last executing test programs: 47.250380476s ago: executing program 1 (id=229): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000003c0), 0x10}, 0x94) r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) syz_emit_ethernet(0x30, &(0x7f0000001480)=ANY=[@ANYBLOB="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"/491], 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000380), 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r3) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)='%pi6 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r4, 0xffffffffffffffff}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000070000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b705000008000000850000002d00000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r6}, 0xc) close(r1) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000006c0)) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) utimensat(0xffffffffffffff9c, 0x0, 0x0, 0x8c) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x2) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000001c0)='./file0\x00', 0x2040000, &(0x7f0000000040)=ANY=[@ANYRES64=0x0], 0x1, 0x3ab, &(0x7f0000000bc0)="$eJzs3U9PXGUXAPAz05YB3heGhTFRY3xSN7qZAH6BEtMmRhIN7ZjqwuRWBp0wZcjMBDPEWHZu/RyNS3cmxi/Aou7duWPjsoum1zB/ygCVqh2YNv5+CdzDPM/JPXMvc3M2cA5uf393c6Nd2cg6UbyWohgRxYcRC72orzA4FnvxVIzai3fLt3978+ann324srp6fS2lGyu33ltOKc2/9fPX3/xw9ZfO/z75cf6nUuwvfH7wx/Lv+6/uv3bw+NZX9Xaqt9NWs5OydKfZ7GR3GrW0Xm9vVlL6uFHL2rVU32rXWsfWNxrN7e29yLbW52a3W7V2O2Vb3bRZ66ZOM3Va3ZR9mdW3UqVSSXOzwb1nrFfvr61lK/14+ox918ZZFGN3+czVVmslO/wMl06tVO+fY1EAwAvqeP8f/6T/3zv8NnWy/785WP1X/f+V+Bv9fzfp/8dktP8fKJzaNHOBBXEODvv/qcHnd0RJ/w8AAAAAAAAAAAAAAC+Hh3lezvO8PDzmpYgoDP6eOM/Lk66P83Xq/p/4mnR9nK+Rf9wxHdH4bqe6U+0f++srG1GPRtRiMcrx6PCRMNSPb3ywen0xIqWUCjF3914v/+qDiOql4/lLUY6Fkfzp3vOll7+U+gb588PaZkfzl6Mcrzz9/HnpWH414vA4Fe+8PZJfiXL8+kU0oxHrvVMf5X+7lNL7H62eyC/19gEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADw31BJQ29Ef+79TjViJnYG8/srRxsKg5TBfPz+D0/m6y9GOR49fT7/YsovnZ7Pfzlevzy59w0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAo9rd3c2s0ai1LioYzvzvvTI1DP46q9DfvndiaSaeda4HveDSmIovjusiPM7z/Lwu7/TF3srnCa5EnHUH88FvyfOf6/8RccaeUkRM/mq8iMGknkgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwOUdDvyddCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJPU7u5uZo1GrdXu7hZjEDx5ZTzBpN8jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAy+TPAAAA//91jwgX") ioctl$BLKTRACESTART(r7, 0x1274, 0x0) r8 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, r8, 0x52b242d) request_key(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0, 0xffffffffffffffff) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) 46.68427092s ago: executing program 1 (id=234): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="660a000000000000811179000000000085000000cd00000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x200801f, &(0x7f00000000c0), 0x2, 0x4fd, &(0x7f0000000d80)="$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") (async) r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000100)=""/198, &(0x7f0000000240)=0xc6) connect$pppl2tp(r0, &(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x0, 0x0, 0x4, 0x2, {0xa, 0x4e21, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1}}}, 0x32) syz_open_dev$vcsu(&(0x7f00000000c0), 0xfd98, 0x204100) setsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, &(0x7f0000000280), 0x4) 46.682987569s ago: executing program 1 (id=236): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x40, 0x0, 0x0, 0x0, 0x20, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0xa, 0x7}, 0x106027, 0xa88, 0x8406, 0x3, 0x0, 0x93, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) (async) ioperm(0x0, 0x7, 0x80006) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000002, &(0x7f0000000280)={[{@user_xattr}]}, 0x9, 0x537, &(0x7f0000000fc0)="$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") times(0x0) 46.67924358s ago: executing program 1 (id=242): r0 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000300)={0x0, 0x3, 0x0, [0x10001, 0x8, 0x3, 0x7, 0x9], [0x5, 0x2, 0x1, 0x4, 0x58e, 0x80000001, 0x8, 0x7, 0x1, 0x4, 0x9a6, 0x6, 0x85, 0x7ff, 0x5, 0x1, 0x4, 0x8, 0x9, 0x2, 0x82, 0x5, 0x4, 0x10000, 0x0, 0x9, 0x8, 0x3, 0x389f70f1, 0x2, 0x5, 0x0, 0x3, 0x80, 0x8, 0x10000, 0x1, 0xc, 0x9, 0xdbe, 0x8, 0x6, 0x78e1, 0x6, 0x1886, 0xffffffffffff0f83, 0x7fffffffffffffff, 0x2, 0x7f, 0x5, 0x8, 0xffffffffffffffff, 0x26, 0x7fffffffffffffff, 0x1, 0x0, 0x4, 0x2, 0x10000, 0x4, 0x885, 0x100000000, 0x4, 0x919, 0x639, 0x1, 0x3, 0x6, 0x508c, 0xffffffffffffffff, 0x8, 0x100000000, 0xb99b, 0x2, 0x9, 0x4, 0x688, 0x7, 0x6, 0x40, 0xe4c, 0x100, 0x5, 0x4, 0x8000000000000001, 0x1, 0x3, 0x5, 0x1000, 0x5, 0x2, 0x2, 0x2, 0x7, 0x8, 0x2d8, 0xfff, 0xffffffffffff7fff, 0x100, 0x3, 0x200, 0x5, 0xa00, 0x400, 0xc, 0x91b, 0x1, 0x0, 0xc7df, 0x39d1, 0x3, 0x399, 0xfffffffffffffffe, 0x4, 0x7fffffffffffffff, 0x5, 0x8, 0x5, 0x9, 0x4, 0xfffffffffffffffe]}) io_setup(0x2278, &(0x7f0000000180)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x404, &(0x7f00000000c0)=ANY=[@ANYRES16=0x0, @ANYRES8, @ANYRES8], 0x1, 0x122e, &(0x7f0000002580)="$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") sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4000014) r4 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x50) ioctl$FIBMAP(r4, 0x1, &(0x7f00000000c0)=0x15c) setsockopt$sock_timeval(r3, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10) io_submit(r2, 0x2, &(0x7f0000000140)=[&(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0x0, r3, &(0x7f00000000c0)="044b", 0x2, 0x0, 0x0, 0x2}, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x2, 0x2, r3, 0x0, 0x0, 0x1000000}]) syz_clone(0x8000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000), 0x31) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7050000080000a8c5000000a50000001801000020206405000000000004000f7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70400000000000085000000a700000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r6, 0x0, 0x0, 0xfffffffffffffdf3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000740)={r1, 0x0, 0x1, [0x0, 0x508, 0x5, 0x5], [0x5, 0x100000000, 0xd, 0x2, 0x8000000000000000, 0x101, 0x8, 0x9, 0x6, 0x200, 0x2ffc, 0x4, 0x7fff, 0xe2, 0x20c0, 0x6, 0x2, 0x2, 0x4, 0x4, 0xfffffffffffffff8, 0x9aa, 0x9, 0xfff, 0x0, 0x800, 0x5, 0x1173c4fb, 0x100, 0x80, 0x101, 0xe, 0x9, 0x10, 0x7, 0x4, 0x2e22, 0x4, 0x2, 0x3ff, 0x9, 0x6, 0x5, 0x3b624000000, 0x6, 0x3, 0x3, 0x2d, 0x8000000000000000, 0x1ff, 0x1, 0x3, 0x9, 0x3, 0x9, 0x3, 0x40, 0xffffffffffffffff, 0xf, 0x800, 0x1, 0x7, 0x200, 0x27f, 0x1, 0x6, 0x7, 0x7, 0xffffffffffffffff, 0x0, 0x16, 0x800, 0x6, 0x3, 0x5, 0x200, 0x7, 0x7, 0x10001, 0xfff, 0x5, 0x1, 0xfffffffeffffffff, 0x0, 0x10002000000, 0x3, 0x974, 0x2, 0x6b, 0x10000, 0x9, 0xfff, 0x3b, 0x33d, 0x3, 0x5, 0x0, 0x5, 0x1, 0xc, 0x3, 0x2, 0x2, 0x9, 0x3ff, 0x8, 0x1, 0x6, 0xb536, 0x7, 0x3, 0x2, 0x1, 0xd3, 0x1d93, 0x5, 0x6, 0x7b2, 0xc8, 0x1ff, 0x6]}) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r7, &(0x7f00000002c0)={0xa, 0x4e23, 0xfffffffc, @loopback}, 0x1c) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa0, 0xa0, 0x4, [@enum64={0xa, 0x1, 0x0, 0x13, 0x0, 0x1, [{0x9, 0x8, 0x7f}]}, @var={0x1, 0x0, 0x0, 0xe, 0x5, 0x1}, @restrict={0xc, 0x0, 0x0, 0xb, 0x2}, @enum={0xb, 0x7, 0x0, 0x6, 0x4, [{0x7, 0x10}, {0x2, 0x6124}, {0xc, 0x6}, {0x8, 0xffffff01}, {0xd, 0xff}, {0xc, 0x7fffffff}, {0xb, 0x3}]}, @union={0xb, 0x1, 0x0, 0x5, 0x0, 0x4, [{0x5, 0x3, 0x6e0}]}, @var={0xe, 0x0, 0x0, 0xe, 0x4}]}, {0x0, [0x61, 0x5f]}}, &(0x7f00000000c0)=""/62, 0xbc, 0x3e, 0x0, 0xf, 0x10000}, 0x28) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r8, 0x84, 0x4, &(0x7f00000002c0)=0xe2, 0x4) sendto$inet6(r8, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 46.463741462s ago: executing program 1 (id=244): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4016, &(0x7f0000000780)={[{@dioread_nolock}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@noauto_da_alloc}, {@lazytime}, {@grpjquota}, {@quota}]}, 0x1, 0x43c, &(0x7f0000000280)="$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") (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000000), &(0x7f0000000080)=0x40) (async) ioctl$EXT4_IOC_SETFSUUID(r0, 0x4008662c, &(0x7f00000000c0)={0x10, 0x0, "236c607fbb40ed5ab7a9ac2f5629b939"}) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001500add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) pwrite64(r2, &(0x7f0000000180)="92d7fbcf320f5254e949da171579f148352084c6a9869b642a2642da4dcf862242088c38eb748e6010c41b313f0897780e9cc3d92d21415db429ad9442cbaf8b63b049c2b6505b047fbf02282c4ab32bd0896092a54a12b80d3be37caf51bf03f4462a6215a9a85f77fae1b380f4bf005c251512ddc089007d709074e7ce04dbeff20e94f3d689bbe07526c30986ec7d4fd0d4c6cf02e910a1e263166ad9365aaefc149dc2442cafdc240422cfccfc6faf051d2a03", 0xf, 0x8000c61) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x40305829, &(0x7f0000000240)={0x17c04, r1, 0x8, 0x100000002, 0x0, 0xffffffffffffffff}) 46.265026764s ago: executing program 1 (id=247): r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_proto_private(r0, 0x89ef, &(0x7f00000001c0)="3a4ee367ad") r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x702, 0xe, 0x700, &(0x7f0000000540)="e460334470b8d480eb00c15286dd", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$inet(0x2, 0x2, 0x0) (async) ioctl$sock_proto_private(r0, 0x89ef, &(0x7f00000001c0)="3a4ee367ad") (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x702, 0xe, 0x700, &(0x7f0000000540)="e460334470b8d480eb00c15286dd", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) 46.244239845s ago: executing program 32 (id=247): r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_proto_private(r0, 0x89ef, &(0x7f00000001c0)="3a4ee367ad") r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x702, 0xe, 0x700, &(0x7f0000000540)="e460334470b8d480eb00c15286dd", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$inet(0x2, 0x2, 0x0) (async) ioctl$sock_proto_private(r0, 0x89ef, &(0x7f00000001c0)="3a4ee367ad") (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x702, 0xe, 0x700, &(0x7f0000000540)="e460334470b8d480eb00c15286dd", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) 4.985993119s ago: executing program 0 (id=1139): r0 = openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r0, 0x0) syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000a80)='./file1\x00', 0x2800810, &(0x7f00000025c0)=ANY=[@ANYBLOB="646f74732c747a3d5554432c646f74732c646f74732c6e6f646f74732c666c7573682c646f74732c6e6f646f74732c71756965742c00b3d27234e95eb4b44190021bbbe89ab824d38c571641668d362b4dff6e47bdf1638c7462a3bd66a53b404ae08c32af00000000000000001b9d48047c77540b6447a8e50c44cb44f91e4264a37e0209c3a234f4803ba56b7a24536ee396f4838f4143b92ad909efb23eb22dce6477c2bb5b8f793b9e07c2120d566cf1f6ba51e4d0028ef223a2ba72cfb3127844c045765149fb1219b433feb977426596e07082254e9930296256df143ff96377d8c28c533724fbd9fdad260e7d875d0f17374141abc60c8e3c07e4a7bc381791172c217f00964aaf6e213a252b9689ae38342862d27437921e13229d407e1a6037e3f16a2cdab8f9c76a66a72ccc67015c9435e200f9fbb9d78ce426b37310b9f127e7b1207c74eff7b853de7043a001de85931463c7fc7c78be9eb9b5f88c0067aabb3a5d1f94bcc90537c1c1ce509450160c"], 0x3, 0x183, &(0x7f0000000240)="$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") chown(&(0x7f0000000080)='./file1\x00', 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x18) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80800) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0xe0881) write$sndseq(r1, 0x0, 0x0) poll(&(0x7f0000000000)=[{r1}], 0x1, 0x100) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000001140)={0x80, 0x21, 0x3, 0x7}) bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff64) setresgid(0xee00, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="74000000210001002abd7000fedbdf250a80804cec0000011700000008000f00f9ffffff14000200fc010000000000000000000000000001140001002001000000000000000000000000000114000200fc020000000000000000000000000000140002002001000000000000000000f890f33f90d3d7ecb24b78050000000002"], 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40890}, 0x20000805) prlimit64(r3, 0x1, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000140)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) connect$inet(r6, &(0x7f0000000200)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f00000000c0)='westwood', 0x8) sendto$inet(r6, &(0x7f0000000000), 0xffffffffffffff94, 0x1100, 0x0, 0x0) recvfrom$inet(r6, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) syz_genetlink_get_family_id$team(&(0x7f0000000000), r5) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/hibernate_compression_threads', 0xa0042, 0x11) write$tcp_mem(r8, &(0x7f0000000400)={0x6, 0x2d, 0x2, 0x3a, 0x0, 0x2c}, 0x48) getsockopt$netlink(r4, 0x10e, 0x9, 0x0, &(0x7f0000001100)) 4.016670895s ago: executing program 0 (id=1170): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000000)={0x0, 0x500, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="070200000010000000000100000008000880840007802c0004800500030001000000050003000000000005000300010000000500030001000000050003000500000008000100030000000800020001"], 0x58}}, 0x800) 4.013002745s ago: executing program 0 (id=1173): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffffffff, 0xfc}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x1) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x3, 0x801, 0x0, &(0x7f0000000040), 0xfffffffc) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mlock2(&(0x7f0000495000/0x2000)=nil, 0x2000, 0x0) mincore(&(0x7f00006fb000/0x2000)=nil, 0x2000, &(0x7f0000000280)=""/150) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4000000) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x101000, 0x151) preadv2(r0, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4083, 0xffffffdf}], 0x1, 0x0, 0x0, 0x1) 3.356992764s ago: executing program 4 (id=1186): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet(0x2, 0x3, 0x6) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='vlan0\x00', 0x10) sendmmsg$inet(r0, &(0x7f0000002e00)=[{{&(0x7f0000000080)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x6, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x18}}], 0x1, 0x40800) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket(0x10, 0x803, 0x4) syz_usbip_server_init(0x2) 2.773109288s ago: executing program 2 (id=1197): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000200)={[{@nombcache}, {@noblock_validity}, {@nombcache}, {@nobarrier}, {@nodelalloc}, {@errors_remount}]}, 0x1, 0x569, &(0x7f00000002c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) unshare(0x64000600) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x7}) mprotect(&(0x7f00003ad000/0x3000)=nil, 0x3000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xf177c000) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) r3 = add_key$fscrypt_v1(0x0, &(0x7f0000000100)={'fscrypt:', @auto=[0x37, 0x36, 0x35, 0x54, 0xc25c1c7acfb9e35a, 0x0, 0x34, 0x35, 0x65, 0x38, 0x63, 0x61, 0x32, 0x0, 0x36, 0x62]}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$invalidate(0x15, r3) migrate_pages(0x0, 0x401, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 2.543689601s ago: executing program 4 (id=1199): r0 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=@newtaction={0x6c, 0x30, 0x5, 0x70bd29, 0x0, {}, [{0x58, 0x1, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x44, 0x0, 0x7, 0x6, 0x4}, 0xd}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x41}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="070200000010000000000100000008000880840007802c0004800500030001000000050003000000000005000300010000000500030001000000050003000500000008000100030000000800020001"], 0x58}}, 0x800) 2.521670982s ago: executing program 4 (id=1200): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000000800034000000004400000000c0a050000000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000ffffffef0500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}}, 0x40) 2.353354532s ago: executing program 4 (id=1201): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x5453, 0x0) readv(r1, &(0x7f0000000680)=[{&(0x7f0000000180)=""/131, 0x83}], 0x1) ioctl$KDDISABIO(r1, 0x4b37) r2 = socket(0x10, 0x803, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000009000000000000000400150018160000", @ANYRES32=r3, @ANYBLOB="000000000000000085100000fbffffff95"], &(0x7f0000000080)='GPL\x00', 0xb, 0xff1, &(0x7f0000000cc0)=""/4081, 0x41000, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4408}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL={0x5, 0x3, 0x7}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$TIOCSSOFTCAR(r1, 0x5453, 0x0) (async) readv(r1, &(0x7f0000000680)=[{&(0x7f0000000180)=""/131, 0x83}], 0x1) (async) ioctl$KDDISABIO(r1, 0x4b37) (async) socket(0x10, 0x803, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000009000000000000000400150018160000", @ANYRES32=r3, @ANYBLOB="000000000000000085100000fbffffff95"], &(0x7f0000000080)='GPL\x00', 0xb, 0xff1, &(0x7f0000000cc0)=""/4081, 0x41000, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) (async) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4408}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL={0x5, 0x3, 0x7}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) 2.207568951s ago: executing program 2 (id=1203): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000002000000000000000000000e50003000000000085100000fcffffff2500feff0000000085500000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x60}, 0x94) 2.133062426s ago: executing program 0 (id=1206): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x64, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) (async, rerun: 32) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async, rerun: 32) renameat2(0xffffffffffffffff, &(0x7f0000000240)='./bus/file0\x00', 0xffffffffffffffff, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r0) 2.073475279s ago: executing program 2 (id=1207): syz_emit_ethernet(0xae, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6000030800783a00fc010000000000000000000000000000fe8000000000000000000000000000aa0200907800000000605b52ab00002b00fc000000000000000000000000000000fc000000000000000000000000000000de07040201000000fc020000000000000000000000000000fe8800000200000000000000000000018802000000000000c910fe8000000000000000000000000000bb000000000000"], 0x0) (async) syz_emit_ethernet(0xae, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6000030800783a00fc010000000000000000000000000000fe8000000000000000000000000000aa0200907800000000605b52ab00002b00fc000000000000000000000000000000fc000000000000000000000000000000de07040201000000fc020000000000000000000000000000fe8800000200000000000000000000018802000000000000c910fe8000000000000000000000000000bb000000000000"], 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$eJzs3D1rW1cYB/AjWa6tlhZPhXbpoV3a5bb10qVDS3GhVNCSRCEv0zWWEyFFAl8NksmgOVM+RwhkCWQL+QL+DFmymYDx5Ck3OJKs2NixE0dy4vx+ix6e/z1X5+jARVy9bP5+91ZjNUtW004ozRdC8Y/QDzuFsBCKYaQffnpwZfvOxavX/v2zUlm6MDvsx/jVd4+v377//ZPOF5cf7nYKIYStxWcbX298s/ni0s16FutZbLU7MY3L7XYnXW7W4ko9ayQx/t+spVkt1ltZbW1fvtpsj5861LIspq1ebNR6sdOOnbVeTG+k9VZMkiTOB06lem8nz8NWnuf5XD/kef62JyhMZl5Myyn3n4/c3kU97l5Nn/e71W518DjI//6nsvRLfGVhPGq7263O7OW/DvK4P58Nnw/zxUPzz8KPPwzy3eyv/yoH8nJYmfzyAQAAAADgXErinkPv7yfJUfmgeu3zgQP370vh29K4MzP5pQAAAABHyHrrjbS5Mrs2KJq1Myvmwv7Ob4+GUzxu+M9Pjz9mQsWXwyK843nKIYSjjymGM9+U6RSj75EPO6PfF5xseOl9TaP8gbwao2I+HBaVw3pjbjqbAgAAnC/jN/0nHlKc6IQAAAAAAAAAAAAAAAAAAADgEzSNPzM76zUCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALzJywAAAP//ixdW4w==") (async) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0), 0x208e24b) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="8c00000000020104000000000000000002000000240002801400018008000100e000000000000200ac1414000c0002800500010000000000240003801400018008000100ac1414aa08000200000000200c0002800000010000000000300001"], 0x8c}, 0x1, 0x0, 0x0, 0x80}, 0x24000090) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0xfffffff7, 0x40, 0x10000, 0x8000, 0x8, 0x2, 0x222a4b22}, 0x1c) (async) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0xfffffff7, 0x40, 0x10000, 0x8000, 0x8, 0x2, 0x222a4b22}, 0x1c) ftruncate(r0, 0xb35) 1.425316377s ago: executing program 4 (id=1210): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r0, 0x8) accept4(r0, 0x0, 0x0, 0x0) (async, rerun: 32) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f00000004c0)={0x0, 0xc2, "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"}, &(0x7f0000000480)=0x74) (rerun: 32) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) 1.309070713s ago: executing program 2 (id=1213): ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340)=0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x80000001, 0x604b0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x5, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0xf, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200d}, r0, 0x0, 0xffffffffffffffff, 0x0) (async) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) lseek(r2, 0x9, 0x0) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x5, 0x5, &(0x7f0000000480)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_MSG_GETCHAIN(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000880)={0x148, 0x4, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0xe, 0xc, "c5c10fd6eeab7d954bbd"}, @NFTA_CHAIN_FLAGS={0x8}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffd}, @NFTA_CHAIN_HOOK={0x9c, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth0_to_bond\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7e5ef64a}, @NFTA_HOOK_DEV={0x14, 0x3, 'syz_tun\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'ip6_vti0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_DEV={0x14, 0x3, 'macvtap0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'syzkaller0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x43363ab9}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4667762b}]}, @NFTA_CHAIN_COUNTERS={0x58, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7fff}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8000}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x36}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8000000000000001}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x200}]}]}, 0x148}, 0x1, 0x0, 0x0, 0xfc41bf2179377acb}, 0x801) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) (async) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbfe0900"}}}}}}}, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="182000000200000000000000000073bc71f872fae67210d275de0348b5e67a4587722e4928d36597bb310724edf19d6edf9dc483cc3b5f9d4e86c35cd150bf4a3a23a4623b69a723cc0b735367395329c537026081b881697e48cba64f4f31ec1a153559a7a84e96be4dfd686f52fc5aaf005465655e32ce5a744836748932f80c39972fc4"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x1}, 0x94) (async) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) socket$packet(0x11, 0xa, 0x300) 1.248633097s ago: executing program 2 (id=1217): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="7c0000001a00010025bd7000fddb5f250a001406ff01000100080000080006000bfeffff08000300", @ANYRES32, @ANYBLOB="0800100003", @ANYRES32], 0x7c}, 0x1, 0x2000000000000000}, 0x40000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe(0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x51, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x0, @perf_bp={0x0, 0x1}, 0x10000, 0x32, 0x43a1bd76, 0x5, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$packet(0x11, 0x2, 0x300) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r4, &(0x7f00000001c0)={0x27, 0x0, 0x1, 0x2, 0x0, 0x45, "c46e9f08000000000000006beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9ab97800001022f987617c31850000000000000000000900008000", 0x3a}, 0x60) recvmsg(r4, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000100)={0x0, 0x0}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r5) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000200), 0xffffffc1) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x9000) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="7c0000001a00010025bd7000fddb5f250a001406ff01000100080000080006000bfeffff08000300", @ANYRES32, @ANYBLOB="0800100003", @ANYRES32], 0x7c}, 0x1, 0x2000000000000000}, 0x40000) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) pipe(0x0) (async) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) (async) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x51, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x0, @perf_bp={0x0, 0x1}, 0x10000, 0x32, 0x43a1bd76, 0x5, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) socket$packet(0x11, 0x2, 0x300) (async) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) (async) bind$nfc_llcp(r4, &(0x7f00000001c0)={0x27, 0x0, 0x1, 0x2, 0x0, 0x45, "c46e9f08000000000000006beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9ab97800001022f987617c31850000000000000000000900008000", 0x3a}, 0x60) (async) recvmsg(r4, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) (async) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) (async) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000100)={0x0, 0x0}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r5) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) write$cgroup_int(r6, &(0x7f0000000200), 0xffffffc1) (async) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) (async) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x9000) (async) 1.065302608s ago: executing program 5 (id=1220): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000004a"], 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x55, 0x0, r0, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1}, 0x50) (async, rerun: 64) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000080000000500000001"], 0x50) (rerun: 64) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r2}, &(0x7f0000000600), &(0x7f00000006c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8a10ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x10, 0x15, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x169}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@alu={0x4, 0x1, 0x1, 0x1, 0x0, 0x5, 0xfffffffffffffffc}, @generic={0x4, 0x5, 0x9, 0x7, 0x3}, @generic={0x81, 0x3, 0x7, 0x425, 0x3}, @call={0x85, 0x0, 0x0, 0x7d}, @cb_func={0x18, 0x7}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x36b}, 0x94) (rerun: 32) r4 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000000)=r3, 0x4) 1.065124308s ago: executing program 0 (id=1221): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="070200000010000000000100000008000880840007802c0004800500030001000000050003000000000005000300010000000500030001000000050003000500000008000100030000000800020001"], 0x58}}, 0x800) (fail_nth: 7) 1.006843391s ago: executing program 5 (id=1222): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000000800034000000004400000000c0a050000000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000100001000000000000ef00000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}}, 0x40) 966.222293ms ago: executing program 5 (id=1223): getresuid(&(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10414b2, &(0x7f0000000100)={[], [{@obj_role={'obj_role', 0x3d, '\x00'}}, {@fowner_lt={'fowner<', r0}}, {@context={'context', 0x3d, 'unconfined_u'}}]}, 0xfe, 0x24e, &(0x7f0000000800)="$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") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={0x0}, 0x1, 0x0, 0x0, 0x884}, 0x20000000) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), r1) sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0xa4, r2, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x60, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@private=0xa010101}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3b}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x1840}, 0x4000040) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0x449, &(0x7f0000000a80)={@broadcast, @broadcast, @val={@void, {0x8100, 0x0, 0x0, 0x2}}, {@ipv6={0x86dd, @dccp_packet={0x0, 0x6, "e8e4d8", 0x40f, 0x21, 0xff, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {[@routing={0x32, 0x8, 0x5b4af2d084d1ac96, 0x10, 0x0, [@dev={0xfe, 0x80, '\x00', 0x34}, @private0, @rand_addr=' \x01\x00', @mcast2]}, @srh={0x2, 0xe, 0x4, 0x7, 0x3, 0x0, 0x3, [@loopback, @local, @local, @rand_addr=' \x01\x00', @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}, @srh={0x4, 0xc, 0x4, 0x6, 0xa, 0x40, 0x8, [@private0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @mcast1, @dev={0xfe, 0x80, '\x00', 0x38}, @remote, @loopback]}, @hopopts={0x16, 0xb, '\x00', [@padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1, @jumbo, @hao={0xc9, 0x10, @local}, @hao={0xc9, 0x10, @mcast2}, @calipso={0x7, 0x20, {0x0, 0x6, 0x9c, 0xdf, [0xfffffffffffffffa, 0x86e5, 0xd]}}, @jumbo={0xc2, 0x4, 0x8}]}, @hopopts={0x32, 0x0, '\x00', [@pad1, @enc_lim]}, @hopopts={0x87, 0x1d, '\x00', [@generic={0x1, 0xeb, "a0878baca24b55390aac5518d690625f3719f76372f2aaf224aa7ff2d4d073957dad9ef57e8c60fc23f1f77e517e172a54bc5c6187ac6cc8399a7fb530bea5f39d0bf3ce7e6d8f95a6310000851deb54bc70a72a20589b562300da2ab75efde79b46cadd2a64d167e61b0addaf4839a59d3116f359c00bf59179bb45ad6019b5b63bf56f1639e75c871914c0ea45ff08079d1f6e6a15c1c0b780585ecb50aa987b8dc6fced13de999469a345c9c9a69c4e8ee27ed845fe65d802296f334e933c073c0c07ae9e0d68ad1f4093adf7197abd78bb6f9f4839c62f6903d623eaa69cfe1d7ff85bb0f2fb810eff"}]}, @srh={0x11, 0xc, 0x4, 0x6, 0x9, 0x0, 0xff, [@dev={0xfe, 0x80, '\x00', 0x1f}, @ipv4={'\x00', '\xff\xff', @empty}, @local, @loopback, @private1, @mcast2]}], {{0x4e21, 0x4e23, 0x4, 0x1, 0x7, 0x0, 0x0, 0x4, 0x3, "7bc5c2", 0x81, "62a98e"}, "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"}}}}}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001780), 0x1, 0x0, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r4, &(0x7f0000000240)={0xa, 0x0, 0x8007, @dev={0xfe, 0x80, '\x00', 0x22}, 0x2}, 0x1c) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e22, 0x1000, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000003cc0), 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r5, &(0x7f0000000f00)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, 0x6, 0x6, 0x3, 0x0, 0x0, {0x1, 0x0, 0x4}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x1) getresuid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)) (async) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10414b2, &(0x7f0000000100)={[], [{@obj_role={'obj_role', 0x3d, '\x00'}}, {@fowner_lt={'fowner<', r0}}, {@context={'context', 0x3d, 'unconfined_u'}}]}, 0xfe, 0x24e, &(0x7f0000000800)="$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") (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={0x0}, 0x1, 0x0, 0x0, 0x884}, 0x20000000) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), r1) (async) sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0xa4, r2, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x60, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@private=0xa010101}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3b}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x1840}, 0x4000040) (async) socket$igmp6(0xa, 0x3, 0x2) (async) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) (async) syz_emit_ethernet(0x449, &(0x7f0000000a80)={@broadcast, @broadcast, @val={@void, {0x8100, 0x0, 0x0, 0x2}}, {@ipv6={0x86dd, @dccp_packet={0x0, 0x6, "e8e4d8", 0x40f, 0x21, 0xff, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {[@routing={0x32, 0x8, 0x5b4af2d084d1ac96, 0x10, 0x0, [@dev={0xfe, 0x80, '\x00', 0x34}, @private0, @rand_addr=' \x01\x00', @mcast2]}, @srh={0x2, 0xe, 0x4, 0x7, 0x3, 0x0, 0x3, [@loopback, @local, @local, @rand_addr=' \x01\x00', @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}, @srh={0x4, 0xc, 0x4, 0x6, 0xa, 0x40, 0x8, [@private0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @mcast1, @dev={0xfe, 0x80, '\x00', 0x38}, @remote, @loopback]}, @hopopts={0x16, 0xb, '\x00', [@padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1, @jumbo, @hao={0xc9, 0x10, @local}, @hao={0xc9, 0x10, @mcast2}, @calipso={0x7, 0x20, {0x0, 0x6, 0x9c, 0xdf, [0xfffffffffffffffa, 0x86e5, 0xd]}}, @jumbo={0xc2, 0x4, 0x8}]}, @hopopts={0x32, 0x0, '\x00', [@pad1, @enc_lim]}, @hopopts={0x87, 0x1d, '\x00', [@generic={0x1, 0xeb, "a0878baca24b55390aac5518d690625f3719f76372f2aaf224aa7ff2d4d073957dad9ef57e8c60fc23f1f77e517e172a54bc5c6187ac6cc8399a7fb530bea5f39d0bf3ce7e6d8f95a6310000851deb54bc70a72a20589b562300da2ab75efde79b46cadd2a64d167e61b0addaf4839a59d3116f359c00bf59179bb45ad6019b5b63bf56f1639e75c871914c0ea45ff08079d1f6e6a15c1c0b780585ecb50aa987b8dc6fced13de999469a345c9c9a69c4e8ee27ed845fe65d802296f334e933c073c0c07ae9e0d68ad1f4093adf7197abd78bb6f9f4839c62f6903d623eaa69cfe1d7ff85bb0f2fb810eff"}]}, @srh={0x11, 0xc, 0x4, 0x6, 0x9, 0x0, 0xff, [@dev={0xfe, 0x80, '\x00', 0x1f}, @ipv4={'\x00', '\xff\xff', @empty}, @local, @loopback, @private1, @mcast2]}], {{0x4e21, 0x4e23, 0x4, 0x1, 0x7, 0x0, 0x0, 0x4, 0x3, "7bc5c2", 0x81, "62a98e"}, "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"}}}}}}, 0x0) (async) recvmmsg(0xffffffffffffffff, &(0x7f0000001780), 0x1, 0x0, 0x0) (async) socket$inet6(0xa, 0x80002, 0x0) (async) connect$inet6(r4, &(0x7f0000000240)={0xa, 0x0, 0x8007, @dev={0xfe, 0x80, '\x00', 0x22}, 0x2}, 0x1c) (async) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e22, 0x1000, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) (async) sendmmsg$inet6(r4, &(0x7f0000003cc0), 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_SWAP(r5, &(0x7f0000000f00)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, 0x6, 0x6, 0x3, 0x0, 0x0, {0x1, 0x0, 0x4}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x1) (async) 916.810186ms ago: executing program 5 (id=1225): r0 = socket$kcm(0xa, 0x2, 0x0) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'lblcr\x00', 0x1, 0x80005, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) syz_io_uring_setup(0x7c9d, &(0x7f0000000140)={0x0, 0x0, 0x8, 0x8003, 0x400}, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x0) (async) socket(0x2, 0x80805, 0x0) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'lblcr\x00', 0x1, 0x80005, 0x6f}, 0x2c) (async) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44) (async) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) (async) syz_io_uring_setup(0x7c9d, &(0x7f0000000140)={0x0, 0x0, 0x8, 0x8003, 0x400}, 0x0, 0x0) (async) 879.548289ms ago: executing program 5 (id=1227): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e23, 0x2, @mcast1, 0x6}}}, 0x84) r1 = socket(0x2b, 0x80801, 0x1) semget$private(0x0, 0x1, 0x40) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000001740)=@raw={'raw\x00', 0x8000000, 0x7fffffe, 0x2b0, 0x110, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x1e0, 0xffffffff, 0xffffffff, 0x1e0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x3, 0x0}, @mcast1, [0x0, 0x0, 0x0, 0xffffff], [0xff000000, 0x0, 0x4c62d6309aaa1bde, 0xffffff00], 'batadv0\x00', 'nicvf0\x00', {}, {0xff}, 0x3a, 0x0, 0x3, 0x42}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0xa, 0x100, 0x2, 0x8, 'pptp\x00', 'syz0\x00', {0xf}}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0x0, 0x0, 0xffffffff, 0xffffff00], [0x0, 0x0, 0xffffff00, 0xff], 'syzkaller0\x00', 'vxcan1\x00', {}, {}, 0x3c}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1a, 0x7, 0xc}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) sendmsg$DEVLINK_CMD_SB_POOL_SET(r1, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001540)={0x0}, 0x1, 0xffffff7f, 0x0, 0xe75001b60ea60498}, 0x6000c054) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000002200)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f0000002140)={0x30, r3, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_TID={0xc, 0x3, 0x1}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000200), r1) sendmsg$SMC_PNETID_GET(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c000000a2fbcde81c7b9b3a3caade5151bd88a86bb0b77f87ee3bf6d7df7a6555d050963d7e5a07774a03997f5fa86dae297e0525ef124ed96197a31293bec52aec452608c3b66989860000b68796402d", @ANYRES16=r4, @ANYBLOB="100028bd7000fedbdf25010000000900030073797a320000000005000400020000000900030073797a31000000000500040001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x2000c000}, 0x20000040) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xac, 0x0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3244bfd48960a490}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}]}, 0xac}, 0x1, 0x0, 0x0, 0x4000010}, 0x8000) 661.390211ms ago: executing program 3 (id=1228): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000100)=@framed={{0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0, @generic={0x65}, @initr0, @exit, @alu={0x4, 0x0, 0x7, 0x3}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'lo\x00'}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r6) timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4}, &(0x7f0000000000)) r7 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r8, @ANYBLOB="01"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010001fff000000008100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000200012800b00010067656e657665000010000280060005004e24000004000e0008000a00", @ANYRES32=r2], 0x48}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 534.782039ms ago: executing program 4 (id=1229): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffffffff, 0xfc}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x1) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x3, 0x801, 0x0, &(0x7f0000000040), 0xfffffffc) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mlock2(&(0x7f0000495000/0x2000)=nil, 0x2000, 0x0) mincore(&(0x7f00006fb000/0x2000)=nil, 0x2000, &(0x7f0000000280)=""/150) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4000000) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x101000, 0x151) preadv2(r0, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4083, 0xffffffdf}], 0x1, 0x0, 0x0, 0x1) 447.752064ms ago: executing program 3 (id=1230): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5880ff00", @ANYRES16=r1, @ANYBLOB="070200000010000000000100000008000880840007802c0004800500030001000000050003000000000005000300010000000500030001000000050003000500000008000100030000000800020001"], 0x58}}, 0x800) 361.337139ms ago: executing program 0 (id=1231): r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x18d432, &(0x7f0000000040)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x484, &(0x7f0000000b40)="$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") lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f00000001c0)=ANY=[], 0x361, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x61, 0xd, 0x0, 0x0, 0x0, 0x0, 0x2600, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000002, 0x0, @perf_config_ext={0x1002, 0x7ff}, 0x4044, 0x80, 0x0, 0x8, 0x7fff, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = socket(0x1, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, r3) fstat(r0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, {r3, r4}}, './file1\x00'}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e23, 0x997, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x40}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x68000000}, 0x4040010) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) io_setup(0x6, &(0x7f0000000680)=0x0) io_submit(r6, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x180a, 0x0, 0x3, 0x1, 0x5, r5, 0x0, 0x51, 0x100000000002}]) recvfrom$unix(r5, &(0x7f0000000340)=""/142, 0x8e, 0x10000, &(0x7f0000000400)=@file={0x1, './file1\x00'}, 0x6e) r7 = socket$kcm(0xa, 0x5, 0x0) sendmsg$inet(r7, &(0x7f00000004c0)={&(0x7f0000000200)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000240)='*', 0x1}], 0x1}, 0x4000) setsockopt$sock_attach_bpf(r7, 0x84, 0x1f, &(0x7f0000000100), 0x120) r8 = socket$nl_route(0x10, 0x3, 0x0) write(r8, &(0x7f0000000000)="240000005800410f9c00f4f90085b3a85c91fddf080001000501009f0800028001000000", 0x24) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x64, r9, 0x1, 0xffffffff, 0x400000, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x10000000}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @empty}}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x80}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}]}, 0x64}, 0x1, 0x620b}, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f00000000c0)={{}, {0x1, 0x2}, [{0x2, 0x0, 0xee01}, {0x2, 0x2}, {0x2, 0x6}, {0x2, 0x2}, {0x2, 0x4}], {0x4, 0x4}, [{0x8, 0x2}, {0x8, 0x4}], {}, {0x20, 0x6}}, 0x5c, 0x3) 361.020369ms ago: executing program 3 (id=1232): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x10, 0x0, 0x0, 0x3, 0x2, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x7}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYRES8, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e000000004000028006000100000ffe00340003800c0001000ffe0000000000003000010000217fffff0080030c00010000010000000000000c000100040000000000000008000500", @ANYRES32=r1], 