20684] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4953'. [ 378.215221][T20679] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 378.230960][ T9116] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 378.246261][T16038] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 378.338974][T19958] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.416189][T20697] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 378.437292][T20697] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 378.460134][ T29] audit: type=1401 audit(1769431415.578:17999): op=setxattr invalid_context="system_u:object_r:qemu_device_t:s0" [ 378.508521][T20695] syzkaller0: entered promiscuous mode [ 378.514087][T20695] syzkaller0: entered allmulticast mode [ 378.538021][T14219] tipc: Left network mode [ 378.546172][T14219] hsr_slave_0: left promiscuous mode [ 378.554768][T14219] hsr_slave_1: left promiscuous mode [ 378.560606][T14219] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 378.568123][T14219] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 378.583034][T14219] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 378.590547][T14219] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 378.618868][T14219] veth1_macvtap: left promiscuous mode [ 378.624746][T14219] veth0_macvtap: left promiscuous mode [ 378.635298][T14219] veth1_vlan: left promiscuous mode [ 378.650665][T14219] veth0_vlan: left promiscuous mode [ 378.807432][T20723] netlink: 'syz.8.4968': attribute type 4 has an invalid length. [ 378.828384][T20723] netlink: 'syz.8.4968': attribute type 4 has an invalid length. [ 378.857068][T20731] loop6: detected capacity change from 0 to 512 [ 378.875813][T20731] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 378.883841][T20731] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 378.895201][T20731] System zones: 0-1, 15-15, 18-18, 34-34 [ 378.901845][T20731] EXT4-fs (loop6): orphan cleanup on readonly fs [ 378.908605][T20731] Quota error (device loop6): v2_read_header: Failed header read: expected=8 got=0 [ 378.923297][T20731] EXT4-fs warning (device loop6): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 378.938119][T20731] EXT4-fs (loop6): Cannot turn on quotas: error -22 [ 378.952015][T20731] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.4971: bg 0: block 40: padding at end of block bitmap is not set [ 378.968390][T20731] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 378.979411][ T29] audit: type=1400 audit(1769431416.067:18000): avc: denied { name_bind } for pid=20738 comm="syz.8.4974" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 379.011186][T20731] EXT4-fs (loop6): 1 truncate cleaned up [ 379.017520][T20731] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 379.060917][T17713] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 379.208239][T20753] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 379.216752][T20753] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 380.142388][T20782] loop2: detected capacity change from 0 to 512 [ 380.203726][T20784] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 380.224223][T20782] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 380.253710][T20784] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 380.277132][T20782] ext4 filesystem being mounted at /281/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 380.343356][T16038] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 380.669703][T20801] loop2: detected capacity change from 0 to 1024 [ 380.705678][T20801] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 380.739524][T20801] ext4 filesystem being mounted at /286/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 380.798921][T16038] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 380.871413][T20805] loop2: detected capacity change from 0 to 1024 [ 380.922953][T20805] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 381.643536][T20837] loop8: detected capacity change from 0 to 1024 [ 381.661404][T20837] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 381.676578][T20837] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 381.692688][T20837] EXT4-fs error (device loop8): ext4_map_blocks:825: inode #15: block 3: comm syz.8.5012: lblock 3 mapped to illegal pblock 3 (length 3) [ 381.730587][T20837] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 381.743018][T20837] EXT4-fs (loop8): This should not happen!! Data will be lost [ 381.743018][T20837] [ 381.838694][T16038] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 381.955671][ T3765] EXT4-fs error (device loop8): ext4_map_blocks:825: inode #15: block 8: comm kworker/u8:15: lblock 8 mapped to illegal pblock 8 (length 8) [ 381.979550][ T3765] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 381.991920][ T3765] EXT4-fs (loop8): This should not happen!! Data will be lost [ 381.991920][ T3765] [ 382.073805][T19958] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 382.294400][ T29] audit: type=1400 audit(1769431419.122:18001): avc: denied { read } for pid=20867 comm="syz.8.5016" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 382.317587][ T29] audit: type=1400 audit(1769431419.122:18002): avc: denied { open } for pid=20867 comm="syz.8.5016" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 382.376846][T20873] loop2: detected capacity change from 0 to 1024 [ 382.416858][T20873] EXT4-fs: inline encryption not supported [ 382.439595][T20873] EXT4-fs: Ignoring removed nobh option [ 382.445422][T20873] EXT4-fs: Ignoring removed bh option [ 382.483433][T20873] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 382.693605][ T29] audit: type=1400 audit(1769431419.473:18003): avc: denied { rename } for pid=20872 comm="syz.2.5014" name="file3" dev="loop2" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 382.750744][T16038] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.860856][T20901] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 383.023629][T20924] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 383.065170][T20901] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 383.374208][T20940] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5028'. [ 383.512339][T20945] lo speed is unknown, defaulting to 1000 [ 384.450558][T20967] loop6: detected capacity change from 0 to 1024 [ 384.466917][T20967] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 384.529252][T17713] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.623603][T20985] bridge0: port 3(ip6gretap0) entered blocking state [ 384.630459][T20985] bridge0: port 3(ip6gretap0) entered disabled state [ 384.656200][T20985] ip6gretap0: entered allmulticast mode [ 384.678251][T20985] ip6gretap0: entered promiscuous mode [ 384.684222][T20985] bridge0: port 3(ip6gretap0) entered blocking state [ 384.691024][T20985] bridge0: port 3(ip6gretap0) entered listening state [ 384.824367][T21004] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 385.022262][T21034] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5063'. [ 385.175685][T21048] loop8: detected capacity change from 0 to 512 [ 385.182719][T21048] EXT4-fs: Ignoring removed i_version option [ 385.183161][T21050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 385.188819][T21048] EXT4-fs: Ignoring removed bh