last executing test programs: 1m12.069117483s ago: executing program 1 (id=55): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x1c, 0x2, 0x3, 0x401, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x24, 0x2, 0x3, 0x101, 0x0, 0x0, {0xa, 0x0, 0xffff}, [@NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x2c}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x7}]}, 0x24}}, 0x814) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000080)={@val={0xa, 0x88a8}, @void, @eth={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}, @val={@val={0x88a8, 0x7, 0x0, 0x2}, {0x8100, 0x3, 0x1}}, {@generic={0x800}}}}, 0x1a) 1m12.067056433s ago: executing program 1 (id=56): bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e24, @empty}, 0x10) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c000180060006"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="310300200000000000400800000008000300", @ANYRES32=r4], 0x24}, 0x1, 0x0, 0x0, 0x400400c}, 0x0) sendmsg$802154_dgram(r1, &(0x7f0000000300)={&(0x7f0000000040)={0x24, @short}, 0x14, &(0x7f0000000140)={&(0x7f0000000240)="28c4e568ed948f76ca5d755669185313d0b9ddd78c4d6fde61defa85485cb293d790f95d0e787f490be570f14a25f66448a1fb841d30dee4962896c3052f2209d71664298ae1f4b690645ee4aacff37e67de68eccc3cbc8c6c02902106dc4941b84df6e111190c3032b310bfa9c21a8c67c9c9f2aba6d7d74af3d5a74713edf569b02fdae36fb020c4559b277cb097916fbec212c5652de3fa0d24bf0099416a97be193d45b9b1f88513147d80787d0f0f", 0xb1}, 0x1, 0x0, 0x0, 0x10}, 0x44014) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r6, @ANYBLOB="000024000000000024001200140001006272696467655f736c617665800000000c000500080005"], 0x3}, 0x1, 0x0, 0x0, 0x40900}, 0x0) splice(r0, 0x0, r5, 0x0, 0x10d00, 0x9) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e24, @empty}, 0x10) (async) pipe(&(0x7f0000000200)) (async) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) (async) close(r1) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c000180060006"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)) (async) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="310300200000000000400800000008000300", @ANYRES32=r4], 0x24}, 0x1, 0x0, 0x0, 0x400400c}, 0x0) (async) sendmsg$802154_dgram(r1, &(0x7f0000000300)={&(0x7f0000000040)={0x24, @short}, 0x14, &(0x7f0000000140)={&(0x7f0000000240)="28c4e568ed948f76ca5d755669185313d0b9ddd78c4d6fde61defa85485cb293d790f95d0e787f490be570f14a25f66448a1fb841d30dee4962896c3052f2209d71664298ae1f4b690645ee4aacff37e67de68eccc3cbc8c6c02902106dc4941b84df6e111190c3032b310bfa9c21a8c67c9c9f2aba6d7d74af3d5a74713edf569b02fdae36fb020c4559b277cb097916fbec212c5652de3fa0d24bf0099416a97be193d45b9b1f88513147d80787d0f0f", 0xb1}, 0x1, 0x0, 0x0, 0x10}, 0x44014) (async) socket$netlink(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00'}) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r6, @ANYBLOB="000024000000000024001200140001006272696467655f736c617665800000000c000500080005"], 0x3}, 0x1, 0x0, 0x0, 0x40900}, 0x0) (async) splice(r0, 0x0, r5, 0x0, 0x10d00, 0x9) (async) 1m12.057696544s ago: executing program 1 (id=57): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10) recvmmsg(r0, &(0x7f0000007900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000180)=@file={0x1}, 0x6e) listen(r1, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300a8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffff800, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x5f21df7aec8d40fb, 0x0, 0x0, 0x5}, 0x0, 0x0, r2, 0x0) perf_event_open(0x0, 0x0, 0x40000000000000, r2, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) connect$unix(r3, &(0x7f0000000000)=@file={0x1}, 0x6e) connect$unix(r3, &(0x7f0000000080)=@file={0x1}, 0x6e) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x8, 0x3, 0x420, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x350, 0xffffffff, 0xffffffff, 0x350, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @remote, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x280, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x7, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x2, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x480) close_range(r5, 0xffffffffffffffff, 0x0) 1m12.053086354s ago: executing program 1 (id=60): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000000b0601030000000000000000020000050900020073797a310000000004000780050001"], 0x2c}, 0x1, 0x0, 0x0, 0x8090}, 0x40) (async) sendmsg$IPSET_CMD_TEST(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000000b0601030000000000000000020000050900020073797a310000000004000780050001"], 0x2c}, 0x1, 0x0, 0x0, 0x8090}, 0x40) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000480)='./file1\x00', 0x1010004, &(0x7f0000000200)=ANY=[@ANYBLOB="696f636861727365743d69736f383835392d322c637275667400739e2c6b288d9be9de392bb4d662736563746f723d3078303030303030303030303030303030392c6d6f64653d3078303030303030303030303030303030302c73657373696f6e3d3078303030303030303030303030303033622c6e6f636f6d70726573734173686f776173736f632c636865636b3d7374726963742c00"], 0x0, 0x65c, &(0x7f0000000a00)="$eJzs3c9v3Ggdx/GPJ5NkEqQVArSqqm77bMtKqSjTmck2VVQOGI8n8TIzHtkOSiSkVdkmq6iTLrRF2uayyoUf0vIPcEF74cCVOxJn/guOSCu4IXHAyPb8yvxM0tkE6PsVpX7G/vp5vo899SNnxrYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAsp1oqlS3VvebOrpnMqQZ+Y8ryrLZF3c0Kd2e2K1nJrwoFXctmXftWf/HbyT+3dSN7dUOFZFLQ8dfe/vqjb+Zz3fWnJHQROm+FL14dP33cbu8/n3Mil+yxRnuu3BlW3HKbXuh7DXvLNV7om82NjdL97Vpoal7dDffCyG0YJ3BzkR+YNeeuKW9urhu3uOfvNLeqdt2VspkPv1splTbMB8ud3X//g2LobHv1utfcSldMFicxD83nP85CXLthzMFhe399VpJJUPksQZVZQZVSpVIuVyrljQebDx6WSvmRGaUhGomY+5sW/2Pmd/AGXlMuGf//aknJobepHe3KjP1xVFUgX40Jyzu64/97992p7Q6O/91R/lp/8XWl4//N7NXNSeP/hFyMTLrCuCXWhPkX+3mhVzrWUz1WW23t6/l86r01vwwv/lOYFZGTtqS85CmUL08N2dqSK9OZY7SpDW2opA+1rZpCGdXkqS5XofYUKpKrRrpPArmyFclXIKM1Oboro7I2tal1Gbkqak++dtTUlqqy9c84jg90mGz3ae8EqROk8lmCKlOCJo3/P/kse58y/r/pusevs8QAVy7unP9LC+dZ7dZXlxEAAAAAAJg3K/3ru5V+dv+OpFg1r+6WrjotAAAAAAAwR8mZv24kk8Wk9I6sCef/8eXnBgAAAAAA5sNKr7GzJK0udmYd6FD/jvd1li8BnOuiAQAAAAAAcDXSz/9vLklxeu+1W7J6d0LhIgAAAAAAAP5P/GrgHvv57j124+7H+jlJYWvZ+tPflxUsWiet3W9bR3ayxD7qxIx8AyCqXbfe6tyoN50sSUpfOe6i1X8wgJX+FrIXXx7Mute/FQwlsLTQ/fPFSAJ/lDSQwEa+U5c+17tZzLuddp8c55QuyVpZrXl1t+j49Udl2fZbucjdjX6+kgQGvX4eHLb3ix990n6S5nKSzDo5SvL47FQ6ufEbo5/Ly/R+C+k1F+N6vKJat8lfNxurVtpuqdv/BdlHucGGpu2Afpu/0O0s5vZqNl097u6BtP+FpP/lYrrLOr1/dvhpencIq59Febjn43bEhCwKaRZ3spg7a3eySTe/ThbfWZAqxcF98OzwUyl5B/SzqAxmMXtbWP8Y2RYzski2xXqSxZ+TiiZksX6+LEb2CABclYP+KJTexHz0HvvD4+5FjnKzR/fvn27l5W/j7ILDBSnf+WxiaisFJUf0tSxmSemBNX99zBG91BlXCppwRC+9xuiWtPWH/jOQOmmPZPGvOI4fldN2fzM0qn6RrPDFxHbDemUh2YT3Xx79NL0BfuLj/Y/3n1Uq6xul90ulBxUtpt3oTBh7AABjzH7GzswI6/3eWfWTv72XlU6NeN/ofaWgqI/0idp6onvdRwjcGl/r6sDXEO6NnrUmsel5+anY3y3q3sSzunQsHai30ovtXvgwfAbYj13/ivcCAACX6/aMcfgs4/+97nn32vWx592nx/LhJwRPii1f8pYAAODN4QZfWqvRL60g8Fofljc3y3a07ZrAd35oAq+65RqvGbmBs203t1zTCvzId/y6aQVa9qpuaMKdVssPIlPzA9PyQ283ffK76Tz6PXQbdjPynLBVd+3QNY7fjGwnMlUvdExr5wd1L9x2g3TlsOU6Xs1z7Mjzmyb0dwLHLRoTuu5AoFd1m5FX85Ji07QCr2EHe+ZHfn2n4ZqqGzqB14r8rMJuW16z5geNtNqi4nHfFwAA4I3z4tXx08ft9v7zU4Xu5+3ZnBONixlbWBpX4RV3EQAADGGUBgAAAAAAAAAAAAAAAAAAAADgv9/sS/rOWVgcd7Gg1Jvzs7fOVI+leSd2nkLu4qv/ZUrMSm9Od/MPxpxcQU+VFfLzr3lFOvtlo3MofO8g26ITY9S7nnVo0XJvX+Tn/98hKTz7fXt/ZdyiOI7j6asvn96GS9M6eLqQl/R86TV2wdUcjwBcnv8EAAD//y/MP6I=") (async) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000480)='./file1\x00', 0x1010004, &(0x7f0000000200)=ANY=[@ANYBLOB="696f636861727365743d69736f383835392d322c637275667400739e2c6b288d9be9de392bb4d662736563746f723d3078303030303030303030303030303030392c6d6f64653d3078303030303030303030303030303030302c73657373696f6e3d3078303030303030303030303030303033622c6e6f636f6d70726573734173686f776173736f632c636865636b3d7374726963742c00"], 0x0, 0x65c, &(0x7f0000000a00)="$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") ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='net_prio.prioidx\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r3, 0xc0a85322, &(0x7f0000000340)) (async) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r3, 0xc0a85322, &(0x7f0000000340)) prctl$PR_SCHED_CORE(0x41, 0x3, 0x0, 0x0, 0x0) (async) prctl$PR_SCHED_CORE(0x41, 0x3, 0x0, 0x0, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x2, 0x6}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6, @multicast}, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0xfffffffd, 0x1000, 0x0, 0x4}, &(0x7f0000000240)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f00000008c0)=0xfffffff8, 0x0, 0x4) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f00000008c0)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffffffffe4a, 0x0, 0x0, 0x0, 0x1}) (async) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffffffffe4a, 0x0, 0x0, 0x0, 0x1}) syz_clone(0x8000, &(0x7f0000000580)="8613a9f00c598b57765cae905a6efed982e958c7a5f0f080bf3b9420744d025bfb7f4b51d8a796409233f541c9cad7a4b0daa6014c204c7f91802e4895843e2049c7c114a3d683a1ac2815dcefd758dd33e1b96e3127c270cc2b1192ccdf1d5d14cb5ab941eb89e66dda", 0x6a, &(0x7f0000000600), &(0x7f0000000640), &(0x7f0000000680)="6b2b882a1363a2630f6cb86865d27293d40d72efdd698cd9ac1eb5188c90e9be312ec022f7f1d9fc04e699d420a60bfd4440a4fc2c70cf725c9f79231d3dab3cb4ce5679f722a583892dedbeb4086f541759a43535047eae4ba54be63643acae22914b0818cfb4de24692659a0bf896091198f3cf3aaaaaf013e4baab19a7ac9c94c85c6a7bbc32ad3aefe3c4ad906") (async) r7 = syz_clone(0x8000, &(0x7f0000000580)="8613a9f00c598b57765cae905a6efed982e958c7a5f0f080bf3b9420744d025bfb7f4b51d8a796409233f541c9cad7a4b0daa6014c204c7f91802e4895843e2049c7c114a3d683a1ac2815dcefd758dd33e1b96e3127c270cc2b1192ccdf1d5d14cb5ab941eb89e66dda", 0x6a, &(0x7f0000000600), &(0x7f0000000640), &(0x7f0000000680)="6b2b882a1363a2630f6cb86865d27293d40d72efdd698cd9ac1eb5188c90e9be312ec022f7f1d9fc04e699d420a60bfd4440a4fc2c70cf725c9f79231d3dab3cb4ce5679f722a583892dedbeb4086f541759a43535047eae4ba54be63643acae22914b0818cfb4de24692659a0bf896091198f3cf3aaaaaf013e4baab19a7ac9c94c85c6a7bbc32ad3aefe3c4ad906") sched_setaffinity(r7, 0x8, &(0x7f0000000740)=0x3) syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x40000) socket$kcm(0x2, 0x1, 0x84) (async) r8 = socket$kcm(0x2, 0x1, 0x84) io_setup(0x2, &(0x7f0000000000)=0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000300)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) socket$nl_route(0x10, 0x3, 0x0) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newtaction={0x60, 0x30, 0xffff, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0xff}, 0x8}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFNL_MSG_COMPAT_GET(r12, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200610}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[@ANYBLOB="23000000000b01010000000000000007080001002d7b28000a000100bbbbbbbbbbbb00000800034000000001"], 0x30}, 0x1, 0x0, 0x0, 0x24}, 0x1) (async) sendmsg$NFNL_MSG_COMPAT_GET(r12, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200610}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[@ANYBLOB="23000000000b01010000000000000007080001002d7b28000a000100bbbbbbbbbbbb00000800034000000001"], 0x30}, 0x1, 0x0, 0x0, 0x24}, 0x1) r13 = syz_open_dev$tty1(0xc, 0x4, 0x1) r14 = dup(r13) write$UHID_INPUT(r14, &(0x7f0000001040)={0x7, {"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", 0x1000}}, 0x1006) io_submit(r9, 0x3, &(0x7f0000000880)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r10, 0x0, 0x0, 0xfffffffffffffffe}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x5, 0x7, r4, &(0x7f0000002080)="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", 0x1000, 0x5, 0x0, 0x7, r12}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x40c, r8, &(0x7f00000007c0)="0586a81c65310e2d102547429f728bf1263255a14410e247e0d9e0499de3a010b0066b2934d6e485de699e20e63d706913cb25e759472618ebbf969e41a10f1a18935262bc6b08fdaee6152ba53ab253d48f9c75a6a326b539e6e1d4a0c96ca8b1730d6ccbc3cacdb458", 0x6a, 0x9, 0x0, 0x0, r14}]) 1m12.004548011s ago: executing program 1 (id=63): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) (async) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=@base={0x19, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x3}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0xe, &(0x7f0000001440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000001800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x9, 0x1006, &(0x7f0000002080)=""/4102}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5000000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800b00014c62726964676500002000028005001600020068d482ce1d84d6a94e557f01833e0000000000000000"], 0x50}, 0x1, 0x0, 0x0, 0x400c000}, 0x44) 1m11.62456899s ago: executing program 1 (id=69): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x46, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0x68a5, 0x4006, 0x4, 0x0, 0x3, 0x20, 0x6, 0x0, 0x0, 0x0, 0x40000000000002}, 0x0, 0x0, 0xffffffffffffffff, 0x8) syz_io_uring_setup(0x497, &(0x7f0000000300)={0x0, 0x8d4f, 0x100, 0x3, 0x16b}, &(0x7f0000000480), &(0x7f0000000440)) r0 = syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000080)='./file2\x00', 0x1808004, &(0x7f0000000680)=ANY=[@ANYRES16=0x0, @ANYRES64, @ANYRESHEX, @ANYBLOB="92208f8dd2478c4248608a57ea023ef8845944fce569f274772ca5201b4d19c9435b225c2703c4693641c3dab414ccfaa1ac12e42d3a51a9fd90dbb8dfe62fb80628dedad9cd7198cb4a3151acd3756581ae75ee414b0456b64ef7cc12f7f5a3fc858a533068bf99853d8609541e6b600f496ce1dfa65b139a86732db5e92567e310c4de67464d7250876ff8485fc19836a302e2d02a707c1a4324c8624df0f5f22dcebd53ffd3d6cd01d6d0d6ae9e8c05db3db0e1ac10e46b5cda59dfe7ab7cffd6bf7efd4d1b7068ef0b878aff95af9e3c3cdf815921a9ffe2c0f97cdeaba5e6a40289c27f3b0339b98f8cd7f6684801e60f7b"], 0x4, 0x7dc, &(0x7f0000002a00)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x4) open_by_handle_at(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="00001d0441a633b440d800"], 0x202400) 1m11.62411933s ago: executing program 32 (id=69): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x46, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0x68a5, 0x4006, 0x4, 0x0, 0x3, 0x20, 0x6, 0x0, 0x0, 0x0, 0x40000000000002}, 0x0, 0x0, 0xffffffffffffffff, 0x8) syz_io_uring_setup(0x497, &(0x7f0000000300)={0x0, 0x8d4f, 0x100, 0x3, 0x16b}, &(0x7f0000000480), &(0x7f0000000440)) r0 = syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000080)='./file2\x00', 0x1808004, &(0x7f0000000680)=ANY=[@ANYRES16=0x0, @ANYRES64, @ANYRESHEX, @ANYBLOB="92208f8dd2478c4248608a57ea023ef8845944fce569f274772ca5201b4d19c9435b225c2703c4693641c3dab414ccfaa1ac12e42d3a51a9fd90dbb8dfe62fb80628dedad9cd7198cb4a3151acd3756581ae75ee414b0456b64ef7cc12f7f5a3fc858a533068bf99853d8609541e6b600f496ce1dfa65b139a86732db5e92567e310c4de67464d7250876ff8485fc19836a302e2d02a707c1a4324c8624df0f5f22dcebd53ffd3d6cd01d6d0d6ae9e8c05db3db0e1ac10e46b5cda59dfe7ab7cffd6bf7efd4d1b7068ef0b878aff95af9e3c3cdf815921a9ffe2c0f97cdeaba5e6a40289c27f3b0339b98f8cd7f6684801e60f7b"], 0x4, 0x7dc, &(0x7f0000002a00)="$eJzs3U1sHOUZAOB3nIQEIwVEqxRFIUwClYIEZr0GU5cDLOuxM7DetXbXVaKqohE4yIoDFIpacoGoErRVq6qnHilXbr1RVWqrHtqeKpVDL70hcaqo1D9RVUhbzew6/v9JcMxPnseyv9nZd77vnfV63pm193MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJHUJyuV0SQa+bfmzqSbq0+2WzNb3L/U329WNas8tmrciKT4jEOH4sN/9dd9cfnuI8WXk3Gsf+tYHCqaQ3HpliO3PfKF/UNL22+R0LU6scO4JOK1IqkL5xYX51+8DonsoR/+6qo3+W+v+DqdNfNOK5+pTWdp3mmlE+PjlQdOT/VuncobWedsp5vNpPV2Vuu22ump+r3p6MTEWJqNnG3NNacna41saeXD91crlfH0iZHZrNbutJoPPBGd+um80cib02VMtfKdKGIeLp6IT+bdtJvVZtL0/MLi/NiKrJKNUi2CRje6Y1//+XPsntvef/m9fy7MF0/IzfY3GTwxq6Oj1ero+EMTDz1cqeyvVqqrV1TWiCsRMRRRRFyXJy2fIbt7AIePYWhQ/6MReTRjLs5EuubjQEQciHpMRjtaMVOs+8uBdVEDS/X/yw/8/U9bjbuy/i9V+TuW7z4aZf0/3r91fLP6vy6LLT8OXFX0th+/PdzP7lJciHOxGIsxHy/u6gjpwd3NOI106OP2kKy6NR1ZNCOPTrQij5molWvSwZo0JmI8xqMST8XpmIpOpDEVeTQii06cjU50IyufUfVoRxa16EYr2pHGqajHvZHGaEzERIxFGlmMxNloxVw0Yzruj1rZy/lYKB/3sTVZHrk5fvnsn99/s1i+EjS61W4VJ3NF0D+2CFpX7res/71ecb6wNkL9v9Ht9iEcrllvqf4DAAAAn1tJ+ep7Ur7Ef2e5NJU3sq/vYMvu/j1IDwAAANgF5W/+jxXNgWLpzkiK6//KBpHv7nluAAAAwO5IyvfYJRExHHf1l87HQrwW87HRiwAAAADAZ1D5+//jRTMc8Wq5Ymm6FNf/AAAA8Dnx/c3m2H9vaY7dzuzB5NflHMDJ5dkz9yQXa0Vc7eK+/naD5mtXeuxOHU0ODzopm/H9l25JImJ/PTuWLM1++dHBfvtB+fXo8lwCm831n7TbWyYQWydQ3oofxYl+zIln+u0zg3uS/ijDU3kjG6m3Go+UUyIWn92Xn1v4bkQx+g+aM4eTOL+wOD/y9POLz5S5XC56uXxxMIHiqnkUe7dumUtv8AjEnRvv8YHyjRiDcYf741ZW7v9QufX/euU8s5vuf7JyzNfjZD/m5HC/HV66pz/moWLM0ZFHRqNWOzzUzc50X+6t2PtBFqPb7fk234XX4+5+zN2n7u43G2RRXZXFc+uzqK7Mov9YxNAuZfHmiVfP/Of3rSQb2y6LsavIorcvYm0WAJ+U8+WsP8tV6OayChVFpVDU/zV19+alLXdwrP338ij9s4yPBt1GxIpatz/WVvflvndW3XvRP6Kf6sec6p9P7D+6QV2pbHBEf2HhhT8MjugPvv2zn3/j+B9/UY57TdXt7bi3HzNo4vbfbVJji33+8Zqq+laxxVsbjlucg3Ua1SQuR+z79sUX4shLr1y6f+HiuWfnn51/rlodG688WKk8VI0D5anCoNkiUwBuXNv/j51NI24adJE8uNlV9aDi3X7lTwpG4ul4PhajOAO4qx971/px3ymuxFf8GcJ921y1Dq/4Dy/3bXNtuRxbXR+bxCaxYysesS/9tGw+vC7fDgDYEydX1uFecjX1/8or8/dtc929upavuTqOzWv5Rr5yfR8OALghZO0PkuHuG0m7nc8+NToxMVrrns7Sdqv+ZNrOJ6ezNG92s3b9dK05naWz7Va3VV964Xgy66SdudnZVrubTrXaaQx18jPpVN7I0sG/fu9kM7VmN693ZhtZrZOl9VazW6t308m8U09n5x5v5J3TWbvcuDOb1fOpvF7r5q1m2mnNtevZSJp2smxFYD6ZNbv5VF4sNtPZdj5Ta1+OiMbcTJZOZp16O5/ttvodLo2VN6da7Zmy25H1u/+3vX68AeDT4KVXLl04t7g4/+K1Lfx1J8Gf9D4CAKvtqEr39jAhAAAAAAAAAAAAAABgnfVv1yvWfox3BF7dwsG47kPcQAtfHUzJ2F9TLH1KEttqYSiu5xDffPTRC5vFPP7qHad31s/GPykbvdX1jcMRN73zk/6axzYP/t7g52939vTdiLiGzXvJFjGrDhM37fFhCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA29P8AAAD//zO0a7E=") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x4) open_by_handle_at(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="00001d0441a633b440d800"], 0x202400) 4.043607398s ago: executing program 5 (id=791): socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setreuid(0xee01, 0xee01) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, r1, 0x0, 0x4, 0x0) r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000001fc0)=[{}], 0x1, 0x0, 0x0, 0x2, 0x0, 0x2}) r3 = syz_pidfd_open(r1, 0x0) pidfd_send_signal(r3, 0x2, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='io.stat\x00', 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001000ffff27bd7000f7dbdf2500000000", @ANYBLOB="fda45d0521860000140012800c0001006d61637674617000040002800800", @ANYRES32=r6], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000180)={{{@in=@initdev, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@loopback}}, &(0x7f0000000080)=0xfffffffffffffc4c) setsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000280)={{{@in6=@loopback, @in=@local, 0x4e22, 0x1, 0x4e22, 0x87e, 0x2, 0xe0, 0x80, 0x73, r6, r8}, {0x0, 0xfffffffffffffff8, 0x7, 0xef8f, 0x8000000000000001, 0xa1, 0x5, 0x1}, {0x4ec94381, 0x6, 0xffffffff, 0x5}, 0x2, 0x0, 0x2, 0x0, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4d6, 0xff}, 0x2, @in6=@private2, 0x3506, 0x0, 0x1, 0x6, 0x80, 0xb, 0x400}}, 0xe8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x600) r11 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r11, 0x114, 0x8, 0x0, 0x0) setsockopt$RDS_CONG_MONITOR(r11, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) sendmsg$L2TP_CMD_SESSION_DELETE(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01002cbd701004000000050000000600010005000000080009000200000008000b000000000008000c00a80a00000500130008000000050005"], 0x44}, 0x1, 0x0, 0x0, 0x20008802}, 0x30) 3.863845281s ago: executing program 5 (id=798): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000540)=0xa00, &(0x7f0000000580)}, 0x20) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000380)="345ae70407c48eed3e5ae6c54f4133b3006427f3b14e7e6cc4dd8969672fe364edd51332235f1c420516f550e132d6bcf40b5fa898e4ae469e1bc2a4ba4d461c2c0120523dd2800529a64b99e4df14d2818f3c4c9faebd0bf87c2ac67ce32b5842232a08343b781a6f3e0c671a24df72b1b57f657995f8f0f3baf57f080d8c16e2adbb2c90629b1fb54a1d750a95fcac210b95731da9e5f98afb89a25b2ffb0dd28e98b55857306d07144550d4", 0xad, 0x0, &(0x7f000005ffe4)={0xa, 0x4e21, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, &(0x7f0000000080)=0x8, 0x4) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88, 0x1, 0x0, 0x3}, 0xe) shutdown(r1, 0x1) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x7bfb, 0x4) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x41, 0x0}}], 0x414, 0x406, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x78, 0x2581) r3 = accept4$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @fixed}, &(0x7f0000000300)=0xe, 0xc0000) connect$bt_l2cap(r3, &(0x7f0000000340)={0x1f, 0x2, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x5, 0x2}, 0xe) pselect6(0x40, &(0x7f0000000040)={0x1, 0x3, 0x3, 0x8, 0x7fffffffffffffff, 0x0, 0x6, 0x4}, &(0x7f00000000c0)={0x800000000002, 0x7, 0x240000, 0x2, 0x8a, 0x1, 0x5, 0x5}, &(0x7f0000000100)={0xffffffffffffffff, 0x4, 0x0, 0x0, 0xc, 0xfffffffffffffff4, 0x2, 0x3}, &(0x7f0000000140)={0x77359400}, &(0x7f0000000200)={&(0x7f00000001c0)={[0x21]}, 0x8}) r4 = fcntl$dupfd(r2, 0x0, r2) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x8a) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000001000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r5 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x0, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r7, &(0x7f0000000000), 0x560c89bb) r8 = creat(&(0x7f0000000200)='./file0\x00', 0x20) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) open(0x0, 0x181000, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) splice(r6, 0x0, r8, 0x0, 0x8000, 0x0) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0x10017, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 2.963798087s ago: executing program 5 (id=816): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xf, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0x8, 0x0, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000340)={'dummy0\x00', 0x2}) 2.883943578s ago: executing program 5 (id=818): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001b80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_BITWISE_XOR={0x4}, @NFTA_BITWISE_MASK={0x8, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x10c}}, 0x0) 2.881711198s ago: executing program 5 (id=820): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) add_key$keyring(&(0x7f0000000f40), 0x0, 0x0, 0x0, 0xffffffffffffffff) (async) setresuid(0xee00, 0xee00, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}, {0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xac}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a14000000020a01"], 0x3c}, 0x1, 0x0, 0x0, 0x4011}, 0x4000094) 2.828634645s ago: executing program 5 (id=821): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000005000000020000ffffffffffffffb901ff00", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000100"/28], 0x48) (async) r0 = open(&(0x7f0000000040)='./bus\x00', 0x4001418c3, 0x1d4) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0xc, &(0x7f0000000300)=ANY=[@ANYRESHEX=0x0, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x21, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000004}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x0, 0x6, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000010000000000000000000001800000004000000000000000700000085100000fbffffff18640000030000000000042002003c009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x6, 0x72, &(0x7f0000000000)=""/114, 0x41100, 0xe, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa86e}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket$igmp6(0xa, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) (async) r3 = getpid() (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x5) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r4, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, r3, 0x0, 0xffffffffffffffff, 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000f40)=@raw={'raw\x00', 0x8, 0x3, 0x500, 0x0, 0xffffffff, 0xffffffff, 0x190, 0xffffffff, 0x430, 0xffffffff, 0xffffffff, 0x430, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0xffffff00], [], 'veth0_macvtap\x00', 'bridge0\x00', {}, {0xff}}, 0x0, 0x148, 0x190, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, 'bridge0\x00', {0x8}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x2a0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x8, 0x6, 0x3}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@local, 'pimreg\x00', {0xf2e3}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x560) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r6, &(0x7f0000000080)={0x5, 0x10, 0xfa00, {0x0, r7, 0xc15ced75b808877f}}, 0x18) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000000500"], 0x0, 0xfffffffd, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x2}, 0x94) (async) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="8c00000010001fff28bd70000000800000000000", @ANYRES32=0x0, @ANYBLOB="efb00000800000006c0012800b00010062726964676500005c00028008000500010000000c002e"], 0x8c}, 0x1, 0x0, 0x0, 0x4000084}, 0x14) (async) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0xffffff1f, 0x70bd2a, 0x100, {0x0, 0x0, 0x0, 0x0, 0x0, 0x34080}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @loopback}]}}}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x48}}, 0xc0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x13, r0, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'erspan0\x00', &(0x7f0000000000)={'ip_vti0\x00', 0x0, 0x40, 0x1, 0x3, 0x448, {{0x37, 0x4, 0x0, 0x2, 0xdc, 0x66, 0x0, 0x9, 0x2f, 0x0, @local, @dev={0xac, 0x14, 0x14, 0xd}, {[@lsrr={0x83, 0x23, 0xe6, [@rand_addr=0x64010101, @rand_addr=0x64010100, @remote, @loopback, @remote, @multicast2, @remote, @private=0xa010100]}, @timestamp_prespec={0x44, 0x14, 0x82, 0x3, 0xc, [{@private=0xa010102, 0x80}, {@rand_addr=0x64010100, 0x6}]}, @end, @timestamp_addr={0x44, 0x34, 0x85, 0x1, 0xc, [{@dev={0xac, 0x14, 0x14, 0x11}, 0x3}, {@multicast2, 0x6e8}, {@rand_addr=0x64010101, 0x6}, {@broadcast, 0xc61}, {@multicast1, 0x6}, {@local, 0x7}]}, @ssrr={0x89, 0x13, 0x29, [@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @multicast1]}, @timestamp_prespec={0x44, 0x44, 0xfd, 0x3, 0x4, [{@dev={0xac, 0x14, 0x14, 0x24}, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3f}, 0x247}, {@rand_addr=0x64010101, 0x3}, {@broadcast, 0x10000}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@multicast1, 0x8}, {@remote, 0x9}, {@local, 0x4}]}, @ra={0x94, 0x4}]}}}}}) 2.814154437s ago: executing program 0 (id=823): setuid(0xee00) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x4bd1bfda, 0x0, 0x6}, 0x1c) (async) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000c3cc0000000000000000e72b518f"], 0x48) fsmount(0xffffffffffffffff, 0x0, 0x72) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6}, {0x6, 0x0, 0x0, 0xb}}, [@printk={@i, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000780)='syzkaller\x00', 0xffffff02, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.662938696s ago: executing program 0 (id=826): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1a}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = open(&(0x7f0000000000)='./file1\x00', 0x14b142, 0x80) ftruncate(r1, 0x2007ffb) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_int(r2, 0x0, 0x2, &(0x7f0000000040)=0xff, 0x4) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendfile(r1, r1, 0x0, 0x1000000201005) ftruncate(r1, 0x6) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000005600010000000000000000000700c6c9", @ANYRES32=0x0, @ANYBLOB="200001"], 0x38}}, 0x0) 2.535785963s ago: executing program 3 (id=831): rt_sigprocmask(0x2, &(0x7f0000000200)={[0xfffffbfd]}, 0x0, 0x8) r0 = socket(0xa, 0x2400000001, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) r1 = gettid() r2 = getpid() rt_tgsigqueueinfo(r2, r1, 0x5, &(0x7f0000000400)={0x2, 0xffffffff, 0x1}) rt_tgsigqueueinfo(r2, r1, 0x1b, &(0x7f0000000280)={0xc, 0x0, 0x4}) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x5, 0x0, 0x0, 0x67b}]}, 0x10) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000380), 0x60042, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB="0203f602310000002cbd7000fbdbdf2502000900080000001c0000000000000005000600000000000a0000000000000000000000000000000000000000000001020000000000000002000100000000000000070c0000000005000500000000000a00000000000000fc0100000000000000000000000000010700000000000000210008000008"], 0x188}, 0x1, 0x7}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000140)=0x1) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000340)=0x8003) close(r4) socket$inet_udp(0x2, 0x2, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCEXCL(r7, 0x540c) syz_open_dev$tty1(0xc, 0x4, 0x1) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={0x101000, 0x50, 0xc}, 0x18) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv6_newroute={0x54, 0x18, 0x1, 0x0, 0x25dfdbff, {0xa, 0x14, 0x20, 0x0, 0x0, 0x2}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0xbffea20d14f5e1d9}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x6}, @RTA_ENCAP={0x28, 0x16, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x24, 0x1, {{0x1, {0x6, 0x2, 0x4, 0x1, 0x5, 0x40, 0xff, [@ipv4={'\x00', '\xff\xff', @local}]}}}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 2.516059475s ago: executing program 0 (id=832): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000180)=0x1, 0xffffffffffffffbc) r1 = socket$inet(0x2, 0x80000, 0xffffffff) r2 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) write$selinux_validatetrans(r2, 0x0, 0xfe88) r3 = socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x2204806, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0xfa, 0x69f, &(0x7f0000000f00)="$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") sendmsg$key(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0207e80702"], 0x10}}, 0x40044) r4 = socket$inet6(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@private=0xa010100, 0x4e68, 0x0, 0x0, 0x0, 0xa, 0x0, 0x100}, {0x0, 0x4, 0x0, 0x5000007ffffffc, 0x0, 0x9, 0x4, 0x3ff7}, {0x7fffffffffffffff, 0x1000000000, 0x8, 0x1f}, 0x0, 0x1, 0x1, 0x0, 0x3, 0x2}, {{@in=@empty, 0x0, 0x32}, 0x2, @in=@broadcast, 0x3505, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1}}, 0xe8) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e24, 0x2, @empty, 0xfffffffc}, 0x1c) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x20000) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(r1, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0x4f21, @multicast2}, 0x10, &(0x7f00000002c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c"], 0x40}, 0x20000000) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r6, 0x10000}}, 0x10) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000140)=0x1, r6, 0x0, 0x1, 0x4}}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x80, 0x0, 0x7ffc1ffb}]}) r7 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg(r7, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000580), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1000000000000000011500000c0000005a80320e544a03640d060b93e4001814ec98d6866c8872bdc44dd4dd5dec860fbf9e9e9cdb57dce087f074ab79f691155b81b37ec7e65736cefb18c824fba5c41f6c0366f5a3580920b43d"], 0x10}}], 0x1, 0x400c8d4) perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x646b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x7, 0xffffffffffffffff, 0x1) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r8, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r8, 0xc4009420, &(0x7f0000000740)={0x2, 0x4, {0x3, @usage, 0x0, 0xff, 0x2, 0x4a, 0x4, 0x1, 0x44, @usage=0x6, 0x101, 0xfffffff7, [0x0, 0x1, 0x2, 0x9, 0x9, 0x3]}, {0x4, @struct={0x2, 0x9}, 0x0, 0x3, 0xffff, 0x9, 0x1ff, 0x1, 0x81, @usage=0x80000000, 0x0, 0x6, [0x7, 0x6, 0x6d0f, 0x82e, 0x3, 0x3]}, {0x1, @usage=0x41, 0x0, 0x6, 0x1, 0x1, 0x8, 0x47af, 0x4c1, @usage=0xe11f, 0xb, 0x3, [0x0, 0x6, 0x4, 0xffffffffffffffff, 0x8001, 0xe]}, {0x6, 0x200, 0xa4}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r8, 0xc400941d, &(0x7f0000000b40)={r9, 0x9, 0x6, 0x1}) 1.719937758s ago: executing program 4 (id=841): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002800500"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4008050) syz_io_uring_setup(0x7d82, &(0x7f00000001c0)={0x0, 0xf765, 0x8, 0x3, 0x1f2}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x5365, &(0x7f0000000340)={0x0, 0x5516, 0x8, 0x1, 0x129}, &(0x7f0000000140), &(0x7f0000000240)=0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r0, r1, &(0x7f00000003c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x40, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r2}}) r3 = socket$can_bcm(0x1d, 0x2, 0x2) r4 = syz_io_uring_setup(0x83a, &(0x7f00000000c0)={0x0, 0x3d06, 0x400, 0x2, 0x154}, &(0x7f0000000140)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r7 = io_uring_setup(0x1d48, &(0x7f0000000340)={0x0, 0x60b13e, 0x800, 0x6, 0x3a2}) close_range(r7, 0xffffffffffffffff, 0x0) futex(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x0, 0x2) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@l2tp={0x2, 0x0, @remote, 0x3}}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.524162573s ago: executing program 4 (id=844): socket$packet(0x11, 0xa, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$inet_udp(0x2, 0x2, 0x0) socket(0x10, 0x803, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r0, &(0x7f0000000340)={@val={0x0, 0x86dd}, @val={0x0, 0x4, 0x11, 0x4, 0x0, 0xa6b9}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x14c, 0x2f, 0xff, @local, @mcast2, {[@hopopts={0x16}, @hopopts={0x3a, 0x2, '\x00', [@hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}]}, @routing={0x32, 0x6, 0x1, 0x2, 0x0, [@private2, @ipv4={'\x00', '\xff\xff', @local}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}, @srh={0x73, 0x14, 0x4, 0xa, 0xfd, 0x8, 0x8, [@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2, @private0={0xfc, 0x0, '\x00', 0x8}, @private0, @private1]}], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x4}, 0x1, {0x8100}}}, {0x8, 0x22eb, 0x20000, {{0x0, 0x2, 0xc, 0x0, 0x0, 0x2, 0x7, 0x2}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x182) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r5 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = timerfd_create(0x0, 0x0) readv(r6, &(0x7f00000009c0)=[{&(0x7f0000000200)=""/33, 0x21}], 0x1) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81801) process_vm_writev(r5, &(0x7f0000000a80)=[{&(0x7f0000000680)=""/214, 0xd6}, {&(0x7f0000000780)=""/230, 0xe6}, {&(0x7f0000000540)=""/166, 0xa6}, {&(0x7f0000000040)=""/13, 0xd}, {&(0x7f0000000880)=""/241, 0xf1}, {&(0x7f00000002c0)=""/108, 0x6c}, {&(0x7f0000000a00)=""/73, 0x49}], 0x7, &(0x7f0000000980)=[{&(0x7f0000000b00)=""/77, 0x4d}, {&(0x7f0000000b80)=""/114, 0x72}], 0x2, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3) sendmsg$NL80211_CMD_SET_BEACON(r7, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000001a80)={0x964, r8, 0x300, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xffffffff, 0x10}}}}, [@NL80211_ATTR_IE={0xb3, 0x2a, [@perr={0x84, 0x8f, {0x9, 0x9, [{{}, @broadcast, 0xfffffffc, @void, 0x40}, {{0x0, 0x1}, @device_b, 0x3, @value=@device_b, 0x36}, {{}, @broadcast, 0x5, @void, 0x6}, {{0x0, 0x1}, @device_a, 0x48000, @value=@broadcast, 0xa}, {{}, @device_a, 0x9, @void, 0x33}, {{0x0, 0x1}, @device_a, 0xf0, @value, 0x1}, {{}, @broadcast, 0x2, @void, 0x4}, {{0x0, 0x1}, @broadcast, 0x4, @value, 0x3}, {{}, @broadcast, 0x10001, @void, 0x30}]}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x8, 0x9}}, @peer_mgmt={0x75, 0x16, {0x1, 0x1ff, @val=0x9, @void, @val="74fdc1d03a62215dd39a83a08824e341"}}]}, @NL80211_ATTR_BEACON_TAIL={0x18b, 0xf, [@tim={0x5, 0x6f, {0xd, 0xc9, 0x8, "7ee3b088879816fea68bcbc7b2bbe423a009ad94261ee7f8054a2c92bbab6f92e2b06e256b4ba14fccc346be7fe24ae41b0192f8a307d7c47e8de94b219d52fe1018fd77f9ea625b4327cc3ed9e391c2fa33a5e7de5430b60de4b4c166a7b04987912a874fc704f957342628"}}, @ibss={0x6, 0x2, 0x7}, @mic={0x8c, 0x10, {0xd1b, "dfcf2c7df886", @short="1f557f828857d679"}}, @measure_req={0x26, 0x5f, {0x1, 0x2, 0x7, "ca02be317f951c6fe488957930df9da96510f70500d30f9482dfd97c8acfd6b32e1cfa3670cfb48e6c07af3fe4311dd8ef9188abb07dbabae94bd6ed88d97d99952d8b47ee59d1b0782fc7b62907aea4b0790d5248f0b0d3452b6d0a"}}, @tim={0x5, 0x9d, {0xe, 0xbe, 0x2e, "97ddd62a83beb576c50bb57ebdede1563e1b456e325ad5a72d20934b9ba0cad48d74874fea3b5f4eb2830e67d07c137f6cc44e78c4dbc66fdf39bc471fc97ad836756a9ba3decd4e19ba95e3f1a0ed2170cc1e80ad22a3f31c22b5917b295a39408d4a9c73f739d0c3bfa802bcc34bd7dfa2f63903432bd7512fda558b96c3a97ef49afcb16736d1fff78bd086e83cef99489b49218ad85ce906"}}]}, @NL80211_ATTR_PROBE_RESP={0x6f0, 0x91, "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"}, @NL80211_ATTR_IE_PROBE_RESP={0x14, 0x7f, [@erp={0x2a, 0x1, {0x1, 0x1}}, @mesh_config={0x71, 0x7, {0x1, 0x0, 0x1, 0xffffffffffffffff, 0x1, 0xbb, 0x28}}, @ibss={0x6, 0x2, 0x2}]}]}, 0x964}, 0x1, 0x0, 0x0, 0x20004000}, 0x40000) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x3c, r4, 0x917, 0xa7, 0x1000000, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3f}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x3c}}, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = gettid() sendmsg$unix(r10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000640)='Q', 0x1}], 0x1, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r11, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r10, @ANYRES32=r9, @ANYRES32=r9, @ANYRES32=r10, @ANYRES32=r9, @ANYRES32=r10, @ANYRES32=r9, @ANYRES16=r0, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r9, @ANYRES16=r7], 0xa0}, 0x4004881) symlinkat(&(0x7f00000001c0)='./file0\x00', r7, &(0x7f0000000280)='./file0\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)) 1.0074387s ago: executing program 2 (id=849): syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000900006440000008001b00000000000500100004"], 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x421, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x10000, 0x100}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x3c}}, 0x24000840) 744.208635ms ago: executing program 2 (id=850): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x1, 0x4050e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffee, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x0, 0x5, 0x2060005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r0 = syz_io_uring_setup(0x3fb1, &(0x7f0000000300)={0x0, 0x9cae, 0x40, 0x5, 0xd6}, &(0x7f0000000100), &(0x7f00000000c0)) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c45, 