last executing test programs: 1m10.740955748s ago: executing program 1 (id=142): r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) eventfd2(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095", @ANYRESHEX, @ANYBLOB="dc59f342220d122cb761646b466b345003553a9e5e3ca0f48b3d606619a541dd03ee01e471695f416110bae53de9fbb7eba205d5af414fb769041f5a20480fbe", @ANYBLOB="13431ee24d75660249468e8115c444e321ea3873a53070cbba0305966f41cc3452b8e50904da012e98d7b0504dca87ead60c91746e11b1f00261a561ad89b89199", @ANYRESHEX=r0, @ANYRES32=r1, @ANYRES8=0x0, @ANYRESDEC], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) socket$unix(0x1, 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) open(&(0x7f0000000200)='./file0\x00', 0x4827e, 0xdc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff0800090000000000080011000000000008000e00800000000800", @ANYRES64=r2], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1m10.703432499s ago: executing program 1 (id=144): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e23}, 0x6e) getsockopt$sock_int(r0, 0x1, 0xb, &(0x7f00000010c0), &(0x7f0000001100)=0x4) r2 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_int(r2, 0x29, 0x19, &(0x7f0000001140)=0x2, 0x4) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="18090000000000000000000003ffffffbfa100000000000085100000fcffffff95"], &(0x7f0000000080)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) fcntl$setsig(0xffffffffffffffff, 0xa, 0x41) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r3, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4044011}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={0x38, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xc, 0x3, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) sendmmsg$inet(r3, &(0x7f0000000000)=[{{&(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32, @ANYBLOB="ac1414aa7f000001000000001000000000000000000040"], 0x30}}], 0x1, 0x0) iopl(0x1) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) r7 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x0) r9 = openat$cgroup_procs(r8, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) preadv(r9, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x10003, 0x21cdc71a) r10 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r1, &(0x7f0000000100)={0x20000014}) 1m8.383533304s ago: executing program 1 (id=152): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x10000, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10003, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = getpgrp(0x0) r2 = syz_pidfd_open(r1, 0x0) fsetxattr$trusted_overlay_nlink(r2, &(0x7f00000018c0), 0x0, 0x0, 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) socket$netlink(0x10, 0x3, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x2e0, 0x12c, 0x60000004, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x25, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b311453dcbb62932a01105d0a8066ca8e5e1f2f575d0d6e996b57fd408d420abb7337934e59815d75b4eb3e7206afce", &(0x7f0000000380)="af5fa441b438b5156d8a9fcc090f586e979858f64170cde36889dcc8539ffcca62621a4c3ea3f7acee366e6fb0b94314f90931dec60fed6c9fee64af416c29f65e47110b81f6b4da06db5e1aad1f627acb", 0x0, 0x3}, 0x2c) 1m8.228228962s ago: executing program 1 (id=154): r0 = perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x38, 0x7, 0x2, 0xf9, 0x0, 0x5, 0x65040, 0x6, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x5e, 0x0, @perf_bp={&(0x7f0000000340), 0x1}, 0x6000, 0x7, 0x9, 0x3, 0x1, 0x0, 0x8000, 0x0, 0xe, 0x0, 0x9}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x1) r1 = getpgid(0x0) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x10009, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={&(0x7f0000000400), 0x1}, 0x204, 0x0, 0x43a1bd78, 0x7, 0x9, 0xdf, 0x2, 0x0, 0x0, 0x0, 0x200b}, r1, 0x4, r0, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xc1c, &(0x7f0000000300)={[{@discard}, {@jqfmt_vfsv0}, {@journal_dev={'journal_dev', 0x3d, 0x460b8000}}]}, 0x1, 0x52a, &(0x7f0000001440)="$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") write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000300)="4e11f4292922c904e664e411cdbabcd6ba6be9561ad1a7489e010e35", 0x1c) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000000300)=ANY=[@ANYBLOB="500000003f0001002cbd7000ffdbdf25010000003a0004002c4e2d"], 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x8000) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="02030003120000002cbd7000fcdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af05000600000000000a0000ffffff800000000000000000000000000000000001020000000000000002000100000000000007000c0000000005000500000000000a00000000000000000000000000000000000000000000010700000000000000010014"], 0x90}, 0x1, 0x7}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB="f00000001a0007000000000000000000fe80000000000000000000000000001b00000000000000000000ffff0a010102ffff00000000000000000000020000007b067290645b956fc61afa014d8eaba6817986bab42c0ce2409cc457a321b7b92026726345d17f2eedb4ebac10ead4291696898e002a827371dbb2971ec43c95574a55fce0cf37d101f7daae8bbabb70b7201adcc5813103c6e98e72627d3f6a9fa5da5162b123b1ae27f6db0d539d745867766b284a1663bb9626f76ce020e26a0b000992af52a20237cab8bc0cdc6c6f5cb8e00c581f64b29b01392959719f27ac79041af4d53b920e17989327c3", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc000000000000000000000000000000000000000000000000b40000000000000200000000000000000000007ffffffe0000000000000000000000000000000000000000000000000000000000000000000100000000000000002000000000000700000000000000fdffffffffffffff0000040000000000e80a000000000000000000000a0002007000000000000000"], 0xf0}}, 0x4cc00) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.self_freezing\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="12000000050000000800000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r9}, &(0x7f0000000180), &(0x7f0000000100)=r8}, 0x20) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@newlink={0x3c, 0x12, 0xff05, 0x40000, 0x4, {0x0, 0x0, 0x4a00, 0x0, 0x2045, 0x2000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x4}}}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x3}]}, 0x3c}}, 0x0) sync_file_range(r7, 0x6, 0x9fd, 0x3) r11 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f00000002c0)={[{@nombcache}, {@usrquota}, {@nombcache}, {@noauto_da_alloc}, {@init_itable}, {@user_xattr}]}, 0x1, 0x569, &(0x7f0000000940)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000080)='./file1\x00', &(0x7f0000000840), &(0x7f0000000340)=ANY=[], 0x361, 0x0) r12 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r12, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f0000000440)=ANY=[@ANYRES64=r0, @ANYRES32=r11], 0x700, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000280)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000900)=ANY=[@ANYRES64=r11, @ANYBLOB="ecd15345e4396a3797c3eaaddd7ed6dfcd9a26ea39a55c807c"], 0xfe37, 0x2) sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x3f6, 0x20, 0x70bd2a, 0x25dfdbfe, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x8}, 0x8000) 1m7.761540675s ago: executing program 1 (id=158): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) r1 = dup(r0) ioctl$TCSETS(r0, 0x40045431, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@initdev, 0x0}, &(0x7f0000000180)=0x14) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000019c0)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYRES64], &(0x7f0000001980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x6, 0x4, 0x7, 0x50000}]}) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x0) r7 = socket(0x10, 0x3, 0x0) recvmsg$unix(r7, &(0x7f00000009c0)={0x0, 0x0, 0x0}, 0x40000020) sendmsg$nl_route(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=@bridge_getvlan={0x20, 0x72, 0x7e3bfe4fa73db39f, 0x0, 0x0, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}]}, 0x20}}, 0x0) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='nodots,allow_utime=000000000034,usefree,check=strict,dots,\x00'/70], 0x1, 0x1e9, &(0x7f00000002c0)="$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") r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) setrlimit(0x0, &(0x7f0000000040)={0x7, 0xfffffffffffffffc}) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000100)='/dev/snd/timer\x00', &(0x7f0000000140)='memory.events\x00', 0x0) syz_open_pts(r0, 0x80) 1m7.429403741s ago: executing program 1 (id=163): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc, 0x7ff80000}, 0x0, 0x1, 0x0, 0x6, 0xfff, 0x108001, 0x7fff, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x39000, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000080)={0x0, 0x47, "ad1a26bb1752034b9f6d877fc8168eb5b39a80db7eb13a1c660b82af8785832015b95fbeb21b01e59e8d178966dfdf2072d10b664b59b247cb7a152e10890c9164cb4ce500719d"}, &(0x7f0000000140)=0x4f) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @private0}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000200)={r3, 0x0, 0xfffa, 0xc4, 0x5a3, 0xfffffffc}, 0x14) 1m7.429075481s ago: executing program 32 (id=163): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc, 0x7ff80000}, 0x0, 0x1, 0x0, 0x6, 0xfff, 0x108001, 0x7fff, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x39000, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000080)={0x0, 0x47, "ad1a26bb1752034b9f6d877fc8168eb5b39a80db7eb13a1c660b82af8785832015b95fbeb21b01e59e8d178966dfdf2072d10b664b59b247cb7a152e10890c9164cb4ce500719d"}, &(0x7f0000000140)=0x4f) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @private0}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000200)={r3, 0x0, 0xfffa, 0xc4, 0x5a3, 0xfffffffc}, 0x14) 8.355801617s ago: executing program 4 (id=547): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000000)={0x0, 0x800ce90, 0x10, 0x3, 0x40004333}, &(0x7f00000006c0)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f0000000300)=@l2tp6={0xa, 0x0, 0x2, @private2, 0x401, 0x4}, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x847bd, 0x3a00, 0xe, 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb801b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0xb093, 0x800000, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x200}, &(0x7f00000000c0)=0x8) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000540)=@IORING_OP_ASYNC_CANCEL={0xe, 0x1, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r8}}) syz_mount_image$msdos(&(0x7f00000006c0), &(0x7f0000000280)='./file0\x00', 0xc0, &(0x7f0000000080)=ANY=[@ANYBLOB="646f74732c6e66732c71756965742c6e6f646f74732c636865636b3d7374726963742c6e66733d7374616c655f72772c646f74732c6572726f72733d636f6e74696e7565008000000000000074732c00"], 0x1, 0x246, &(0x7f00000002c0)="$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") r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000580), r1) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r9, &(0x7f0000000740)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80040000}, 0xc, &(0x7f0000000700)={&(0x7f00000005c0)={0xd0, r10, 0x200, 0x70bd25, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4000010}, 0x48011) socket$netlink(0x10, 0x3, 0x0) r11 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r11, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0000000000000000df00000000000700000000000000000000000000000100000000000000000000feffffff0000000000fffff900000000000000000000000000000000b60000000000000000000000000000000000000000feffffff00000000000000000000000000000000000000000000000000000000000000000b0000000000000007fffffeffffffff000000"]}, 0x108) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) open(&(0x7f0000000140)='./bus\x00', 0x143bc2, 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x4) 8.354333867s ago: executing program 5 (id=548): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) pwrite64(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x9000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xe}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd1}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xa) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) madvise(&(0x7f00000ac000/0x1000)=nil, 0x1000, 0x14) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001480)=ANY=[@ANYBLOB="20000000100000070000000000ff0300000000000c0002006e6c38"], 0x20}}, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000840)='./bus\x00', 0x10, &(0x7f0000000540), 0x1, 0x7cc, &(0x7f00000022c0)="$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") perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000140)={@multicast, @local, @val={@void, {0x8100, 0x0, 0x0, 0x2}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f700df", 0x1c, 0x2c, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[@hopopts={0x3a}], @ndisc_ns={0x87, 0x0, 0x0, @loopback}}}}}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_io_uring_setup(0x237, &(0x7f0000000480)={0x0, 0x8901, 0x400, 0x1, 0x22f}, &(0x7f0000000040)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e20, 0x1000, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x9}}, 0x5, 0x412, 0x0, 0x3, 0x8, 0x0, 0x2}, 0x9c) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x24, 0x2007, @fd, 0x800, 0x0, 0x0, 0x18, 0x0, {0x2}}) 7.365254606s ago: executing program 5 (id=552): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x1, 0xd77, 0x580f02, {0x0, 0x2710}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x1, 0x0, 0x0, "6191440132bb112240fcbcc3fa9d0431575f8614db538ce09c50eecf6ac579e8e83b944b666113f3afed71231e6653a1e899f17b33515bb07c9a1ed652a2159b"}}, 0x80}}, 0x4004044) socket$packet(0x11, 0x3, 0x300) syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x6}, 0x204, 0x1, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x780, &(0x7f0000000040)={0x0, 0xec5d, 0x1c881, 0x0, 0xd1}) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="85000000ad00000066"], 0x0, 0x8}, 0x94) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4af584f73552a348) io_uring_enter(r3, 0x0, 0x1000002, 0x37, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x20040800) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(0xffffffffffffffff, 0x8002f515, &(0x7f00000000c0)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$int_in(r4, 0x5452, &(0x7f00000003c0)=0x400800) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_bp={0x0}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0xa, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) shmget$private(0x0, 0x4000, 0x1a81, &(0x7f0000ffa000/0x4000)=nil) 7.179449065s ago: executing program 4 (id=554): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x9, 0x3c231, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0xe}, 0x204, 0x2, 0xfb3d, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xd, 0x10, &(0x7f0000000000)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xf1, 0x0, 0x0, 0x0, 0x20}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ab92b}, {0x85, 0x0, 0x0, 0x8}, {0x4}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x2000}}, [@call={0x85, 0x0, 0x0, 0xc}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x9}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x6b, '\x00', 0x0, @sock_ops=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) 6.859704521s ago: executing program 4 (id=560): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000814}, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0) mmap(&(0x7f0000a41000/0x1000)=nil, 0x1000, 0xb635773f06ebbeee, 0x8010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800002, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0xfc75) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x0, 0x4, 0x8, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xd, 0xffffffffffffffff, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) listen(r5, 0x8) accept$inet(r5, 0x0, 0x0) 6.761144236s ago: executing program 2 (id=562): munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x40) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f0000000000)=""/31) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) io_uring_setup(0x6c0, &(0x7f0000000100)={0x0, 0xd3d6, 0x10000, 0x5, 0x351}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_config_ext={0x100000001, 0xdd5}, 0x1004, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$'], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r3, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000380)='%+9llu \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r4}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000300000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r5, 0x18000000000002a0, 0x48, 0x62, &(0x7f0000000600)="b9ff03075fe9008cb89e08e09900", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x28) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x1000, 0x1) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000640), 0x1, 0x5a8, &(0x7f0000000680)="$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") r6 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) quotactl_fd$Q_SETINFO(r6, 0xffffffff80000600, 0x0, &(0x7f0000000380)={0x228, 0x2, 0x2000000, 0x3}) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)=0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x8, &(0x7f00000010c0)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x11, 0x98, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x9}, @alu={0x4, 0x1, 0x2, 0xa, 0x2, 0x4, 0x1}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x94) timer_settime(r8, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000002000000) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x80000001, 0x4, 0x32, 0x0, 0xff}, 0x9c) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r6, 0x84, 0x6c, &(0x7f00000001c0)={0x0, 0x8, "64cc869a6a3f8eaa"}, &(0x7f00000002c0)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000200)={r9, @in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x1000000, 0x6, 0x9a}, 0x9c) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sigaltstack(&(0x7f0000001000)={&(0x7f0000000000)=""/4088, 0x0, 0xff54}, 0x0) 6.740249067s ago: executing program 5 (id=564): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000ec0)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff4070000000001000480000000000e1ff95000000000000002ba7e1d30cb599e83f040000f300000000bd01212fb56f040026fbfefc41056bd8174b79ed317142fa9ea4158123751c5c652fbc1626cca2a2ad75806150ae0209e62f51ee988e6e06c8206ac6939fc404004900c788b277be1cb79b0a4dcf23d410f6accd3641110bec4e90a634199e07f8f6eb968f200e011ea665c45a34b8580218ce740068720000074e8b1715807ea0ca469e468eea3fd2f73902ebcfcf49822775985bf313405b367e81c700000040000000000200000000005335000000143ea70c2ab40c7cb70cc8943a6d60d7c4900282e147d08e0af4b29df814f5691db43a5c00000004000000000089faff01210cce39bf405f1e846c12423a164a330100846f26ad03dd65873d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d6155102b1ced1e8019e63c850af895abba14f6fbd7fb5e2a431ab914040000000000010092c9f4609646b6c5c29647d2f950a959cf9938d6dfcb8ed2cbdc2ba9d580609e31c3fa90812a533ce206e7e57a79d6fce424c2204dd418c005479ecab19bdfb15a32a4fd67ce446adb431d07db79240acaf091231b986e77d05d988d6efdffdf48dca02113a38300cabf2b7543ffc166955709009e000000000061629d1822f720ec23812770d72c700a44e113d17088fdd00600000f7889b8c7044f56ff030000000000006cd4970400cac6f45a6922ded2e29514af463f747c08f4010586903500000000000000000000be34cf0f9d640dd782ac0cbc46903243d0d0f4bc7f253d0500000032daaf281c450e64c33aac8f23e7d1c94c4505a9839688b008c370494f6734b771546d9552d3bb2da0d000000000000000009125c97f0400f5e1671bc5eb7739daa7820a91cb0e732df2ae0000c747e00a4fbfe8942fa859cd28bdaa1509309926c77fbcb15ec58b42b400005a6b649dd5f13cd776e6c7c4b5c4b0de20e033b378553ead4c8cc530b62c36364e6505992209bdbc6203da7a3797246a6adef071102f0aa2c40095ddd05176f5cb8bd99e1ba0f9568f3e3876bba7bf973334e7919a080000000000000004fb996ad919f7e9672ce107000000ad882f2aead166c94500be902ee7dabc768eb9ec13f334aae90981ecaf5f744f22f2e45afe2c9e8632276cffe5f1fc215c0797d0244cf1ce269d10525745caaa3f77d1b80116cb9a38400242010000000100000091a0116f4693133138583da5e10b434697b0443b7b4ddfb3ace29e16e5a881336aad0974269a1025e2a9a135c0508af1aec2926627b43bba1229a7466bdca64f514b7911458da09fe8681916d408d753226a83ae2434ccd3fc508216aea86833030f569d61dc998620fcf4eeb92e7bc511df63c53b82514493b8f3c74f44ba184d40e87612024da1a1ebe316923865f037c01d71b5de81121046d84b18acb5cbea7eecad9b6dd46ed83515cd9f140e5f00019be25b5910ab193e90be231a05fd82e6003969c3f081ff1d0eb50a04d14644234828cbb5aaa0ece702abdd425fa25ae04a2315c89064df633700000000d9e5953ea67310993d01000000000000003ac753358791b1490273ca535e05b11d815237743a5b79ad45de2a3c91257f02c2f30f5513662809073710937ed0055b238f466e1442f8ec7a5b394228035039ceeb452dca75f9ff5332b4c4777a58a0aa9a821667c68549e9da89ad4274ce2d3d7619936768a84a1465fff4eedba55955434f132ab7b884057aeb68f3d675a79907a72ace70902459f6950a06a03507838231a335ae759ed25534f2e90a7def4b3d4af7fd47ab1a701e4b7a7dfc1d12775ed0a31bc7b5855880aa767e68fe6b7aa5ac115724b6cb8fcebb67719eccd87b06b38566cf61ad2f307a79d2ce9801837bf0bd3af0271de700eef2795d28cb0017000000000000000000e052d93194121b774d21a0317d0346078400004652c769fd3d3e661a2fb511164f1502ab2ac4eb3f19c042163e0bdb88b82de384a8055e8b1e24294b0546cce481ff5618b7b9585dbb64d66debf219fa479abf22f3d64fe82e466ea6f27859946e72f8ce659e340c714809ec4d060bb1c9cfcde57b79625e2979fe689a5a246cbbd488f43f46b2536f175f46dfb27d5229467270246ab53616c46edf34c559d3de0c59ca3305e66825715e5e4cd5b54c1b05c09f04337a76a30373baac3ecec91fd546308a0004be94dfab28c2a51dc816df0000000000c12254f041804f7f7074356789b1d4dd55f3e045a48241a4ce04d06acb2cf11eab759ba78da5da0f26126d4cf2c73e5f94030000040000