option [ 385.264826][T21050] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 385.331992][T21048] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 385.360467][T21048] ext4 filesystem being mounted at /61/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 385.413400][T19958] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 386.071151][T21078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 386.094008][T21078] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 386.143703][T21085] loop6: detected capacity change from 0 to 1024 [ 386.164811][T21085] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 386.274813][T17713] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 386.311629][T21098] loop8: detected capacity change from 0 to 512 [ 386.431290][T21098] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -2 [ 386.522035][T21098] EXT4-fs (loop8): 1 truncate cleaned up [ 386.576487][T21098] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 386.633497][T21098] EXT4-fs (loop8): shut down requested (1) [ 386.684438][T21098] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop8 ino=12 [ 386.746475][ T29] audit: type=1400 audit(1769431423.230:18004): avc: denied { validate_trans } for pid=21113 comm="syz.2.5099" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 386.782631][T21098] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop8 ino=12 [ 386.929537][T21117] loop2: detected capacity change from 0 to 1024 [ 386.938915][T19958] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 386.989675][T21117] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 387.112118][T16038] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 387.482706][ T29] audit: type=1400 audit(1769431423.904:18005): avc: denied { mount } for pid=21089 comm="syz.3.5092" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 388.953302][T21157] SELinux: ebitmap: truncated map [ 388.966220][T21157] SELinux: failed to load policy [ 389.029700][T21163] netlink: 36 bytes leftover after parsing attributes in process `syz.6.5118'. [ 389.045569][T21163] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5118'. [ 389.054593][T21163] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5118'. [ 389.124286][T21169] loop3: detected capacity change from 0 to 1024 [ 389.156462][T21169] EXT4-fs: Ignoring removed nomblk_io_submit option [ 389.163193][T21169] EXT4-fs: Ignoring removed bh option [ 389.237252][T21173] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5123'. [ 389.260820][T21169] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 389.297822][T21182] cgroup: Unknown subsys name 'cpuset' [ 389.368772][T18036] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.386840][T21187] loop6: detected capacity change from 0 to 1024 [ 389.398936][T21187] EXT4-fs: Ignoring removed oldalloc option [ 389.404942][T21187] EXT4-fs: Ignoring removed bh option [ 389.467718][T21187] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 389.761379][T21209] loop2: detected capacity change from 0 to 512 [ 389.769002][T21209] EXT4-fs: Ignoring removed i_version option [ 389.775117][T21209] EXT4-fs: Ignoring removed bh option [ 389.813549][T21209] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 389.847524][T21209] ext4 filesystem being mounted at /312/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 389.894635][T16038] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 390.060188][T21220] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5139'. [ 390.231278][T21222] loop3: detected capacity change from 0 to 1024 [ 390.335916][T21222] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 390.411308][T17713] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 390.432708][T21222] ext4 filesystem being mounted at /198/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 390.536211][T21231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 390.611102][T21231] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 390.943891][T18036] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 391.452667][T21246] loop3: detected capacity change from 0 to 256 [ 391.475316][T21246] FAT-fs (loop3): Directory bread(block 64) failed [ 391.492956][T21246] FAT-fs (loop3): Directory bread(block 65) failed [ 391.559095][T21246] FAT-fs (loop3): Directory bread(block 66) failed [ 391.584781][T21246] FAT-fs (loop3): Directory bread(block 67) failed [ 391.591549][T21246] FAT-fs (loop3): Directory bread(block 68) failed [ 391.609227][T21246] FAT-fs (loop3): Directory bread(block 69) failed [ 391.615986][T21246] FAT-fs (loop3): Directory bread(block 70) failed [ 391.616016][T21246] FAT-fs (loop3): Directory bread(block 71) failed [ 391.616048][T21246] FAT-fs (loop3): Directory bread(block 72) failed [ 391.616125][T21246] FAT-fs (loop3): Directory bread(block 73) failed [ 391.825269][T21269] loop2: detected capacity change from 0 to 1024 [ 391.874180][T21269] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 391.942219][T16038] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 391.961340][T21282] loop6: detected capacity change from 0 to 2048 [ 391.968146][T21282] EXT4-fs: Ignoring removed i_version option [ 391.999437][T21282] ext4 filesystem being mounted at /231/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 392.012094][T21287] loop8: detected capacity change from 0 to 1024 [ 392.057001][T21289] loop2: detected capacity change from 0 to 128 [ 392.113137][ T29] audit: type=1400 audit(1769431428.177:18006): avc: denied { setcheckreqprot } for pid=21281 comm="syz.6.5162" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 392.164822][T21289] ext4 filesystem being mounted at /315/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 392.177927][T21287] EXT4-fs: Ignoring removed oldalloc option [ 392.184026][T21287] EXT4-fs: Ignoring removed bh option [ 392.248073][T21289] EXT4-fs (loop2): shut down requested (2) [ 392.350062][ T29] audit: type=1400 audit(1769431428.306:18007): avc: denied { add_name } for pid=21288 comm="syz.2.5165" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 392.370837][ T29] audit: type=1400 audit(1769431428.306:18008): avc: denied { create } for pid=21288 comm="syz.2.5165" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 392.391719][ T29] audit: type=1400 audit(1769431428.325:18009): avc: denied { read } for pid=21288 comm="syz.2.5165" name="file0" dev="loop2" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 393.139518][T21323] netlink: 'syz.6.5179': attribute type 11 has an invalid length. [ 393.147662][T21323] netlink: 'syz.6.5179': attribute type 2 has an invalid length. [ 393.218510][T21327] loop3: detected capacity change from 0 to 1024 [ 393.247680][T21327] EXT4-fs: Ignoring removed oldalloc option [ 393.253793][T21327] EXT4-fs: Ignoring removed bh option [ 393.483587][T21331] loop6: detected capacity change from 0 to 512 [ 393.531619][T21331] EXT4-fs: Ignoring removed bh option [ 393.537072][T21331] ext4: Unknown parameter 'dont_appraise' [ 393.701205][T21340] loop2: detected capacity change from 0 to 512 [ 393.715440][T21340] EXT4-fs: Ignoring removed oldalloc option [ 393.753866][T21340] ext4 filesystem being mounted at /318/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 