0x80}, 0x1, 0x0, 0x0, 0x2000c081}, 0x8000) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="fe000000020000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r7], 0x54}}, 0x0) 327.369811ms ago: executing program 5 (id=1233): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0xa00c4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x2, @perf_config_ext={0x8000000000000000, 0x3fff8000}, 0x101b00, 0x1, 0x43a1bd76, 0x7, 0x0, 0xa6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000000314010028bd7000fbdbdf250900020073797a32000000000800410072786500140033006970365f7674693000000000fe000000"], 0x38}, 0x1, 0x0, 0x0, 0x8840}, 0x4000) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0xa00c4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x2, @perf_config_ext={0x8000000000000000, 0x3fff8000}, 0x101b00, 0x1, 0x43a1bd76, 0x7, 0x0, 0xa6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x3) (async) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000000314010028bd7000fbdbdf250900020073797a32000000000800410072786500140033006970365f7674693000000000fe000000"], 0x38}, 0x1, 0x0, 0x0, 0x8840}, 0x4000) (async) 229.644567ms ago: executing program 3 (id=1234): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, 0x0, 0x5a) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) fchown(0xffffffffffffffff, 0x0, 0xee01) r1 = gettid() timer_create(0x0, &(0x7f0000000380)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x4370, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000080)=0x3, 0x4) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6(0xa, 0x5, 0x0) epoll_create1(0x0) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x1, 0xfffffffffffffffc, 0x4, 0xfffffffffffffffd, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x20000, 0x0, 0x9, 0x7, 0x0, 0x80000000, 0x6ec}, 0x0, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_POWER(r3, 0x112, 0x9, 0x0, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000000040)={0x100001}, 0x4) 198.307019ms ago: executing program 3 (id=1235): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}]}]}, 0x54}}, 0x0) (async, rerun: 64) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x41, 0x0) (rerun: 64) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x1b) r2 = fsopen(&(0x7f0000000180)='f2fs\x00', 0x0) fsetxattr(r2, &(0x7f00000001c0)=@known='com.apple.system.Security\x00', &(0x7f0000000240)='/dev/ptmx\x00', 0xa, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000001f80)=0x9) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r3, 0x0, 0x10, &(0x7f00000000c0)="170000000200020000ffbe8c5ee17688a2003c00030100000077fc5ad90200fb6a880000d6c9db0000db15d088bd8b7000000000d9ce9bc7e28db3000200ff01800a0000ebfc0607bdff59100ac45761547a681f009ceeff5acba400001fb700674f00c8e365d00b5033bf79ac2dfc061f15003901dee2000000000062068f5ee50c08af9b1c568302ffff02ff03310800ab0840024f02d8e9e90539062a80e605007f71174ab498ff0b3e5a1b47b6df7b23de8caa000000", 0x10c) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES64=r4, @ANYRES32=r4], 0x38}}, 0x0) 89.208615ms ago: executing program 3 (id=1236): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0xd9a, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newqdisc={0x80, 0x24, 0x3fe3aa0262d8c583, 0x0, 0xf1ffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x50, 0x2, {{0x6, 0x401, 0x9, 0x8000, 0x32de, 0xc255}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x8000000000000001, 0x7, 0x4, 0xd2, 0x2, 0x8}}]}}}]}, 0x80}}, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000001080)='./bus\x00', 0x80, &(0x7f00000010c0)=ANY=[@ANYBLOB="666c7573682c6e6f646f74732c646973636172642c646d61736b3d30303030303030303030303030303030303030303030322c646d61736b3d30303030303030303030303030303030303030303137372c646f74732c6e6f646f74732c71756965742c646f74732c0023c3cb4d2e3cbf18508098fe0de2af38db67d42d1bc4ab714d52f019082433fc9ca2d7174b2c4ece31c9f4c7a4d53914e100"/167], 0x1, 0x140, &(0x7f0000000000)="$eJzs27Fq21AUBuDj2m3ddvFcOgi6dDJtn6CluFAqaEnwkEwJOFnsYIgXJZMfJS8YCJ683ZAo2Imxhwy2IPq+RT/8CO4dpMMV6OjT2XAwnpyO/8+i3WhE60dkMW9EJ15FM0rTAABeknlKcZNSSm+n8e4qUkpVrwgA2DbzHwDqx/wHgPox/wGgfvYPDv/+zPPeXpa1I66nRb/ol9ey//0n733N7nWWd82Kot9c9N/KPnvav473D/33tf2b+PK57O+6X//ylf5DDLa/fQAAAKiFbraw9nzf7W7qy/To+8DK+b0VH1s72wYA8AyTi8vh8Wh0ci4IgrAIVb+ZgG1bPvRVrwQAAAAAAAAAAAAAANhkF78TVb1HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWHUbAAD//0DvUik=") r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000006c0)={'batadv_slave_0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000700)={r4, r6, 0x25, 0x1, @void}, 0x10) r7 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r7, &(0x7f0000000200)="000bda", 0x3) sendfile(r7, r4, 0x0, 0x40001) sendfile(r7, r5, 0x0, 0x7ffff000) poll(&(0x7f0000000000)=[{r3, 0x82d8}], 0x1, 0x11ff) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x98, 0x0, 0x0, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x23}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x56}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x10001}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x40}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x800}, 0x4) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0x880, 0x2c, 0xd27, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r10, {0xe, 0xe}, {}, {0x8, 0xc}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x850, 0x2, [@TCA_CGROUP_EMATCHES={0x4}, @TCA_CGROUP_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0xfffffff9, 0xffffffff, 0x40000, 0x2, 0x39f, 0x9, 0x80, 0x0, 0x2c11, 0x9ad, 0x7, 0x800, 0x0, 0x1, 0x10, 0x80000001, 0x0, 0x1, 0x80, 0x80000001, 0x53, 0x5, 0x6, 0x7, 0xffffffd0, 0x8, 0x2, 0x1, 0x9, 0x8, 0x8, 0x51, 0x80000000, 0x0, 0xf2, 0x1, 0x9, 0x2000, 0x6, 0x3ff, 0x800, 0xef05, 0x6, 0x40, 0x40, 0x1, 0x7, 0x2, 0x3, 0xbb, 0xfffffff6, 0x1, 0xbf9, 0x4, 0x8, 0x6, 0x1, 0x2, 0x3ff, 0x2, 0x80, 0xfff, 0x4, 0x8, 0x3, 0x7, 0x7, 0x7ad, 0x5, 0x2, 0x81, 0x3, 0x6, 0x9, 0x3, 0x7ff, 0xffffffff, 0x7, 0x6, 0x1, 0x1, 0x80, 0xe, 0x8, 0x4, 0x0, 0x81, 0x9, 0xb02, 0x800, 0xe924, 0xb, 0x8, 0xfffffff8, 0x4, 0xb59a, 0x2, 0x6, 0x7, 0x7, 0x4, 0x3, 0x1, 0x0, 0x79, 0x2, 0x2, 0x93f, 0x81, 0x1, 0x10, 0x9, 0x8, 0xd3, 0x10000, 0x1, 0xffff, 0x80, 0x2, 0x18000, 0x5, 0x6, 0xffffc2f3, 0x4, 0xc5b9, 0x5aae99c3, 0xdf, 0x1, 0x0, 0x4, 0x7, 0x7fff, 0x7, 0x3, 0x4, 0x5, 0x8, 0x0, 0x6, 0x200, 0x7, 0xf, 0x101, 0x8d, 0x2, 0x0, 0xe6, 0x6, 0x5, 0x3, 0x2, 0x2, 0x101, 0x7, 0x0, 0x295, 0x8, 0x0, 0x3, 0x2, 0x87bb, 0x0, 0xd, 0x4, 0x6, 0x80, 0x4, 0x10001, 0x7, 0x2, 0x1, 0xffffffff, 0xfffffff7, 0xf, 0x4, 0x0, 0x3, 0x5, 0x9, 0x8, 0x2, 0x8000, 0xc2, 0x4, 0x3, 0x0, 0x3, 0xfb, 0xc, 0x15e7, 0x9, 0xfffffff7, 0x9, 0x6, 0x9, 0x5, 0x4, 0xe, 0x6, 0x8, 0x3, 0x1, 0x400, 0x8000, 0x622, 0x2, 0xb51, 0xfff, 0xc, 0x7, 0x6294, 0x1930, 0x7, 0xff, 0x7, 0xffff8000, 0x9, 0x9, 0x9, 0x3ff, 0x2, 0x9, 0x7, 0x4, 0x5, 0x7, 0x1, 0x1, 0x10, 0x7ad63ca1, 0x0, 0x3, 0x6, 0xe, 0x1, 0x9, 0x520, 0x8, 0x1, 0x5ca, 0x4, 0x3ff, 0xa1e, 0x1ff, 0x2, 0x1, 0x4, 0x3, 0x6, 0x7, 0x7fffffff, 0xf8, 0x54, 0x2, 0x1f]}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x1, 0xe, 0xc, 0x80, 0xf8000000, 0x0, 0x9, 0x3, 0xf5, 0x9, 0x7, 0x6a, 0x101, 0x80000001, 0x6, 0x5, 0x5, 0x3, 0xfffffffc, 0x101, 0x706e, 0xffffffff, 0x7, 0x10001, 0x7ff, 0x8000, 0x7, 0x2, 0x0, 0x0, 0x3, 0x3efd, 0xbf, 0x5, 0x40, 0x9, 0x1, 0xffffaca3, 0x98, 0x2, 0x2, 0x10, 0x2, 0x5, 0xb29a, 0x31d, 0x5, 0x6, 0x7, 0x100, 0x6, 0x9, 0x2, 0x5f0d, 0x7, 0xffffffff, 0x8, 0x714, 0x1, 0x2, 0x200, 0x6fcbf9d2, 0x322cf86f, 0x9, 0xbc70, 0x0, 0x4, 0x7f, 0x2d68, 0x3, 0x5, 0x200, 0x7f, 0x3, 0x4, 0x8, 0x3, 0x2, 0x4, 0x200, 0xffffae3e, 0x0, 0x0, 0x63, 0x9, 0x9, 0xad, 0x3, 0x3, 0x4, 0x0, 0x1, 0x7ff, 0x5, 0x8000, 0x5, 0xd, 0x4, 0x3, 0x5, 0x5, 0x7, 0x1e7400, 0xffff, 0x6, 0x2ffb, 0x2, 0x2, 0xf8, 0x1, 0x3, 0x6, 0x52ca, 0x3, 0x3, 0x8, 0x1, 0x21, 0x5, 0x6, 0x6, 0x6, 0x6, 0x6, 0x7, 0x6, 0x9, 0x8, 0xf60, 0x10001, 0x8, 0xa7, 0x6, 0xffff, 0x2, 0x7, 0x7fffffff, 0x40, 0x5, 0x1, 0x40, 0xffffffff, 0x92, 0x9, 0x2, 0x2443, 0x3427, 0x7fff, 0x8001, 0xe35, 0x4, 0x8, 0x0, 0x9f6, 0x2, 0xfffffffc, 0x9, 0x5f3f2f7d, 0x6, 0x9, 0x401, 0x6be, 0x4, 0x9, 0x7, 0x8, 0x7, 0x0, 0x9, 0x72, 0xedd2, 0x1a56, 0x0, 0xfffff000, 0x7f, 0x7ac4, 0xffffffc7, 0x3, 0xfffffff7, 0x4, 0x1, 0x7ff, 0x1, 0x6, 0x7, 0x101, 0x2, 0xd5e, 0x6, 0x6, 0x8, 0x1, 0xa6, 0x4, 0x9, 0x200, 0x6, 0x1ff, 0x101, 0x7, 0x8, 0x9, 0x7, 0xb, 0x40, 0x8, 0x8, 0x33, 0xffffffff, 0x9, 0x6, 0x4, 0x2, 0x5, 0x6, 0x49, 0x2, 0x9, 0x73da, 0x3, 0x8, 0xfffff800, 0x649, 0x3, 0xfffffff6, 0x6, 0x0, 0x4, 0x0, 0x6, 0x200, 0x9, 0x4, 0xf, 0x8, 0x2, 0x7, 0x5, 0x9240, 0x0, 0xff, 0x0, 0xff, 0x80000000, 0x7f, 0x97, 0x7, 0x0, 0x2, 0x0, 0x9, 0x689e, 0x80000000, 0x3, 0x8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x8, 0x0, 0x401, 0x7fffffff, {0xd, 0x2, 0x32, 0xff, 0x7, 0x365e8170}, {0x3, 0x0, 0x6, 0x0, 0x3, 0x9}, 0xfffffff9, 0x0, 0x7401f78e}}]}]}}]}, 0x880}}, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000580)={r5, 0x20, &(0x7f0000000540)={&(0x7f00000003c0)=""/128, 0x80, 0x0, &(0x7f0000000440)=""/230, 0xe6}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xc, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000e4d1184f000000000200000018180000", @ANYRES32=r7, @ANYBLOB="00000000000000001867000007000000000000000000000018290000", @ANYRES32=r5, @ANYBLOB="00000000f9ffffff1800000002000000000000006162ffff184400004b00"/40], &(0x7f0000000240)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x40, '\x00', r10, @fallback=0x34, r4, 0x8, &(0x7f0000000340)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000380)={0x2, 0x10, 0x781a, 0x6}, 0x10, r11, r4, 0x1, 0x0, &(0x7f00000005c0)=[{0x5, 0x1, 0x1, 0x5}], 0x10, 0x10000}, 0x94) syz_emit_ethernet(0x36, &(0x7f0000000280)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x0, 0x0, 0x0, @ipv4, @local}}}}, 0x0) 0s ago: executing program 2 (id=1237): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x1ff}]}) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000002d00010026bdf000fcdbdf2504"], 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x5, 0x80000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000001680)=""/4096) kernel console output (not intermixed with test programs): 7] EXT4-fs: Ignoring removed bh option [ 42.666949][ T4197] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.704162][ T4211] netlink: 28 bytes leftover after parsing attributes in process `syz.0.210'. [ 42.730821][ T4197] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4215: comm syz.3.207: Allocating blocks 497-513 which overlap fs metadata [ 42.755292][ T4215] EXT4-fs (loop3): pa ffff888107dfd070: logic 48, phys. 177, len 21 [ 42.763360][ T4215] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 1 [ 42.805465][ T4217] A link change request failed with some changes committed already. Interface veth1_to_batadv may have been left with an inconsistent configuration, please check. [ 42.828826][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.874629][ T4187] EXT4-fs: Ignoring removed i_version option [ 42.880666][ T4187] EXT4-fs: Ignoring removed nobh option [ 42.888817][ T4187] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 42.889382][ T3416] IPVS: starting estimator thread 0... [ 42.924005][ T4187] EXT4-fs (loop4): 1 truncate cleaned up [ 42.930650][ T4229] netlink: 12 bytes leftover after parsing attributes in process `syz.1.214'. [ 42.941340][ T4187] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.965840][ T4229] 8021q: adding VLAN 0 to HW filter on device bond1 [ 42.979771][ T4220] macsec1: entered promiscuous mode [ 42.985179][ T4220] bond1: entered promiscuous mode [ 42.990476][ T4220] macsec1: entered allmulticast mode [ 42.995792][ T4220] bond1: entered allmulticast mode [ 43.001111][ T4225] IPVS: using max 2256 ests per chain, 112800 per kthread [ 43.219699][ T4237] tipc: Started in network mode [ 43.224685][ T4237] tipc: Node identity 56775919a24e, cluster identity 4711 [ 43.231889][ T4237] tipc: Enabled bearer , priority 0 [ 43.239799][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.263706][ C1] Illegal XDP return value 70586496 on prog (id 45) dev veth1_to_batadv, expect packet loss! [ 43.338666][ T4237] tipc: Disabling bearer [ 43.461954][ T4260] SELinux: failed to load policy [ 43.509126][ T4268] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 43.644261][ T4283] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.675016][ T4283] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.748201][ T4298] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.782181][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.792366][ T4306] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 43.822063][ T4298] ext4 filesystem being mounted at /42/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.953630][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.963933][ T4319] batadv_slave_1: entered promiscuous mode [ 44.137314][ T4326] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 44.323686][ T3313] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 44.331555][ T3313] FAT-fs (loop1): Filesystem has been set read-only [ 44.528927][ T4337] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.549987][ T2072] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.616762][ T2072] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.634300][ T4336] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.669381][ T4358] netlink: 'syz.4.252': attribute type 21 has an invalid length. [ 44.685601][ T2072] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.701714][ T4362] netlink: 'syz.4.252': attribute type 21 has an invalid length. [ 44.747653][ T2072] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.782189][ T4318] batadv_slave_1: left promiscuous mode [ 44.834599][ T4379] usb usb7: usbfs: process 4379 (syz.3.257) did not claim interface 0 before use [ 44.840269][ T4378] netlink: 'syz.2.258': attribute type 10 has an invalid length. [ 44.844013][ T4377] usb usb7: usbfs: process 4377 (syz.3.257) did not claim interface 0 before use [ 44.852550][ T4344] lo speed is unknown, defaulting to 1000 [ 44.952239][ T4344] geneve0 speed is unknown, defaulting to 1000 [ 44.993842][ T2072] dummy0: left allmulticast mode [ 44.998947][ T2072] bridge0: port 3(dummy0) entered disabled state [ 45.007427][ T2072] bridge_slave_1: left allmulticast mode [ 45.013074][ T2072] bridge_slave_1: left promiscuous mode [ 45.019022][ T2072] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.027549][ T2072] bridge_slave_0: left allmulticast mode [ 45.033286][ T2072] bridge_slave_0: left promiscuous mode [ 45.039048][ T2072] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.094917][ T4396] EXT4-fs: Ignoring removed orlov option [ 45.115685][ T4396] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.149077][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.158486][ T2072] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 45.175465][ T2072] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 45.192662][ T2072] bond0 (unregistering): Released all slaves [ 45.213559][ T29] kauditd_printk_skb: 607 callbacks suppressed [ 45.213573][ T29] audit: type=1400 audit(1769325289.077:1214): avc: denied { getopt } for pid=4401 comm="syz.4.265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 45.240345][ T2072] bond1 (unregistering): left allmulticast mode [ 45.246872][ T2072] bond1 (unregistering): left promiscuous mode [ 45.256279][ T29] audit: type=1400 audit(1769325289.127:1215): avc: denied { append } for pid=4390 comm="syz.2.262" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 45.284811][ T2072] bond1 (unregistering): Released all slaves [ 45.297602][ T29] audit: type=1400 audit(1769325289.167:1216): avc: denied { search } for pid=3041 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 45.319008][ T29] audit: type=1400 audit(1769325289.167:1217): avc: denied { search } for pid=3041 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 45.341071][ T29] audit: type=1400 audit(1769325289.167:1218): avc: denied { search } for pid=3041 comm="dhcpcd" name="data" dev="tmpfs" ino=13 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 45.362846][ T29] audit: type=1400 audit(1769325289.167:1219): avc: denied { read } for pid=3041 comm="dhcpcd" name="n25" dev="tmpfs" ino=2093 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 45.379792][ T4344] chnl_net:caif_netlink_parms(): no params data found [ 45.385017][ T29] audit: type=1400 audit(1769325289.167:1220): avc: denied { open } for pid=3041 comm="dhcpcd" path="/run/udev/data/n25" dev="tmpfs" ino=2093 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 45.451639][ T29] audit: type=1400 audit(1769325289.207:1221): avc: denied { getattr } for pid=3041 comm="dhcpcd" path="/run/udev/data/n25" dev="tmpfs" ino=2093 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 45.474701][ T4421] netlink: 'syz.0.269': attribute type 30 has an invalid length. [ 45.475049][ T29] audit: type=1400 audit(1769325289.307:1222): avc: denied { ioctl } for pid=4414 comm="syz.4.268" path="socket:[7457]" dev="sockfs" ino=7457 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 45.490101][ T4344] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.514402][ T4344] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.520290][ T4427] EXT4-fs: Ignoring removed bh option [ 45.531087][ T4344] bridge_slave_0: entered allmulticast mode [ 45.537838][ T4344] bridge_slave_0: entered promiscuous mode [ 45.558548][ T4427] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.584266][ T2072] tipc: Left network mode [ 45.587266][ T29] audit: type=1400 audit(1769325289.457:1223): avc: denied { read open } for pid=4440 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 45.588838][ T4344] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.621430][ T4344] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.623316][ T4427] netlink: 'syz.4.271': attribute type 10 has an invalid length. [ 45.636889][ T4344] bridge_slave_1: entered allmulticast mode [ 45.643471][ T4344] bridge_slave_1: entered promiscuous mode [ 45.655058][ T4427] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 45.665440][ T4427] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 45.677896][ T4427] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 45.698507][ T4427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.707010][ T4427] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.748708][ T4427] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4215: comm syz.4.271: Allocating blocks 497-513 which overlap fs metadata [ 45.765015][ T4452] set_capacity_and_notify: 13 callbacks suppressed [ 45.765028][ T4452] loop2: detected capacity change from 0 to 512 [ 45.779511][ T4453] EXT4-fs (loop4): pa ffff888107e215b0: logic 48, phys. 177, len 21 [ 45.784593][ T4452] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 45.787544][ T4453] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 1 [ 45.814299][ T4344] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.834566][ T4344] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.848617][ T4452] EXT4-fs (loop2): 1 truncate cleaned up [ 45.854982][ T4452] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.875141][ T2072] hsr_slave_0: left promiscuous mode [ 45.903727][ T2072] hsr_slave_1: left promiscuous mode [ 45.920409][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.933849][ T2072] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 45.941310][ T2072] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 45.966719][ T4466] netlink: 'syz.3.276': attribute type 1 has an invalid length. [ 45.975029][ T2072] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 45.982401][ T2072] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 45.993721][ T2072] veth1_macvtap: left promiscuous mode [ 46.002505][ T4468] loop2: detected capacity change from 0 to 256 [ 46.002839][ T2072] veth0_macvtap: left promiscuous mode [ 46.023191][ T2072] veth1_vlan: left promiscuous mode [ 46.031197][ T4472] __nla_validate_parse: 11 callbacks suppressed [ 46.031215][ T4472] netlink: 28 bytes leftover after parsing attributes in process `syz.3.276'. [ 46.039919][ T2072] veth0_vlan: left promiscuous mode [ 46.135601][ T2072] team0 (unregistering): Port device team_slave_1 removed [ 46.150450][ T2072] team0 (unregistering): Port device team_slave_0 removed [ 46.197845][ T4468] netlink: 28 bytes leftover after parsing attributes in process `syz.2.275'. [ 46.211484][ T4475] bond1: (slave geneve2): making interface the new active one [ 46.219529][ T4475] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 46.236608][ T4344] team0: Port device team_slave_0 added [ 46.242243][ T1678] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 46.253749][ T4344] team0: Port device team_slave_1 added [ 46.272304][ T4344] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.279307][ T4344] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.305280][ T4344] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.317832][ T4344] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.325376][ T4344] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.353393][ T4344] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.374008][ T1678] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 46.375848][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.383021][ T1678] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 46.418585][ T41] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 46.451735][ T4500] netlink: 8 bytes leftover after parsing attributes in process `syz.3.286'. [ 46.458135][ T4502] loop2: detected capacity change from 0 to 512 [ 46.466239][ T4344] hsr_slave_0: entered promiscuous mode [ 46.477266][ T4502] EXT4-fs: Mount option(s) incompatible with ext2 [ 46.485244][ T4344] hsr_slave_1: entered promiscuous mode [ 46.493939][ T4344] debugfs: 'hsr0' already exists in 'hsr' [ 46.499999][ T4344] Cannot create hsr debugfs directory [ 46.639818][ T4513] lo speed is unknown, defaulting to 1000 [ 46.726759][ T4531] loop3: detected capacity change from 0 to 1024 [ 46.744406][ T4344] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 46.755533][ T4344] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 46.763083][ T4531] EXT4-fs: Ignoring removed bh option [ 46.774973][ T4344] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 46.788392][ T4519] lo speed is unknown, defaulting to 1000 [ 46.794321][ T4513] geneve0 speed is unknown, defaulting to 1000 [ 46.815110][ T4344] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 46.822831][ T4531] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.843639][ T4531] netlink: 'syz.3.295': attribute type 10 has an invalid length. [ 46.855089][ T4531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.863763][ T4531] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.918884][ T4526] tipc: Started in network mode [ 46.921118][ T4531] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4215: comm syz.3.295: Allocating blocks 497-513 which overlap fs metadata [ 46.923879][ T4526] tipc: Node identity 7f000001, cluster identity 4711 [ 46.950010][ T4549] EXT4-fs (loop3): pa ffff888107e21690: logic 48, phys. 177, len 21 [ 46.951871][ T4526] tipc: Enabled bearer , priority 10 [ 46.958130][ T4549] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 1 [ 46.981000][ T4519] geneve0 speed is unknown, defaulting to 1000 [ 46.995225][ T4556] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 47.073110][ T4344] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.110652][ T4344] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.129388][ T4565] lo speed is unknown, defaulting to 1000 [ 47.136079][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.143295][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.168199][ T4568] loop2: detected capacity change from 0 to 256 [ 47.184559][ T2072] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.191789][ T2072] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.205287][ T4568] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 47.215587][ T4568] FAT-fs (loop2): Filesystem has been set read-only [ 47.228436][ T4568] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 47.243026][ T4565] geneve0 speed is unknown, defaulting to 1000 [ 47.252160][ T4568] netlink: 8 bytes leftover after parsing attributes in process `syz.2.298'. [ 47.261027][ T4568] netlink: 20 bytes leftover after parsing attributes in process `syz.2.298'. [ 47.299172][ T4568] netlink: 8 bytes leftover after parsing attributes in process `syz.2.298'. [ 47.301133][ T2072] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 47.308281][ T4568] netlink: 20 bytes leftover after parsing attributes in process `syz.2.298'. [ 47.348608][ T2072] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 47.357959][ T2072] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 47.372847][ T41] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 47.396906][ T4344] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.453381][ T4595] loop4: detected capacity change from 0 to 512 [ 47.462320][ T4595] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 47.506267][ T4595] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.520614][ T4595] ext4 filesystem being mounted at /60/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 47.542974][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.599950][ T4616] 8021q: VLANs not supported on sit0 [ 47.613330][ T4614] lo speed is unknown, defaulting to 1000 [ 47.653374][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.687077][ T4614] geneve0 speed is unknown, defaulting to 1000 [ 47.687878][ T4344] veth0_vlan: entered promiscuous mode [ 47.736026][ T4344] veth1_vlan: entered promiscuous mode [ 47.769392][ T4632] loop4: detected capacity change from 0 to 512 [ 47.775218][ T4344] veth0_macvtap: entered promiscuous mode [ 47.783098][ T4631] tipc: Enabling of bearer rejected, already enabled [ 47.799900][ T4344] veth1_macvtap: entered promiscuous mode [ 47.865672][ T4344] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.888341][ T4344] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.910103][ T4636] lo speed is unknown, defaulting to 1000 [ 47.924666][ T2072] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.935053][ T2072] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.968036][ T2072] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.981279][ T2072] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.050708][ T4636] geneve0 speed is unknown, defaulting to 1000 [ 48.063572][ T10] tipc: Node number set to 2130706433 [ 48.261430][ T4650] loop4: detected capacity change from 0 to 512 [ 48.273893][ T4681] loop3: detected capacity change from 0 to 512 [ 48.291561][ T4647] loop2: detected capacity change from 0 to 512 [ 48.323549][ T4681] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 48.331893][ T4681] EXT4-fs (loop3): invalid journal inode [ 48.338012][ T4681] EXT4-fs (loop3): can't get journal size [ 48.344869][ T4681] EXT4-fs (loop3): 1 truncate cleaned up [ 48.370917][ T4647] EXT4-fs: Ignoring removed i_version option [ 48.377046][ T4647] EXT4-fs: Ignoring removed nobh option [ 48.411631][ T4647] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 48.424610][ T4681] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.426450][ T4650] EXT4-fs: Ignoring removed i_version option [ 48.443133][ T4650] EXT4-fs: Ignoring removed nobh option [ 48.477719][ T4690] syzkaller0: entered promiscuous mode [ 48.483294][ T4690] syzkaller0: entered allmulticast mode [ 48.495339][ T4647] EXT4-fs (loop2): 1 truncate cleaned up [ 48.509558][ T4650] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 48.528884][ T4647] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.558623][ T4650] EXT4-fs (loop4): 1 truncate cleaned up [ 48.566494][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.594120][ T4650] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.844402][ T4701] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.888023][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.903609][ T3307] udevd[3307]: incorrect ext4 checksum on /dev/loop3 [ 48.910694][ T4706] EXT4-fs (loop3): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 48.955253][ T4701] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.992218][ T4711] netlink: 4 bytes leftover after parsing attributes in process `syz.3.329'. [ 49.006916][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.052098][ T4714] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 49.076107][ T4714] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.094514][ T4701] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.105463][ T4714] ext4 filesystem being mounted at /71/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 49.117172][ T4725] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000060000 r/w without journal. Quota mode: none. [ 49.156073][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.218241][ T4701] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.316005][ T4737] can0: slcan on ttyS3. [ 49.350652][ T312] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.449860][ T312] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.453576][ T4737] can0 (unregistered): slcan off ttyS3. [ 49.458321][ T312] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.491526][ T312] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.520837][ T4754] netlink: 4 bytes leftover after parsing attributes in process `syz.0.338'. [ 49.555855][ T4753] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 49.642511][ T4768] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 49.663240][ T4753] ext4 filesystem being mounted at /75/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.722863][ T4768] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.770995][ T4788] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.337: bg 0: block 112: padding at end of block bitmap is not set [ 49.784279][ T4791] netlink: 4 bytes leftover after parsing attributes in process `syz.0.344'. [ 49.818523][ T4788] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 65 with error 117 [ 49.831052][ T4788] EXT4-fs (loop3): This should not happen!! Data will be lost [ 49.831052][ T4788] [ 49.853294][ T4344] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 49.919165][ T4796] veth1_macvtap: left promiscuous mode [ 49.927428][ T4796] macsec0: entered allmulticast mode [ 49.963966][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000060000. [ 49.986140][ T312] EXT4-fs error (device loop3): ext4_map_blocks:825: inode #15: comm kworker/u8:4: lblock 0 mapped to illegal pblock 0 (length 4) [ 50.017880][ T312] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 4 with error 117 [ 50.030192][ T312] EXT4-fs (loop3): This should not happen!! Data will be lost [ 50.030192][ T312] [ 50.078846][ T4805] team0: Port device team_slave_0 removed [ 50.099073][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 50.263922][ T29] kauditd_printk_skb: 151 callbacks suppressed [ 50.263938][ T29] audit: type=1400 audit(1769325294.137:1375): avc: denied { wake_alarm } for pid=4818 comm="syz.3.348" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 50.366313][ T4812] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 50.381800][ T29] audit: type=1400 audit(1769325294.157:1376): avc: denied { accept } for pid=4810 comm="syz.5.351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 50.401387][ T29] audit: type=1400 audit(1769325294.157:1377): avc: denied { bind } for pid=4810 comm="syz.5.351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 50.420684][ T29] audit: type=1400 audit(1769325294.167:1378): avc: denied { read } for pid=4818 comm="syz.3.348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 50.509366][ T29] audit: type=1400 audit(1769325294.367:1379): avc: denied { listen } for pid=4840 comm="syz.0.357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 50.573113][ T29] audit: type=1400 audit(1769325294.437:1380): avc: denied { connect } for pid=4847 comm="syz.5.359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 50.611007][ T29] audit: type=1400 audit(1769325294.477:1381): avc: denied { setopt } for pid=4854 comm="syz.0.361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 50.688206][ T3307] loop5: p3 p4 < > [ 50.692154][ T3307] loop5: p3 size 861184 extends beyond EOD, truncated [ 50.711773][ T4857] loop5: p3 p4 < > [ 50.716873][ T4857] loop5: p3 size 861184 extends beyond EOD, truncated [ 50.792260][ T4870] netlink: 'syz.5.366': attribute type 1 has an invalid length. [ 50.804165][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 50.813326][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 50.917271][ T4875] set_capacity_and_notify: 7 callbacks suppressed [ 50.917404][ T4875] loop3: detected capacity change from 0 to 1024 [ 50.947840][ T4875] EXT4-fs: Ignoring removed bh option [ 51.014367][ T4875] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.021715][ T4883] can0: slcan on ttyS3. [ 51.064551][ T4875] netlink: 'syz.3.368': attribute type 10 has an invalid length. [ 51.073654][ T4875] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.082180][ T4875] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.130799][ T4875] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4215: comm syz.3.368: Allocating blocks 497-513 which overlap fs metadata [ 51.146831][ T4875] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4215: comm syz.3.368: Allocating blocks 497-513 which overlap fs metadata [ 51.193640][ T4883] can0 (unregistered): slcan off ttyS3. [ 51.201936][ T4883] Falling back ldisc for ttyS3. [ 51.282391][ T4911] loop2: detected capacity change from 0 to 128 [ 51.290781][ T4875] EXT4-fs (loop3): pa ffff888107e21700: logic 48, phys. 177, len 21 [ 51.298857][ T4875] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 1 [ 51.325793][ T4911] FAT-fs (loop2): bread failed, FSINFO block (sector = 2048) [ 51.363306][ T4911] netlink: 'syz.2.375': attribute type 1 has an invalid length. [ 51.414349][ T4911] 8021q: adding VLAN 0 to HW filter on device bond1 [ 51.479208][ T4932] __nla_validate_parse: 7 callbacks suppressed [ 51.479224][ T4932] netlink: 8 bytes leftover after parsing attributes in process `syz.0.379'. [ 51.494299][ T4932] netlink: 12 bytes leftover after parsing attributes in process `syz.0.379'. [ 51.509458][ T4940] 9p: Bad value for 'rfdno' [ 51.518320][ T4939] 9p: Bad value for 'rfdno' [ 51.762750][ T4949] netlink: 'syz.4.383': attribute type 2 has an invalid length. [ 51.770646][ T4949] netlink: 194484 bytes leftover after parsing attributes in process `syz.4.383'. [ 51.792466][ T29] audit: type=1400 audit(1769325295.657:1382): avc: denied { accept } for pid=4948 comm="syz.4.383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 51.854863][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.899852][ T4969] loop5: detected capacity change from 0 to 512 [ 51.910053][ T4969] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 51.927328][ T4969] EXT4-fs (loop5): Errors on filesystem, clearing orphan list. [ 51.935619][ T4969] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.948566][ T29] audit: type=1400 audit(1769325295.817:1383): avc: denied { read } for pid=4971 comm="syz.4.391" dev="sockfs" ino=10009 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 51.948679][ T4975] 9p: Bad value for 'rfdno' [ 51.974111][ T4969] EXT4-fs warning (device loop5): dx_probe:837: inode #2: comm syz.5.389: Unimplemented hash flags: 0x0001 [ 51.986991][ T4969] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.389: Corrupt directory, running e2fsck is recommended [ 52.000370][ T29] audit: type=1400 audit(1769325295.857:1384): avc: denied { connect } for pid=4973 comm="syz.3.388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 52.020374][ T4969] EXT4-fs error (device loop5): ext4_readdir:264: inode #2: block 3: comm syz.5.389: path /16/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=196612, size=1024 fake=0 [ 52.069305][ T4982] 9p: Bad value for 'rfdno' [ 52.101642][ T4980] EXT4-fs error (device loop5): ext4_find_dest_de:2050: inode #2: block 3: comm syz.5.389: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=196612, size=1024 fake=0 [ 52.144812][ T4344] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.203235][ T5003] netlink: 56 bytes leftover after parsing attributes in process `syz.3.399'. [ 52.222507][ T5003] bond2: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 52.234190][ T5003] bond2 (unregistering): Released all slaves [ 52.329171][ T5020] loop3: detected capacity change from 0 to 128 [ 52.350361][ T5020] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 52.384106][ T5020] ext4 filesystem being mounted at /85/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 52.503494][ T3314] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 52.645743][ T5075] netlink: 'syz.3.403': attribute type 2 has an invalid length. [ 52.661071][ T5075] loop3: detected capacity change from 0 to 128 [ 52.678407][ T3307] udevd[3307]: incorrect ext4 checksum on /dev/loop3 [ 52.860634][ T4978] loop2: detected capacity change from 0 to 8192 [ 52.875245][ T5086] loop3: detected capacity change from 0 to 512 [ 52.895396][ T5086] EXT4-fs error (device loop3): ext4_iget_extra_inode:5073: inode #15: comm syz.3.404: corrupted in-inode xattr: invalid ea_ino [ 52.909354][ T5086] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.404: couldn't read orphan inode 15 (err -117) [ 52.922277][ T5086] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.063114][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.092699][ T5139] netlink: 16 bytes leftover after parsing attributes in process `syz.5.407'. [ 53.124214][ T5141] 9p: Bad value for 'rfdno' [ 53.151946][ T5143] 9p: Bad value for 'rfdno' [ 53.174027][ T5153] netlink: 4 bytes leftover after parsing attributes in process `syz.5.411'. [ 53.182842][ T5153] bridge_slave_1: left allmulticast mode [ 53.188830][ T5153] bridge_slave_1: left promiscuous mode [ 53.194923][ T5153] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.204739][ T5153] bridge_slave_0: left allmulticast mode [ 53.210433][ T5153] bridge_slave_0: left promiscuous mode [ 53.216261][ T5153] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.283538][ T5163] netlink: 56 bytes leftover after parsing attributes in process `syz.5.411'. [ 53.370112][ T3321] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000e1b1) [ 53.378167][ T3321] FAT-fs (loop2): Filesystem has been set read-only [ 53.433048][ T5175] netlink: 140 bytes leftover after parsing attributes in process `syz.4.414'. [ 53.451359][ T5182] loop5: detected capacity change from 0 to 512 [ 53.546573][ T5186] loop5: detected capacity change from 0 to 256 [ 53.554501][ T5186] vfat: Deprecated parameter 'posix' [ 53.559857][ T5186] FAT-fs: "posix" option is obsolete, not supported now [ 53.578021][ T5184] loop2: detected capacity change from 0 to 512 [ 53.599977][ T5184] EXT4-fs error (device loop2): ext4_iget_extra_inode:5073: inode #15: comm syz.2.419: corrupted in-inode xattr: invalid ea_ino [ 53.613841][ T5184] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.419: couldn't read orphan inode 15 (err -117) [ 53.626287][ T5184] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.684290][ T5192] EXT4-fs: Ignoring removed bh option [ 53.718788][ T5198] 9p: Bad value for 'rfdno' [ 53.915561][ T5207] EXT4-fs: Ignoring removed mblk_io_submit option [ 53.925667][ T5207] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 53.934417][ T5207] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 53.946387][ T5207] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #11: comm syz.2.425: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 53.981985][ T5207] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.425: couldn't read orphan inode 11 (err -117) [ 54.011329][ T5202] geneve2: entered promiscuous mode [ 54.020397][ T5211] netlink: 24 bytes leftover after parsing attributes in process `syz.4.426'. [ 54.030398][ T5207] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.425: Invalid block bitmap block 0 in block_group 0 [ 54.061823][ T5207] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.425: Failed to acquire dquot type 0 [ 54.129217][ T5207] bond2: option ad_select: invalid value (4) [ 54.137150][ T5207] bond2 (unregistering): Released all slaves [ 54.305393][ T5217] lo speed is unknown, defaulting to 1000 [ 54.394638][ T5217] geneve0 speed is unknown, defaulting to 1000 [ 54.488224][ T5262] EXT4-fs error (device loop5): ext4_quota_enable:7177: inode #3: comm syz.5.441: iget: checksum invalid [ 54.513508][ T5262] EXT4-fs error (device loop5): ext4_quota_enable:7180: comm syz.5.441: Bad quota inode: 3, type: 0 [ 54.514029][ T5265] netlink: 12 bytes leftover after parsing attributes in process `syz.3.444'. [ 54.533832][ T5262] EXT4-fs warning (device loop5): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-74, ino=3). Please