000000000000c301985d603403592486204054be3fdda91f9e315886941928e5a8bc1a00e69a98c0a8f7192f6ee93cc4124cf4e7610915efc08c834a44e1d685d6835a40b5bc615949cbcd98d044fa492aa38717481455e86dcd7816ad8940bd192595369d89ae6eadeb9117e8b94ab422c8d62f858875dccdbc89572231ef5d6df6a9c55f8df763c7c64da7cc017e1e3f5cd4cb9fe6d19b11d4d38239d318016e622b9683b7e46be64dc097982e23462392a0cd05afb2e060fd42ef00dfbd057311aab94f307d10c7a1af0d8e5a0fcb547475d13c0000000000000000f1cc97103d714d1abb901f866d9d629b4fb185f45790517c4a0f5c6a5024e3359e8d83e3f6edf9e2afb5ab59c7b2b45cfb0a3c1303a98e4ed531ac11cca1cd744b431de74c7cd6533adaa8ec749061b2959d53da626aa189781dc1be4d5c81aebc0cada819895b377d4f17a7878ba99864ae84464744c605646caf2e06b13eba7ba10acf77d91b2297e9570d730a4da534d735a223626402b308daf7835780fa6f4e410000000000fb00000000000000000000b94952139bd4bdbccc5e334c49584655c4fce8c5bb7c54664aef6d780100358aa54b4b49926c4be9ee4659153d9fa95d07cc4efdab2c5f4503148d0255d0b748366dafe042d78479c21d830e1431ed6d646d13e8e7230300ef0a5642bbed1dee9b46b6f02e572024ccf3c8edd82660e5d74c52be71d780c300000000000000000000000002000000000044ff72f96f084f4b6cdcb1b4a9d8e9f9021b85497d0c3df704c8a0034c09caeeb0e34799b755649883539258a7b33dcef15d8fd1953ebaaa3cff81a0de7a05a440f20f6b273ceb8678f10378b670be7504dabd1471355d853292775d0366891f0bcf0a6087ed4f1f25ef52394db3e9d8318bbb9baff3db95bfd68a08ded5027a7ca2a64ca081c6b2f7b895cdf98b763ebab9451c65eced6f5f97a541210806d885762ac3150225036c7eccd7a05593abd963f9a02df58085115e54f675e6a08d25b5722cabf989b4bbc562e073b81bae61f05c5e1f90e021340b60cc5fb8fdb09b6d20b092b70f77f0f428d2000000000000000000000000006cc6f64f583a26a78f7f417f66c0af32f5194ddfce51e5aff28f621bb2fd2a5ab719823488d6e869b08d3d4ac7950c60144cf77437e29895a23282e3c65e015d1c334832a90ee77d93596e3f12e9ca8c67c7f3c9b66c9cb03edec184ad1d9544c7a3be250e471dca00000078544d79c0efe4094e561eeb26ee4c81106d03c004bc1589ef6e13648999c8735e2634009aaa90c571fa3c07238697b1db783c52715055445e96995fe3273b0346b03fc742c06aa3947e0d9cf0c99b5e245ede85893112deea8bd3355a32ec15e1242f170a51f28cea4105541e96a52da4984d26bd29cb0623f00c6b0a4c00ad406d729babc9d1550a683c349017a340444000000000000000000000920ca49f7cc8194aaebdcae5a62bb7587b57f41f1c2034911f23e6bd0291b3f19f03a0a15dea685a8ab75b3c60391afa5483231305402b52a8f9863800f127d6b4518f73a847ca583e855d70c6a4a53f61ad753d5e740db44afd32b019d9e8b41361c2c104fe52837a19006952fe2724c0105ab158a54a6a73000000000000000000000000b0d135da438cbe303f3ae070def97d6649b5a693ff5c788e5a406e1d06942ed51bff073011f6e6c29d3ea22e5fc26c7fbe37656229a6a12857ae9ed131ccdd513066bc9422ec38a1dc5212986d9bc330a23eb3b200af1a3678c2bfbe4b4ba6e8471495f6e82c5ee425973c590253e875352a3acaee044868f9b80f8fdc9d402007bb4c8df1b69d3d2b364ec9e4ed2f554118684eff1adf5b49b6b29232198e682dfa45dced8b332c404c8f292f36730845dc37dfe7a59e252ddc33ea9072dcd697a700cfac90b487660795f564ddb61fa3e4835f936984200000000000000000008e9f7bc3a00cd72ced7684e264e45398f7087734fcf2023a7a4c880f562f46f14cdc1bf472d74bc0c777b1021ff75de086c08f72a41399d3a3065b2f50a531cc90edbf88370ff50ba1aa6cc59076165a3ab90a3c90527b7c9711cf85bbb0cb0aebc47ab5c65458c40020f2cfb10e5f0a1594ae491e8756446e6873a8b222ae7e58dd7640666e359fc583e17ed6bcb30c0fafbba761e756ca80286d38bb92dd9ba17c1bb628e5b8d52c9a02a67f788ab88dca817cb4886942a279e06f45c8c936f5c46e1a008097471ca0ee26bcfabf7adb9c90a10539d960dec5c84464f6bc68318e7e899acf20ea41b071132d7a5945e941334855ce6149deaae1b5b83045e83bfc208079e6e58ebb4176b126c743111c5a712f465a3007d665ac21c43a544947c9d13e5206a21025f6acd47c2d333e648dcbf2e4989a1d4a176fe8f7a8cf0aeaf9736118b036639cb35810ea88213ff2a0842d420d418d026a101222a4ebd18fc89f04b5a9056ca6c00308936679474fa83bdf6eac126c9be33c551bccd42d8000736ed9a64ff7cb87d44c9bcf821c96dcd34aadfcc42fabd5976cedc9a4eef24764168056d0645c7aa007d69df4fa8de1224a56f0799ad59ee5c84418a1faae590b6c896cdd808376b6b51b217fcad5fbd7e3208d009e37484378df3ee5969f817d715d60fdd02c04e3fdd62a29285ac92f6836cbeb4d04d84c396150b2e17828d924013978173c48635e0b1ad4a0c5956717629794b39cf18d599e723d3c24689a5fea6cc1f59d1ba1fccfba88e02f9907"], &(0x7f0000000140)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000100)=r1, 0x4) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14, 0x1, 0x8, 0x101, 0x0, 0x0, {0x2, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r2, &(0x7f00000003c0)={0xa, 0x4e22, 0x16, @mcast2, 0x1}, 0x1c) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xfff3}}}, 0x24}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_ALL_TARGETS={0x8, 0xa, 0x40000}]}}}]}, 0x3c}}, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x7, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000240), 0x8080, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB="2c7733f46e6f3dfe5978980f30e1d42f5d939a6f7f6f023147d1c1226684aeb323b6c0ebb2044aa1ffb787b3343e05908b1f5b1d310fef41dc2808fc64a807450b3cc669d4c9b29d80d27fb36e4ba6d9d936de646eb6698512883b8bff822a06be316a7b511f66448f61d1c75dccf79bad6efa03bf6a53aa944dd11ddef01c63ca5688e03dd838091e5a6b5bcbd4167c8bf25b62c8ea043b69eb46fc0116cf8c3a9238a57a33dc92bf04648a109943577dc6fed50604498fc1e103b0eed9", @ANYRESHEX=r7, @ANYBLOB=',\x00']) setsockopt$inet6_group_source_req(r3, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x4e21, 0x80, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty, 0xfffffff7}}}, 0x108) 6.689976439s ago: executing program 3 (id=565): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1, &(0x7f0000000040)}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0xb030, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}, 0x1c) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01') unshare(0x22020600) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000340)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000000, &(0x7f0000000180)=ANY=[@ANYBLOB="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", @ANYRESOCT=0x0], 0x3, 0x26f, &(0x7f0000000680)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x1) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000240)=@generic={0x0}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) 6.517151218s ago: executing program 3 (id=566): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x48) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000002, 0x6031, 0xffffffffffffffff, 0xffffd000) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) write$cgroup_devices(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="6320f367e2d7467a41735d2dd924a730a9ce39e63ab4580a1e272c58a34762628a71b9d4ed9ce9be489bbdd485a8cb6147b61df3c330b1a5899eb14409db22764d8c27e28d3628cc77ab5cb18f1300713a4b2ee742343e207c03729c6f481c74a279c96eda8c96efd12236f6b4ba02878914eb7c77bc10376c16d36cd87016d10fdedba5f02cdf6d24d9541a29b00e5a7f8e7496f64fa53234196f23cfeb47597ea38f5e0855e1c04e74e7b353bb6b6236112f584a840e670f9533fd9243f4ab898f5d4c6533b5949cc390389512edb3e8175710ef525d50fe3f3db0d0df", @ANYRESDEC], 0x45) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000000)={0x18, 0x4, 0x1}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x88a, &(0x7f0000000640)={[{@usrquota}, {@usrjquota, 0x22}, {@data_ordered}, {@noload}, {@i_version}, {@grpjquota, 0x22}, {@init_itable}, {@jqfmt_vfsold}, {@noblock_validity}]}, 0xfe, 0x44e, &(0x7f0000000900)="$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") r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/ip6_mr_vif\x00') pread64(r2, &(0x7f00000002c0)=""/85, 0x55, 0x3) r3 = syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x61, &(0x7f00000001c0)=ANY=[], 0x1, 0x0, &(0x7f0000000000)) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000480), r4) sendmsg$TIPC_NL_LINK_GET(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=ANY=[@ANYRESHEX=r4, @ANYRES8=r0, @ANYRESDEC=r3, @ANYRESOCT=r1, @ANYRES32=r0], 0x2c}, 0x1, 0x0, 0x0, 0x40804}, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7000001000000008500000006000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x4e20, 0x7fffffff, @private2, 0x2}, 0x1c) getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000380)={@private0, 0x0}, &(0x7f00000003c0)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x763, 0x0, 0x0, 0x0, 0x28, '\x00', r5, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0xfffffffffffffe77, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket(0x2000000015, 0x80005, 0x0) r7 = socket(0x15, 0x5, 0x0) getsockopt(r7, 0x200000000114, 0x271f, &(0x7f0000032580)=""/102396, &(0x7f0000000000)=0x18ffc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = dup(r1) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000300)={0x57, 0x0, 0x8, {0x0, 0x1}, {0x5, 0x2}, @rumble={0x1, 0x8}}) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") r9 = open(&(0x7f0000000140)='./file0/file0\x00', 0x64942, 0x106) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)=""/22, 0x16}], 0x1) pwritev2(r9, &(0x7f0000000240)=[{}], 0x1, 0x7800, 0x0, 0x3) write$UHID_INPUT(r8, &(0x7f0000002080)={0xf, {"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", 0x1000}}, 0x1006) 6.508708279s ago: executing program 2 (id=567): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x7, 0x34328, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0x2}, 0x10026, 0x10003, 0xfffffff8, 0x3, 0x100008, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) semctl$GETZCNT(0x0, 0x3, 0xf, 0x0) (async) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r8, 0x0, 0xf3a, 0x3) (async) close(r7) (async) timer_settime(r5, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz0\x00', 0x200002, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x480000, 0x5) (async) r11 = perf_event_open$cgroup(0x0, r10, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r11, 0x4008240b, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'veth0_macvtap\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYRESOCT=r4, @ANYRES32=r12], 0x68}, 0x1, 0x0, 0x0, 0x4048000}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={0x0}, 0x1, 0x0, 0x0, 0x845}, 0x4014) 5.267428639s ago: executing program 3 (id=571): ioperm(0x0, 0x6, 0x7) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r1, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r2, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r4, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) rmdir(&(0x7f0000000000)='./file0\x00') 5.026750371s ago: executing program 2 (id=572): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1a, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x26, 0x0, 0x0, 0x0, 0x40000000}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r7, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, 0x0, 0x0) r8 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x140) fchown(r8, 0x0, 0xee01) sendmsg$NFT_BATCH(r8, 0x0, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xc, 0x1c, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1b}}, {}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x5}, {0x3, 0x3, 0x6, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x8, 0xa, 0x4}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x0}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x2}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c0}, 0x94) r9 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$can_j1939(r9, 0x0, 0x2000) 5.014714232s ago: executing program 5 (id=573): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f00000002c0)={[{@test_dummy_encryption_v1}, {@usrjquota}, {@auto_da_alloc}, {@init_itable}, {@nodioread_nolock}, {@journal_checksum}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}]}, 0x1, 0x587, &(0x7f0000000940)="$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") socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1a, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x26, 0x0, 0x0, 0x0, 0x40000000}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x8}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r7, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r7, 0x29, 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "2d9421fe8a4c9563", "cf6ff9ff337ed301000100c747fbbfc1", "dbdc27ff", "16de86d67a8426bd"}, 0x28) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x480) r8 = openat(0xffffffffffffff9c, &(0x7f0000000400)='.\x00', 0x0, 0x140) fchown(r8, 0x0, 0xee01) sendmsg$NFT_BATCH(r8, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x9c}, 0x1, 0x0, 0x0, 0x4040071}, 0x8000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="5000000010000104fcfffffffcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="031500000000000020001280080001006772650014000280050013000000000008000100aa76a2ed13e62800f0e4474a59f0293f2b66964f2dd3c50dc60e012fbfdaec0779ca", @ANYRES32=r9, @ANYBLOB="08000500", @ANYRES32=r9, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r9, @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x2004d808}, 0x24000000) 4.994945043s ago: executing program 4 (id=574): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_int(r1, 0x0, 0x2, &(0x7f0000000040)=0xff, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000001ac0)=@nat={'nat\x00', 0x670, 0x5, 0x540, 0x138, 0x2b8, 0xffffffff, 0x0, 0x138, 0x4a8, 0x4a8, 0xffffffff, 0x4a8, 0x4a8, 0x5, 0x0, {[{{@ip={@empty, @dev={0xac, 0x14, 0x14, 0x26}, 0xff000000, 0xff000000, 'vcan0\x00', 'rose0\x00', {}, {0xff}, 0xc, 0x2, 0xc}, 0x0, 0x100, 0x138, 0x48, {}, [@common=@unspec=@physdev={{0x68}, {'wg0\x00', {}, 'wg2\x00', {0xff}, 0x0, 0xe}}, @common=@unspec=@addrtype1={{0x28}, {0x901, 0x40, 0x3}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x18, @remote, @rand_addr=0x64010102, @gre_key=0x4, @port=0x4e21}}}}, {{@ip={@loopback, @initdev={0xac, 0x1e, 0xe4, 0x0}, 0xffffffff, 0xff000000, 'team_slave_1\x00', 'veth0_to_hsr\x00', {0xff}, {}, 0x11, 0x0, 0x42}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@conntrack1={{0xb8}, {{@ipv6=@empty, [0x0, 0xff, 0xffffff00, 0xc20f5e0473180537], @ipv4=@empty, [0xffffffff, 0x0, 0xff000000, 0xff], @ipv4=@remote, [0xffffff00, 0xff, 0xff000000, 0xffffffff], @ipv4=@private=0xa010102, [0xffffffff, 0x0, 0xff000000, 0xffffffff], 0x3, 0x0, 0x87, 0x4e20, 0x4e23, 0x4e21, 0x4e24}, 0x80}}, @common=@ah={{0x30}, {[0x6, 0x6], 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@multicast2, @broadcast, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_vlan\x00'}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@addrtype={{0x30}, {0x890, 0x218, 0x0, 0x1}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @random="5bdef0470748", 0x1, 0xb, [0x23, 0x3c, 0x2f, 0x7, 0x1a, 0xb, 0x33, 0x3e, 0xf, 0x10, 0x7, 0x25, 0x39, 0x3a, 0x1e, 0x2e], 0x1, 0x7, 0x5}}}, {{@uncond, 0x0, 0xb8, 0xf0, 0x0, {}, [@common=@socket0={{0x20}}, @common=@inet=@tos={{0x28}, {0x5}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @rand_addr, @initdev={0xac, 0x1e, 0x1, 0x0}, @icmp_id, @gre_key=0x2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x5a0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001f000000050016001100"/36], 0x24}}, 0x44004) r6 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) syz_usb_connect(0x5, 0x0, 0x0, 0x0) r7 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r7, &(0x7f0000000100)={0x1d, r8, 0x2, {0x1, 0x0, 0x2}}, 0x18) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r7) sendmmsg$unix(r7, &(0x7f0000001500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000000) write$selinux_create(r6, &(0x7f00000005c0)=@access={'system_u:object_r:root_t:s0', 0x20, '/usr/sbin/cups-browsed', 0x20, 0x5}, 0x48) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x80078b, &(0x7f00000000c0)={[{@usrjquota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@delalloc}, {@nobh}, {@min_batch_time={'min_batch_time', 0x3d, 0xb656}}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x46f, &(0x7f0000000bc0)="$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") r9 = socket(0x2, 0x3, 0xff) bind$inet(r9, 0x0, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000700), 0xffffffffffffffff) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000400000000000000000b7080000000000007b8af8ff00000000b7080000020000407b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=0x1, @ANYBLOB="00000000000000000d055e010800000085000000a50000439500000000000000"], &(0x7f0000000240)='GPL\x00', 0x4, 0x1009, &(0x7f0000002500)=""/4105, 0x0, 0x3}, 0x94) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r10, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000880)=ANY=[@ANYBLOB="1c000900", @ANYRES16=r11, @ANYBLOB="230525bd7000fedbdf25050000000800030004000000"], 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x4000000) sendmsg$rds(r9, &(0x7f00000001c0)={&(0x7f0000000240)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000000280)=[{0x0}, {&(0x7f00000000c0)=""/23, 0x17}], 0x2, 0x0, 0x0, 0x4c880}, 0x8000) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r9, 0x84, 0x8, &(0x7f0000000180), &(0x7f0000000500)=0x4) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="34000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b000100626174616476000004000280c9c60e995da8b4eb0103475be53b930ae1cbb246016ace2049f1db715c5192a29b256ef1f8d75b57e1104b3d2259c0bfd5858dcd"], 0x34}}, 0x0) 2.532658195s ago: executing program 3 (id=576): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) (async) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x0, 0xfffffffd}}, 0x10) (async) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f00000001c0)={0x8000042, 0x3}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x10000042, 0x0, 0x2}, 0x10) r5 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r5, &(0x7f0000000500)={&(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x1, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x8d4) (async) lseek(r4, 0x8, 0x2) (async) recvmsg$unix(r1, &(0x7f0000000980)={&(0x7f0000000000), 0x6e, &(0x7f0000000900)=[{&(0x7f0000000140)=""/161, 0xa1}, {&(0x7f0000000240)=""/203, 0xcb}, {&(0x7f00000003c0)=""/153, 0x99}, {&(0x7f0000000480)=""/251, 0xfb}, {&(0x7f0000000580)=""/231, 0xe7}, {&(0x7f0000000680)=""/235, 0xeb}, {&(0x7f0000000780)=""/124, 0x7c}, {&(0x7f0000000800)=""/250, 0xfa}], 0x8, &(0x7f0000000340)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}, 0x2000) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbee, {0x0, 0x0, 0x0, 0x0, 0xc15}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_INC_SCI={0x5, 0x9, 0x1}, @IFLA_MACSEC_SCI={0xc, 0x1, 0x10001}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x50}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) r9 = memfd_create(&(0x7f00000009c0)='macsec\x00', 0x4) (async) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000b40)={0xffffffffffffffff, 0x200, 0x10}, 0xc) (async) r11 = semget$private(0x0, 0x2, 0x204) (async) clock_gettime(0x0, &(0x7f0000000cc0)={0x0, 0x0}) semtimedop(r11, &(0x7f0000000c80)=[{0x3, 0xfffb, 0x800}], 0x1, &(0x7f0000000d00)={r12, r13+60000000}) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000c40)={r10, &(0x7f0000000b80)="ff55ed9c69b38068dc75900245351d17cbbe2db5d17f872b618072745e2d2eec4e5c7f87b1fd2809443ffc9d8a4ff72436a9f14848ba162a76508fe0e5caf9be48f5b67097757a6be018beb4c089fb2246744e43085518b1a7108ed8ab0ad45c511a2354fd8e2e437f11bb84f7a51e87a6f1cd3161399232193c3ab6a364", &(0x7f0000000c00)=""/8}, 0x20) (async) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r9, 0x4008941a, &(0x7f0000000a00)) (async) accept(0xffffffffffffffff, &(0x7f0000000a40)=@sco={0x1f, @none}, &(0x7f0000000ac0)=0x80) (async) syslog(0x3, &(0x7f0000000000)=""/185, 0x64075da62934d5d1) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000b00)={r7, r6, 0xc, 0x0, @val=@perf_event={0x3}}, 0x18) 1.80000267s ago: executing program 3 (id=577): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r0, 0x0, 0x2d, 0x0, @void}, 0x10) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffc000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffd000/0x3000)=nil) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x101c0ca, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x1, 0x2c0, &(0x7f0000000900)="$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") r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) read$msr(r1, &(0x7f0000000d40)=""/43, 0x2b) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x44, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000021c0)='./file1\x00', 0x10000, &(0x7f00000022c0)={[{@grpid}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x3}}, {@norecovery}, {@errors_remount}, {@nobarrier}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x586, &(0x7f0000000a40)="$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") setxattr$security_ima(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000200), &(0x7f0000000000)=ANY=[], 0x700, 0x0) rename(&(0x7f00000009c0)='./file1\x00', &(0x7f0000000a00)='./file0/file0\x00') setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) mlockall(0x7) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) r5 = socket$netlink(0x10, 0x3, 0x0) futex(0x0, 0x80, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xfd, 0x7fff0000}]}) r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001ec0), 0x800, 0x0) read$msr(r6, 0x0, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newtaction={0x18, 0x30, 0x1, 0x70bd29, 0x80000, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4004844}, 0x0) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 1.721775215s ago: executing program 2 (id=578): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x55) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f0000000500)=0x100000001, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000b80)=[@in={0x2, 0x4e24, @loopback}], 0x10) sendmsg$inet_sctp(r3, &(0x7f0000000040)={&(0x7f0000000240)=@in={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000500)="1b", 0x2a000}], 0x1, 0x0, 0x0, 0x4000083}, 0x80) 1.251356888s ago: executing program 5 (id=579): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') (async) mount$tmpfs(0x0, &(0x7f0000000000)='.