393.770857][T21340] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.5184: bg 0: block 217: padding at end of block bitmap is not set [ 393.799396][T21340] EXT4-fs (loop2): Remounting filesystem read-only [ 393.840879][ T310] Quota error (device loop2): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 393.867060][ T310] Quota error (device loop2): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 393.945708][T21352] loop6: detected capacity change from 0 to 128 [ 393.998822][T21352] ext4 filesystem being mounted at /238/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 394.033471][T21355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 394.083717][T21355] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 394.124597][T21352] EXT4-fs warning (device loop6): verify_group_input:137: Cannot add at group 25 (only 1 groups) [ 394.200840][T21360] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e01c, mo2=0002] [ 394.268040][T21360] System zones: 1-12 [ 394.283714][T21360] EXT4-fs error (device loop3): dx_probe:791: inode #2: comm syz.3.5193: Directory hole found for htree index block 0 [ 394.332987][T21360] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -117 [ 394.341397][T21360] EXT4-fs error (device loop3): dx_probe:791: inode #2: comm syz.3.5193: Directory hole found for htree index block 0 [ 394.366764][T21360] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 394.407726][T21360] EXT4-fs error (device loop3): dx_probe:791: inode #2: comm syz.3.5193: Directory hole found for htree index block 0 [ 394.503768][ T29] audit: type=1400 audit(1769431430.383:18010): avc: denied { create } for pid=21368 comm="syz.2.5196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 394.686492][T21393] IPv6: NLM_F_REPLACE set, but no existing node found! [ 394.730141][ T29] audit: type=1400 audit(1769431430.605:18011): avc: denied { mounton } for pid=21382 comm="syz.3.5202" path="/212/file0/bus" dev="loop3" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 394.756791][T21383] Trying to write to read-only block-device loop3 [ 394.775088][T21383] bio_check_eod: 425 callbacks suppressed [ 394.775114][T21383] syz.3.5202: attempt to access beyond end of device [ 394.775114][T21383] loop3: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 395.030003][T21383] syz.3.5202: attempt to access beyond end of device [ 395.030003][T21383] loop3: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 395.167033][T21383] syz.3.5202: attempt to access beyond end of device [ 395.167033][T21383] loop3: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 395.183379][T21383] syz.3.5202: attempt to access beyond end of device [ 395.183379][T21383] loop3: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 395.289788][T21383] syz.3.5202: attempt to access beyond end of device [ 395.289788][T21383] loop3: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 395.419455][T21383] syz.3.5202: attempt to access beyond end of device [ 395.419455][T21383] loop3: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 395.483506][T21383] syz.3.5202: attempt to access beyond end of device [ 395.483506][T21383] loop3: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 395.497142][T21383] syz.3.5202: attempt to access beyond end of device [ 395.497142][T21383] loop3: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 395.510981][T21383] syz.3.5202: attempt to access beyond end of device [ 395.510981][T21383] loop3: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 395.540395][T21383] syz.3.5202: attempt to access beyond end of device [ 395.540395][T21383] loop3: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 395.581566][T21412] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 395.598121][T21412] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 395.620063][T21416] netlink: 'syz.2.5212': attribute type 1 has an invalid length. [ 395.627974][T21416] netlink: 'syz.2.5212': attribute type 2 has an invalid length. [ 395.637404][T18036] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 395.646050][T18036] FAT-fs (loop3): Filesystem has been set read-only [ 395.904591][T21431] set_capacity_and_notify: 2 callbacks suppressed [ 395.904607][T21431] loop8: detected capacity change from 0 to 2048 [ 395.934815][T21431] EXT4-fs: Ignoring removed i_version option [ 396.004071][T21431] ext4 filesystem being mounted at /88/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 396.842625][T21443] loop6: detected capacity change from 0 to 2048 [ 396.856471][T21443] ext4: Unknown parameter 'noacl' [ 397.435844][T21474] loop8: detected capacity change from 0 to 1024 [ 397.443814][T21477] loop2: detected capacity change from 0 to 1024 [ 397.452266][T21474] EXT4-fs: Ignoring removed nomblk_io_submit option [ 397.467553][T21477] EXT4-fs: Ignoring removed oldalloc option [ 397.473555][T21477] EXT4-fs: Ignoring removed bh option [ 397.559751][T21486] loop6: detected capacity change from 0 to 1024 [ 397.566603][T21488] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 397.576246][T21488] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 397.584005][T21486] EXT4-fs: Ignoring removed oldalloc option [ 397.590034][T21486] EXT4-fs: Ignoring removed bh option [ 398.250084][T21510] lo speed is unknown, defaulting to 1000 [ 398.434961][T21518] loop3: detected capacity change from 0 to 128 [ 398.495322][T21521] loop6: detected capacity change from 0 to 1024 [ 398.509381][T21521] EXT4-fs: Ignoring removed oldalloc option [ 398.515506][T21521] EXT4-fs: Ignoring removed bh option [ 398.529063][T21524] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 398.590821][T21524] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 399.715836][T21545] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5259'. [ 399.785883][T21556] loop6: detected capacity change from 0 to 1024 [ 399.803722][T21556] EXT4-fs: Ignoring removed oldalloc option [ 399.809971][T21556] EXT4-fs: Ignoring removed bh option [ 399.869234][T21556] EXT4-fs mount: 24 callbacks suppressed [ 399.869251][T21556] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 400.063277][T21589] loop2: detected capacity change from 0 to 512 [ 400.087192][T21589] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 400.155050][T21589] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #17: comm syz.2.5270: inode has both inline data and extents flags [ 400.168797][T21589] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.5270: couldn't read orphan inode 17 (err -117) [ 400.181664][T21589] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 400.284261][T21589] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.5270: bg 0: block 65: padding at end of block bitmap is not set [ 400.309284][T21589] Quota error (device loop2): write_blk: dquota write failed [ 400.352052][T21589] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 400.362288][T21589] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.5270: Failed to acquire dquot type 0 [ 400.376771][T21589] Quota error (device loop2): write_blk: dquota write failed [ 400.384268][T21589] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 400.399954][T21589] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.5270: Failed to acquire dquot type 0 [ 