0x0) write$UHID_CREATE(r1, &(0x7f00000001c0)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000140)=""/95, 0x5f, 0x6, 0x7fff, 0xffffffff, 0x7, 0x6}}, 0x120) (async) flock(r1, 0x5) (async) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x22, &(0x7f0000000380)={&(0x7f0000003000)={[{0x0, 0x0, 0x3}]}, 0x1}, 0x1) 616.874061ms ago: executing program 4 (id=851): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xf, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0x10, 0x38, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) 616.531791ms ago: executing program 2 (id=852): r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='clear_refs\x00') r2 = socket$kcm(0x2, 0x0, 0x84) setsockopt$sock_attach_bpf(r2, 0x84, 0x11, &(0x7f0000000000), 0x8) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)='2', 0x1}], 0x1) 556.600058ms ago: executing program 4 (id=853): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r2, 0x1, 0x70bd2c, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x5, 0x7, @multicast2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_USERDATA={0x3e, 0x7, 0x1, 0x0, "779b8f5beb28b92e797f956e42250a2e868f462e76426819b0904f9aed7202217d7015118f32f5ba07b8f4bbab16d6744941de29fbef79456193"}, @NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}]}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x94}, 0x1, 0x0, 0x0, 0x4004850}, 0x20040000) 554.235649ms ago: executing program 4 (id=854): capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x7, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000ff00000000000000fbffffff18110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000030000008500000005000000bf0908000000000055090100c60000009500000000000000b7020000001200007b2af0ff00000000d609080008200000db9af0ff41000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000001502010076000000bf9800000000000056080000020000008500000007000000b70000000000000095"], &(0x7f00000002c0)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x64}]}, &(0x7f0000000080)='syzkaller\x00', 0x5}, 0x90) 521.028753ms ago: executing program 4 (id=855): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fremovexattr(r0, &(0x7f0000000480)=@known='system.posix_acl_default\x00') r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000800)=ANY=[@ANYBLOB="9e4e8728a1d800fab4ab5b41ff6507b6627b9f8fac4a0ac93707e65f2df1565e7396046e060100000000000000ac2434084def9398cefa0f888d40524159055eb17bada6ffe6b13a42edd42ad569d0c3622a0d7b6aa582c93e3f20337c505232e328c4ad2411dcff8373ffc3e5c827"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x2}, 0x94) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="000020000000ed03", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x17) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000240)={r5}, 0x4) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r5, @ANYBLOB="0000000000000000790000000000000095"], &(0x7f0000000d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000001000000080000000b00000000000000", @ANYRES32, @ANYBLOB="010400000000000000deffffffe700e700000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r1}, &(0x7f0000000540), &(0x7f0000000580)=r6}, 0x20) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000640)={@map=r7, r4, 0x34}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r7, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r3}, 0x20) socketpair$unix(0x1, 0x2, 0x0, 0x0) accept4(0xffffffffffffffff, &(0x7f00000003c0)=@can, &(0x7f0000000340)=0x80, 0x80000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x2, 0x56d, 0x2}, 0x48) r9 = socket(0x2, 0x80805, 0x40) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x5c, &(0x7f0000000740)=[@in={0x2, 0x4e22, @loopback}, @in6={0xa, 0x4e21, 0x7f, @local, 0x10000}, @in={0x2, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e22, @multicast1}, @in={0x2, 0x4e24, @multicast2}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000140)={r10, 0x4, 0x7, 0xb92, 0x1, 0x8}, &(0x7f00000000c0)=0x14) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r8}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r8, &(0x7f0000000140), 0x0}, 0x20) write$binfmt_misc(r1, &(0x7f0000000240), 0xfffffecc) r11 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r11, &(0x7f0000000440)={0x18, 0x2, {0x3, @rand_addr=0x64010101}}, 0x1e) splice(r0, 0x0, r9, 0x0, 0x401, 0x2) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000200)="57355e62c1fc1623b19e1b968ec757987bb8f8c0f6abf71483bc0b84b0bfe5e8f9770b4bcb580dfe019b90f6c8d727b6f5f25c05e5bbd18509ec4de49f6ca6c11df7dd7e530f1b226a7ea5e2b5315f80d892f7a25568f0285b3935624ade2e76555624ea10cf01147a194e502a78a040588a0c0518c71a90ed54eac113946e9a41df7492959e88d5eaee0cda29efcdf05dd7d5cc392297285c7d74b008bf4cb7a1b6a20d33dcb497ab3a5f57aee8abef3cf07b7100ee3a5418528161e13befca9192e9272cf34c8415406dd8fd3b775da95c8c20ab4e79ca47b39ed6d4f193fae061a6d97a7b3e30311de5aaf54b6f", 0xef}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002a00)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0000002071a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe000000008500000044000000b700000000000000950001000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050505f8e6fb0fd7ddcb12b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7131b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc8136bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b001000000a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5b787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72323cc924e627f2f4b775dd4e9e3070756f97a6791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdfa2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7b9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa802000000872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b9243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00c75367966130b547dbf8b497af002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b0600000000000000564a2b49b745f3bf2cf7908b6d7d748308eea09fb4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da2022f23daec61854f640f701db0276652f6c74f20675eb781925441578f93046aaddea8ec4ca37f71c2710a7e58ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec780f535e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e4fe9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eee46eb20c20bb82aa31771cd379ec83554cea5e6539d85b980e358d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f9166965a53beb05142e1b1550a8cb7852f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9d95fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b9617432e251d14b283f7d82761c26e329555f9290af4100000000000000749efd3f63655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b0000000032a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002157a3609b6ff9843ee19ec647249a9375de5858818f3c2432e6ced4380217ac51a84a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3bbdc8c17a23692759ccf5a205111b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c8e820a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f7f05b47d3e519f1634e8fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd809269f816fa748b20ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a426a996d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f9289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f05714a1d3ef29acd4d49b62339c10c2ec0dac4728288e78980c1184d8223edbccbf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc30935455f6de5b64bcdfaf8ac04ce96c421e5dbc85e168d3559ab13df98163e39e4065e65a2f43412535d6f7c09830f3a0865356602363c690d2755768612bb7330a8b285f2584892eaff1889a61ee0c2a6d1831d41805707bb43991d40feb5dd070000000000006ed70faa6f42ab4065dfa5227deb52b2a3730558dcacc145d5bcffe5f90f85b0a27b0439b5e9edf1856b4a09d4cc333e7c4893bd8c434414335e34390c9ad847d8d26c90ce53214d7083f10cf25b5f2381d83e30dc622453251b7189282e6e40557a8645fdf27c2b474b4200ddafa6538cdb45cc93dbebd91d1fbbd6ebb081c6efb001adc641e929750452932cd0f8d7a0c9f8de0d64d7a9751d93b973b9cce1aaed8b00681cac4332bcaf97864627698e395ae0cd2ee505bf472e11b2dbfcbcb793872e261f626818555f6fa3bdb302ba1089ba5ec8e66d0ae72da2bc09ab98a8e711a39d438cf5f59eebe3d71331850cfd587b35e58d5b23f065642ff58a5a71213c9ceeb40f81f24832863e3d26d167290c0c5bb9c8ae9b201ffde31b7d6ad3d27347b38befa07be186b0c7ad6fdec572a3fb2568de245f1bde56391c95d80a5479575fa7c13f1e1589dc3501c88cac9155fd5b62306f5c4aa74c2994055353dac64a2d38671b000000000000"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) 470.21927ms ago: executing program 0 (id=856): r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r2, &(0x7f0000004600)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x1, @mcast1, 0x3}, 0x1c, 0x0, 0x0, &(0x7f0000001540)=[@hoplimit={{0x14, 0x29, 0x34, 0x2}}], 0x18}}], 0x1, 0x880) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000003c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010026bd7000030002000100000008000100", @ANYRES32=r4, @ANYBLOB="4c00088048000080200004000a004e210000dfffffff00000000bdd3bff7f7a852ef00010000000024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c"], 0x68}}, 0x0) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0xc8, r3, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x6}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}]}, 0xc8}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000000440)={0xf, {"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", 0x1000}}, 0x1006) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x2014, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x3000000, &(0x7f0000000080), 0x1, 0x533, &(0x7f0000000b00)="$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") quotactl$Q_QUOTAON(0xffffffff80000102, &(0x7f0000000140)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 400.599359ms ago: executing program 3 (id=857): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file4\x00', 0x1, 0x20) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file4\x00', &(0x7f00000002c0)={0x40000, 0x0, 0x22}, 0x18) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r2) sendmsg$NLBL_MGMT_C_VERSION(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, r3, 0xe01, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4) r4 = syz_io_uring_setup(0x1248, &(0x7f0000001300)={0x0, 0xd5a1, 0x1, 0x40000002, 0xb8}, &(0x7f0000000400)=0x0, &(0x7f00000001c0)=0x0) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xdfffffffffefffff, &(0x7f0000000340)=[0xffffffffffffffff], 0x1, 0x0, 0x1}) io_uring_enter(r4, 0x47f6, 0x0, 0x0, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x8, 0x3, 0x2c8, 0x158, 0x11, 0x148, 0x0, 0x0, 0x230, 0x2a8, 0x2a8, 0x230, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x110, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x40, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x4, 0x18}}}, @common=@unspec=@limit={{0x48}, {0x5, 0x5, 0x4, 0x3, 0x9, 0x3, 0xfffffffffffffff8}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @multicast1, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00', {}, {}, 0x20}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x12, 0x9, 0x5, 0x1, 'netbios-ns\x00', 'syz0\x00', {0x4a7}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328) 285.727874ms ago: executing program 2 (id=858): r0 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000140)={r0}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={r1}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000f00)={r0}) (async, rerun: 64) r3 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$FOU_CMD_GET(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @local}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x34}}, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r3) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r4, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x97}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}]}, @TIPC_NLA_NODE={0x1c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x400}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x4800) 217.953902ms ago: executing program 2 (id=859): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(0xffffffffffffffff, 0x8910, 0x0) ioctl$sock_netdev_private(0xffffffffffffffff, 0x8914, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x5, 0x6}, 0x120, 0x10000, 0xbac, 0x1, 0x8, 0x20007, 0xb, 0x0, 0x0, 0x0, 0x1800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000039000900000000000000000001000000040000000c0001800600000005470000080002"], 0x38}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x80, 0x4) openat(r1, &(0x7f0000000080)='./file0\x00', 0x111000, 0x0) 168.442259ms ago: executing program 3 (id=860): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_procfs$namespace(0x0, 0x0) mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) 145.605252ms ago: executing program 3 (id=861): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MLD_VERSION={0x5, 0x2c, 0x2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0xc0) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000000040)=""/82) 135.406623ms ago: executing program 0 (id=862): r0 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x45}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000002000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="b40000001800090000000000000000001c140000fe0000010000000005001a"], 0xb4}}, 0x24040810) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a000000000000000800010001000000040004"], 0x24}}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000340)={0x1d, r5, 0x0, {0x0, 0x0, 0x6}}, 0x18) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r5, 0x1, {0x1, 0xff}, 0x2}, 0x18) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x74, r5, {0xfff3, 0x10}, {0xfff1, 0x9}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000180)={'ip_vti0\x00', &(0x7f0000000380)={'sit0\x00', r5, 0x40, 0xbb28, 0x6, 0x5, {{0x14, 0x4, 0x0, 0x5, 0x50, 0x66, 0x0, 0x5, 0x29, 0x0, @loopback, @remote, {[@rr={0x7, 0xf, 0x72, [@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty]}, @generic={0x89, 0x12, "040009873f39064dd1cd288b693472a6"}, @rr={0x7, 0x1b, 0x86, [@remote, @remote, @multicast2, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2]}]}}}}}) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1b, 0x7, 0x8, 0x4, 0x0, r1, 0xa6d, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x2}, 0x50) 28.257157ms ago: executing program 2 (id=863): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xa041, 0xd) fcntl$setlease(r0, 0x400, 0x0) personality(0xfe47fef9f5ff7379) memfd_create(0x0, 0x4) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x2) r2 = openat$sysfs(0xffffff9c, &(0x7f0000000100)='/sys/power/pm_trace_dev_match', 0x0, 0x0) readv(r2, &(0x7f0000000780)=[{&(0x7f00000002c0)=""/255, 0xff}], 0x1) sendto$inet(r2, &(0x7f0000000200)="e42e391b03628a38140923db9e6c8ce9a49e2b8fa2edb59b61868a603df4024eefd9a6f51d533e2bbcc1e6bdecf2c2411b82ff4c334aa0355ef8c9aa10b866461e0752db3bf232c4613657aad82358febf0bd8455da54f5375c9a3557046ef5896b3d3f46ecc0d172fb74f7e7c40331dae26", 0x72, 0x0, &(0x7f0000000280)={0x2, 0x4e24, @multicast2}, 0x10) ioctl$HIDIOCGREPORTINFO(r2, 0xc00c4809, &(0x7f0000000000)={0x1, 0x100, 0x7}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000040)={0x0, 0x4, 0x7, 0x486}) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000003c0)={0x84, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e24, 0x3, 'rr\x00', 0x8, 0x10000, 0x24}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r3 = io_uring_setup(0x3a92, &(0x7f0000000100)={0x0, 0x6dab, 0x20, 0x0, 0x3d2}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./bus\x00', 0x2000414, &(0x7f0000000500)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRES64=0x0, @ANYRESHEX, @ANYRESHEX, @ANYRES8], 0x1, 0x2b8, &(0x7f0000000800)="$eJzs3NFLU38Yx/Hn5/y5OdEtiKCgeqibuhm6/oAaoRANCnNSXQTHPKux0ybnDGMRuZvotr9DuuwuqP4Bb6Kb7ruTIOjGi+gbnrPpmU6durml7xfIeXae74fzdZvybLCt3n/7rJj3UnmrIgMxlQGRmqyJJNeruv/qxwG/HpKwmlwd+fXt/L0HD29nstnJadWpzMy1tKqOXfz4/OW7S58rI7Pvxz5EZSX5aPVn+vvK0MrZ1T8zTwueFjwtlStq6Vy5XLHmHFvnC14xpXrXsS3P1kLJs92mft4pLyxU1SrNj8YXXNvz1CpVtWhXtVLWiltV64lVKGkqldLRuJxsg22syS1PT1uZHdsm0tEdoeuGW5103UytdTO3fAR7AgAAfWb3+T+Y9Xee/7OzwXE/8/+Zved/Eeb/Lqk13dpj/sex4LoZK17/+23G/A8AAAAAAAAAAAAAAAAAAAAAwL9gzZiEMSaxfqyf8m9HRSQmIqbe7/E20SXhx9+EfvZ4/K/3aLvosNAH92IizpvF3GIuOAb9TF4K4ogt45KQ3/7zoS6op25lJ8fVl5RPzlI9v7SYi0i0kW9ItspfODUR5LU5/7/Ew9dPS0JOt75+umV+SK5cDuVTkpAvj6Usjsz7z+vN/KsJ1Zt3slvyw/46AAAAAACOg5Ru2Pb63e/7C2KyvR/kQ+8PGGOWdnt/YMvr60E5185XVAIAAAAAgEPzqi+KluPY7gGKqIgcIt75whiR3m8jIv1xbzQXN0SkD7ZxVEVMRIIzepD4j414WynTxppBEen53bKPotf/mQAAAAB02ubQv4/Q19dd3BEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACdPu98H1li/rdVo7BIPXS5y5L8gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0Ef+BgAA//+4IRyf") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f00000003c0)='.