run e2fsck to fix. [ 54.549319][ T5262] EXT4-fs (loop5): mount failed [ 54.558074][ T5261] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 54.561628][ T5265] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 54.566029][ T5261] FAT-fs (loop2): Filesystem has been set read-only [ 54.589520][ T5261] bio_check_eod: 81 callbacks suppressed [ 54.589537][ T5261] syz.2.443: attempt to access beyond end of device [ 54.589537][ T5261] loop2: rw=8912896, sector=2065, nr_sectors = 8 limit=128 [ 54.615364][ T5261] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 54.623326][ T5261] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 54.635755][ T5261] syz.2.443: attempt to access beyond end of device [ 54.635755][ T5261] loop2: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 54.653038][ T5261] syz.2.443: attempt to access beyond end of device [ 54.653038][ T5261] loop2: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 54.670120][ T5261] syz.2.443: attempt to access beyond end of device [ 54.670120][ T5261] loop2: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 54.684469][ T5261] syz.2.443: attempt to access beyond end of device [ 54.684469][ T5261] loop2: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 54.699813][ T5261] syz.2.443: attempt to access beyond end of device [ 54.699813][ T5261] loop2: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 54.720265][ T5261] syz.2.443: attempt to access beyond end of device [ 54.720265][ T5261] loop2: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 54.735791][ T5261] syz.2.443: attempt to access beyond end of device [ 54.735791][ T5261] loop2: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 54.749787][ T5261] syz.2.443: attempt to access beyond end of device [ 54.749787][ T5261] loop2: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 54.763665][ T5261] syz.2.443: attempt to access beyond end of device [ 54.763665][ T5261] loop2: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 54.800824][ T5274] 9p: Bad value for 'rfdno' [ 55.020862][ T5279] EXT4-fs error (device loop3): ext4_iget_extra_inode:5073: inode #15: comm syz.3.450: corrupted in-inode xattr: invalid ea_ino [ 55.049542][ T5279] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.450: couldn't read orphan inode 15 (err -117) [ 55.289590][ T5312] netlink: 'syz.3.460': attribute type 1 has an invalid length. [ 55.328365][ T29] kauditd_printk_skb: 25 callbacks suppressed [ 55.328394][ T29] audit: type=1326 audit(1769325299.197:1408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5309 comm="syz.5.459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f102419acb9 code=0x7ffc0000 [ 55.357949][ T29] audit: type=1326 audit(1769325299.197:1409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5309 comm="syz.5.459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f102419acb9 code=0x7ffc0000 [ 55.381459][ T29] audit: type=1326 audit(1769325299.247:1410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5309 comm="syz.5.459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f102419acb9 code=0x7ffc0000 [ 55.414266][ T29] audit: type=1326 audit(1769325299.287:1411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5309 comm="syz.5.459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f102419acb9 code=0x7ffc0000 [ 55.439769][ T29] audit: type=1326 audit(1769325299.287:1412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5309 comm="syz.5.459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f102419acb9 code=0x7ffc0000 [ 55.463316][ T29] audit: type=1326 audit(1769325299.307:1413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5309 comm="syz.5.459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f102419acb9 code=0x7ffc0000 [ 55.486732][ T29] audit: type=1326 audit(1769325299.307:1414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5309 comm="syz.5.459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f102419acb9 code=0x7ffc0000 [ 55.510088][ T29] audit: type=1326 audit(1769325299.307:1415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5309 comm="syz.5.459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7f102419acb9 code=0x7ffc0000 [ 55.533572][ T29] audit: type=1326 audit(1769325299.307:1416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5309 comm="syz.5.459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f102419acb9 code=0x7ffc0000 [ 55.556941][ T29] audit: type=1326 audit(1769325299.307:1417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5309 comm="syz.5.459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f102419acb9 code=0x7ffc0000 [ 55.620732][ T5319] netlink: 'syz.4.462': attribute type 10 has an invalid length. [ 55.628607][ T5319] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 55.638780][ T5319] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 55.651162][ T5319] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 55.660765][ T5319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.669775][ T5319] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.822289][ T5332] process 'syz.5.465' launched '/dev/fd/9' with NULL argv: empty string added [ 55.890436][ T5334] lo speed is unknown, defaulting to 1000 [ 56.022133][ T5334] geneve0 speed is unknown, defaulting to 1000 [ 56.082626][ T5349] set_capacity_and_notify: 11 callbacks suppressed [ 56.082660][ T5349] loop5: detected capacity change from 0 to 512 [ 56.177289][ T5358] sch_tbf: peakrate 1073741824 is lower than or equals to rate 3485361281995223550 ! [ 56.299662][ T5363] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 56.377862][ T5366] lo speed is unknown, defaulting to 1000 [ 56.430012][ T5376] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5376 comm=syz.5.480 [ 56.461656][ T5366] geneve0 speed is unknown, defaulting to 1000 [ 56.758371][ T5392] loop3: detected capacity change from 0 to 512 [ 56.771466][ T5391] loop5: detected capacity change from 0 to 512 [ 56.807183][ T5391] EXT4-fs: Ignoring removed nobh option [ 56.874261][ T5391] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 56.896469][ T5395] loop3: detected capacity change from 0 to 1024 [ 56.907453][ T5391] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.484: invalid indirect mapped block 256 (level 1) [ 56.926003][ T5395] EXT4-fs: Ignoring removed bh option [ 56.935295][ T5391] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.484: invalid indirect mapped block 2683928664 (level 1) [ 56.950513][ T5391] EXT4-fs (loop5): 1 truncate cleaned up [ 57.076299][ T5411] __nla_validate_parse: 5 callbacks suppressed [ 57.076313][ T5411] netlink: 28 bytes leftover after parsing attributes in process `syz.0.488'. [ 57.102823][ T5426] netlink: 4 bytes leftover after parsing attributes in process `syz.2.490'. [ 57.128973][ T5432] netlink: 'syz.0.491': attribute type 10 has an invalid length. [ 57.139261][ T5432] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 57.149425][ T5432] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 57.161911][ T5432] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 57.298244][ T5447] lo speed is unknown, defaulting to 1000 [ 57.350411][ T5449] netlink: 8 bytes leftover after parsing attributes in process `syz.2.493'. [ 57.370956][ T5447] geneve0 speed is unknown, defaulting to 1000 [ 57.445574][ T5460] loop3: detected capacity change from 0 to 512 [ 57.476121][ T5460] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 57.523701][ T5464] loop5: detected capacity change from 0 to 512 [ 57.530498][ T5460] ext4 filesystem being mounted at /110/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 57.653994][ T5487] loop5: detected capacity change from 0 to 512 [ 57.663498][ T5487] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 57.664581][ T5489] netlink: 'syz.2.499': attribute type 2 has an invalid length. [ 57.683459][ T5487] EXT4-fs (loop5): warning: maximal mount count reached, running e2fsck is recommended [ 57.710301][ T5489] netlink: 24 bytes leftover after parsing attributes in process `syz.2.499'. [ 57.729321][ T5487] EXT4-fs error (device loop5): ext4_orphan_get:1391: comm syz.5.501: inode #15: comm syz.5.501: iget: illegal inode # [ 57.773684][ T5487] EXT4-fs (loop5): Remounting filesystem read-only [ 57.847481][ T5500] 9p: Bad value for 'rfdno' [ 58.009425][ T5522] loop5: detected capacity change from 0 to 512 [ 58.195457][ T5540] netlink: 'syz.0.516': attribute type 10 has an invalid length. [ 58.203538][ T5540] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 58.213677][ T5540] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 58.226314][ T5540] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 58.365797][ T5558] can0: slcan on ptm0. [ 58.467390][ T5558] can0 (unregistered): slcan off ptm0. [ 58.559625][ T5586] netlink: 16 bytes leftover after parsing attributes in process `syz.5.522'. [ 58.609117][ T5593] block device autoloading is deprecated and will be removed. [ 58.612567][ T5595] loop5: detected capacity change from 0 to 512 [ 58.629220][ T5595] ext4: Unknown parameter 'smackfsroot' [ 58.655566][ T5595] loop5: detected capacity change from 0 to 128 [ 58.699881][ T5603] netlink: 4 bytes leftover after parsing attributes in process `syz.3.526'. [ 58.812156][ T5621] netlink: 12 bytes leftover after parsing attributes in process `syz.5.529'. [ 58.832399][ T5627] netlink: 12 bytes leftover after parsing attributes in process `syz.2.530'. [ 58.861258][ T5627] usb usb7: usbfs: process 5627 (syz.2.530) did not claim interface 0 before use [ 58.877847][ T5630] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 58.950620][ T3318] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000e1b1) [ 58.958539][ T3318] FAT-fs (loop4): Filesystem has been set read-only [ 59.011734][ T5649] netlink: 16 bytes leftover after parsing attributes in process `syz.2.534'. [ 59.105395][ T5666] netlink: 4 bytes leftover after parsing attributes in process `syz.3.539'. [ 59.147946][ T5672] EXT4-fs: Ignoring removed nobh option [ 59.173689][ T5672] EXT4-fs: quotafile must be on filesystem root [ 59.279731][ T5684] lo speed is unknown, defaulting to 1000 [ 59.315017][ T5688] tipc: Started in network mode [ 59.319959][ T5688] tipc: Node identity 7f000001, cluster identity 4711 [ 59.333371][ T5691] EXT4-fs: Ignoring removed bh option [ 59.357279][ T5691] netlink: 'syz.3.545': attribute type 10 has an invalid length. [ 59.376694][ T5688] tipc: Enabled bearer , priority 10 [ 59.384617][ T5684] geneve0 speed is unknown, defaulting to 1000 [ 59.391415][ T5691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.399927][ T5691] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.440411][ T5691] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4215: comm syz.3.545: Allocating blocks 497-513 which overlap fs metadata [ 59.457175][ T5691] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4215: comm syz.3.545: Allocating blocks 497-513 which overlap fs metadata [ 59.473298][ T5696] EXT4-fs (loop3): pa ffff888107dfd310: logic 48, phys. 177, len 21 [ 59.481378][ T5696] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 1 [ 59.665432][ T5706] vfat: Unknown parameter '01777777777777777777777ÿ' [ 60.086110][ T5734] 9p: Bad value for 'rfdno' [ 60.316315][ T5759] netlink: 'syz.3.559': attribute type 1 has an invalid length. [ 60.339460][ T5754] ext4 filesystem being mounted at /105/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 60.373536][ T36] tipc: Node number set to 2130706433 [ 60.418413][ T29] kauditd_printk_skb: 143 callbacks suppressed [ 60.418428][ T29] audit: type=1326 audit(1769325304.287:1561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5753 comm="syz.4.558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f41511eb58e code=0x7ffc0000 [ 60.459709][ T29] audit: type=1326 audit(1769325304.287:1562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5753 comm="syz.4.558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f4151229167 code=0x7ffc0000 [ 60.484103][ T29] audit: type=1326 audit(1769325304.287:1563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5753 comm="syz.4.558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f41511eb58e code=0x7ffc0000 [ 60.508353][ T29] audit: type=1326 audit(1769325304.287:1564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5753 comm="syz.4.558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f415122acb9 code=0x7ffc0000 [ 60.531792][ T29] audit: type=1326 audit(1769325304.287:1565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5753 comm="syz.4.558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f415122acb9 code=0x7ffc0000 [ 60.555201][ T29] audit: type=1326 audit(1769325304.287:1566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5753 comm="syz.4.558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f415122acb9 code=0x7ffc0000 [ 60.578500][ T29] audit: type=1326 audit(1769325304.287:1567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5753 comm="syz.4.558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f415122acb9 code=0x7ffc0000 [ 60.601817][ T29] audit: type=1326 audit(1769325304.287:1568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5753 comm="syz.4.558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f415122acb9 code=0x7ffc0000 [ 60.625199][ T29] audit: type=1326 audit(1769325304.317:1569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5753 comm="syz.4.558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f415122acb9 code=0x7ffc0000 [ 60.648563][ T29] audit: type=1326 audit(1769325304.317:1570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5753 comm="syz.4.558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f415122acb9 code=0x7ffc0000 [ 60.769960][ T5779] bridge0: entered promiscuous mode [ 60.783101][ T5783] 9p: Bad value for 'rfdno' [ 60.789674][ T5779] bridge0: port 3(macvtap1) entered blocking state [ 60.796695][ T5779] bridge0: port 3(macvtap1) entered disabled state [ 60.821827][ T5779] macvtap1: entered allmulticast mode [ 60.827396][ T5779] bridge0: entered allmulticast mode [ 60.835967][ T5779] macvtap1: left allmulticast mode [ 60.841172][ T5779] bridge0: left allmulticast mode [ 60.848535][ T5779] bridge0: left promiscuous mode [ 61.080350][ T5812] 9p: Bad value for 'rfdno' [ 61.110693][ T5770] hub 6-0:1.0: USB hub found [ 61.122524][ T5813] xt_hashlimit: size too large, truncated to 1048576 [ 61.133806][ T5770] hub 6-0:1.0: 8 ports detected [ 61.165463][ T5815] kernel profiling enabled (shift: 17) [ 61.231554][ T36] kernel read not supported for file 331/task/332/fd (pid: 36 comm: kworker/1:1) [ 61.667661][ T5826] set_capacity_and_notify: 9 callbacks suppressed [ 61.667680][ T5826] loop5: detected capacity change from 0 to 512 [ 61.753089][ T5826] EXT4-fs: inline encryption not supported [ 61.839643][ T5826] EXT4-fs error (device loop5): __ext4_find_entry:1626: inode #12: comm syz.5.577: checksumming directory block 0 [ 61.878795][ T5826] EXT4-fs error (device loop5): __ext4_find_entry:1626: inode #12: comm syz.5.577: checksumming directory block 0 [ 62.014601][ T5836] loop3: detected capacity change from 0 to 512 [ 62.076604][ T5836] ext4 filesystem being mounted at /131/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.255411][ T5836] x_tables: duplicate underflow at hook 1 [ 62.311166][ T5869] netlink: 'syz.0.586': attribute type 10 has an invalid length. [ 62.319196][ T5869] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 62.332425][ T5869] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 62.344958][ T5869] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 62.516268][ T5877] loop3: detected capacity change from 0 to 512 [ 62.579391][ T5877] ext4 filesystem being mounted at /133/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 62.611650][ T5890] 9p: Bad value for 'rfdno' [ 62.642258][ T5892] IPVS: set_ctl: invalid protocol: 137 10.1.1.0:20000 [ 62.660069][ T5877] __nla_validate_parse: 9 callbacks suppressed [ 62.660086][ T5877] netlink: 4 bytes leftover after parsing attributes in process `syz.3.589'. [ 62.717224][ T5877] EXT4-fs error (device loop3): ext4_lookup:1785: inode #12: comm syz.3.589: iget: bad i_size value: 2533274857506816 [ 62.844361][ T5905] netlink: 24 bytes leftover after parsing attributes in process `syz.4.597'. [ 62.929155][ T5915] 9p: Bad value for 'rfdno' [ 62.986349][ T5923] loop4: detected capacity change from 0 to 128 [ 63.011913][ T5923] lo speed is unknown, defaulting to 1000 [ 63.054373][ T5929] 9p: Bad value for 'rfdno' [ 63.064881][ T5927] 9p: Bad value for 'rfdno' [ 63.085411][ T5923] geneve0 speed is unknown, defaulting to 1000 [ 63.274983][ T5961] netlink: 'syz.5.615': attribute type 3 has an invalid length. [ 63.282652][ T5961] netlink: 124 bytes leftover after parsing attributes in process `syz.5.615'. [ 63.313600][ T5967] 9p: Bad value for 'rfdno' [ 63.366293][ T5970] 9p: Bad value for 'rfdno' [ 63.394254][ T5972] 9p: Bad value for 'rfdno' [ 63.483668][ T5976] pimreg: tun_chr_ioctl cmd 1074025677 [ 63.489593][ T5976] pimreg: linktype set to 6 [ 63.562798][ T5988] loop3: detected capacity change from 0 to 512 [ 63.615867][ T5994] netlink: 12 bytes leftover after parsing attributes in process `syz.2.627'. [ 63.632455][ T5996] 9p: Bad value for 'rfdno' [ 63.720443][ T6003] netlink: 'syz.2.631': attribute type 21 has an invalid length. [ 63.729823][ T6007] 9p: Bad value for 'rfdno' [ 64.011526][ T6023] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=6023 comm=syz.2.638 [ 64.095081][ T6026] netlink: 'syz.2.639': attribute type 10 has an invalid length. [ 64.108164][ T6028] 9p: Bad value for 'rfdno' [ 64.158373][ T6026] team0 (unregistering): Port device team_slave_1 removed [ 64.173151][ T6034] loop4: detected capacity change from 0 to 1024 [ 64.180116][ T6034] EXT4-fs: Ignoring removed orlov option [ 64.210900][ T6034] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (23577!