\x00', &(0x7f00000000c0), 0x0, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x3, &(0x7f0000000180)=[{0x4c}, {0x4d}, {0x6}]}) prctl$PR_GET_TID_ADDRESS(0x28, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r1) sendmsg$IEEE802154_ASSOCIATE_REQ(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000800)=ANY=[@ANYBLOB="14048000", @ANYRES16=r2, @ANYBLOB="010026bd7000fddbdf2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x4880}, 0x20000000) (async) r3 = getpid() (async) syz_emit_ethernet(0x6e, &(0x7f00000005c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "8000", 0x38, 0x3a, 0xff, @remote, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x5dc, {0x0, 0x6, "8cb02b", 0x0, 0x2f, 0xff, @loopback={0x4000000}, @local, [@fragment={0x1d, 0x0, 0xd, 0x1, 0x0, 0xe, 0x68}]}}}}}}}, 0x0) (async) process_madvise(0xffffffffffffffff, &(0x7f0000000440)=[{0x0}, {&(0x7f00000000c0)="97bc", 0x2}], 0x2, 0x16, 0x0) (async) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000180), 0x2000090, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) (async) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x80042, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3) (async) ioctl$TCFLSH(r4, 0x540b, 0x1) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), r5) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="410000000000000001000603000014000300060a0004090300f006e8ffffffffffff07000700263a0909140002"], 0x44}, 0x1, 0x1000000}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYRESDEC=r4], 0x48) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x40, r7}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x16, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d300000018010000e4d400bf00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b400000095"], &(0x7f0000000d00)='GPL\x00', 0xb, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102}, 0x94) (async) r8 = bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000040)=ANY=[@ANYRES16=r7, @ANYRESDEC=r3], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000dc0)={r8, &(0x7f0000000d40), 0x0}, 0x20) 1.250868237s ago: executing program 4 (id=580): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\b\x00\b', 0x18, 0x3a, 0x0, @loopback, @loopback, {[], @mld={0x83, 0x0, 0x0, 0x9, 0xc036, @remote}}}}}}, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x26}, 0x94) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000), 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = syz_io_uring_setup(0x10e, &(0x7f0000000980)={0x0, 0xf872, 0x10000, 0x3, 0x4}, &(0x7f0000000200)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r1, 0x3596, 0x0, 0x49, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x40000000, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xfffffffffffffd2e, &(0x7f0000000000)='e', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x48) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800014000000000d97405010000000008000240000000000800", @ANYRES64=r4], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4004084) 1.177529092s ago: executing program 0 (id=581): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x8}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops=0x3}, 0x94) 1.162322142s ago: executing program 5 (id=582): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$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") madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x8) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000100)={0x0, 0x0}) setpriority(0x0, r3, 0x8) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r4 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5, 0x8000000000000003, {}, 0xfd}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@migrate={0x274, 0x21, 0x1, 0x0, 0x1, {{@in6=@dev={0xfe, 0x80, '\x00', 0x36}, @in6=@remote, 0x0, 0x0, 0x4e24, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0xee00}, 0x1000000}, [@coaddr={0x14, 0xe, @in=@initdev={0xac, 0x1e, 0x1, 0x0}}, @algo_auth={0x9c, 0x1, {{'sha3-512-generic\x00'}, 0x2a0, "cfe31a9146613b6c54b1a568f8ec9bbeb538af5271a5db0b370ab28b1fb6f9361664a0251a58aadf0d8902fc32170b51802ae04639fd85bbe8a6ff67c8905cc1c996f8cedf487f00ab029d2861fde1c100c83a4d"}}, @tfcpad={0x8, 0x16, 0x22521f90}, @migrate={0x134, 0x11, [{@in=@rand_addr=0x64010102, @in6=@mcast1, @in=@remote, @in6=@mcast2, 0x2b, 0x2, 0x0, 0x3500, 0xa, 0x2}, {@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in=@empty, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@dev={0xac, 0x14, 0x14, 0x19}, 0x2b, 0x4, 0x0, 0x3504, 0xa, 0x2}, {@in=@broadcast, @in=@rand_addr=0x64010101, @in6=@mcast1, @in=@broadcast, 0x6c, 0x2, 0x0, 0x3505, 0xa, 0xa}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@loopback, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@empty, 0x3c, 0x1, 0x0, 0x3504, 0x2, 0xa}]}, @offload={0xc}, @user_kmaddress={0x2c, 0x13, {@in=@remote, @in=@multicast2, 0x0, 0xa}}]}, 0x274}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004845}, 0x480c5) close(r4) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="800002010800000008001b000000000008000d"], 0x38}}, 0x0) preadv(r1, 0x0, 0x0, 0x8, 0x2) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r9, 0x0, 0xc, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x47bc, 0x0, 0x0, 0x0, 0x0) pwritev2(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) 1.123789154s ago: executing program 0 (id=583): syz_io_uring_setup(0x7ecd, &(0x7f0000000100)={0x0, 0xdd19, 0x2000, 0x2, 0x2a3}, &(0x7f0000000040), &(0x7f0000000180)) setresuid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff) (async) setresuid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"/1664], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffffe}, 0x48) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f00000000c0)={0xcf47, 0x4cc, 0xffff, 0x9dff, 0x1, "8003e3ffff072000"}) (async) ioctl$TCSETAF(r1, 0x5408, &(0x7f00000000c0)={0xcf47, 0x4cc, 0xffff, 0x9dff, 0x1, "8003e3ffff072000"}) write$binfmt_aout(r1, &(0x7f00000006c0)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000600)={0x0, 0x0, 0x804, 0x9, 0x36, "b0bf00"}) (async) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000600)={0x0, 0x0, 0x804, 0x9, 0x36, "b0bf00"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000140)=0xa) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x702, 0xe, 0x0, &(0x7f0000000380)="e460334470b8d480eb00c1520800", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 1.047304028s ago: executing program 0 (id=584): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000814}, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0) mmap(&(0x7f0000a41000/0x1000)=nil, 0x1000, 0xb635773f06ebbeee, 0x8010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800002, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0xfc75) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x0, 0x4, 0x8, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xd, 0xffffffffffffffff, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) listen(0xffffffffffffffff, 0x8) accept$inet(0xffffffffffffffff, 0x0, 0x0) 863.785507ms ago: executing program 0 (id=585): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x9, 0x3c231, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0xe}, 0x204, 0x2, 0xfb3d, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xd, 0x10, &(0x7f0000000000)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xa00, 0x0, 0x0, 0x0, 0x20}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ab92b}, {0x85, 0x0, 0x0, 0x8}, {0x4}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x2000}}, [@call={0x85, 0x0, 0x0, 0xc}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x9}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x6b, '\x00', 0x0, @sock_ops=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) 858.928607ms ago: executing program 2 (id=586): r0 = socket$qrtr(0x2a, 0x2, 0x0) shutdown(r0, 0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffa, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) socket$packet(0x11, 0x2, 0x300) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x1}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b70000001a000000bca30000000000002403000020feffff620af0fff8ffffff71a4f2ff000000001f030000000000002e100200000000002604fdffff02000014010000030301001d130000000000007a0a00fe00f6ff1f0f14000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564163427afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101a3062cd54f9ff51d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a90144022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab540b8d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb11883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcd857ab15e355713767c536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ced301efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0981000000000000ff0f40b1888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fc08001011e32f80fb60e14b9eee094277bbc170882c8890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e3f753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bb25b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963342aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b6ef9d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec035d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da740800000000000000c55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a2740000000000000000000000000000000000000000000a0009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4100260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb0000000000000005375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d34d3757b1450fdb0a9a69f432e277f3a0386eb2bd3305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07618b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e040000003c3ffad44d2a376def42e41e9fc31678257e040fa7cf32c221aaac08000000000000001a00000000000000000000173570f0c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d641ef02e4d5295d756e110522a7a945b93fb705b95b6aae27a8fb33732ce1da1c0b1af8eb9222a06e984ab1e6984c8bdc12360627137ab67b6b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481efe46a4ce86be0b1d8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0c6cb4bed8594a39bd76d3ef8a7ab014e787596db796bd93a36c2880423291e3bccc86f66ba792ff4d87b3f80e5908779e51c5e9055fc5b23605cd000c723187ef09dcf4b07b06a9342f3f62ee7acddff292082c1f4d8eb9561f80873a09a1ae0c9af1121175e5600f43a1179484502009759264a5729f07c2b218fa36ba2316a99aaad0130df83d0bda1e711290f78c143ea143967b00adcd77e6ad5e48d839ea61aadb83e4d071c54691924a3830d3e7b5c198bb0ed623153590000000000000000004b985ea1702f34f2f85b168c083e810ed567e3f1979b9ed1a4bf6a10dac825c96a0828b335de445a4880bb6474157efd1a72ca46ae4cbe3ab648c9bc4867a5a4cb87d7d6d55475b34b3cb6aa9e2337d4e04a37e35109752522ac9b186ddd80c47da6a2f4ef7bb909c975520000000000000000000000219cf5c1376ab33786f6b856d354e90a2733f78f2d188057cead3480eade49d55b770fad7fa000d23da6275768810b6b2df91d3a991ea98d929d271696c258d5b735d5db11df434e7dd1b7c1ca05cea3977df564115f4ec6ffab1d2ff8a642ca50934b3fbe44b0abeba9df209566984a29dfc0466e439a94e177b3c4d5f6e92b8176b9d6ddeeeb196fa964217f88e1acc180aaa4"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) 793.450101ms ago: executing program 4 (id=587): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r0) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async) unlinkat(0xffffffffffffff9c, 0x0, 0xd25f55a255150ea5) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000001c0)={'wg2\x00', 0x0}) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x890062a0}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="68000400", @ANYRES16=r1, @ANYBLOB="020025bd7000ffdbdf250800000014000680050002007100000008000700", @ANYRES32=r2, @ANYBLOB="08000400ff0700000500050040000000080002000700000028000180080006000400000014000400000000000000000000000000000000010500020007000000"], 0x68}, 0x1, 0x0, 0x0, 0x41}, 0x4044000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) (async) syz_read_part_table(0x5df, &(0x7f0000000000)="$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") sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c000000020605000000000000000000000000000c00078005001500267d00000500010007000000050005000a0000000500"], 0x5c}}, 0x800) (async, rerun: 64) r6 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r6) sendmsg$ETHTOOL_MSG_DEBUG_SET(r6, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x11129}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x8014}, 0x40040) 755.211752ms ago: executing program 0 (id=588): bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) (async) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$RTC_UIE_ON(r1, 0x7003) (async) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) (async) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0xb, 0x6}, 0x0, 0x0, 0x800000, 0x2, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x8, 0x8, 0x0, 0xfffffffe}]}) (async) keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x3}) (async) request_key(&(0x7f0000000480)='keyring\x00', &(0x7f00000004c0)={'syz', 0x1}, 0x0, 0x0) (async) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000140), 0xc}, 0xc000, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) unshare(0x22020400) poll(0x0, 0x0, 0x9) (async) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d08007b490d4f1e81f8d815001b003a05142603600e12080005007a010401a800160020e0034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993b134e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db79826521340fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x44000) 719.174024ms ago: executing program 3 (id=589): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x4d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0xdfffffffffbfffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400020, 0x0, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x800000000fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) io_uring_setup(0x7adf, &(0x7f00000001c0)={0x0, 0xd2a, 0x20, 0x2, 0xea}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000280)={'ip6gre0\x00', 0x0, 0x29, 0x6, 0x5, 0x4, 0xc, @dev={0xfe, 0x80, '\x00', 0x27}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x40, 0x7, 0xffff885f, 0xfff}}) ioctl$SIOCX25SCAUSEDIAG(0xffffffffffffffff, 0x89ec, &(0x7f0000000040)={0x2, 0x5}) pread64(0xffffffffffffffff, 0x0, 0x0, 0x10000002fc) socket(0x10, 0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) sendto$inet6(r5, &(0x7f0000000240)='\x00', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000100)={0x7, 0x84, 0x2, 0x5, 0x5, 0xfd, 0x0, 0x0, 0xfd, 0x2, 0x3, 0x0, 0x2}, 0xe) recvmmsg(r5, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}, 0x2}], 0x64, 0x100, 0x0) 653.415957ms ago: executing program 2 (id=590): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$tipc(0xffffffffffffffff, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x90, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0xc000400) r2 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') fcntl$getownex(r2, 0x40f, &(0x7f0000000100)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYRES16=r0], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x24004001) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004f40)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000003f000500000000000000df25047c0000040000000c0001"], 0x24}, 0x1, 0x0, 0x0, 0x48800}, 0x0) 0s ago: executing program 0 (id=591): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r0) sendmsg$DEVLINK_CMD_SB_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x3c, r1, 0x1, 0x70bd28, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xd4}, 0x24000080) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000090000003c000380140002007663616e30000000000000000000000014000600ff0500000000000000000000000000010800010001000000080003"], 0x50}, 0x1, 0x0, 0x0, 0x200000d0}, 0x4000000) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'netdevsim0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=ANY=[@ANYBLOB="440000001000030500000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0703050021000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r5, @ANYBLOB="08000a0028b2c8d1b16f04", @ANYRES32], 0x44}, 0x1, 0x0, 0x0, 0xc8001}, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="10010000", @ANYRES16=r2, @ANYBLOB="00012bbd7000ffdbdf250a0000000c00018006000200730000001c000280080005000000000006000f0005000000060002004e2100004400028006000f00890f000008000500060000000800070005000000080003000000000008000300050000000800030000000000080005000400000008000700010000000800060008000000080005005d00000018000380140002006e6574706369300000000000000000000c00018006000200330000005c000280080005000500000014000100ac14143b00000000000000000000000006000b000a000000080004000900000006000b000000000008000400030000000800070049000000140001000000000000000000000000000000000005a13f074bcfd5b47929a7e2c42362e162ed28f25da127cf2a643d5b7da35695f669f49dd9a2bb6deee9dd43eb54a5c421f7a1322f9bff6d2e59e3663a5569abec15dba18c3fe0461c7beaf5efe1e4de6312aca6863de5d23df86fa85b6086b820f82584f666cb"], 0x110}, 0x1, 0x0, 0x0, 0x4}, 0x15) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, 0x140e, 0x200, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x4000080) kernel console output (not intermixed with test programs): inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 63.988139][ T4098] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.039286][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.107090][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.221615][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.298616][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.422032][ T12] bridge_slave_1: left allmulticast mode [ 64.428007][ T12] bridge_slave_1: left promiscuous mode [ 64.445842][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.457267][ T4129] loop3: detected capacity change from 0 to 512 [ 64.468035][ T12] bridge_slave_0: left allmulticast mode [ 64.474223][ T4129] EXT4-fs: Ignoring removed i_version option [ 64.484776][ T12] bridge_slave_0: left promiscuous mode [ 64.492963][ T4129] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 64.501401][ T4129] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 64.502648][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.511175][ T4129] EXT4-fs (loop3): 1 truncate cleaned up [ 64.522935][ T4129] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.560451][ T4129] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 64.712667][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.789330][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 64.818461][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 64.839774][ T12] bond0 (unregistering): Released all slaves [ 64.859843][ T4142] netlink: 4 bytes leftover after parsing attributes in process `syz.2.169'. [ 64.904861][ T12] hsr_slave_0: left promiscuous mode [ 64.916599][ T12] hsr_slave_1: left promiscuous mode [ 64.929791][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 64.946590][ T28] kauditd_printk_skb: 236 callbacks suppressed [ 64.946606][ T28] audit: type=1400 audit(1774612134.180:542): avc: denied { bind } for pid=4147 comm="syz.3.171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 64.957839][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 64.981964][ T28] audit: type=1400 audit(1774612134.220:543): avc: denied { write } for pid=4147 comm="syz.3.171" path="socket:[8504]" dev="sockfs" ino=8504 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 64.982195][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 65.030071][ T28] audit: type=1400 audit(1774612134.260:544): avc: denied { read } for pid=4147 comm="syz.3.171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 65.049043][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 65.065022][ T12] veth1_macvtap: left promiscuous mode [ 65.203684][ T12] veth0_macvtap: left promiscuous mode [ 65.240374][ T12] veth1_vlan: left promiscuous mode [ 65.252396][ T12] veth0_vlan: left promiscuous mode [ 65.411854][ T12] team0 (unregistering): Port device team_slave_1 removed [ 65.430634][ T12] team0 (unregistering): Port device team_slave_0 removed [ 65.567043][ T4120] chnl_net:caif_netlink_parms(): no params data found [ 65.642092][ T28] audit: type=1400 audit(1774612134.880:545): avc: denied { create } for pid=4170 comm="syz.2.173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 65.796860][ T4120] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.845791][ T4120] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.859168][ T28] audit: type=1400 audit(1774612135.100:546): avc: denied { append } for pid=4187 comm="syz.0.175" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 65.884348][ T28] audit: type=1400 audit(1774612135.100:547): avc: denied { ioctl } for pid=4187 comm="syz.0.175" path="/dev/sg0" dev="devtmpfs" ino=137 ioctlcmd=0x2287 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 65.889524][ T4120] bridge_slave_0: entered allmulticast mode [ 65.979651][ T4120] bridge_slave_0: entered promiscuous mode [ 65.990422][ T4120] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.997650][ T4120] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.039009][ T4120] bridge_slave_1: entered allmulticast mode [ 66.045615][ T4120] bridge_slave_1: entered promiscuous mode [ 66.059507][ T4188] hsr0: entered promiscuous mode [ 66.166920][ T4120] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.212694][ T4120] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.263294][ T4203] loop2: detected capacity change from 0 to 512 [ 66.279075][ T4203] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 66.288383][ T4203] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.176: Invalid inode bitmap blk 4 in block_group 0 [ 66.302892][ T4120] team0: Port device team_slave_0 added [ 66.312630][ T4203] loop2: lost filesystem error report for type 5 error -117 [ 66.313225][ T4203] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.320686][ T4120] team0: Port device team_slave_1 added [ 66.371303][ T4120] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.378425][ T4120] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.406028][ T4120] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.417705][ T4120] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.418357][ T4203] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 7969 vs 220 free clusters [ 66.425181][ T4120] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.460417][ T28] audit: type=1400 audit(1774612135.650:548): avc: denied { connect } for pid=4202 comm="syz.2.176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 66.466570][ T4120] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.575746][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.590626][ T4120] hsr_slave_0: entered promiscuous mode [ 66.609900][ T4120] hsr_slave_1: entered promiscuous mode [ 66.616037][ T4120] debugfs: 'hsr0' already exists in 'hsr' [ 66.620768][ T28] audit: type=1400 audit(1774612135.860:549): avc: denied { unmount } for pid=3314 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 66.664142][ T4120] Cannot create hsr debugfs directory [ 69.878739][ T4120] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 70.371562][ T4231] loop4: detected capacity change from 0 to 8192 [ 70.449291][ T3302] loop4: p1 p2 p3 p4 [ 70.464632][ T3302] loop4: p1 size 196608 extends beyond EOD, truncated [ 70.542103][ T28] audit: type=1400 audit(1774612139.770:550): avc: denied { create } for pid=4234 comm="syz.0.180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 70.571306][ T3302] loop4: p2 size 150994944 extends beyond EOD, truncated [ 70.620865][ T3302] loop4: p3 size 66846464 extends beyond EOD, truncated [ 70.635890][ T4120] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 70.655269][ T3302] loop4: p4 size 479744 extends beyond EOD, truncated [ 70.667951][ T4251] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 70.698662][ T4120] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 70.716739][ T4231] loop4: p1 p2 p3 p4 [ 70.724889][ T4120] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 70.728540][ T4231] loop4: p1 size 196608 extends beyond EOD, truncated [ 70.758702][ T4251] loop2: detected capacity change from 0 to 128 [ 70.767603][ T4231] loop4: p2 size 150994944 extends beyond EOD, truncated [ 70.810718][ T4231] loop4: p3 size 66846464 extends beyond EOD, truncated [ 70.847428][ T4231] loop4: p4 size 479744 extends beyond EOD, truncated [ 70.889516][ T4120] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.917727][ T4251] netlink: 8 bytes leftover after parsing attributes in process `syz.2.181'. [ 70.943173][ T4120] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.992313][ T4251] netlink: 24 bytes leftover after parsing attributes in process `syz.2.181'. [ 71.012552][ T309] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.019710][ T309] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.036162][ T4265] netlink: 2 bytes leftover after parsing attributes in process `syz.4.182'. [ 71.080886][ T2027] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.088097][ T2027] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.090062][ T4269] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 71.132278][ T4265] batadv_slave_1: entered promiscuous mode [ 71.160698][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 71.163538][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 71.176334][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 71.191834][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 71.214594][ T4120] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 71.246517][ T4120] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.247818][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 71.247851][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 71.261159][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 71.289580][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 71.365421][ T4277] loop2: detected capacity change from 0 to 512 [ 71.413221][ T4277] EXT4-fs (loop2): can't mount with data_err=abort, fs mounted w/o journal [ 71.474850][ T4120] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.501081][ T4281] netlink: 60 bytes leftover after parsing attributes in process `syz.4.185'. [ 71.725358][ T4307] autofs4:pid:4307:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(65021.1), cmd(0xc018937e) [ 71.740825][ T28] audit: type=1400 audit(1774612140.960:551): avc: denied { read write } for pid=4304 comm="syz.2.189" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 71.785214][ T4307] autofs4:pid:4307:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc018937e) [ 71.798892][ T28] audit: type=1400 audit(1774612140.960:552): avc: denied { open } for pid=4304 comm="syz.2.189" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 71.849309][ T28] audit: type=1400 audit(1774612140.960:553): avc: denied { connect } for pid=4304 comm="syz.2.189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 71.884961][ T4120] veth0_vlan: entered promiscuous mode [ 71.916247][ T4120] veth1_vlan: entered promiscuous mode [ 71.928888][ T28] audit: type=1400 audit(1774612140.960:554): avc: denied { ioctl } for pid=4304 comm="syz.2.189" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 71.971900][ T4120] veth0_macvtap: entered promiscuous mode [ 72.062509][ T4120] veth1_macvtap: entered promiscuous mode [ 72.109814][ T4302] loop4: detected capacity change from 0 to 32768 [ 72.138085][ T4120] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.165347][ T3302] loop4: p1 p3 < > p4 < p5 > [ 72.170186][ T3302] loop4: p1 start 460800 is beyond EOD, truncated [ 72.178244][ T3302] loop4: p5 start 460800 is beyond EOD, truncated [ 72.183247][ T4120] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.200618][ T4302] loop4: p1 p3 < > p4 < p5 > [ 72.205497][ T4302] loop4: p1 start 460800 is beyond EOD, truncated [ 72.213524][ T4302] loop4: p5 start 460800 is beyond EOD, truncated [ 72.224488][ T50] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.281527][ T50] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.309523][ T50] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.324203][ T50] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.358179][ T28] audit: type=1400 audit(1774612141.590:555): avc: denied { ioctl } for pid=4311 comm="syz.2.190" path="socket:[8771]" dev="sockfs" ino=8771 ioctlcmd=0x4942 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 72.492479][ T4327] xt_hashlimit: max too large, truncated to 1048576 [ 72.592588][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 72.596258][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 72.629175][ T4332] netlink: 'syz.4.195': attribute type 21 has an invalid length. [ 72.653709][ T28] audit: type=1400 audit(1774612141.890:556): avc: denied { mac_admin } for pid=4331 comm="syz.4.195" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 72.674871][ T4332] SELinux: Context system_u:object_r: is not valid (left unmapped). [ 72.721654][ T4332] loop4: detected capacity change from 0 to 512 [ 72.749215][ T28] audit: type=1400 audit(1774612141.950:557): avc: denied { relabelto } for pid=4331 comm="syz.4.195" name="39" dev="tmpfs" ino=224 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:" [ 72.853028][ T28] audit: type=1400 audit(1774612141.950:558): avc: denied { associate } for pid=4331 comm="syz.4.195" name="39" dev="tmpfs" ino=224 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:" [ 72.937504][ T4332] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #11: comm syz.4.195: iget: bad extra_isize 58 (inode size 256) [ 72.996336][ T4314] loop0: detected capacity change from 0 to 512 [ 73.009219][ T4332] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 73.009445][ T4332] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.195: error while reading EA inode 11 err=-117 [ 73.018892][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 73.018912][ C1] EXT4-fs (loop4): initial error at time 1774612142: ext4_xattr_inode_iget:441: inode 11 [ 73.018949][ C1] EXT4-fs (loop4): last error at time 1774612142: ext4_xattr_inode_iget:441: inode 11 [ 73.039033][ T28] audit: type=1400 audit(1774612142.030:559): avc: denied { add_name } for pid=4331 comm="syz.4.195" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:" [ 73.086167][ T4314] EXT4-fs: Ignoring removed i_version option [ 73.112589][ T4314] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 73.122431][ T4314] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 73.157588][ T4314] EXT4-fs (loop0): 1 truncate cleaned up [ 73.164590][ T4332] loop4: lost filesystem error report for type 5 error -117 [ 73.172580][ T4314] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.275520][ T4120] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 73.289191][ T4332] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 73.312466][ T4332] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #11: comm syz.4.195: iget: bad extra_isize 58 (inode size 256) [ 73.343858][ T4120] CPU: 1 UID: 0 PID: 4120 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 73.343894][ T4120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 73.343914][ T4120] Call Trace: [ 73.343921][ T4120] [ 73.343929][ T4120] __dump_stack+0x1d/0x30 [ 73.343957][ T4120] dump_stack_lvl+0x95/0xd0 [ 73.344047][ T4120] dump_stack+0x15/0x1b [ 73.344146][ T4120] dump_header+0x80/0x240 [ 73.344173][ T4120] oom_kill_process+0x295/0x350 [ 73.344201][ T4120] out_of_memory+0x97d/0xb80 [ 73.344231][ T4120] try_charge_memcg+0x62e/0xa10 [ 73.344285][ T4120] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 73.344407][ T4120] __swap_cache_prepare_and_add+0x386/0x530 [ 73.344455][ T4120] swap_cache_alloc_folio+0xa2/0x120 [ 73.344692][ T4120] swap_cluster_readahead+0x36b/0x3d0 [ 73.344746][ T4120] swapin_readahead+0xde/0x840 [ 73.344816][ T4120] ? __rcu_read_unlock+0x4e/0x70 [ 73.344838][ T4120] ? __perf_event_task_sched_in+0xa65/0xad0 [ 73.344867][ T4120] ? __list_add_valid_or_report+0x38/0xe0 [ 73.345054][ T4120] ? __rcu_read_unlock+0x4e/0x70 [ 73.345078][ T4120] ? swap_cache_get_folio+0x26f/0x280 [ 73.345119][ T4120] do_swap_page+0x30d/0x2220 [ 73.345173][ T4120] ? __schedule+0x93c/0xd40 [ 73.345212][ T4120] ? __rcu_read_lock+0x36/0x50 [ 73.345239][ T4120] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 73.345335][ T4120] handle_mm_fault+0xb46/0x3020 [ 73.345403][ T4120] ? vma_start_read+0x1c7/0x2c0 [ 73.345439][ T4120] do_user_addr_fault+0x62f/0x1050 [ 73.345546][ T4120] ? trace_page_fault_user+0x1f/0xe0 [ 73.345586][ T4120] exc_page_fault+0x62/0xa0 [ 73.345611][ T4120] asm_exc_page_fault+0x26/0x30 [ 73.345639][ T4120] RIP: 0033:0x7ff7dfbf7917 [ 73.345660][ T4120] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 73.345686][ T4120] RSP: 002b:00007fff836ae600 EFLAGS: 00010202 [ 73.345707][ T4120] RAX: 0000000000000000 RBX: 000055555edf6500 RCX: 00007ff7dfbf7917 [ 73.345725][ T4120] RDX: 00007fff836ae640 RSI: 0000000000000000 RDI: 0000000000000000 [ 73.345746][ T4120] RBP: 00007fff836ae6ac R08: 0000000000000000 R09: 0000000000000000 [ 73.345758][ T4120] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 73.345803][ T4120] R13: 00000000000927c0 R14: 0000000000011bed R15: 00007fff836ae700 [ 73.345825][ T4120] [ 73.348607][ T4120] memory: usage 271588kB, limit 307200kB, failcnt 184 [ 73.358642][ T4332] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 73.439033][ T4120] memory+swap: usage 263940kB, limit 9007199254740988kB, failcnt 0 [ 73.441793][ T4314] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 73.454328][ T4120] kmem: usage 263328kB, limit 9007199254740988kB, failcnt 0 [ 73.559082][ T4332] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.195: error while reading EA inode 11 err=-117 [ 73.679099][ T4332] loop4: lost filesystem error report for type 5 error -117 [ 73.690400][ T4332] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #18: comm syz.4.195: iget: bad extra_isize 58 (inode size 256) [ 73.739993][ T4120] Memory cgroup stats for /syz5: [ 73.740372][ T4120] cache 0 [ 73.768657][ T4120] rss 94208 [ 73.779442][ T4327] syz.5.164 (4327) used greatest stack depth: 9288 bytes left [ 73.792446][ T4120] shmem 0 [ 73.792459][ T4120] mapped_file 413696 [ 73.792486][ T4120] dirty 0 [ 73.792495][ T4120] writeback 0 [ 73.792504][ T4120] workingset_refault_anon 44 [ 73.792514][ T4120] workingset_refault_file 0 [ 73.792522][ T4120] swap 90112 [ 73.792529][ T4120] swapcached 188416 [ 73.792536][ T4120] pgpgin 90 [ 73.792542][ T4120] pgpgout 66 [ 73.792549][ T4120] pgfault 151 [ 73.792555][ T4120] pgmajfault 41 [ 73.792562][ T4120] inactive_anon 94208 [ 73.795582][ T4332] loop4: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 73.830829][ T4120] active_anon 0 [ 73.863905][ T4332] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.195: error while reading EA inode 18 err=-117 [ 73.863999][ T4332] loop4: lost filesystem error report for type 5 error -117 [ 73.864148][ T4332] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #18: comm syz.4.195: iget: bad extra_isize 58 (inode size 256) [ 73.864229][ T4332] loop4: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 73.864348][ T4332] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.195: error while reading EA inode 18 err=-117 [ 73.864461][ T4332] loop4: lost filesystem error report for type 5 error -117 [ 73.864628][ T4332] EXT4-fs (loop4): 1 orphan inode deleted [ 73.865029][ T4332] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.865351][ T4120] inactive_file 0 [ 73.865396][ T4120] active_file 0 [ 73.865479][ T4120] unevictable 0 [ 73.865488][ T4120] hierarchical_memory_limit 314572800 [ 73.865500][ T4120] hierarchical_memsw_limit 9223372036854771712 [ 73.865512][ T4120] total_cache 0 [ 73.865521][ T4120] total_rss 94208 [ 73.865530][ T4120] total_shmem 0 [ 73.865539][ T4120] total_mapped_file 413696 [ 73.865547][ T4120] total_dirty 0 [ 73.865560][ T4120] total_writeback 0 [ 73.865568][ T4120] total_workingset_refault_anon 44 [ 73.865576][ T4120] total_workingset_refault_file 0 [ 73.865584][ T4120] total_swap 90112 [ 73.865596][ T4120] total_swapcached 188416 [ 73.865606][ T4120] total_pgpgin 90 [ 73.865616][ T4120] total_pgpgout 66 [ 73.865625][ T4120] total_pgfault 151 [ 73.865635][ T4120] total_pgmajfault 41 [ 73.865645][ T4120] total_inactive_anon 94208 [ 73.865655][ T4120] total_active_anon 0 [ 73.865665][ T4120] total_inactive_file 0 [ 73.865676][ T4120] total_active_file 0 [ 73.865685][ T4120] total_unevictable 0 [ 73.865762][ T4120] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.164,pid=4324,uid=0 [ 73.865836][ T4120] Memory cgroup out of memory: OOM victim 4324 (syz.5.164) is already exiting. Skip killing the task [ 73.930630][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.961746][ T4346] loop4: detected capacity change from 0 to 512 [ 73.990217][ T4346] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 73.990237][ T4346] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 73.990683][ T4346] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 73.990715][ T4346] System zones: 0-2, 18-18, 34-35 [ 73.991327][ T4346] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 74.002939][ T4346] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 74.007869][ T4346] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 74.007959][ T4346] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 74.167073][ T4356] xt_hashlimit: size too large, truncated to 1048576 [ 74.167105][ T4356] xt_hashlimit: overflow, try lower: 18446744073709551610/3 [ 75.062246][ T4371] loop5: detected capacity change from 0 to 128 [ 75.063158][ T4371] msdos: Unknown parameter '0x0000000000000003' [ 75.523355][ T4386] netlink: 12 bytes leftover after parsing attributes in process `syz.5.206'. [ 75.523585][ T4386] netlink: 28 bytes leftover after parsing attributes in process `syz.5.206'. [ 75.523734][ T4386] netlink: 12 bytes leftover after parsing attributes in process `syz.5.206'. [ 75.525108][ T4386] netlink: 28 bytes leftover after parsing attributes in process `syz.5.206'. [ 75.525183][ T4386] netlink: 'syz.5.206': attribute type 6 has an invalid length. [ 75.553840][ T4389] netlink: 'syz.3.208': attribute type 3 has an invalid length. [ 75.553894][ T4389] netlink: 132 bytes leftover after parsing attributes in process `syz.3.208'. [ 75.590811][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 75.590828][ T28] audit: type=1400 audit(1774612144.820:571): avc: denied { getopt } for pid=4379 comm="syz.5.206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 75.674102][ T28] audit: type=1400 audit(1774612144.910:572): avc: denied { getopt } for pid=4393 comm="syz.3.210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 75.795741][ T4397] random: crng reseeded on system resumption [ 75.829850][ T28] audit: type=1400 audit(1774612145.030:573): avc: denied { write } for pid=4395 comm="syz.3.211" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 75.829889][ T28] audit: type=1400 audit(1774612145.030:574): avc: denied { open } for pid=4395 comm="syz.3.211" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 75.829944][ T28] audit: type=1400 audit(1774612145.050:575): avc: denied { create } for pid=4395 comm="syz.3.211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 75.830006][ T28] audit: type=1400 audit(1774612145.050:576): avc: denied { setopt } for pid=4395 comm="syz.3.211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 75.830032][ T28] audit: type=1400 audit(1774612145.050:577): avc: denied { connect } for pid=4395 comm="syz.3.211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 76.114914][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.378637][ T4408] loop2: detected capacity change from 0 to 8192 [ 76.385082][ T28] audit: type=1326 audit(1774612145.620:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4407 comm="syz.2.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb4c95c799 code=0x7ffc0000 [ 76.385123][ T28] audit: type=1326 audit(1774612145.620:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4407 comm="syz.2.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb4c95c799 code=0x7ffc0000 [ 76.385746][ T28] audit: type=1326 audit(1774612145.620:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4407 comm="syz.2.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb4c95c799 code=0x7ffc0000 [ 76.398797][ T4408] netlink: 28 bytes leftover after parsing attributes in process `syz.2.214'. [ 76.593575][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.706626][ T4422] netlink: 52 bytes leftover after parsing attributes in process `syz.4.218'. [ 76.727969][ T4422] netlink: 20 bytes leftover after parsing attributes in process `syz.4.218'. [ 76.750402][ T4425] syz.2.214: attempt to access beyond end of device [ 76.750402][ T4425] loop2: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 76.793126][ T4424] loop0: detected capacity change from 0 to 4096 [ 76.818146][ T4425] Buffer I/O error on dev loop2, logical block 57847, async page read [ 76.847469][ T4425] syz.2.214: attempt to access beyond end of device [ 76.847469][ T4425] loop2: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 76.861202][ T4427] loop4: detected capacity change from 0 to 512 [ 76.903506][ T4427] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 76.923224][ T4429] loop3: detected capacity change from 0 to 1024 [ 76.937518][ T4425] Buffer I/O error on dev loop2, logical block 57847, async page read [ 76.954804][ T4429] EXT4-fs: Ignoring removed bh option [ 77.099692][ T4427] EXT4-fs (loop4): 1 truncate cleaned up [ 77.198584][ T4427] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.295122][ T4429] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.319108][ T4429] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.659417][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 77.758442][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.772744][ T4444] loop3: detected capacity change from 0 to 2048 [ 77.911206][ T4440] loop2: detected capacity change from 0 to 512 [ 77.929819][ T4440] EXT4-fs: Ignoring removed i_version option [ 78.002707][ T4440] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 78.019546][ T4444] netlink: 80 bytes leftover after parsing attributes in process `syz.3.222'. [ 78.034476][ T4440] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 78.079062][ T4440] EXT4-fs (loop2): 1 truncate cleaned up [ 78.100186][ T4440] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.161558][ T4436] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 78.348630][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.731530][ T4479] netlink: 4 bytes leftover after parsing attributes in process `syz.3.234'. [ 78.741296][ T4479] netlink: 4 bytes leftover after parsing attributes in process `syz.3.234'. [ 78.750314][ T4479] netlink: 4 bytes leftover after parsing attributes in process `syz.3.234'. [ 79.003765][ T4479] netlink: 4 bytes leftover after parsing attributes in process `syz.3.234'. [ 80.552632][ T4499] bridge1: entered promiscuous mode [ 80.579051][ T4499] bridge1: entered allmulticast mode [ 80.586047][ T4499] team0: Port device bridge1 added [ 80.691990][ T28] kauditd_printk_skb: 719 callbacks suppressed [ 80.692009][ T28] audit: type=1326 audit(1774612149.930:1300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4491 comm="syz.0.