last executing test programs: 13.86753558s ago: executing program 4 (id=708): pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff}, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) listen(r1, 0x5) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r3 = accept4$unix(r1, 0x0, 0x0, 0x0) sendto$packet(r2, &(0x7f0000000600)="5f0efc3e1792a50972d2eb21bdff9ca4ac804c2847fe7bf05ddc63ff512d4074687760a5fbd1fc97772c6f5027dcea15b6658de3b024a6ea22baafb445bf8427c8055d00", 0xffffff3d, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x3804, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x69, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0) recvmsg(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000003c0)=""/74, 0x4a}], 0x2d}, 0x10000) fsetxattr$system_posix_acl(r0, &(0x7f0000000300)='system.posix_acl_default\x00', &(0x7f0000000380)={{}, {0x1, 0x2}, [], {0x4, 0x7}, [], {}, {0x20, 0x3}}, 0x24, 0x0) recvmsg(r3, &(0x7f0000000900)={&(0x7f0000000480)=@un=@abs, 0x80, &(0x7f0000000800)=[{&(0x7f0000000500)=""/63, 0x3f}, {&(0x7f0000000540)=""/36, 0x24}, {&(0x7f00000006c0)=""/97, 0x61}, {&(0x7f0000000740)=""/148, 0x94}], 0x4, &(0x7f0000000840)=""/2, 0x2}, 0x40000001) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x30000001}, 0x3}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8847}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) syz_mount_image$msdos(&(0x7f0000000980), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYRES16=r5], 0x1, 0x2a9, &(0x7f0000000c00)="$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") r6 = creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80) rename(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='.\x02\x00') ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r6, 0x40a85321, &(0x7f00000000c0)={{0x3, 0x2}, 'port1\x00', 0x20, 0x102000, 0x5, 0x3ff, 0x400, 0x1ff, 0x9, 0x0, 0x7, 0x4}) ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f68530c2b21a100efb76cba37ff3111d6847e0c7f719e169a596e5fc008daefba68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34171113d806726615380fe65a6a0a72e19c2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca14d90d1f6"}) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f00000001c0)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x3, 0x1, 0x0, 0x0, 0x205a, 0x1ff, 0x0, 0x96c, 0x6, 0x0}) ioctl$USBDEVFS_REAPURB(r5, 0x4008550c, &(0x7f0000000080)) 13.09777262s ago: executing program 4 (id=723): syz_emit_ethernet(0x46, &(0x7f0000000000)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00', 0x10, 0x3a, 0xff, @local, @loopback, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x2d, 0x6, 0x999, 0x5932}}}}}}, 0x0) (async) syz_emit_ethernet(0x46, &(0x7f0000000000)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00', 0x10, 0x3a, 0xff, @local, @loopback, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x2d, 0x6, 0x999, 0x5932}}}}}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000003c0)='GPL\x00'}, 0x94) (async) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000003c0)='GPL\x00'}, 0x94) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x9, 0x8004, 0x2eaf, 0x91, 0x0}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000140)={r2, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x16}}}, 0x81, 0x1600, 0x0, 0x2, 0x200}, &(0x7f00000002c0)=0x98) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') socket(0x400000000010, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f00000001c0)) socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r3], 0xc4}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x50, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) 13.036096498s ago: executing program 4 (id=724): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000100000000000000000008500000097000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb706000008000000b70300000000000085000000070000009500"], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 12.971567166s ago: executing program 4 (id=725): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xe2514, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x4}, 0x288, 0x0, 0x1000, 0x3, 0x7, 0x0, 0x4}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x98004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8, 0x1, @perf_config_ext={0x3fffffffc}, 0x10b202, 0x0, 0x0, 0x3, 0xfff, 0xf8, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0xa) syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x21881e, &(0x7f00000000c0)={[{@mb_optimize_scan}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0x4}}]}, 0xff, 0x50f, &(0x7f0000000140)="$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") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) syz_emit_ethernet(0x4a, &(0x7f0000000500)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a9646", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x7}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) syz_clone(0x48400, 0x0, 0x0, 0x0, 0x0, 0x0) 12.488041229s ago: executing program 4 (id=738): socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$tty20(0xc, 0x4, 0x1) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x6, 0x5, 0xfe, "ff00"}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0xdd, 0xc}, 0x50) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000400)={0x18, 0x0, {0x2, @multicast, 'ip6tnl0\x00'}}, 0x1e) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$EBT_SO_GET_INIT_INFO(r2, 0x0, 0x82, 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000a80)={{0x2, 0x4e23, @empty}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x4a, {0x2, 0x0, @rand_addr=0x64010101}, 'lo\x00'}) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r5 = syz_open_pts(r0, 0x141601) write(r5, &(0x7f0000000000)="d5", 0xfffffedf) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETAF(r5, 0x5408, &(0x7f0000000040)={0x200, 0x5, 0x0, 0x3ff, 0x17, "0108c179cd5f7837"}) 12.262406918s ago: executing program 4 (id=748): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x4, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x10}, 0x0, 0x10000, 0x0, 0x6, 0x7, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r1, &(0x7f0000000300)={&(0x7f0000000000)=@in={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10, &(0x7f0000000100)=[{&(0x7f00000024c0)="e0", 0x1}], 0x1, &(0x7f00000001c0)=[@init={0x18, 0x84, 0x0, {0x80, 0x0, 0xb, 0x13d}}, @init={0x18, 0x84, 0x0, {0x6, 0xe, 0x5, 0x6}}], 0x30, 0x4}, 0x40) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) writev(r0, &(0x7f0000000740)=[{&(0x7f0000001040)="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", 0x15a}, {&(0x7f0000000100)="1d4ac370cf8c47025bd7a6546c8bd20f3991596dfcd1abdb72276d5f80b1d38cedd7d704de6ec72fa6961cd700b4f8c0f594861c0296ca92cb6c2ef9", 0x3c}, {&(0x7f0000000180)="88e584aac45d6d83e6c2c8857149eb55d2c259859f328fc05b7e87150dcc7e40953e657446e3c201284dd4314eb14ce94fb9be03e73d06a982f5502b3ae3a8", 0x3f}, {&(0x7f0000000400)="83c0b58e5bcffe6c14ab199d81f63d09000000040c3f3a7b41a3a1ed6cf40450443e4e37bd3f7139b523eb3dd725f87a1ed946e98c6b19e1fc6ea21fe2eef736ec85289f34830b89c7169369862871b9608f2e976924a41f64f236a395563ddb3b994b4d9cf9f465dea2adad06013851713e9d30f195383be99db35611dd11a69721e423fcf5904c2af8ca4b1774bc6438d1c6218a2ada56c8b5b289274c2d116ecd4aafbd01536f931c84ec8c95ce8c6d118d1dec3bfa645c3e72018e9c154a80fd84b6e0233520ee1dc56ec624728200000000000000", 0xd7}, {&(0x7f0000004480)="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", 0xd46}], 0x5) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x841e, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0, 0x8}, 0x82, 0x4, 0x4, 0x5, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x14) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="24000000390007010000000000000000027c0000040000000c0001800600060086dd"], 0x24}}, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) readv(r0, &(0x7f0000000e40)=[{&(0x7f0000000f40)=""/250, 0xff1}], 0x1) 12.128460425s ago: executing program 32 (id=748): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x4, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x10}, 0x0, 0x10000, 0x0, 0x6, 0x7, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r1, &(0x7f0000000300)={&(0x7f0000000000)=@in={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10, &(0x7f0000000100)=[{&(0x7f00000024c0)="e0", 0x1}], 0x1, &(0x7f00000001c0)=[@init={0x18, 0x84, 0x0, {0x80, 0x0, 0xb, 0x13d}}, @init={0x18, 0x84, 0x0, {0x6, 0xe, 0x5, 0x6}}], 0x30, 0x4}, 0x40) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) writev(r0, &(0x7f0000000740)=[{&(0x7f0000001040)="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", 0x15a}, {&(0x7f0000000100)="1d4ac370cf8c47025bd7a6546c8bd20f3991596dfcd1abdb72276d5f80b1d38cedd7d704de6ec72fa6961cd700b4f8c0f594861c0296ca92cb6c2ef9", 0x3c}, {&(0x7f0000000180)="88e584aac45d6d83e6c2c8857149eb55d2c259859f328fc05b7e87150dcc7e40953e657446e3c201284dd4314eb14ce94fb9be03e73d06a982f5502b3ae3a8", 0x3f}, {&(0x7f0000000400)="83c0b58e5bcffe6c14ab199d81f63d09000000040c3f3a7b41a3a1ed6cf40450443e4e37bd3f7139b523eb3dd725f87a1ed946e98c6b19e1fc6ea21fe2eef736ec85289f34830b89c7169369862871b9608f2e976924a41f64f236a395563ddb3b994b4d9cf9f465dea2adad06013851713e9d30f195383be99db35611dd11a69721e423fcf5904c2af8ca4b1774bc6438d1c6218a2ada56c8b5b289274c2d116ecd4aafbd01536f931c84ec8c95ce8c6d118d1dec3bfa645c3e72018e9c154a80fd84b6e0233520ee1dc56ec624728200000000000000", 0xd7}, {&(0x7f0000004480)="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", 0xd46}], 0x5) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x841e, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0, 0x8}, 0x82, 0x4, 0x4, 0x5, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x14) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="24000000390007010000000000000000027c0000040000000c0001800600060086dd"], 0x24}}, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) readv(r0, &(0x7f0000000e40)=[{&(0x7f0000000f40)=""/250, 0xff1}], 0x1) 3.470131703s ago: executing program 5 (id=881): syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000080)='./file2\x00', 0x1808004, &(0x7f0000000000)=ANY=[@ANYRES16=0x0, @ANYRES64], 0x4, 0x7cc, &(0x7f0000002200)="$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") r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x7, 0x6, 0xb, 0x5, 0x17, "3db2c9d0aa180af300c7f6422c71c0a220682a"}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) open_by_handle_at(r1, &(0x7f0000000100)=ANY=[], 0x109200) 3.402483591s ago: executing program 5 (id=883): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000008c0), 0xfffffffe, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={r0, &(0x7f0000000c80)="da28d10cc4", &(0x7f0000000400)=""/31}, 0x20) unshare(0x28000600) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x16, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf670000000000001507"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0xf0f, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313b, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000003c0), 0x10, 0x4}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r1, 0x4010744d, &(0x7f0000000180)) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000380)={[{@grpquota}, {@nogrpid}, {@quota}, {@nobh}]}, 0x1, 0x511, &(0x7f0000000ac0)="$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") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, &(0x7f0000000100)={0x2000000000003, 0xffffffffffffffff, 0x100000000246, 0x8000000000000003, 0xfffffffffffffffa, 0xffffffffffffffff, 0x0, 0x7fff, 0xb2}) 3.199093988s ago: executing program 5 (id=889): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0) select(0x4, &(0x7f0000000000), &(0x7f00000014c0)={0x1}, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x9400, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000340), 0x8}, 0x0, 0xa88, 0x8406, 0x5, 0xb71, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) iopl(0x3) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$kcm(0xa, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000004c0), 0x208e24b) cachestat(r3, &(0x7f0000000040)={0x7f, 0x7}, &(0x7f0000000180), 0x0) setsockopt$sock_attach_bpf(r2, 0x0, 0x4, 0x0, 0x0) sendmsg$inet(r2, &(0x7f0000000340)={&(0x7f0000000140)={0x2, 0x4e22, @dev}, 0x10, 0x0}, 0x400c080) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b80, 0x1, @perf_config_ext={0x4, 0x9}, 0xa00, 0x81, 0x43a1bd76, 0x7, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0xa}, 0x0, 0x0, 0xffffffffffffffff, 0xa) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000240)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) timer_getoverrun(0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) r6 = syz_open_procfs(0x0, 0x0) getdents(r6, 0xffffffffffffffff, 0x7a) syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x8, 0x8, 0xa0}, &(0x7f0000010080), &(0x7f0000000000)) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000000)={@in={{0x2, 0x4e22, @empty}}, 0x0, 0x0, 0x34, 0x0, "205eca010a22f1acd5ad53962ee15914bd7caba74c018f2b390156814a464019caae51a54aab121ae984926a4e5437d900f2c5b11a7d5b261cd02f2744a156eea9bb1ed068b983df3dfde5cc5510a454"}, 0xd8) setsockopt$IP_VS_SO_SET_ZERO(r7, 0x0, 0x48f, &(0x7f0000000280)={0x6, @remote, 0x4c23, 0x0, 'wrr\x00', 0x17, 0x8, 0x4002b}, 0x2c) 2.17512253s ago: executing program 5 (id=908): syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000180)='./file1\x00', 0xa1c406, &(0x7f0000000400)=ANY=[@ANYBLOB="646f74730000f5ff522c246d6173a594e5e0ee30303030010000000000400017c3d234e02f30303030302c6e6f646f742c6e66733d6e0973", @ANYRES16, @ANYRESDEC], 0x1, 0x2a0, &(0x7f0000001400)="$eJzs3M9r02AYwPFnydZ0k/04CXrxQS96CbMe1UOVDcSC0q2iHoSMZVpW25EUbUUwZ0/7O4ZHb4L4D+y/8DYE2WknI22zNOu633Wt3fcDI8/b5323p33JeLKRbD1ff7u64tsrTlWMtIohEsiOyIwUZddIdEw141T8utzPSCC3Zt9tf1548fJxNpeby6vOZxfvZFR16tr39x+/XP9RvfTs65RlyebMq63fmZ+blzevbP1ZfFP0tZiScqWqji5VKlVnqeTqctFftVWfllzHd7VY9l1vT36lVFlbq6tTXp6cWPNc31enXFdD6lqtaDqqqqy2bevkRCNOywWSOvGKwkY+72Tb4zmztxVhEHhe1mls7Pi+s6Gw0Z+KAABAPx3c/xvxnN3+3+js/0WO6P8/RbOmvnXt/309ff9viuf6u0U0+/+qV1fntVNM9v84VGf/fzzGvykGZzESJAYP9qQ8LzvefRH9PwAAAAAAAAAAAAAAAAAAAAAA/4OdMJwOw3C6cTREJIzGloiYiXGXpRfq3vphldz/MPFlRRt8yP5jCCRu3EuL/ApqhVphpHls5ecf5eZmtSlx4992rVYw4/ztVl735sdkIspnuuZTcvNGK9/IPXySS+bXa4VxWT608qBXHwEAAAAAAEPP1thM/GJa4ut721ZLOvPN6/dWFLT/PqDtRwM18qNydfQ83wkAAAAAADiIX/+w6pRKrnc+gXmOP+vUgcjplt8NrZ6UYYrIEXPyCyL9/6D2BZYMRBnDHNzr1Tc0278BxqKw4ywAAAAAMFza1wMnX8u/9wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6I0zPUXMON7kfr9HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYFD8DQAA///mXbd/") mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4002, &(0x7f0000000000)=0x1, 0x7, 0x0) socket$netlink(0x10, 0x3, 0x10) (async) r0 = socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) socket$packet(0x11, 0x3, 0x300) (async) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_pidfd_open(r4, 0x0) ppoll(&(0x7f0000000340)=[{r5, 0x2291}], 0x1, 0x0, &(0x7f00000003c0)={[0x1]}, 0x8) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r6, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x800) (async) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x800) r8 = syz_clone(0x20000000, 0x0, 0xf, 0x0, 0x0, 0x0) ptrace(0x10, r8) (async) ptrace(0x10, r8) ptrace$getregset(0x4205, r8, 0x202, &(0x7f0000000240)={0x0}) bind$packet(r2, &(0x7f0000000040)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r2, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) r9 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r9, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e24, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2}, {0xa, 0x4e22, 0x6fe3, @mcast2, 0x393}, 0x0, {[0xbb7, 0x6, 0x7, 0x9, 0xbd, 0x7ff, 0xbb23, 0x400]}}, 0x5c) (async) setsockopt$MRT6_ADD_MFC(r9, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e24, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2}, {0xa, 0x4e22, 0x6fe3, @mcast2, 0x393}, 0x0, {[0xbb7, 0x6, 0x7, 0x9, 0xbd, 0x7ff, 0xbb23, 0x400]}}, 0x5c) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000000c0)={0x24, r1, 0x1, 0xfffffffc, 0x25dfdbfb, {0x25}, [@DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}]}, 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{0x1}, &(0x7f0000000140), &(0x7f0000000200)='%pI4 \x00'}, 0x20) sendmsg$DEVLINK_CMD_PORT_GET(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000009c0)={0x64, r11, 0x1, 0xffffffff, 0x0, {0x37}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}]}, 0x64}, 0x1, 0x0, 0x0, 0xfcb3ae1e096881cb}, 0x8006) 1.951004849s ago: executing program 5 (id=913): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) (async) perf_event_open$cgroup(&(0x7f00000001c0)={0x1, 0x80, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) (async, rerun: 64) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x20002f7}) (async, rerun: 64) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async, rerun: 32) write$tun(r3, &(0x7f0000000340)={@val={0x8, 0x800}, @val={0x3, 0x0, 0x4, 0x7, 0x14}, @ipv4=@tcp={{0x6, 0x4, 0x2, 0x3, 0x2c, 0x65, 0x0, 0x52, 0x6, 0x0, @rand_addr=0x64010101, @local, {[@timestamp={0x44, 0x4, 0x3f, 0x0, 0x6}]}}, {{0x4e23, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x80, 0x14, 0x0, 0x200}}}}, 0x3a) (async, rerun: 32) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) (async) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) (async) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000dc0)=ANY=[@ANYBLOB], 0x46c}}, 0x0) (async, rerun: 64) socket$inet6_sctp(0xa, 0x1, 0x84) (async, rerun: 64) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0xffbd) (async) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @remote}, 0x10) 1.94071452s ago: executing program 3 (id=914): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10021, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40, 0x3e8612cf}, 0x60, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000080000000000000000000000850000004100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'veth0_virt_wifi\x00', 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000000800)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000c00)={r6, 0x5, 0x3, 0x1}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xd, 0xffff}}}, 0x24}}, 0x20000000) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000050000009d29358fd4a0fffffffffffff60095"], &(0x7f0000000300)='syzkaller\x00', 0x10000, 0x0, 0x0, 0x40f00, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x101}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r7, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r7, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x2) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newqdisc={0x124, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r8, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_netem={{0xa}, {0xf4, 0x2, {{0x1, 0x401, 0x3, 0x7, 0x4}, [@TCA_NETEM_LOSS={0xd8, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x9, 0x2}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7, 0x7, 0x8, 0x2, 0xc003}}, @NETEM_LOSS_GI={0x18, 0x1, {0xfffffff7, 0x6, 0xfff, 0x9, 0x3}}, @NETEM_LOSS_GE={0x14, 0x2, {0x40c, 0x6, 0x2}}, @NETEM_LOSS_GE={0x14, 0x2, {0xffffffff, 0x8, 0x3, 0x4}}, @NETEM_LOSS_GE={0x14, 0x2, {0x1, 0x6, 0x8, 0x3}}, @NETEM_LOSS_GE={0x8, 0x2, {0x7fffffff, 0x3823, 0x3, 0x3}}, @NETEM_LOSS_GE={0x14, 0x2, {0x7, 0x60000, 0x6b, 0x72b5}}, @NETEM_LOSS_GE={0x14, 0x2, {0x8, 0x200, 0x6, 0x4}}, @NETEM_LOSS_GI={0x18, 0x1, {0x3, 0x5, 0x1, 0x7, 0xfff}}]}]}}}]}, 0x124}, 0x1, 0x0, 0x0, 0xc000041}, 0x20008000) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r1, 0x0, 0xc, &(0x7f0000000040)=0xfffffffc, 0x4) recvmmsg(r1, &(0x7f0000008d40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000006200)=""/27, 0x1b}, 0x80000000}], 0x1, 0x45833af92e4b39ff, 0x0) 1.831860444s ago: executing program 1 (id=919): syz_emit_ethernet(0x9f, &(0x7f00000004c0)={@broadcast, @dev, @void, {@ipv4={0x800, @igmp={{0x16, 0x4, 0x0, 0x0, 0x91, 0x68, 0x0, 0x4, 0x2, 0x0, @loopback, @multicast2, {[@lsrr={0x83, 0x23, 0xd, [@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @rand_addr=0x64010101, @local, @dev={0xac, 0x14, 0x14, 0x34}, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101]}, @lsrr={0x83, 0x1f, 0xbd, [@dev={0xac, 0x14, 0x14, 0x41}, @multicast2, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @local, @multicast2]}]}}, {0x12, 0x81, 0x0, @rand_addr=0x64010101, "d83c100cd58e028b76ddf841918b7ebbb86d44f64dfb600c0347806c8dd277125eb3e34fc862159cb8e6445c41a4b7f6f3"}}}}}, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x8, 0x20}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffd}, 0x35861afe2a15ad58}, 0x48) syz_emit_ethernet(0x9f, &(0x7f00000004c0)={@broadcast, @dev, @void, {@ipv4={0x800, @igmp={{0x16, 0x4, 0x0, 0x0, 0x91, 0x68, 0x0, 0x4, 0x2, 0x0, @loopback, @multicast2, {[@lsrr={0x83, 0x23, 0xd, [@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @rand_addr=0x64010101, @local, @dev={0xac, 0x14, 0x14, 0x34}, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101]}, @lsrr={0x83, 0x1f, 0xbd, [@dev={0xac, 0x14, 0x14, 0x41}, @multicast2, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @local, @multicast2]}]}}, {0x12, 0x81, 0x0, @rand_addr=0x64010101, "d83c100cd58e028b76ddf841918b7ebbb86d44f64dfb600c0347806c8dd277125eb3e34fc862159cb8e6445c41a4b7f6f3"}}}}}, 0x0) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x8, 0x20}, 0xc) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffd}, 0x35861afe2a15ad58}, 0x48) (async) 1.671088995s ago: executing program 1 (id=922): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) r1 = perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690ba, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x7, 0x43a1bd76, 0x7, 0x3, 0x5, 0x2, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x400000000, 0xffffffffffffffff, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x121a03, 0x0) ioctl$TIOCSETD(r3, 0x5423, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000180)=0x7d) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r5 = socket(0x1e, 0x4, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)={0x24, r7, 0x201, 0x3ffffd, 0x7ffffe, {{}, {}, {0x8, 0x11, 0x84e}}}, 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x2000a004) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r4, &(0x7f0000008fc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000006640)=ANY=[], 0x108}}], 0x1, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000000c0)=0x7d) syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') mprotect(&(0x7f0000228000/0x1000)=nil, 0x1000, 0x2000004) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x4040) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x370, 0xffffffff, 0x398, 0xe8, 0x398, 0xfeffffff, 0xffffffff, 0x468, 0x468, 0x468, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xff000000, 