=28264) [ 64.220538][ T6034] EXT4-fs (loop4): group descriptors corrupted! [ 64.508234][ T6056] loop3: detected capacity change from 0 to 1024 [ 64.523908][ T6056] EXT4-fs: Ignoring removed oldalloc option [ 64.532385][ T6056] EXT4-fs: inline encryption not supported [ 64.547304][ T6056] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 64.556144][ T6040] loop4: detected capacity change from 0 to 32768 [ 64.562966][ T6056] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 64.575658][ T6056] EXT4-fs error (device loop3): ext4_map_blocks:825: inode #3: block 1: comm syz.3.649: lblock 1 mapped to illegal pblock 1 (length 1) [ 64.589983][ T6056] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.649: Failed to acquire dquot type 0 [ 64.602631][ T6056] EXT4-fs error (device loop3): ext4_free_blocks:6728: comm syz.3.649: Freeing blocks not in datazone - block = 0, count = 4096 [ 64.623613][ T6056] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.649: Invalid inode bitmap blk 0 in block_group 0 [ 64.643000][ T6056] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem [ 64.643716][ T3307] loop4: p1 p3 < > [ 64.655512][ T5439] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:29: lblock 1 mapped to illegal pblock 1 (length 1) [ 64.655535][ T6056] EXT4-fs (loop3): 1 orphan inode deleted [ 64.738961][ T5439] EXT4-fs error (device loop3): ext4_release_dquot:7022: comm kworker/u8:29: Failed to release dquot type 0 [ 64.784874][ T6040] loop4: p1 p3 < > [ 64.825277][ T6067] 9p: Bad value for 'rfdno' [ 64.938006][ T6070] 9p: Bad value for 'rfdno' [ 65.174451][ T6085] netlink: 12 bytes leftover after parsing attributes in process `syz.4.658'. [ 65.185603][ T6085] geneve2: entered promiscuous mode [ 65.190811][ T6085] geneve2: entered allmulticast mode [ 65.483746][ T6122] netlink: 4 bytes leftover after parsing attributes in process `syz.5.669'. [ 65.546308][ T6126] netlink: 12 bytes leftover after parsing attributes in process `syz.2.672'. [ 65.575512][ T6126] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 65.698116][ T29] kauditd_printk_skb: 85 callbacks suppressed [ 65.698131][ T29] audit: type=1400 audit(1769325311.560:1653): avc: denied { write } for pid=6125 comm="syz.2.672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 65.921049][ T6068] Set syz1 is full, maxelem 65536 reached [ 65.925774][ T6117] team0 (unregistering): Port device team_slave_0 removed [ 66.044399][ T6117] team0 (unregistering): Port device team_slave_1 removed [ 66.137167][ T6150] netlink: 284 bytes leftover after parsing attributes in process `syz.0.678'. [ 66.452040][ T6148] loop4: detected capacity change from 0 to 512 [ 66.466327][ T29] audit: type=1326 audit(1769325312.330:1654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6177 comm="syz.0.681" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efd1525acb9 code=0x0 [ 66.498294][ T6148] EXT4-fs error (device loop4): ext4_iget_extra_inode:5073: inode #15: comm syz.4.677: corrupted in-inode xattr: invalid ea_ino [ 66.521299][ T6148] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.677: couldn't read orphan inode 15 (err -117) [ 66.570653][ T6184] netlink: 4 bytes leftover after parsing attributes in process `syz.0.681'. [ 66.586133][ T6148] EXT4-fs mount: 26 callbacks suppressed [ 66.586149][ T6148] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.666929][ T6187] netlink: 24 bytes leftover after parsing attributes in process `syz.5.685'. [ 66.679912][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.718219][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.755395][ T6193] loop4: detected capacity change from 0 to 512 [ 66.764445][ T29] audit: type=1400 audit(1769325312.630:1655): avc: denied { read } for pid=6192 comm="syz.4.688" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 66.787646][ T29] audit: type=1400 audit(1769325312.630:1656): avc: denied { open } for pid=6192 comm="syz.4.688" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 66.811620][ T29] audit: type=1400 audit(1769325312.630:1657): avc: denied { ioctl } for pid=6192 comm="syz.4.688" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 66.842630][ T6189] loop3: detected capacity change from 0 to 512 [ 66.852277][ T6180] syzkaller0: entered promiscuous mode [ 66.857859][ T6180] syzkaller0: entered allmulticast mode [ 66.887845][ T6189] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 66.903194][ T29] audit: type=1400 audit(1769325312.750:1658): avc: denied { getopt } for pid=6203 comm="syz.4.693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 66.947382][ T6189] EXT4-fs (loop3): orphan cleanup on readonly fs [ 66.990192][ T6189] EXT4-fs warning (device loop3): ext4_enable_quotas:7221: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 67.008314][ T6189] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 67.019799][ T6189] EXT4-fs error (device loop3): ext4_ext_check_inode:523: inode #13: comm syz.3.686: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 67.046696][ T6210] netlink: 'syz.4.693': attribute type 10 has an invalid length. [ 67.059231][ T6189] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.686: couldn't read orphan inode 13 (err -117) [ 67.076074][ T6189] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 67.141695][ T6210] team0: Port device geneve1 added [ 67.278445][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.434571][ T6228] 9p: Bad value for 'rfdno' [ 67.489757][ T6238] random: crng reseeded on system resumption [ 67.496817][ T29] audit: type=1400 audit(1769849601.356:1659): avc: denied { append } for pid=6232 comm="syz.5.702" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 67.520167][ T29] audit: type=1400 audit(1769849601.356:1660): avc: denied { open } for pid=6232 comm="syz.5.702" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 67.546711][ T6240] loop4: detected capacity change from 0 to 128 [ 67.574086][ T6240] EXT4-fs: Mount option(s) incompatible with ext2 [ 67.609090][ T29] audit: type=1400 audit(1769849601.476:1661): avc: denied { ioctl } for pid=6244 comm="syz.2.706" path="socket:[14598]" dev="sockfs" ino=14598 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 67.667907][ T6253] 9p: Bad value for 'rfdno' [ 67.689578][ T29] audit: type=1326 audit(1769849601.546:1662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6251 comm="syz.5.707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f102419acb9 code=0x7ffc0000 [ 67.870508][ T6266] lo speed is unknown, defaulting to 1000 [ 67.890560][ T6279] cgroup: Unknown subsys name '¬§@﬽æì¦4*oäÂÒ£hÓîºoþüíUÜ' [ 67.903536][ T10] lo speed is unknown, defaulting to 1000 [ 67.909303][ T10] syz1: Port: 1 Link DOWN [ 67.933730][ T3408] lo speed is unknown, defaulting to 1000 [ 68.038193][ T6266] geneve0 speed is unknown, defaulting to 1000 [ 68.063189][ T6278] lo speed is unknown, defaulting to 1000 [ 68.108164][ T6270] __nla_validate_parse: 2 callbacks suppressed [ 68.108180][ T6270] netlink: 28 bytes leftover after parsing attributes in process `syz.2.712'. [ 68.233854][ T6278] geneve0 speed is unknown, defaulting to 1000 [ 68.316700][ T6312] loop4: detected capacity change from 0 to 256 [ 68.455182][ T6330] netlink: 'syz.5.729': attribute type 1 has an invalid length. [ 68.468598][ T6330] bond1: entered promiscuous mode [ 68.473879][ T6330] 8021q: adding VLAN 0 to HW filter on device bond1 [ 68.488405][ T6330] 8021q: adding VLAN 0 to HW filter on device bond1 [ 68.495564][ T6330] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 68.506207][ T6330] bond1: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 68.519643][ T6330] bond1: (slave wireguard0): making interface the new active one [ 68.527501][ T6330] wireguard0: entered promiscuous mode [ 68.535018][ T6330] bond1: (slave wireguard0): Enslaving as an active interface with an up link [ 68.547227][ T6336] netlink: 'syz.5.729': attribute type 1 has an invalid length. [ 68.601258][ T6330] bond1: (slave wireguard1): The slave device specified does not support setting the MAC address [ 68.614225][ T6330] bond1: (slave wireguard1): Enslaving as a backup interface with an up link [ 68.834646][ T6351] netlink: 8 bytes leftover after parsing attributes in process `syz.5.734'. [ 68.875327][ T6351] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 68.882727][ T6351] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 69.152248][ T6304] loop3: detected capacity change from 0 to 8192 [ 69.157390][ T6380] netlink: 8 bytes leftover after parsing attributes in process `syz.2.741'. [ 69.167423][ T6380] netlink: 24 bytes leftover after parsing attributes in process `syz.2.741'. [ 69.176754][ T6380] netlink: 8 bytes leftover after parsing attributes in process `syz.2.741'. [ 69.185646][ T6380] netlink: 24 bytes leftover after parsing attributes in process `syz.2.741'. [ 69.257564][ T6386] x_tables: duplicate entry at hook 2 [ 69.305507][ T6400] 9p: Bad value for 'rfdno' [ 69.410615][ T6411] netlink: 16 bytes leftover after parsing attributes in process `syz.5.753'. [ 69.605540][ T6421] xt_CT: No such helper "pptp" [ 69.619152][ T6420] 9p: Bad value for 'rfdno' [ 69.782258][ T3314] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1) [ 69.790197][ T3314] FAT-fs (loop3): Filesystem has been set read-only [ 69.798911][ T6439] bridge_slave_0: left allmulticast mode [ 69.804684][ T6439] bridge_slave_0: left promiscuous mode [ 69.810391][ T6439] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.831760][ T6439] bridge_slave_1: left allmulticast mode [ 69.837467][ T6439] bridge_slave_1: left promiscuous mode [ 69.843196][ T6439] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.860496][ T6439] bond0: (slave bond_slave_0): Releasing backup interface [ 69.871506][ T6439] bond0: (slave bond_slave_1): Releasing backup interface [ 69.884647][ T6439] team0: Port device team_slave_0 removed [ 69.893624][ T6439] team0: Port device team_slave_1 removed [ 69.900897][ T6439] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 69.908425][ T6439] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 69.917225][ T6439] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 69.924723][ T6439] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 69.935230][ T6439] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 69.975385][ T6444] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 70.077618][ T3416] kernel read not supported for file bpf-prog (pid: 3416 comm: kworker/1:4) [ 70.104610][ T6470] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 70.115832][ T6475] netlink: 'syz.0.772': attribute type 1 has an invalid length. [ 70.123593][ T6475] netlink: 4 bytes leftover after parsing attributes in process `syz.0.772'. [ 70.147873][ T6477] netlink: 8 bytes leftover after parsing attributes in process `syz.3.773'. [ 70.186264][ T6475] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 70.204466][ T6477] netlink: 8 bytes leftover after parsing attributes in process `syz.3.773'. [ 70.319673][ T6492] ip6t_srh: unknown srh match flags 4000 [ 70.575335][ T6517] lo speed is unknown, defaulting to 1000 [ 70.655713][ T6517] geneve0 speed is unknown, defaulting to 1000 [ 70.737109][ T6528] lo speed is unknown, defaulting to 1000 [ 70.836186][ T6528] geneve0 speed is unknown, defaulting to 1000 [ 70.869655][ T6543] netlink: 'syz.4.795': attribute type 9 has an invalid length. [ 70.877329][ T6543] netlink: 'syz.4.795': attribute type 7 has an invalid length. [ 70.885097][ T6543] netlink: 'syz.4.795': attribute type 8 has an invalid length. [ 70.893114][ T29] kauditd_printk_skb: 438 callbacks suppressed [ 70.893128][ T29] audit: type=1400 audit(1769849604.631:2101): avc: denied { setattr } for pid=6544 comm="syz.3.796" name="" dev="pipefs" ino=15095 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 70.952378][ T29] audit: type=1326 audit(1769849604.696:2102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6546 comm="syz.3.797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb79e36acb9 code=0x7ffc0000 [ 71.001087][ T29] audit: type=1326 audit(1769849604.724:2103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6546 comm="syz.3.797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb79e36acb9 code=0x7ffc0000 [ 71.024554][ T29] audit: type=1326 audit(1769849604.724:2104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6546 comm="syz.3.797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb79e36acb9 code=0x7ffc0000 [ 71.047942][ T29] audit: type=1326 audit(1769849604.724:2105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6546 comm="syz.3.797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fb79e36acb9 code=0x7ffc0000 [ 71.071153][ T29] audit: type=1326 audit(1769849604.724:2106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6546 comm="syz.3.797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb79e36acb9 code=0x7ffc0000 [ 71.094808][ T29] audit: type=1326 audit(1769849604.724:2107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6546 comm="syz.3.797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb79e36acb9 code=0x7ffc0000 [ 71.118219][ T29] audit: type=1326 audit(1769849604.724:2108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6546 comm="syz.3.797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb79e36acb9 code=0x7ffc0000 [ 71.142292][ T29] audit: type=1326 audit(1769849604.724:2109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6546 comm="syz.3.797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb79e36acb9 code=0x7ffc0000 [ 71.165689][ T29] audit: type=1326 audit(1769849604.724:2110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6546 comm="syz.3.797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb79e36acb9 code=0x7ffc0000 [ 71.656152][ T6597] lo speed is unknown, defaulting to 1000 [ 71.707463][ T6597] geneve0 speed is unknown, defaulting to 1000 [ 71.891975][ T6601] loop3: detected capacity change from 0 to 256 [ 71.915959][ T6602] syzkaller0: entered allmulticast mode [ 72.047895][ T6601] FAT-fs (loop3): IO charset iso8859-5 not found [ 72.153724][ T6616] ip6erspan0: entered promiscuous mode [ 72.223619][ T6625] FAULT_INJECTION: forcing a failure. [ 72.223619][ T6625] name failslab, interval 1, probability 0, space 0, times 1 [ 72.236333][ T6625] CPU: 0 UID: 0 PID: 6625 Comm: syz.3.822 Not tainted syzkaller #0 PREEMPT(voluntary) [ 72.236451][ T6625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 72.236515][ T6625] Call Trace: [ 72.236523][ T6625] [ 72.236531][ T6625] __dump_stack+0x1d/0x30 [ 72.236572][ T6625] dump_stack_lvl+0x95/0xd0 [ 72.236622][ T6625] dump_stack+0x15/0x1b [ 72.236638][ T6625] should_fail_ex+0x263/0x280 [ 72.236657][ T6625] should_failslab+0x8c/0xb0 [ 72.236677][ T6625] kmem_cache_alloc_noprof+0x68/0x490 [ 72.236775][ T6625] ? getname_flags+0x7f/0x3b0 [ 72.236795][ T6625] getname_flags+0x7f/0x3b0 [ 72.236818][ T6625] user_path_at+0x28/0x130 [ 72.236910][ T6625] __se_sys_mount+0x25b/0x2e0 [ 72.236929][ T6625] ? fput+0x8f/0xc0 [ 72.236954][ T6625] __x64_sys_mount+0x67/0x80 [ 72.236972][ T6625] x64_sys_call+0x2cca/0x3000 [ 72.237049][ T6625] do_syscall_64+0xc0/0x2a0 [ 72.237073][ T6625] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.237094][ T6625] RIP: 0033:0x7fb79e36acb9 [ 72.237115][ T6625] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 72.237151][ T6625] RSP: 002b:00007fb79cdc7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 72.237172][ T6625] RAX: ffffffffffffffda RBX: 00007fb79e5e5fa0 RCX: 00007fb79e36acb9 [ 72.237186][ T6625] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 0000000000000000 [ 72.237249][ T6625] RBP: 00007fb79cdc7090 R08: 00002000000001c0 R09: 0000000000000000 [ 72.237261][ T6625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 72.237272][ T6625] R13: 00007fb79e5e6038 R14: 00007fb79e5e5fa0 R15: 00007ffdbf0c3c88 [ 72.237291][ T6625] [ 72.469134][ T6636] loop3: detected capacity change from 0 to 512 [ 72.487078][ T6636] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 72.542620][ T6636] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.598533][ T6636] ext4 filesystem being mounted at /180/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 72.671973][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.732671][ T6641] 9p: Bad value for 'wfdno' [ 72.789353][ T6643] loop3: detected capacity change from 0 to 256 [ 72.837011][ T6643] FAT-fs (loop3): IO charset iso8859-5 not found [ 73.012333][ T6646] loop3: detected capacity change from 0 to 164 [ 73.069353][ T6646] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 73.090326][ T6646] SELinux: policydb version 1303250570 does not match my version range 15-35 [ 73.099599][ T6646] SELinux: failed to load policy [ 73.120531][ T6648] loop4: detected capacity change from 0 to 512 [ 73.164046][ T6648] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.176652][ T6650] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6650 comm=syz.3.831 [ 73.188079][ T6648] ext4 filesystem being mounted at /152/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 73.202816][ T6650] netlink: 'syz.3.831': attribute type 1 has an invalid length. [ 73.214891][ T6648] EXT4-fs error (device loop4): ext4_lookup:1785: inode #12: comm syz.4.829: iget: bad i_size value: 2533274857506816 [ 73.279071][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.315570][ T6673] FAULT_INJECTION: forcing a failure. [ 73.315570][ T6673] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 73.328660][ T6673] CPU: 1 UID: 0 PID: 6673 Comm: syz.4.836 Not tainted syzkaller #0 PREEMPT(voluntary) [ 73.328760][ T6673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 73.328772][ T6673] Call Trace: [ 73.328779][ T6673] [ 73.328787][ T6673] __dump_stack+0x1d/0x30 [ 73.328850][ T6673] dump_stack_lvl+0x95/0xd0 [ 73.328871][ T6673] dump_stack+0x15/0x1b [ 73.328889][ T6673] should_fail_ex+0x263/0x280 [ 73.328908][ T6673] should_fail+0xb/0x20 [ 73.328922][ T6673] should_fail_usercopy+0x1a/0x20 [ 73.329004][ T6673] strncpy_from_user+0x27/0x250 [ 73.329084][ T6673] getname_flags+0xad/0x3b0 [ 73.329107][ T6673] user_path_at+0x28/0x130 [ 73.329135][ T6673] __se_sys_mount+0x25b/0x2e0 [ 73.329152][ T6673] ? fput+0x8f/0xc0 [ 73.329215][ T6673] __x64_sys_mount+0x67/0x80 [ 73.329312][ T6673] x64_sys_call+0x2cca/0x3000 [ 73.329387][ T6673] do_syscall_64+0xc0/0x2a0 [ 73.329422][ T6673] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.329442][ T6673] RIP: 0033:0x7f415122acb9 [ 73.329500][ T6673] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 73.329517][ T6673] RSP: 002b:00007f414fc87028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 73.329538][ T6673] RAX: ffffffffffffffda RBX: 00007f41514a5fa0 RCX: 00007f415122acb9 [ 73.329552][ T6673] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 0000000000000000 [ 73.329596][ T6673] RBP: 00007f414fc87090 R08: 00002000000001c0 R09: 0000000000000000 [ 73.329608][ T6673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 73.329618][ T6673] R13: 00007f41514a6038 R14: 00007f41514a5fa0 R15: 00007ffea6ab6148 [ 73.329704][ T6673] [ 73.567022][ T6687] loop4: detected capacity change from 0 to 4096 [ 73.589885][ T6698] loop3: detected capacity change from 0 to 128 [ 73.593212][ T6695] __nla_validate_parse: 10 callbacks suppressed [ 73.593227][ T6695] netlink: 80 bytes leftover after parsing attributes in process `syz.2.845'. [ 73.621004][ T6698] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 73.664962][ T6698] ext4 filesystem being mounted at /189/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 73.672977][ T6710] netlink: 24 bytes leftover after parsing attributes in process `syz.2.850'. [ 73.750314][ T6718] FAULT_INJECTION: forcing a failure. [ 73.750314][ T6718] name failslab, interval 1, probability 0, space 0, times 0 [ 73.762552][ T6698] lo speed is unknown, defaulting to 1000 [ 73.763034][ T6718] CPU: 1 UID: 0 PID: 6718 Comm: syz.2.852 Not tainted syzkaller #0 PREEMPT(voluntary) [ 73.763056][ T6718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 73.763067][ T6718] Call Trace: [ 73.763073][ T6718] [ 73.763079][ T6718] __dump_stack+0x1d/0x30 [ 73.763100][ T6718] dump_stack_lvl+0x95/0xd0 [ 73.763232][ T6718] dump_stack+0x15/0x1b [ 73.763251][ T6718] should_fail_ex+0x263/0x280 [ 73.763271][ T6718] should_failslab+0x8c/0xb0 [ 73.763292][ T6718] __kmalloc_cache_noprof+0x64/0x4a0 [ 73.763342][ T6718] ? alloc_fs_context+0x46/0x590 [ 73.763363][ T6718] alloc_fs_context+0x46/0x590 [ 73.763384][ T6718] fs_context_for_mount+0x22/0x30 [ 73.763430][ T6718] do_new_mount+0xea/0x700 [ 73.763448][ T6718] ? security_capable+0x7b/0x90 [ 73.763479][ T6718] path_mount+0x4c0/0xb90 [ 73.763510][ T6718] ? user_path_at+0xbf/0x130 [ 73.763537][ T6718] __se_sys_mount+0x28c/0x2e0 [ 73.763553][ T6718] ? fput+0x8f/0xc0 [ 73.763616][ T6718] __x64_sys_mount+0x67/0x80 [ 73.763635][ T6718] x64_sys_call+0x2cca/0x3000 [ 73.763658][ T6718] do_syscall_64+0xc0/0x2a0 [ 73.763734][ T6718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.763769][ T6718] RIP: 0033:0x7f8aaa28acb9 [ 73.763785][ T6718] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 73.763856][ T6718] RSP: 002b:00007f8aa8ce7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 73.763876][ T6718] RAX: ffffffffffffffda RBX: 00007f8aaa505fa0 RCX: 00007f8aaa28acb9 [ 73.763889][ T6718] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 0000000000000000 [ 73.763943][ T6718] RBP: 00007f8aa8ce7090 R08: 00002000000001c0 R09: 0000000000000000 [ 73.763956][ T6718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 73.763969][ T6718] R13: 00007f8aaa506038 R14: 00007f8aaa505fa0 R15: 00007ffcf8358e88 [ 73.763987][ T6718] [ 73.986004][ T6738] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 74.002709][ T6738] loop4: detected capacity change from 0 to 128 [ 74.034771][ T6698] geneve0 speed is unknown, defaulting to 1000 [ 74.082412][ T3314] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 74.106190][ T6743] netlink: 8 bytes leftover after parsing attributes in process `syz.3.859'. [ 74.653273][ T6747] netlink: 277 bytes leftover after parsing attributes in process `syz.5.860'. [ 74.848884][ T6762] sch_tbf: burst 22 is lower than device lo mtu (81) ! [ 74.883480][ T6762] sch_tbf: burst 22 is lower than device lo mtu (81) ! [ 75.062299][ T6802] netlink: 24 bytes leftover after parsing attributes in process `syz.3.875'. [ 75.106527][ T6809] 9p: Bad value for 'rfdno' [ 75.117009][ T6815] netlink: 'syz.2.880': attribute type 1 has an invalid length. [ 75.199326][ T6815] 8021q: adding VLAN 0 to HW filter on device bond2 [ 75.238556][ T6815] netlink: 8 bytes leftover after parsing attributes in process `syz.2.880'. [ 75.320959][ T6839] netlink: 'syz.0.885': attribute type 8 has an invalid length. [ 75.775810][ T6863] 8021q: VLANs not supported on ip6tnl0 [ 75.784074][ T6862] geneve3: entered promiscuous mode [ 75.822462][ T6867] netlink: 28 bytes leftover after parsing attributes in process `syz.0.893'. [ 76.237656][ T6875] loop3: detected capacity change from 0 to 512 [ 76.341666][ T6875] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 