400.614666][T21618] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.622261][T21618] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.818837][T17713] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 400.829142][T16038] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 400.874451][T21618] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 400.910842][T21618] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 400.981996][T21632] loop6: detected capacity change from 0 to 1024 [ 401.002505][ T310] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.007883][T21632] EXT4-fs: Ignoring removed nomblk_io_submit option [ 401.018474][T21632] EXT4-fs: Ignoring removed bh option [ 401.037452][ T310] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.128451][ T3745] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.138046][T21632] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 401.150336][T21642] EXT4-fs: Ignoring removed bh option [ 401.156360][ T3745] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.203242][T21632] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4215: comm syz.6.5289: Allocating blocks 497-513 which overlap fs metadata [ 401.301953][T21647] EXT4-fs: Ignoring removed oldalloc option [ 401.308001][T21647] EXT4-fs: Ignoring removed bh option [ 401.325108][T17713] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 401.392598][T21647] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 401.464280][T16038] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 401.551473][T21663] set_capacity_and_notify: 3 callbacks suppressed [ 401.551493][T21663] loop2: detected capacity change from 0 to 4096 [ 401.572542][T21663] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 401.590507][T21663] EXT4-fs (loop2): shut down requested (1) [ 401.591596][ C1] bridge0: port 3(ip6gretap0) entered learning state [ 401.613886][T21663] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 401.622847][T21663] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 401.631706][T21663] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 401.641786][T21663] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 401.651677][T21663] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 401.672315][T16038] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 401.909496][T21691] loop3: detected capacity change from 0 to 1024 [ 401.940156][T21691] EXT4-fs: Ignoring removed oldalloc option [ 401.946178][T21691] EXT4-fs: Ignoring removed bh option [ 402.073698][T21706] syzkaller0: entered promiscuous mode [ 402.079270][T21706] syzkaller0: entered allmulticast mode [ 402.911250][T21752] loop6: detected capacity change from 0 to 512 [ 402.927168][T21752] EXT4-fs: Ignoring removed oldalloc option [ 402.951764][T21752] EXT4-fs (loop6): 1 truncate cleaned up [ 402.966164][T21752] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 403.006136][T17713] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 403.028691][T21759] loop2: detected capacity change from 0 to 512 [ 403.036572][T21759] EXT4-fs: Ignoring removed orlov option [ 403.049063][T21759] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 403.064310][T21759] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 403.094971][T21759] EXT4-fs error (device loop2): ext4_iget_extra_inode:5073: inode #15: comm syz.2.5341: corrupted in-inode xattr: e_value size too large [ 403.116369][T21759] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.5341: couldn't read orphan inode 15 (err -117) [ 403.143933][T21759] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 403.204649][T21759] EXT4-fs error (device loop2): ext4_check_dx_root:2201: inode #2: comm syz.2.5341: Corrupt dir, invalid name_len for '..', running e2fsck is recommended [ 403.227120][T21775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 403.238694][T21775] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 403.275125][T21780] IPv6: NLM_F_REPLACE set, but no existing node found! [ 403.287653][T16038] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 403.342044][T21788] loop3: detected capacity change from 0 to 1024 [ 403.351408][T21788] EXT4-fs: Ignoring removed oldalloc option [ 403.357425][T21788] EXT4-fs: Ignoring removed bh option [ 403.976294][T21826] loop6: detected capacity change from 0 to 164 [ 404.040160][ T29] audit: type=1400 audit(1769431438.810:18012): avc: denied { nlmsg_write } for pid=21795 comm="syz.7.5356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 404.292104][T21858] netlink: 68 bytes leftover after parsing attributes in process `syz.6.5383'. [ 404.302397][T21858] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5383'. [ 404.336274][T21860] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5384'. [ 404.345484][T21860] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5384'. [ 404.410140][T21866] loop6: detected capacity change from 0 to 128 [ 404.432360][T21865] loop2: detected capacity change from 0 to 4096 [ 404.447318][T21866] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 404.459820][T21871] loop3: detected capacity change from 0 to 256 [ 404.470731][T21865] EXT4-fs error (device loop2): ext4_quota_enable:7177: comm syz.2.5385: inode #234881024: comm syz.2.5385: iget: illegal inode # [ 404.484479][T21865] EXT4-fs (loop2): Remounting filesystem read-only [ 404.491062][T21865] EXT4-fs warning (device loop2): ext4_enable_quotas:7221: Failed to enable quota tracking (type=2, err=-117, ino=234881024). Please run e2fsck to fix. [ 404.503936][T21866] ext4 filesystem being mounted at /273/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 404.508298][T21865] EXT4-fs (loop2): mount failed [ 404.539781][T21877] loop3: detected capacity change from 0 to 128 [ 404.594841][T21883] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5394'. [ 404.618984][T17713] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 404.674820][T21892] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 404.701467][T21892] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 404.796472][T21903] Invalid ELF header magic: != ELF [ 404.797331][ T29] audit: type=1400 audit(1769431439.890:18013): avc: denied { module_load } for pid=21902 comm="syz.3.5404" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=1712 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 404.841938][T21905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 404.851980][T21905] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 404.935463][T21917] syzkaller0: entered promiscuous mode [ 404.941092][T21917] syzkaller0: entered allmulticast mode [ 405.384537][T21933] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 405.397992][T21933] ext4 filesystem being mounted at /365/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 405.504953][T16038] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 405.633567][T21947] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 405.650753][T21947] ext4 filesystem being mounted at /367/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 405.677418][T16038] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 405.765373][T21960] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.5427: invalid indirect mapped block 256 (level 2) [ 405.789286][T21960] EXT4-fs (loop2): 2 truncates cleaned up [ 