0xffffffff], 'hsr0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [0xff], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x0, 0x6}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x1, {0x2000010}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) 1.541148702s ago: executing program 1 (id=926): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000010900010073797a31000000002c000000030a01020000000000000000010000000900030073797a32000000000900010073797a31000000002c000000050a01020000000000000000010000000c00024000000000000000010900010073797a310000000028000000000a05000000000000000000010000080900010073797a31000000000800024000001b"], 0xc8}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000010900010073797a31000000002c000000030a01020000000000000000010000000900030073797a32000000000900010073797a31000000002c000000050a01020000000000000000010000000c00024000000000000000010900010073797a310000000028000000000a05000000000000000000010000080900010073797a31000000000800024000001b"], 0xc8}}, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x5, 0x200000) setsockopt$inet_MCAST_LEAVE_GROUP(r1, 0x0, 0x2d, &(0x7f00000000c0)={0xad7, {{0x2, 0x4e20, @local}}}, 0x88) 1.4751489s ago: executing program 1 (id=927): socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000840)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000b80)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x2, 0x5}, {0x5, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4010}, 0x20000085) socket$nl_route(0x10, 0x3, 0x0) capset(&(0x7f0000000100)={0x19980330}, &(0x7f0000000140)={0x0, 0xffffffff, 0x0, 0x81, 0xfffffffc, 0x80000001}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000"], 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x14}, 0x94) close(r3) socket(0x28, 0x5, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) read(r4, 0x0, 0x0) sendmsg$IPSET_CMD_SAVE(r4, &(0x7f0000000200)={0x0, 0x27, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000080601080000000000000004000000040500010006"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x63, 0x4, 0x7, 0x2, 0x0, 0x5b, 0x24207, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffffffff, 0xfc}, 0x2, 0x0, 0x800000, 0x6, 0x2, 0x8, 0xffff, 0x0, 0x2, 0x0, 0xc0}, 0x0, 0xc, 0xffffffffffffffff, 0x9) futex(&(0x7f000000cffc)=0xfffffffc, 0x2, 0x0, 0x0, &(0x7f0000048000), 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) splice(r5, 0x0, r6, 0x0, 0x1100000000f334, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0xffffffffffffffff, r5, 0x0, 0x1, &(0x7f0000000240)='\x00'}, 0x30) futex(&(0x7f000000cffc)=0x4, 0x10b, 0x4, 0x0, &(0x7f0000048000), 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(r3, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x100000001, 0x80000001}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r7, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) fsopen(0x0, 0x0) r8 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r9 = fcntl$dupfd(r8, 0x0, r8) read$usbfs(r9, 0x0, 0x0) 1.339189808s ago: executing program 3 (id=930): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) socket$inet(0x2, 0x2, 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x22d00, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000100)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) fallocate(r3, 0x0, 0x9c0, 0x8e) r4 = perf_event_open$cgroup(&(0x7f0000000080)={0x2, 0x80, 0x5, 0x0, 0x0, 0xff, 0x0, 0x0, 0x1100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x108060, 0x0, 0x0, 0x3, 0x0, 0x38, 0x0, 0x0, 0x401}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) socket(0x10, 0x3, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000300)={@map=0x1, 0xffffffffffffffff, 0x26, 0x18}, 0x20) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r5, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r5, 0x80047455, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x4004743d, 0x110e22fff6) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)) unshare(0x2c020400) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x200, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 1.336589408s ago: executing program 0 (id=931): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) syz_open_dev$tty20(0xc, 0x4, 0x1) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x6, 0x5, 0xfe, "ff00"}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0xdd, 0xc}, 0x50) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000400)={0x18, 0x0, {0x2, @multicast, 'ip6tnl0\x00'}}, 0x1e) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$EBT_SO_GET_INIT_INFO(r2, 0x0, 0x82, 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000a80)={{0x2, 0x4e23, @empty}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x4a, {0x2, 0x0, @rand_addr=0x64010101}, 'lo\x00'}) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r5 = syz_open_pts(r0, 0x141601) write(r5, &(0x7f0000000000)="d5", 0xfffffedf) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETAF(r5, 0x5408, &(0x7f0000000040)={0x200, 0x5, 0x0, 0x3ff, 0x17, "0108c179cd5f7837"}) 726.596867ms ago: executing program 2 (id=933): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="020000000400000008000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x11, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b000000b708000000000000dbaaf8fff1000000b5080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYBLOB="e63c7c7bd5249aaf20ca32159f6edbc1ddaa448f060ed42f0edeb6937247e9db02ac211d1e036da62ef5225740968d133e0a21d7c17ce5494b27ba", @ANYRES16=r4], &(0x7f0000000200)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x1e, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfbfffffe}, 0x94) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) r7 = openat(r6, &(0x7f00000000c0)='./file0\x00', 0x6a1c2, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xe, 0x42718, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x0, 0x6, 0x80, 0x1, 0xb, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) faccessat(r6, &(0x7f0000000000)='./file0\x00', 0x5) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000400), &(0x7f0000000440), 0x2, 0x0) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r9) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r11, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, r10, 0x1, 0x0, 0xffffffff, {0x4, 0x74, 0x609}}, 0x14}, 0x1, 0xffffffff00000003}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r2, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040085) socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000540)={0x4000000, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYRES64=r3, @ANYRES64=r9], 0x48}}, 0x4044880) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x1c, r8, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x4008004) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="414601", @ANYRES16=r5], 0x4) 624.44381ms ago: executing program 1 (id=934): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x7}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000080)={r1, 0x57, "4f8f891cdb2b2be065d3456a33c6032ba379fb5ee8405d618ec427bd07cefc08895d8922f4070e8b77f2b30523e5175fed32d6771d4e5fa8cd17179ef5db7e6800850802fce8b8d730ab534ff9f2282c863418b565d3a2"}, &(0x7f0000000100)=0x5f) r3 = syz_open_dev$vcsa(&(0x7f0000000140), 0x45, 0x345b80) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000180)={r2, 0x4}, 0x8) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r4, 0x80047213, &(0x7f0000000200)) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r5, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x58, r6, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xfffd}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x814}, 0x40011) ioctl$SNDRV_TIMER_IOCTL_TREAD64(r3, 0x400454a4, &(0x7f0000000400)=0x1) socket$inet_smc(0x2b, 0x1, 0x0) write$UHID_INPUT(r3, &(0x7f0000000440)={0x8, {"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", 0x1000}}, 0x1006) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f0000001480)={{0x1, 0x1, 0x18, r4, {0x7fffffff}}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001d40)={r4, 0x58, &(0x7f0000001cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000001dc0)={'tunl0\x00', &(0x7f0000001d80)={'syztnl2\x00', r9, 0x8, 0x700, 0xd, 0x611, {{0x6, 0x4, 0x0, 0x4, 0x18, 0x65, 0x0, 0xc, 0x29, 0x0, @empty, @loopback, {[@end]}}}}}) setrlimit(0x7, &(0x7f0000001e00)={0x5, 0x8}) getsockopt$inet_sctp_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f0000001e40), &(0x7f0000001e80)=0x8) r10 = getpgrp(0x0) setpriority(0x2, r10, 0xff) write$UHID_GET_REPORT_REPLY(r3, &(0x7f0000001ec0)={0xa, {0x6, 0x2, 0xfc}}, 0xa) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r3, 0x80489439, &(0x7f0000001f00)) syz_io_uring_setup(0x7305, &(0x7f0000001f80)={0x0, 0x6fe0, 0x8000, 0x0, 0x37e, 0x0, r3}, &(0x7f0000002000), &(0x7f0000002040)) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, 0x40010, r4, 0x69b80000) r11 = syz_genetlink_get_family_id$l2tp(&(0x7f00000020c0), r8) sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000002180)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002140)={&(0x7f0000002100)={0x14, r11, 0x400, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0xed1f68c847b7c095) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002200), r5) sendmsg$NL802154_CMD_NEW_SEC_KEY(r5, &(0x7f0000002400)={&(0x7f00000021c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000023c0)={&(0x7f0000002280)={0x108, r12, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_SEC_KEY={0xac, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x5c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x5}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xffffffffffffff81}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "b82f60d1b8e0e1074a2e95170c4b849d"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "e9f287920e34f69a9da7f896c27347419bad3157204cc366901bb53f348f241d"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "abc78522c323b3cec4ef0f867345aa02"}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x108}, 0x1, 0x0, 0x0, 0x44800}, 0xa000) 623.94491ms ago: executing program 1 (id=935): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000210000c5000000003b810000850000006d000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000240)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x24403}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_PORT={0x6, 0x2, 0x1, 0x0, 0x4e21}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x2404d889}, 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x2200850, &(0x7f0000000140)={[{@journal_dev={'journal_dev', 0x3d, 0x7}}, {@debug}, {@journal_checksum}, {@noauto_da_alloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@abort}, {@jqfmt_vfsv1}, {@norecovery}]}, 0x5, 0x596, &(0x7f0000000400)="$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") chdir(&(0x7f0000000240)='./file0\x00') add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f0000000180)="0000000000000002ff69000000000008000000c000000006000200861fa72e5b01504104bfeacdd5a9007d167c71e3b8a93aa64d957a684161c833020a6da8881fb79e07000000000000002c76ecc7a56843a85f7df51293f0eb84ef8f0f07342db3b0e5a5647b7bed1fbf069ca713670adf7d9fb6d2600fd9c1981fe9f095cfe9d2fe1e1e34f6096bf02543747b2c792890f07c0da0fa25e6101062e6c9176a70e41698814a213711764f88495994cfd8a57c1e13f6b5298e7ab3a2bfb58dde34d58536633c27882e51ced17d67999b00094461", 0xd4, 0xffffffffffffffff) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@FILEID_UDF_WITH_PARENT={0x14, 0x52, {{0x3, 0x6, 0x7, 0xa}, 0x10001, 0x9}}, &(0x7f0000000000), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) socket$tipc(0x1e, 0x2, 0x0) r4 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x18b}, &(0x7f0000000340)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r4, 0x627, 0x4c1, 0x43, 0x0, 0x30) symlink(&(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r7 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x4) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r7, &(0x7f0000000a40)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000009c0)={0x4c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 622.73868ms ago: executing program 2 (id=936): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) r1 = perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690ba, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x7, 0x43a1bd76, 0x7, 0x3, 0x5, 0x2, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x400000000, 0xffffffffffffffff, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x121a03, 0x0) ioctl$TIOCSETD(r3, 0x5423, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000180)=0x7d) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r5 = socket(0x1e, 0x4, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)={0x24, r7, 0x201, 0x3ffffd, 0x7ffffe, {{}, {}, {0x8, 0x11, 0x84e}}}, 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x2000a004) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r4, &(0x7f0000008fc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000006640)=ANY=[], 0x108}}], 0x1, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000000c0)=0x7d) syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') mprotect(&(0x7f0000228000/0x1000)=nil, 0x1000, 0x2000004) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x4040) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x370, 0xffffffff, 0x398, 0xe8, 0x398, 0xfeffffff, 0xffffffff, 0x468, 0x468, 0x468, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xff000000, 0xffffffff], 'hsr0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [0xff], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x0, 0x6}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x1, {0x2000010}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) 515.421794ms ago: executing program 3 (id=937): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'wlan1\x00', 0x800}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x7) r2 = dup(r1) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$int_in(r5, 0x5421, &(0x7f0000000140)=0x2f) connect$inet6(r5, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f0000000100)={0x20004}, 0x8) close(r5) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000100)=0x3, 0x2) connect$pppl2tp(r3, &(0x7f00000004c0)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}}}}, 0x32) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000080)='v', 0x1}], 0x1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local}) 473.107009ms ago: executing program 2 (id=938): bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000f900850000007700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x208a022, 0x0, 0x1, 0x0, &(0x7f0000000000)) 437.370804ms ago: executing program 3 (id=939): lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = getegid() r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r2, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="02000000010001000000000002000300", @ANYRES32=0xee00, @ANYBLOB="040004000000000008000300", @ANYRES32=r4, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r4, @ANYBLOB="08000600", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="08000500", @ANYRES32=r4, @ANYBLOB="100006000000000020"], 0x54, 0x1) setresgid(r0, r1, r4) 435.756314ms ago: executing program 5 (id=940): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x331}, 0x9c) (async) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000680)={[{@grpid}, {@auto_da_alloc}, {@lazytime}, {@dioread_nolock}, {@quota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@jqfmt_vfsv1}, {@bh}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000000}}, {@min_batch_time={'min_batch_time', 0x3d, 0x8}}]}, 0x3, 0x4d4, &(0x7f0000000180)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xe7c) 435.349694ms ago: executing program 0 (id=941): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000040)=0x201, 0x4) r1 = socket$netlink(0x10, 0x3, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) write(r2, &(0x7f00000002c0)="29000000140005b7ff00000004eabdeb0101b6ff06000000000000001933b49db96ad24d12595fbea5", 0x29) syz_genetlink_get_family_id$smc(&(0x7f00000000c0), r1) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000100)={0x2017be01}) 425.377566ms ago: executing program 2 (id=942): bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000206010100000000000000000000000005000100070000000900020073797a30000000001400078005001500f0ffffff080012400000000011000300686173683a69702c6d61726b0000000005000500020000000500"], 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB="28000000030601020000000000000000010000050500010007"], 0x28}, 0x1, 0x0, 0x0, 0xc011}, 0x20004000) 405.326178ms ago: executing program 33 (id=940): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x331}, 0x9c) (async) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000680)={[{@grpid}, {@auto_da_alloc}, {@lazytime}, {@dioread_nolock}, {@quota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@jqfmt_vfsv1}, {@bh}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000000}}, {@min_batch_time={'min_batch_time', 0x3d, 0x8}}]}, 0x3, 0x4d4, &(0x7f0000000180)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xe7c) 363.180674ms ago: executing program 3 (id=944): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000780001060000000000000020070000000700000004008480"], 0x1c}], 0x1, 0x0, 0x0, 0x200000c0}, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x71, 0x5, 0x8, 0x8, 0x0, 0x1f, 0x1369a, 0x8, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x1}, 0xb06, 0x3, 0x8, 0x1, 0x7f, 0x8800, 0x5, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) 351.151476ms ago: executing program 0 (id=945): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x62981) r1 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x7, &(0x7f00000001c0)=0x7, 0x4) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x800000, 0x0, 'queue0\x00', 0x9}) writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)="238292", 0xfff6}], 0x2) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r3, 0x80044941, 0x0) io_uring_enter(r3, 0x4117, 0xb341, 0x9, &(0x7f0000000040)={[0x1a]}, 0x8) 350.679855ms ago: executing program 2 (id=946): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) execve(0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x6000) msgget$private(0x0, 0x380) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_smc(0x2b, 0x1, 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000540)={0x0, 0xd4bb}, 0x0, 0x0) unshare(0x22020600) pselect6(0x40, &(0x7f0000000100)={0x7, 0x200400000007, 0x2, 0x7ffffffffffffbff, 0x2000000000000000, 0x0, 0x0, 0x2000000000000000}, 0x0, &(0x7f0000000240)={0x1f, 0x1, 0xffffffffffffffea, 0x0, 0x0, 0x200000, 0x4, 0x6}, &(0x7f0000000280)={0x0, 0x989680}, 0x0) connect(r0, &(0x7f0000000180)=@tipc=@id={0x1e, 0x3, 0x3, {0x4e20, 0x2}}, 0x80) 340.692387ms ago: executing program 3 (id=947): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) socket$inet(0x2, 0x2, 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x22d00, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000100)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) fallocate(r3, 0x0, 0x9c0, 0x8e) r4 = perf_event_open$cgroup(&(0x7f0000000080)={0x2, 0x80, 0x5, 0x0, 0x0, 0xff, 0x0, 0x0, 0x1100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x108060, 0x0, 0x0, 0x3, 0x0, 0x38, 0x0, 0x0, 0x401}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) socket(0x10, 0x3, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000300)={@map=0x1, 0xffffffffffffffff, 0x26, 0x18}, 0x20) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r5, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r5, 0x80047455, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x4004743d, 0x110e22fff6) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)) unshare(0x2c020400) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x200, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 267.048006ms ago: executing program 2 (id=948): bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x19, 0x4, 0x4, 0x1ffff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000002c0)={0x18, 0x5a, 0x1, 0x0, 0x0, "", [@nested={0x8, 0x3, 0x0, 0x1, [@nested={0x4, 0x7e}]}]}, 0x18}], 0x1, 0x0, 0x0, 0x4004}, 0x40040) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f0000000000), 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x1310000, &(0x7f0000000300)={[{@minixdf}, {}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@commit={'commit', 0x3d, 0x5}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nobh}, {@nodelalloc}, {@noblock_validity}, {@nomblk_io_submit}]}, 0x1, 0x566, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9GajdN4o8KgvUiiBYLeq9LMg0lm27JbkoTC20P9uJFiiBiQfwDvHss/gP+FQUtFClBD14is5lNt81ukqYbN3U+H5j2vZnZvPnum+/bNzu7bACFNZL9U4p4OSK+SSIOt20bjHzjyOp+yw+vTWVLEisrn/2ZRJKva+2f5P8fzCsvRcSvX0WcKK1vt764NFupVtP5vD7WmLs8Vl9cOnlxrjKTzqSXJiYnT781OfHuO2/3LNbXz/39/ad3Pzr99fHl736+f+R2EmfiUL6tPY5ncKO9MhIj+XMyFGee2HG8B43tJkm/D4BtGcjzfCiyMeBwDORZD/z/XY+IFaCgEvkPBdWaB7Su7Xt0HfzcePDB6gXQ+vgHV98biX3Na6MDy8ljV0bZ9e5wD9rP2vjljzu3syU2eR/ieg/aA2i5cTMiTg0Orh//knz8275TzTePN/ZkG0V7/YF+upvNf97oNP8prc1/osP852CH3N2OzfO/dL8HzXSVzf/e6zj/XRu6hgfy2gvNOd9QcuFiNT0VES9GxGgM7c3qG93POb18b6Xbtvb5X7Zk7bfmgvlx3B/c+/hjpiuNyrPE3O7BzYhXOs5/k7X+Tzr0f/Z8nNtiG8fSO69227Z5/Dtr5aeI1zr2/6M7WsnG9yfHmufDWOusWO+vW8d+69b+6If9jT/r/wMbxz+ctN+vrT99Gz/u+yfttm275/+e5PNmeU++7mql0Zgfj9iTfLJ+/cSjx7bqrf2z+EePbzz+dTr/90fEF1uM/9bRW1137ff5n8U//VT9//SFex9/+UO39rfW/282S6P5mq2Mf1s9wGd57gAAAAAAAGC3KUXEoUhK5bVyqVQur36+42gcKFVr9caJC7WFS9PR/K7scAyVWne6D7d9HmI8/zxsqz7xRH0yIo5ExLcD+5v18lStOt3v4AEAAAAAAAAAAAAAAAAAAGCXONjl+/+Z3wf6fXTAjvOT31Bcm+Z/L37pCdiVvP5Dccl/KC75D8Ul/6G45D8Ul/yH4pL/UFzyHwAAAAAAAAAAAAAAAAAAAAAAAAAAAHrq3Nmz2bKy/PDaVFafvrK4MFu7cnI6rc+W5xamylO1+cvlmVptppqWp2pzm/29aq12eXwiFq6ONdJ6Y6y+uHR+rrZwqXH+4lxlJj2fDv0nUQEAAAAAAAAAAAAAAAAAAMDzpb64NFupVtN5ha6F92NXHMZOBrhqWw8f3C1RKHQt7NtG5/Z5YAIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACANv8GAAD//04mM/E=") r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x8004, &(0x7f0000000080)={[{@discard}, {@bh}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x7b9, &(0x7f00000007c0)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r7, &(0x7f0000004200)='t', 0x1) sendfile(r7, r6, 0x0, 0x40002) sendmsg$nl_generic(r5, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000000300)=ANY=[@ANYBLOB="500000003f0001002cbd7000ffdbdf25010000003a000400"], 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x8000) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000180)={r9, 0x20, &(0x7f0000000100)=[@in={0x2, 0x4e20, @multicast1}, @in={0x2, 0x4e22, @loopback}]}, &(0x7f0000000240)=0x10) sendmsg$kcm(r2, &(0x7f0000000040)={&(0x7f0000000380)=@caif=@rfm={0x25, 0x0, "3f969e9a134743b4c4dc6dcd2e0962c6"}, 0x80, &(0x7f0000000140)}, 