76.390388][ T6882] netlink: 27 bytes leftover after parsing attributes in process `syz.0.898'. [ 76.478677][ T6882] netlink: 'syz.0.898': attribute type 21 has an invalid length. [ 76.655722][ T6868] Set syz1 is full, maxelem 65536 reached [ 76.666835][ T6889] wireguard2: entered promiscuous mode [ 76.672446][ T6889] wireguard2: entered allmulticast mode [ 76.685394][ T6888] wireguard2: entered promiscuous mode [ 76.691005][ T6888] wireguard2: entered allmulticast mode [ 76.709137][ T6882] netlink: 132 bytes leftover after parsing attributes in process `syz.0.898'. [ 76.742528][ T6895] FAULT_INJECTION: forcing a failure. [ 76.742528][ T6895] name failslab, interval 1, probability 0, space 0, times 0 [ 76.755371][ T6895] CPU: 1 UID: 0 PID: 6895 Comm: syz.4.903 Not tainted syzkaller #0 PREEMPT(voluntary) [ 76.755396][ T6895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 76.755408][ T6895] Call Trace: [ 76.755413][ T6895] [ 76.755420][ T6895] __dump_stack+0x1d/0x30 [ 76.755442][ T6895] dump_stack_lvl+0x95/0xd0 [ 76.755537][ T6895] dump_stack+0x15/0x1b [ 76.755555][ T6895] should_fail_ex+0x263/0x280 [ 76.755574][ T6895] should_failslab+0x8c/0xb0 [ 76.755591][ T6895] __kmalloc_node_track_caller_noprof+0xb8/0x590 [ 76.755631][ T6895] ? vfs_parse_monolithic_sep+0x16a/0x270 [ 76.755653][ T6895] kmemdup_nul+0x36/0xc0 [ 76.755718][ T6895] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 76.755737][ T6895] vfs_parse_monolithic_sep+0x16a/0x270 [ 76.755835][ T6895] generic_parse_monolithic+0x24/0x30 [ 76.755853][ T6895] parse_monolithic_mount_data+0x46/0x60 [ 76.755873][ T6895] do_new_mount+0x251/0x700 [ 76.755944][ T6895] ? security_capable+0x7b/0x90 [ 76.755999][ T6895] path_mount+0x4c0/0xb90 [ 76.756017][ T6895] ? user_path_at+0xbf/0x130 [ 76.756103][ T6895] __se_sys_mount+0x28c/0x2e0 [ 76.756123][ T6895] ? fput+0x8f/0xc0 [ 76.756144][ T6895] __x64_sys_mount+0x67/0x80 [ 76.756214][ T6895] x64_sys_call+0x2cca/0x3000 [ 76.756233][ T6895] do_syscall_64+0xc0/0x2a0 [ 76.756256][ T6895] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.756303][ T6895] RIP: 0033:0x7f415122acb9 [ 76.756319][ T6895] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 76.756336][ T6895] RSP: 002b:00007f414fc87028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 76.756354][ T6895] RAX: ffffffffffffffda RBX: 00007f41514a5fa0 RCX: 00007f415122acb9 [ 76.756368][ T6895] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 0000000000000000 [ 76.756380][ T6895] RBP: 00007f414fc87090 R08: 00002000000001c0 R09: 0000000000000000 [ 76.756394][ T6895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 76.756405][ T6895] R13: 00007f41514a6038 R14: 00007f41514a5fa0 R15: 00007ffea6ab6148 [ 76.756423][ T6895] [ 77.057654][ T29] kauditd_printk_skb: 307 callbacks suppressed [ 77.057669][ T29] audit: type=1326 audit(1769849610.412:2418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6907 comm="syz.0.906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd1525acb9 code=0x7ffc0000 [ 77.128757][ T29] audit: type=1326 audit(1769849610.412:2419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6907 comm="syz.0.906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7efd1525acb9 code=0x7ffc0000 [ 77.152189][ T29] audit: type=1326 audit(1769849610.412:2420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6907 comm="syz.0.906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd1525acb9 code=0x7ffc0000 [ 77.175632][ T29] audit: type=1326 audit(1769849610.412:2421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6907 comm="syz.0.906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=204 compat=0 ip=0x7efd1525acb9 code=0x7ffc0000 [ 77.199049][ T29] audit: type=1326 audit(1769849610.412:2422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6907 comm="syz.0.906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd1525acb9 code=0x7ffc0000 [ 77.222578][ T29] audit: type=1326 audit(1769849610.412:2423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6907 comm="syz.0.906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7efd1525acb9 code=0x7ffc0000 [ 77.245812][ T29] audit: type=1326 audit(1769849610.412:2424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6907 comm="syz.0.906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd1525acb9 code=0x7ffc0000 [ 77.269364][ T29] audit: type=1326 audit(1769849610.412:2425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6907 comm="syz.0.906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7efd1525acb9 code=0x7ffc0000 [ 77.293588][ T29] audit: type=1326 audit(1769849610.412:2426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6907 comm="syz.0.906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd1525acb9 code=0x7ffc0000 [ 77.317457][ T29] audit: type=1326 audit(1769849610.412:2427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6907 comm="syz.0.906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7efd1525acb9 code=0x7ffc0000 [ 77.322033][ T6916] netlink: 8 bytes leftover after parsing attributes in process `syz.5.908'. [ 77.415733][ T6920] loop4: detected capacity change from 0 to 1024 [ 77.432678][ T6920] EXT4-fs: Ignoring removed bh option [ 77.476173][ T6920] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.489209][ T6920] EXT4-fs (loop4): shut down requested (0) [ 77.525347][ T6939] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=30206 sclass=netlink_route_socket pid=6939 comm=syz.5.916 [ 77.622983][ T6942] netlink: 'syz.5.917': attribute type 21 has an invalid length. [ 77.691852][ T6959] lo speed is unknown, defaulting to 1000 [ 77.730797][ T6959] geneve0 speed is unknown, defaulting to 1000 [ 77.793848][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.874426][ T6992] loop4: detected capacity change from 0 to 512 [ 77.900315][ T6992] ext4: Unknown parameter 'ext3' [ 78.124278][ T7019] netlink: 'syz.4.940': attribute type 6 has an invalid length. [ 78.132020][ T7019] netlink: 'syz.4.940': attribute type 5 has an invalid length. [ 78.318260][ T7036] lo speed is unknown, defaulting to 1000 [ 78.348368][ T7036] geneve0 speed is unknown, defaulting to 1000 [ 78.728410][ T7057] lo speed is unknown, defaulting to 1000 [ 78.761772][ T7057] geneve0 speed is unknown, defaulting to 1000 [ 78.789091][ T7060] lo speed is unknown, defaulting to 1000 [ 78.819264][ T7060] geneve0 speed is unknown, defaulting to 1000 [ 78.957291][ T7065] loop4: detected capacity change from 0 to 128 [ 78.998363][ T7065] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 79.010804][ T7065] ext4 filesystem being mounted at /172/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 79.022701][ T7065] EXT4-fs warning (device loop4): verify_group_input:137: Cannot add at group 3 (only 1 groups) [ 79.079669][ T3318] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 79.251610][ T7097] __nla_validate_parse: 17 callbacks suppressed [ 79.251624][ T7097] netlink: 40 bytes leftover after parsing attributes in process `syz.4.964'. [ 79.274926][ T7100] netlink: 40 bytes leftover after parsing attributes in process `syz.4.964'. [ 79.288459][ T7103] netlink: 'syz.5.966': attribute type 4 has an invalid length. [ 79.296200][ T7103] netlink: 152 bytes leftover after parsing attributes in process `syz.5.966'. [ 79.311423][ T7103] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 79.366911][ T7111] netlink: 8 bytes leftover after parsing attributes in process `syz.0.968'. [ 79.375738][ T7111] netlink: 8 bytes leftover after parsing attributes in process `syz.0.968'. [ 79.421077][ T7115] netlink: 'syz.5.970': attribute type 1 has an invalid length. [ 79.559651][ T7134] loop4: detected capacity change from 0 to 1024 [ 79.570380][ T7134] EXT4-fs: Ignoring removed bh option [ 79.585225][ T7140] netlink: 8 bytes leftover after parsing attributes in process `syz.5.975'. [ 79.585294][ T7134] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.647167][ T7144] lo speed is unknown, defaulting to 1000 [ 79.714453][ T7144] geneve0 speed is unknown, defaulting to 1000 [ 79.723971][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.764963][ T7154] lo speed is unknown, defaulting to 1000 [ 79.794122][ T7159] netlink: 8 bytes leftover after parsing attributes in process `syz.3.982'. [ 79.802973][ T7159] netlink: 8 bytes leftover after parsing attributes in process `syz.3.982'. [ 79.833073][ T7163] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7163 comm=syz.4.983 [ 79.849712][ T7163] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1018 sclass=netlink_route_socket pid=7163 comm=syz.4.983 [ 79.859746][ T7154] geneve0 speed is unknown, defaulting to 1000 [ 79.867465][ T7163] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1012 sclass=netlink_route_socket pid=7163 comm=syz.4.983 [ 79.997659][ T7183] netlink: 4 bytes leftover after parsing attributes in process `syz.4.991'. [ 80.040480][ T7186] netlink: 8 bytes leftover after parsing attributes in process `syz.4.992'. [ 80.257846][ T7195] loop3: detected capacity change from 0 to 512 [ 80.303794][ T7195] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.995: bg 0: block 248: padding at end of block bitmap is not set [ 80.328724][ T7195] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.995: Failed to acquire dquot type 1 [ 80.449664][ T7195] EXT4-fs (loop3): 1 truncate cleaned up [ 80.457028][ T7195] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.530277][ T7195] ext4 filesystem being mounted at /205/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.551979][ T7210] program syz.2.1001 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 80.583112][ T7195] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 80.599241][ T7212] loop4: detected capacity change from 0 to 512 [ 80.627694][ T7212] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.687840][ T7212] ext4 filesystem being mounted at /188/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 80.724290][ T7223] xt_cgroup: invalid path, errno=-2 [ 80.731083][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.745506][ T5440] EXT4-fs error (device loop3): ext4_release_dquot:7022: comm kworker/u8:30: Failed to release dquot type 1 [ 80.778326][ T7212] EXT4-fs error (device loop4): ext4_lookup:1785: inode #12: comm syz.4.1002: iget: bad i_size value: 2533274857506816 [ 80.811708][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.246948][ T7260] loop4: detected capacity change from 0 to 1024 [ 81.294982][ T7260] EXT4-fs: Ignoring removed nobh option [ 81.300667][ T7260] EXT4-fs: inline encryption not supported [ 81.368425][ T7260] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.421326][ T7260] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.447335][ T7260] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.655955][ T7292] ip6gretap0: entered promiscuous mode [ 81.661571][ T7292] macsec1: entered promiscuous mode [ 81.668557][ T7292] ip6gretap0: left promiscuous mode [ 81.988053][ T7310] loop3: detected capacity change from 0 to 128 [ 81.998753][ T7310] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 82.029600][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.040340][ T7310] ext4 filesystem being mounted at /212/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 82.089976][ T7313] loop4: detected capacity change from 0 to 1024 [ 82.096810][ T7313] SELinux: security_context_str_to_sid () failed with errno=-22 [ 82.126598][ T3314] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 82.191156][ T7329] loop4: detected capacity change from 0 to 1024 [ 82.198171][ T7329] EXT4-fs: Ignoring removed nomblk_io_submit option [ 82.207202][ T7329] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a041c01c, mo2=0002] [ 82.215511][ T7329] System zones: 0-1, 3-36 [ 82.229119][ T7329] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.335538][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.489781][ T7346] loop3: detected capacity change from 0 to 128 [ 82.531117][ T29] kauditd_printk_skb: 179 callbacks suppressed [ 82.531131][ T29] audit: type=1400 audit(1769849615.530:2604): avc: denied { getopt } for pid=7347 comm="syz.2.1047" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 82.592572][ T7353] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.659339][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.742629][ T7370] bond1: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 82.766580][ T7370] bond1 (unregistering): Released all slaves [ 82.968755][ T7392] IPVS: set_ctl: invalid protocol: 33 172.20.20.62:20003 [ 82.969188][ T29] audit: type=1400 audit(1769849615.941:2605): avc: denied { getopt } for pid=7390 comm="syz.0.1060" lport=42157 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 83.303770][ T5440] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.315254][ T5440] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.340855][ T5440] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.369257][ T7432] 9p: Bad value for 'rfdno' [ 83.371512][ T5440] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.422291][ T7437] xt_hashlimit: size too large, truncated to 1048576 [ 83.445654][ T7449] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 83.493774][ T7443] cgroup: fork rejected by pids controller in /syz2 [ 83.549859][ T7459] lo speed is unknown, defaulting to 1000 [ 83.587272][ T7459] geneve0 speed is unknown, defaulting to 1000 [ 83.633217][ T7489] netlink: 'syz.5.1082': attribute type 1 has an invalid length. [ 83.665212][ T7489] 8021q: adding VLAN 0 to HW filter on device bond3 [ 83.692708][ T7489] ip6erspan0: entered promiscuous mode [ 83.708542][ T7494] set_capacity_and_notify: 4 callbacks suppressed [ 83.708556][ T7494] loop4: detected capacity change from 0 to 512 [ 83.731870][ T7494] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 83.758245][ T29] audit: type=1400 audit(1769849616.671:2606): avc: denied { write } for pid=7495 comm="syz.3.1084" path="socket:[18152]" dev="sockfs" ino=18152 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 83.774425][ T7494] EXT4-fs (loop4): orphan cleanup on readonly fs [ 83.782030][ T29] audit: type=1326 audit(1769849616.671:2607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7495 comm="syz.3.1084" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb79e36acb9 code=0x0 [ 83.788619][ T7494] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.1083: iget: bad i_size value: 360287970189639680 [ 83.825117][ T7494] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.1083: couldn't read orphan inode 15 (err -117) [ 83.839251][ T7494] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 83.877754][ T29] audit: type=1400 audit(1769849616.783:2608): avc: denied { bind } for pid=7495 comm="syz.3.1084" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 83.902875][ T29] audit: type=1400 audit(1769849616.793:2609): avc: denied { create } for pid=7506 comm="syz.0.1087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 83.922899][ T29] audit: type=1400 audit(1769849616.793:2610): avc: denied { sys_admin } for pid=7506 comm="syz.0.1087" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 83.943909][ T29] audit: type=1400 audit(1769849616.802:2611): avc: denied { remount } for pid=7506 comm="syz.0.1087" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 83.963864][ T29] audit: type=1400 audit(1769849616.802:2612): avc: denied { associate } for pid=7509 comm="syz.0.1087" name="core" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 83.998570][ T7513] netlink: 'syz.0.1088': attribute type 1 has an invalid length. [ 84.006812][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.037592][ T7516] FAULT_INJECTION: forcing a failure. [ 84.037592][ T7516] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 84.050694][ T7516] CPU: 1 UID: 0 PID: 7516 Comm: syz.4.1089 Not tainted syzkaller #0 PREEMPT(voluntary) [ 84.050765][ T7516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 84.050841][ T7516] Call Trace: [ 84.050849][ T7516] [ 84.050858][ T7516] __dump_stack+0x1d/0x30 [ 84.050879][ T7516] dump_stack_lvl+0x95/0xd0 [ 84.050956][ T7516] dump_stack+0x15/0x1b [ 84.050975][ T7516] should_fail_ex+0x263/0x280 [ 84.050996][ T7516] should_fail+0xb/0x20 [ 84.051090][ T7516] should_fail_usercopy+0x1a/0x20 [ 84.051110][ T7516] _copy_from_user+0x1c/0xb0 [ 84.051131][ T7516] memdup_user+0x5e/0xd0 [ 84.051156][ T7516] strndup_user+0x68/0xb0 [ 84.051188][ T7516] __se_sys_mount+0x4d/0x2e0 [ 84.051208][ T7516] ? fput+0x8f/0xc0 [ 84.051290][ T7516] ? ksys_write+0x194/0x1a0 [ 84.051309][ T7516] __x64_sys_mount+0x67/0x80 [ 84.051329][ T7516] x64_sys_call+0x2cca/0x3000 [ 84.051352][ T7516] do_syscall_64+0xc0/0x2a0 [ 84.051390][ T7516] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.051412][ T7516] RIP: 0033:0x7f415122acb9 [ 84.051429][ T7516] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 84.051450][ T7516] RSP: 002b:00007f414fc87028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 84.051470][ T7516] RAX: ffffffffffffffda RBX: 00007f41514a5fa0 RCX: 00007f415122acb9 [ 84.051553][ T7516] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 0000000000000000 [ 84.051564][ T7516] RBP: 00007f414fc87090 R08: 00002000000001c0 R09: 0000000000000000 [ 84.051576][ T7516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 84.051647][ T7516] R13: 00007f41514a6038 R14: 00007f41514a5fa0 R15: 00007ffea6ab6148 [ 84.051664][ T7516] [ 84.057010][ T7513] 8021q: adding VLAN 0 to HW filter on device bond1 [ 84.299347][ T7523] loop4: detected capacity change from 0 to 128 [ 84.319831][ T7517] 8021q: adding VLAN 0 to HW filter on device bond1 [ 84.331660][ T7523] vfat: Unknown parameter '00000000000000000003' [ 84.332463][ T29] audit: type=1400 audit(1769849617.214:2613): avc: denied { map } for pid=7524 comm="syz.2.1093" path="/dev/input/event2" dev="devtmpfs" ino=249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 84.365691][ T7517] bond1: (slave geneve4): making interface the new active one [ 84.376317][ T7517] bond1: (slave geneve4): Enslaving as an active interface with an up link [ 84.385075][ T5436] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 84.397484][ T5436] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 84.415334][ T5436] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 84.441671][ T5436] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 84.469659][ T7532] loop4: detected capacity change from 0 to 512 [ 84.640826][ T7548] loop3: detected capacity change from 0 to 1024 [ 84.715489][ T7548] __nla_validate_parse: 30 callbacks suppressed [ 84.715507][ T7548] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1102'. [ 84.717585][ T7557] loop4: detected capacity change from 0 to 1024 [ 84.766528][ T7557] EXT4-fs: Ignoring removed bh option [ 84.818626][ T7557] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.831883][ T7583] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 84.885129][ T7567] 9p: Bad value for 'rfdno' [ 84.916137][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.938141][ T7592] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1112'. [ 84.970706][ T7597] loop4: detected capacity change from 0 to 512 [ 84.990818][ T7598] FAULT_INJECTION: forcing a failure. [ 84.990818][ T7598] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 85.003927][ T7598] CPU: 1 UID: 0 PID: 7598 Comm: syz.5.1116 Not tainted syzkaller #0 PREEMPT(voluntary) [ 85.003993][ T7598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 85.004005][ T7598] Call Trace: [ 85.004013][ T7598] [ 85.004021][ T7598] __dump_stack+0x1d/0x30 [ 85.004045][ T7598] dump_stack_lvl+0x95/0xd0 [ 85.004086][ T7598] dump_stack+0x15/0x1b [ 85.004120][ T7598] should_fail_ex+0x263/0x280 [ 85.004139][ T7598] should_fail+0xb/0x20 [ 85.004156][ T7598] should_fail_usercopy+0x1a/0x20 [ 85.004182][ T7598] _copy_from_user+0x1c/0xb0 [ 85.004208][ T7598] ___sys_sendmsg+0xc1/0x1e0 [ 85.004258][ T7598] __x64_sys_sendmsg+0xd4/0x160 [ 85.004318][ T7598] x64_sys_call+0x17ba/0x3000 [ 85.004341][ T7598] do_syscall_64+0xc0/0x2a0 [ 85.004367][ T7598] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.004389][ T7598] RIP: 0033:0x7f102419acb9 [ 85.004447][ T7598] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 85.004462][ T7598] RSP: 002b:00007f1022bf7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 85.004480][ T7598] RAX: ffffffffffffffda RBX: 00007f1024415fa0 RCX: 00007f102419acb9 [ 85.004498][ T7598] RDX: 0000000000000800 RSI: 0000200000000000 RDI: 0000000000000004 [ 