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6b20cecfce code=0x7ffc0000 [ 80.792351][ T28] audit: type=1326 audit(1774612150.030:1301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4491 comm="syz.0.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6b20cecfce code=0x7ffc0000 [ 80.880228][ T4509] ip6_vti0 speed is unknown, defaulting to 1000 [ 80.888439][ T4509] ip6_vti0 speed is unknown, defaulting to 1000 [ 80.901073][ T28] audit: type=1326 audit(1774612150.130:1302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4491 comm="syz.0.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6b20cecfce code=0x7ffc0000 [ 80.957578][ T4508] syz.5.242 (4508) used greatest stack depth: 7272 bytes left [ 80.988237][ T4509] ip6_vti0 speed is unknown, defaulting to 1000 [ 81.013606][ T28] audit: type=1326 audit(1774612150.240:1303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4491 comm="syz.0.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6b20cecfce code=0x7ffc0000 [ 81.076017][ T28] audit: type=1400 audit(1774612150.240:1304): avc: denied { getattr } for pid=4517 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=521 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 81.158953][ T28] audit: type=1400 audit(1774612150.280:1305): avc: denied { read } for pid=4523 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=521 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 81.217390][ T4509] infiniband syz2: set down [ 81.248895][ T28] audit: type=1400 audit(1774612150.280:1306): avc: denied { open } for pid=4523 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=521 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 81.253226][ T4509] infiniband syz2: added ip6_vti0 [ 81.319981][ T10] ip6_vti0 speed is unknown, defaulting to 1000 [ 81.360966][ T28] audit: type=1326 audit(1774612150.330:1307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4491 comm="syz.0.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6b20cecfce code=0x7ffc0000 [ 81.372702][ T4509] RDS/IB: syz2: added [ 81.408953][ T4509] smc: adding ib device syz2 with port count 1 [ 81.415208][ T4509] smc: ib device syz2 port 1 has no pnetid [ 81.448924][ T10] ip6_vti0 speed is unknown, defaulting to 1000 [ 81.455223][ T4509] ip6_vti0 speed is unknown, defaulting to 1000 [ 81.513029][ T28] audit: type=1326 audit(1774612150.430:1308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4491 comm="syz.0.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f6b20d2c799 code=0x7ffc0000 [ 81.551652][ T28] audit: type=1400 audit(1774612150.470:1309): avc: denied { create } for pid=4514 comm="dhcpcd-run-hook" name="resolv.conf.eth2.ipv4ll" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 81.632306][ T4509] ip6_vti0 speed is unknown, defaulting to 1000 [ 81.741125][ T4509] ip6_vti0 speed is unknown, defaulting to 1000 [ 81.791595][ T4529] loop2: detected capacity change from 0 to 512 [ 81.819145][ T4529] EXT4-fs: Ignoring removed i_version option [ 81.847343][ T4509] ip6_vti0 speed is unknown, defaulting to 1000 [ 81.868958][ T4529] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 81.888030][ T4562] loop0: detected capacity change from 0 to 2048 [ 81.889633][ T4529] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 81.957867][ T4562] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.971718][ T4529] EXT4-fs (loop2): 1 truncate cleaned up [ 81.977989][ T4529] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.018167][ T4509] ip6_vti0 speed is unknown, defaulting to 1000 [ 82.024812][ T4562] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 82.044518][ T4562] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 82.090822][ T4562] EXT4-fs (loop0): Remounting filesystem read-only [ 82.098112][ T4529] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 82.099865][ T4562] EXT4-fs warning (device loop0): ext4_xattr_inode_lookup_create:1607: inode #18: comm syz.0.251: cleanup dec ref error -28 [ 82.145270][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.208213][ T4509] ip6_vti0 speed is unknown, defaulting to 1000 [ 82.259079][ T4574] netlink: 4 bytes leftover after parsing attributes in process `syz.4.253'. [ 82.331278][ T4528] loop5: detected capacity change from 0 to 4096 [ 82.336227][ T4528] EXT4-fs: Ignoring removed nomblk_io_submit option [ 82.378849][ T4528] EXT4-fs (loop5): stripe (97) is not aligned with cluster size (16), stripe is disabled [ 82.445712][ T4580] netlink: 'syz.4.256': attribute type 25 has an invalid length. [ 82.497012][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.506309][ T4528] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842e018, mo2=0002] [ 82.529485][ T4528] System zones: 0-5 [ 82.579385][ T4528] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.683390][ T4596] FAULT_INJECTION: forcing a failure. [ 82.683390][ T4596] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 82.703500][ T4601] loop0: detected capacity change from 0 to 512 [ 82.739512][ T4596] CPU: 1 UID: 0 PID: 4596 Comm: syz.2.261 Not tainted syzkaller #0 PREEMPT(full) [ 82.739596][ T4596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 82.739611][ T4596] Call Trace: [ 82.739617][ T4596] [ 82.739625][ T4596] __dump_stack+0x1d/0x30 [ 82.739682][ T4596] dump_stack_lvl+0x95/0xd0 [ 82.739714][ T4596] dump_stack+0x15/0x1b [ 82.739756][ T4596] should_fail_ex+0x263/0x280 [ 82.739784][ T4596] should_fail+0xb/0x20 [ 82.739811][ T4596] should_fail_usercopy+0x1a/0x20 [ 82.739888][ T4596] _copy_from_user+0x1c/0xb0 [ 82.739971][ T4596] __sys_bpf+0x183/0x7e0 [ 82.740006][ T4596] __x64_sys_bpf+0x41/0x50 [ 82.740049][ T4596] x64_sys_call+0x10cb/0x3020 [ 82.740148][ T4596] do_syscall_64+0x12c/0x370 [ 82.740256][ T4596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.740286][ T4596] RIP: 0033:0x7feb4c95c799 [ 82.740306][ T4596] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.740329][ T4596] RSP: 002b:00007feb4b3af028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 82.740348][ T4596] RAX: ffffffffffffffda RBX: 00007feb4cbd5fa0 RCX: 00007feb4c95c799 [ 82.740379][ T4596] RDX: 0000000000000094 RSI: 0000200000000140 RDI: 0000000000000005 [ 82.740395][ T4596] RBP: 00007feb4b3af090 R08: 0000000000000000 R09: 0000000000000000 [ 82.740420][ T4596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 82.740433][ T4596] R13: 00007feb4cbd6038 R14: 00007feb4cbd5fa0 R15: 00007ffc11246648 [ 82.740457][ T4596] [ 82.741237][ T4601] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.262: inode has both inline data and extents flags [ 82.929595][ T4601] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 82.929758][ T4601] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.262: couldn't read orphan inode 15 (err -117) [ 82.939146][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 82.939167][ C0] EXT4-fs (loop0): initial error at time 1774612152: ext4_orphan_get:1391: inode 15 [ 82.939208][ C0] EXT4-fs (loop0): last error at time 1774612152: ext4_orphan_get:1391: inode 15 [ 82.979813][ T4601] loop0: lost filesystem error report for type 5 error -117 [ 82.980529][ T4601] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.030583][ T4527] rtc_cmos 00:00: Alarms can be up to one day in the future [ 83.078741][ T4120] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.088400][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.236331][ T4620] bond1: option min_links: invalid value (18446744073709530014) [ 83.254730][ T4615] loop2: detected capacity change from 0 to 1024 [ 83.256317][ T4620] bond1: option min_links: allowed values 0 - 2147483647 [ 83.269959][ T4620] bond1 (unregistering): Released all slaves [ 83.276928][ T4615] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 83.298590][ T4615] EXT4-fs error (device loop2): ext4_map_blocks:818: inode #3: block 5: comm syz.2.263: lblock 5 mapped to illegal pblock 5 (length 1) [ 83.331381][ T4615] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 83.334138][ T4615] EXT4-fs error (device loop2): ext4_acquire_dquot:7001: comm syz.2.263: Failed to acquire dquot type 0 [ 83.343309][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 83.343334][ C0] EXT4-fs (loop2): initial error at time 1774612152: ext4_map_blocks:818: inode 3: block 5 [ 83.343370][ C0] EXT4-fs (loop2): last error at time 1774612152: ext4_map_blocks:818: inode 3: block 5 [ 83.381779][ T4615] loop2: lost filesystem error report for type 5 error -117 [ 83.381911][ T4615] EXT4-fs error (device loop2): ext4_map_blocks:776: inode #3: block 5: comm syz.2.263: lblock 5 mapped to illegal pblock 5 (length 1) [ 83.434084][ T4631] netlink: 4 bytes leftover after parsing attributes in process `syz.3.267'. [ 83.446045][ T4615] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 83.446249][ T4615] EXT4-fs error (device loop2): ext4_acquire_dquot:7001: comm syz.2.263: Failed to acquire dquot type 0 [ 83.466985][ T4615] loop2: lost filesystem error report for type 5 error -117 [ 83.467286][ T4615] EXT4-fs error (device loop2): ext4_free_blocks:6724: comm syz.2.263: Freeing blocks not in datazone - block = 0, count = 4096 [ 83.489101][ T4615] loop2: lost filesystem error report for type 5 error -117 [ 83.499379][ T4615] EXT4-fs error (device loop2): ext4_map_blocks:776: inode #3: block 5: comm syz.2.263: lblock 5 mapped to illegal pblock 5 (length 1) [ 83.537404][ T4615] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 83.537601][ T4615] EXT4-fs error (device loop2): ext4_acquire_dquot:7001: comm syz.2.263: Failed to acquire dquot type 0 [ 83.568917][ T4615] loop2: lost filesystem error report for type 5 error -117 [ 83.569141][ T4615] EXT4-fs (loop2): 1 orphan inode deleted [ 83.609216][ T4615] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.652561][ T4615] pim6reg: entered allmulticast mode [ 83.664166][ T4615] pim6reg: left allmulticast mode [ 83.713634][ T10] rtc_cmos 00:00: Alarms can be up to one day in the future [ 83.722537][ T10] rtc_cmos 00:00: Alarms can be up to one day in the future [ 83.735015][ T4648] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 83.745635][ T10] rtc_cmos 00:00: Alarms can be up to one day in the future [ 83.765822][ T10] rtc_cmos 00:00: Alarms can be up to one day in the future [ 83.778063][ T10] rtc rtc0: __rtc_set_alarm: err=-22 [ 83.792953][ T4635] loop3: detected capacity change from 0 to 8192 [ 83.858648][ T3302] loop3: p1 < > p2 p4 < p5 > [ 83.866167][ T3302] loop3: partition table partially beyond EOD, truncated [ 83.883110][ T3302] loop3: p1 start 134217728 is beyond EOD, truncated [ 83.902634][ T3302] loop3: p2 size 591360 extends beyond EOD, truncated [ 83.925319][ T3302] loop3: p5 size 591360 extends beyond EOD, truncated [ 83.939403][ T4635] loop3: p1 < > p2 p4 < p5 > [ 83.947459][ T4635] loop3: partition table partially beyond EOD, truncated [ 83.955255][ T4635] loop3: p1 start 134217728 is beyond EOD, truncated [ 83.990956][ T4635] loop3: p2 size 591360 extends beyond EOD, truncated [ 84.041112][ T4635] loop3: p5 size 591360 extends beyond EOD, truncated [ 84.067435][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.122870][ T4661] loop0: detected capacity change from 0 to 4096 [ 84.133931][ T4661] EXT4-fs: Ignoring removed bh option [ 84.178119][ T4661] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.306786][ T4671] ref_ctr_offset mismatch. inode: 0x13c offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x1000000 [ 84.306869][ T4672] mmap: syz.3.269 (4672) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 84.422146][ T4674] netlink: 12 bytes leftover after parsing attributes in process `syz.2.288'. [ 84.434457][ T4675] erspan0: entered promiscuous mode [ 84.440898][ T4675] batadv0: entered promiscuous mode [ 84.460610][ T4675] erspan0: left promiscuous mode [ 84.473340][ T4675] batadv0: left promiscuous mode [ 84.501279][ T4674] netlink: 8 bytes leftover after parsing attributes in process `syz.2.288'. [ 84.510354][ T4674] netlink: 'syz.2.288': attribute type 1 has an invalid length. [ 84.518011][ T4674] netlink: 'syz.2.288': attribute type 2 has an invalid length. [ 84.531743][ T4674] bridge2: entered promiscuous mode [ 84.537158][ T4674] bridge2: entered allmulticast mode [ 84.556329][ T4674] loop2: detected capacity change from 0 to 2048 [ 84.601692][ T3302] loop2: p3 p4 < > [ 84.609302][ T3302] loop2: p3 start 11362048 is beyond EOD, truncated [ 84.650903][ T4674] loop2: p3 p4 < > [ 84.658393][ T4674] loop2: p3 start 11362048 is beyond EOD, truncated [ 84.668619][ T4668] loop5: detected capacity change from 0 to 512 [ 84.705800][ T4668] EXT4-fs (loop5): 1 truncate cleaned up [ 84.718726][ T4668] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.759763][ T4668] netlink: 'syz.5.276': attribute type 10 has an invalid length. [ 84.768405][ T4668] hsr0: entered promiscuous mode [ 84.775987][ T4668] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 84.786672][ T4668] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 84.799638][ T4668] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 84.825779][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 84.980137][ T4687] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 85.771316][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.848788][ T28] kauditd_printk_skb: 24 callbacks suppressed [ 85.848808][ T28] audit: type=1400 audit(1774612155.080:1327): avc: denied { connect } for pid=4698 comm="syz.0.280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 85.903189][ T4120] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.925460][ T28] audit: type=1400 audit(1774612155.160:1328): avc: denied { ioctl } for pid=4698 comm="syz.0.280" path="socket:[11266]" dev="sockfs" ino=11266 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 85.951443][ T4703] FAULT_INJECTION: forcing a failure. [ 85.951443][ T4703] name failslab, interval 1, probability 0, space 0, times 1 [ 85.980015][ T4703] CPU: 0 UID: 0 PID: 4703 Comm: syz.2.284 Not tainted syzkaller #0 PREEMPT(full) [ 85.980052][ T4703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 85.980109][ T4703] Call Trace: [ 85.980119][ T4703] [ 85.980128][ T4703] __dump_stack+0x1d/0x30 [ 85.980157][ T4703] dump_stack_lvl+0x95/0xd0 [ 85.980212][ T4703] dump_stack+0x15/0x1b [ 85.980242][ T4703] should_fail_ex+0x263/0x280 [ 85.980376][ T4703] should_failslab+0x8c/0xb0 [ 85.980473][ T4703] kmem_cache_alloc_node_noprof+0x6d/0x460 [ 85.980507][ T4703] ? alloc_vmap_area+0x1b6/0xe30 [ 85.980616][ T4703] alloc_vmap_area+0x1b6/0xe30 [ 85.980640][ T4703] ? should_fail_ex+0xd9/0x280 [ 85.980669][ T4703] ? should_failslab+0x8c/0xb0 [ 85.980758][ T4703] ? __kmalloc_cache_node_noprof+0x211/0x480 [ 85.980880][ T4703] __get_vm_area_node+0x173/0x1d0 [ 85.980917][ T4703] __vmalloc_node_range_noprof+0x291/0x12b0 [ 85.980950][ T4703] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 85.981044][ T4703] ? selinux_file_open+0x2e6/0x330 [ 85.981081][ T4703] ? __rcu_read_unlock+0x4e/0x70 [ 85.981111][ T4703] ? avc_has_perm_noaudit+0xab/0x130 [ 85.981192][ T4703] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 85.981219][ T4703] __vmalloc_noprof+0xa4/0xf0 [ 85.981254][ T4703] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 85.981284][ T4703] bpf_prog_alloc_no_stats+0x47/0x390 [ 85.981315][ T4703] ? bpf_prog_alloc+0x2a/0x150 [ 85.981359][ T4703] bpf_prog_alloc+0x3c/0x150 [ 85.981390][ T4703] bpf_prog_load+0x506/0x1140 [ 85.981474][ T4703] ? security_bpf+0x2b/0x90 [ 85.981508][ T4703] __sys_bpf+0x505/0x7e0 [ 85.981545][ T4703] __x64_sys_bpf+0x41/0x50 [ 85.981600][ T4703] x64_sys_call+0x10cb/0x3020 [ 85.981638][ T4703] do_syscall_64+0x12c/0x370 [ 85.981674][ T4703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.981709][ T4703] RIP: 0033:0x7feb4c95c799 [ 85.981769][ T4703] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 85.981789][ T4703] RSP: 002b:00007feb4b3af028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 85.981815][ T4703] RAX: ffffffffffffffda RBX: 00007feb4cbd5fa0 RCX: 00007feb4c95c799 [ 85.981833][ T4703] RDX: 0000000000000094 RSI: 0000200000000140 RDI: 0000000000000005 [ 85.981850][ T4703] RBP: 00007feb4b3af090 R08: 0000000000000000 R09: 0000000000000000 [ 85.981939][ T4703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 85.981955][ T4703] R13: 00007feb4cbd6038 R14: 00007feb4cbd5fa0 R15: 00007ffc11246648 [ 85.982005][ T4703] [ 85.982019][ T4703] syz.2.284: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0 [ 86.257524][ T4703] CPU: 0 UID: 0 PID: 4703 Comm: syz.2.284 Not tainted syzkaller #0 PREEMPT(full) [ 86.257557][ T4703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 86.257671][ T4703] Call Trace: [ 86.257680][ T4703] [ 86.257699][ T4703] __dump_stack+0x1d/0x30 [ 86.257733][ T4703] dump_stack_lvl+0x95/0xd0 [ 86.257759][ T4703] dump_stack+0x15/0x1b [ 86.257782][ T4703] warn_alloc+0x145/0x1c0 [ 86.257834][ T4703] __vmalloc_node_range_noprof+0x2b6/0x12b0 [ 86.257870][ T4703] ? selinux_file_open+0x2e6/0x330 [ 86.257908][ T4703] ? __rcu_read_unlock+0x4e/0x70 [ 86.257936][ T4703] ? avc_has_perm_noaudit+0xab/0x130 [ 86.258043][ T4703] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 86.258130][ T4703] __vmalloc_noprof+0xa4/0xf0 [ 86.258164][ T4703] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 86.258264][ T4703] bpf_prog_alloc_no_stats+0x47/0x390 [ 86.258297][ T4703] ? bpf_prog_alloc+0x2a/0x150 [ 86.258322][ T4703] bpf_prog_alloc+0x3c/0x150 [ 86.258393][ T4703] bpf_prog_load+0x506/0x1140 [ 86.258434][ T4703] ? security_bpf+0x2b/0x90 [ 86.258499][ T4703] __sys_bpf+0x505/0x7e0 [ 86.258536][ T4703] __x64_sys_bpf+0x41/0x50 [ 86.258581][ T4703] x64_sys_call+0x10cb/0x3020 [ 86.258659][ T4703] do_syscall_64+0x12c/0x370 [ 86.258694][ T4703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.258724][ T4703] RIP: 0033:0x7feb4c95c799 [ 86.258745][ T4703] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 86.258846][ T4703] RSP: 002b:00007feb4b3af028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 86.258871][ T4703] RAX: ffffffffffffffda RBX: 00007feb4cbd5fa0 RCX: 00007feb4c95c799 [ 86.258888][ T4703] RDX: 0000000000000094 RSI: 0000200000000140 RDI: 0000000000000005 [ 86.258922][ T4703] RBP: 00007feb4b3af090 R08: 0000000000000000 R09: 0000000000000000 [ 86.258939][ T4703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 86.258954][ T4703] R13: 00007feb4cbd6038 R14: 00007feb4cbd5fa0 R15: 00007ffc11246648 [ 86.258979][ T4703] [ 86.529461][ T4703] Mem-Info: [ 86.532690][ T4703] active_anon:24097 inactive_anon:31 isolated_anon:0 [ 86.532690][ T4703] active_file:20324 inactive_file:2649 isolated_file:0 [ 86.532690][ T4703] unevictable:0 dirty:43 writeback:0 [ 86.532690][ T4703] slab_reclaimable:3525 slab_unreclaimable:17309 [ 86.532690][ T4703] mapped:30440 shmem:16663 pagetables:1254 [ 86.532690][ T4703] sec_pagetables:0 bounce:0 [ 86.532690][ T4703] kernel_misc_reclaimable:0 [ 86.532690][ T4703] free:1865863 free_pcp:8873 free_cma:0 [ 86.588022][ T4703] Node 0 active_anon:96272kB inactive_anon:124kB active_file:81296kB inactive_file:10364kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:121760kB dirty:172kB writeback:0kB shmem:66652kB kernel_stack:3616kB pagetables:5016kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 86.617804][ T4703] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 86.648377][ T4703] lowmem_reserve[]: 0 2879 7857 7857 [ 86.654497][ T4703] Node 0 DMA32 free:2944624kB boost:0kB min:4128kB low:7052kB high:9976kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2948148kB mlocked:0kB bounce:0kB free_pcp:3524kB local_pcp:0kB free_cma:0kB [ 86.723374][ T4703] lowmem_reserve[]: 0 0 4978 4978 [ 86.728616][ T4703] Node 0 Normal free:4503420kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:96292kB inactive_anon:124kB active_file:81296kB inactive_file:10336kB unevictable:0kB writepending:152kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:32340kB local_pcp:29488kB free_cma:0kB [ 86.767022][ T4703] lowmem_reserve[]: 0 0 0 0 [ 86.779560][ T4703] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 86.780188][ T4717] netlink: 4 bytes leftover after parsing attributes in process `syz.5.291'. [ 86.793765][ T4703] Node 0 DMA32: 2*4kB (M) 3*8kB (M) 1*16kB (M) 4*32kB (M) 5*64kB (M) 1*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2944624kB [ 86.818642][ T4703] Node 0 Normal: 411*4kB (U) 238*8kB (UE) 54*16kB (U) 96*32kB (U) 79*64kB (UE) 65*128kB (UME) 85*256kB (UME) 63*512kB (UME) 51*1024kB (UM) 43*2048kB (UM) 1047*4096kB (UM) = 4503676kB [ 86.874710][ T4703] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 86.884261][ T4703] 39609 total