405.799073][T21960] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 405.986303][T21986] EXT4-fs: Ignoring removed nobh option [ 405.998450][T21986] EXT4-fs: Ignoring removed nomblk_io_submit option [ 406.072138][T21988] EXT4-fs (loop6): VFS: Can't find ext4 filesystem [ 406.410072][ T29] audit: type=1400 audit(1769431441.376:18014): avc: denied { setopt } for pid=22007 comm="syz.6.5451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 406.566365][ T29] audit: type=1400 audit(1769431441.413:18015): avc: denied { getopt } for pid=22007 comm="syz.6.5451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 406.718491][T16038] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 407.026761][T22035] cgroup: No subsys list or none specified [ 408.070977][T22087] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 408.078283][T22087] IPv6: NLM_F_CREATE should be set when creating new route [ 408.464953][T22087] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 408.596787][T22087] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 408.770842][ T5454] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.797665][ T5454] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.821768][ T5454] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.844255][ T5454] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.903560][T22110] 9p: Bad value for 'wfdno' [ 409.048811][T22122] set_capacity_and_notify: 6 callbacks suppressed [ 409.048831][T22122] loop3: detected capacity change from 0 to 512 [ 409.063614][T22122] EXT4-fs: Ignoring removed i_version option [ 409.069804][T22122] EXT4-fs: Ignoring removed bh option [ 409.223470][T22126] loop2: detected capacity change from 0 to 8192 [ 409.883682][T22141] loop2: detected capacity change from 0 to 8192 [ 411.267122][T22218] loop3: detected capacity change from 0 to 512 [ 411.924969][ T29] audit: type=1400 audit(1769431446.471:18016): avc: denied { listen } for pid=22236 comm="syz.2.5541" path="/378/file0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 411.993098][T22242] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 412.007598][T22242] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 412.160057][T22250] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 412.168850][T22250] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 412.337331][T22256] lo speed is unknown, defaulting to 1000 [ 412.392975][T22256] chnl_net:caif_netlink_parms(): no params data found [ 412.443980][T22256] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.451401][T22256] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.458789][T22256] bridge_slave_0: entered allmulticast mode [ 412.465773][T22256] bridge_slave_0: entered promiscuous mode [ 412.473269][T22256] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.480494][T22256] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.487797][T22256] bridge_slave_1: entered allmulticast mode [ 412.494555][T22256] bridge_slave_1: entered promiscuous mode [ 412.517068][T22256] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 412.528071][T22256] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 412.557933][T22256] team0: Port device team_slave_0 added [ 412.564967][T22256] team0: Port device team_slave_1 added [ 412.600928][ T5454] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 412.610494][ T5454] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 412.619699][ T5454] bond0 (unregistering): Released all slaves [ 412.677726][T22275] bridge0: port 3(ip6gretap0) entered disabled state [ 412.685449][T22275] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.692734][T22275] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.739671][T22275] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 412.776815][T22275] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 412.824809][T22275] veth1_vlan: left allmulticast mode [ 412.893108][T22256] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 412.900120][T22256] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 412.926232][T22256] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 412.954195][T22288] cgroup: Unknown subsys name 'cpuset' [ 413.030886][T22256] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 413.037931][T22256] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 413.063980][T22256] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 413.080095][ T5454] hsr_slave_0: left promiscuous mode [ 413.097541][ T5454] hsr_slave_1: left promiscuous mode [ 413.113372][ T5454] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 413.154781][ T5454] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 413.268272][T22300] SELinux: ebitmap: empty map [ 413.275450][T22300] SELinux: failed to load policy [ 413.282670][ T5454] team0 (unregistering): Port device team_slave_1 removed [ 413.295483][ T5454] team0 (unregistering): Port device team_slave_0 removed [ 413.316310][T22309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 413.325929][T22309] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 413.347325][ T5448] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.356255][ T5448] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 413.374290][ T5448] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.383343][ T5448] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 413.392515][ T5448] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.401541][ T5448] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 413.411603][ T5448] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.420655][ T5448] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 413.442216][T22256] hsr_slave_0: entered promiscuous mode [ 413.448620][T22256] hsr_slave_1: entered promiscuous mode [ 413.635788][ T5454] IPVS: stop unused estimator thread 0... [ 413.852750][T22256] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 413.863961][T22358] VFS: Mount too revealing [ 413.867497][T22256] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 413.878748][T22256] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 413.888019][T22256] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 413.974424][T22256] 8021q: adding VLAN 0 to HW filter on device bond0 [ 414.010310][T22256] 8021q: adding VLAN 0 to HW filter on device team0 [ 414.134118][ T5448] bridge0: port 1(bridge_slave_0) entered blocking state [ 414.141311][ T5448] bridge0: port 1(bridge_slave_0) entered forwarding state [ 414.182616][T22256] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 414.193245][T22256] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 414.296702][T22389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 414.305441][T22389] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 414.349865][T22390] loop2: detected capacity change from 0 to 1024 [ 414.406602][T22390] EXT4-fs: Ignoring removed oldalloc option [ 414.412735][T22390] EXT4-fs: Ignoring removed bh option [ 414.559559][T22390] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 414.667550][ T5448] bridge0: port 2(bridge_slave_1) entered blocking state [ 414.674778][ T5448] bridge0: port 2(bridge_slave_1) entered forwarding state [ 414.707382][T16038] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 414.738505][T22256] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 