0x4008001) socket(0x10, 0x3, 0x6) getpid() bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800596100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x15}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x57, &(0x7f0000000400)=ANY=[@ANYRESDEC, @ANYBLOB="a84fea3b11219ff3eabe76fbdd4445bedfd08a100306185d420426247234e0a16629c2"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x94) socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xb, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 266.891976ms ago: executing program 0 (id=949): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x3, 0x5, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x2e}, @call={0x85, 0x0, 0x0, 0xd0}]}, &(0x7f0000000340)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) shutdown(r2, 0x1) r3 = accept(r0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='cmdline\x00') preadv(r4, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/44, 0x2c}], 0x1, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x15, 0x14, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r5, &(0x7f0000000300), &(0x7f00000002c0)=@tcp6=r3}, 0x47) ppoll(&(0x7f0000000180)=[{r3, 0x2040}], 0x1, 0x0, 0x0, 0x0) 240.14093ms ago: executing program 0 (id=950): r0 = gettid() socket$inet6_sctp(0xa, 0x5, 0x84) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0x78, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3fffffd, 0x0, 0x0, 0x0, 0x2}, 0x1}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x400}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x78}}, 0x8) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0x78, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3fffffd, 0x0, 0x0, 0x0, 0x2}, 0x1}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x400}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x78}}, 0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000100)={r2, 0xd0, 0x20, 0x3, 0x6}, &(0x7f0000000140)=0x18) rt_tgsigqueueinfo(r0, r0, 0x1b, &(0x7f0000000340)={0x6, 0xffff, 0x9000}) (async) rt_tgsigqueueinfo(r0, r0, 0x1b, &(0x7f0000000340)={0x6, 0xffff, 0x9000}) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800702, &(0x7f0000000100)={[{@discard}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}, {@noauto_da_alloc}, {@noload}, {@oldalloc}, {@resuid}]}, 0x2, 0x470, &(0x7f0000000dc0)="$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") 0s ago: executing program 0 (id=951): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x10403, 0x0) (async) r1 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000080)={0xffff, 0x400, 0x1, 0x0, 0x0, [{{r1}, 0x100000000}]}) (async) preadv(r0, &(0x7f0000001380)=[{&(0x7f00000000c0)=""/26, 0x1a}, {&(0x7f0000000100)=""/213, 0xd5}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000001280)=""/118, 0x76}, {&(0x7f0000001300)=""/100, 0x64}], 0x6, 0x5c39, 0xc5c) io_uring_enter(r0, 0x5812, 0x7670, 0x57, &(0x7f0000001400)={[0x61a]}, 0x8) (async) ioctl$TIOCL_UNBLANKSCREEN(r0, 0x541c, &(0x7f0000001440)) (async) kexec_load(0x100000000, 0x5, &(0x7f0000001780)=[{&(0x7f0000001480)="7eaaec1ac6de39849b6daa672b709175a8d8105f567c740f9462d1c04108e1cf4bfb3cdcc28f52591da62bf232531126b3845927fa93fb6403a2f4cb350ca62abc8a131c6028b9691fa7dfb2804f4f09a9329b9a4937a8", 0x57, 0x1ff, 0x120000000000000}, {&(0x7f0000001500)="dbd376f2c87f8dc1600d2c9184baf6f6f647a81b9f8ca9640f25aa7d265d6ec48a8bffc621f9bc6d5d6f0a45060519272d1b2846ca67c30d96cae6945da697c2e9fed04e6a9ef8748b682e2d47e02ab7601d44306c7ca9b6ec4ec8071e31720a697140873046543e4c50d97c74bee366af5e29d3ed00a90e7a179dd46bce8f6c0430cf7d6af632c65f92b8a34a6097", 0x8f, 0xfffffffffffffff9, 0x7}, {&(0x7f00000015c0)="9c5581bc9e4d7cb35e930bfc467bf1892ca971f914609107ace77b842f6fbe4dad12decd2b84087ac714281163821b1786a3d4a85bd38a19b1f9777ad2f2fe4ba54393350c54aa6071818c179314aeac3a4a01ffa8ec082c62eff52c84a303862d09d45ae7d5faf5ded720118d2532bfaa2bb06eae48cc09422962c2ff7ebb6590d0", 0x82, 0x800, 0x9c}, {&(0x7f0000001680)="a62cec3783772570e4dca9a8b2364284e755f13408aebf967b6ee59d67286510a18a66788bbcc0536050f03738088ccd93b88fea3271d0d3efbe95a470672b749d242b97f9ba582b772c77eba87ceae1320ade9c797aed46e6dc03f423223f704f209a7a9e0edd9297290608c365e00c9dff5933fd4f9f6406b4bd27ef85cdac8a5806bb9974d95301b596e036a490c6c1c4ff077175142a14b9b375bc95dfaf3acc8498c7", 0xa5, 0x8}, {&(0x7f0000001740)="396c85ce57c40ab95d942b9c0c8a33ca9d06baf1ebce24bf5a2e", 0x1a, 0x7f, 0xf}], 0x80000) (async, rerun: 32) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000001840)={0xa, {0x8, 0xc2, 0x3}}, 0xa) (async, rerun: 32) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000001880)={0x1, 0x6, 0x401, 0x2, 0x3, "23642cf9b25b69de1e318d9ac6919e8c21fdd8", 0x7, 0x21}) tee(r0, 0xffffffffffffffff, 0x7, 0x8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000018c0)={'ip6gre0\x00', 0x0}) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000001900)={@dev={0xfe, 0x80, '\x00', 0x2e}, r2}, 0x14) (async) setsockopt$X25_QBITINCL(r0, 0x106, 0x1, &(0x7f0000001940), 0x4) (async) write$UHID_INPUT(r0, &(0x7f0000001980)={0x8, {"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", 0x1000}}, 0x1006) (async) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000029c0), 0xd1fd0fdf4b8713de, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f0000002a00)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) connect$phonet_pipe(r0, &(0x7f0000002a40)={0x23, 0x0, 0x9, 0x9}, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002ac0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r4, &(0x7f0000002bc0)={&(0x7f0000002a80)={0x10, 0x0, 0x0, 0x4000002}, 0xc, &(0x7f0000002b80)={&(0x7f0000002b00)={0x4c, r5, 0x2, 0x7, 0x25dfdbfb, {}, [@ETHTOOL_A_RINGS_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4008004}, 0x20004801) (async, rerun: 64) fremovexattr(r3, &(0x7f0000002c00)=@known='trusted.overlay.origin\x00') (async, rerun: 64) ioctl$sock_inet_SIOCGIFDSTADDR(r4, 0x8917, &(0x7f0000002c40)={'wlan0\x00', {0x2, 0x0, @empty}}) (async, rerun: 32) close(r4) (async, rerun: 32) perf_event_open$cgroup(&(0x7f0000002cc0)={0x5, 0x80, 0x6, 0x6, 0x4, 0x2, 0x0, 0x2a8a, 0x4100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x73, 0x0, @perf_bp={&(0x7f0000002c80), 0x4}, 0x0, 0x5, 0x401, 0x5, 0x545a, 0x7f, 0x401, 0x0, 0x7c3e0eb, 0x0, 0x2}, r4, 0x3, r4, 0x9) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000002d40)={@loopback, 0x6c, r2}) (async) r6 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_DEL_MFC(r6, 0x29, 0xcd, &(0x7f0000002d80)={{0xa, 0x4e22, 0x5, @empty}, {0xa, 0x4e24, 0x2, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}, 0x0, {[0x5, 0x200, 0x7b, 0x80, 0x4, 0x400, 0x5, 0x2b46]}}, 0x5c) (async) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) (async) kexec_load(0x6, 0x8, &(0x7f0000004180)=[{&(0x7f0000002e00)="7269355908b57510c0aad8e61d0d3e9676c072431f2da2af582c99445f7c9436d89522274a7fcd46ab1e2eacd04df38330aa46bcdd859511c25e8e188a", 0x3d, 0x7, 0xb}, {&(0x7f0000002e40)="c9", 0x1, 0xaf0b, 0x2007}, {&(0x7f0000002e80)="ea4c05309bcedcb6735f0afeae19f56bbc0e9f2dd605346ff841ef5dc901e6c19eb4c31a2a126cbb18df3b82410ac98dc1948a1c5fe7fa233e3b1d820ccc963af36ec31838f1107fe020ebda443aae25115f1d823b6e3f45e6fac893d5c14d636baa2c7e257b4428", 0x68, 0x8, 0x8}, {&(0x7f0000002f00)="669eae32022dcd3514c331b8a5b644f05ad3d3307d68facc13eddbfa42391410349e0038f0ce09a862948347562460f65469f6a0c6f4c6b7620deb3cff98d403449c4513c4f416750617cc049179906232af68678bc5030e665eafe3562f34d4a47cbb4696e281210157e3a5cb9fe3dafd8a0c1f7c973e48e39741323b167d7fd70a06a7dcdb0e5be993472784d92eef5c7f1adb73d94983981b3e933818e885c6258c7cd3d8820423ab0323c4b9f0ae13d275910255ea4095bfe0a7827e34c21135563ff4c9346edbef825cb3f08cde7087a57cfeb26e45fccc9fb24b8fc398867e5252baca616590da4af201f5b6e3e76d712d160f", 0xf6, 0x7, 0x3}, {&(0x7f0000003000)="ecbdc21a8d48d26b9dfd11e9f42af0ab55555e68b65ba46790291bcb83373d65737295ce1cc60f37a78ec04c399b893a97144a58fb35909329f6", 0x3a, 0x0, 0xfffffffffffffffd}, {&(0x7f0000003040)="033e465586a019ea7b2bebc2910a309b5895610b1897b215898286b9388f3ae4c02426c60d8b088f6bd867c1ef7f644641c6d76e671d776a44767b13df6b65c90b80280c7888e7b53112bc1cec9cb833cfb055661b50ef61a09e487e2232761cdd7abb286ff07ea8ee6f0b4a", 0x6c, 0x0, 0x6}, {&(0x7f00000030c0)="f4cfb0fa26131849cfad495f3efccafbe1f2f6e1fa240e353795116f8c6cda97a86e251c317a6a017b0812089c9895f434555b08c61ad56014a9d0b5ae0f94e3b9eda1e12558fe69a56454fdc504a178044d5879daf9c9cb1376668ad27d7e474f934f799da3d4deb03327630f3a474f765784f276ef07a1537155b4d2ac571dc4a8d7593052c3c966557759612cd7e99c3a0cb1b3acc0f9de0571", 0x9b, 0x100000000}, {&(0x7f0000003180)="113b184f08f286e9ba00eeb305a228bfba665fda1ec0a68fa4c835ca98e2f8c9891dfccf5e72e160e53c6fda96ce72b54880c0e17ccd83fa45d7b03262a2cf00d442cff67d839fca072a0d813199d4ccc0d1ea5c4494fb643405eecc3b85f8167647f1fa22e82601ef2c92655bfbe010e08575bc7ca106e799d2bd0880f7c87fbc9648bb5b3617c24a98f67afd031cba9c4a20851e5b19c0d22ee1481ff80b17cd956f9fbda8b62f7ea33710989329860bd77cfac7b3ae5b8c4d420f67a5ba96d2197b5f5cefcff4104e2b0be9d0ab50e673f3d2d3cdcec8aa3ebdd854977c9d6457a9888f3e8b36d5ee683d2e2636a27cc737bf0611d55afc273ffc7f2c96db175a2e64d6295d0df716e474342eaf1ce8dcbf4f8d6e65f87f891cb5c33c49b680079ffa645857badafcc46b5b2b0ceebf0bc867461d3a69d60ea364d603d2b1fb9d0761fb6648aee50868ba62fdfb6562df5a66a8930c2151c1629dbc1559f8f287df7665d300d3cbf5f56d3081c7beeee5af0f718c2c9c7c030bfdca25076138edfefea331d319a3b5bf59c1b4c679d422b198aabdd6b50bc8ba28f01ae09775c5ba1004c64a89cc1c4865e852c98869e4dc593ab2786729a5b65059684172e54ad446f6a8a5a43c867250449f3acc055f8555f7045ef41141c8960d65d9bd59820c88c6072229d17059923968414d5312663e6c492b2c18fb4667a7d48a8ba042ccd9380b5f2dd3d72109c793a2fd66ead8adab25bcac8794bab953e562d77ff717069f04c6e9ebf678245717ae9f6a52b3f71829012f140a4f8834c181834721389f50e357471b8abb645eb40843eb34838469b3fff7dcfe982fd956ca0ca07a2f62592e7cc7224075673fe4d4145f5262fd360b63a59c01c08e50284b50dbeab40d8153ec11d9ebdea2cc3dda4fe2f9ce7acb262c18f154e821fc91b59bbba4192f1c4988dedf1849ecc2c5e7a0686021fea5ff2a7e8fbae983ebe0693fd05bdefe4260b36794bb0a124c397822f85a0650e8fc8f3f77f98ff3470d1ef7634e1ae18c0ec6a88c08bbc6992920760879072ae4dfc8f458b2b9788b45800fe2c3b224e62378aacf500bdffad05a95621d3d938ce666ec7a16e789ae82297416e249349c7a1accfab2a0a489fe36484a73caead46dcd7028a8ceccbcd4b412f614da4335a360d61e7d487dae6b64fd4b7fe13fb1263d546e5a863a90f490209d199859adc6c1f60dc173cc5e8972b3e960cabdd1be27fc503ef638a4899b551cff4dc6568ec63da2616c1cb95d160b5ca351fb2abcbdc3207c50b4a69eeed5ede95bcae114d511205a0f4a1ff7f6177b150bc2c3286adaa042b506011bbeda2848d786d2a5d2f67485281905b29f5724806a508a6efd306aa0b9d438539bb10ff758a982bb1633f4375351a70e87f31a14e7c49f63c4d2714730ace179c0963bc28a0cf12e689511a018a2ca54cdeaf3bf1decd65e8aa25086a064473c433fe03664333c318ba373ed672c28e94e2fd49c374138fb6e2c0ec349ad0962bc8fca56fb90f2f6969ee1813a0735fe2208255d52478c61d078d264e4ef5239f605401858194a1053112c8f644dcd33f2f60a75c6437f6a72488bc87ac7b2c060f2ab016669c297a812f2c8624d4f522906a7cff665f057bedb48f1e9a1dd3ae15e2d9442a2de8203d84edbe1ae68aee1d90a716dc47ee00bb110b88ae9a1ea039792aa7864f140ef8c1a15aaf5ebd6301d2c8a450e92364a6ff73513794151037a42d98deca37780d61b4843861112a37dabde7124d0aed40788dc584fe35daa42983344030d2842a4eaba33f271c81a29f65dc1300b1cacf74ffa24038333949e45d2bd5f4d8ac51e5e5a99ec9ec05e3c9ae6864c30cb70039d02e0ae3947e0b17dee7dc44fffa3fb34ca8ae2d72ad9c408d281df70bbebee519afac64cb60d04cbd782396a040ca0c9dd44dfc0acce59227dace500b0fdce27131813d0f7a808d854aa63be9a376dfb2b6d03c6e808aa6576eb3ad78f08d1bbc1951f2204651f1b81122c09502edc58916f980d41382cde0ed3f4c81bd67233d51671a3f8cf7ff3a3cb1b8a3fd719728485e873139eedf75d684a22193c40cb104d4e7e862b4c1d79519b9c5974ecd06451ccd6585c601e93d5b8a9603ba1536cfce92400e8916606a85338a5c0f46198277847da742558a3f5072c7802e2e6a0c1350e30a34271cee393d5de12207c78132ab5228ab91eb02348cd4bba30be182fd1403a716e33f390090846ff653af05487bdc13bfbc664b21d2713d1144265766b5c98c0148793de720dd950fc8f693dc41a1aa101c4e8c45998f4a65c2769428b1b04ecae8f86b0e8168b5470bb8e3f41fc1e267ca51095e25e2dc6453144d976668277d3016006dd316e2ee953f5c9cb1d440c8b7d6dc99e8ed9c900413d81c1d10346784537271e041c2d02029722e4a495efd9f5bae74a85fd8863e1ed4b38a8d30549ee5ec62ae1cb2c2e082e5e9da1a88dd31c14df42f25b34bddeba052e07b7b789f56136b33bad39897d341a659806d9f202d4cb26334357d0adeb81c8624b7107d0d107e7471c051cf79196ac0c3f4ecfcdb7dc76ca204d095590f1557bb99dcc93ac9dc7c04e21d679029e41e4e3b71c4ca41760b7dc4e8842924037e56704d32e0b68c04569b7bccf7658e83476c1b67148c3ea8ebad1a0f7b46cc0f8afb8e6d3824712e35e1304b7c056e04b7a40879516d2e0b4878ef1739b3d7988ddd0a46a23d4e5e20228fb0fbb26b0a0404780a6824077991c5d80844dbb16812a49d863ffa733a39b7992dd851c416ea05d69f5f21c28cf02eb55161aabf3dc4c9ec82e9f1da5e4bd6b838e4ef11120b17e6bbfda989ebae99ce7ef9d4d80a107c7a8552f41e99221378d4e4d53127040e49698c955ffcf111f6d5e94a6be5e6785cc95cdf056660b5dc95433d4f5dc01386964381b2a00835cd02d45df1533388c6b491f5278cf3e0d1e6da75cc7aed719bb6068644627fbf0754275ebc242cc751e23f5f7500577d1b0206a0b8711598d5c7724129438474b9e5c91ac6618d7b9338455dc99c8a0db4e180bde22e28369d697f6ca155d9d8ed21ce792971abde9737a2520db27b4edc8e1c723fb3ac4d897091c40fcf8b3166b60862782486154ce1484f54e50e919ede9c112d630222b0dc128583f2749f8a0fc1f1138455a4fedefa6da33b32372a7e3555ca81202c843d8c3827cd2ab029dc868c55894988480ccc6b8ca0ce8d3efddb9686ac4ae9245161ecdcfc25c2178cacf0f2516b7b829cdc0e75a1bfc14210581784a534d407b877c187554ee6e3fb7a06b7dc9e24b27c72b63fdf52cb264fe8be281bdc00ba880296145d404fcecd973d5647f66610e1d971ca0f361856da95ddb83c91bbf77f3ef1c2b945c487e9ca2336ed283605d2e7e0b59b13d64422ff33db8a667a687ea61cca7ba16aa31de096059db804ffc8334bd8a647f7407d4ba29767bd2da36189285d7b7763c2f5b21fe08633e9807a271dc8565b06fe6e1b86e5bf90a17c617d76f8308228910a156810a86e909ff8f083a3b9d3a4eb06153005cb385e1e404c2878fba4214e54321cfe585e2a73366ada8647efaa61259ef186698db192b020c3e51e66a69573d99cfea950d87f644bd51706a3ceffffee7117dc57320ae1be9e8b65c07512a3cb0745497f2156f1ba422fd32c072fd8ea8b28b2e474e0b0160c91de79213a2014c0b8488856960d7c112f4670b914a392d8545a463fcf9d77296ecb113cee4014f1b39ea4fe85545e3468336f1269db17097106f0aecc5954aa80bdd0d0e91880f0871f132d2f0a63dda9ce5c83418d83bd10f31f53cb065e87ae58654f4b67dbf7d6b43f0f0fe2b10e28b4f89275c9a67a91062f09b0f2bb50615cdb14ecc778e1f8732b33d9c1cf3703724e470a11b7f79648defc0a0f65a1e97d92b0c6a97f4ea1b1a9cf95c0a249daf43a80bf6ad661d0aa95e7ab050a6a9a11895650698807260c7edaa2db0f75b8f3a005752184f70000dc11b481e9dfd78ba63ddec1f0f1f56d815600f54f61d9cd9ceae3580985886576035ee339d21f4a8355d3a6553004724b3c71ad1b92ad606bb82f05b6ab6d0321bca7f7ea590d55088845c1948529cfd5d8dcababeccb2e9c535d3657a9a6f862bca6fd25e589a71a530de3d1cee60f2ba31b4f0f8479e3890710d1c6a90c531fcdb521a0883aea0e1b40e8bad9f50769303594781886e470cc29d14584247870368e3ee483b76e89707c3fecdd57b93c34dca8e370eb75331f47ec0b546c5efd93a28fde89a2b4dcf154eab7cd855e4ddec43d4b4e583164e33e025c16a65edf5d211ee90fb55257fd76718ac6f804942651c222d2c0f52887c47be07db6b6bdfb4c2041f7b63b1c310f8a99a5af6ea16c0aa5158d99ab308133f3f1f6bd3dcb9fa64d2db85d8deeeb4f157507dde69fe939b9bdc02a0ef4f48b6297dba99233ddeca27100a11406f12bf892b544cdeb9110f3dcf16fb12408882432ac6180f1d0ba8b4a27528b93af07283dace32619b9ae614f45b8b5be4a2be86f0a81ca840c53315b9162f314b32735928ee194a9b5cb2142cfceab9322cee3b11f344b4728ddbccde6d398215f0c4ed2f912c966f58adc634cb72670f34b93496dd45868088e3143742ecc461c37c8dc82637f8c1cae166d78480f382e7ed8a7d8c0a4a218e512b4f9a6bd70b04b09fa32dae55ddf3fe21d01b4ade4cdb71cec1bcd270e55190d12942fac0a155f4d5de8f0d1ea97cd0b67556a04722652c7722fee7e6aab7b70570f0b3c6c073ab332a3a866fd5160489708ac880eae46158745a273ce4afe342457d1a365555e0379cde8286cd6a8ec2829f451197c12b0ff92b610df90230ac3a48d05ef02ca79163819e2e702d609fd13e4ff76770710adc612692968acd8436e904c1b91f08128737ccd0705b97ec40901ceab33c8ede10f82134141bda58a5024d733e8e46378eadf0a2413c479a989056ffb7e9553e889f175861df2b0b1fcf3d1898ed72d622f6d0ffb83478dc5cd57a7c366fe0e61e8d5834d314e4e9ea862562a790729b2ace029d4e7bd6d3b3bde1779aa81809e2eab4b1bec1e1475d4604e2e610da3fa33c4f95beafdfc7e0e0952cb41f15a91ca37ee759d17ab851a0a36f5d7111a95077e3c5d2ee8b6beaf30601faa0996c9e90287b41e6049484c5b0485751fc0dc8f4a469a101d2106f54cfa3b39d14e812074a623a906fad3ee6500922906bc669f01578cea4538886d5fbd9722f6cc7fd365e5828d5ff3c24a91d3dac59c8c188bacb24263225a986d6d95309704885cd205a0aaf3a82a7f752d08bfd73c6b9335cd7db462458aa6ea0148dfbc0d271fda6bd0eaee9f1e90fc14991f0296d300dba00b3f247f31f66ab2a22ba5674637f3f9e10c5eb4a32f28b07c6afaac808d537d8f390862910e5d43f588e95cc848f6e82742a2947b441ed3ff7685e96489a0f81240a6b881512cfae14179f44701de8c3d01ea1c3160acda5f7ef30adddcf549c40b13a38523dd29426574afb8e355ac10553241ada0556cb1106ab403c9a4ce6066e4008d5b0cfa4fd24c91fbdca9a6589ba32d3fb536a1470f8a773f3772026f3df0b46e504de2e736e4f088dc551d6c02f85a9c378399bbb4c1d63970183a5336e2d5e70c6ed2907210db13c1caff6afd40a756a27a10d2ea9eaa7e46450a728753efd04463c63684d2883bfe59469d0dd76d193f23fff04b9a35235f29bd42e3b0e88", 0x1000, 0x83d, 0x2}], 0xa0000) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000004) (async) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r4, 0x84, 0x19, &(0x7f00000043c0)={0x0, 0x2}, 0x8) kernel console output (not intermixed with test programs): 147620][ T3919] netlink: 12 bytes leftover after parsing attributes in process `syz.1.120'. [ 34.184026][ T3926] loop3: detected capacity change from 0 to 512 [ 34.193717][ T3926] EXT4-fs: Ignoring removed bh option [ 34.205046][ T3926] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 34.213386][ T29] audit: type=1400 audit(1768773200.564:377): avc: denied { name_bind } for pid=3927 comm="syz.1.124" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 34.224772][ T3926] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.123: invalid indirect mapped block 256 (level 2) [ 34.235493][ T29] audit: type=1400 audit(1768773200.574:378): avc: denied { bind } for pid=3927 comm="syz.1.124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 34.235516][ T29] audit: type=1400 audit(1768773200.574:379): avc: denied { write } for pid=3927 comm="syz.1.124" path="socket:[5555]" dev="sockfs" ino=5555 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 34.250665][ T3926] EXT4-fs (loop3): 2 truncates cleaned up [ 34.269702][ T29] audit: type=1326 audit(1768773200.634:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3881 comm="syz.4.111" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3687f9acb9 code=0x0 [ 34.322258][ T3926] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.344484][ T29] audit: type=1400 audit(1768773200.704:381): avc: denied { write } for pid=3925 comm="syz.3.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 34.365750][ T29] audit: type=1400 audit(1768773200.724:382): avc: denied { connect } for pid=3925 comm="syz.3.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 34.397830][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.415320][ T3936] netlink: 'syz.1.125': attribute type 49 has an invalid length. [ 34.455416][ T3935] netlink: 'syz.1.125': attribute type 49 has an invalid length. [ 34.468723][ T29] audit: type=1400 audit(1768773200.834:383): avc: denied { create } for pid=3937 comm="syz.3.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 34.541980][ T3945] macvtap0: entered promiscuous mode [ 34.547347][ T3945] macvtap0: entered allmulticast mode [ 34.552856][ T3945] veth1_vlan: entered allmulticast mode [ 34.563721][ T3947] tipc: Started in network mode [ 34.568615][ T3947] tipc: Node identity 84e, cluster identity 4711 [ 34.575063][ T3947] tipc: Node number set to 2126 [ 34.583697][ T3329] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.604301][ T3952] loop4: detected capacity change from 0 to 1024 [ 34.613607][ T3952] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.132: Failed to acquire dquot type 0 [ 34.625919][ T3952] EXT4-fs error (device loop4): mb_free_blocks:2037: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 34.641851][ T3952] EXT4-fs (loop4): 1 truncate cleaned up [ 34.648439][ T3952] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.706697][ T3329] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.892944][ T3983] x_tables: duplicate underflow at hook 3 [ 34.903755][ T3983] netlink: 52 bytes leftover after parsing attributes in process `syz.4.143'. [ 34.926382][ T3987] loop1: detected capacity change from 0 to 128 [ 34.933347][ T3983] netlink: 52 bytes leftover after parsing attributes in process `syz.4.143'. [ 34.955463][ T3987] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 34.969688][ T3987] ext4 filesystem being mounted at /39/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 35.032546][ T3987] EXT4-fs (loop1): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09 ro. [ 35.032965][ T3995] loop4: detected capacity change from 0 to 256 [ 35.048701][ T3995] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 35.093420][ T3997] loop2: detected capacity change from 0 to 512 [ 35.100087][ T3321] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 35.109725][ T3997] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (35007!