pagecache pages [ 86.887243][ T28] audit: type=1400 audit(1774612156.120:1329): avc: denied { ioctl } for pid=4722 comm="syz.0.293" path="socket:[11329]" dev="sockfs" ino=11329 ioctlcmd=0x9410 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 86.889920][ T4703] 22 pages in swap cache [ 86.917860][ T4723] netlink: 27 bytes leftover after parsing attributes in process `syz.0.293'. [ 86.919851][ T4703] Free swap = 124908kB [ 86.933160][ T4703] Total swap = 124996kB [ 86.937583][ T4703] 2097051 pages RAM [ 86.943640][ T4703] 0 pages HighMem/MovableOnly [ 86.948406][ T4703] 81614 pages reserved [ 86.991586][ T28] audit: type=1400 audit(1774612156.160:1330): avc: denied { recv } for pid=3399 comm="kworker/0:4" saddr=10.128.0.163 src=30036 daddr=10.128.1.120 dest=60872 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 87.051059][ T4731] loop0: detected capacity change from 0 to 764 [ 87.064269][ T4731] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 87.084037][ T28] audit: type=1400 audit(1774612156.310:1331): avc: denied { mount } for pid=4728 comm="syz.0.297" name="/" dev="loop0" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 87.170632][ T28] audit: type=1400 audit(1774612156.390:1332): avc: denied { map } for pid=4732 comm="syz.5.298" path="socket:[11340]" dev="sockfs" ino=11340 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 87.195015][ T3409] hid-generic 0009:0002:FFFFFFFE.0001: unknown main item tag 0x0 [ 87.195044][ T3409] hid-generic 0009:0002:FFFFFFFE.0001: unknown main item tag 0x0 [ 87.195122][ T3409] hid-generic 0009:0002:FFFFFFFE.0001: unknown main item tag 0x0 [ 87.195147][ T3409] hid-generic 0009:0002:FFFFFFFE.0001: unknown main item tag 0x0 [ 87.195176][ T3409] hid-generic 0009:0002:FFFFFFFE.0001: unknown main item tag 0x0 [ 87.195207][ T3409] hid-generic 0009:0002:FFFFFFFE.0001: unknown main item tag 0x0 [ 87.195237][ T3409] hid-generic 0009:0002:FFFFFFFE.0001: unknown main item tag 0x0 [ 87.195273][ T3409] hid-generic 0009:0002:FFFFFFFE.0001: unknown main item tag 0x0 [ 87.195326][ T3409] hid-generic 0009:0002:FFFFFFFE.0001: unknown main item tag 0x0 [ 87.195353][ T3409] hid-generic 0009:0002:FFFFFFFE.0001: unknown main item tag 0x0 [ 87.198101][ T4721] loop3: detected capacity change from 0 to 1024 [ 87.204700][ T3409] hid-generic 0009:0002:FFFFFFFE.0001: hidraw0: HID v0.07 Device [syz1] on syz0 [ 87.239876][ T4721] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 87.309086][ T28] audit: type=1400 audit(1774612156.410:1333): avc: denied { read write } for pid=4728 comm="syz.0.297" name="uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 87.337346][ T4733] loop5: detected capacity change from 0 to 256 [ 87.346213][ T4733] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 87.406588][ T28] audit: type=1400 audit(1774612156.410:1334): avc: denied { open } for pid=4728 comm="syz.0.297" path="/dev/uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 87.406623][ T28] audit: type=1400 audit(1774612156.540:1335): avc: denied { bind } for pid=4728 comm="syz.0.297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 87.406750][ T28] audit: type=1400 audit(1774612156.540:1336): avc: denied { name_bind } for pid=4728 comm="syz.0.297" src=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 87.564008][ T4749] IPv6: Can't replace route, no match found [ 87.612537][ T4752] loop5: detected capacity change from 0 to 512 [ 87.621186][ T55] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 87.639090][ T55] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 87.652746][ T55] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 87.673391][ T55] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 87.690275][ T4752] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.699234][ T4752] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.969958][ T4731] syz.0.297 (4731) used greatest stack depth: 5776 bytes left [ 88.015516][ T4774] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4774 comm=syz.0.310 [ 88.181522][ T4788] loop2: detected capacity change from 0 to 512 [ 88.200003][ T4790] loop0: detected capacity change from 0 to 256 [ 88.237774][ T4788] EXT4-fs warning (device loop2): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 88.245055][ T4793] loop5: detected capacity change from 0 to 128 [ 88.263395][ T4790] syz.0.316: attempt to access beyond end of device [ 88.263395][ T4790] loop0: rw=0, sector=256, nr_sectors = 20 limit=256 [ 88.280008][ T4793] FAT-fs (loop5): Directory bread(block 524322) failed [ 88.288818][ T4793] FAT-fs (loop5): Directory bread(block 524323) failed [ 88.297295][ T4793] FAT-fs (loop5): Directory bread(block 524324) failed [ 88.305200][ T4788] EXT4-fs (loop2): mount failed [ 88.318647][ T4793] FAT-fs (loop5): Directory bread(block 524325) failed [ 88.354714][ T4793] FAT-fs (loop5): Directory bread(block 524326) failed [ 88.377230][ T4793] FAT-fs (loop5): Directory bread(block 524327) failed [ 88.405534][ T4793] FAT-fs (loop5): Directory bread(block 524328) failed [ 88.450572][ T4793] FAT-fs (loop5): Directory bread(block 524329) failed [ 88.471596][ T4807] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 88.704843][ T4793] FAT-fs (loop5): Directory bread(block 524322) failed [ 88.746303][ T4793] FAT-fs (loop5): Directory bread(block 524323) failed [ 88.942368][ T4819] loop0: detected capacity change from 0 to 128 [ 89.196477][ T4819] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 89.477772][ T4823] loop5: detected capacity change from 0 to 4096 [ 89.618511][ T4823] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.651967][ T4819] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.681854][ T4823] 9p: Bad value for 'wfdno' [ 89.748721][ T4829] loop2: detected capacity change from 0 to 8192 [ 89.757239][ T4120] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.470591][ T3302] loop2: p1 < > p2 p4 < p5 > [ 90.475398][ T3302] loop2: partition table partially beyond EOD, truncated [ 90.590760][ T4838] ip6_vti0 speed is unknown, defaulting to 1000 [ 90.804109][ T3302] loop2: p1 start 134217728 is beyond EOD, truncated [ 90.825388][ T3302] loop2: p2 size 591360 extends beyond EOD, truncated [ 90.844755][ T3302] loop2: p5 size 591360 extends beyond EOD, truncated [ 90.871341][ T4852] netlink: 16 bytes leftover after parsing attributes in process `syz.5.330'. [ 90.899153][ T4829] loop2: p1 < > p2 p4 < p5 > [ 90.899572][ T4852] netlink: 16 bytes leftover after parsing attributes in process `syz.5.330'. [ 90.904145][ T4829] loop2: partition table partially beyond EOD, truncated [ 90.943283][ T4829] loop2: p1 start 134217728 is beyond EOD, truncated [ 90.955568][ T28] kauditd_printk_skb: 81 callbacks suppressed [ 90.955662][ T28] audit: type=1400 audit(1774612160.190:1417): avc: denied { create } for pid=4850 comm="syz.5.330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 90.998922][ T4829] loop2: p2 size 591360 extends beyond EOD, truncated [ 91.020173][ T4829] loop2: p5 size 591360 extends beyond EOD, truncated [ 91.086299][ T3314] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 91.241590][ T28] audit: type=1400 audit(1774612160.480:1418): avc: denied { write } for pid=4866 comm="syz.3.338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 91.310840][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 91.322524][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory [ 91.327090][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 92.126144][ T4879] set_capacity_and_notify: 1 callbacks suppressed [ 92.126165][ T4879] loop2: detected capacity change from 0 to 512 [ 92.149305][ T4879] EXT4-fs: Ignoring removed i_version option [ 92.174742][ T4879] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 92.188934][ T4879] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 92.208073][ T4879] EXT4-fs (loop2): 1 truncate cleaned up [ 92.214353][ T4879] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.399988][ T4863] loop0: detected capacity change from 0 to 4096 [ 92.494607][ T4863] EXT4-fs: Ignoring removed nomblk_io_submit option [ 92.508794][ T4863] EXT4-fs (loop0): stripe (97) is not aligned with cluster size (16), stripe is disabled [ 92.531969][ T4879] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 92.567502][ T4863] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842e018, mo2=0002] [ 92.587528][ T4863] System zones: 0-5 [ 92.623904][ T4863] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.952966][ T4862] rtc_cmos 00:00: Alarms can be up to one day in the future [ 93.712637][ T9] rtc_cmos 00:00: Alarms can be up to one day in the future [ 93.720861][ T9] rtc_cmos 00:00: Alarms can be up to one day in the future [ 93.728750][ T9] rtc_cmos 00:00: Alarms can be up to one day in the future [ 93.737562][ T9] rtc_cmos 00:00: Alarms can be up to one day in the future [ 93.746667][ T9] rtc rtc0: __rtc_set_alarm: err=-22 [ 93.823912][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.892381][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.904765][ T4902] loop5: detected capacity change from 0 to 128 [ 93.914904][ T28] audit: type=1400 audit(1774612163.150:1419): avc: denied { read } for pid=4900 comm="syz.4.346" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 94.020703][ T4909] netlink: 28 bytes leftover after parsing attributes in process `syz.0.345'. [ 94.032979][ T28] audit: type=1400 audit(1774612163.220:1420): avc: denied { getopt } for pid=4905 comm="syz.2.343" lport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 94.381203][ T4914] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 94.421766][ T4918] loop5: detected capacity change from 0 to 128 [ 94.568525][ T4926] netlink: 8 bytes leftover after parsing attributes in process `syz.2.351'. [ 94.704916][ T28] audit: type=1400 audit(1774612163.940:1421): avc: denied { mounton } for pid=4917 comm="syz.5.349" path="/29/file1/file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 94.831598][ T28] audit: type=1400 audit(1774612164.070:1422): avc: denied { unmount } for pid=4120 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 95.839128][ T28] audit: type=1400 audit(1774612164.160:1423): avc: denied { sqpoll } for pid=4930 comm="syz.0.352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 96.446873][ T4940] netlink: 'syz.0.352': attribute type 17 has an invalid length. [ 96.446892][ T4940] netlink: 'syz.0.352': attribute type 16 has an invalid length. [ 96.446908][ T4940] netlink: 152 bytes leftover after parsing attributes in process `syz.0.352'. [ 96.447026][ T28] audit: type=1400 audit(1774612165.680:1424): avc: denied { setopt } for pid=4930 comm="syz.0.352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 96.492108][ T4932] loop4: detected capacity change from 0 to 512 [ 96.492614][ T4932] EXT4-fs: Ignoring removed i_version option [ 96.499073][ T4932] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 96.499101][ T4932] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 96.500240][ T4932] EXT4-fs (loop4): 1 truncate cleaned up [ 96.500820][ T4932] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.515900][ T28] audit: type=1400 audit(1774612165.750:1425): avc: denied { lock } for pid=4933 comm="syz.2.354" path="socket:[11682]" dev="sockfs" ino=11682 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 96.755330][ T4932] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 97.099627][ T28] audit: type=1400 audit(1774612166.340:1426): avc: denied { egress } for pid=4930 comm="iou-sqp-4948" saddr=fe80::a8aa:aaff:feaa:aa1b daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 97.126677][ T28] audit: type=1400 audit(1774612166.340:1427): avc: denied { sendto } for pid=4930 comm="iou-sqp-4948" saddr=fe80::a8aa:aaff:feaa:aa1b daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 97.588917][ T4942] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 97.759180][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.870556][ T28] audit: type=1400 audit(1774612167.110:1428): avc: denied { read } for pid=4957 comm="syz.5.359" name="usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 97.901140][ T4956] ip6_vti0 speed is unknown, defaulting to 1000 [ 97.942131][ T28] audit: type=1400 audit(1774612167.110:1429): avc: denied { open } for pid=4957 comm="syz.5.359" path="/dev/usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 98.028441][ T4964] netlink: 28 bytes leftover after parsing attributes in process `syz.5.360'. [ 98.258073][ T4970] xt_TPROXY: Can be used only with -p tcp or -p udp [ 98.304805][ T4974] netlink: 72 bytes leftover after parsing attributes in process `syz.3.362'. [ 98.329238][ T4974] netlink: 12 bytes leftover after parsing attributes in process `syz.3.362'. [ 98.338344][ T4974] netlink: 16 bytes leftover after parsing attributes in process `syz.3.362'. [ 98.540048][ T4986] netlink: 'syz.4.366': attribute type 1 has an invalid length. [ 98.549015][ T4989] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4247 sclass=netlink_route_socket pid=4989 comm=syz.4.366 [ 98.572624][ T4987] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4247 sclass=netlink_route_socket pid=4987 comm=syz.4.366 [ 98.637990][ T4986] bond1: entered promiscuous mode [ 98.653976][ T4987] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4247 sclass=netlink_route_socket pid=4987 comm=syz.4.366 [ 98.716869][ T4989] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4247 sclass=netlink_route_socket pid=4989 comm=syz.4.366 [ 98.747615][ T3320] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 98.807721][ T3320] CPU: 1 UID: 0 PID: 3320 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 98.807750][ T3320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 98.807766][ T3320] Call Trace: [ 98.807775][ T3320] [ 98.807786][ T3320] __dump_stack+0x1d/0x30 [ 98.807826][ T3320] dump_stack_lvl+0x95/0xd0 [ 98.807852][ T3320] dump_stack+0x15/0x1b [ 98.807962][ T3320] dump_header+0x80/0x240 [ 98.808064][ T3320] oom_kill_process+0x295/0x350 [ 98.808100][ T3320] out_of_memory+0x97d/0xb80 [ 98.808131][ T3320] try_charge_memcg+0x62e/0xa10 [ 98.808182][ T3320] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 98.808260][ T3320] __swap_cache_prepare_and_add+0x386/0x530 [ 98.808308][ T3320] swap_cache_alloc_folio+0xa2/0x120 [ 98.808354][ T3320] swap_cluster_readahead+0x26e/0x3d0 [ 98.808399][ T3320] swapin_readahead+0xde/0x840 [ 98.808489][ T3320] ? __rcu_read_unlock+0x4e/0x70 [ 98.808580][ T3320] ? __perf_event_task_sched_in+0xa65/0xad0 [ 98.808608][ T3320] ? __list_add_valid_or_report+0x38/0xe0 [ 98.808704][ T3320] ? xfd_validate_state+0x45/0xf0 [ 98.808734][ T3320] ? __rcu_read_unlock+0x4e/0x70 [ 98.808823][ T3320] ? swap_cache_get_folio+0x26f/0x280 [ 98.808854][ T3320] do_swap_page+0x30d/0x2220 [ 98.808906][ T3320] ? __schedule+0x93c/0xd40 [ 98.809008][ T3320] ? __rcu_read_lock+0x36/0x50 [ 98.809028][ T3320] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 98.809179][ T3320] handle_mm_fault+0xb46/0x3020 [ 98.809215][ T3320] ? vma_start_read+0x1c7/0x2c0 [ 98.809257][ T3320] do_user_addr_fault+0x62f/0x1050 [ 98.809302][ T3320] ? trace_page_fault_user+0x1f/0xe0 [ 98.809386][ T3320] exc_page_fault+0x62/0xa0 [ 98.809413][ T3320] asm_exc_page_fault+0x26/0x30 [ 98.809440][ T3320] RIP: 0033:0x7fdfbe3b7917 [ 98.809461][ T3320] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 98.809479][ T3320] RSP: 002b:00007ffde19c32c0 EFLAGS: 00010202 [ 98.809496][ T3320] RAX: 0000000000000000 RBX: 00005555589cb500 RCX: 00007fdfbe3b7917 [ 98.809509][ T3320] RDX: 00007ffde19c3300 RSI: 0000000000000000 RDI: 0000000000000000 [ 98.809522][ T3320] RBP: 00007ffde19c336c R08: 0000000000000000 R09: 0000000000000000 [ 98.809649][ T3320] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 98.809661][ T3320] R13: 00000000000927c0 R14: 0000000000018068 R15: 00007ffde19c33c0 [ 98.809681][ T3320] [ 98.869596][ T4986] 8021q: adding VLAN 0 to HW filter on device bond1 [ 98.928959][ T4989] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4247 sclass=netlink_route_socket pid=4989 comm=syz.4.366 [ 99.009462][ T4987] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4247 sclass=netlink_route_socket pid=4987 comm=syz.4.366 [ 99.085782][ T3320] memory: usage 234468kB, limit 307200kB, failcnt 70 [ 99.100588][ T3320] memory+swap: usage 226824kB, limit 9007199254740988kB, failcnt 0 [ 99.128894][ T3320] kmem: usage 212872kB, limit 9007199254740988kB, failcnt 0 [ 99.138978][ T4989] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4247 sclass=netlink_route_socket pid=4989 comm=syz.4.366 [ 99.149049][ T3320] Memory cgroup stats for /syz3: [ 99.156951][ T3320] cache 0 [ 99.182926][ T4989] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4247 sclass=netlink_route_socket pid=4989 comm=syz.4.366 [ 99.199214][ T4990] loop0: detected capacity change from 0 to 512 [ 99.232511][ T4989] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4247 sclass=netlink_route_socket pid=4989 comm=syz.4.366 [ 99.252037][ T4990] EXT4-fs: Ignoring removed i_version option [ 99.259046][ T3320] rss 106496 [ 99.272875][ T3320] shmem 0 [ 99.296310][ T3320] mapped_file 0 [ 99.310000][ T4987] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4247 sclass=netlink_route_socket pid=4987 comm=syz.4.366 [ 99.338942][ T4990] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 99.343120][ T3320] dirty 0 [ 99.350380][ T4990] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 99.389473][ T4990] EXT4-fs (loop0): 1 truncate cleaned up [ 99.399319][ T4990] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.418888][ T3320] writeback 0 [ 99.422225][ T3320] workingset_refault_anon 35 [ 99.464213][ T3320] workingset_refault_file 384 [ 99.512549][ T4990] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 99.538900][ T3320] swap 135168 [ 99.542230][ T3320] swapcached 262144 [ 99.546142][ T3320] pgpgin 41138 [ 99.598712][ T3320] pgpgout 41107 [ 99.604829][ T3320] pgfault 53557 [ 99.608321][ T3320] pgmajfault 16 [ 99.690711][ T3320] inactive_anon 0 [ 99.694674][ T3320] active_anon 126976 [ 99.699043][ T3320] inactive_file 0 [ 99.703095][ T3320] active_file 0 [ 99.706766][ T3320] unevictable 0 [ 99.722433][ T3320] hierarchical_memory_limit 314572800 [ 99.958712][ T3320] hierarchical_memsw_limit 9223372036854771712 [ 100.013240][ T3320] total_cache 0 [ 100.027258][ T3320] total_rss 106496 [ 100.050867][ T3320] total_shmem 0 [ 100.065249][ T3320] total_mapped_file 0 [ 100.082816][ T3320] total_dirty 0 [ 100.096546][ T3320] total_writeback 0 [ 100.114260][ T3320] total_workingset_refault_anon 35 [ 100.134454][ T3320] total_workingset_refault_file 384 [ 100.158257][ T3320] total_swap 135168 [ 100.173927][ T3320] total_swapcached 262144 [ 100.190021][ T3320] total_pgpgin 41138 [ 100.204692][ T3320] total_pgpgout 41107 [ 100.220225][ T3320] total_pgfault 53557 [ 100.235700][ T3320] total_pgmajfault 16 [ 100.251128][ T3320] total_inactive_anon 0 [ 100.269349][ T3320] total_active_anon 126976 [ 100.287630][ T3320] total_inactive_file 0 [ 100.466694][ T3320] total_active_file 0 [ 100.470906][ T3320] total_unevictable 0 [ 100.474910][ T3320] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.362,pid=4967,uid=0 [ 100.508934][ T3320] Memory cgroup out of memory: OOM victim 4967 (syz.3.362) is already exiting. Skip killing the task [ 100.651148][ T5018] netlink: 28 bytes leftover after parsing attributes in process `syz.3.374'. [ 101.489523][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.583897][ T5032] loop4: detected capacity change from 0 to 512 [ 101.594871][ T5032] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 101.600389][ T5030] capability: warning: `syz.0.375' uses deprecated v2 capabilities in a way that may be insecure [ 101.627789][ T28] audit: type=1400 audit(1774612170.860:1430): avc: denied { create } for pid=5034 comm="syz.3.380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 101.657125][ T5032] EXT4-fs (loop4): too many log groups per flexible block group [ 101.678410][ T5035] 9p: Bad value for 'wfdno' [ 101.695540][ T5032] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 101.723715][ T5032] EXT4-fs (loop4): mount failed [ 101.770988][ T5027] siw: device registration error -23 [ 101.795809][ T5027] smc: removing ib device syz2 [ 101.833360][ T28] audit: type=1400 audit(1774612171.070:1431): avc: denied { ioctl } for pid=5050 comm="syz.4.383" path="socket:[10980]" dev="sockfs" ino=10980 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 102.013249][ T28] audit: type=1400 audit(1774612171.240:1432): avc: denied { execute } for pid=5054 comm="syz.0.384" path=2F6D656D66643A202864656C6574656429 dev="tmpfs" ino=1118 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 102.049473][ T3416] IPVS: starting estimator thread 0... [ 102.149114][ T5063] IPVS: using max 2208 ests per chain, 110400 per kthread [ 102.216373][ T5057] loop3: detected capacity change from 0 to 512 [ 102.238468][ T5057] EXT4-fs: Ignoring removed i_version option [ 102.325657][ T5057] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 102.341450][ T5057] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 102.350434][ T5057] EXT4-fs (loop3): 1 truncate cleaned up [ 102.356796][ T5057] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.375061][ T5057] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 102.555436][ T5082] netlink: 28 bytes leftover after parsing attributes in process `syz.2.390'. [ 