414.895660][T22256] veth0_vlan: entered promiscuous mode [ 414.919266][T22256] veth1_vlan: entered promiscuous mode [ 414.958762][T22256] veth0_macvtap: entered promiscuous mode [ 414.968039][T22256] veth1_macvtap: entered promiscuous mode [ 414.984230][T22256] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 415.001762][T22256] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 415.018677][ T5454] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.040754][ T5454] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.058169][ T5454] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.073869][ T5454] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.104475][T22442] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 415.114751][T22442] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 415.720948][T22523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 415.737238][T22523] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 415.772414][T22528] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 415.782283][T22528] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 416.447060][T22624] loop1: detected capacity change from 0 to 1024 [ 416.454344][T22624] EXT4-fs: Ignoring removed oldalloc option [ 416.460479][T22624] EXT4-fs: Ignoring removed bh option [ 416.479533][T22624] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 416.503265][T22256] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 416.800615][T22631] tmpfs: Unsupported parameter 'huge' [ 416.823704][T22633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 416.832533][T22633] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 417.308429][T22645] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 417.317391][T22645] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 417.419091][T22648] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 417.427665][T22648] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 417.860011][ T2965] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 417.875885][ T2965] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 418.286713][T22669] SELinux: failed to load policy [ 418.376922][T22671] tipc: Started in network mode [ 418.381862][T22671] tipc: Node identity 4246, cluster identity 4711 [ 418.388372][T22671] tipc: Node number set to 16966 [ 418.773499][T22678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 418.782281][T22678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 418.853682][T22684] loop6: detected capacity change from 0 to 7 [ 418.869740][T22684] buffer_io_error: 423 callbacks suppressed [ 418.869760][T22684] Buffer I/O error on dev loop6, logical block 0, async page read [ 418.906931][T22684] Buffer I/O error on dev loop6, logical block 0, async page read [ 418.914985][T22684] loop6: unable to read partition table [ 418.956412][T22684] loop_reread_partitions: partition scan of loop6 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 419.068404][T22697] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 419.090505][T22697] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 419.204073][T22704] loop6: detected capacity change from 0 to 1024 [ 419.214015][T22704] EXT4-fs: Ignoring removed oldalloc option [ 419.220125][T22704] EXT4-fs: Ignoring removed bh option [ 419.242275][T22704] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 419.368543][T22721] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 419.377168][T22721] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 419.633801][T22723] netlink: 'syz.8.5632': attribute type 4 has an invalid length. [ 419.680642][T22729] SELinux: policydb version 887511281 does not match my version range 15-35 [ 419.689632][T22729] SELinux: failed to load policy [ 419.711280][T22731] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 419.719843][T22731] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 420.014690][T22739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 420.023332][T22739] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 420.056153][T17713] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 420.096165][T22743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 420.105478][T22743] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 420.287330][T22747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 420.296362][T22747] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 420.589983][ T29] audit: type=1400 audit(1769431454.473:18017): avc: denied { create } for pid=22750 comm="syz.1.5646" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 420.611622][ T29] audit: type=1400 audit(1769431454.473:18018): avc: denied { map } for pid=22750 comm="syz.1.5646" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=63697 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 420.636133][ T29] audit: type=1400 audit(1769431454.473:18019): avc: denied { read write } for pid=22750 comm="syz.1.5646" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=63697 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 420.963466][T22762] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=22762 comm=syz.2.5649 [ 420.989132][T22764] vlan0: entered allmulticast mode [ 421.039223][T22770] netlink: 71 bytes leftover after parsing attributes in process `syz.8.5654'. [ 421.179124][T22796] netlink: 'syz.7.5664': attribute type 1 has an invalid length. [ 421.197301][T22796] 8021q: adding VLAN 0 to HW filter on device bond1 [ 421.214439][T22796] bond1: (slave ip6gretap1): making interface the new active one [ 421.224510][T22796] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 421.241625][T22800] loop6: detected capacity change from 0 to 1024 [ 421.250911][T22800] EXT4-fs: Ignoring removed oldalloc option [ 421.256993][T22800] EXT4-fs: Ignoring removed bh option [ 421.283246][T22807] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5670'. [ 421.301615][T22800] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 421.349433][T22814] lo speed is unknown, defaulting to 1000 [ 421.513121][T22817] netlink: 76 bytes leftover after parsing attributes in process `syz.1.5673'. [ 421.590982][T22821] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1014 sclass=netlink_route_socket pid=22821 comm=syz.1.5675 [ 421.620825][T22823] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5676'. [ 421.642681][T22823] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5676'. [ 421.689943][T22823] netlink: 'syz.1.5676': attribute type 1 has an invalid length. [ 421.698675][T22823] ieee802154 phy0 wpan0: encryption failed: -22 [ 421.833788][T22827] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 421.883950][T22831] syzkaller0: entered promiscuous mode [ 421.889601][T22831] syzkaller0: entered allmulticast mode [ 421.897251][T22831] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5680'. [ 422.087822][T17713] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 422.161463][T22866] syzkaller0: entered promiscuous mode [ 422.167095][T22866] syzkaller0: entered allmulticast mode [ 422.207280][T22872] netlink: 'syz.6.5695': attribute type 1 has an invalid length. [ 422.227265][T22872] 8021q: adding VLAN 0 to HW filter on device bond1 [ 422.242379][T22872] vlan0: entered allmulticast mode [ 422.247572][T22872] veth0_to_bond: entered