=33349) [ 35.122204][ T3997] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e01c, mo2=0002] [ 35.145296][ T3997] EXT4-fs (loop2): orphan cleanup on readonly fs [ 35.151760][ T3997] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.146: bad orphan inode 267 [ 35.162826][ T3997] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 35.186320][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 35.195497][ T4008] loop4: detected capacity change from 0 to 1024 [ 35.205024][ T4010] EXT4-fs: Ignoring removed i_version option [ 35.205024][ T4008] EXT4-fs: Ignoring removed orlov option [ 35.205062][ T4010] EXT4-fs: Ignoring removed nobh option [ 35.216885][ T4008] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 35.232308][ T4010] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 35.252372][ T4012] EXT4-fs: Ignoring removed bh option [ 35.258969][ T4010] EXT4-fs (loop1): 1 truncate cleaned up [ 35.265347][ T4010] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.281764][ T4012] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.283509][ T4010] sctp: [Deprecated]: syz.1.151 (pid 4010) Use of struct sctp_assoc_value in delayed_ack socket option. [ 35.283509][ T4010] Use struct sctp_sack_info instead [ 35.294670][ T4008] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.324859][ T4012] netlink: 132 bytes leftover after parsing attributes in process `syz.2.152'. [ 35.344279][ T3329] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.344490][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.532144][ T4027] syz.2.155: attempt to access beyond end of device [ 35.532144][ T4027] loop2: rw=2049, sector=138, nr_sectors = 68 limit=128 [ 35.785211][ T4036] msdos: Bad value for 'gid' [ 35.789894][ T4036] msdos: Bad value for 'gid' [ 35.805215][ T4036] EXT4-fs: Ignoring removed nomblk_io_submit option [ 35.822901][ T4036] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.846060][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.864199][ T4040] netlink: 160 bytes leftover after parsing attributes in process `syz.2.158'. [ 35.925958][ T4046] tls_set_device_offload_rx: netdev not found [ 35.935504][ T4046] EXT4-fs: Ignoring removed nomblk_io_submit option [ 35.942841][ T4046] EXT4-fs: Mount option(s) incompatible with ext3 [ 36.005311][ T4053] IPVS: sync thread started: state = BACKUP, mcast_ifn = ipvlan0, syncid = 1, id = 0 [ 36.092976][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.192132][ T4059] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.223420][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.292901][ T4069] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.307802][ T4069] ext4 filesystem being mounted at /38/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.331420][ T3329] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.343856][ T4074] netlink: 160 bytes leftover after parsing attributes in process `syz.1.170'. [ 36.431821][ T4085] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.446274][ T3839] IPVS: starting estimator thread 0... [ 36.474416][ T3329] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.538843][ T4102] tipc: Started in network mode [ 36.543763][ T4102] tipc: Node identity 84e, cluster identity 4711 [ 36.550124][ T4102] tipc: Node number set to 2126 [ 36.550419][ T4090] IPVS: using max 2592 ests per chain, 129600 per kthread [ 36.682111][ T4111] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.694749][ T4111] ext4 filesystem being mounted at /46/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.713266][ T3329] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.733629][ T4115] tipc: Enabled bearer , priority 0 [ 36.740668][ T4115] syzkaller0: entered promiscuous mode [ 36.746206][ T4115] syzkaller0: entered allmulticast mode [ 36.755423][ T4115] tipc: Resetting bearer [ 37.279027][ T4128] syz.2.188: attempt to access beyond end of device [ 37.279027][ T4128] loop2: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 37.292569][ T4128] syz.2.188: attempt to access beyond end of device [ 37.292569][ T4128] loop2: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 37.305969][ T4128] syz.2.188: attempt to access beyond end of device [ 37.305969][ T4128] loop2: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 37.319330][ T4128] syz.2.188: attempt to access beyond end of device [ 37.319330][ T4128] loop2: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 37.333144][ T4128] syz.2.188: attempt to access beyond end of device [ 37.333144][ T4128] loop2: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 37.346889][ T4128] syz.2.188: attempt to access beyond end of device [ 37.346889][ T4128] loop2: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 37.360401][ T4128] syz.2.188: attempt to access beyond end of device [ 37.360401][ T4128] loop2: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 37.475846][ T4136] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 37.493359][ T4136] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.506391][ T4136] ext4 filesystem being mounted at /15/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 37.562156][ T4114] tipc: Resetting bearer [ 37.569273][ T4114] tipc: Disabling bearer [ 37.583209][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.681806][ T4154] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.705669][ T4154] ext4 filesystem being mounted at /49/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.758259][ T3329] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.830231][ T4164] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 37.861327][ T4164] EXT4-fs (loop1): orphan cleanup on readonly fs [ 37.868282][ T4164] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:517: comm syz.1.198: Block bitmap for bg 0 marked uninitialized [ 37.883672][ T4169] netlink: 'syz.0.199': attribute type 10 has an invalid length. [ 37.929875][ T4164] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 37.941737][ T4180] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 37.971908][ T4164] EXT4-fs (loop1): 1 orphan inode deleted [ 37.978377][ T4164] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 38.127606][ T4190] netlink: 'syz.0.205': attribute type 13 has an invalid length. [ 38.138990][ T4190] gretap0: refused to change device tx_queue_len [ 38.146081][ T4190] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 38.169648][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.170287][ T4193] iso9660: Unknown parameter 'overriderockper}' [ 38.294696][ T4207] set_capacity_and_notify: 19 callbacks suppressed [ 38.294714][ T4207] loop2: detected capacity change from 0 to 1024 [ 38.309922][ T4207] ext2: Unknown parameter 'uid>00000000000000000000' [ 38.375897][ T4217] loop0: detected capacity change from 0 to 512 [ 38.402630][ T4217] EXT4-fs (loop0): 1 orphan inode deleted [ 38.408947][ T4217] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.450837][ T4222] loop1: detected capacity change from 0 to 512 [ 38.457663][ T4222] EXT4-fs: Ignoring removed oldalloc option [ 38.472304][ T4222] EXT4-fs error (device loop1): ext4_xattr_inode_iget:437: comm syz.1.213: Parent and EA inode have the same ino 15 [ 38.495050][ T4222] EXT4-fs (loop1): 1 orphan inode deleted [ 38.504047][ T3325] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.510914][ T4222] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.550717][ T3733] hid-generic 0103:0004:0000.0001: unknown main item tag 0x0 [ 38.558158][ T3733] hid-generic 0103:0004:0000.0001: unknown main item tag 0x0 [ 38.565594][ T3733] hid-generic 0103:0004:0000.0001: unknown main item tag 0x0 [ 38.573101][ T3733] hid-generic 0103:0004:0000.0001: unknown main item tag 0x0 [ 38.580552][ T3733] hid-generic 0103:0004:0000.0001: unknown main item tag 0x0 [ 38.588015][ T3733] hid-generic 0103:0004:0000.0001: unknown main item tag 0x0 [ 38.595419][ T3733] hid-generic 0103:0004:0000.0001: unknown main item tag 0x0 [ 38.602811][ T3733] hid-generic 0103:0004:0000.0001: unknown main item tag 0x0 [ 38.610191][ T3733] hid-generic 0103:0004:0000.0001: unknown main item tag 0x0 [ 38.617706][ T3733] hid-generic 0103:0004:0000.0001: unknown main item tag 0x0 [ 38.638964][ T4234] __nla_validate_parse: 1 callbacks suppressed [ 38.638981][ T4234] netlink: 8 bytes leftover after parsing attributes in process `syz.0.215'. [ 38.654208][ T4234] netlink: 8 bytes leftover after parsing attributes in process `syz.0.215'. [ 38.663130][ T4234] netlink: 8 bytes leftover after parsing attributes in process `syz.0.215'. [ 38.681414][ T4235] xt_HMARK: spi-set and port-set can't be combined [ 38.692443][ T3733] hid-generic 0103:0004:0000.0001: hidraw0: HID v0.02 Device [syz0] on syz1 [ 38.705964][ T4231] netlink: 80 bytes leftover after parsing attributes in process `syz.2.217'. [ 38.777373][ T4237] fido_id[4237]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 38.801860][ T3490] IPVS: starting estimator thread 0... [ 38.822390][ T29] kauditd_printk_skb: 191 callbacks suppressed [ 38.822421][ T29] audit: type=1400 audit(2000000000.840:573): avc: denied { ioctl } for pid=4246 comm="syz.3.221" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 38.895229][ T29] audit: type=1400 audit(2000000000.910:574): avc: denied { create } for pid=4251 comm="syz.4.223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 38.930567][ T4245] IPVS: using max 2256 ests per chain, 112800 per kthread [ 39.058296][ T4267] netlink: 'syz.3.227': attribute type 1 has an invalid length. [ 39.094395][ T4267] 8021q: adding VLAN 0 to HW filter on device bond1 [ 39.102824][ T4271] loop0: detected capacity change from 0 to 1024 [ 39.109653][ T4271] journal_path: Non-blockdev passed as './file0' [ 39.116046][ T4271] EXT4-fs: error: could not find journal device path [ 39.158412][ T4267] netlink: 28 bytes leftover after parsing attributes in process `syz.3.227'. [ 39.165489][ T4271] netlink: 4268 bytes leftover after parsing attributes in process `syz.0.228'. [ 39.215807][ T4271] netlink: 4268 bytes leftover after parsing attributes in process `syz.0.228'. [ 39.230364][ T29] audit: type=1400 audit(2000000257.239:575): avc: denied { ioctl } for pid=4270 comm="syz.0.228" path="socket:[7277]" dev="sockfs" ino=7277 ioctlcmd=0xb100 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 39.234312][ T4281] IPVS: sync thread started: state = MASTER, mcast_ifn = macvlan0, syncid = 0, id = 0 [ 39.271157][ T4283] loop3: detected capacity change from 0 to 1024 [ 39.310714][ T4283] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.324162][ T29] audit: type=1400 audit(2000000257.339:576): avc: denied { remove_name } for pid=4277 comm="syz.3.230" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 39.324389][ T4283] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #11: comm syz.3.230: missing EA_INODE flag [ 39.349865][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.359317][ T4283] EXT4-fs (loop3): Remounting filesystem read-only [ 39.374703][ T29] audit: type=1400 audit(2000000257.339:577): avc: denied { rename } for pid=4277 comm="syz.3.230" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 39.396843][ T29] audit: type=1400 audit(2000000257.339:578): avc: denied { add_name } for pid=4277 comm="syz.3.230" name="file2" dev="loop3" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 39.467895][ T4294] netlink: 12 bytes leftover after parsing attributes in process `syz.1.232'. [ 39.539402][ T4302] loop1: detected capacity change from 0 to 128 [ 39.626081][ T4302] loop1: detected capacity change from 0 to 8192 [ 39.757677][ T4317] loop1: detected capacity change from 0 to 1024 [ 39.768249][ T4317] EXT4-fs: Ignoring removed orlov option [ 39.825624][ T4317] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.861860][ T29] audit: type=1400 audit(2000000257.879:579): avc: denied { read } for pid=4316 comm="syz.1.234" name="usbmon3" dev="devtmpfs" ino=151 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 39.905562][ T4317] netlink: 67 bytes leftover after parsing attributes in process `syz.1.234'. [ 39.953342][ T4339] loop4: detected capacity change from 0 to 512 [ 40.065386][ T4339] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #16: comm syz.4.236: corrupted inode contents [ 40.080446][ T4376] netlink: 24 bytes leftover after parsing attributes in process `syz.2.238'. [ 40.098188][ T29] audit: type=1400 audit(2000000257.989:580): avc: denied { create } for pid=4367 comm="syz.0.237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 40.117490][ T29] audit: type=1400 audit(2000000258.009:581): avc: denied { read } for pid=4367 comm="syz.0.237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 40.139000][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.140195][ T4339] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #16: comm syz.4.236: mark_inode_dirty error [ 40.159632][ T4339] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #16: comm syz.4.236: corrupted inode contents [ 40.160357][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.180589][ T4339] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #16: comm syz.4.236: mark_inode_dirty error [ 40.180762][ T4339] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #16: comm syz.4.236: corrupted inode contents [ 40.225041][ T4339] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 40.239448][ T4389] loop0: detected capacity change from 0 to 512 [ 40.246783][ T4339] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #16: comm syz.4.236: corrupted inode contents [ 40.262309][ T4339] EXT4-fs error (device loop4): ext4_truncate:4635: inode #16: comm syz.4.236: mark_inode_dirty error [ 40.276068][ T4389] EXT4-fs (loop0): 1 orphan inode deleted [ 40.282711][ T4389] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.311530][ T4339] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 40.312327][ T4391] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 40.339592][ T4391] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.390834][ T4339] EXT4-fs (loop4): 1 truncate cleaned up [ 40.397106][ T4339] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.428267][ T112] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 40.438162][ T112] EXT4-fs error (device loop4): ext4_release_dquot:7022: comm kworker/u8:4: Failed to release dquot type 1 [ 40.461279][ T4339] ext4 filesystem being mounted at /57/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.496873][ T3325] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.507873][ T3320] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 40.559370][ T4404] tipc: Started in network mode [ 40.564300][ T4404] tipc: Node identity 84e, cluster identity 4711 [ 40.570646][ T4404] tipc: Node number set to 2126 [ 40.668829][ T3329] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.765858][ T4414] 8021q: adding VLAN 0 to HW filter on device bond1 [ 40.775793][ T4419] netlink: 'syz.0.254': attribute type 14 has an invalid length. [ 40.783787][ T4419] netlink: 'syz.0.254': attribute type 12 has an invalid length. [ 40.873694][ T4422] netlink: 'syz.4.255': attribute type 1 has an invalid length. [ 40.905875][ T4422] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 40.961204][ T4412] SELinux: failed to load policy [ 40.970335][ T4437] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 40.982434][ T4437] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002] [ 40.992317][ T4437] EXT4-fs (loop0): orphan cleanup on readonly fs [ 40.998805][ T4437] EXT4-fs warning (device loop0): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 41.013486][ T4437] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 41.015001][ T4441] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 41.030753][ T4437] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.259: bg 0: block 40: padding at end of block bitmap is not set [ 41.051720][ T4437] EXT4-fs (loop0): Remounting filesystem read-only [ 41.061929][ T4434] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.070529][ T4437] EXT4-fs (loop0): 1 truncate cleaned up [ 41.075074][ T4434] ext4 filesystem being mounted at /65/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.134238][ T4437] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 41.156028][ T4446] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 41.164326][ T3325] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.179382][ T4446] EXT4-fs (loop2): orphan cleanup on readonly fs [ 41.192479][ T4446] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #16: comm syz.2.261: corrupted inode contents [ 41.209661][ T4451] batman_adv: batadv0: Adding interface: ipvlan2 [ 41.216118][ T4451] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 41.241601][ T4451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.252775][ T4451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.267841][ T4446] EXT4-fs (loop2): Remounting filesystem read-only [ 41.268795][ T4451] batman_adv: batadv0: Interface activated: ipvlan2 [ 41.290264][ T4446] EXT4-fs (loop2): 1 truncate cleaned up [ 41.296762][ T2460] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 41.307415][ T2460] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 41.335119][ T2460] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 41.348266][ T4446] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 41.368563][ T4460] kernel profiling enabled (shift: 63) [ 41.374102][ T4460] profiling shift: 63 too large [ 41.376903][ T4462] netlink: 'syz.4.267': attribute type 1 has an invalid length. [ 41.402882][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.508909][ T4475] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 41.538727][ T4464] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 2074) [ 41.547587][ T4464] FAT-fs (loop4): Filesystem has been set read-only [ 41.577728][ T4464] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4464 comm=syz.4.269 [ 41.858262][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.919585][ T4506] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 41.956068][ T4506] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 41.986585][ T4506] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 42.043635][ T4506] batman_adv: batadv0: Removing interface: ipvlan2 [ 42.062558][ T4506] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 42.218812][ T4515] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 42.245790][ T4529] netlink: 'syz.4.290': attribute type 3 has an invalid length. [ 42.253501][ T4529] netlink: 'syz.4.290': attribute type 3 has an invalid length. [ 42.293722][ T4531] EXT4-fs: Ignoring removed orlov option [ 42.351877][ T4531] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.365736][ T4515] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 42.407169][ T4531] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.419156][ T4515] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 406 with error 28 [ 42.431643][ T4515] EXT4-fs (loop0): This should not happen!! Data will be lost [ 42.431643][ T4515] [ 42.441493][ T4515] EXT4-fs (loop0): Total free blocks count 0 [ 42.447522][ T4515] EXT4-fs (loop0): Free/Dirty block details [ 42.453536][ T4515] EXT4-fs (loop0): free_blocks=2415919104 [ 42.459357][ T4515] EXT4-fs (loop0): dirty_blocks=416 [ 42.464725][ T4515] EXT4-fs (loop0): Block reservation details [ 42.470748][ T4515] EXT4-fs (loop0): i_reserved_data_blocks=26 [ 42.493477][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.504783][ T112] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 46 with error 28 [ 42.556537][ T4538] EXT4-fs (loop4): 1 orphan inode deleted [ 42.563154][ T4538] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.644839][ T4551] EXT4-fs: Ignoring removed bh option [ 42.749181][ T4557] ext4: Bad value for 'resgid' [ 42.754049][ T4557] ext4: Bad value for 'resgid' [ 42.768156][ T3329] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.785000][ T4551] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.847712][ T4551] ext4 filesystem being mounted at /32/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.863779][ T4551] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.297: bg 0: block 345: padding at end of block bitmap is not set [ 42.889039][ T4561] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 42.901507][ T4561] ext4 filesystem being mounted at /72/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 42.912096][ T4551] EXT4-fs (loop3): Remounting filesystem read-only [ 42.958401][ T3320] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 42.971874][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.056790][ T4583] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 43.067853][ T4583] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 43.107106][ T4583] EXT4-fs (loop4): invalid journal inode [ 43.161008][ T4580] EXT4-fs (loop3): too many log groups per flexible block group [ 43.169865][ T4580] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 43.194646][ T4580] EXT4-fs (loop3): mount failed [ 43.575219][ T4614] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 44.000687][ T29] kauditd_printk_skb: 111 callbacks suppressed [ 44.000702][ T29] audit: type=1326 audit(2000000262.019:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4637 comm="syz.4.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f3687f9acb9 code=0x7ffc0000 [ 44.092660][ T4647] SELinux: policydb table sizes (8,0) do not match mine (8,7) [ 44.109326][ T4647] SELinux: failed to load policy [ 44.116081][ T29] audit: type=1400 audit(2000000262.129:687): avc: denied { getopt } for pid=4646 comm="syz.4.324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 44.143862][ T4656] set_capacity_and_notify: 17 callbacks suppressed [ 44.143878][ T4656] loop1: detected capacity change from 0 to 1024 [ 44.172617][ T4660] loop0: detected capacity change from 0 to 1024 [ 44.182056][ T4656] Quota error (device loop1): do_check_range: Getting block 64 out of range 1-5 [ 44.191188][ T4656] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 44.200686][ T4656] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.326: Failed to acquire dquot type 0 [ 44.215670][ T29] audit: type=1400 audit(2000000262.179:688): avc: denied { read } for pid=4657 comm="syz.3.327" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 44.239422][ T4656] EXT4-fs error (device loop1): mb_free_blocks:2037: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 44.254578][ T4656] EXT4-fs (loop1): 1 truncate cleaned up [ 44.260832][ T4656] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.280982][ T4660] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.330633][ T4674] __nla_validate_parse: 45 callbacks suppressed [ 44.330647][ T4674] netlink: 8 bytes leftover after parsing attributes in process `syz.4.332'. [ 44.345854][ T4656] Quota error (device loop1): do_check_range: Getting block 64 out of range 1-5 [ 44.354950][ T4656] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 44.364372][ T4656] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.326: Failed to acquire dquot type 0 [ 44.406864][ T29] audit: type=1400 audit(2000000262.409:689): avc: denied { mounton } for pid=4659 comm="syz.0.328" path="/55/file1/file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 44.430042][ T29] audit: type=1400 audit(2000000262.409:690): avc: denied { map } for pid=4659 comm="syz.0.328" path="/55/file1/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 44.452847][ T29] audit: type=1400 audit(2000000262.419:691): avc: denied { bind } for pid=4679 comm="syz.2.334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 44.513963][ T4683] mmap: syz.1.326 (4683) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 44.606340][ T4656] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.326: Failed to acquire dquot type 0 [ 44.744354][ T3325] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.808544][ T4696] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 44.815109][ T4696] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 44.822778][ T4696] vhci_hcd vhci_hcd.0: Device attached [ 44.830137][ T4697] vhci_hcd: connection closed [ 44.838682][ T49] vhci_hcd vhci_hcd.0: stop threads [ 44.848648][ T49] vhci_hcd vhci_hcd.0: release socket [ 44.854050][ T49] vhci_hcd vhci_hcd.0: disconnect device [ 44.861458][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.898618][ T4703] loop2: detected capacity change from 0 to 128 [ 44.909411][ T4703] /dev/loop2: Can't open blockdev [ 45.014223][ T4715] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4715 comm=syz.4.345 [ 45.353869][ T4730] loop0: detected capacity change from 0 to 128 [ 45.361212][ T4730] vfat: Bad value for 'errors' [ 45.410744][ T4732] netlink: 12 bytes leftover after parsing attributes in process `syz.1.352'. [ 45.427757][ T4739] atomic_op ffff88811bd85128 conn xmit_atomic 0000000000000000 [ 45.455810][ T4743] netlink: 160 bytes leftover after parsing attributes in process `syz.3.355'. [ 45.470140][ T4745] ip6erspan0: entered promiscuous mode [ 45.514463][ T4755] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4755 comm=syz.3.359 [ 45.575049][ T4761] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.643753][ T4761] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.672629][ T4759] loop1: detected capacity change from 0 to 8192 [ 45.703595][ T4761] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.720656][ T3301] loop1: p1 p2[DM] p4 [ 45.724897][ T3301] loop1: p1 size 196608 extends beyond EOD, truncated [ 45.735375][ T3301] loop1: p2 start 4292936063 is beyond EOD, truncated [ 45.742261][ T3301] loop1: p4 size 50331648 extends beyond EOD, truncated [ 45.757477][ T4759] loop1: p1 p2[DM] p4 [ 45.767326][ T4761] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.769937][ T4759] loop1: p1 size 196608 extends beyond EOD, truncated [ 45.789089][ T4759] loop1: p2 start 4292936063 is beyond EOD, truncated [ 45.789937][ T4773] netlink: 188 bytes leftover after parsing attributes in process `syz.2.363'. [ 45.795971][ T4759] loop1: p4 size 50331648 extends beyond EOD, truncated [ 45.837395][ T4759] IPv6: NLM_F_CREATE should be specified when creating new route [ 45.877082][ T42] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.895257][ T42] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.919834][ T4783] loop2: detected capacity change from 0 to 512 [ 45.942506][ T4788] loop4: detected capacity change from 0 to 512 [ 45.943593][ T4789] netlink: 160 bytes leftover after parsing attributes in process `syz.3.368'. [ 45.950490][ T4787] loop1: detected capacity change from 0 to 512 [ 45.964167][ T42] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.978030][ T4788] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (35007!