103.100657][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.297127][ T28] audit: type=1400 audit(1774612172.530:1433): avc: denied { create } for pid=5086 comm="syz.5.393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 103.445101][ T5096] FAULT_INJECTION: forcing a failure. [ 103.445101][ T5096] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 103.513133][ T5102] netlink: 12 bytes leftover after parsing attributes in process `syz.2.397'. [ 103.633536][ T5096] CPU: 1 UID: 0 PID: 5096 Comm: syz.4.396 Not tainted syzkaller #0 PREEMPT(full) [ 103.633588][ T5096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 103.633602][ T5096] Call Trace: [ 103.633608][ T5096] [ 103.633616][ T5096] __dump_stack+0x1d/0x30 [ 103.633646][ T5096] dump_stack_lvl+0x95/0xd0 [ 103.633766][ T5096] dump_stack+0x15/0x1b [ 103.633788][ T5096] should_fail_ex+0x263/0x280 [ 103.633820][ T5096] should_fail+0xb/0x20 [ 103.633844][ T5096] should_fail_usercopy+0x1a/0x20 [ 103.633917][ T5096] _copy_to_iter+0x251/0xea0 [ 103.633954][ T5096] ? __rcu_read_unlock+0x4e/0x70 [ 103.633976][ T5096] ? kcm_seq_stop+0xe/0x20 [ 103.634003][ T5096] ? traverse+0x379/0x3a0 [ 103.634038][ T5096] seq_read_iter+0x1d5/0x940 [ 103.634070][ T5096] ? _parse_integer_limit+0x170/0x190 [ 103.634104][ T5096] seq_read+0x279/0x2c0 [ 103.634166][ T5096] ? __pfx_seq_read+0x10/0x10 [ 103.634200][ T5096] proc_reg_read+0x128/0x1c0 [ 103.634224][ T5096] ? __pfx_proc_reg_read+0x10/0x10 [ 103.634248][ T5096] vfs_readv+0x432/0x6e0 [ 103.634299][ T5096] __x64_sys_preadv+0xfd/0x1c0 [ 103.634329][ T5096] x64_sys_call+0x2915/0x3020 [ 103.634364][ T5096] do_syscall_64+0x12c/0x370 [ 103.634461][ T5096] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.634547][ T5096] RIP: 0033:0x7fbbdba2c799 [ 103.634582][ T5096] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.634605][ T5096] RSP: 002b:00007fbbda487028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 103.634658][ T5096] RAX: ffffffffffffffda RBX: 00007fbbdbca5fa0 RCX: 00007fbbdba2c799 [ 103.634749][ T5096] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 0000000000000006 [ 103.634861][ T5096] RBP: 00007fbbda487090 R08: 00000000000007ff R09: 0000000000000000 [ 103.634874][ T5096] R10: 0000000000000185 R11: 0000000000000246 R12: 0000000000000001 [ 103.634890][ T5096] R13: 00007fbbdbca6038 R14: 00007fbbdbca5fa0 R15: 00007ffdf87f38a8 [ 103.634964][ T5096] [ 103.941246][ T5102] lo speed is unknown, defaulting to 1000 [ 103.947516][ T5102] lo speed is unknown, defaulting to 1000 [ 103.954322][ T5102] lo speed is unknown, defaulting to 1000 [ 103.960751][ T5102] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 103.968625][ T5102] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 103.989041][ T5102] lo speed is unknown, defaulting to 1000 [ 103.996759][ T28] audit: type=1400 audit(1774612173.220:1434): avc: denied { ioctl } for pid=5109 comm="syz.5.399" path="socket:[11129]" dev="sockfs" ino=11129 ioctlcmd=0x8907 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 104.033744][ T5102] lo speed is unknown, defaulting to 1000 [ 104.063001][ T5102] lo speed is unknown, defaulting to 1000 [ 104.089367][ T5102] lo speed is unknown, defaulting to 1000 [ 104.108943][ T28] audit: type=1400 audit(1774612173.220:1435): avc: denied { connect } for pid=5109 comm="syz.5.399" lport=256 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 104.132137][ T5102] lo speed is unknown, defaulting to 1000 [ 104.159535][ T5102] lo speed is unknown, defaulting to 1000 [ 104.212615][ T28] audit: type=1400 audit(1774612173.220:1436): avc: denied { write } for pid=5109 comm="syz.5.399" laddr=172.20.20.10 lport=256 faddr=172.20.20.187 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 104.277473][ T28] audit: type=1400 audit(1774612173.280:1437): avc: denied { bind } for pid=5109 comm="syz.5.399" laddr=172.20.20.10 lport=256 faddr=172.20.20.187 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 104.302782][ T28] audit: type=1400 audit(1774612173.280:1438): avc: denied { name_bind } for pid=5109 comm="syz.5.399" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 104.348175][ T5127] netlink: 'syz.2.403': attribute type 2 has an invalid length. [ 104.392144][ T5126] netlink: 'syz.2.403': attribute type 2 has an invalid length. [ 104.455609][ T5127] netlink: 'syz.2.403': attribute type 8 has an invalid length. [ 104.488988][ T5126] netlink: 'syz.2.403': attribute type 8 has an invalid length. [ 104.529027][ T5127] netlink: 132 bytes leftover after parsing attributes in process `syz.2.403'. [ 104.639696][ T5126] netlink: 132 bytes leftover after parsing attributes in process `syz.2.403'. [ 104.711687][ T5140] lo speed is unknown, defaulting to 1000 [ 104.746618][ T5140] loop3: detected capacity change from 0 to 1024 [ 104.753466][ T5140] EXT4-fs: Ignoring removed nobh option [ 104.759205][ T5140] EXT4-fs: Ignoring removed nomblk_io_submit option [ 104.781904][ T5140] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.796482][ T5140] netlink: 8 bytes leftover after parsing attributes in process `syz.3.405'. [ 104.822728][ T28] audit: type=1400 audit(1774612174.030:1439): avc: denied { setattr } for pid=5137 comm="syz.3.405" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 104.849280][ T5145] Zero length message leads to an empty skb [ 104.897042][ T5145] netlink: 28 bytes leftover after parsing attributes in process `syz.2.406'. [ 105.040849][ T5129] loop0: detected capacity change from 0 to 512 [ 105.091812][ T5129] EXT4-fs: Ignoring removed i_version option [ 105.276571][ T5160] FAULT_INJECTION: forcing a failure. [ 105.276571][ T5160] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 105.291563][ T5129] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 105.300505][ T5129] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 105.308807][ T5160] CPU: 0 UID: 0 PID: 5160 Comm: syz.5.410 Not tainted syzkaller #0 PREEMPT(full) [ 105.308844][ T5160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 105.308860][ T5160] Call Trace: [ 105.308869][ T5160] [ 105.308878][ T5160] __dump_stack+0x1d/0x30 [ 105.308917][ T5160] dump_stack_lvl+0x95/0xd0 [ 105.308942][ T5160] dump_stack+0x15/0x1b [ 105.308967][ T5160] should_fail_ex+0x263/0x280 [ 105.309002][ T5160] should_fail+0xb/0x20 [ 105.309052][ T5160] should_fail_usercopy+0x1a/0x20 [ 105.309133][ T5160] _copy_to_iter+0x251/0xea0 [ 105.309174][ T5160] ? rcu_read_unlock_special+0x9f/0x200 [ 105.309250][ T5160] seq_read_iter+0x776/0x940 [ 105.309303][ T5160] seq_read+0x279/0x2c0 [ 105.309338][ T5160] ? __pfx_seq_read+0x10/0x10 [ 105.309417][ T5160] proc_reg_read+0x128/0x1c0 [ 105.309443][ T5160] ? __pfx_proc_reg_read+0x10/0x10 [ 105.309467][ T5160] vfs_readv+0x432/0x6e0 [ 105.309521][ T5160] __x64_sys_preadv+0xfd/0x1c0 [ 105.309544][ T5160] x64_sys_call+0x2915/0x3020 [ 105.309571][ T5160] do_syscall_64+0x12c/0x370 [ 105.309646][ T5160] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.309710][ T5160] RIP: 0033:0x7ff7dfc3c799 [ 105.309735][ T5160] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.309759][ T5160] RSP: 002b:00007ff7de68f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 105.309785][ T5160] RAX: ffffffffffffffda RBX: 00007ff7dfeb5fa0 RCX: 00007ff7dfc3c799 [ 105.309799][ T5160] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 0000000000000006 [ 105.309812][ T5160] RBP: 00007ff7de68f090 R08: 00000000000007ff R09: 0000000000000000 [ 105.309824][ T5160] R10: 0000000000000185 R11: 0000000000000246 R12: 0000000000000001 [ 105.309890][ T5160] R13: 00007ff7dfeb6038 R14: 00007ff7dfeb5fa0 R15: 00007fff836ae308 [ 105.309992][ T5160] [ 105.642246][ T5129] EXT4-fs (loop0): 1 truncate cleaned up [ 105.648426][ T5129] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.940078][ T5129] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 106.189489][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.199502][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.258780][ T5171] loop2: detected capacity change from 0 to 2048 [ 106.273916][ T5176] loop3: detected capacity change from 0 to 1024 [ 106.303082][ T5171] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.325193][ T5171] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 106.369098][ T5171] EXT4-fs (loop2): Remounting filesystem read-only [ 106.375770][ T5171] EXT4-fs warning (device loop2): ext4_xattr_inode_lookup_create:1607: inode #18: comm syz.2.415: cleanup dec ref error -28 [ 106.381787][ T5176] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842e018, mo2=0102] [ 106.408971][ T5176] System zones: 1-12 [ 106.414051][ T5176] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.482571][ T5171] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.499247][ T5176] ext4: Unknown parameter '\5AW@uѷ0x00000000000000000xffffffffffffffff0xffffffffffffffff5q+-aRw ǔ&hӉ84' [ 106.525173][ T5189] netlink: 28 bytes leftover after parsing attributes in process `syz.4.418'. [ 106.536590][ T5191] loop2: detected capacity change from 0 to 1024 [ 106.568043][ T5191] EXT4-fs: test_dummy_encryption option not supported [ 106.581473][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.672939][ T5193] FAULT_INJECTION: forcing a failure. [ 106.672939][ T5193] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 106.692716][ T5191] loop2: detected capacity change from 0 to 512 [ 106.697053][ T5193] CPU: 1 UID: 0 PID: 5193 Comm: syz.4.421 Not tainted syzkaller #0 PREEMPT(full) [ 106.697137][ T5193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 106.697294][ T5193] Call Trace: [ 106.697315][ T5193] [ 106.697338][ T5193] __dump_stack+0x1d/0x30 [ 106.697424][ T5193] dump_stack_lvl+0x95/0xd0 [ 106.697529][ T5193] dump_stack+0x15/0x1b [ 106.697621][ T5193] should_fail_ex+0x263/0x280 [ 106.697715][ T5193] should_fail+0xb/0x20 [ 106.697791][ T5193] should_fail_usercopy+0x1a/0x20 [ 106.697929][ T5193] _copy_to_user+0x20/0xa0 [ 106.698048][ T5193] simple_read_from_buffer+0xb5/0x130 [ 106.698125][ T5193] proc_fail_nth_read+0x10e/0x150 [ 106.698245][ T5193] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 106.698384][ T5193] vfs_read+0x1ab/0x7f0 [ 106.698487][ T5193] ? __rcu_read_unlock+0x4e/0x70 [ 106.698554][ T5193] ? __fget_files+0x184/0x1c0 [ 106.698638][ T5193] ? mutex_lock+0x57/0x90 [ 106.698788][ T5193] ksys_read+0xdc/0x1a0 [ 106.698853][ T5193] __x64_sys_read+0x40/0x50 [ 106.698923][ T5193] x64_sys_call+0x2886/0x3020 [ 106.699018][ T5193] do_syscall_64+0x12c/0x370 [ 106.699132][ T5193] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.699210][ T5193] RIP: 0033:0x7fbbdb9ecfce [ 106.699263][ T5193] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 106.699399][ T5193] RSP: 002b:00007fbbda486fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 106.699461][ T5193] RAX: ffffffffffffffda RBX: 00007fbbda4876c0 RCX: 00007fbbdb9ecfce [ 106.699543][ T5193] RDX: 000000000000000f RSI: 00007fbbda4870a0 RDI: 0000000000000007 [ 106.699588][ T5193] RBP: 00007fbbda487090 R08: 0000000000000000 R09: 0000000000000000 [ 106.699646][ T5193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 106.699674][ T5193] R13: 00007fbbdbca6038 R14: 00007fbbdbca5fa0 R15: 00007ffdf87f38a8 [ 106.699724][ T5193] [ 106.996458][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 106.996487][ T28] audit: type=1400 audit(1774612176.230:1441): avc: denied { listen } for pid=5201 comm="syz.3.420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 107.025050][ T5191] EXT4-fs (loop2): 1 orphan inode deleted [ 107.052414][ T5191] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.073873][ T2027] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 107.082689][ T5191] ext4 filesystem being mounted at /91/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.095136][ T2027] EXT4-fs error (device loop2): ext4_release_dquot:7037: comm kworker/u8:8: Failed to release dquot type 1 [ 107.157703][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.302783][ T5210] loop3: detected capacity change from 0 to 512 [ 107.349644][ T28] audit: type=1400 audit(1774612176.590:1442): avc: denied { create } for pid=5220 comm="syz.0.428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 107.375934][ T5210] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.388659][ T28] audit: type=1400 audit(1774612176.610:1443): avc: denied { ioctl } for pid=5220 comm="syz.0.428" path="socket:[11998]" dev="sockfs" ino=11998 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 107.439188][ T5214] loop5: detected capacity change from 0 to 512 [ 107.446015][ T5214] EXT4-fs: Ignoring removed i_version option [ 107.446957][ T5228] netlink: 12 bytes leftover after parsing attributes in process `syz.2.429'. [ 107.453082][ T28] audit: type=1400 audit(1774612176.680:1444): avc: denied { write } for pid=5227 comm="syz.2.429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 107.482693][ T5214] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 107.491211][ T5214] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2 [ 107.542820][ T5214] EXT4-fs (loop5): 1 truncate cleaned up [ 107.569616][ T5214] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.584692][ T5228] netlink: 4 bytes leftover after parsing attributes in process `syz.2.429'. [ 107.672696][ T5235] netlink: 28 bytes leftover after parsing attributes in process `syz.4.431'. [ 107.689608][ T5214] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 107.752863][ T5238] loop0: detected capacity change from 0 to 128 [ 107.779210][ T5238] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 107.895489][ T5238] netlink: 16 bytes leftover after parsing attributes in process `syz.0.430'. [ 108.026822][ T4120] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.043352][ T28] audit: type=1400 audit(1774612177.250:1445): avc: denied { read } for pid=5246 comm="syz.2.433" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 108.243979][ T5257] loop4: detected capacity change from 0 to 1764 [ 108.252608][ T5257] iso9660: Unknown parameter 'fowner<00000000000000000000' [ 108.296736][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.518574][ T28] audit: type=1400 audit(1774612177.510:1446): avc: denied { map } for pid=5248 comm="syz.4.434" path="socket:[12036]" dev="sockfs" ino=12036 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 108.998670][ T28] audit: type=1400 audit(1774612177.510:1447): avc: denied { read accept } for pid=5248 comm="syz.4.434" path="socket:[12036]" dev="sockfs" ino=12036 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 109.130648][ T28] audit: type=1400 audit(1774612177.520:1448): avc: denied { firmware_load } for pid=5248 comm="syz.4.434" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 109.240731][ T5273] lo speed is unknown, defaulting to 1000 [ 109.247699][ T5277] netlink: 16 bytes leftover after parsing attributes in process `syz.2.440'. [ 109.332717][ T5286] netlink: 'syz.3.444': attribute type 3 has an invalid length. [ 109.332736][ T5286] netlink: 13435 bytes leftover after parsing attributes in process `syz.3.444'. [ 109.405338][ T28] audit: type=1400 audit(1774612178.640:1449): avc: denied { unmount } for pid=5272 comm="syz.0.443" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 109.760325][ T5291] loop3: detected capacity change from 0 to 512 [ 109.805407][ T5291] EXT4-fs: Ignoring removed i_version option [ 109.835217][ T5291] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 109.857186][ T5291] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 109.884585][ T5291] EXT4-fs (loop3): 1 truncate cleaned up [ 109.902254][ T5291] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.115806][ T5291] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 110.780771][ T5377] netlink: 32 bytes leftover after parsing attributes in process `syz.4.451'. [ 111.019245][ T5377] loop4: detected capacity change from 0 to 1024 [ 111.050221][ T5377] EXT4-fs error (device loop4): ext4_acquire_dquot:7001: comm syz.4.451: Failed to acquire dquot type 0 [ 111.050252][ T5377] loop4: lost filesystem error report for type 5 error -117 [ 111.050551][ T5377] EXT4-fs error (device loop4): mb_free_blocks:2047: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 111.050986][ T5377] EXT4-fs (loop4): 1 truncate cleaned up [ 111.051544][ T5377] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.233117][ T5374] netlink: 132 bytes leftover after parsing attributes in process `syz.4.451'. [ 111.264478][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.369750][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.141176][ T5395] netlink: 277 bytes leftover after parsing attributes in process `syz.4.454'. [ 112.185042][ T5395] hub 8-0:1.0: USB hub found [ 112.190032][ T5395] hub 8-0:1.0: 8 ports detected [ 112.200157][ T5395] netlink: 'syz.4.454': attribute type 36 has an invalid length. [ 112.214833][ T5395] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 112.224812][ T5395] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 112.515445][ T5407] netlink: 64859 bytes leftover after parsing attributes in process `syz.4.460'. [ 112.584897][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 112.584916][ T28] audit: type=1400 audit(1774612181.820:1453): avc: denied { getopt } for pid=5405 comm="syz.2.458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 112.872169][ T5416] loop3: detected capacity change from 0 to 512 [ 112.882924][ T28] audit: type=1326 audit(1774612182.120:1454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5419 comm="syz.0.463" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6b20d2c799 code=0x0 [ 112.911914][ T5416] EXT4-fs: Ignoring removed i_version option [ 112.926793][ T5416] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 112.938904][ T5416] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 112.954673][ T5416] EXT4-fs (loop3): 1 truncate cleaned up [ 112.965946][ T5416] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.994431][ T5425] netlink: 8 bytes leftover after parsing attributes in process `syz.0.463'. [ 113.012578][ T5416] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 113.144030][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.250774][ T5436] netlink: 16 bytes leftover after parsing attributes in process `syz.4.467'. [ 113.322888][ T5434] loop3: detected capacity change from 0 to 512 [ 113.357052][ T28] audit: type=1400 audit(1774612182.570:1455): avc: denied { append } for pid=5440 comm="syz.5.468" name="ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 113.388048][ T5434] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.388471][ T5443] loop4: detected capacity change from 0 to 1024 [ 113.423000][ T5443] EXT4-fs: Ignoring removed orlov option [ 113.440109][ T28] audit: type=1400 audit(1774612182.680:1456): avc: denied { bind } for pid=5451 comm="syz.5.471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 113.463822][ T5453] netlink: 16 bytes leftover after parsing attributes in process `syz.5.471'. [ 113.474762][ T5443] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.517434][ T28] audit: type=1400 audit(1774612182.740:1457): avc: denied { remove_name } for pid=5442 comm="syz.4.469" name="file0" dev="loop4" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 113.548003][ T28] audit: type=1400 audit(1774612182.740:1458): avc: denied { unlink } for pid=5442 comm="syz.4.469" name="file0" dev="loop4" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 113.572237][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.582270][ T28] audit: type=1400 audit(1774612182.750:1459): avc: denied { rmdir } for pid=5442 comm="syz.4.469" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 113.614112][ T5462] loop2: detected capacity change from 0 to 2048 [ 113.737664][ T5467] loop4: detected capacity change from 0 to 512 [ 113.753348][ T5462] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.787776][ T5467] EXT4-fs: Ignoring removed i_version option [ 113.799048][ T5462] ext4 filesystem being mounted at /103/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.830130][ T5467] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 113.860319][ T5467] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 114.720827][ T5462] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 114.739758][ T5467] EXT4-fs (loop4): 1 truncate cleaned up [ 114.746170][ T5467] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.768226][ T5464] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 114.881095][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.916487][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.152420][ T5490] netlink: 83992 bytes leftover after parsing attributes in process `syz.3.479'. [ 115.162384][ T5490] netlink: zone id is out of range [ 115.168693][ T5490] netlink: zone id is out of range [ 115.177325][ T5490] netlink: zone id is out of range [ 115.317331][ T5490] netlink: set zone limit has 8 unknown bytes [ 115.412721][ T5490] loop3: detected capacity change from 0 to 512 [ 115.425616][ T5490] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 115.486369][ T5493] netlink: 'syz.2.481': attribute type 21 has an invalid length. [ 115.504608][ T5493] netlink: 156 bytes leftover after parsing attributes in process `syz.2.481'. [ 115.520905][ T5490] EXT4-fs (loop3): orphan cleanup on readonly fs [ 115.528334][ T5490] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:517: comm syz.3.479: Block bitmap for bg 0 marked uninitialized [ 115.542905][ T5490] loop3: lost filesystem error report for type 5 error -117 [ 115.543415][ T5490] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 115.551323][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 115.551458][ C1] EXT4-fs (loop3): initial error at time 1774612184: ext4_read_block_bitmap_nowait:517 [ 115.551647][ C1] EXT4-fs (loop3): last error at time 1774612184: ext4_read_block_bitmap_nowait:517 [ 115.590245][ T5490] loop3: lost filesystem error report for type 5 error -117 [ 115.597779][ T5490] EXT4-fs (loop3): 1 orphan inode deleted [ 115.616258][ T5490] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 115.635702][ T5490] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 115.649382][ T5490] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 115.734251][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.758901][ T28] audit: type=1400 audit(1774612184.990:1460): avc: denied { ioctl } for pid=5492 comm="syz.2.481" path="socket:[12626]" dev="sockfs" ino=12626 ioctlcmd=0x9431 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 115.808976][ T5491] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:517: comm syz.3.479: Block bitmap for bg 0 marked uninitialized [ 116.079660][ T5497] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.104986][ T5497] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.388304][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.480507][ T5508] lo speed is unknown, defaulting to 1000 [ 116.561668][ T28] audit: type=1400 audit(1774612185.800:1461): avc: denied { write } for pid=5512 comm="syz.5.488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 116.651760][ T28] audit: type=1400 audit(1774612185.840:1462): avc: denied { read } for pid=5512 comm="syz.5.488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 116.734359][ T5514] lo speed is unknown, defaulting to 1000 [ 117.747743][ T5525] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 117.761762][ T5525] team0 (unregistering): Port device team_slave_0 removed [ 117.778113][ T5525] team0 (unregistering): Failed to send options change via netlink (err -105) [ 117.788598][ T5525] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 117.801052][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 117.801074][ T28] audit: type=1400 audit(1774612187.040:1464): avc: denied { ioctl } for pid=5522 comm="syz.4.490" path="socket:[13407]" dev="sockfs" ino=13407 ioctlcmd=0x662a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 117.829758][ T5525] team0 (unregistering): Port device team_slave_1 removed [ 117.852679][ T5523] IPVS: Unknown mcast interface: vcan0 [ 117.970095][ T5534] loop5: detected capacity change from 0 to 512 [ 117.997326][ T5534] EXT4-fs: Ignoring removed i_version option [ 118.018519][ T5534] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 118.036420][ T5534] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2 [ 118.050528][ T28] audit: type=1326 audit(1774612187.280:1465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5519 comm="syz.3.