allmulticast mode [ 422.258487][T22872] bond1: (slave vlan0): making interface the new active one [ 422.267571][T22872] bond1: (slave vlan0): Enslaving as an active interface with an up link [ 422.303228][ T29] audit: type=1400 audit(1769431456.052:18020): avc: denied { create } for pid=22879 comm="syz.6.5699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 422.972365][T22919] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5712'. [ 423.490594][T22929] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5715'. [ 423.538262][T22943] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5723'. [ 423.613652][T22951] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 423.632445][T22951] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 423.843904][T22973] ieee802154 phy0 wpan0: encryption failed: -22 [ 424.147521][T22989] loop6: detected capacity change from 0 to 1024 [ 424.155474][T22989] EXT4-fs: Ignoring removed oldalloc option [ 424.161536][T22989] EXT4-fs: Ignoring removed bh option [ 424.175649][T22989] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 424.205548][T17713] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 424.245793][T22997] Invalid argument reading file caps for ./file0 [ 424.395767][T23009] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5748'. [ 424.421009][T23022] loop1: detected capacity change from 0 to 1024 [ 424.427657][T23017] lo speed is unknown, defaulting to 1000 [ 424.428857][T23022] EXT4-fs: Ignoring removed oldalloc option [ 424.439515][T23022] EXT4-fs: Ignoring removed bh option [ 424.457190][T23022] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 424.499532][T22256] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 424.624535][T23038] netlink: 'syz.1.5756': attribute type 1 has an invalid length. [ 424.653800][ T9115] IPVS: starting estimator thread 0... [ 424.755238][T23041] IPVS: using max 2448 ests per chain, 122400 per kthread [ 424.800673][T23064] loop1: detected capacity change from 0 to 128 [ 424.812370][T23064] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 424.828462][T23064] ext4 filesystem being mounted at /54/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 424.995945][T23064] EXT4-fs (loop1): shut down requested (0) [ 425.015562][T22256] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 425.293152][T23101] team0: No ports can be present during mode change [ 425.821293][ T29] audit: type=1400 audit(1769431459.301:18021): avc: denied { create } for pid=23128 comm="syz.6.5795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 426.061800][T23132] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 426.101246][T23132] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 426.282751][T23142] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.289974][T23142] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.379901][T23142] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 426.399702][T23164] loop2: detected capacity change from 0 to 1024 [ 426.408527][T23142] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 426.417320][T23164] EXT4-fs: Ignoring removed oldalloc option [ 426.423317][T23164] EXT4-fs: Ignoring removed bh option [ 426.452904][T23164] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 426.488480][ T5448] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.505401][ T5448] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.514628][ T5448] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.523855][ T5448] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.532907][ T5448] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.541905][ T5448] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.544668][T16038] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 426.550897][ T5448] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.569116][T14218] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.911303][T23190] loop1: detected capacity change from 0 to 1024 [ 426.926509][T23194] vlan2: entered allmulticast mode [ 426.931711][T23194] team0: entered allmulticast mode [ 426.936918][T23194] team_slave_0: entered allmulticast mode [ 426.942672][T23194] team_slave_1: entered allmulticast mode [ 426.944661][T23190] EXT4-fs: Ignoring removed oldalloc option [ 426.954368][T23190] EXT4-fs: Ignoring removed bh option [ 427.040150][T23190] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 427.259905][T23238] tipc: Enabling of bearer rejected, failed to enable media [ 427.357488][T23242] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5833'. [ 427.388470][T23242] vlan2: entered promiscuous mode [ 427.393765][T23242] gretap0: entered promiscuous mode [ 427.811735][T22256] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 427.882931][T23271] loop1: detected capacity change from 0 to 512 [ 427.917133][T23271] EXT4-fs: Ignoring removed bh option [ 427.930520][T23271] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 427.952263][T23271] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 428.010637][T23271] ext4 filesystem being mounted at /59/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 428.063506][T23271] EXT4-fs error (device loop1): ext4_lookup:1785: inode #12: comm syz.1.5838: iget: bad i_size value: 2533274857506816 [ 428.129917][T23293] netlink: 'syz.6.5845': attribute type 1 has an invalid length. [ 428.137741][T23293] netlink: 'syz.6.5845': attribute type 2 has an invalid length. [ 428.426971][T23308] loop2: detected capacity change from 0 to 1024 [ 428.445918][T23308] EXT4-fs: Ignoring removed oldalloc option [ 428.450092][T22256] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 428.452170][T23308] EXT4-fs: Ignoring removed bh option [ 428.497801][ T29] audit: type=1400 audit(1769431461.774:18022): avc: denied { connect } for pid=23312 comm="syz.6.5853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 428.522669][T23313] Set syz0 is full, maxelem 0 reached [ 428.544133][T23308] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 428.557309][ T29] audit: type=1400 audit(1769431461.793:18023): avc: denied { listen } for pid=23312 comm="syz.6.5853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 428.666435][T16038] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 428.873822][T23344] tipc: Started in network mode [ 428.878784][T23344] tipc: Node identity e0000002, cluster identity 4711 [ 428.885624][T23344] tipc: Enabling of bearer rejected, failed to enable media [ 429.000698][T23363] 8021q: adding VLAN 0 to HW filter on device bond2 [ 429.172050][T23388] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5125 sclass=netlink_route_socket pid=23388 comm=syz.6.5873 [ 429.618575][T23420] netlink: 'syz.6.5880': attribute type 5 has an invalid length. [ 429.781740][T23430] loop1: detected capacity change from 0 to 2048 [ 429.789706][T23430] EXT4-fs: Ignoring removed i_version option [ 429.826529][T23430] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 429.839033][T23430] ext4 filesystem being mounted at /63/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 430.676313][T22256] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 430.722063][ T29] audit: type=1400 audit(1769431463.823:18024): avc: denied { listen } for pid=23453 comm="syz.8.5892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 