\x00', 0x214246c, &(0x7f0000000ac0)=ANY=[@ANYRES64, @ANYBLOB="ff6deb4498e54983433a4af88ec1526d10db99f82dd7d8041c009448c51ec8325319e2adf09d253f03", @ANYRESOCT, @ANYRESHEX, @ANYRESHEX, @ANYRESDEC, @ANYRES8, @ANYRES16, @ANYRESHEX, @ANYRES16], 0x5, 0x0, &(0x7f0000000000)) renameat2(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x2) syz_io_uring_setup(0x2, &(0x7f0000000180)={0x0, 0x800389b, 0xc000, 0x20001, 0x17a, 0x0, r3}, 0x0, 0x0) 23.605787ms ago: executing program 3 (id=864): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_SNOOPING={0x5}]}}}, @IFLA_MTU={0x8, 0x4, 0x200}]}, 0x44}}, 0x20000804) (async) r1 = dup3(r0, r0, 0x0) (async) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000140)={0x0, 0xd4, "df5226e14435018d58033139b6495e9cc2ae1e604e5248e17381d03ef0d4884edd60f615e0be5601ef15e2049a7df27a484842492e53ba61cc21484936030df4386948f56917bf6b71251757dd956a90c4918cba13d13c811a4f7eaad2df7ca58586af03dc5206ef967959d8fd7aff4c0936b164f004dde7f3ffd931e14807b3a87978709a798bd86e5dd2cb21e8759a06f416afe93f58c9175804a136a45d8173ea0cbe6a274f0af02147d2a5ffcf3d94655f26da510f159782f0095ffddac189f27ff220e6af1aa56736f9a582a124769cc3b6"}, &(0x7f0000000000)=0xdc) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000080)={r2, 0x1}, 0x8) 2.61981ms ago: executing program 3 (id=865): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007918c0000000000006000000000000009500000c00000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000000000000000000000a000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x4) (async) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x4) sendfile(r2, r2, &(0x7f0000000000)=0x1, 0x4) recvfrom$inet_nvme(r2, &(0x7f00000002c0)=""/144, 0x90, 0x10000, &(0x7f0000000380)=@nl=@kern={0x10, 0x0, 0x0, 0x40}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={r1, 0x124, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, &(0x7f0000001e40)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x4, 0x4, 0x0, &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x4, 0x4, 0x0, &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) creat(&(0x7f0000000180)='./file0\x00', 0x0) (async) r4 = creat(&(0x7f0000000180)='./file0\x00', 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f00000001c0)={{0x0, 0x6, 0x9, 0x1, 0xfffffffffffff5fe, 0x1, 0x6, 0x1, 0x6d5c0000, 0xfffffff7, 0x7, 0x1, 0x7, 0x98, 0x9}, 0x50, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f00000001c0)={{0x0, 0x6, 0x9, 0x1, 0xfffffffffffff5fe, 0x1, 0x6, 0x1, 0x6d5c0000, 0xfffffff7, 0x7, 0x1, 0x7, 0x98, 0x9}, 0x50, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f00000007c0)={{r5, 0x7, 0xc, 0xc, 0x9, 0x1, 0xfffffffffffff800, 0x8000, 0x0, 0x7d, 0x9, 0xf, 0x40, 0x9, 0x7}}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r7, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r7, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) close_range(r6, 0xffffffffffffffff, 0x200000000000000) (async) close_range(r6, 0xffffffffffffffff, 0x200000000000000) close(r4) r8 = socket$inet(0xa, 0x801, 0x84) listen(r8, 0x8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB="2e770c22d91e3d", @ANYRESHEX=r0, @ANYBLOB=',\x00']) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB="2e770c22d91e3d", @ANYRESHEX=r0, @ANYBLOB=',\x00']) 0s ago: executing program 0 (id=866): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\a\x00\x00\x00'], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000240)={0x0, 0xfffffffffffffe2b, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000001600010a"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) recvmmsg(r7, &(0x7f0000002a40)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x40002000, 0x0) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r8, 0x0, 0xca, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@rand_addr=0xc0586300, @private=0xffffffff}, 0x10) recvmmsg(r7, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}, 0xe}], 0x1, 0x60, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PRIMARY={0x8, 0xb, r6}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) kernel console output (not intermixed with test programs): 84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 70.503626][ T4268] loop4: detected capacity change from 0 to 512 [ 70.536981][ T4268] vfat: Unknown parameter 'non' [ 70.787971][ T4279] loop2: detected capacity change from 0 to 512 [ 70.795541][ T4279] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 70.807746][ T4279] EXT4-fs (loop2): 1 orphan inode deleted [ 70.813595][ T4279] EXT4-fs (loop2): 1 truncate cleaned up [ 70.820318][ T4279] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.859700][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.882710][ T4287] netlink: 8 bytes leftover after parsing attributes in process `syz.2.188'. [ 70.883705][ T4285] loop3: detected capacity change from 0 to 512 [ 70.891659][ T4287] netlink: 4 bytes leftover after parsing attributes in process `syz.2.188'. [ 70.907069][ T4287] netlink: 'syz.2.188': attribute type 13 has an invalid length. [ 70.914827][ T4287] netlink: 'syz.2.188': attribute type 12 has an invalid length. [ 70.931029][ T4285] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 70.943244][ T4285] EXT4-fs error (device loop3): ext4_iget_extra_inode:5073: inode #15: comm syz.3.187: corrupted in-inode xattr: invalid ea_ino [ 70.967193][ T4285] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.187: couldn't read orphan inode 15 (err -117) [ 70.986039][ T29] audit: type=1400 audit(3916217181.213:412): avc: denied { execute } for pid=4286 comm="syz.2.188" name="file0" dev="tmpfs" ino=275 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 70.986240][ T4289] process 'syz.2.188' launched './file0' with NULL argv: empty string added [ 71.013645][ T4285] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.031465][ T29] audit: type=1400 audit(3916217181.253:413): avc: denied { execute_no_trans } for pid=4286 comm="syz.2.188" path="/48/file0" dev="tmpfs" ino=275 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 71.069053][ T29] audit: type=1400 audit(3916217181.283:414): avc: denied { create } for pid=4284 comm="syz.3.187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 71.091894][ T4285] netlink: 24 bytes leftover after parsing attributes in process `syz.3.187'. [ 71.114089][ T29] audit: type=1400 audit(3916217181.333:415): avc: denied { read } for pid=4284 comm="syz.3.187" path="socket:[6835]" dev="sockfs" ino=6835 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 71.153285][ T29] audit: type=1400 audit(3916217181.363:416): avc: denied { bind } for pid=4284 comm="syz.3.187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 71.183428][ T4292] loop0: detected capacity change from 0 to 2048 [ 71.204697][ T29] audit: type=1400 audit(3916217181.433:417): avc: denied { allowed } for pid=4284 comm="syz.3.187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 71.341805][ T4266] loop5: p1 p3 p4 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 p217 p218 p219 p220 p221 p222 p223 p224 p2 [ 71.352605][ T4266] loop5: p3 start 150994944 is beyond EOD, truncated [ 71.459071][ T29] audit: type=1400 audit(3916217181.683:418): avc: denied { read write } for pid=4298 comm="syz.4.192" name="event3" dev="devtmpfs" ino=249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 71.482917][ T29] audit: type=1400 audit(3916217181.683:419): avc: denied { open } for pid=4298 comm="syz.4.192" path="/dev/input/event3" dev="devtmpfs" ino=249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 71.511569][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.624253][ T29] audit: type=1400 audit(3916217181.843:420): avc: denied { create } for pid=4316 comm="syz.3.197" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=chr_file permissive=1 [ 71.717718][ C0] hrtimer: interrupt took 37130 ns [ 71.736084][ T4317] netlink: 60 bytes leftover after parsing attributes in process `syz.3.197'. [ 71.801538][ T4326] netlink: 4 bytes leftover after parsing attributes in process `syz.3.200'. [ 71.839235][ T4330] loop4: detected capacity change from 0 to 128 [ 71.894712][ T4332] loop3: detected capacity change from 0 to 128 [ 71.914237][ T4334] loop2: detected capacity change from 0 to 512 [ 71.925365][ T4332] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 71.938583][ T4332] ext4 filesystem being mounted at /33/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 71.978082][ T4334] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.204: couldn't read orphan inode 26 (err -116) [ 71.990810][ T4334] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.006216][ T4334] ext4 filesystem being mounted at /51/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.028734][ T4334] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #3: comm syz.2.204: corrupted inode contents [ 72.061514][ T3320] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 72.071285][ T4334] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #3: comm syz.2.204: mark_inode_dirty error [ 72.105193][ T4334] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.204: bg 0: block 64: padding at end of block bitmap is not set [ 72.121147][ T4329] loop5: detected capacity change from 0 to 1024 [ 72.128535][ T4329] EXT4-fs: Ignoring removed nomblk_io_submit option [ 72.147173][ T4329] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.182565][ T4346] loop3: detected capacity change from 0 to 512 [ 72.192269][ T4346] EXT4-fs (loop3): invalid journal inode [ 72.198436][ T4346] EXT4-fs (loop3): can't get journal size [ 72.226036][ T4334] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.204: Failed to acquire dquot type 0 [ 72.250285][ T4271] udevd[4271]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 72.263761][ T4274] udevd[4274]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 72.287869][ T4275] udevd[4275]: inotify_add_watch(7, /dev/loop5p5, 10) failed: No such file or directory [ 72.303491][ T4346] EXT4-fs (loop3): 1 truncate cleaned up [ 72.310011][ T4346] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.340674][ T4334] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.204: Failed to acquire dquot type 0 [ 72.365784][ T4348] udevd[4348]: inotify_add_watch(7, /dev/loop5p6, 10) failed: No such file or directory [ 72.437318][ T4346] raw_sendmsg: syz.3.205 forgot to set AF_INET. Fix it! [ 72.455909][ T4334] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.204: Failed to acquire dquot type 0 [ 72.528985][ T4348] udevd[4348]: inotify_add_watch(7, /dev/loop5p17, 10) failed: No such file or directory [ 72.539056][ T4275] udevd[4275]: inotify_add_watch(7, /dev/loop5p18, 10) failed: No such file or directory [ 72.541101][ T4271] udevd[4271]: inotify_add_watch(7, /dev/loop5p15, 10) failed: No such file or directory [ 72.566560][ T4274] udevd[4274]: inotify_add_watch(7, /dev/loop5p16, 10) failed: No such file or directory [ 72.596059][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.641413][ T4357] udevd[4357]: inotify_add_watch(7, /dev/loop5p13, 10) failed: No such file or directory [ 72.646934][ T4358] udevd[4358]: inotify_add_watch(7, /dev/loop5p14, 10) failed: No such file or directory [ 73.175308][ T4375] loop3: p1 < > p3 p4 < > [ 73.190676][ T4375] loop3: p3 size 33554432 extends beyond EOD, truncated [ 73.264322][ T3006] loop3: p1 < > p3 p4 < > [ 73.269587][ T3006] loop3: p3 size 33554432 extends beyond EOD, truncated [ 73.499091][ T4391] program syz.0.214 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 73.737094][ T4397] netlink: 4 bytes leftover after parsing attributes in process `syz.0.216'. [ 73.844792][ T4353] netlink: 'syz.5.202': attribute type 1 has an invalid length. [ 73.852602][ T4353] netlink: 224 bytes leftover after parsing attributes in process `syz.5.202'. [ 73.918588][ T4405] netlink: 'syz.0.219': attribute type 1 has an invalid length. [ 73.974820][ T4404] msdos filesystem being mounted at /38/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 74.007109][ T4387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.023588][ T4387] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.046301][ T4387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.092046][ T4405] 8021q: adding VLAN 0 to HW filter on device bond1 [ 74.154178][ T4387] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.197448][ T4406] 8021q: adding VLAN 0 to HW filter on device bond1 [ 74.232487][ T4406] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 74.263764][ T4387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.289745][ T4406] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 74.300178][ T4387] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.332272][ T4405] gretap1: entered promiscuous mode [ 74.358622][ T4405] bond1: (slave gretap1): making interface the new active one [ 74.371042][ T4407] netlink: 84 bytes leftover after parsing attributes in process `syz.5.202'. [ 74.380047][ T4407] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 74.391708][ T4405] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 74.403384][ T4387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.412340][ T4387] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.424195][ T4409] macvlan2: entered promiscuous mode [ 74.429593][ T4409] macvlan2: entered allmulticast mode [ 74.435963][ T4409] bond1: entered promiscuous mode [ 74.442554][ T4409] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 74.460991][ T4409] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 74.473994][ T4409] bond1: left promiscuous mode [ 74.630536][ T4328] syz.5.202 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 74.642542][ T4328] CPU: 0 UID: 0 PID: 4328 Comm: syz.5.202 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 74.642578][ T4328] Tainted: [W]=WARN [ 74.642657][ T4328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 74.642671][ T4328] Call Trace: [ 74.642678][ T4328] [ 74.642688][ T4328] __dump_stack+0x1d/0x30 [ 74.642750][ T4328] dump_stack_lvl+0x95/0xd0 [ 74.642778][ T4328] dump_stack+0x15/0x1b [ 74.642797][ T4328] dump_header+0x80/0x240 [ 74.642817][ T4328] oom_kill_process+0x295/0x350 [ 74.642918][ T4328] out_of_memory+0x97d/0xb80 [ 74.642948][ T4328] try_charge_memcg+0x62e/0xa10 [ 74.642990][ T4328] charge_memcg+0x51/0xc0 [ 74.643041][ T4328] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 74.643075][ T4328] __read_swap_cache_async+0x17b/0x2d0 [ 74.643109][ T4328] swap_cluster_readahead+0x362/0x3c0 [ 74.643235][ T4328] swapin_readahead+0xde/0x840 [ 74.643264][ T4328] ? mod_memcg_lruvec_state+0x1a1/0x280 [ 74.643289][ T4328] ? lruvec_stat_mod_folio+0xd2/0x110 [ 74.643362][ T4328] ? __rcu_read_unlock+0x4e/0x70 [ 74.643381][ T4328] ? swap_cache_get_folio+0x26f/0x280 [ 74.643473][ T4328] do_swap_page+0x2f4/0x2140 [ 74.643564][ T4328] ? css_rstat_updated+0xbb/0x280 [ 74.643600][ T4328] ? __pfx_default_wake_function+0x10/0x10 [ 74.643639][ T4328] handle_mm_fault+0xb40/0x3030 [ 74.643732][ T4328] ? vma_start_read+0x1c7/0x2c0 [ 74.643764][ T4328] do_user_addr_fault+0x62f/0x1050 [ 74.643880][ T4328] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 74.643907][ T4328] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 74.643929][ T4328] ? irqentry_exit+0x3c/0x510 [ 74.643969][ T4328] exc_page_fault+0x62/0xa0 [ 74.644009][ T4328] asm_exc_page_fault+0x26/0x30 [ 74.644064][ T4328] RIP: 0033:0x7ff08689b7f6 [ 74.644079][ T4328] Code: 00 00 00 00 48 85 ff 74 0b e9 46 f6 ff ff 66 0f 1f 44 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 83 ec 28 31 f6 <64> 48 8b 04 25 28 00 00 00 48 89 44 24 18 8d 07 48 69 c0 83 de 1b [ 74.644107][ T4328] RSP: 002b:00007ffd75569890 EFLAGS: 00010246 [ 74.644127][ T4328] RAX: 0000000000012363 RBX: 00007ff086b15fa0 RCX: 0000000000012110 [ 74.644142][ T4328] RDX: 0000000000000253 RSI: 0000000000000000 RDI: 00000000000003e8 [ 74.644157][ T4328] RBP: 00007ff086b17da0 R08: 00000000237ef74f R09: 7fffffffffffffff [ 74.644171][ T4328] R10: 3fffffffffffffff R11: 0000000000000246 R12: 0000000000012e73 [ 74.644224][ T4328] R13: 00007ff086b1618c R14: 00000000000122ed R15: 00007ff086b16180 [ 74.644246][ T4328] [ 74.644257][ T4328] memory: usage 307200kB, limit 307200kB, failcnt 907 [ 74.917041][ T4328] memory+swap: usage 307960kB, limit 9007199254740988kB, failcnt 0 [ 74.926036][ T4328] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0 [ 74.933433][ T4328] Memory cgroup stats for /syz5: [ 74.933812][ T4328] cache 16384 [ 74.942303][ T4328] rss 0 [ 74.945155][ T4328] shmem 0 [ 74.948136][ T4328] mapped_file 0 [ 74.951619][ T4328] dirty 0 [ 74.955289][ T4328] writeback 0 [ 74.958591][ T4328] workingset_refault_anon 118 [ 74.963293][ T4328] workingset_refault_file 3 [ 74.967861][ T4328] swap 778240 [ 74.971172][ T4328] swapcached 0 [ 74.974675][ T4328] pgpgin 11632 [ 74.978087][ T4328] pgpgout 11628 [ 74.981552][ T4328] pgfault 12732 [ 74.985676][ T4328] pgmajfault 79 [ 74.989156][ T4328] inactive_anon 0 [ 74.992792][ T4328] active_anon 0 [ 74.996307][ T4328] inactive_file 0 [ 74.999956][ T4328] active_file 16384 [ 75.003811][ T4328] unevictable 0 [ 75.007482][ T4328] hierarchical_memory_limit 314572800 [ 75.012858][ T4328] hierarchical_memsw_limit 9223372036854771712 [ 75.019809][ T4328] total_cache 16384 [ 75.023637][ T4328] total_rss 0 [ 75.026990][ T4328] total_shmem 0 [ 75.030515][ T4328] total_mapped_file 0 [ 75.034579][ T4328] total_dirty 0 [ 75.038140][ T4328] total_writeback 0 [ 75.041988][ T4328] total_workingset_refault_anon 118 [ 75.047796][ T4328] total_workingset_refault_file 3 [ 75.052847][ T4328] total_swap 778240 [ 75.056761][ T4328] total_swapcached 0 [ 75.060712][ T4328] total_pgpgin 11632 [ 75.064760][ T4328] total_pgpgout 11628 [ 75.068856][ T4328] total_pgfault 12732 [ 75.072907][ T4328] total_pgmajfault 79 [ 75.077638][ T4328] total_inactive_anon 0 [ 75.081899][ T4328] total_active_anon 0 [ 75.085954][ T4328] total_inactive_file 0 [ 75.090133][ T4328] total_active_file 16384 [ 75.094474][ T4328] total_unevictable 0 [ 75.098765][ T4328] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.202,pid=4328,uid=0 [ 75.114298][ T4328] Memory cgroup out of memory: Killed process 4328 (syz.5.202) total-vm:100548kB, anon-rss:1204kB, file-rss:26952kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 75.238629][ T4329] syz.5.202 (4329) used greatest stack depth: 6160 bytes left [ 75.260807][ T4447] vfat filesystem being mounted at /46/file1 supports timestamps until 2107-12-31 (0x10390cdaa) [ 75.281254][ T3741] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.350918][ T4454] set_capacity_and_notify: 4 callbacks suppressed [ 75.350937][ T4454] loop0: detected capacity change from 0 to 512 [ 75.426390][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.443182][ T4461] loop4: detected capacity change from 0 to 2048 [ 75.452799][ T4463] loop3: detected capacity change from 0 to 128 [ 75.462464][ T4454] EXT4-fs (loop0): 1 orphan inode deleted [ 75.481116][ T4463] msdos filesystem being mounted at /41/file2 supports timestamps until 2107-12-31 (0x10391447e) [ 75.514243][ T4461] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.527479][ T4461] ext4 filesystem being mounted at /47/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.541097][ T4454] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.546647][ T29] kauditd_printk_skb: 28 callbacks suppressed [ 75.546683][ T29] audit: type=1400 audit(3916217185.763:443): avc: denied { write } for pid=4459 comm="syz.4.232" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 75.581345][ T4461] xt_hashlimit: size too large, truncated to 1048576 [ 75.606373][ T4454] ext4 filesystem being mounted at /47/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.726214][ T4473] netlink: 20 bytes leftover after parsing attributes in process `syz.5.235'. [ 75.786556][ T4476] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.232: bg 0: block 345: padding at end of block bitmap is not set [ 75.840688][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.851398][ T29] audit: type=1400 audit(3916217186.073:444): avc: denied { watch_reads } for pid=4486 comm="syz.3.237" path="/42" dev="tmpfs" ino=243 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 75.856593][ T4476] EXT4-fs (loop4): Remounting filesystem read-only [ 75.974215][ T29] audit: type=1400 audit(3916217186.113:445): avc: denied { watch } for pid=4486 comm="syz.3.237" path="/42/file0" dev="tmpfs" ino=248 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 75.997531][ T29] audit: type=1400 audit(3916217186.183:446): avc: denied { create } for pid=4494 comm="syz.2.243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 76.017924][ T29] audit: type=1400 audit(3916217186.183:447): avc: denied { setopt } for pid=4494 comm="syz.2.243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 76.041867][ T4500] netlink: 12 bytes leftover after parsing attributes in process `syz.2.243'. [ 76.075525][ T29] audit: type=1400 audit(3916217186.303:448): avc: denied { watch watch_reads } for pid=4504 comm="syz.3.245" path="/syzcgroup/unified/syz3/file0" dev="cgroup2" ino=169 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 76.108527][ T4500] 8021q: adding VLAN 0 to HW filter on device bond1 [ 76.117243][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.142189][ T4507] loop3: detected capacity change from 0 to 2048 [ 76.215799][ T4500] loop2: detected capacity change from 0 to 4096 [ 76.241534][ T4507] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.257051][ T29] audit: type=1400 audit(3916217186.383:449): avc: denied { connect } for pid=4494 comm="syz.2.243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 76.277710][ T29] audit: type=1400 audit(3916217186.433:450): avc: denied { setopt } for pid=4511 comm="syz.4.246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 76.295700][ T4500] EXT4-fs: Ignoring removed mblk_io_submit option [ 76.300157][ T29] audit: type=1400 audit(3916217186.433:451): avc: denied { connect } for pid=4511 comm="syz.4.246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 76.303926][ T4500] EXT4-fs: Ignoring removed nomblk_io_submit option [ 76.342340][ T4513] loop4: detected capacity change from 0 to 512 [ 76.360312][ T4516] SELinux: Context system_u:object_r:usb_device_t:s0 is not valid (left unmapped). [ 76.369950][ T4518] loop5: detected capacity change from 0 to 512 [ 76.380980][ T4518] EXT4-fs: dax option not supported [ 76.384821][ T29] audit: type=1400 audit(3916217186.603:452): avc: denied { relabelto } for pid=4512 comm="syz.0.248" name="file0" dev="tmpfs" ino=281 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:usb_device_t:s0" [ 76.434231][ T4500] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.443734][ T4518] netlink: 16 bytes leftover after parsing attributes in process `syz.5.249'. [ 76.458108][ T4513] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.487118][ T4513] ext4 filesystem being mounted at /48/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.499432][ T4513] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #12: comm syz.4.246: corrupted xattr block 6: invalid header [ 76.515442][ T4513] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=12 [ 76.524959][ T4522] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #12: comm syz.4.246: corrupted xattr block 6: invalid header [ 76.539330][ T4513] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #12: comm syz.4.246: corrupted xattr block 6: invalid header [ 76.553662][ T4522] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=12 [ 76.571148][ T4528] xt_l2tp: wrong L2TP version: 35 [ 76.581025][ T4528] ipip0: entered promiscuous mode [ 76.603845][ T4513] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=12 [ 76.624423][ T4513] EXT4-fs error (device loop4): ext4_xattr_block_find:1878: inode #12: comm syz.4.246: corrupted xattr block 6: invalid header [ 76.651705][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.681077][ T4530] Invalid ELF header magic: != ELF [ 76.708357][ T4526] netlink: 20 bytes leftover after parsing attributes in process `syz.0.250'. [ 76.777130][ T4535] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 76.829440][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.858637][ T4551] loop4: detected capacity change from 0 to 512 [ 76.872935][ T4554] loop0: detected capacity change from 0 to 512 [ 76.886887][ T4556] netlink: 32 bytes leftover after parsing attributes in process `syz.3.260'. [ 76.895976][ T4543] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4543 comm=syz.5.254 [ 76.896281][ T4551] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 76.923062][ T4551] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.937004][ T4551] ext4 filesystem being mounted at /50/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 76.951822][ T4554] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.984647][ T4564] netlink: 32 bytes leftover after parsing attributes in process `syz.3.260'. [ 76.988288][ T4554] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.015520][ T4551] 8021q: adding VLAN 0 to HW filter on device bond1 [ 77.027268][ T4556] netlink: 256 bytes leftover after parsing attributes in process `syz.3.260'. [ 77.068163][ T4566] netlink: 24 bytes leftover after parsing attributes in process `syz.0.259'. [ 77.077634][ T4566] netlink: 8 bytes leftover after parsing attributes in process `syz.0.259'. [ 77.111998][ T4566] xt_cluster: node mask cannot exceed total number of nodes [ 77.219060][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.230405][ T4580] 9p: Bad value for 'rfdno' [ 77.236381][ T4580] netlink: 20 bytes leftover after parsing attributes in process `syz.3.264'. [ 77.350782][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.409428][ T4589] loop0: detected capacity change from 0 to 512 [ 77.665093][ T4602] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 77.707650][ T4602] ext4 filesystem being mounted at /56/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 77.800300][ T3318] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 78.008518][ T4614] EXT4-fs: Ignoring removed nobh option [ 78.038926][ T4614] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.071325][ T4614] ext4 filesystem being mounted at /59/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 78.140492][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.167064][ T4621] EXT4-fs (loop4): 1 orphan inode deleted [ 78.180912][ T4621] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.195753][ T4621] ext4 filesystem being mounted at /52/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.245710][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.280769][ T4627] tipc: Started in network mode [ 78.285893][ T4627] tipc: Node identity 02afe5a3a73e, cluster identity 4711 [ 78.293132][ T4627] tipc: Enabled bearer , priority 0 [ 78.345777][ T4634] syzkaller0: entered promiscuous mode [ 78.351313][ T4634] syzkaller0: entered allmulticast mode [ 78.890599][ T4638] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.021765][ T4645] tipc: Resetting bearer [ 79.031116][ T4655] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 79.079066][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.142535][ T4660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.153845][ T4660] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.191612][ T4660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.210121][ T4660] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.224629][ T4660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.239964][ T4660] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.253280][ T4660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.284452][ T4660] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.294332][ T4660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.303944][ T4660] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.305010][ T3485] tipc: Node number set to 2777802147 [ 79.316320][ T4660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.327830][ T4660] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.350736][ T12] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.374787][ T12] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.394240][ T12] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.408401][ T12] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.527772][ T4688] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.648420][ T4688] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.729800][ T4688] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.819124][ T4688] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.994796][ T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.019214][ T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.035599][ T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.054406][ T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.273582][ T4716] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 80.301502][ T4716] EXT4-fs warning (device loop5): read_mmp_block:111: Error -117 while reading MMP block 12 [ 80.472903][ T4744] set_capacity_and_notify: 5 callbacks suppressed [ 80.472922][ T4744] loop5: detected capacity change from 0 to 512 [ 80.523197][ T4744] EXT4-fs (loop5): 1 orphan inode deleted [ 80.557309][ T4744] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.628663][ T4744] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.699562][ T4756] loop2: detected capacity change from 0 to 128 [ 80.732744][ T4756] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 80.782286][ T4754] __nla_validate_parse: 8 callbacks suppressed [ 80.782303][ T4754] netlink: 8 bytes leftover after parsing attributes in process `syz.0.315'. [ 80.800024][ T4649] tipc: Resetting bearer [ 80.809510][ T4649] tipc: Disabling bearer [ 80.816688][ T3741] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.827123][ T4756] ext4 filesystem being mounted at /66/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 81.039892][ T3323] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 81.136829][ T29] kauditd_printk_skb: 33 callbacks suppressed [ 81.136846][ T29] audit: type=1400 audit(3916217191.363:486): avc: denied { bind } for pid=4769 comm="syz.5.321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 81.182180][ T4773] loop2: detected capacity change from 0 to 1024 [ 81.189660][ T29] audit: type=1400 audit(3916217191.363:487): avc: denied { setopt } for pid=4769 comm="syz.5.321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 81.200811][ T4775] netlink: 4 bytes leftover after parsing attributes in process `syz.5.321'. [ 81.219564][ T4773] EXT4-fs: Ignoring removed oldalloc option [ 81.219603][ T4773] EXT4-fs: Ignoring removed bh option [ 81.262779][ T4773] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.469832][ T29] audit: type=1400 audit(3916217191.693:488): avc: denied { write } for pid=4771 comm="syz.2.318" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 81.493002][ T29] audit: type=1400 audit(3916217191.693:489): avc: denied { open } for pid=4771 comm="syz.2.318" path="/67/file1/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 81.616946][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.628483][ T4786] netlink: 20 bytes leftover after parsing attributes in process `syz.3.323'. [ 81.672157][ T29] audit: type=1400 audit(3916217191.753:490): avc: denied { write } for pid=4771 comm="syz.2.318" path="socket:[9626]" dev="sockfs" ino=9626 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 81.696577][ T29] audit: type=1400 audit(3916217191.753:491): avc: denied { setattr } for pid=4771 comm="syz.2.318" name="PACKET" dev="sockfs" ino=9091 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 81.773685][ T4788] netlink: 56 bytes leftover after parsing attributes in process `syz.2.324'. [ 81.892281][ T29] audit: type=1400 audit(3916217192.113:492): avc: denied { bind } for pid=4794 comm="syz.2.327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 81.973471][ T4800] loop2: detected capacity change from 0 to 1024 [ 81.981277][ T4800] EXT4-fs: Ignoring removed oldalloc option [ 81.988380][ T4800] EXT4-fs: Ignoring removed bh option [ 82.007068][ T4800] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.160113][ T4805] loop0: detected capacity change from 0 to 1024 [ 82.224976][ T4805] EXT4-fs: Ignoring removed mblk_io_submit option [ 82.302568][ T4805] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 82.379069][ T4805] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.430719][ T29] audit: type=1326 audit(3916217192.643:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4814 comm="syz.4.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4a400acb9 code=0x7ffc0000 [ 82.454741][ T29] audit: type=1326 audit(3916217192.643:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4814 comm="syz.4.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4a400acb9 code=0x7ffc0000 [ 82.478020][ T29] audit: type=1326 audit(3916217192.643:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4814 comm="syz.4.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4a400acb9 code=0x7ffc0000 [ 82.633716][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.680087][ T4823] loop4: detected capacity change from 0 to 512 [ 82.719848][ T4823] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.801781][ T4823] ext4 filesystem being mounted at /59/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.873034][ T4823] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #12: comm syz.4.334: corrupted xattr block 6: invalid header [ 82.887582][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.904850][ T4823] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=12 [ 82.943889][ T4823] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #12: comm syz.4.334: corrupted xattr block 6: invalid header [ 82.987580][ T4840] netlink: 32 bytes leftover after parsing attributes in process `syz.2.338'. [ 82.997991][ T4823] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=12 [ 83.015642][ T4823] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #12: comm syz.4.334: corrupted xattr block 6: invalid header [ 83.047207][ T4823] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=12 [ 83.066229][ T4823] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #12: comm syz.4.334: corrupted xattr block 6: invalid header [ 83.105350][ T4823] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=12 [ 83.124970][ T4842] bond2: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 83.136117][ T4823] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #12: comm syz.4.334: corrupted xattr block 6: invalid header [ 83.166772][ T4842] bond2 (unregistering): Released all slaves [ 83.174955][ T4823] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=12 [ 83.200743][ T4823] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #12: comm syz.4.334: corrupted xattr block 6: invalid header [ 83.246197][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.311719][ T4849] loop5: detected capacity change from 0 to 1024 [ 83.324244][ T4852] loop2: detected capacity change from 0 to 512 [ 83.358336][ T4849] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 83.370479][ T4852] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.371672][ T4849] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8801e019, mo2=0000] [ 83.410188][ T4852] ext4 filesystem being mounted at /75/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 83.412713][ T4849] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #3: block 2: comm syz.5.342: lblock 2 mapped to illegal pblock 2 (length 1) [ 83.447296][ T4849] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #3: block 48: comm syz.5.342: lblock 0 mapped to illegal pblock 48 (length 1) [ 83.462962][ T4849] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.342: Failed to acquire dquot type 0 [ 83.475595][ T4852] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #2: comm syz.2.343: corrupted inode contents [ 83.487420][ T4849] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 83.498716][ T4852] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #2: comm syz.2.343: mark_inode_dirty error [ 83.511652][ T4852] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #2: comm syz.2.343: corrupted inode contents [ 83.526048][ T4852] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #2: comm syz.2.343: corrupted inode contents [ 83.538671][ T4849] EXT4-fs error (device loop5): ext4_evict_inode:253: inode #11: comm syz.5.342: mark_inode_dirty error [ 83.539125][ T4852] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #2: comm syz.2.343: mark_inode_dirty error [ 83.565335][ T4852] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #2: comm syz.2.343: corrupted inode contents [ 83.574913][ T4849] EXT4-fs warning (device loop5): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 83.578696][ T4852] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #2: comm syz.2.343: mark_inode_dirty error [ 83.600051][ T4849] EXT4-fs (loop5): 1 orphan inode deleted [ 83.600399][ T4867] /dev/sg0: Can't lookup blockdev [ 83.605936][ T4852] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #2: comm syz.2.343: corrupted inode contents [ 83.606388][ T4849] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.638164][ T4852] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #2: comm syz.2.343: mark_inode_dirty error [ 83.658015][ T1684] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:9: lblock 1 mapped to illegal pblock 1 (length 1) [ 83.676151][ T4866] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #2: comm syz.2.343: corrupted inode contents [ 83.703310][ T1684] EXT4-fs error (device loop5): ext4_release_dquot:7022: comm kworker/u8:9: Failed to release dquot type 0 [ 83.738197][ T4873] netlink: 56 bytes leftover after parsing attributes in process `syz.0.348'. [ 83.757436][ T3741] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.768028][ T1684] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:9: lblock 1 mapped to illegal pblock 1 (length 1) [ 83.794413][ T1684] EXT4-fs error (device loop5): ext4_release_dquot:7022: comm kworker/u8:9: Failed to release dquot type 0 [ 83.811386][ T3741] EXT4-fs error (device loop5): __ext4_get_inode_loc:4830: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 83.825433][ T3741] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 83.827033][ T4878] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4878 comm=syz.0.351 [ 83.837941][ T3741] EXT4-fs error (device loop5): ext4_quota_off:7270: inode #3: comm syz-executor: mark_inode_dirty error [ 83.887082][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.898318][ T4882] netlink: 764 bytes leftover after parsing attributes in process `syz.0.352'. [ 83.973037][ T4887] program syz.4.354 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 83.991786][ T4897] program syz.4.354 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 84.050123][ T4889] netlink: 8 bytes leftover after parsing attributes in process `syz.5.349'. [ 84.060211][ T4889] netlink: 12 bytes leftover after parsing attributes in process `syz.5.349'. [ 84.092785][ T4910] loop4: detected capacity change from 0 to 512 [ 84.102656][ T4910] EXT4-fs (loop4): 1 truncate cleaned up [ 84.109888][ T4910] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.127435][ T4889] netlink: 8 bytes leftover after parsing attributes in process `syz.5.349'. [ 84.242045][ T4928] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.358: bg 0: block 465: padding at end of block bitmap is not set [ 84.274646][ T4928] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 84.287654][ T4928] EXT4-fs (loop4): This should not happen!! Data will be lost [ 84.287654][ T4928] [ 84.297609][ T4928] EXT4-fs (loop4): Total free blocks count 0 [ 84.303624][ T4928] EXT4-fs (loop4): Free/Dirty block details [ 84.309602][ T4928] EXT4-fs (loop4): free_blocks=0 [ 84.315290][ T4928] EXT4-fs (loop4): dirty_blocks=66 [ 84.320455][ T4928] EXT4-fs (loop4): Block reservation details [ 84.326503][ T4928] EXT4-fs (loop4): i_reserved_data_blocks=66 [ 84.966613][ T53] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 60 with error 28 [ 85.157259][ T4993] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 85.180904][ T4996] loop4: detected capacity change from 0 to 512 [ 85.189508][ T4994] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 85.212297][ T4996] EXT4-fs: Ignoring removed i_version option [ 85.219529][ T4996] EXT4-fs: Ignoring removed nobh option [ 85.237889][ T4996] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 85.253750][ T4994] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 85.324617][ T5000] syzkaller1: entered promiscuous mode [ 85.330241][ T5000] syzkaller1: entered allmulticast mode [ 85.341440][ T4996] EXT4-fs (loop4): 1 truncate cleaned up [ 85.348978][ T4996] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.547266][ T4993] EXT4-fs (loop0): 1 orphan inode deleted [ 85.555845][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.570463][ T4993] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.608680][ T5008] set_capacity_and_notify: 1 callbacks suppressed [ 85.608701][ T5008] loop5: detected capacity change from 0 to 512 [ 85.652666][ T4993] ext4 filesystem being mounted at /76/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.680041][ T5009] team0 (unregistering): Port device team_slave_0 removed [ 85.725940][ T5010] loop4: detected capacity change from 0 to 2048 [ 85.730836][ T5009] team0 (unregistering): Port device team_slave_1 removed [ 85.772516][ T4352] loop4: p1 < > p2 p3 < > p4 < p5 > [ 85.778967][ T4352] loop4: partition table partially beyond EOD, truncated [ 85.790226][ T4352] loop4: p1 start 4294967288 is beyond EOD, truncated [ 85.798840][ T4352] loop4: p3 start 4284289 is beyond EOD, truncated [ 85.810957][ T5010] loop4: p1 < > p2 p3 < > p4 < p5 > [ 85.817321][ T5010] loop4: partition table partially beyond EOD, truncated [ 85.826002][ T5010] loop4: p1 start 4294967288 is beyond EOD, truncated [ 85.839224][ T5010] loop4: p3 start 4284289 is beyond EOD, truncated [ 85.847925][ T5022] __nla_validate_parse: 3 callbacks suppressed [ 85.847942][ T5022] netlink: 24 bytes leftover after parsing attributes in process `syz.5.369'. [ 85.896815][ T5022] netlink: 100 bytes leftover after parsing attributes in process `syz.5.369'. [ 85.923531][ T4354] udevd[4354]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 85.934322][ T4352] udevd[4352]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 85.939041][ T4351] udevd[4351]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 86.010161][ T5030] netlink: 12 bytes leftover after parsing attributes in process `syz.4.372'. [ 86.042098][ T5035] SELinux: Context system_u:object_r:modules_dep_t:s0 is not valid (left unmapped). [ 86.076702][ T5037] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.086364][ T5030] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 86.095072][ T5037] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.114273][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.184316][ T5048] netlink: 44 bytes leftover after parsing attributes in process `syz.3.377'. [ 86.242956][ T5054] netlink: 60 bytes leftover after parsing attributes in process `syz.4.382'. [ 86.258963][ T5056] loop0: detected capacity change from 0 to 128 [ 86.266111][ T5054] netlink: 12 bytes leftover after parsing attributes in process `syz.4.382'. [ 86.266138][ T5054] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 86.288863][ T5056] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 86.304227][ T5056] ext4 filesystem being mounted at /77/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 86.326346][ T29] kauditd_printk_skb: 104 callbacks suppressed [ 86.326387][ T29] audit: type=1400 audit(3916217196.543:596): avc: denied { read } for pid=5058 comm="syz.4.383" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 86.365678][ T29] audit: type=1400 audit(3916217196.543:597): avc: denied { open } for pid=5058 comm="syz.4.383" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 86.399767][ T3318] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 86.430285][ T5062] netlink: 20 bytes leftover after parsing attributes in process `syz.5.378'. [ 86.517715][ T5072] FAULT_INJECTION: forcing a failure. [ 86.517715][ T5072] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 86.532161][ T5072] CPU: 0 UID: 0 PID: 5072 Comm: syz.4.387 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 86.532202][ T5072] Tainted: [W]=WARN [ 86.532228][ T5072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 86.532242][ T5072] Call Trace: [ 86.532248][ T5072] [ 86.532256][ T5072] __dump_stack+0x1d/0x30 [ 86.532321][ T5072] dump_stack_lvl+0x95/0xd0 [ 86.532350][ T5072] dump_stack+0x15/0x1b [ 86.532376][ T5072] should_fail_ex+0x263/0x280 [ 86.532407][ T5072] should_fail+0xb/0x20 [ 86.532433][ T5072] should_fail_usercopy+0x1a/0x20 [ 86.532490][ T5072] _copy_from_iter+0xcf/0xea0 [ 86.532527][ T5072] ? __alloc_skb+0x397/0x4b0 [ 86.532561][ T5072] ? __alloc_skb+0x219/0x4b0 [ 86.532623][ T5072] netlink_sendmsg+0x4ae/0x6f0 [ 86.532650][ T5072] ? __pfx_netlink_sendmsg+0x10/0x10 [ 86.532669][ T5072] __sock_sendmsg+0x145/0x170 [ 86.532779][ T5072] ____sys_sendmsg+0x31e/0x4a0 [ 86.532846][ T5072] ___sys_sendmsg+0x195/0x1e0 [ 86.532906][ T5072] __x64_sys_sendmsg+0xd4/0x160 [ 86.532951][ T5072] x64_sys_call+0x17ba/0x3000 [ 86.533050][ T5072] do_syscall_64+0xc0/0x2a0 [ 86.533150][ T5072] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.533179][ T5072] RIP: 0033:0x7fa4a400acb9 [ 86.533244][ T5072] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 86.533268][ T5072] RSP: 002b:00007fa4a2a67028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 86.533292][ T5072] RAX: ffffffffffffffda RBX: 00007fa4a4285fa0 RCX: 00007fa4a400acb9 [ 86.533329][ T5072] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 86.533341][ T5072] RBP: 00007fa4a2a67090 R08: 0000000000000000 R09: 0000000000000000 [ 86.533353][ T5072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 86.533365][ T5072] R13: 00007fa4a4286038 R14: 00007fa4a4285fa0 R15: 00007ffe10840a38 [ 86.533384][ T5072] [ 86.732902][ T29] audit: type=1326 audit(3916217196.953:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5060 comm="syz.0.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a4dc3acb9 code=0x7ffc0000 [ 86.757244][ T29] audit: type=1326 audit(3916217196.953:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5060 comm="syz.0.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a4dc3acb9 code=0x7ffc0000 [ 86.781644][ T29] audit: type=1326 audit(3916217196.953:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5060 comm="syz.0.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a4dc3acb9 code=0x7ffc0000 [ 86.806059][ T29] audit: type=1326 audit(3916217196.953:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5060 comm="syz.0.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a4dc3acb9 code=0x7ffc0000 [ 86.830322][ T29] audit: type=1326 audit(3916217196.953:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5060 comm="syz.0.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f2a4dc3acb9 code=0x7ffc0000 [ 86.854622][ T29] audit: type=1326 audit(3916217196.953:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5060 comm="syz.0.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a4dc3acb9 code=0x7ffc0000 [ 86.878880][ T29] audit: type=1326 audit(3916217196.953:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5060 comm="syz.0.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2a4dbfb58e code=0x7ffc0000 [ 86.902487][ T29] audit: type=1326 audit(3916217196.953:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5060 comm="syz.0.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a4dc3acb9 code=0x7ffc0000 [ 87.083944][ T5082] loop2: detected capacity change from 0 to 512 [ 87.097889][ T5082] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.113596][ T5082] ext4 filesystem being mounted at /81/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.200206][ T5092] Direct I/O collision with buffered writes! File: /file1 Comm: syz.2.390 [ 87.236849][ T5087] loop4: detected capacity change from 0 to 8168 [ 87.280161][ T5095] netlink: 47 bytes leftover after parsing attributes in process `syz.0.393'. [ 87.291978][ T5087] loop4: p1 p2 p4 < > [ 87.296833][ T5087] loop4: partition table partially beyond EOD, truncated [ 87.311968][ T5087] loop4: p1 start 16777216 is beyond EOD, truncated [ 87.318861][ T5087] loop4: p2 size 515840 extends beyond EOD, truncated [ 87.345492][ T5087] loop4: p4 start 16777216 is beyond EOD, truncated [ 87.411700][ T5095] netlink: 4 bytes leftover after parsing attributes in process `syz.0.393'. [ 87.458710][ T4354] udevd[4354]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 87.627902][ T5112] cgroup2: Unknown parameter 'memmry_hugetlb_a#Unting' [ 87.680274][ T5120] netlink: 12 bytes leftover after parsing attributes in process `syz.4.401'. [ 87.691574][ T5121] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 87.725592][ T5120] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 87.926826][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.991522][ T5126] veth0_vlan: entered allmulticast mode [ 88.163875][ T5142] loop4: detected capacity change from 0 to 1024 [ 88.200738][ T5142] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.406: bad orphan inode 134217728 [ 88.261130][ T5142] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.668628][ T5174] loop2: detected capacity change from 0 to 256 [ 88.741035][ T5174] vfat: Unknown parameter '' [ 88.761931][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.861381][ T5185] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 88.892999][ T5174] loop2: detected capacity change from 0 to 256 [ 88.958936][ T5174] vfat filesystem being mounted at /86/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 89.083688][ T5190] loop4: detected capacity change from 0 to 128 [ 89.101066][ T5190] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 89.129716][ T5193] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=4 sclass=netlink_xfrm_socket pid=5193 comm=syz.3.422 [ 89.165642][ T5190] ext4 filesystem being mounted at /86/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 89.341886][ T5198] syzkaller1: entered promiscuous mode [ 89.348133][ T5198] syzkaller1: entered allmulticast mode [ 89.729593][ T5196] loop0: detected capacity change from 0 to 512 [ 89.946667][ T3324] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 90.132051][ T5196] EXT4-fs (loop0): 1 orphan inode deleted [ 90.161534][ T4974] EXT4-fs error (device loop0): ext4_release_dquot:7022: comm kworker/u8:13: Failed to release dquot type 1 [ 90.203559][ T5196] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.293936][ T5223] netlink: 'syz.3.431': attribute type 21 has an invalid length. [ 90.400834][ T5196] ext4 filesystem being mounted at /84/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.451110][ T5196] mmap: syz.0.423 (5196) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 90.695798][ T5196] SELinux: policydb magic number 0x10 does not match expected magic number 0xf97cff8c [ 90.747106][ T5196] SELinux: failed to load policy [ 91.051179][ T5259] IPv6: NLM_F_CREATE should be specified when creating new route [ 91.208049][ T5259] all (unregistering): Released all slaves [ 91.339064][ T29] kauditd_printk_skb: 395 callbacks suppressed [ 91.339090][ T29] audit: type=1400 audit(3916217201.563:1000): avc: denied { mounton } for pid=5279 comm="syz.0.446" path="mnt:[4026532369]" dev="nsfs" ino=4026532369 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 91.373817][ T5285] __nla_validate_parse: 6 callbacks suppressed [ 91.373833][ T5285] netlink: 20 bytes leftover after parsing attributes in process `syz.5.448'. [ 91.390817][ T5281] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 91.436570][ T5285] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 91.500013][ T29] audit: type=1400 audit(3916217201.703:1001): avc: denied { accept } for pid=5292 comm="syz.2.450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 91.544293][ T5302] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1548 sclass=netlink_route_socket pid=5302 comm=syz.4.452 [ 91.552576][ T5296] ------------[ cut here ]------------ [ 91.563146][ T5296] verifier bug: REG INVARIANTS VIOLATION (true_reg2): range bounds violation u64=[0x0, 0x7800000000] s64=[0x0, 0xffffffffffffffff] u32=[0x80000000, 0x0] s32=[0x0, 0xffffffff] var_off=(0x0, 0x7800000000) [ 91.563463][ T5301] loop5: detected capacity change from 0 to 128 [ 91.583101][ T5296] WARNING: kernel/bpf/verifier.c:2748 at reg_bounds_sanity_check+0x15b/0x660, CPU#1: syz.0.451/5296 [ 91.583154][ T5296] Modules linked in: [ 91.583177][ T5296] CPU: 1 UID: 0 PID: 5296 Comm: syz.0.451 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 91.583212][ T5296] Tainted: [W]=WARN [ 91.583285][ T5296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 91.583301][ T5296] RIP: 0010:reg_bounds_sanity_check+0x27d/0x660 [ 91.583375][ T5296] Code: 24 78 4c 8b 44 24 70 4c 8b 4c 24 60 41 ff 74 24 20 41 55 53 ff 74 24 68 ff 74 24 78 ff b4 24 90 00 00 00 ff b4 24 b0 00 00 00 <67> 48 0f b9 3a 48 83 c4 38 4c 8b ac 24 98 00 00 00 49 8d 85 80 08 [ 91.583426][ T5296] RSP: 0018:ffffc9000e11b3a0 EFLAGS: 00010246 [ 91.583443][ T5296] RAX: ffff88811f9bbc10 RBX: 00000000ffffffff RCX: 0000000000000000 [ 91.583461][ T5296] RDX: ffffffff867fcb34 RSI: ffffffff86810d65 RDI: ffffffff86fb6f20 [ 91.583479][ T5296] RBP: ffff88811a4b0840 R08: 0000007800000000 R09: 0000000000000000 [ 91.583497][ T5296] R10: 00000000000000d0 R11: 0000000000000000 R12: ffff88811a4b0800 [ 91.583556][ T5296] R13: 0000000000000000 R14: ffff88811a4b084c R15: ffff88811a4b0838 [ 91.583574][ T5296] FS: 00007f2a4c6976c0(0000) GS:ffff8882aec79000(0000) knlGS:0000000000000000 [ 91.583669][ T5296] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 91.583687][ T5296] CR2: 00002000000054c0 CR3: 00000001415b0000 CR4: 00000000003506f0 [ 91.583708][ T5296] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 91.583723][ T5296] DR3: 0000000000000000 DR6: 00000000ffff0ff1 DR7: 0000000000000600 [ 91.583760][ T5296] Call Trace: [ 91.583769][ T5296] [ 91.583789][ T5296] reg_set_min_max+0x1f2/0x260 [ 91.583843][ T5296] check_cond_jmp_op+0x13bd/0x1a80 [ 91.583884][ T5296] do_check+0x3356/0x8250 [ 91.583979][ T5296] ? do_check_common+0x418/0x1300 [ 91.584036][ T5296] do_check_common+0xccf/0x1300 [ 91.634337][ T5301] ext4 filesystem being mounted at /69/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 91.639513][ T5296] bpf_check+0x2f85/0xc890 [ 91.816753][ T5296] ? __alloc_frozen_pages_noprof+0x18a/0x350 [ 91.822793][ T5296] ? __vmap_pages_range_noflush+0xb9c/0xcc0 [ 91.828750][ T5296] ? css_rstat_updated+0xbb/0x280 [ 91.833920][ T5296] ? try_charge_memcg+0x215/0xa10 [ 91.839851][ T5296] ? mod_memcg_lruvec_state+0x1a1/0x280 [ 91.845505][ T5296] ? _find_next_zero_bit+0x64/0xa0 [ 91.850670][ T5296] ? pcpu_block_update_hint_alloc+0x640/0x660 [ 91.856829][ T5296] ? pcpu_block_update_hint_alloc+0x640/0x660 [ 91.862942][ T5296] ? css_rstat_updated+0xbb/0x280 [ 91.868782][ T5296] ? mod_memcg_state+0x182/0x260 [ 91.873790][ T5296] ? __rcu_read_unlock+0x4e/0x70 [ 91.878945][ T5296] ? pcpu_memcg_post_alloc_hook+0xec/0x170 [ 91.884829][ T5296] ? pcpu_alloc_noprof+0xd18/0x1210 [ 91.890126][ T5296] ? should_fail_ex+0x30/0x280 [ 91.895796][ T5296] ? __kmalloc_noprof+0x2a3/0x580 [ 91.900873][ T5296] ? security_bpf_prog_load+0x60/0x140 [ 91.906423][ T5296] ? selinux_bpf_prog_load+0xac/0xd0 [ 91.911763][ T5296] ? security_bpf_prog_load+0x9e/0x140 [ 91.917303][ T5296] bpf_prog_load+0xf76/0x1140 [ 91.922105][ T5296] ? security_bpf+0x2b/0x90 [ 91.927448][ T5296] __sys_bpf+0x469/0x7b0 [ 91.931733][ T5296] __x64_sys_bpf+0x41/0x50 [ 91.936371][ T5296] x64_sys_call+0x28e1/0x3000 [ 91.941088][ T5296] do_syscall_64+0xc0/0x2a0 [ 91.945666][ T5296] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.951684][ T5296] RIP: 0033:0x7f2a4dc3acb9 [ 91.957149][ T5296] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.976863][ T5296] RSP: 002b:00007f2a4c697028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 91.986064][ T5296] RAX: ffffffffffffffda RBX: 00007f2a4deb5fa0 RCX: 00007f2a4dc3acb9 [ 91.994075][ T5296] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 92.002145][ T5296] RBP: 00007f2a4dca8bf7 R08: 0000000000000000 R09: 0000000000000000 [ 92.010232][ T5296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 92.019097][ T5296] R13: 00007f2a4deb6038 R14: 00007f2a4deb5fa0 R15: 00007ffc61e12d78 [ 92.027372][ T5296] [ 92.030434][ T5296] ---[ end trace 0000000000000000 ]--- [ 92.040478][ T5305] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.099129][ T5310] netlink: 'syz.3.455': attribute type 3 has an invalid length. [ 92.137930][ T29] audit: type=1400 audit(3916217202.363:1002): avc: denied { read } for pid=5321 comm="syz.0.457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 92.249389][ T5338] loop0: detected capacity change from 0 to 512 [ 92.266274][ T29] audit: type=1400 audit(3916217202.483:1003): avc: denied { bind } for pid=5339 comm="syz.5.463" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 92.340837][ T5337] 8021q: adding VLAN 0 to HW filter on device bond2 [ 92.349565][ T29] audit: type=1400 audit(3916217202.543:1004): avc: denied { ioctl } for pid=5335 comm="syz.2.461" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 92.401788][ T5338] EXT4-fs (loop0): 1 orphan inode deleted [ 92.437071][ T5338] ext4 filesystem being mounted at /90/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.448447][ T29] audit: type=1400 audit(3916217202.653:1005): avc: denied { connect } for pid=5352 comm="syz.4.464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 92.509600][ T5358] netlink: 20 bytes leftover after parsing attributes in process `syz.3.462'. [ 92.542216][ T5361] loop5: detected capacity change from 0 to 128 [ 92.561559][ T5361] ext4 filesystem being mounted at /72/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 92.596631][ T29] audit: type=1400 audit(3916217202.823:1006): avc: denied { write } for pid=5336 comm="syz.0.460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 92.629354][ T29] audit: type=1400 audit(3916217202.843:1007): avc: denied { connect } for pid=5336 comm="syz.0.460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 92.730468][ T5369] netlink: 12 bytes leftover after parsing attributes in process `syz.4.469'. [ 92.887102][ T5379] netlink: 'syz.4.472': attribute type 2 has an invalid length. [ 92.894893][ T29] audit: type=1400 audit(3916217203.113:1008): avc: denied { ioctl } for pid=5378 comm="syz.4.472" path="/dev/nvram" dev="devtmpfs" ino=98 ioctlcmd=0x7041 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 92.932967][ T5381] loop5: detected capacity change from 0 to 512 [ 92.966156][ T5381] EXT4-fs: Ignoring removed nobh option [ 93.120873][ T5381] ext4 filesystem being mounted at /75/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 93.161796][ T29] audit: type=1400 audit(3916217203.373:1009): avc: denied { setattr } for pid=5380 comm="syz.5.473" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 93.278286][ T5392] loop2: detected capacity change from 0 to 128 [ 93.311142][ T5392] ext4 filesystem being mounted at /98/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 93.511168][ T5403] netlink: 12 bytes leftover after parsing attributes in process `syz.0.479'. [ 