=33349) [ 45.983336][ T4792] loop3: detected capacity change from 0 to 164 [ 45.988040][ T42] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.002817][ T4787] EXT4-fs: Ignoring removed mblk_io_submit option [ 46.009310][ T4787] ext4: Bad value for 'max_batch_time' [ 46.010153][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 46.016220][ T4783] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.037586][ T4788] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e842e02c, mo2=0002] [ 46.041691][ T3312] udevd[3312]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 46.046385][ T4788] System zones: 1-12 [ 46.057651][ T4783] ext4 filesystem being mounted at /83/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.061938][ T4788] EXT4-fs (loop4): orphan cleanup on readonly fs [ 46.075953][ T4788] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.369: bad orphan inode 267 [ 46.087057][ T4788] EXT4-fs (loop4): Remounting filesystem read-only [ 46.093913][ T4788] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 46.129321][ T3329] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 46.214564][ T4818] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 46.232026][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.305594][ T4826] 9p: Bad value for 'rfdno' [ 46.351389][ T4831] loop1: detected capacity change from 0 to 1024 [ 46.360532][ T4831] EXT4-fs: inline encryption not supported [ 46.379403][ T4831] EXT4-fs: Ignoring removed bh option [ 46.439370][ T4831] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 46.461082][ T4831] EXT4-fs (loop1): orphan cleanup on readonly fs [ 46.471262][ T4831] EXT4-fs error (device loop1): ext4_quota_enable:7177: comm syz.1.381: inode #2304: comm syz.1.381: iget: illegal inode # [ 46.490987][ T4831] EXT4-fs (loop1): Remounting filesystem read-only [ 46.497560][ T4831] EXT4-fs warning (device loop1): ext4_enable_quotas:7221: Failed to enable quota tracking (type=2, err=-117, ino=2304). Please run e2fsck to fix. [ 46.512635][ T4831] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 46.519819][ T4831] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 46.545750][ T4860] netlink: 'syz.2.384': attribute type 2 has an invalid length. [ 46.565524][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.596269][ T4862] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.668349][ T4862] ext4 filesystem being mounted at /61/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.696649][ T4883] EXT4-fs: inline encryption not supported [ 46.762112][ T4883] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.778756][ T4883] EXT4-fs error (device loop1): mb_free_blocks:2037: group 0, inode 15: block 225:freeing already freed block (bit 14); block bitmap corrupt. [ 46.838008][ T3325] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.870634][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.880306][ T4898] rock: directory entry would overflow storage [ 46.886498][ T4898] rock: sig=0x5245, size=8, remaining=5 [ 46.918118][ T4906] netlink: 16 bytes leftover after parsing attributes in process `syz.1.401'. [ 46.927159][ T4906] netlink: 4 bytes leftover after parsing attributes in process `syz.1.401'. [ 46.982222][ T4898] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 46.994397][ T4913] netlink: 4 bytes leftover after parsing attributes in process `syz.1.401'. [ 47.202769][ T4927] EXT4-fs: Mount option(s) incompatible with ext2 [ 47.345135][ T4933] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.355874][ T4933] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.668683][ T4940] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.690720][ T4940] ext4 filesystem being mounted at /60/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.718799][ T4945] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 47.727195][ T4945] EXT4-fs (loop2): orphan cleanup on readonly fs [ 47.734122][ T4945] EXT4-fs error (device loop2): ext4_quota_enable:7173: comm syz.2.410: Bad quota inum: 8, type: 2 [ 47.734914][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.753955][ T4945] EXT4-fs warning (device loop2): ext4_enable_quotas:7221: Failed to enable quota tracking (type=2, err=-117, ino=8). Please run e2fsck to fix. [ 47.769303][ T4945] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 47.788321][ T4945] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 47.952892][ T4964] EXT4-fs: Ignoring removed i_version option [ 47.959075][ T4964] EXT4-fs: Ignoring removed nobh option [ 47.977573][ T4964] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 47.988626][ T4970] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 47.997533][ T4964] EXT4-fs (loop3): 1 truncate cleaned up [ 48.006066][ T4970] EXT4-fs (loop4): orphan cleanup on readonly fs [ 48.012787][ T4970] EXT4-fs warning (device loop4): ext4_enable_quotas:7221: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 48.033494][ T4974] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.421'. [ 48.100783][ T4970] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 48.111216][ T4970] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #13: comm syz.4.420: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 48.205144][ T4970] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.420: couldn't read orphan inode 13 (err -117) [ 48.243994][ T4994] netlink: 160 bytes leftover after parsing attributes in process `syz.1.431'. [ 48.650394][ T5015] netlink: 'syz.3.437': attribute type 39 has an invalid length. [ 48.829854][ T5021] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5021 comm=syz.4.439 [ 48.853405][ T5035] IPVS: sync thread started: state = MASTER, mcast_ifn = macvlan0, syncid = 0, id = 0 [ 48.875849][ T5037] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 48.941228][ T5037] ext4 filesystem being mounted at /94/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.017392][ T5037] __quota_error: 180 callbacks suppressed [ 49.017408][ T5037] Quota error (device loop2): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 49.039717][ T29] audit: type=1400 audit(2000000267.049:870): avc: denied { tracepoint } for pid=5050 comm="syz.4.449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 49.074423][ T5037] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 49.091188][ T5057] netlink: 'syz.1.448': attribute type 1 has an invalid length. [ 49.129177][ T5037] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.444: Failed to acquire dquot type 0 [ 49.145321][ T29] audit: type=1400 audit(2000000267.159:871): avc: denied { create } for pid=5066 comm="syz.0.451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 49.186675][ T29] audit: type=1400 audit(2000000267.179:872): avc: denied { setopt } for pid=5066 comm="syz.0.451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 49.206184][ T29] audit: type=1400 audit(2000000267.199:873): avc: denied { mount } for pid=5068 comm="syz.1.452" name="/" dev="ramfs" ino=9688 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 49.292804][ T5076] set_capacity_and_notify: 11 callbacks suppressed [ 49.292897][ T5076] loop2: detected capacity change from 0 to 512 [ 49.307905][ T5051] ref_ctr increment failed for inode: 0x241 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff88810005a1c0 [ 49.324265][ T5076] EXT4-fs: Ignoring removed bh option [ 49.328287][ T29] audit: type=1400 audit(2000000267.249:874): avc: denied { unmount } for pid=3320 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 49.349219][ T29] audit: type=1400 audit(2000000267.249:876): avc: denied { relabelfrom } for pid=5066 comm="syz.0.451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 49.368884][ T29] audit: type=1400 audit(2000000267.249:877): avc: denied { relabelto } for pid=5066 comm="syz.0.451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 49.388552][ T29] audit: type=1400 audit(2000000267.249:875): avc: denied { write } for pid=5068 comm="syz.1.452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 49.402535][ T5076] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 49.451375][ T5076] EXT4-fs (loop2): 1 truncate cleaned up [ 49.466353][ T5084] loop1: detected capacity change from 0 to 512 [ 49.467100][ T5076] EXT4-fs warning (device loop2): verify_group_input:137: Cannot add at group 25 (only 1 groups) [ 49.488561][ T5084] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 49.496945][ T5084] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 49.499616][ T5081] loop3: detected capacity change from 0 to 8192 [ 49.543876][ T5084] EXT4-fs (loop1): 1 truncate cleaned up [ 49.554416][ T5084] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 49.562677][ T3312] loop3: p1 < > p2 < > p3 p4 < > [ 49.567856][ T3312] loop3: partition table partially beyond EOD, truncated [ 49.580544][ T3312] loop3: p1 start 67108864 is beyond EOD, truncated [ 49.587329][ T5084] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 49.605464][ T3312] loop3: p3 start 100859904 is beyond EOD, truncated [ 49.605651][ T5050] uprobe: syz.4.449:5050 failed to unregister, leaking uprobe [ 49.622089][ T5090] __nla_validate_parse: 38 callbacks suppressed [ 49.622107][ T5090] netlink: 75 bytes leftover after parsing attributes in process `syz.2.458'. [ 49.638535][ T5081] loop3: p1 < > p2 < > p3 p4 < > [ 49.643610][ T5081] loop3: partition table partially beyond EOD, truncated [ 49.651241][ T5081] loop3: p1 start 67108864 is beyond EOD, truncated [ 49.689482][ T5081] loop3: p3 start 100859904 is beyond EOD, truncated [ 49.714275][ T5081] netlink: 1272 bytes leftover after parsing attributes in process `syz.3.456'. [ 49.723458][ T5081] netlink: 32 bytes leftover after parsing attributes in process `syz.3.456'. [ 49.760052][ T5097] netlink: 24 bytes leftover after parsing attributes in process `syz.1.459'. [ 49.767274][ T5099] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5099 comm=syz.2.461 [ 49.801624][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 49.818240][ T3312] udevd[3312]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 49.835196][ T3312] udevd[3312]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 49.846581][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 49.880877][ T5107] netlink: 4 bytes leftover after parsing attributes in process `syz.2.463'. [ 49.944224][ T5119] loop2: detected capacity change from 0 to 512 [ 49.957964][ T5124] loop3: detected capacity change from 0 to 1024 [ 50.040020][ T5124] ext4 filesystem being mounted at /72/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.053097][ T5131] loop2: detected capacity change from 0 to 512 [ 50.075661][ T5131] FAT-fs (loop2): error, corrupted file size (i_pos 51, 9216) [ 50.093337][ T5133] Illegal XDP return value 463687713 on prog (id 118) dev syz_tun, expect packet loss! [ 50.105106][ T5135] xt_l2tp: v2 sid > 0xffff: 4294901760 [ 50.111186][ T5131] FAT-fs (loop2): error, corrupted file size (i_pos 51, 8960) [ 50.137088][ T5131] FAT-fs (loop2): error, corrupted file size (i_pos 51, 8960) [ 50.188042][ T5138] loop4: detected capacity change from 0 to 1024 [ 50.197310][ T5138] EXT4-fs: Ignoring removed nomblk_io_submit option [ 50.204005][ T5138] EXT4-fs: inline encryption not supported [ 50.226799][ T5138] EXT4-fs: Mount option(s) incompatible with ext2 [ 50.228651][ T5128] FAT-fs (loop2): error, corrupted file size (i_pos 51, 8960) [ 50.270465][ T5128] FAT-fs (loop2): error, corrupted file size (i_pos 51, 8960) [ 50.278091][ T5128] FAT-fs (loop2): error, corrupted file size (i_pos 51, 8960) [ 50.373961][ T5146] loop4: detected capacity change from 0 to 128 [ 52.159516][ T5157] loop3: detected capacity change from 0 to 128 [ 52.167353][ T5160] netlink: 12 bytes leftover after parsing attributes in process `syz.4.476'. [ 52.254570][ T5169] IPv6: addrconf: prefix option has invalid lifetime [ 52.267670][ T5165] loop4: detected capacity change from 0 to 4096 [ 52.294689][ T5175] FAULT_INJECTION: forcing a failure. [ 52.294689][ T5175] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 52.307863][ T5175] CPU: 0 UID: 0 PID: 5175 Comm: syz.0.481 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 52.307895][ T5175] Tainted: [W]=WARN [ 52.307957][ T5175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 52.307969][ T5175] Call Trace: [ 52.307977][ T5175] [ 52.307987][ T5175] __dump_stack+0x1d/0x30 [ 52.308075][ T5175] dump_stack_lvl+0x95/0xd0 [ 52.308096][ T5175] dump_stack+0x15/0x1b [ 52.308120][ T5175] should_fail_ex+0x263/0x280 [ 52.308145][ T5175] should_fail+0xb/0x20 [ 52.308205][ T5175] should_fail_usercopy+0x1a/0x20 [ 52.308261][ T5175] _copy_from_iter+0xcf/0xea0 [ 52.308288][ T5175] ? __rcu_read_unlock+0x4e/0x70 [ 52.308376][ T5175] ? avc_has_perm_noaudit+0xab/0x130 [ 52.308408][ T5175] copy_page_from_iter+0x178/0x2a0 [ 52.308437][ T5175] anon_pipe_write+0x9f3/0xb30 [ 52.308462][ T5175] ? anon_pipe_write+0xa0/0xb30 [ 52.308514][ T5175] ? selinux_file_permission+0x2ed/0x320 [ 52.308544][ T5175] ? __pfx_anon_pipe_write+0x10/0x10 [ 52.308635][ T5175] vfs_write+0x5a6/0x9f0 [ 52.308655][ T5175] ksys_write+0xdc/0x1a0 [ 52.308673][ T5175] __x64_sys_write+0x40/0x50 [ 52.308689][ T5175] x64_sys_call+0x2847/0x3000 [ 52.308741][ T5175] do_syscall_64+0xc0/0x2a0 [ 52.308760][ T5175] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.308780][ T5175] RIP: 0033:0x7f4b558aacb9 [ 52.308796][ T5175] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 52.308816][ T5175] RSP: 002b:00007f4b54307028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 52.308869][ T5175] RAX: ffffffffffffffda RBX: 00007f4b55b25fa0 RCX: 00007f4b558aacb9 [ 52.308884][ T5175] RDX: 000000000000000b RSI: 0000200000000100 RDI: 0000000000000004 [ 52.308898][ T5175] RBP: 00007f4b54307090 R08: 0000000000000000 R09: 0000000000000000 [ 52.308913][ T5175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 52.308925][ T5175] R13: 00007f4b55b26038 R14: 00007f4b55b25fa0 R15: 00007ffd4c3d0478 [ 52.308944][ T5175] [ 52.621713][ T5191] netlink: 40 bytes leftover after parsing attributes in process `syz.4.487'. [ 52.650588][ T5191] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 52.657846][ T5191] IPv6: NLM_F_CREATE should be set when creating new route [ 52.665246][ T5191] IPv6: NLM_F_CREATE should be set when creating new route [ 52.706368][ T5191] EXT4-fs: inline encryption not supported [ 52.724683][ T5191] EXT4-fs (loop4): orphan cleanup on readonly fs [ 52.737083][ T5191] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.487: Failed to acquire dquot type 0 [ 52.789314][ T5191] EXT4-fs (loop4): 1 truncate cleaned up [ 52.852929][ T5216] netlink: 160 bytes leftover after parsing attributes in process `syz.2.491'. [ 52.863340][ T5218] FAULT_INJECTION: forcing a failure. [ 52.863340][ T5218] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 52.876459][ T5218] CPU: 0 UID: 0 PID: 5218 Comm: syz.1.493 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 52.876536][ T5218] Tainted: [W]=WARN [ 52.876542][ T5218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 52.876629][ T5218] Call Trace: [ 52.876636][ T5218] [ 52.876644][ T5218] __dump_stack+0x1d/0x30 [ 52.876670][ T5218] dump_stack_lvl+0x95/0xd0 [ 52.876693][ T5218] dump_stack+0x15/0x1b [ 52.876721][ T5218] should_fail_ex+0x263/0x280 [ 52.876742][ T5218] should_fail+0xb/0x20 [ 52.876835][ T5218] should_fail_usercopy+0x1a/0x20 [ 52.876862][ T5218] _copy_to_user+0x20/0xa0 [ 52.876890][ T5218] simple_read_from_buffer+0xb5/0x130 [ 52.876927][ T5218] proc_fail_nth_read+0x10e/0x150 [ 52.877009][ T5218] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 52.877033][ T5218] vfs_read+0x1ab/0x7f0 [ 52.877111][ T5218] ? __rcu_read_unlock+0x4e/0x70 [ 52.877132][ T5218] ? __fget_files+0x184/0x1c0 [ 52.877156][ T5218] ? mutex_lock+0x57/0x90 [ 52.877260][ T5218] ksys_read+0xdc/0x1a0 [ 52.877276][ T5218] __x64_sys_read+0x40/0x50 [ 52.877293][ T5218] x64_sys_call+0x2889/0x3000 [ 52.877323][ T5218] do_syscall_64+0xc0/0x2a0 [ 52.877422][ T5218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.877443][ T5218] RIP: 0033:0x7fc9c868b58e [ 52.877461][ T5218] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 52.877480][ T5218] RSP: 002b:00007fc9c7126fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 52.877526][ T5218] RAX: ffffffffffffffda RBX: 00007fc9c71276c0 RCX: 00007fc9c868b58e [ 52.877539][ T5218] RDX: 000000000000000f RSI: 00007fc9c71270a0 RDI: 0000000000000006 [ 52.877559][ T5218] RBP: 00007fc9c7127090 R08: 0000000000000000 R09: 0000000000000000 [ 52.877572][ T5218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 52.877584][ T5218] R13: 00007fc9c8946038 R14: 00007fc9c8945fa0 R15: 00007ffe0b509878 [ 52.877603][ T5218] [ 53.105848][ T5220] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 53.113849][ T5220] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e018, mo2=0002] [ 53.129508][ T5220] System zones: 0-1, 15-15, 18-18, 34-34 [ 53.135667][ T5220] EXT4-fs (loop1): orphan cleanup on readonly fs [ 53.142311][ T5220] EXT4-fs warning (device loop1): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 53.156915][ T5220] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 53.164002][ T5220] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.494: bg 0: block 40: padding at end of block bitmap is not set [ 53.178346][ T5220] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 53.180703][ T5223] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.495: error while reading EA inode 32 err=-116 [ 53.188240][ T5220] EXT4-fs (loop1): 1 truncate cleaned up [ 53.200744][ T5223] EXT4-fs (loop2): Remounting filesystem read-only [ 53.211365][ T5220] RDS: rds_bind could not find a transport for b7d6:6aeb:db8b:b5c5:e6e6:9dda:4ab3:b9d2, load rds_tcp or rds_rdma? [ 53.223796][ T5223] EXT4-fs (loop2): 1 orphan inode deleted [ 53.261014][ T5229] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23889 sclass=netlink_route_socket pid=5229 comm=syz.1.497 [ 53.286614][ T5232] SELinux: policydb version -1437059966 does not match my version range 15-35 [ 53.306508][ T5232] SELinux: failed to load policy [ 53.369404][ T5241] netlink: 'syz.2.500': attribute type 39 has an invalid length. [ 53.398414][ T5243] IPv6: addrconf: prefix option has invalid lifetime [ 53.410437][ T5245] dummy0: entered promiscuous mode [ 53.424665][ T5239] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 53.440831][ T5245] dummy0: left promiscuous mode [ 53.542471][ T5258] netlink: 16 bytes leftover after parsing attributes in process `syz.3.508'. [ 53.576964][ T5258] EXT4-fs: Ignoring removed mblk_io_submit option [ 53.604819][ T5267] netlink: 'syz.0.510': attribute type 13 has an invalid length. [ 53.613677][ T5258] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 53.662600][ T5258] EXT4-fs error (device loop3): ext4_iget_extra_inode:5073: inode #15: comm syz.3.508: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 53.699979][ T5258] EXT4-fs (loop3): Remounting filesystem read-only [ 53.779194][ T5267] gretap0: refused to change device tx_queue_len [ 53.787693][ T5267] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 53.959959][ T5291] EXT4-fs: inline encryption not supported [ 53.965980][ T5291] EXT4-fs: Ignoring removed nomblk_io_submit option [ 53.981851][ T5291] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 53.990480][ T5291] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 54.021337][ T29] kauditd_printk_skb: 168 callbacks suppressed [ 54.021353][ T29] audit: type=1400 audit(2000000272.039:1043): avc: denied { create } for pid=5295 comm="syz.2.516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 54.048526][ T5291] Quota error (device loop1): do_insert_tree: Free block already used in tree: block 1 [ 54.066935][ T29] audit: type=1400 audit(2000000272.059:1044): avc: denied { write } for pid=5295 comm="syz.2.516" name="kcm" dev="proc" ino=4026532730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 54.094232][ T5291] Quota error (device loop1): qtree_write_dquot: Error -5 occurred while creating quota [ 54.105394][ T5291] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.515: Failed to acquire dquot type 1 [ 54.117661][ T29] audit: type=1400 audit(2000000272.119:1045): avc: denied { execmem } for pid=5299 comm="syz.2.518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 54.137442][ T5291] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 46 vs 41 free clusters [ 54.154509][ T29] audit: type=1400 audit(2000000272.169:1046): avc: denied { tracepoint } for pid=5301 comm="syz.0.517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 54.176805][ T5291] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.515: corrupted inode contents [ 54.192182][ T5302] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 