431.705063][T23475] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5901'. [ 431.714172][T23475] netlink: 'syz.1.5901': attribute type 7 has an invalid length. [ 431.721993][T23475] netlink: 'syz.1.5901': attribute type 8 has an invalid length. [ 431.729751][T23475] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5901'. [ 431.810640][T23481] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5904'. [ 431.830275][ T29] audit: type=1400 audit(1769431464.848:18025): avc: denied { setopt } for pid=23482 comm="syz.2.5905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 431.911638][T23488] loop1: detected capacity change from 0 to 1024 [ 431.926025][T23488] EXT4-fs: Ignoring removed oldalloc option [ 431.932277][T23488] EXT4-fs: Ignoring removed bh option [ 431.970037][T23488] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 432.136210][T23496] ================================================================== [ 432.144363][T23496] BUG: KCSAN: data-race in xas_find_marked / xas_set_mark [ 432.151526][T23496] [ 432.153874][T23496] write to 0xffff88816b110fc4 of 4 bytes by task 23488 on cpu 0: [ 432.161620][T23496] xas_set_mark+0x12b/0x140 [ 432.166173][T23496] __folio_start_writeback+0x17b/0x370 [ 432.171652][T23496] ext4_bio_write_folio+0x5ad/0x9f0 [ 432.176902][T23496] mpage_process_page_bufs+0x4a1/0x620 [ 432.182380][T23496] mpage_prepare_extent_to_map+0x7d4/0xc50 [ 432.188226][T23496] ext4_do_writepages+0x9f6/0x2800 [ 432.193384][T23496] ext4_writepages+0x18f/0x320 [ 432.198181][T23496] do_writepages+0x1c6/0x310 [ 432.202819][T23496] file_write_and_wait_range+0x178/0x2f0 [ 432.208488][T23496] generic_buffers_fsync_noflush+0x45/0x130 [ 432.214412][T23496] ext4_sync_file+0x1aa/0x680 [ 432.219141][T23496] vfs_fsync_range+0x10d/0x130 [ 432.223958][T23496] ext4_buffered_write_iter+0x34f/0x3c0 [ 432.229559][T23496] ext4_file_write_iter+0x380/0xf70 [ 432.234803][T23496] iter_file_splice_write+0x6bc/0xa80 [ 432.240298][T23496] direct_splice_actor+0x156/0x2a0 [ 432.245449][T23496] splice_direct_to_actor+0x311/0x670 [ 432.250855][T23496] do_splice_direct+0x119/0x1a0 [ 432.255744][T23496] do_sendfile+0x382/0x650 [ 432.260192][T23496] __x64_sys_sendfile64+0x105/0x150 [ 432.265432][T23496] x64_sys_call+0x2db1/0x3000 [ 432.270160][T23496] do_syscall_64+0xc0/0x2a0 [ 432.274709][T23496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.280631][T23496] [ 432.282980][T23496] read to 0xffff88816b110fc4 of 4 bytes by task 23496 on cpu 1: [ 432.290634][T23496] xas_find_marked+0x5d7/0x620 [ 432.295428][T23496] filemap_get_folios_tag+0xfa/0x510 [ 432.300770][T23496] mpage_prepare_extent_to_map+0x328/0xc50 [ 432.306603][T23496] ext4_do_writepages+0x9f6/0x2800 [ 432.311766][T23496] ext4_writepages+0x18f/0x320 [ 432.317433][T23496] do_writepages+0x1c6/0x310 [ 432.322064][T23496] file_write_and_wait_range+0x178/0x2f0 [ 432.327743][T23496] generic_buffers_fsync_noflush+0x45/0x130 [ 432.333679][T23496] ext4_sync_file+0x1aa/0x680 [ 432.338408][T23496] vfs_fsync_range+0x10d/0x130 [ 432.343303][T23496] ext4_buffered_write_iter+0x34f/0x3c0 [ 432.348898][T23496] ext4_file_write_iter+0x380/0xf70 [ 432.354143][T23496] iter_file_splice_write+0x6bc/0xa80 [ 432.359555][T23496] direct_splice_actor+0x156/0x2a0 [ 432.364698][T23496] splice_direct_to_actor+0x311/0x670 [ 432.370107][T23496] do_splice_direct+0x119/0x1a0 [ 432.374985][T23496] do_sendfile+0x382/0x650 [ 432.379439][T23496] __x64_sys_sendfile64+0x105/0x150 [ 432.384668][T23496] x64_sys_call+0x2db1/0x3000 [ 432.389388][T23496] do_syscall_64+0xc0/0x2a0 [ 432.393945][T23496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.399870][T23496] [ 432.402211][T23496] value changed: 0x0a000021 -> 0x04000021 [ 432.407948][T23496] [ 432.410297][T23496] Reported by Kernel Concurrency Sanitizer on: [ 432.416661][T23496] CPU: 1 UID: 0 PID: 23496 Comm: syz.1.5907 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 432.428176][T23496] Tainted: [W]=WARN [ 432.432023][T23496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 432.442121][T23496] ================================================================== [ 432.792805][T23488] ================================================================== [ 432.800942][T23488] BUG: KCSAN: data-race in __writeback_single_inode / xas_set_mark [ 432.808874][T23488] [ 432.811212][T23488] write to 0xffff88816b110fc4 of 4 bytes by task 23496 on cpu 1: [ 432.818928][T23488] xas_set_mark+0x12b/0x140 [ 432.823461][T23488] __folio_start_writeback+0x17b/0x370 [ 432.828931][T23488] ext4_bio_write_folio+0x5ad/0x9f0 [ 432.834159][T23488] mpage_process_page_bufs+0x4a1/0x620 [ 432.839623][T23488] mpage_prepare_extent_to_map+0x7d4/0xc50 [ 432.845451][T23488] ext4_do_writepages+0x6fe/0x2800 [ 432.850583][T23488] ext4_writepages+0x18f/0x320 [ 432.855369][T23488] do_writepages+0x1c6/0x310 [ 432.859984][T23488] file_write_and_wait_range+0x178/0x2f0 [ 432.865732][T23488] generic_buffers_fsync_noflush+0x45/0x130 [ 432.871635][T23488] ext4_sync_file+0x1aa/0x680 [ 432.876342][T23488] vfs_fsync_range+0x10d/0x130 [ 432.881114][T23488] ext4_buffered_write_iter+0x34f/0x3c0 [ 432.886693][T23488] ext4_file_write_iter+0x380/0xf70 [ 432.891903][T23488] iter_file_splice_write+0x6bc/0xa80 [ 432.897292][T23488] direct_splice_actor+0x156/0x2a0 [ 432.902427][T23488] splice_direct_to_actor+0x311/0x670 [ 432.907820][T23488] do_splice_direct+0x119/0x1a0 [ 432.912695][T23488] do_sendfile+0x382/0x650 [ 432.917144][T23488] __x64_sys_sendfile64+0x105/0x150 [ 432.922365][T23488] x64_sys_call+0x2db1/0x3000 [ 432.927072][T23488] do_syscall_64+0xc0/0x2a0 [ 432.931609][T23488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.937523][T23488] [ 432.939863][T23488] read to 0xffff88816b110fc4 of 4 bytes by task 23488 on cpu 0: [ 432.947510][T23488] __writeback_single_inode+0x201/0x7b0 [ 432.953097][T23488] writeback_single_inode+0x16d/0x3f0 [ 432.958491][T23488] sync_inode_metadata+0x6e/0xa0 [ 432.963543][T23488] generic_buffers_fsync_noflush+0xee/0x130 [ 432.969445][T23488] ext4_sync_file+0x1aa/0x680 [ 432.974153][T23488] vfs_fsync_range+0x10d/0x130 [ 432.978921][T23488] ext4_buffered_write_iter+0x34f/0x3c0 [ 432.984500][T23488] ext4_file_write_iter+0x380/0xf70 [ 432.989721][T23488] iter_file_splice_write+0x6bc/0xa80 [ 432.995123][T23488] direct_splice_actor+0x156/0x2a0 [ 433.000271][T23488] splice_direct_to_actor+0x311/0x670 [ 433.005668][T23488] do_splice_direct+0x119/0x1a0 [ 433.010540][T23488] do_sendfile+0x382/0x650 [ 433.014987][T23488] __x64_sys_sendfile64+0x105/0x150 [ 433.020211][T23488] x64_sys_call+0x2db1/0x3000 [ 433.024911][T23488] do_syscall_64+0xc0/0x2a0 [ 433.029449][T23488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.035366][T23488] [ 433.037702][T23488] value changed: 0x0a000021 -> 0x04000021 [ 433.043432][T23488] [ 433.045775][T23488] Reported by Kernel Concurrency Sanitizer on: [ 433.051990][T23488] CPU: 0 UID: 0 PID: 23488 Comm: syz.1.5907 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 433.063382][T23488] Tainted: [W]=WARN [ 433.067209][T23488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 433.077285][T23488] ================================================================== [ 433.115192][T22256] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.