85.004577][ T7598] RBP: 00007f1022bf7090 R08: 0000000000000000 R09: 0000000000000000 [ 85.004591][ T7598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 85.004649][ T7598] R13: 00007f1024416038 R14: 00007f1024415fa0 R15: 00007ffcb1542978 [ 85.004667][ T7598] [ 85.192221][ T7597] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.208624][ T7597] ext4 filesystem being mounted at /221/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 85.239795][ T7597] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1113'. [ 85.249556][ T7597] EXT4-fs error (device loop4): ext4_lookup:1785: inode #12: comm syz.4.1113: iget: bad i_size value: 2533274857506816 [ 85.266821][ T7611] SELinux: failed to load policy [ 85.274758][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.360713][ T7620] tipc: Can't bind to reserved service type 0 [ 85.374636][ T7622] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1126'. [ 85.399747][ T7622] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1126'. [ 85.558158][ T7641] netlink: 168 bytes leftover after parsing attributes in process `syz.5.1132'. [ 85.569975][ T7641] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1132'. [ 85.579126][ T7641] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1132'. [ 85.746452][ T7652] 9p: Bad value for 'rfdno' [ 85.834841][ T7667] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1143'. [ 85.846442][ T7668] loop3: detected capacity change from 0 to 512 [ 85.872352][ T7677] netlink: 'syz.4.1145': attribute type 3 has an invalid length. [ 85.880239][ T7677] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1145'. [ 85.893365][ T7668] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 85.925116][ T7668] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.944639][ T7668] ext4 filesystem being mounted at /232/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 85.958099][ T7682] loop4: detected capacity change from 0 to 128 [ 85.996390][ T7689] 9p: Bad value for 'rfdno' [ 86.165743][ T7714] FAULT_INJECTION: forcing a failure. [ 86.165743][ T7714] name failslab, interval 1, probability 0, space 0, times 0 [ 86.178515][ T7714] CPU: 0 UID: 0 PID: 7714 Comm: syz.4.1156 Not tainted syzkaller #0 PREEMPT(voluntary) [ 86.178541][ T7714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 86.178551][ T7714] Call Trace: [ 86.178558][ T7714] [ 86.178567][ T7714] __dump_stack+0x1d/0x30 [ 86.178649][ T7714] dump_stack_lvl+0x95/0xd0 [ 86.178782][ T7714] dump_stack+0x15/0x1b [ 86.178799][ T7714] should_fail_ex+0x263/0x280 [ 86.178817][ T7714] should_failslab+0x8c/0xb0 [ 86.178835][ T7714] kmem_cache_alloc_noprof+0x68/0x490 [ 86.178926][ T7714] ? getname_flags+0x7f/0x3b0 [ 86.178948][ T7714] getname_flags+0x7f/0x3b0 [ 86.178967][ T7714] user_path_at+0x28/0x130 [ 86.179041][ T7714] __se_sys_mount+0x25b/0x2e0 [ 86.179059][ T7714] ? fput+0x8f/0xc0 [ 86.179083][ T7714] __x64_sys_mount+0x67/0x80 [ 86.179099][ T7714] x64_sys_call+0x2cca/0x3000 [ 86.179150][ T7714] do_syscall_64+0xc0/0x2a0 [ 86.179219][ T7714] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.179237][ T7714] RIP: 0033:0x7f415122acb9 [ 86.179251][ T7714] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 86.179276][ T7714] RSP: 002b:00007f414fc87028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 86.179296][ T7714] RAX: ffffffffffffffda RBX: 00007f41514a5fa0 RCX: 00007f415122acb9 [ 86.179309][ T7714] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 0000000000000000 [ 86.179322][ T7714] RBP: 00007f414fc87090 R08: 00002000000001c0 R09: 0000000000000000 [ 86.179333][ T7714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 86.179355][ T7714] R13: 00007f41514a6038 R14: 00007f41514a5fa0 R15: 00007ffea6ab6148 [ 86.179447][ T7714] [ 86.461876][ T7727] lo speed is unknown, defaulting to 1000 [ 86.500383][ T7727] geneve0 speed is unknown, defaulting to 1000 [ 86.553237][ T7734] loop4: detected capacity change from 0 to 1024 [ 86.564281][ T7734] EXT4-fs: Ignoring removed bh option [ 86.585413][ T7734] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.609971][ T7734] netlink: 'syz.4.1163': attribute type 10 has an invalid length. [ 86.617889][ T7734] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 86.628246][ T7734] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 86.641104][ T7734] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 86.695507][ T7734] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4215: comm syz.4.1163: Allocating blocks 497-513 which overlap fs metadata [ 86.719638][ T7751] EXT4-fs (loop4): pa ffff888107e218c0: logic 48, phys. 177, len 21 [ 86.727801][ T7751] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 1 [ 86.773293][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.773485][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.848160][ T7766] loop4: detected capacity change from 0 to 1024 [ 86.887664][ T7766] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 86.916259][ T7766] EXT4-fs (loop4): can't mount with commit=, fs mounted w/o journal [ 87.086564][ T7790] EXT4-fs: Ignoring removed bh option [ 87.093263][ T7797] FAULT_INJECTION: forcing a failure. [ 87.093263][ T7797] name failslab, interval 1, probability 0, space 0, times 0 [ 87.105952][ T7797] CPU: 0 UID: 0 PID: 7797 Comm: syz.4.1183 Not tainted syzkaller #0 PREEMPT(voluntary) [ 87.105978][ T7797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 87.105989][ T7797] Call Trace: [ 87.105996][ T7797] [ 87.106004][ T7797] __dump_stack+0x1d/0x30 [ 87.106038][ T7797] dump_stack_lvl+0x95/0xd0 [ 87.106134][ T7797] dump_stack+0x15/0x1b [ 87.106155][ T7797] should_fail_ex+0x263/0x280 [ 87.106176][ T7797] should_failslab+0x8c/0xb0 [ 87.106216][ T7797] __kmalloc_noprof+0xb8/0x580 [ 87.106286][ T7797] ? genl_family_rcv_msg_attrs_parse+0x75/0x190 [ 87.106321][ T7797] genl_family_rcv_msg_attrs_parse+0x75/0x190 [ 87.106365][ T7797] genl_family_rcv_msg_doit+0x4b/0x1f0 [ 87.106393][ T7797] ? selinux_capable+0x31/0x40 [ 87.106442][ T7797] ? security_capable+0x7b/0x90 [ 87.106548][ T7797] ? ns_capable+0x7c/0xb0 [ 87.106600][ T7797] genl_rcv_msg+0x432/0x470 [ 87.106706][ T7797] ? __pfx_netlbl_cipsov4_add+0x10/0x10 [ 87.106782][ T7797] netlink_rcv_skb+0x123/0x220 [ 87.106806][ T7797] ? __pfx_genl_rcv_msg+0x10/0x10 [ 87.106837][ T7797] genl_rcv+0x28/0x40 [ 87.106895][ T7797] netlink_unicast+0x5c0/0x690 [ 87.106936][ T7797] netlink_sendmsg+0x5c8/0x6f0 [ 87.107032][ T7797] ? __pfx_netlink_sendmsg+0x10/0x10 [ 87.107056][ T7797] __sock_sendmsg+0x145/0x170 [ 87.107080][ T7797] ____sys_sendmsg+0x31e/0x4a0 [ 87.107101][ T7797] ___sys_sendmsg+0x195/0x1e0 [ 87.107210][ T7797] __x64_sys_sendmsg+0xd4/0x160 [ 87.107296][ T7797] x64_sys_call+0x17ba/0x3000 [ 87.107399][ T7797] do_syscall_64+0xc0/0x2a0 [ 87.107428][ T7797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.107455][ T7797] RIP: 0033:0x7f415122acb9 [ 87.107472][ T7797] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.107491][ T7797] RSP: 002b:00007f414fc87028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 87.107513][ T7797] RAX: ffffffffffffffda RBX: 00007f41514a5fa0 RCX: 00007f415122acb9 [ 87.107528][ T7797] RDX: 0000000000000800 RSI: 0000200000000000 RDI: 0000000000000004 [ 87.107541][ T7797] RBP: 00007f414fc87090 R08: 0000000000000000 R09: 0000000000000000 [ 87.107572][ T7797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 87.107585][ T7797] R13: 00007f41514a6038 R14: 00007f41514a5fa0 R15: 00007ffea6ab6148 [ 87.107604][ T7797] [ 87.375471][ T7790] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.405997][ T7805] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 87.412613][ T7805] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 87.420238][ T7805] vhci_hcd vhci_hcd.0: Device attached [ 87.427869][ T7790] netlink: 'syz.3.1182': attribute type 10 has an invalid length. [ 87.469397][ T7790] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4215: comm syz.3.1182: Allocating blocks 497-513 which overlap fs metadata [ 87.485969][ T7790] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4215: comm syz.3.1182: Allocating blocks 497-513 which overlap fs metadata [ 87.491657][ T7806] vhci_hcd: connection closed [ 87.509177][ T7790] EXT4-fs (loop3): pa ffff888107e21a10: logic 48, phys. 177, len 21 [ 87.521912][ T7790] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 1 [ 87.527413][ T5440] vhci_hcd vhci_hcd.4: stop threads [ 87.537162][ T5440] vhci_hcd vhci_hcd.4: release socket [ 87.542534][ T5440] vhci_hcd vhci_hcd.4: disconnect device [ 87.563445][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.619254][ T7813] netlink: 'syz.3.1189': attribute type 32 has an invalid length. [ 87.632721][ T7815] netlink: 'syz.2.1191': attribute type 1 has an invalid length. [ 87.636603][ T7813] bond4: Setting coupled_control to off (0) [ 87.697341][ T7815] 8021q: adding VLAN 0 to HW filter on device bond3 [ 87.733367][ T7815] 8021q: adding VLAN 0 to HW filter on device bond3 [ 87.743650][ T7815] bond3: (slave geneve3): making interface the new active one [ 87.832624][ T7815] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 87.853778][ T5435] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 87.875123][ T5435] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 87.896142][ T5435] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 87.905017][ T5435] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 87.948676][ T7837] FAULT_INJECTION: forcing a failure. [ 87.948676][ T7837] name failslab, interval 1, probability 0, space 0, times 0 [ 87.961512][ T7837] CPU: 0 UID: 0 PID: 7837 Comm: syz.5.1196 Not tainted syzkaller #0 PREEMPT(voluntary) [ 87.961538][ T7837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 87.961549][ T7837] Call Trace: [ 87.961555][ T7837] [ 87.961563][ T7837] __dump_stack+0x1d/0x30 [ 87.961642][ T7837] dump_stack_lvl+0x95/0xd0 [ 87.961676][ T7837] dump_stack+0x15/0x1b [ 87.961693][ T7837] should_fail_ex+0x263/0x280 [ 87.961731][ T7837] should_failslab+0x8c/0xb0 [ 87.961754][ T7837] __kmalloc_cache_noprof+0x64/0x4a0 [ 87.961835][ T7837] ? netlbl_cipsov4_add+0x369/0x12a0 [ 87.961858][ T7837] netlbl_cipsov4_add+0x369/0x12a0 [ 87.961878][ T7837] ? genl_family_rcv_msg_attrs_parse+0x13b/0x190 [ 87.961974][ T7837] ? genl_family_rcv_msg_attrs_parse+0x184/0x190 [ 87.962009][ T7837] genl_family_rcv_msg_doit+0x187/0x1f0 [ 87.962041][ T7837] genl_rcv_msg+0x432/0x470 [ 87.962076][ T7837] ? __pfx_netlbl_cipsov4_add+0x10/0x10 [ 87.962093][ T7837] netlink_rcv_skb+0x123/0x220 [ 87.962112][ T7837] ? __pfx_genl_rcv_msg+0x10/0x10 [ 87.962223][ T7837] genl_rcv+0x28/0x40 [ 87.962257][ T7837] netlink_unicast+0x5c0/0x690 [ 87.962282][ T7837] netlink_sendmsg+0x5c8/0x6f0 [ 87.962323][ T7837] ? __pfx_netlink_sendmsg+0x10/0x10 [ 87.962350][ T7837] __sock_sendmsg+0x145/0x170 [ 87.962375][ T7837] ____sys_sendmsg+0x31e/0x4a0 [ 87.962452][ T7837] ___sys_sendmsg+0x195/0x1e0 [ 87.962488][ T7837] __x64_sys_sendmsg+0xd4/0x160 [ 87.962575][ T7837] x64_sys_call+0x17ba/0x3000 [ 87.962599][ T7837] do_syscall_64+0xc0/0x2a0 [ 87.962645][ T7837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.962663][ T7837] RIP: 0033:0x7f102419acb9 [ 87.962679][ T7837] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.962698][ T7837] RSP: 002b:00007f1022bf7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 87.962828][ T7837] RAX: ffffffffffffffda RBX: 00007f1024415fa0 RCX: 00007f102419acb9 [ 87.962844][ T7837] RDX: 0000000000000800 RSI: 0000200000000000 RDI: 0000000000000004 [ 87.962857][ T7837] RBP: 00007f1022bf7090 R08: 0000000000000000 R09: 0000000000000000 [ 87.962871][ T7837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 87.962888][ T7837] R13: 00007f1024416038 R14: 00007f1024415fa0 R15: 00007ffcb1542978 [ 87.962906][ T7837] [ 88.006583][ T7839] lo speed is unknown, defaulting to 1000 [ 88.203989][ T7842] netlink: 'syz.5.1198': attribute type 10 has an invalid length. [ 88.217431][ T7842] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 88.228492][ T7842] bond0: (slave hsr0): Error -95 calling set_mac_address [ 88.493251][ T7839] geneve0 speed is unknown, defaulting to 1000 [ 88.623683][ T7859] netlink: 'syz.5.1204': attribute type 1 has an invalid length. [ 88.693144][ T7859] 8021q: adding VLAN 0 to HW filter on device bond4 [ 88.760555][ T7859] 8021q: adding VLAN 0 to HW filter on device bond4 [ 88.807693][ T7859] bond4: (slave geneve2): Opening slave failed [ 88.848826][ T7850] netlink: 'syz.4.1201': attribute type 1 has an invalid length. [ 88.890604][ T7850] 8021q: adding VLAN 0 to HW filter on device bond2 [ 89.002126][ T7880] FAULT_INJECTION: forcing a failure. [ 89.002126][ T7880] name failslab, interval 1, probability 0, space 0, times 0 [ 89.014883][ T7880] CPU: 1 UID: 0 PID: 7880 Comm: syz.5.1209 Not tainted syzkaller #0 PREEMPT(voluntary) [ 89.014986][ T7880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 89.015000][ T7880] Call Trace: [ 89.015005][ T7880] [ 89.015012][ T7880] __dump_stack+0x1d/0x30 [ 89.015065][ T7880] dump_stack_lvl+0x95/0xd0 [ 89.015084][ T7880] dump_stack+0x15/0x1b [ 89.015100][ T7880] should_fail_ex+0x263/0x280 [ 89.015117][ T7880] should_failslab+0x8c/0xb0 [ 89.015243][ T7880] __kmalloc_cache_noprof+0x64/0x4a0 [ 89.015262][ T7880] ? netlbl_cipsov4_add+0x369/0x12a0 [ 89.015281][ T7880] netlbl_cipsov4_add+0x369/0x12a0 [ 89.015377][ T7880] ? genl_family_rcv_msg_attrs_parse+0x13b/0x190 [ 89.015408][ T7880] ? genl_family_rcv_msg_attrs_parse+0x184/0x190 [ 89.015440][ T7880] genl_family_rcv_msg_doit+0x187/0x1f0 [ 89.015589][ T7880] genl_rcv_msg+0x432/0x470 [ 89.015619][ T7880] ? __pfx_netlbl_cipsov4_add+0x10/0x10 [ 89.015655][ T7880] netlink_rcv_skb+0x123/0x220 [ 89.015679][ T7880] ? __pfx_genl_rcv_msg+0x10/0x10 [ 89.015758][ T7880] genl_rcv+0x28/0x40 [ 89.015786][ T7880] netlink_unicast+0x5c0/0x690 [ 89.015835][ T7880] netlink_sendmsg+0x5c8/0x6f0 [ 89.015863][ T7880] ? __pfx_netlink_sendmsg+0x10/0x10 [ 89.015889][ T7880] __sock_sendmsg+0x145/0x170 [ 89.015953][ T7880] ____sys_sendmsg+0x31e/0x4a0 [ 89.015979][ T7880] ___sys_sendmsg+0x195/0x1e0 [ 89.016078][ T7880] __x64_sys_sendmsg+0xd4/0x160 [ 89.016171][ T7880] x64_sys_call+0x17ba/0x3000 [ 89.016242][ T7880] do_syscall_64+0xc0/0x2a0 [ 89.016269][ T7880] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.016291][ T7880] RIP: 0033:0x7f102419acb9 [ 89.016386][ T7880] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 89.016403][ T7880] RSP: 002b:00007f1022bf7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 89.016423][ T7880] RAX: ffffffffffffffda RBX: 00007f1024415fa0 RCX: 00007f102419acb9 [ 89.016438][ T7880] RDX: 0000000000000800 RSI: 0000200000000000 RDI: 0000000000000004 [ 89.016450][ T7880] RBP: 00007f1022bf7090 R08: 0000000000000000 R09: 0000000000000000 [ 89.016538][ T7880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 89.016551][ T7880] R13: 00007f1024416038 R14: 00007f1024415fa0 R15: 00007ffcb1542978 [ 89.016579][ T7880] [ 89.703511][ T7909] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 89.721623][ T29] kauditd_printk_skb: 59 callbacks suppressed [ 89.721638][ T29] audit: type=1400 audit(1769849622.247:2673): avc: denied { bind } for pid=7904 comm="syz.2.1217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 89.754679][ T29] audit: type=1400 audit(1769849622.247:2674): avc: denied { read } for pid=7904 comm="syz.2.1217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 89.872384][ T3408] IPVS: starting estimator thread 0... [ 90.083464][ T7928] IPVS: using max 2976 ests per chain, 148800 per kthread [ 90.111953][ T7938] netlink: 'syz.3.1228': attribute type 1 has an invalid length. [ 90.122992][ T29] audit: type=1400 audit(1769849622.630:2675): avc: denied { write } for pid=7934 comm="syz.5.1227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 90.137862][ T7938] __nla_validate_parse: 23 callbacks suppressed [ 90.137880][ T7938] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1228'. [ 90.177476][ T29] audit: type=1400 audit(1769849622.686:2676): avc: denied { bind } for pid=7934 comm="syz.5.1227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 90.184049][ T7938] 8021q: adding VLAN 0 to HW filter on device bond5 [ 90.442194][ T7952] netlink: 'syz.3.1232': attribute type 1 has an invalid length. [ 90.485250][ T7957] ip6_vti0 speed is unknown, defaulting to 1000 [ 90.501067][ T7957] ip6_vti0 speed is unknown, defaulting to 1000 [ 90.516322][ T7957] ip6_vti0 speed is unknown, defaulting to 1000 [ 90.666915][ T7970] set_capacity_and_notify: 3 callbacks suppressed [ 90.666934][ T7970] loop3: detected capacity change from 0 to 128 [ 90.683294][ T7957] infiniband syz2: set active [ 90.688177][ T7957] infiniband syz2: added ip6_vti0 [ 90.693928][ T3408] ip6_vti0 speed is unknown, defaulting to 1000 [ 90.700803][ T7957] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 90.701017][ T7957] infiniband syz2: Couldn't open port 1 [ 90.787840][ T7957] RDS/IB: syz2: added [ 90.802681][ T7957] smc: adding ib device syz2 with port count 1 [ 90.810019][ T29] audit: type=1326 audit(1769849623.276:2677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7973 comm="syz.2.1237" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8aaa28acb9 code=0x0 [ 90.819837][ T7957] smc: ib device syz2 port 1 has no pnetid [ 90.839253][ T3408] ip6_vti0 speed is unknown, defaulting to 1000 [ 90.878590][ T7957] ip6_vti0 speed is unknown, defaulting to 1000 [ 90.924237][ T7978] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1237'. [ 90.982105][ T7957] ip6_vti0 speed is unknown, defaulting to 1000 [ 91.002963][ T7970] ================================================================== [ 91.011076][ T7970] BUG: KCSAN: data-race in __writeback_single_inode / xas_set_mark [ 91.018988][ T7970] [ 91.021310][ T7970] write to 0xffff88811a8fc814 of 4 bytes by task 7972 on cpu 1: [ 91.028940][ T7970] xas_set_mark+0x12b/0x140 [ 91.031450][ T7957] ip6_vti0 speed is unknown, defaulting to 1000 [ 91.033447][ T7970] tag_pages_for_writeback+0xe3/0x2e0 [ 91.045076][ T7970] writeback_iter+0x340/0x810 [ 91.049773][ T7970] mpage_writepages+0x87/0x1310 [ 91.054637][ T7970] fat_writepages+0x24/0x30 [ 91.059160][ T7970] do_writepages+0x1c6/0x310 [ 91.063770][ T7970] file_write_and_wait_range+0x178/0x2f0 [ 91.069502][ T7970] __generic_file_fsync+0x46/0x160 [ 91.070246][ T7957] ip6_vti0 speed is unknown, defaulting to 1000 [ 91.074612][ T7970] fat_file_fsync+0x49/0x100 [ 91.074634][ T7970] vfs_fsync_range+0x10d/0x130 [ 91.074656][ T7970] generic_file_write_iter+0x1ba/0x310 [ 91.095642][ T7970] iter_file_splice_write+0x6bc/0xa80 [ 91.101562][ T7970] direct_splice_actor+0x156/0x2a0 [ 91.106717][ T7970] splice_direct_to_actor+0x311/0x670 [ 91.112128][ T7970] do_splice_direct+0x119/0x1a0 [ 91.116999][ T7970] do_sendfile+0x380/0x650 [ 91.121417][ T7970] __x64_sys_sendfile64+0x105/0x150 [ 91.126633][ T7970] x64_sys_call+0x2db1/0x3000 [ 91.131322][ T7970] do_syscall_64+0xc0/0x2a0 [ 91.135824][ T7970] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.141443][ T7957] ip6_vti0 speed is unknown, defaulting to 1000 [ 91.141718][ T7970] [ 91.141726][ T7970] read to 0xffff88811a8fc814 of 4 bytes by task 7970 on cpu 0: [ 91.141741][ T7970] __writeback_single_inode+0x201/0x7b0 [ 91.163437][ T7970] writeback_single_inode+0x16d/0x3f0 [ 91.168845][ T7970] sync_inode_metadata+0x6e/0xa0 [ 91.173801][ T7970] __generic_file_fsync+0x109/0x160 [ 91.179077][ T7970] fat_file_fsync+0x49/0x100 [ 91.183753][ T7970] vfs_fsync_range+0x10d/0x130 [ 91.188514][ T7970] generic_file_write_iter+0x1ba/0x310 [ 91.193981][ T7970] iter_file_splice_write+0x6bc/0xa80 [ 91.199370][ T7970] direct_splice_actor+0x156/0x2a0 [ 91.204478][ T7970] splice_direct_to_actor+0x311/0x670 [ 91.209861][ T7970] do_splice_direct+0x119/0x1a0 [ 91.214739][ T7970] do_sendfile+0x380/0x650 [ 91.219248][ T7970] __x64_sys_sendfile64+0x105/0x150 [ 91.224458][ T7970] x64_sys_call+0x2db1/0x3000 [ 91.229130][ T7970] do_syscall_64+0xc0/0x2a0 [ 91.233641][ T7970] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.239610][ T7970] [ 91.242003][ T7970] value changed: 0x02000021 -> 0x04000021 [ 91.247702][ T7970] [ 91.250013][ T7970] Reported by Kernel Concurrency Sanitizer on: [ 91.256150][ T7970] CPU: 0 UID: 0 PID: 7970 Comm: syz.3.1236 Not tainted syzkaller #0 PREEMPT(voluntary) [ 91.266119][ T7970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 91.276169][ T7970] ================================================================== [ 91.392620][ T7944] loop4: detected capacity change from 0 to 8192