54.200126][ T5302] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002] [ 54.213746][ T5291] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #12: comm syz.1.515: mark_inode_dirty error [ 54.229087][ T5302] EXT4-fs (loop0): orphan cleanup on readonly fs [ 54.235833][ T5291] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.515: corrupted inode contents [ 54.235925][ T5302] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=0 [ 54.257615][ T5291] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #12: comm syz.1.515: mark_inode_dirty error [ 54.269413][ T5291] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.515: corrupted inode contents [ 54.282414][ T5250] ext4 filesystem being mounted at /118/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.294052][ T5250] EXT4-fs (loop4): resizing filesystem from 256 to 1 blocks [ 54.301437][ T5250] EXT4-fs warning (device loop4): ext4_resize_fs:2042: can't shrink FS - resize aborted [ 54.309856][ T5302] EXT4-fs warning (device loop0): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 54.321099][ T5291] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 54.325827][ T5302] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 54.334955][ T5291] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.515: corrupted inode contents [ 54.373253][ T5302] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.517: bg 0: block 40: padding at end of block bitmap is not set [ 54.378473][ T29] audit: type=1326 audit(2000000272.369:1047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5299 comm="syz.2.518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aed15acb9 code=0x7ffc0000 [ 54.387766][ T5302] EXT4-fs (loop0): Remounting filesystem read-only [ 54.410841][ T29] audit: type=1326 audit(2000000272.369:1048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5299 comm="syz.2.518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9aed15acb9 code=0x7ffc0000 [ 54.410868][ T29] audit: type=1326 audit(2000000272.379:1049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5299 comm="syz.2.518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aed15acb9 code=0x7ffc0000 [ 54.420657][ T5302] EXT4-fs (loop0): 1 truncate cleaned up [ 54.470610][ T5291] EXT4-fs error (device loop1): ext4_truncate:4635: inode #12: comm syz.1.515: mark_inode_dirty error [ 54.497877][ T5291] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 54.524264][ T5291] EXT4-fs (loop1): 1 truncate cleaned up [ 54.534815][ T5302] netlink: 8 bytes leftover after parsing attributes in process `syz.0.517'. [ 54.633015][ T5310] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=5310 comm=syz.4.519 [ 54.810138][ T5340] __nla_validate_parse: 1 callbacks suppressed [ 54.810155][ T5340] netlink: 44 bytes leftover after parsing attributes in process `syz.4.528'. [ 54.851918][ T5349] set_capacity_and_notify: 12 callbacks suppressed [ 54.851933][ T5349] loop2: detected capacity change from 0 to 512 [ 54.853624][ T5350] netlink: 'syz.3.530': attribute type 4 has an invalid length. [ 54.882398][ T5349] EXT4-fs: quotafile must be on filesystem root [ 54.934208][ T5357] netlink: 'syz.4.535': attribute type 1 has an invalid length. [ 54.950819][ T5357] 8021q: adding VLAN 0 to HW filter on device bond1 [ 55.026594][ T5360] loop2: detected capacity change from 0 to 8192 [ 55.088544][ T5367] netlink: 'syz.4.537': attribute type 4 has an invalid length. [ 55.096787][ T3301] loop2: p1 < > p2 p4 < p5 > [ 55.100124][ T5367] netlink: 'syz.4.537': attribute type 4 has an invalid length. [ 55.101633][ T3301] loop2: partition table partially beyond EOD, truncated [ 55.117884][ T5339] loop1: detected capacity change from 0 to 32768 [ 55.124545][ T3301] loop2: p1 start 134217728 is beyond EOD, truncated [ 55.131355][ T3301] loop2: p2 size 591360 extends beyond EOD, truncated [ 55.144682][ T3301] loop2: p5 size 591360 extends beyond EOD, truncated [ 55.147876][ T5371] loop4: detected capacity change from 0 to 256 [ 55.158456][ T5371] msdos: Unknown parameter '18446744073709551615' [ 55.167892][ T5360] loop2: p1 < > p2 p4 < p5 > [ 55.172667][ T5360] loop2: partition table partially beyond EOD, truncated [ 55.180513][ T5360] loop2: p1 start 134217728 is beyond EOD, truncated [ 55.187321][ T5360] loop2: p2 size 591360 extends beyond EOD, truncated [ 55.195755][ T5360] loop2: p5 size 591360 extends beyond EOD, truncated [ 55.301845][ T4816] udevd[4816]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory [ 55.303639][ T3312] udevd[3312]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 55.322386][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 55.326419][ T5378] netlink: 28 bytes leftover after parsing attributes in process `syz.1.542'. [ 55.326438][ T5378] netlink: 32 bytes leftover after parsing attributes in process `syz.1.542'. [ 55.326452][ T5378] netlink: 28 bytes leftover after parsing attributes in process `syz.1.542'. [ 55.326519][ T5378] netlink: 32 bytes leftover after parsing attributes in process `syz.1.542'. [ 55.354102][ T5378] dvmrp6: entered allmulticast mode [ 55.374017][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 55.377508][ T4816] udevd[4816]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory [ 55.378919][ T3312] udevd[3312]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 55.435322][ T5394] netlink: 'syz.4.543': attribute type 4 has an invalid length. [ 55.464704][ T5393] 9p: Bad value for 'rfdno' [ 55.622654][ T5416] loop2: detected capacity change from 0 to 256 [ 55.646843][ T5416] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 55.760561][ T5428] netlink: 'syz.1.558': attribute type 4 has an invalid length. [ 55.777655][ T5431] netlink: 20 bytes leftover after parsing attributes in process `syz.4.559'. [ 55.946667][ T5450] loop4: detected capacity change from 0 to 256 [ 55.956597][ T5450] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 56.034597][ T5445] loop3: detected capacity change from 0 to 512 [ 56.142916][ T5464] loop4: detected capacity change from 0 to 1024 [ 56.201939][ T5445] ext4 filesystem being mounted at /86/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.430707][ T5477] vhci_hcd vhci_hcd.4: default hub control req: 0500 v0000 i0000 l0 [ 56.439551][ T5476] netlink: 'syz.3.571': attribute type 4 has an invalid length. [ 56.549671][ T5491] loop3: detected capacity change from 0 to 1024 [ 56.556833][ T5491] EXT4-fs: Ignoring removed orlov option [ 56.576488][ T5491] netlink: 28 bytes leftover after parsing attributes in process `syz.3.577'. [ 56.585425][ T5491] netlink: 28 bytes leftover after parsing attributes in process `syz.3.577'. [ 56.611960][ T3612] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 56.685139][ T5498] loop3: detected capacity change from 0 to 256 [ 56.698931][ T5500] 9p: Bad value for 'rfdno' [ 56.730970][ T5504] batadv_slave_0: entered promiscuous mode [ 56.743355][ T5504] batadv_slave_0: left promiscuous mode [ 56.751022][ T5504] netlink: 24 bytes leftover after parsing attributes in process `syz.3.582'. [ 56.776814][ T5511] netlink: 'syz.2.584': attribute type 4 has an invalid length. [ 56.955248][ T5538] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.590: Failed to acquire dquot type 0 [ 56.977539][ T5538] EXT4-fs (loop3): 1 truncate cleaned up [ 56.988768][ T5545] pim6reg: entered allmulticast mode [ 56.991189][ T5548] 9p: Bad value for 'rfdno' [ 57.000081][ T5545] pim6reg9: entered allmulticast mode [ 57.031129][ T5552] netlink: 52 bytes leftover after parsing attributes in process `syz.2.595'. [ 57.135722][ T5568] ext4 filesystem being mounted at /140/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.199525][ T5581] EXT4-fs warning (device loop4): verify_group_input:137: Cannot add at group 201326609 (only 1 groups) [ 57.254793][ T5585] vfat: Unknown parameter '' [ 57.999998][ T5602] 9p: Bad value for 'rfdno' [ 58.028726][ T5604] xfrm1: entered allmulticast mode [ 58.077044][ T5610] futex_wake_op: syz.2.613 tries to shift op by 32; fix this program [ 58.127922][ T5615] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 58.142337][ T5615] EXT4-fs (loop0): 1 truncate cleaned up [ 58.348142][ T5627] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 58.360446][ T5627] EXT4-fs (loop0): 1 truncate cleaned up [ 58.405317][ T5630] EXT4-fs: Ignoring removed orlov option [ 58.595657][ T5637] bond1: Unable to set up delay as MII monitoring is disabled [ 58.604089][ T5637] bond1 (unregistering): Released all slaves [ 58.733259][ T5647] ext4 filesystem being mounted at /101/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.749493][ T5647] syz.0.624 (5647): /proc/5646/oom_adj is deprecated, please use /proc/5646/oom_score_adj instead. [ 58.832981][ T5656] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 58.974006][ T5663] validate_nla: 4 callbacks suppressed [ 58.974020][ T5663] netlink: 'syz.2.628': attribute type 39 has an invalid length. [ 59.076013][ T2460] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 59.086920][ T5666] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5666 comm=syz.1.629 [ 59.098574][ T29] kauditd_printk_skb: 165 callbacks suppressed [ 59.098589][ T29] audit: type=1400 audit(2000000277.109:1213): avc: denied { write } for pid=5674 comm="syz.4.632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 59.151501][ T29] audit: type=1400 audit(2000000277.119:1214): avc: denied { read } for pid=5677 comm="syz.2.633" dev="nsfs" ino=4026532451 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 59.173874][ T29] audit: type=1400 audit(2000000277.119:1215): avc: denied { open } for pid=5677 comm="syz.2.633" path="net:[4026532451]" dev="nsfs" ino=4026532451 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 59.198388][ T29] audit: type=1400 audit(2000000277.119:1216): avc: denied { read } for pid=5677 comm="syz.2.633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 59.218620][ T29] audit: type=1400 audit(2000000277.159:1217): avc: denied { create } for pid=5674 comm="syz.4.632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 59.238314][ T29] audit: type=1400 audit(2000000277.219:1218): avc: denied { name_bind } for pid=5688 comm="syz.3.637" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 59.260297][ T29] audit: type=1400 audit(2000000277.219:1219): avc: denied { connect } for pid=5685 comm="syz.1.635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 59.279998][ T29] audit: type=1400 audit(2000000277.219:1220): avc: denied { create } for pid=5685 comm="syz.1.635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 59.299873][ T29] audit: type=1400 audit(2000000277.219:1221): avc: denied { setopt } for pid=5685 comm="syz.1.635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 59.320250][ T29] audit: type=1400 audit(2000000277.279:1222): avc: denied { write } for pid=5688 comm="syz.3.637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 59.390214][ T5709] bridge0: port 1(bridge_slave_0) entered listening state [ 59.414147][ T5712] netlink: 'syz.2.642': attribute type 4 has an invalid length. [ 59.582098][ T5725] ext4 filesystem being mounted at /149/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.605061][ T5729] : renamed from vlan0 (while UP) [ 59.607233][ T5725] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:375: inode #2: comm syz.4.646: No space for directory leaf checksum. Please run e2fsck -D. [ 59.625789][ T5725] EXT4-fs error (device loop4): __ext4_find_entry:1626: inode #2: comm syz.4.646: checksumming directory block 0 [ 59.810326][ T5739] x_tables: duplicate underflow at hook 1 [ 59.938766][ T5746] __nla_validate_parse: 3 callbacks suppressed [ 59.938781][ T5746] netlink: 14 bytes leftover after parsing attributes in process `syz.4.651'. [ 59.990081][ T5727] syz.1.644 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 60.004187][ T5727] CPU: 0 UID: 0 PID: 5727 Comm: syz.1.644 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 60.004225][ T5727] Tainted: [W]=WARN [ 60.004233][ T5727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 60.004249][ T5727] Call Trace: [ 60.004258][ T5727] [ 60.004267][ T5727] __dump_stack+0x1d/0x30 [ 60.004325][ T5727] dump_stack_lvl+0x95/0xd0 [ 60.004347][ T5727] dump_stack+0x15/0x1b [ 60.004370][ T5727] dump_header+0x80/0x240 [ 60.004396][ T5727] oom_kill_process+0x295/0x350 [ 60.004477][ T5727] out_of_memory+0x97d/0xb80 [ 60.004528][ T5727] try_charge_memcg+0x62e/0xa10 [ 60.004568][ T5727] obj_cgroup_charge_pages+0xa6/0x150 [ 60.004665][ T5727] __memcg_kmem_charge_page+0x9e/0x170 [ 60.004740][ T5727] __alloc_frozen_pages_noprof+0x18a/0x350 [ 60.004856][ T5727] alloc_pages_mpol+0xb3/0x260 [ 60.004893][ T5727] alloc_pages_noprof+0x8f/0x130 [ 60.004928][ T5727] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 60.004966][ T5727] __kvmalloc_node_noprof+0x471/0x680 [ 60.005070][ T5727] ? ip_set_alloc+0x24/0x30 [ 60.005118][ T5727] ? ip_set_alloc+0x24/0x30 [ 60.005205][ T5727] ip_set_alloc+0x24/0x30 [ 60.005235][ T5727] hash_netiface_create+0x282/0x740 [ 60.005291][ T5727] ? __pfx_hash_netiface_create+0x10/0x10 [ 60.005402][ T5727] ip_set_create+0x3cf/0x970 [ 60.005454][ T5727] ? __nla_parse+0x40/0x60 [ 60.005484][ T5727] nfnetlink_rcv_msg+0x509/0x5d0 [ 60.005591][ T5727] netlink_rcv_skb+0x123/0x220 [ 60.005691][ T5727] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 60.005732][ T5727] nfnetlink_rcv+0x167/0x1720 [ 60.005767][ T5727] ? __kfree_skb+0x109/0x150 [ 60.005810][ T5727] ? nlmon_xmit+0x4f/0x60 [ 60.005836][ T5727] ? consume_skb+0x49/0x140 [ 60.005924][ T5727] ? nlmon_xmit+0x4f/0x60 [ 60.005946][ T5727] ? dev_hard_start_xmit+0x3a8/0x3e0 [ 60.006024][ T5727] ? __dev_queue_xmit+0x139a/0x1f20 [ 60.006062][ T5727] ? __dev_queue_xmit+0x148/0x1f20 [ 60.006110][ T5727] ? ref_tracker_free+0x37d/0x3e0 [ 60.006145][ T5727] ? __netlink_deliver_tap+0x4dc/0x500 [ 60.006186][ T5727] netlink_unicast+0x5c0/0x690 [ 60.006283][ T5727] netlink_sendmsg+0x5c8/0x6f0 [ 60.006309][ T5727] ? __pfx_netlink_sendmsg+0x10/0x10 [ 60.006340][ T5727] __sock_sendmsg+0x145/0x170 [ 60.006363][ T5727] ____sys_sendmsg+0x31e/0x4a0 [ 60.006428][ T5727] ___sys_sendmsg+0x195/0x1e0 [ 60.006583][ T5727] __x64_sys_sendmsg+0xd4/0x160 [ 60.006617][ T5727] x64_sys_call+0x17ba/0x3000 [ 60.006676][ T5727] do_syscall_64+0xc0/0x2a0 [ 60.006703][ T5727] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.006731][ T5727] RIP: 0033:0x7fc9c86cacb9 [ 60.006750][ T5727] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 60.006774][ T5727] RSP: 002b:00007fc9c7106028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 60.006849][ T5727] RAX: ffffffffffffffda RBX: 00007fc9c8946090 RCX: 00007fc9c86cacb9 [ 60.006925][ T5727] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000008 [ 60.006939][ T5727] RBP: 00007fc9c8738bf7 R08: 0000000000000000 R09: 0000000000000000 [ 60.006953][ T5727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 60.006966][ T5727] R13: 00007fc9c8946128 R14: 00007fc9c8946090 R15: 00007ffe0b509878 [ 60.007064][ T5727] [ 60.007087][ T5727] memory: usage 307200kB, limit 307200kB, failcnt 437 [ 60.338838][ T5727] memory+swap: usage 307400kB, limit 9007199254740988kB, failcnt 0 [ 60.338858][ T5727] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 60.338872][ T5727] Memory cgroup stats for /syz1: [ 60.354386][ T5727] cache 0 [ 60.362310][ T5727] rss 0 [ 60.365084][ T5727] shmem 0 [ 60.368036][ T5727] mapped_file 0 [ 60.371571][ T5727] dirty 0 [ 60.374545][ T5727] writeback 0 [ 60.377837][ T5727] workingset_refault_anon 60 [ 60.382567][ T5727] workingset_refault_file 368 [ 60.387263][ T5727] swap 204800 [ 60.390593][ T5727] swapcached 0 [ 60.393969][ T5727] pgpgin 37232 [ 60.397352][ T5727] pgpgout 37229 [ 60.400965][ T5727] pgfault 42585 [ 60.404484][ T5727] pgmajfault 34 [ 60.407940][ T5727] inactive_anon 0 [ 60.408942][ T5751] netlink: 12 bytes leftover after parsing attributes in process `syz.2.652'. [ 60.411633][ T5727] active_anon 0 [ 60.423947][ T5727] inactive_file 0 [ 60.427585][ T5727] active_file 12288 [ 60.431428][ T5727] unevictable 0 [ 60.434891][ T5727] hierarchical_memory_limit 314572800 [ 60.440267][ T5727] hierarchical_memsw_limit 9223372036854771712 [ 60.446461][ T5727] total_cache 0 [ 60.449925][ T5727] total_rss 0 [ 60.453640][ T5727] total_shmem 0 [ 60.457096][ T5727] total_mapped_file 0 [ 60.461347][ T5727] total_dirty 0 [ 60.464813][ T5727] total_writeback 0 [ 60.468620][ T5727] total_workingset_refault_anon 60 [ 60.473928][ T5727] total_workingset_refault_file 368 [ 60.479202][ T5727] total_swap 204800 [ 60.483023][ T5727] total_swapcached 0 [ 60.486903][ T5727] total_pgpgin 37232 [ 60.490869][ T5727] total_pgpgout 37229 [ 60.494871][ T5727] total_pgfault 42585 [ 60.498830][ T5727] total_pgmajfault 34 [ 60.502858][ T5727] total_inactive_anon 0 [ 60.507147][ T5727] total_active_anon 0 [ 60.511178][ T5727] total_inactive_file 0 [ 60.515391][ T5727] total_active_file 12288 [ 60.519699][ T5727] total_unevictable 0 [ 60.523780][ T5727] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.644,pid=5718,uid=0 [ 60.538634][ T5727] Memory cgroup out of memory: Killed process 5718 (syz.1.644) total-vm:94132kB, anon-rss:1332kB, file-rss:22156kB, shmem-rss:0kB, UID:0 pgtables:144kB oom_score_adj:1000 [ 60.555872][ T5746] netlink: 14 bytes leftover after parsing attributes in process `syz.4.651'. [ 60.568178][ T5742] netlink: 24 bytes leftover after parsing attributes in process `syz.0.650'. [ 60.594509][ T5746] netlink: 14 bytes leftover after parsing attributes in process `syz.4.651'. [ 60.640996][ T5746] netlink: 14 bytes leftover after parsing attributes in process `syz.4.651'. [ 60.702830][ T5746] netlink: 14 bytes leftover after parsing attributes in process `syz.4.651'. [ 60.704148][ T5764] netlink: 8 bytes leftover after parsing attributes in process `syz.0.657'. [ 60.724320][ T5764] set_capacity_and_notify: 12 callbacks suppressed [ 60.724338][ T5764] loop0: detected capacity change from 0 to 128 [ 60.731444][ T5746] netlink: 14 bytes leftover after parsing attributes in process `syz.4.651'. [ 60.750090][ T5762] loop1: detected capacity change from 0 to 2048 [ 60.794751][ T5768] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 60.836383][ T5774] netlink: 'syz.4.662': attribute type 4 has an invalid length. [ 60.924022][ T5791] netlink: 16 bytes leftover after parsing attributes in process `syz.1.668'. [ 60.972563][ T5800] bond_slave_0: entered promiscuous mode [ 60.978293][ T5800] bond_slave_1: entered promiscuous mode [ 60.984378][ T5800] macvlan2: entered promiscuous mode [ 60.989768][ T5800] bond0: entered promiscuous mode [ 60.996160][ T5800] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 63.170519][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 71.330480][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 74.293603][ T29] kauditd_printk_skb: 68 callbacks suppressed [ 74.293618][ T29] audit: type=1400 audit(74.278:1291): avc: denied { setopt } for pid=5810 comm="syz.3.675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 74.295976][ T5814] loop3: detected capacity change from 0 to 512 [ 74.311114][ T29] audit: type=1400 audit(74.298:1292): avc: denied { remount } for pid=5811 comm="syz.0.672" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 74.363466][ T5824] loop4: detected capacity change from 0 to 1024 [ 74.372864][ T5814] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 74.395132][ T29] audit: type=1400 audit(74.328:1293): avc: denied { ioctl } for pid=5811 comm="syz.0.672" path="socket:[12558]" dev="sockfs" ino=12558 ioctlcmd=0x943d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 74.419061][ T29] audit: type=1400 audit(74.328:1294): avc: denied { read } for pid=5811 comm="syz.0.672" name="mISDNtimer" dev="devtmpfs" ino=249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 74.441233][ T29] audit: type=1400 audit(74.328:1295): avc: denied { open } for pid=5811 comm="syz.0.672" path="/dev/mISDNtimer" dev="devtmpfs" ino=249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 74.463922][ T29] audit: type=1400 audit(74.328:1296): avc: denied { ioctl } for pid=5811 comm="syz.0.672" path="/dev/mISDNtimer" dev="devtmpfs" ino=249 ioctlcmd=0x4940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 74.488025][ T29] audit: type=1400 audit(74.348:1297): avc: denied { append } for pid=5809 comm="syz.1.673" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 74.490626][ T5814] EXT4-fs (loop3): orphan cleanup on readonly fs [ 74.520345][ T5819] __nla_validate_parse: 1 callbacks suppressed [ 74.526576][ T5819] netlink: 4 bytes leftover after parsing attributes in process `syz.2.674'. [ 74.550897][ T5814] EXT4-fs (loop3): 1 truncate cleaned up [ 74.556832][ T5814] EXT4-fs mount: 49 callbacks suppressed [ 74.556841][ T5814] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 74.579254][ T5824] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.595223][ T5819] bond_slave_0: entered promiscuous mode [ 74.600904][ T5819] bond_slave_1: entered promiscuous mode [ 74.621500][ T5819] macvlan2: entered promiscuous mode [ 74.626863][ T5819] bond0: entered promiscuous mode [ 74.633596][ T5819] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 74.635927][ T29] audit: type=1400 audit(74.618:1298): avc: denied { add_name } for pid=5822 comm="syz.4.677" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 74.660422][ T29] audit: type=1400 audit(74.618:1299): avc: denied { create } for pid=5822 comm="syz.4.677" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 74.682171][ T5824] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4 free clusters [ 74.725031][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.751424][ T5839] loop2: detected capacity change from 0 to 512 [ 74.773556][ T5842] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.784833][ T29] audit: type=1400 audit(74.658:1300): avc: denied { read write } for pid=5822 comm="syz.4.677" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 74.793726][ T5842] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.817513][ T5839] EXT4-fs warning (device loop2): ext4_init_metadata_csum:4637: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 74.831508][ T5839] EXT4-fs (loop2): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 74.838233][ T5825] udevd[5825]: incorrect jbd checksum on /dev/loop2 [ 74.846552][ T5842] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=31851 sclass=netlink_route_socket pid=5842 comm=syz.3.679 [ 74.862358][ T5825] udevd[5825]: incorrect jbd checksum on /dev/loop2 [ 74.888982][ T5845] netlink: 8 bytes leftover after parsing attributes in process `syz.0.680'. [ 74.899566][ T3329] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.902234][ T5845] bridge1: entered promiscuous mode [ 74.957556][ T5856] netlink: 'syz.2.682': attribute type 4 has an invalid length. [ 74.978563][ T5858] loop4: detected capacity change from 0 to 128 [ 74.987724][ T5858] netlink: 16 bytes leftover after parsing attributes in process `syz.4.684'. [ 74.998726][ T5858] syz.4.684: attempt to access beyond end of device [ 74.998726][ T5858] loop4: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 75.046708][ T5863] netlink: 4412 bytes leftover after parsing attributes in process `syz.0.685'. [ 75.074315][ T5865] loop0: detected capacity change from 0 to 512 [ 75.081109][ T5865] EXT4-fs: Ignoring removed nomblk_io_submit option [ 75.088251][ T5865] EXT4-fs: Mount option(s) incompatible with ext2 [ 75.286056][ T5882] netlink: 8 bytes leftover after parsing attributes in process `syz.4.692'. [ 75.322332][ T5884] loop4: detected capacity change from 0 to 128 [ 75.506636][ T5888] loop4: detected capacity change from 0 to 8192 [ 75.521403][ T5894] pim6reg1: entered promiscuous mode [ 75.526736][ T5894] pim6reg1: entered allmulticast mode [ 75.568840][ T5894] loop1: detected capacity change from 0 to 512 [ 75.581326][ T5825] loop4: p3 < > [ 75.592708][ T5888] loop4: p3 < > [ 75.609708][ T5895] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 75.620433][ T5895] block device autoloading is deprecated and will be removed. [ 75.701595][ T5900] netlink: 12 bytes leftover after parsing attributes in process `syz.4.697'. [ 75.722329][ T5825] udevd[5825]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 75.752119][ T5825] udevd[5825]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 75.854745][ T5908] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=5908 comm=syz.1.701 [ 75.958924][ T5915] loop2: detected capacity change from 0 to 8192 [ 76.000656][ T5928] xt_nat: multiple ranges no longer supported [ 76.015342][ T5931] loop4: detected capacity change from 0 to 512 [ 76.035331][ T5931] msdos: Unknown parameter '' [ 76.069751][ T5933] 9p: Bad value for 'wfdno' [ 76.083932][ T5939] netlink: 'syz.2.713': attribute type 4 has an invalid length. [ 76.132513][ T5949] netlink: 3 bytes leftover after parsing attributes in process `syz.0.716'. [ 76.141565][ T5949] 0X: renamed from caif0 [ 76.149384][ T5949] 0X: entered allmulticast mode [ 76.154803][ T5949] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 76.335904][ T5963] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 76.697916][ T3324] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 76.798228][ T5976] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 76.826070][ T5976] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.722: bad orphan inode 15 [ 76.850481][ T5976] ext4_test_bit(bit=14, block=18) = 1 [ 76.855895][ T5976] is_bad_inode(inode)=0 [ 76.860043][ T5976] NEXT_ORPHAN(inode)=1023 [ 76.864471][ T5976] max_ino=32 [ 76.867658][ T5976] i_nlink=0 [ 76.880076][ T5976] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none. [ 76.942640][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0009-000000000000. [ 76.980216][ T5988] netlink: 'syz.1.726': attribute type 4 has an invalid length. [ 77.073519][ T5987] netlink: 28 bytes leftover after parsing attributes in process `syz.1.726'. [ 77.083995][ T5988] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 77.084072][ T5988] EXT4-fs: failed to create workqueue [ 77.098964][ T5988] EXT4-fs (loop1): mount failed [ 77.127934][ T6006] netlink: 766 bytes leftover after parsing attributes in process `syz.2.730'. [ 77.169167][ T6006] netlink: 766 bytes leftover after parsing attributes in process `syz.2.730'. [ 77.212819][ T6011] netlink: 'syz.1.733': attribute type 1 has an invalid length. [ 77.216891][ T5985] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.234131][ T5825] loop2: p1 < > p4 < > [ 77.241778][ T6007] loop2: p1 < > p4 < > [ 77.345021][ T3329] EXT4-fs error (device loop4): ext4_lookup:1785: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 77.358251][ T3329] EXT4-fs error (device loop4): ext4_lookup:1785: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 77.361033][ T5825] loop2: p1 < > p4 < > [ 77.395402][ T6007] loop2: p1 < > p4 < > [ 77.435819][ T6027] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.448572][ T6037] ext4: Unknown parameter 's' [ 77.461193][ T3010] loop2: p1 < > p4 < > [ 77.469673][ T6007] loop2: p1 < > p4 < > [ 77.496417][ T6036] EXT4-fs: Ignoring removed mblk_io_submit option [ 77.504027][ T6042] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 77.516302][ T5825] loop2: p1 < > p4 < > [ 77.517425][ T6042] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 77.531571][ T3010] loop2: p1 < > p4 < > [ 77.539721][ T6007] loop2: p1 < > p4 < > [ 77.551063][ T6036] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.631223][ T5825] loop2: p1 < > p4 < > [ 77.669612][ T839] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 77.680155][ T839] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.699922][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.700268][ T6007] loop2: p1 < > p4 < > [ 77.725969][ T6059] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 77.757017][ T6059] vhci_hcd vhci_hcd.2: invalid port number 96 [ 77.763213][ T6059] vhci_hcd vhci_hcd.2: default hub control req: 0311 v0005 i0060 l7 [ 77.784021][ T839] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 77.794365][ T839] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.852394][ T6070] tipc: Failed to remove unknown binding: 66,0,0/0:737199468/737199469 [ 77.871026][ T5825] loop2: p1 < > p4 < > [ 77.886147][ T6007] loop2: p1 < > p4 < > [ 77.890647][ T6068] tipc: Failed to remove unknown binding: 66,0,0/0:737199468/737199469 [ 77.904138][ T839] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 77.914533][ T839] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.917781][ T6070] tipc: Failed to remove unknown binding: 66,0,0/0:737199468/737199469 [ 77.974954][ T5843] udevd[5843]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 77.984045][ T23] kernel read not supported for file /371/net/ip_tables_names (pid: 23 comm: kworker/1:0) [ 77.986735][ T5825] udevd[5825]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 78.020667][ T5843] udevd[5843]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 78.037628][ T5825] udevd[5825]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 78.040408][ T23] kernel read not supported for file /371/net/ip_tables_names (pid: 23 comm: kworker/1:0) [ 78.073305][ T839] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 78.083691][ T839] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.095191][ T6071] FAT-fs (loop3): Directory bread(block 199916) failed [ 78.102371][ T6071] FAT-fs (loop3): Directory bread(block 199917) failed [ 78.126563][ T5825] udevd[5825]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 78.128848][ T6102] netlink: 'syz.1.758': attribute type 4 has an invalid length. [ 78.140522][ T5843] udevd[5843]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 78.173155][ T6071] FAT-fs (loop3): Directory bread(block 199918) failed [ 78.198161][ T6071] FAT-fs (loop3): Directory bread(block 199919) failed [ 78.211115][ T6111] netlink: 'syz.0.761': attribute type 21 has an invalid length. [ 78.232810][ T6071] FAT-fs (loop3): Directory bread(block 199920) failed [ 78.282716][ T839] bridge_slave_1: left allmulticast mode [ 78.288432][ T839] bridge_slave_1: left promiscuous mode [ 78.288837][ T6071] FAT-fs (loop3): Directory bread(block 199921) failed [ 78.294179][ T839] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.320689][ T6071] FAT-fs (loop3): Directory bread(block 199922) failed [ 78.337258][ T839] bridge_slave_0: left allmulticast mode [ 78.343081][ T839] bridge_slave_0: left promiscuous mode [ 78.348761][ T839] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.379630][ T6071] FAT-fs (loop3): Directory bread(block 199923) failed [ 78.410189][ T6068] FAT-fs (loop3): Directory bread(block 199916) failed [ 78.462362][ T6068] FAT-fs (loop3): Directory bread(block 199917) failed [ 78.487620][ T3381] hid_parser_main: 2 callbacks suppressed [ 78.487636][ T3381] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 78.509999][ T3381] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz0 [ 78.594159][ T839] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 78.612284][ T839] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 78.634479][ T839] bond0 (unregistering): Released all slaves [ 78.636050][ T6140] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 78.662067][ T839] bond1 (unregistering): Released all slaves [ 78.675866][ T6140] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 78.683214][ T6145] EXT4-fs: Ignoring removed nobh option [ 78.700425][ T6140] EXT4-fs (loop2): ext4_remount: Checksum for group 0 failed (30846!=65535) [ 78.747895][ T839] tipc: Left network mode [ 78.765707][ T6134] EXT4-fs: Ignoring sb option on remount [ 78.771840][ T6134] EXT4-fs (loop2): ext4_remount: Checksum for group 0 failed (30846!=65535) [ 78.808035][ T839] hsr_slave_0: left promiscuous mode [ 78.822202][ T839] hsr_slave_1: left promiscuous mode [ 78.831530][ T6145] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 78.853912][ T839] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 78.861406][ T839] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 78.912710][ T839] veth1_macvtap: left promiscuous mode [ 78.918256][ T839] veth0_macvtap: left promiscuous mode [ 78.930895][ T839] veth1_vlan: left promiscuous mode [ 79.023296][ T839] team0 (unregistering): Port device team_slave_1 removed [ 79.033323][ T839] team0 (unregistering): Port device team_slave_0 removed [ 79.062598][ T6169] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 79.073148][ T6169] EXT4-fs (loop1): orphan cleanup on readonly fs [ 79.081296][ T6169] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #16: comm syz.1.771: corrupted inode contents [ 79.094122][ T6169] EXT4-fs (loop1): Remounting filesystem read-only [ 79.101251][ T6169] EXT4-fs (loop1): 1 truncate cleaned up [ 79.107179][ T49] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 79.117755][ T49] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 79.129391][ T49] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 79.188055][ T3320] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 79.248278][ T6169] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 79.251440][ T3324] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 79.296730][ T6075] chnl_net:caif_netlink_parms(): no params data found [ 79.310470][ T29] kauditd_printk_skb: 202 callbacks suppressed [ 79.310485][ T29] audit: type=1326 audit(79.294:1497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6164 comm="syz.1.771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9c86cacb9 code=0x7ffc0000 [ 79.420562][ T29] audit: type=1326 audit(79.314:1498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6164 comm="syz.1.771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc9c86cacb9 code=0x7ffc0000 [ 79.443134][ T29] audit: type=1326 audit(79.314:1499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6164 comm="syz.1.771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9c86cacb9 code=0x7ffc0000 [ 79.465956][ T29] audit: type=1326 audit(79.314:1500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6164 comm="syz.1.771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fc9c86cacb9 code=0x7ffc0000 [ 79.529621][ T839] IPVS: stop unused estimator thread 0... [ 79.577883][ T6075] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.577918][ T6075] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.578150][ T6075] bridge_slave_0: entered allmulticast mode [ 79.578831][ T6075] bridge_slave_0: entered promiscuous mode [ 79.583118][ T29] audit: type=1326 audit(79.564:1501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6164 comm="syz.1.771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9c86cacb9 code=0x7ffc0000 [ 79.583466][ T6075] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.583528][ T6075] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.586733][ T6075] bridge_slave_1: entered allmulticast mode [ 79.587237][ T29] audit: type=1326 audit(79.564:1502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6164 comm="syz.1.771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9c86cacb9 code=0x7ffc0000 [ 79.587312][ T6075] bridge_slave_1: entered promiscuous mode [ 79.602669][ T6075] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.603894][ T6075] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.616038][ T6075] team0: Port device team_slave_0 added [ 79.617230][ T6075] team0: Port device team_slave_1 added [ 79.634086][ T6075] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.634099][ T6075] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.634123][ T6075] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.635272][ T6075] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.635286][ T6075] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.635315][ T6075] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.703631][ T6075] hsr_slave_0: entered promiscuous mode [ 79.704309][ T6075] hsr_slave_1: entered promiscuous mode [ 79.710728][ T6075] debugfs: 'hsr0' already exists in 'hsr' [ 79.710741][ T6075] Cannot create hsr debugfs directory [ 79.778838][ T29] audit: type=1400 audit(79.754:1503): avc: denied { bind } for pid=6227 comm="syz.3.782" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 79.873799][ T6213] netlink: 'syz.2.780': attribute type 4 has an invalid length. [ 79.886700][ T29] audit: type=1400 audit(79.754:1504): avc: denied { name_bind } for pid=6227 comm="syz.3.782" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 80.010261][ T29] audit: type=1400 audit(79.754:1505): avc: denied { node_bind } for pid=6227 comm="syz.3.782" saddr=::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 80.031313][ T29] audit: type=1400 audit(79.754:1506): avc: denied { shutdown } for pid=6227 comm="syz.3.782" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 80.065994][ T6075] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 80.102423][ T6075] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 80.171520][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.247679][ T6075] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 80.259640][ T6075] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 80.321962][ T6247] netlink: 'syz.0.785': attribute type 3 has an invalid length. [ 80.444396][ T6266] set_capacity_and_notify: 18 callbacks suppressed [ 80.444411][ T6266] loop0: detected capacity change from 0 to 512 [ 80.477311][ T6265] loop2: detected capacity change from 0 to 128 [ 80.486022][ T6075] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.508080][ T6275] loop1: detected capacity change from 0 to 256 [ 80.578315][ T6075] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.712820][ T6297] netlink: 'syz.0.793': attribute type 4 has an invalid length. [ 80.766019][ T2460] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.773147][ T2460] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.870632][ T2460] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.877894][ T2460] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.178401][ T6316] loop2: detected capacity change from 0 to 128 [ 81.431862][ T6075] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.540666][ T6316] msdos: Unknown parameter '' [ 81.598404][ T6290] syz.1.791 (6290) used greatest stack depth: 7048 bytes left [ 81.923244][ T3839] hid (null): invalid report_size 38504 [ 81.928988][ T3839] hid (null): invalid report_count 1375157916 [ 81.935183][ T3839] hid (null): unknown global tag 0xc [ 81.940816][ T3839] hid (null): invalid report_size 4682 [ 81.946312][ T3839] hid (null): invalid report_size 33374 [ 81.973769][ T6337] __nla_validate_parse: 34 callbacks suppressed [ 81.973788][ T6337] netlink: 12 bytes leftover after parsing attributes in process `syz.2.800'. [ 81.984865][ T6075] veth0_vlan: entered promiscuous mode [ 82.025965][ T6075] veth1_vlan: entered promiscuous mode [ 82.044026][ T3839] hid-generic 0005:0080:A54F.0003: collection stack underflow [ 82.051583][ T3839] hid-generic 0005:0080:A54F.0003: item 0 0 0 12 parsing failed [ 82.074246][ T3839] hid-generic 0005:0080:A54F.0003: probe with driver hid-generic failed with error -22 [ 82.085414][ T6075] veth0_macvtap: entered promiscuous mode [ 82.094251][ T6356] netlink: 8 bytes leftover after parsing attributes in process `syz.2.805'. [ 82.102340][ T6075] veth1_macvtap: entered promiscuous mode [ 82.103168][ T6356] netlink: 8 bytes leftover after parsing attributes in process `syz.2.805'. [ 82.124417][ T6075] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.153975][ T6075] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.178187][ T6358] netlink: 'syz.3.806': attribute type 4 has an invalid length. [ 82.186494][ T2240] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.210225][ T2240] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.219284][ T2240] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.231701][ T6360] netlink: 28 bytes leftover after parsing attributes in process `syz.2.807'. [ 82.232995][ T2240] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.271169][ T6365] debugfs: 'netdev@ffff88810a677558' already exists in 'ref_tracker' [ 82.387612][ T6381] GUP no longer grows the stack in syz.5.813 (6381): 200000006000-200000008000 (200000004000) [ 82.398025][ T6381] CPU: 0 UID: 0 PID: 6381 Comm: syz.5.813 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 82.398064][ T6381] Tainted: [W]=WARN [ 82.398071][ T6381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 82.398086][ T6381] Call Trace: [ 82.398093][ T6381] [ 82.398102][ T6381] __dump_stack+0x1d/0x30 [ 82.398199][ T6381] dump_stack_lvl+0x95/0xd0 [ 82.398225][ T6381] dump_stack+0x15/0x1b [ 82.398246][ T6381] fixup_user_fault+0x4fb/0x550 [ 82.398277][ T6381] fault_in_user_writeable+0x5c/0xc0 [ 82.398375][ T6381] futex_lock_pi+0x60b/0x7e0 [ 82.398407][ T6381] ? __pfx_futex_wake_mark+0x10/0x10 [ 82.398541][ T6381] do_futex+0x21f/0x380 [ 82.398649][ T6381] __se_sys_futex+0x2f6/0x370 [ 82.398678][ T6381] ? xfd_validate_state+0x45/0xf0 [ 82.398708][ T6381] __x64_sys_futex+0x78/0x90 [ 82.398768][ T6381] x64_sys_call+0x2bc2/0x3000 [ 82.398798][ T6381] do_syscall_64+0xc0/0x2a0 [ 82.398897][ T6381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.398921][ T6381] RIP: 0033:0x7f651078acb9 [ 82.398940][ T6381] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.398957][ T6381] RSP: 002b:00007f650f1e7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 82.398976][ T6381] RAX: ffffffffffffffda RBX: 00007f6510a05fa0 RCX: 00007f651078acb9 [ 82.399044][ T6381] RDX: 00000000fffff7fc RSI: 000000000000008d RDI: 0000200000004000 [ 82.399060][ T6381] RBP: 00007f65107f8bf7 R08: 0000000000000000 R09: 0000000000000000 [ 82.399124][ T6381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 82.399138][ T6381] R13: 00007f6510a06038 R14: 00007f6510a05fa0 R15: 00007ffe396ddbe8 [ 82.399159][ T6381] [ 82.862926][ T6387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.872586][ T6387] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.913006][ T6387] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.971000][ T6405] loop2: detected capacity change from 0 to 512 [ 82.982775][ T6405] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 83.023792][ T6405] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.093661][ T6413] loop3: detected capacity change from 0 to 512 [ 83.113548][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.151989][ T6413] EXT4-fs: Ignoring removed bh option [ 83.161012][ T6413] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 83.197239][ T6413] EXT4-fs (loop3): 1 truncate cleaned up [ 83.256569][ T6413] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.273860][ T6422] netlink: 160 bytes leftover after parsing attributes in process `syz.2.825'. [ 83.422757][ T6403] loop1: detected capacity change from 0 to 512 [ 83.435876][ T6403] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.821: bg 0: block 248: padding at end of block bitmap is not set [ 83.460652][ T6403] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.821: Failed to acquire dquot type 1 [ 83.473935][ T6403] EXT4-fs (loop1): 1 truncate cleaned up [ 83.480650][ T6403] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.505778][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.534512][ T6439] loop2: detected capacity change from 0 to 512 [ 83.558874][ T6439] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 83.619407][ T6439] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0102] [ 83.640795][ T6439] EXT4-fs error (device loop2): ext4_iget_extra_inode:5073: inode #15: comm syz.2.832: corrupted in-inode xattr: e_value size too large [ 83.673151][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.690597][ T2460] EXT4-fs error (device loop1): ext4_release_dquot:7022: comm kworker/u8:13: Failed to release dquot type 1 [ 83.703497][ T6439] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.832: couldn't read orphan inode 15 (err -117) [ 83.722199][ T6442] loop3: detected capacity change from 0 to 8192 [ 83.744039][ T6445] netlink: 'syz.1.833': attribute type 4 has an invalid length. [ 83.760094][ T6439] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.783132][ T6441] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1) [ 83.791138][ T6441] FAT-fs (loop3): Filesystem has been set read-only [ 83.799734][ T6441] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1) [ 83.823301][ T6439] EXT4-fs error (device loop2): ext4_check_dx_root:2201: inode #2: comm syz.2.832: Corrupt dir, invalid name_len for '..', running e2fsck is recommended [ 83.850736][ T6442] syzkaller1: entered promiscuous mode [ 83.856226][ T6442] syzkaller1: entered allmulticast mode [ 83.939298][ T6454] netlink: 44 bytes leftover after parsing attributes in process `syz.3.834'. [ 83.964453][ T6457] loop3: detected capacity change from 0 to 512 [ 83.971654][ T6457] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 83.982837][ T6457] EXT4-fs (loop3): 1 truncate cleaned up [ 83.989053][ T6457] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.002895][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.068026][ T6387] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.072351][ T6460] x_tables: duplicate underflow at hook 3 [ 84.305766][ T6463] netlink: 8 bytes leftover after parsing attributes in process `syz.2.836'. [ 84.609104][ T29] kauditd_printk_skb: 58 callbacks suppressed [ 84.609118][ T29] audit: type=1400 audit(84.584:1562): avc: denied { mounton } for pid=6465 comm="syz.1.837" path="/179/bus/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 