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfbe3fc799 code=0x7fc00000 [ 118.088014][ T5534] EXT4-fs (loop5): 1 truncate cleaned up [ 118.094530][ T5534] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.186424][ T5534] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 118.347352][ T28] audit: type=1400 audit(1774612187.580:1466): avc: denied { create } for pid=5544 comm="syz.2.496" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_stream_socket permissive=1 [ 118.373429][ T5545] netlink: 48 bytes leftover after parsing attributes in process `syz.2.496'. [ 118.387167][ T28] audit: type=1400 audit(1774612187.610:1467): avc: denied { create } for pid=5544 comm="syz.2.496" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_route_socket permissive=1 [ 118.432378][ T28] audit: type=1400 audit(1774612187.610:1468): avc: denied { ioctl } for pid=5544 comm="syz.2.496" path="socket:[12810]" dev="sockfs" ino=12810 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_route_socket permissive=1 [ 118.459488][ T28] audit: type=1400 audit(1774612187.610:1469): avc: denied { create } for pid=5544 comm="syz.2.496" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_netfilter_socket permissive=1 [ 118.481063][ T28] audit: type=1400 audit(1774612187.610:1470): avc: denied { write } for pid=5544 comm="syz.2.496" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_netfilter_socket permissive=1 [ 118.502362][ T28] audit: type=1400 audit(1774612187.610:1471): avc: denied { read write } for pid=5544 comm="syz.2.496" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 118.566553][ T28] audit: type=1400 audit(1774612187.610:1472): avc: denied { open } for pid=5544 comm="syz.2.496" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 118.654423][ T28] audit: type=1400 audit(1774612187.610:1473): avc: denied { execstack } for pid=5544 comm="syz.2.496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 118.685122][ T5557] netlink: 5 bytes leftover after parsing attributes in process `syz.0.499'. [ 118.696980][ T5557] netlink: 32 bytes leftover after parsing attributes in process `syz.0.499'. [ 118.734983][ T4120] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.752069][ T5559] lo speed is unknown, defaulting to 1000 [ 119.498722][ T5577] netlink: 12 bytes leftover after parsing attributes in process `syz.4.506'. [ 119.563933][ T5351] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 119.639115][ T5584] netlink: 'syz.2.504': attribute type 11 has an invalid length. [ 119.651623][ T5351] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 119.675345][ T5351] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 119.696715][ T5351] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 119.722004][ T5590] netlink: 4 bytes leftover after parsing attributes in process `syz.3.509'. [ 119.744120][ T5591] netlink: 212412 bytes leftover after parsing attributes in process `syz.4.508'. [ 119.931650][ T5595] loop3: detected capacity change from 0 to 1024 [ 119.952341][ T5595] EXT4-fs: Ignoring removed nomblk_io_submit option [ 120.137905][ T5603] loop5: detected capacity change from 0 to 512 [ 120.146969][ T5603] EXT4-fs: Ignoring removed i_version option [ 120.171150][ T5603] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 120.180507][ T5595] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.192728][ T5603] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2 [ 120.203232][ T5603] EXT4-fs (loop5): 1 truncate cleaned up [ 120.215915][ T5603] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.248115][ T5603] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 120.284943][ T5608] netlink: 'syz.3.510': attribute type 1 has an invalid length. [ 120.316726][ T5608] 8021q: adding VLAN 0 to HW filter on device bond1 [ 120.426889][ T5617] netlink: 20 bytes leftover after parsing attributes in process `syz.2.514'. [ 120.455286][ T5617] loop2: detected capacity change from 0 to 512 [ 120.475399][ T5617] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 120.504239][ T5617] EXT4-fs (loop2): orphan cleanup on readonly fs [ 120.521482][ T5617] EXT4-fs warning (device loop2): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 120.554146][ T5617] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 120.567975][ T5617] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #16: comm syz.2.514: invalid fast symlink length 9000 [ 120.592556][ T5617] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 120.592815][ T5617] EXT4-fs (loop2): Remounting filesystem read-only [ 120.601998][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 120.602018][ C1] EXT4-fs (loop2): initial error at time 1774612189: ext4_orphan_get:1391: inode 16 [ 120.602043][ C1] EXT4-fs (loop2): last error at time 1774612189: ext4_orphan_get:1391: inode 16 [ 120.677897][ T5617] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 120.729270][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.773194][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.936951][ T5633] netlink: 88 bytes leftover after parsing attributes in process `syz.0.519'. [ 120.970459][ T5630] lo speed is unknown, defaulting to 1000 [ 120.988462][ T5637] ipt_REJECT: TCP_RESET invalid for non-tcp [ 121.019022][ T4120] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.303293][ T5647] loop5: detected capacity change from 0 to 32768 [ 121.349783][ T3302] loop5: p1 p2 p3 < p5 p6 > [ 121.355497][ T3302] loop5: p2 size 16775168 extends beyond EOD, truncated [ 121.364092][ T3302] loop5: p5 start 4294970168 is beyond EOD, truncated [ 121.375918][ T5647] loop5: p1 p2 p3 < p5 p6 > [ 121.381552][ T5647] loop5: p2 size 16775168 extends beyond EOD, truncated [ 121.390577][ T5647] loop5: p5 start 4294970168 is beyond EOD, truncated [ 121.410432][ T5647] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.419597][ T5647] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.539607][ T5690] netlink: 399 bytes leftover after parsing attributes in process `syz.3.529'. [ 121.548738][ T5690] openvswitch: netlink: ufid size 36 bytes exceeds the range (1, 16) [ 121.557200][ T5690] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 121.566608][ T5690] netlink: 12 bytes leftover after parsing attributes in process `syz.3.529'. [ 121.723928][ T5696] loop3: detected capacity change from 0 to 1024 [ 121.741548][ T5696] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.802462][ T5694] loop2: detected capacity change from 0 to 512 [ 121.810925][ T5694] EXT4-fs: Ignoring removed i_version option [ 121.822613][ T5694] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 121.838673][ T5694] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 121.848052][ T5694] EXT4-fs (loop2): 1 truncate cleaned up [ 121.859800][ T5694] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.889398][ T5694] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 121.916554][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.142496][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.827027][ T5714] lo speed is unknown, defaulting to 1000 [ 122.842959][ T5718] loop5: detected capacity change from 0 to 4096 [ 122.859640][ T5718] EXT4-fs: Ignoring removed bh option [ 122.916026][ T5718] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.136984][ T4120] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.385497][ T5747] loop5: detected capacity change from 0 to 2048 [ 123.417301][ T5746] lo speed is unknown, defaulting to 1000 [ 123.513047][ T5747] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.532809][ T5747] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 123.909166][ T5760] loop2: detected capacity change from 0 to 164 [ 123.930561][ T5757] loop4: detected capacity change from 0 to 512 [ 123.938934][ T5760] iso9660: Unknown parameter '0xffffffffffffffff18446744073709551615' [ 124.095614][ T4120] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.203387][ T28] kauditd_printk_skb: 25 callbacks suppressed [ 124.203403][ T28] audit: type=1400 audit(1774612193.440:1499): avc: denied { setopt } for pid=5742 comm="syz.4.547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 124.240948][ T5743] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 124.253580][ T5765] loop2: detected capacity change from 0 to 164 [ 124.263817][ T28] audit: type=1326 audit(1774612193.500:1500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5764 comm="syz.5.552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7dfc3c799 code=0x7ffc0000 [ 124.297853][ T5765] iso9660: Unknown parameter '' [ 124.311644][ T28] audit: type=1326 audit(1774612193.500:1501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5764 comm="syz.5.552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7dfc3c799 code=0x7ffc0000 [ 124.335850][ T28] audit: type=1326 audit(1774612193.500:1502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5764 comm="syz.5.552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7dfc3c799 code=0x7ffc0000 [ 124.372483][ T28] audit: type=1326 audit(1774612193.500:1503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5764 comm="syz.5.552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7dfc3c799 code=0x7ffc0000 [ 124.401802][ T5769] __nla_validate_parse: 3 callbacks suppressed [ 124.401820][ T5769] netlink: 28 bytes leftover after parsing attributes in process `syz.0.555'. [ 124.448750][ T28] audit: type=1326 audit(1774612193.500:1504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5764 comm="syz.5.552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff7dfc3c799 code=0x7ffc0000 [ 124.482441][ T28] audit: type=1326 audit(1774612193.500:1505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5764 comm="syz.5.552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7dfc3c799 code=0x7ffc0000 [ 124.506333][ T28] audit: type=1326 audit(1774612193.500:1506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5764 comm="syz.5.552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7dfc3c799 code=0x7ffc0000 [ 124.555717][ T28] audit: type=1326 audit(1774612193.500:1507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5764 comm="syz.5.552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7dfc3c799 code=0x7ffc0000 [ 124.579709][ T28] audit: type=1326 audit(1774612193.500:1508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5764 comm="syz.5.552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7dfc3c799 code=0x7ffc0000 [ 124.615027][ T5785] netlink: 10 bytes leftover after parsing attributes in process `syz.3.559'. [ 124.631528][ T5785] netlink: 'syz.3.559': attribute type 12 has an invalid length. [ 124.664657][ T5785] netlink: 132 bytes leftover after parsing attributes in process `syz.3.559'. [ 124.774305][ T5797] netlink: 4 bytes leftover after parsing attributes in process `syz.5.564'. [ 124.786807][ T5798] loop2: detected capacity change from 0 to 512 [ 124.838700][ T5798] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.862346][ T5798] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.878138][ T5806] 9p: Bad value for 'rfdno' [ 124.955840][ T5802] bond1: option arp_all_targets: invalid value (262144) [ 124.967206][ T5802] bond1 (unregistering): Released all slaves [ 125.109947][ T5809] EXT4-fs: Ignoring removed i_version option [ 125.135980][ T5809] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 125.144396][ T5809] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 125.165740][ T5809] EXT4-fs (loop3): 1 truncate cleaned up [ 125.174686][ T5809] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.083274][ T5809] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 126.457625][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.481922][ T5828] set_capacity_and_notify: 2 callbacks suppressed [ 126.481945][ T5828] loop5: detected capacity change from 0 to 1024 [ 126.499860][ T5828] EXT4-fs: test_dummy_encryption option not supported [ 126.656039][ T5831] x_tables: ip_tables: ah match: only valid for protocol 51 [ 127.625123][ T5840] selinux_netlink_send: 56 callbacks suppressed [ 127.625143][ T5840] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=31 sclass=netlink_route_socket pid=5840 comm=syz.4.574 [ 127.661711][ T5842] netlink: 'syz.0.575': attribute type 12 has an invalid length. [ 128.540919][ T5839] IPVS: length: 1152 != 8 [ 128.625582][ T5846] loop4: detected capacity change from 0 to 512 [ 128.657829][ T5846] EXT4-fs: Ignoring removed nobh option [ 128.966771][ T5846] EXT4-fs (loop4): orphan cleanup on readonly fs [ 129.221569][ T5839] netlink: 16 bytes leftover after parsing attributes in process `syz.5.573'. [ 129.257970][ T5839] gre1: entered promiscuous mode [ 129.669643][ T5846] EXT4-fs warning (device loop4): ext4_xattr_inode_get:560: inode #11: comm syz.4.574: EA inode hash validation failed [ 129.698674][ T5855] loop3: detected capacity change from 0 to 256 [ 129.790977][ T5846] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 129.822035][ T5846] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #15: comm syz.4.574: corrupted inode contents [ 129.846475][ T5846] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 129.846793][ T5846] EXT4-fs error (device loop4): ext4_dirty_inode:6450: inode #15: comm syz.4.574: mark_inode_dirty error [ 129.856211][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 129.856251][ C0] EXT4-fs (loop4): initial error at time 1774612199: ext4_do_update_inode:5569: inode 15 [ 129.856291][ C0] EXT4-fs (loop4): last error at time 1774612199: ext4_do_update_inode:5569: inode 15 [ 129.945451][ T5846] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 129.945630][ T5846] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #15: comm syz.4.574: corrupted inode contents [ 129.993053][ T5846] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 129.993290][ T5846] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2999: inode #15: comm syz.4.574: mark_inode_dirty error [ 130.039170][ T5846] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 130.039960][ T5846] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3002: inode #15: comm syz.4.574: mark inode dirty (error -117) [ 130.086835][ T5846] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 130.088063][ T5846] EXT4-fs warning (device loop4): ext4_evict_inode:275: xattr delete (err -117) [ 130.131804][ T5846] EXT4-fs (loop4): 1 orphan inode deleted [ 130.144574][ T5846] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 130.234481][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.271703][ T28] kauditd_printk_skb: 155 callbacks suppressed [ 130.271765][ T28] audit: type=1326 audit(1774612199.510:1664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5859 comm="syz.5.579" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff7dfc3c799 code=0x0 [ 130.350002][ T5871] loop5: detected capacity change from 0 to 512 [ 130.422332][ T5871] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.447181][ T5871] ext4 filesystem being mounted at /76/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 130.540787][ T5882] netlink: 8 bytes leftover after parsing attributes in process `syz.5.582'. [ 130.831216][ T5899] netlink: 'syz.2.590': attribute type 1 has an invalid length. [ 131.143436][ T5890] loop4: detected capacity change from 0 to 2048 [ 131.210961][ T3302] Alternate GPT is invalid, using primary GPT. [ 131.217790][ T3302] loop4: p1 p2 p3 [ 131.370714][ T5891] bond_slave_0: entered promiscuous mode [ 131.376549][ T5891] bond_slave_1: entered promiscuous mode [ 131.383896][ T5891] macvlan2: entered promiscuous mode [ 131.389274][ T5891] bond0: entered promiscuous mode [ 131.395069][ T5891] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 131.403947][ T5891] bond0: left promiscuous mode [ 131.409494][ T5891] bond_slave_0: left promiscuous mode [ 131.415093][ T5891] bond_slave_1: left promiscuous mode [ 131.435461][ T5890] Alternate GPT is invalid, using primary GPT. [ 131.442010][ T5890] loop4: p1 p2 p3 [ 131.468513][ T3308] ================================================================== [ 131.476839][ T3308] BUG: KCSAN: data-race in atime_needs_update / touch_atime [ 131.484405][ T3308] [ 131.486760][ T3308] write to 0xffff88811a08d3b0 of 4 bytes by task 3307 on cpu 0: [ 131.494433][ T3308] touch_atime+0x1d7/0x330 [ 131.499082][ T3308] pick_link+0x7e9/0x8e0 [ 131.503419][ T3308] step_into_slowpath+0x36a/0x4c0 [ 131.508684][ T3308] link_path_walk+0x974/0xe30 [ 131.513494][ T3308] path_openat+0x1c6/0x2050 [ 131.518128][ T3308] do_file_open+0x16c/0x290 [ 131.522669][ T3308] do_sys_openat2+0x94/0x130 [ 131.527382][ T3308] __x64_sys_openat+0xf2/0x120 [ 131.532264][ T3308] x64_sys_call+0x1e39/0x3020 [ 131.536999][ T3308] do_syscall_64+0x12c/0x370 [ 131.541616][ T3308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.547617][ T3308] [ 131.550050][ T3308] read to 0xffff88811a08d3b0 of 4 bytes by task 3308 on cpu 1: [ 131.557693][ T3308] atime_needs_update+0x25f/0x3e0 [ 131.562754][ T3308] touch_atime+0x4a/0x330 [ 131.567412][ T3308] pick_link+0x7e9/0x8e0 [ 131.571713][ T3308] step_into_slowpath+0x36a/0x4c0 [ 131.576877][ T3308] link_path_walk+0x974/0xe30 [ 131.581682][ T3308] path_openat+0x1c6/0x2050 [ 131.586234][ T3308] do_file_open+0x16c/0x290 [ 131.590785][ T3308] do_sys_openat2+0x94/0x130 [ 131.595494][ T3308] __x64_sys_openat+0xf2/0x120 [ 131.600387][ T3308] x64_sys_call+0x1e39/0x3020 [ 131.605355][ T3308] do_syscall_64+0x12c/0x370 [ 131.609981][ T3308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.616430][ T3308] [ 131.618789][ T3308] value changed: 0x0b5fa5a4 -> 0x2a8b132a [ 131.624640][ T3308] [ 131.626982][ T3308] Reported by Kernel Concurrency Sanitizer on: [ 131.633262][ T3308] CPU: 1 UID: 0 PID: 3308 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 131.642315][ T3308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 131.652485][ T3308] ================================================================== [ 131.719165][ T4120] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.750685][ T5906] IPVS: Unknown mcast interface: vcan0 [ 131.787383][ T5906] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 131.796803][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 131.802577][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 131.814613][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 131.836610][ T5906] netdevsim netdevsim0 netdevsim0: left promiscuous mode