84.662423][ T29] audit: type=1400 audit(84.644:1563): avc: denied { create } for pid=6465 comm="syz.1.837" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 84.694426][ T29] audit: type=1400 audit(84.644:1564): avc: denied { write } for pid=6465 comm="syz.1.837" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 84.849912][ T6468] netlink: 12 bytes leftover after parsing attributes in process `syz.1.838'. [ 84.987445][ T6474] netlink: 4 bytes leftover after parsing attributes in process `syz.2.841'. [ 84.998709][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.041408][ T6387] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.103846][ T6480] xt_hashlimit: max too large, truncated to 1048576 [ 85.134798][ T3839] IPVS: starting estimator thread 0... [ 85.147285][ T6480] netlink: 16 bytes leftover after parsing attributes in process `syz.3.844'. [ 85.163802][ T6387] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.190679][ T29] audit: type=1400 audit(85.174:1565): avc: denied { getopt } for pid=6471 comm="syz.1.840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 85.249183][ T6490] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.251718][ T6495] netlink: 'syz.1.847': attribute type 25 has an invalid length. [ 85.269479][ T6495] netlink: 'syz.1.847': attribute type 7 has an invalid length. [ 85.277200][ T6495] netlink: 'syz.1.847': attribute type 1 has an invalid length. [ 85.284869][ T6495] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.292245][ T6484] IPVS: using max 2400 ests per chain, 120000 per kthread [ 85.323336][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.348390][ T29] audit: type=1400 audit(85.324:1566): avc: denied { lock } for pid=6492 comm="syz.1.847" path="socket:[15639]" dev="sockfs" ino=15639 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 85.401061][ T6506] netlink: 'syz.2.849': attribute type 10 has an invalid length. [ 85.464455][ T2240] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.500120][ T29] audit: type=1400 audit(85.474:1567): avc: denied { ioctl } for pid=6514 comm="syz.2.855" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x5393 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 85.525717][ T6509] set_capacity_and_notify: 4 callbacks suppressed [ 85.525734][ T6509] loop3: detected capacity change from 0 to 8192 [ 85.563902][ T2240] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.585640][ T6509] loop3: p4 < > [ 85.602600][ T6522] netlink: 'syz.1.857': attribute type 66 has an invalid length. [ 85.674290][ T2664] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.683002][ T2664] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.720411][ T5825] udevd[5825]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 85.738205][ T29] audit: type=1400 audit(85.714:1568): avc: denied { read } for pid=6525 comm="syz.2.858" lport=50782 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 85.774455][ T6531] loop5: detected capacity change from 0 to 512 [ 85.774661][ T6528] loop1: detected capacity change from 0 to 2048 [ 85.789005][ T6531] EXT4-fs: Ignoring removed nobh option [ 85.824417][ T6528] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.848756][ T6528] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 85.863806][ T29] audit: type=1400 audit(85.824:1569): avc: denied { ioctl } for pid=6527 comm="syz.1.860" path="/189/file1/file1" dev="loop1" ino=15 ioctlcmd=0x5829 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 85.864190][ T6531] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 85.937703][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.950889][ T6531] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.015383][ T29] audit: type=1400 audit(85.994:1570): avc: denied { setopt } for pid=6542 comm="syz.0.865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 86.034265][ T29] audit: type=1400 audit(86.004:1571): avc: denied { create } for pid=6530 comm="syz.5.861" name="control" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 86.082911][ T6075] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.459709][ T6601] loop5: detected capacity change from 0 to 764 [ 86.507685][ T6603] SELinux: ebitmap: truncated map [ 86.513497][ T6603] SELinux: failed to load policy [ 86.547056][ T6609] loop5: detected capacity change from 0 to 512 [ 86.554005][ T6609] EXT4-fs: Ignoring removed nobh option [ 86.571052][ T6614] loop1: detected capacity change from 0 to 128 [ 86.586274][ T6614] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 86.609344][ T6609] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.630252][ T6614] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 86.662338][ T587] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 86.681926][ T6075] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.682310][ T6622] loop1: detected capacity change from 0 to 1024 [ 86.768534][ T6635] 9p: Bad value for 'rfdno' [ 86.791634][ T6637] loop1: detected capacity change from 0 to 128 [ 86.939037][ T6643] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 86.999110][ T6646] loop0: detected capacity change from 0 to 512 [ 87.006076][ T6646] EXT4-fs: Ignoring removed nobh option [ 87.023866][ T6646] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.049260][ T6649] SELinux: failed to load policy [ 87.111303][ T6649] loop1: detected capacity change from 0 to 512 [ 87.215205][ T6654] syzkaller1: entered promiscuous mode [ 87.220732][ T6654] syzkaller1: entered allmulticast mode [ 87.233519][ T3325] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.330959][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 87.478872][ T6675] msdos: Unknown parameter 'dos' [ 87.534067][ T6681] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6681 comm=syz.2.904 [ 87.559180][ T6682] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 87.588925][ T6687] netlink: 'syz.2.906': attribute type 10 has an invalid length. [ 87.598394][ T6682] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal [ 87.601842][ T6687] batman_adv: batadv0: Adding interface: netdevsim1 [ 87.612949][ T6687] batman_adv: batadv0: The MTU of interface netdevsim1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.638623][ T6687] batman_adv: batadv0: Not using interface netdevsim1 (retrying later): interface not active [ 87.684274][ T6689] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 87.724544][ T6689] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 87.758523][ T6689] System zones: 0-2, 18-18, 34-34 [ 87.768631][ T6689] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.907: iget: bad i_size value: 360287970189639680 [ 87.801763][ T6689] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.907: couldn't read orphan inode 15 (err -117) [ 87.841065][ T6689] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.853515][ T6698] __nla_validate_parse: 18 callbacks suppressed [ 87.853531][ T6698] netlink: 12 bytes leftover after parsing attributes in process `syz.5.908'. [ 87.857746][ T6693] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=6693 comm=syz.2.909 [ 87.860171][ T6698] netlink: 12 bytes leftover after parsing attributes in process `syz.5.908'. [ 87.896087][ T6689] EXT4-fs error (device loop3): ext4_find_dest_de:2050: inode #2: block 3: comm syz.3.907: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 87.942790][ T6689] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.164008][ T6730] EXT4-fs (loop2): Invalid default hash set in the superblock [ 88.196123][ T6731] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 88.234870][ T6737] netlink: 12 bytes leftover after parsing attributes in process `syz.2.923'. [ 88.256547][ T6731] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.920: bg 0: block 112: padding at end of block bitmap is not set [ 88.301199][ T6731] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 117 [ 88.313750][ T6731] EXT4-fs (loop0): This should not happen!! Data will be lost [ 88.313750][ T6731] [ 88.386979][ T3325] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 88.601931][ T6761] netlink: 'syz.0.931': attribute type 4 has an invalid length. [ 89.323683][ T6781] bridge0: entered promiscuous mode [ 89.332635][ T6782] tipc: Started in network mode [ 89.337548][ T6782] tipc: Node identity 84e, cluster identity 4711 [ 89.343963][ T6782] tipc: Node number set to 2126 [ 89.356177][ T6781] EXT4-fs: Ignoring removed orlov option [ 89.380500][ T6781] EXT4-fs (loop1): can't mount with journal_checksum, fs mounted w/o journal [ 89.493721][ T2661] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.519502][ T6796] netlink: 12 bytes leftover after parsing attributes in process `syz.2.942'. [ 89.528658][ T6795] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6795 comm=syz.0.941 [ 89.554383][ T2661] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.615167][ T2661] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.640261][ T29] kauditd_printk_skb: 134 callbacks suppressed [ 89.640277][ T29] audit: type=1400 audit(89.614:1706): avc: denied { shutdown } for pid=6811 comm="syz.0.949" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 89.701950][ T2661] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.723216][ T6810] EXT4-fs: Ignoring removed bh option [ 89.731342][ T6821] EXT4-fs: Ignoring removed oldalloc option [ 89.760258][ T6821] EXT4-fs error (device loop0): ext4_xattr_inode_iget:437: comm syz.0.950: Parent and EA inode have the same ino 15 [ 89.775227][ T6821] EXT4-fs (loop0): 1 orphan inode deleted [ 89.783612][ T6821] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.792882][ T6810] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.809558][ T2661] bridge_slave_1: left allmulticast mode [ 89.815266][ T2661] bridge_slave_1: left promiscuous mode [ 89.821024][ T2661] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.829592][ T2661] bridge_slave_0: left allmulticast mode [ 89.835357][ T2661] bridge_slave_0: left promiscuous mode [ 89.841361][ T2661] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.849454][ T6810] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 89.864926][ T6810] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 89.877211][ T6810] EXT4-fs (loop2): This should not happen!! Data will be lost [ 89.877211][ T6810] [ 89.887004][ T6810] EXT4-fs (loop2): Total free blocks count 0 [ 89.893212][ T6810] EXT4-fs (loop2): Free/Dirty block details [ 89.899105][ T6810] EXT4-fs (loop2): free_blocks=2415919104 [ 89.904916][ T6810] EXT4-fs (loop2): dirty_blocks=16 [ 89.910018][ T6810] EXT4-fs (loop2): Block reservation details [ 89.916011][ T6810] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 89.928778][ T3325] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.953657][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.975378][ T3010] ================================================================== [ 89.983497][ T3010] BUG: KCSAN: data-race in block_uevent / inc_diskseq [ 89.985035][ T6832] EXT4-fs: Ignoring removed i_version option [ 89.990264][ T3010] [ 89.990273][ T3010] write to 0xffff888101ca6e18 of 8 bytes by task 3320 on cpu 0: [ 89.990290][ T3010] inc_diskseq+0x2d/0x40 [ 89.990317][ T3010] disk_force_media_change+0x9e/0xe0 [ 89.990336][ T3010] lo_release+0x2eb/0x420 [ 89.990354][ T3010] bdev_release+0x373/0x3d0 [ 89.990373][ T3010] blkdev_release+0x15/0x20 [ 89.996419][ T6832] EXT4-fs: Ignoring removed nobh option [ 89.998658][ T3010] __fput+0x29b/0x650 [ 90.038437][ T3010] fput_close_sync+0xad/0x190 [ 90.043120][ T3010] __x64_sys_close+0x55/0xf0 [ 90.047706][ T3010] x64_sys_call+0x2c25/0x3000 [ 90.052376][ T3010] do_syscall_64+0xc0/0x2a0 [ 90.056960][ T3010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.062854][ T3010] [ 90.065164][ T3010] read to 0xffff888101ca6e18 of 8 bytes by task 3010 on cpu 1: [ 90.072691][ T3010] block_uevent+0x31/0x50 [ 90.077009][ T3010] dev_uevent+0x375/0x400 [ 90.081324][ T3010] uevent_show+0x11a/0x200 [ 90.085724][ T3010] dev_attr_show+0x3f/0xa0 [ 90.090122][ T3010] sysfs_kf_seq_show+0x1a3/0x280 [ 90.095047][ T3010] kernfs_seq_show+0x82/0xa0 [ 90.099636][ T3010] seq_read_iter+0x31e/0x940 [ 90.104222][ T3010] kernfs_fop_read_iter+0xc1/0x330 [ 90.109330][ T3010] vfs_read+0x6c0/0x7f0 [ 90.113485][ T3010] ksys_read+0xdc/0x1a0 [ 90.117624][ T3010] __x64_sys_read+0x40/0x50 [ 90.122200][ T3010] x64_sys_call+0x2889/0x3000 [ 90.126868][ T3010] do_syscall_64+0xc0/0x2a0 [ 90.131364][ T3010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.137246][ T3010] [ 90.139550][ T3010] value changed: 0x00000000000001b9 -> 0x00000000000001bc [ 90.146638][ T3010] [ 90.148945][ T3010] Reported by Kernel Concurrency Sanitizer on: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 90.155079][ T3010] CPU: 1 UID: 0 PID: 3010 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 90.165915][ T3010] Tainted: [W]=WARN [ 90.169705][ T3010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 90.179747][ T3010] ================================================================== [ 90.189583][ T29] audit: type=1400 audit(90.164:1707): avc: denied { write } for pid=3306 comm="syz-executor" path="pipe:[460]" dev="pipefs" ino=460 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 90.221003][ T6832] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 90.232052][ T6832] EXT4-fs (loop0): 1 truncate cleaned up [ 90.238206][ T6832] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.270186][ T2661] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 90.326970][ T2661] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 90.370686][ T2661] bond0 (unregistering): Released all slaves [ 90.378224][ T2661] bond1 (unregistering): Released all slaves [ 90.433803][ T2661] hsr_slave_0: left promiscuous mode [ 90.439723][ T2661] hsr_slave_1: left promiscuous mode [ 90.445513][ T2661] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 90.452930][ T2661] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 90.460790][ T2661] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 90.468257][ T2661] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 90.479381][ T2661] veth1_macvtap: left promiscuous mode [ 90.485119][ T2661] veth0_macvtap: left promiscuous mode [ 90.500668][ T2661] veth1_vlan: left promiscuous mode [ 90.505999][ T2661] veth0_vlan: left promiscuous mode [ 90.559328][ T6832] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.596422][ T2661] team0 (unregistering): Port device team_slave_1 removed [ 90.609275][ T2661] team0 (unregistering): Port device team_slave_0 removed [ 91.033785][ T2661] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 91.044197][ T2661] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.103072][ T2661] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 91.113431][ T2661] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.161660][ T2661] batman_adv: batadv0: Removing interface: netdevsim1 [ 91.168746][ T2661] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 91.179096][ T2661] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.232781][ T2661] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 91.243147][ T2661] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.318761][ T2661] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.357137][ T2661] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.414004][ T2661] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.459063][ T2661] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.523001][ T2661] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.561664][ T2661] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.615028][ T2661] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.662499][ T2661] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.744621][ T2661] bridge_slave_1: left allmulticast mode [ 91.750290][ T2661] bridge_slave_1: left promiscuous mode [ 91.756201][ T2661] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.764317][ T2661] bridge_slave_0: left allmulticast mode [ 91.769974][ T2661] bridge_slave_0: left promiscuous mode [ 91.775867][ T2661] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.784405][ T2661] bridge_slave_1: left allmulticast mode [ 91.790067][ T2661] bridge_slave_1: left promiscuous mode [ 91.795783][ T2661] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.803767][ T2661] bridge_slave_0: left allmulticast mode [ 91.809945][ T2661] bridge_slave_0: left promiscuous mode [ 91.815936][ T2661] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.824623][ T2661] bridge_slave_1: left allmulticast mode [ 91.830289][ T2661] bridge_slave_1: left promiscuous mode [ 91.836001][ T2661] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.843897][ T2661] bridge_slave_0: left allmulticast mode [ 91.849530][ T2661] bridge_slave_0: left promiscuous mode [ 91.855359][ T2661] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.972080][ T2661] bond0 (unregistering): left promiscuous mode [ 91.978328][ T2661] bond_slave_0: left promiscuous mode [ 91.983896][ T2661] bond_slave_1: left promiscuous mode [ 91.992073][ T2661] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 92.001578][ T2661] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 92.011209][ T2661] bond0 (unregistering): Released all slaves [ 92.018515][ T2661] bond1 (unregistering): Released all slaves [ 92.040677][ T2661] dvmrp6 (unregistering): left allmulticast mode [ 92.142062][ T2661] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 92.151714][ T2661] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 92.161056][ T2661] bond0 (unregistering): Released all slaves [ 92.168350][ T2661] bond1 (unregistering): Released all slaves [ 92.291508][ T2661] bond0 (unregistering): left promiscuous mode [ 92.297686][ T2661] bond_slave_0: left promiscuous mode [ 92.303208][ T2661] bond_slave_1: left promiscuous mode [ 92.311454][ T2661] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 92.321242][ T2661] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 92.330731][ T2661] bond0 (unregistering): Released all slaves [ 92.368260][ T2661] tipc: Left network mode [ 92.379908][ T2661] tipc: Left network mode [ 92.385759][ T2661] tipc: Left network mode [ 92.391815][ T2661] IPVS: stopping backup sync thread 4053 ... [ 92.398955][ T2661] IPVS: stopping master sync thread 5035 ... [ 92.405267][ T2661] IPVS: stopping master sync thread 4281 ... [ 92.413139][ T2661] hsr_slave_0: left promiscuous mode [ 92.418960][ T2661] hsr_slave_1: left promiscuous mode [ 92.425022][ T2661] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.432504][ T2661] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 92.441460][ T2661] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.448858][ T2661] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 92.458645][ T2661] hsr_slave_0: left promiscuous mode [ 92.464401][ T2661] hsr_slave_1: left promiscuous mode [ 92.469932][ T2661] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.477387][ T2661] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 92.484918][ T2661] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.492369][ T2661] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 92.500833][ T2661] hsr_slave_0: left promiscuous mode [ 92.506370][ T2661] hsr_slave_1: left promiscuous mode [ 92.511941][ T2661] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.519293][ T2661] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 92.526905][ T2661] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.534491][ T2661] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 92.542266][ T2661] batman_adv: batadv0: Interface deactivated: dummy0 [ 92.548990][ T2661] batman_adv: batadv0: Removing interface: dummy0 [ 92.561571][ T2661] veth1_vlan: left allmulticast mode [ 92.567025][ T2661] veth1_vlan: left promiscuous mode [ 92.572347][ T2661] veth0_vlan: left promiscuous mode [ 92.578031][ T2661] veth1_macvtap: left promiscuous mode [ 92.583507][ T2661] veth0_macvtap: left promiscuous mode [ 92.589068][ T2661] veth1_vlan: left promiscuous mode [ 92.594611][ T2661] veth0_vlan: left promiscuous mode [ 92.600311][ T2661] veth1_vlan: left promiscuous mode [ 92.605707][ T2661] veth0_vlan: left promiscuous mode [ 92.683367][ T2661] pim6reg9 (unregistering): left allmulticast mode [ 92.692602][ T2661] pim6reg (unregistering): left allmulticast mode [ 92.701122][ T2661] pimreg3 (unregistering): left allmulticast mode [ 92.726599][ T2661] team0 (unregistering): Port device team_slave_1 removed [ 92.735983][ T2661] team0 (unregistering): Port device team_slave_0 removed [ 92.785379][ T2661] team0 (unregistering): Port device team_slave_1 removed [ 92.795492][ T2661] team0 (unregistering): Port device team_slave_0 removed [ 92.839306][ T2661] team0 (unregistering): Port device team_slave_1 removed [ 92.848609][ T2661] team0 (unregistering): Port device team_slave_0 removed [ 93.397851][ T2661] IPVS: stop unused estimator thread 0... [ 93.442975][ T2661] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.492781][ T2661] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.541958][ T2661] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.602030][ T2661] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.660141][ T2661] bridge_slave_1: left allmulticast mode [ 93.665875][ T2661] bridge_slave_1: left promiscuous mode [ 93.671578][ T2661] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.679542][ T2661] bridge_slave_0: left allmulticast mode [ 93.685216][ T2661] bridge_slave_0: left promiscuous mode [ 93.690945][ T2661] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.762250][ T2661] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 93.771895][ T2661] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 93.781807][ T2661] bond0 (unregistering): Released all slaves [ 93.789016][ T2661] bond1 (unregistering): Released all slaves [ 93.797058][ T2661] bond2 (unregistering): Released all slaves [ 93.851643][ T2661] hsr_slave_0: left promiscuous mode [ 93.857337][ T2661] hsr_slave_1: left promiscuous mode [ 93.863280][ T2661] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 93.870753][ T2661] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 93.878451][ T2661] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 93.885902][ T2661] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 93.897368][ T2661] veth1_macvtap: left promiscuous mode [ 93.903670][ T2661] veth0_macvtap: left promiscuous mode [ 93.909161][ T2661] veth1_vlan: left promiscuous mode [ 93.914429][ T2661] veth0_vlan: left promiscuous mode [ 93.964006][ T2661] team0 (unregistering): Port device team_slave_1 removed [ 93.976252][ T2661] team0 (unregistering): Port device team_slave_0 removed [ 94.253702][ T2661] IPVS: stop unused estimator thread 0...