93.533379][ T5405] loop5: detected capacity change from 0 to 128 [ 93.554718][ T5403] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 93.591162][ T5405] ext4 filesystem being mounted at /77/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 93.730777][ T5412] loop0: detected capacity change from 0 to 1024 [ 93.786697][ T5412] EXT4-fs: inline encryption not supported [ 93.802607][ T5414] loop5: detected capacity change from 0 to 512 [ 93.823916][ T5414] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 93.842415][ T5412] 9p: Bad value for 'rfdno' [ 93.863087][ T5418] netlink: 172 bytes leftover after parsing attributes in process `syz.3.483'. [ 93.880795][ T5412] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000. [ 93.900819][ T5414] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #16: comm syz.5.482: invalid indirect mapped block 83886080 (level 1) [ 93.999698][ T5414] EXT4-fs (loop5): Remounting filesystem read-only [ 94.035738][ T5414] EXT4-fs (loop5): 1 orphan inode deleted [ 94.041570][ T5414] EXT4-fs (loop5): 1 truncate cleaned up [ 94.085598][ T5432] netlink: 8 bytes leftover after parsing attributes in process `syz.3.486'. [ 94.086727][ T5427] loop0: detected capacity change from 0 to 512 [ 94.094670][ T5432] netlink: 'syz.3.486': attribute type 26 has an invalid length. [ 94.109534][ T5432] netlink: 4 bytes leftover after parsing attributes in process `syz.3.486'. [ 94.145495][ T5432] netlink: 8 bytes leftover after parsing attributes in process `syz.3.486'. [ 94.154355][ T5432] netlink: 'syz.3.486': attribute type 26 has an invalid length. [ 94.162825][ T5432] netlink: 4 bytes leftover after parsing attributes in process `syz.3.486'. [ 94.243165][ T5427] EXT4-fs (loop0): 1 orphan inode deleted [ 94.255448][ T5427] ext4 filesystem being mounted at /94/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.314344][ T5446] program syz.4.487 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 94.378398][ T5457] loop5: detected capacity change from 0 to 764 [ 94.396054][ T5447] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 94.514393][ T5468] netlink: 360 bytes leftover after parsing attributes in process `syz.5.494'. [ 94.573642][ T5468] netlink: 'syz.5.494': attribute type 10 has an invalid length. [ 94.599780][ T5452] batman_adv: batadv0: Adding interface: ipvlan2 [ 94.606890][ T5452] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.632256][ T5452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.643449][ T5452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.653642][ T5452] batman_adv: batadv0: Interface activated: ipvlan2 [ 94.666822][ T5468] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.703108][ T5475] netlink: 'syz.5.494': attribute type 6 has an invalid length. [ 94.902577][ T5501] EXT4-fs: Ignoring removed nomblk_io_submit option [ 94.917586][ T5501] EXT4-fs: old and new quota format mixing [ 95.225797][ T5525] ext4 filesystem being mounted at /100/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 95.304964][ T5532] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=5532 comm=syz.0.508 [ 95.318394][ T5532] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2580 sclass=netlink_route_socket pid=5532 comm=syz.0.508 [ 95.333274][ T5528] EXT4-fs error (device loop5): ext4_iget_extra_inode:5073: inode #15: comm syz.5.507: corrupted in-inode xattr: invalid ea_ino [ 95.354848][ T5528] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.507: couldn't read orphan inode 15 (err -117) [ 95.370286][ T5532] netlink: 'syz.0.508': attribute type 1 has an invalid length. [ 95.463839][ T5532] bond2: entered promiscuous mode [ 95.497210][ T5535] msdos: Unknown parameter '>ߗH֓J*\yj [t:'i65zw' [ 95.540098][ T5532] 8021q: adding VLAN 0 to HW filter on device bond2 [ 95.589973][ T5536] vfat filesystem being mounted at /103/file2 supports timestamps until 2107-12-31 (0x10391447e) [ 95.645915][ T5541] netlink: 'syz.5.513': attribute type 30 has an invalid length. [ 95.864118][ T5561] ip6t_rpfilter: unknown options [ 95.972470][ T5569] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 96.078836][ T5578] ext4 filesystem being mounted at /102/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 96.316599][ T3421] kernel write not supported for file /272/net/snmp (pid: 3421 comm: kworker/0:5) [ 96.386687][ T29] kauditd_printk_skb: 196 callbacks suppressed [ 96.386725][ T29] audit: type=1400 audit(3916217206.613:1206): avc: denied { mount } for pid=5588 comm="syz.5.526" name="/" dev="hugetlbfs" ino=11148 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 96.417408][ T5589] hugetlbfs: Bad value '' for mount option 'size' [ 96.417408][ T5589] [ 96.442627][ T29] audit: type=1400 audit(3916217206.623:1207): avc: denied { read write } for pid=5590 comm="syz.2.525" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 96.467132][ T29] audit: type=1400 audit(3916217206.623:1208): avc: denied { open } for pid=5590 comm="syz.2.525" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 96.491599][ T29] audit: type=1400 audit(3916217206.643:1209): avc: denied { remount } for pid=5588 comm="syz.5.526" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 96.604938][ T29] audit: type=1400 audit(3916217206.823:1210): avc: denied { unmount } for pid=3741 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 96.676743][ T29] audit: type=1400 audit(3916217206.873:1211): avc: denied { connect } for pid=5595 comm="syz.4.528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 96.676830][ T29] audit: type=1400 audit(3916217206.883:1212): avc: denied { create } for pid=5595 comm="syz.4.528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 96.676854][ T29] audit: type=1400 audit(3916217206.883:1213): avc: denied { bind } for pid=5595 comm="syz.4.528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 96.676884][ T29] audit: type=1400 audit(3916217206.883:1214): avc: denied { cpu } for pid=5595 comm="syz.4.528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 96.718915][ T5598] 9p: Bad value for 'rfdno' [ 96.802816][ T5601] __nla_validate_parse: 2 callbacks suppressed [ 96.802862][ T5601] netlink: 4 bytes leftover after parsing attributes in process `syz.5.530'. [ 96.829777][ T5606] all: renamed from bridge_slave_0 (while UP) [ 96.870219][ T5610] set_capacity_and_notify: 8 callbacks suppressed [ 96.870233][ T5610] loop5: detected capacity change from 0 to 128 [ 96.888780][ T5610] ext4 filesystem being mounted at /97/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 96.968187][ T29] audit: type=1326 audit(3916217207.193:1215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5618 comm="syz.3.536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f365a80acb9 code=0x7ffc0000 [ 97.138272][ T5629] netlink: 'syz.0.538': attribute type 2 has an invalid length. [ 97.146559][ T5629] netlink: 'syz.0.538': attribute type 8 has an invalid length. [ 97.154321][ T5629] netlink: 132 bytes leftover after parsing attributes in process `syz.0.538'. [ 97.330814][ T5655] netlink: 240 bytes leftover after parsing attributes in process `syz.5.546'. [ 97.340758][ T5655] netlink: 424 bytes leftover after parsing attributes in process `syz.5.546'. [ 97.353185][ T5655] netlink: 12 bytes leftover after parsing attributes in process `syz.5.546'. [ 97.362799][ T5655] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 97.380951][ T5656] loop2: detected capacity change from 0 to 1024 [ 97.389143][ T5656] EXT4-fs: Ignoring removed orlov option [ 97.396290][ T5656] EXT4-fs: inline encryption not supported [ 97.423015][ T5656] netlink: 4 bytes leftover after parsing attributes in process `syz.2.545'. [ 97.520172][ T5665] netlink: 32 bytes leftover after parsing attributes in process `syz.4.549'. [ 97.530288][ T5665] netlink: 32 bytes leftover after parsing attributes in process `syz.4.549'. [ 97.609293][ T5669] loop5: detected capacity change from 0 to 2048 [ 97.729604][ T5680] tipc: Failed to remove unknown binding: 66,1,1/0:4026442559/4026442561 [ 97.738813][ T5680] tipc: Failed to remove unknown binding: 66,1,1/0:4026442559/4026442561 [ 97.748008][ T5680] tipc: Failed to remove unknown binding: 66,1,1/0:4026442559/4026442561 [ 98.123776][ T5692] loop0: detected capacity change from 0 to 512 [ 98.154912][ T5692] ext4 filesystem being mounted at /109/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.226485][ T5698] netlink: 16 bytes leftover after parsing attributes in process `syz.2.561'. [ 98.245222][ T5698] netlink: 16 bytes leftover after parsing attributes in process `syz.2.561'. [ 98.273436][ T5700] netlink: 'syz.0.562': attribute type 10 has an invalid length. [ 98.649165][ T5720] loop0: detected capacity change from 0 to 512 [ 98.682362][ T5720] EXT4-fs (loop0): 1 orphan inode deleted [ 98.706785][ T5720] ext4 filesystem being mounted at /113/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.723865][ T5726] Failed to initialize the IGMP autojoin socket (err -2) [ 98.865229][ T5742] loop4: detected capacity change from 0 to 128 [ 98.896792][ T5742] ext4 filesystem being mounted at /109/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 98.950011][ T5735] loop5: detected capacity change from 0 to 8192 [ 98.963306][ T5735] vfat filesystem being mounted at /107/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 99.143893][ T5762] netlink: 'syz.3.580': attribute type 3 has an invalid length. [ 99.192094][ T5765] tipc: Can't bind to reserved service type 0 [ 99.248529][ T5773] loop5: detected capacity change from 0 to 128 [ 99.331450][ T5784] loop5: detected capacity change from 0 to 1024 [ 99.350579][ T5784] ext4 filesystem being mounted at /111/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.365309][ T5784] EXT4-fs error (device loop5): ext4_map_blocks:825: inode #15: block 3: comm syz.5.587: lblock 3 mapped to illegal pblock 3 (length 1) [ 99.412947][ T5784] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 99.425387][ T5784] EXT4-fs (loop5): This should not happen!! Data will be lost [ 99.425387][ T5784] [ 99.566318][ T5784] EXT4-fs error (device loop5): ext4_map_blocks:825: inode #15: block 3: comm syz.5.587: lblock 3 mapped to illegal pblock 3 (length 1) [ 99.600742][ T5784] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 99.613270][ T5784] EXT4-fs (loop5): This should not happen!! Data will be lost [ 99.613270][ T5784] [ 99.646667][ T5580] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 99.729574][ T5801] loop0: detected capacity change from 0 to 8192 [ 99.781810][ T5807] netlink: 'syz.3.595': attribute type 15 has an invalid length. [ 99.796243][ T5801] loop0: p1 p3 p4 [ 99.796886][ T5807] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=5807 comm=syz.3.595 [ 99.800409][ T5801] loop0: p1 start 11337728 is beyond EOD, truncated [ 99.819343][ T5801] loop0: p3 start 83886088 is beyond EOD, truncated [ 99.826885][ T5801] loop0: p4 size 460544 extends beyond EOD, truncated [ 99.949276][ T4354] udevd[4354]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 99.968917][ T5823] msdos filesystem being mounted at /123/file0 supports timestamps until 2107-12-31 (0x1039060ae) [ 100.031623][ T5832] Failed to initialize the IGMP autojoin socket (err -2) [ 100.060380][ T5834] EXT4-fs: Ignoring removed nomblk_io_submit option [ 100.078290][ T5834] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 100.087798][ T5834] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 100.147784][ T5834] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4215: comm syz.2.604: Allocating blocks 41-42 which overlap fs metadata [ 100.186161][ T5834] EXT4-fs (loop2): Remounting filesystem read-only [ 100.209284][ T5834] EXT4-fs (loop2): 1 truncate cleaned up [ 100.239847][ T37] EXT4-fs error (device loop5): ext4_map_blocks:825: inode #15: block 8: comm kworker/u8:2: lblock 8 mapped to illegal pblock 8 (length 8) [ 100.301260][ T37] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 100.313695][ T37] EXT4-fs (loop5): This should not happen!! Data will be lost [ 100.313695][ T37] [ 100.356619][ T5832] EXT4-fs: Ignoring removed nobh option [ 100.362301][ T5832] EXT4-fs: inline encryption not supported [ 100.581728][ T5857] netlink: 'syz.5.606': attribute type 1 has an invalid length. [ 100.857164][ T3324] EXT4-fs unmount: 40 callbacks suppressed [ 100.857182][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.299337][ T5914] vfat filesystem being mounted at /126/bus supports timestamps until 2107-12-31 (0x10391447e) [ 101.485655][ T5920] Failed to initialize the IGMP autojoin socket (err -2) [ 101.512490][ T5922] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.569830][ T29] kauditd_printk_skb: 2356 callbacks suppressed [ 101.569920][ T29] audit: type=1400 audit(3916217211.795:3568): avc: denied { sys_module } for pid=5927 comm="syz.5.625" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 101.598408][ T5922] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.761302][ T5916] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 101.852798][ T5946] tmpfs: Unknown parameter 'mplfrJnd' [ 101.870914][ T5948] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 101.892162][ T5948] ext4 filesystem being mounted at /130/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 101.935272][ T5920] Failed to initialize the IGMP autojoin socket (err -2) [ 101.956270][ T5937] __nla_validate_parse: 15 callbacks suppressed [ 101.956290][ T5937] netlink: 4 bytes leftover after parsing attributes in process `syz.3.626'. [ 101.981651][ T5948] __vm_enough_memory: pid: 5948, comm: syz.0.631, bytes: 21200430833664 not enough memory for the allocation [ 102.095911][ T5961] netlink: 88 bytes leftover after parsing attributes in process `syz.3.635'. [ 102.108213][ T5961] netlink: 88 bytes leftover after parsing attributes in process `syz.3.635'. [ 102.116831][ T5962] netlink: 20 bytes leftover after parsing attributes in process `syz.3.635'. [ 102.126564][ T5962] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 102.152393][ T5966] FAULT_INJECTION: forcing a failure. [ 102.152393][ T5966] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 102.166630][ T5966] CPU: 0 UID: 0 PID: 5966 Comm: syz.2.636 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 102.166668][ T5966] Tainted: [W]=WARN [ 102.166675][ T5966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 102.166690][ T5966] Call Trace: [ 102.166699][ T5966] [ 102.166707][ T5966] __dump_stack+0x1d/0x30 [ 102.166796][ T5966] dump_stack_lvl+0x95/0xd0 [ 102.166823][ T5966] dump_stack+0x15/0x1b [ 102.166845][ T5966] should_fail_ex+0x263/0x280 [ 102.167030][ T5966] should_fail+0xb/0x20 [ 102.167057][ T5966] should_fail_usercopy+0x1a/0x20 [ 102.167083][ T5966] _copy_to_user+0x20/0xa0 [ 102.167111][ T5966] simple_read_from_buffer+0xb5/0x130 [ 102.167158][ T5966] proc_fail_nth_read+0x10e/0x150 [ 102.167195][ T5966] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 102.167308][ T5966] vfs_read+0x1ab/0x7f0 [ 102.167351][ T5966] ? __rcu_read_unlock+0x4e/0x70 [ 102.167392][ T5966] ? __fget_files+0x184/0x1c0 [ 102.167421][ T5966] ? mutex_lock+0x57/0x90 [ 102.167452][ T5966] ksys_read+0xdc/0x1a0 [ 102.167470][ T5966] __x64_sys_read+0x40/0x50 [ 102.167521][ T5966] x64_sys_call+0x2889/0x3000 [ 102.167554][ T5966] do_syscall_64+0xc0/0x2a0 [ 102.167581][ T5966] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.167633][ T5966] RIP: 0033:0x7fa0f769b58e [ 102.167657][ T5966] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 102.167678][ T5966] RSP: 002b:00007fa0f6136fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 102.167703][ T5966] RAX: ffffffffffffffda RBX: 00007fa0f61376c0 RCX: 00007fa0f769b58e [ 102.167721][ T5966] RDX: 000000000000000f RSI: 00007fa0f61370a0 RDI: 0000000000000003 [ 102.167792][ T5966] RBP: 00007fa0f6137090 R08: 0000000000000000 R09: 0000000000000000 [ 102.167808][ T5966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 102.167820][ T5966] R13: 00007fa0f7956038 R14: 00007fa0f7955fa0 R15: 00007ffed4b6a9b8 [ 102.167839][ T5966] [ 102.176215][ T5962] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 102.247278][ T29] audit: type=1400 audit(3916217212.435:3569): avc: denied { map } for pid=5960 comm="syz.3.635" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 102.251478][ T5962] vhci_hcd vhci_hcd.2: invalid port number 96 [ 102.415335][ T5962] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 102.482388][ T5977] netlink: 56 bytes leftover after parsing attributes in process `syz.2.639'. [ 102.492026][ T5977] netlink: 8 bytes leftover after parsing attributes in process `syz.2.639'. [ 102.507660][ T5977] set_capacity_and_notify: 6 callbacks suppressed [ 102.507676][ T5977] loop2: detected capacity change from 0 to 512 [ 102.553569][ T5979] netlink: 20 bytes leftover after parsing attributes in process `syz.4.634'. [ 102.575229][ T5980] netlink: 12 bytes leftover after parsing attributes in process `syz.3.638'. [ 102.585504][ T5980] netlink: 'syz.3.638': attribute type 1 has an invalid length. [ 102.783274][ T5982] tipc: Started in network mode [ 102.788260][ T5982] tipc: Node identity ff010000000000000000000000000001, cluster identity 4711 [ 102.797813][ T5982] tipc: Enabling of bearer rejected, failed to enable media [ 102.923881][ T5984] Failed to initialize the IGMP autojoin socket (err -2) [ 103.089050][ T5977] EXT4-fs (loop2): 1 orphan inode deleted [ 103.136767][ T5977] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.161139][ T3318] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 103.215774][ T5977] ext4 filesystem being mounted at /125/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.527398][ T6002] netlink: 20 bytes leftover after parsing attributes in process `syz.4.645'. [ 103.537713][ T29] audit: type=1400 audit(3916217213.755:3570): avc: denied { connect } for pid=5999 comm="syz.4.645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 103.583936][ T6005] support for cryptoloop has been removed. Use dm-crypt instead. [ 103.593034][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.606741][ T6006] support for cryptoloop has been removed. Use dm-crypt instead. [ 103.696938][ T6008] netlink: 152 bytes leftover after parsing attributes in process `syz.5.648'. [ 103.781622][ T6024] loop4: detected capacity change from 0 to 128 [ 103.883448][ T6024] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 103.923586][ T6031] syz.0.653 (6031): /proc/6030/oom_adj is deprecated, please use /proc/6030/oom_score_adj instead. [ 103.951702][ T6024] ext4 filesystem being mounted at /123/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 104.082103][ T3324] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 104.109463][ T6047] netlink: 'syz.0.657': attribute type 1 has an invalid length. [ 104.128897][ T6047] 8021q: adding VLAN 0 to HW filter on device bond3 [ 104.143740][ T6047] loop0: detected capacity change from 0 to 512 [ 104.160589][ T6047] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.657: inode has both inline data and extents flags [ 104.177484][ T6047] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.657: couldn't read orphan inode 15 (err -117) [ 104.191773][ T6047] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.223887][ T6047] 8021q: adding VLAN 0 to HW filter on device bond3 [ 104.235590][ T6047] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 104.248342][ T6047] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 104.332981][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.537182][ T29] audit: type=1400 audit(3916217214.765:3571): avc: denied { watch } for pid=6058 comm="syz.5.660" path="/125/file0" dev="tmpfs" ino=686 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 104.662612][ T6070] syzkaller1: entered promiscuous mode [ 104.669243][ T6070] syzkaller1: entered allmulticast mode [ 104.712994][ T6070] loop5: detected capacity change from 0 to 512 [ 104.724259][ T29] audit: type=1400 audit(3916217214.945:3572): avc: denied { setopt } for pid=6071 comm="syz.2.664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 104.753813][ T6070] ext4: block size(65536) > page size(4096) is only supported with CONFIG_TRANSPARENT_HUGEPAGE [ 104.764438][ T6070] EXT4-fs (loop5): bad block size 65536 [ 104.788030][ T6070] netlink: 'syz.5.663': attribute type 2 has an invalid length. [ 104.838555][ T6083] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 104.848056][ T6070] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6070 comm=syz.5.663 [ 104.918443][ T29] audit: type=1400 audit(3916217215.145:3573): avc: denied { read write } for pid=6094 comm="syz.2.670" name="uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 104.921990][ T3489] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x4 [ 104.951811][ T3489] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x2 [ 104.962741][ T6093] program syz.0.669 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 104.980102][ T29] audit: type=1400 audit(3916217215.145:3574): avc: denied { open } for pid=6094 comm="syz.2.670" path="/dev/uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 105.004193][ T29] audit: type=1400 audit(3916217215.185:3575): avc: denied { mount } for pid=6087 comm="syz.4.667" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 105.026777][ T29] audit: type=1400 audit(3916217215.185:3576): avc: denied { execute } for pid=6092 comm="syz.0.669" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 105.028622][ T3489] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x3 [ 105.051238][ T29] audit: type=1400 audit(3916217215.185:3577): avc: denied { ioctl } for pid=6092 comm="syz.0.669" path="socket:[14166]" dev="sockfs" ino=14166 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 105.150206][ T6104] loop0: detected capacity change from 0 to 1024 [ 105.158248][ T3489] hid-generic 0000:3000000:0000.0001: hidraw0: HID v0.00 Device [sy] on syz0 [ 105.171121][ T6112] netlink: 'syz.4.677': attribute type 30 has an invalid length. [ 105.198815][ T6104] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.221966][ T6120] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 105.274975][ T6112] bond2: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4) [ 105.292715][ T6115] fido_id[6115]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 105.308823][ T6112] bond2 (unregistering): Released all slaves [ 105.373444][ T3489] Process accounting resumed [ 105.383315][ T6104] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 105.393881][ T6104] netlink: 'syz.0.673': attribute type 1 has an invalid length. [ 105.436035][ T6104] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=58640 sclass=netlink_route_socket pid=6104 comm=syz.0.673 [ 105.513214][ T6140] Failed to initialize the IGMP autojoin socket (err -2) [ 105.523100][ T6104] bond4 (unregistering): Released all slaves [ 105.548162][ T6136] loop4: detected capacity change from 0 to 1024 [ 105.557918][ T6136] EXT4-fs: inline encryption not supported [ 105.567953][ T6142] loop2: detected capacity change from 0 to 136 [ 105.574813][ T6142] iso9660: Unknown parameter '' [ 105.602127][ T6136] EXT4-fs (loop4): orphan cleanup on readonly fs [ 105.636461][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.713169][ T6136] EXT4-fs (loop4): 1 truncate cleaned up [ 105.743764][ T6136] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 105.783276][ T6154] loop2: detected capacity change from 0 to 512 [ 105.800070][ T6154] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.687: Failed to acquire dquot type 1 [ 105.850720][ T6154] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.687: Failed to acquire dquot type 1 [ 105.882567][ T6154] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.687: bg 0: block 248: padding at end of block bitmap is not set [ 105.909941][ T6154] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 106.060630][ T6154] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.687: Failed to acquire dquot type 1 [ 106.089663][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.108929][ T6154] EXT4-fs (loop2): 1 orphan inode deleted [ 106.142629][ T6154] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.211585][ T6180] loop0: detected capacity change from 0 to 512 [ 106.220284][ T6154] ext4 filesystem being mounted at /134/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.258440][ T6180] EXT4-fs: Ignoring removed nobh option [ 106.274420][ T6183] loop4: detected capacity change from 0 to 4096 [ 106.299054][ T6180] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.344664][ T6183] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.372313][ T6180] ext4 filesystem being mounted at /143/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.412220][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.468175][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.535078][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.582522][ T6205] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.644723][ T6216] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 106.651434][ T6205] ext4 filesystem being mounted at /146/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.685692][ T6216] ext4 filesystem being mounted at /133/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 106.796497][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.840849][ T6231] netlink: 'syz.5.703': attribute type 31 has an invalid length. [ 106.878617][ T6234] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 106.906878][ T6236] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 106.927010][ T6236] EXT4-fs (loop0): orphan cleanup on readonly fs [ 106.942016][ T6236] EXT4-fs warning (device loop0): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 106.965514][ T6239] __nla_validate_parse: 13 callbacks suppressed [ 106.965534][ T6239] netlink: 4 bytes leftover after parsing attributes in process `syz.5.705'. [ 106.981165][ T6236] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 107.009203][ T6236] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #16: comm syz.0.702: invalid fast symlink length 9000 [ 107.085151][ T6239] netlink: 12 bytes leftover after parsing attributes in process `syz.5.705'. [ 107.106258][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 107.106272][ T29] audit: type=1400 audit(3916217217.335:3582): avc: denied { write } for pid=6242 comm="syz.2.706" path="socket:[14363]" dev="sockfs" ino=14363 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 107.138514][ T6236] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.702: couldn't read orphan inode 16 (err -117) [ 107.150962][ T6241] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6241 comm=syz.5.705 [ 107.190164][ T6236] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 107.229713][ T6239] 8021q: adding VLAN 0 to HW filter on device bond1 [ 107.249501][ T6236] netlink: 12 bytes leftover after parsing attributes in process `syz.0.702'. [ 107.278491][ T6236] IPv6: NLM_F_CREATE should be specified when creating new route [ 107.284597][ T29] audit: type=1400 audit(3916217217.485:3583): avc: denied { create } for pid=6249 comm="syz.2.708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 107.306756][ T29] audit: type=1400 audit(3916217217.495:3584): avc: denied { bind } for pid=6249 comm="syz.2.708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 107.326626][ T29] audit: type=1400 audit(3916217217.495:3585): avc: denied { write } for pid=6249 comm="syz.2.708" path="socket:[14376]" dev="sockfs" ino=14376 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 107.351070][ T29] audit: type=1400 audit(3916217217.505:3586): avc: denied { read } for pid=6235 comm="syz.0.702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 107.395774][ T29] audit: type=1400 audit(3916217217.625:3587): avc: denied { checkpoint_restore } for pid=6254 comm="syz.2.709" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 107.444916][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.482931][ T6258] EXT4-fs (loop5): 1 orphan inode deleted [ 107.495010][ T3324] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 107.510887][ T6258] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.525074][ T6258] ext4 filesystem being mounted at /135/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.532308][ T6267] set_capacity_and_notify: 4 callbacks suppressed [ 107.532419][ T6267] loop0: detected capacity change from 0 to 512 [ 107.560107][ T6269] vhci_hcd vhci_hcd.3: default hub control req: 800f v0000 i0000 l31125 [ 107.600184][ T6267] EXT4-fs (loop0): 1 orphan inode deleted [ 107.615756][ T6267] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.628396][ T6267] ext4 filesystem being mounted at /148/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.646068][ T3741] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.685856][ T29] audit: type=1400 audit(3916217217.905:3588): avc: denied { execute } for pid=6277 comm="syz.4.717" path="/syzcgroup/unified/syz4/cpu.stat" dev="cgroup2" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 107.776061][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.888210][ T6284] atomic_op ffff888121bff928 conn xmit_atomic 0000000000000000 [ 107.898713][ T6288] loop0: detected capacity change from 0 to 512 [ 107.911065][ T6288] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.720: inode has both inline data and extents flags [ 107.978276][ T6288] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.720: couldn't read orphan inode 15 (err -117) [ 108.011845][ T6294] netlink: 8 bytes leftover after parsing attributes in process `syz.2.721'. [ 108.025334][ T6288] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.060181][ T6288] tipc: Started in network mode [ 108.066086][ T6288] tipc: Node identity 8a8267814d88, cluster identity 4711 [ 108.073423][ T6288] tipc: Enabled bearer , priority 0 [ 108.080817][ T29] audit: type=1400 audit(3916217218.315:3589): avc: denied { override_creds } for pid=6293 comm="syz.2.721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 108.173898][ T6299] netlink: 20 bytes leftover after parsing attributes in process `syz.3.718'. [ 108.205238][ T6288] syzkaller0: entered promiscuous mode [ 108.211004][ T6288] syzkaller0: entered allmulticast mode [ 108.289147][ T6288] tipc: Resetting bearer [ 108.325600][ T6288] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters [ 108.415392][ T6287] tipc: Resetting bearer [ 108.438678][ T6287] tipc: Disabling bearer [ 108.497349][ T29] audit: type=1326 audit(3916217218.725:3590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6310 comm="syz.2.725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0f76dacb9 code=0x7ffc0000 [ 108.534323][ T6311] loop2: detected capacity change from 0 to 512 [ 108.547625][ T6311] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 108.583974][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.596098][ T29] audit: type=1326 audit(3916217218.725:3591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6310 comm="syz.2.725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0f76dacb9 code=0x7ffc0000 [ 108.644338][ T6311] EXT4-fs (loop2): orphan cleanup on readonly fs [ 108.661225][ T6315] loop0: detected capacity change from 0 to 512 [ 108.668456][ T6311] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4215: comm syz.2.725: Allocating blocks 41-42 which overlap fs metadata [ 108.698733][ T6311] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4215: comm syz.2.725: Allocating blocks 41-42 which overlap fs metadata [ 108.720599][ T6315] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.746429][ T6311] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.725: Failed to acquire dquot type 1 [ 108.763780][ T6311] EXT4-fs error (device loop2): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 108.794723][ T6311] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.725: corrupted inode contents [ 108.813582][ T6315] netlink: 8 bytes leftover after parsing attributes in process `syz.0.726'. [ 108.837652][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.926636][ T6311] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #12: comm syz.2.725: mark_inode_dirty error [ 108.960510][ T6321] netlink: 104 bytes leftover after parsing attributes in process `syz.0.727'. [ 109.014900][ T6311] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.725: corrupted inode contents [ 109.031439][ T6333] loop4: detected capacity change from 0 to 512 [ 109.066822][ T6333] EXT4-fs (loop4): 1 orphan inode deleted [ 109.073066][ T6333] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.095566][ T6337] netlink: 'syz.0.731': attribute type 1 has an invalid length. [ 109.098258][ T6333] ext4 filesystem being mounted at /140/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.115616][ T6311] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #12: comm syz.2.725: mark_inode_dirty error [ 109.139513][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.150454][ T6311] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.725: corrupted inode contents [ 109.193648][ T6311] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 109.211132][ T6338] netlink: 'syz.0.731': attribute type 3 has an invalid length. [ 109.214054][ T6311] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.725: corrupted inode contents [ 109.218979][ T6338] netlink: 13435 bytes leftover after parsing attributes in process `syz.0.731'. [ 109.301494][ T6345] loop4: detected capacity change from 0 to 512 [ 109.318068][ T6311] EXT4-fs error (device loop2): ext4_truncate:4635: inode #12: comm syz.2.725: mark_inode_dirty error [ 109.331398][ T6345] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 109.339688][ T6345] EXT4-fs (loop4): orphan cleanup on readonly fs [ 109.346218][ T6345] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 109.355950][ T6345] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.733: attempt to clear invalid blocks 2 len 1 [ 109.400974][ T6345] EXT4-fs (loop4): Remounting filesystem read-only [ 109.408913][ T6311] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 109.419631][ T6348] netlink: 12 bytes leftover after parsing attributes in process `syz.5.734'. [ 109.430403][ T6345] EXT4-fs (loop4): 1 truncate cleaned up [ 109.438872][ T6348] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 109.450825][ T6311] EXT4-fs (loop2): 1 truncate cleaned up [ 109.454796][ T6345] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 109.459271][ T6311] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 109.513640][ T6311] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 109.524141][ T6354] netlink: 80 bytes leftover after parsing attributes in process `syz.5.736'. [ 109.558552][ T6356] loop5: detected capacity change from 0 to 1024 [ 109.566772][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.576382][ T6311] infiniband syb2: RDMA CMA: cma_listen_on_dev, error -2 [ 109.584345][ T6356] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 109.596002][ T6356] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 109.610315][ T6356] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 109.623573][ T6356] EXT4-fs (loop5): invalid journal inode [ 109.630181][ T6356] EXT4-fs (loop5): can't get journal size [ 109.662263][ T6356] EXT4-fs error (device loop5): ext4_protect_reserved_inode:182: inode #3: comm syz.5.737: blocks 2-2 from inode overlap system zone [ 109.676731][ T6356] EXT4-fs (loop5): failed to initialize system zone (-117) [ 109.683981][ T6356] EXT4-fs (loop5): mount failed [ 109.744853][ T6368] loop5: detected capacity change from 0 to 512 [ 109.780159][ T6368] EXT4-fs (loop5): 1 orphan inode deleted [ 109.805850][ T6368] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.822077][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.839834][ T6368] ext4 filesystem being mounted at /141/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.898512][ T3741] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.923632][ T23] hid-generic 0800:0008:00A3.0002: unknown main item tag 0x0 [ 109.931789][ T23] hid-generic 0800:0008:00A3.0002: unknown main item tag 0x0 [ 109.939278][ T23] hid-generic 0800:0008:00A3.0002: unknown main item tag 0x0 [ 109.947817][ T23] hid-generic 0800:0008:00A3.0002: unknown main item tag 0x0 [ 109.956008][ T23] hid-generic 0800:0008:00A3.0002: unknown main item tag 0x0 [ 109.963510][ T23] hid-generic 0800:0008:00A3.0002: unknown main item tag 0x0 [ 109.971047][ T23] hid-generic 0800:0008:00A3.0002: unknown main item tag 0x0 [ 109.978518][ T23] hid-generic 0800:0008:00A3.0002: unknown main item tag 0x0 [ 109.986656][ T23] hid-generic 0800:0008:00A3.0002: unknown main item tag 0x0 [ 109.994074][ T23] hid-generic 0800:0008:00A3.0002: unknown main item tag 0x0 [ 110.001619][ T23] hid-generic 0800:0008:00A3.0002: unknown main item tag 0x0 [ 110.022881][ T23] hid-generic 0800:0008:00A3.0002: hidraw0: HID v0.09 Device [syz1] on syz0 [ 110.175609][ T6399] loop5: detected capacity change from 0 to 1764 [ 110.346876][ T6420] loop4: detected capacity change from 0 to 512 [ 110.388464][ T6420] EXT4-fs (loop4): 1 orphan inode deleted [ 110.394874][ T6420] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.465747][ T6420] ext4 filesystem being mounted at /149/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.498253][ T6430] netlink: 'syz.5.760': attribute type 1 has an invalid length. [ 110.530526][ T6430] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 110.546073][ T6430] ext4 filesystem being mounted at /147/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 110.617134][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.135801][ T3741] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 111.190259][ T6462] tipc: Started in network mode [ 111.195868][ T6462] tipc: Node identity c6206db2669, cluster identity 7 [ 111.202777][ T6462] tipc: Enabled bearer , priority 0 [ 111.260282][ T6463] syzkaller0: entered promiscuous mode [ 111.265829][ T6463] syzkaller0: entered allmulticast mode [ 111.366124][ T6462] tipc: Resetting bearer [ 111.422889][ T6462] tipc: Disabling bearer [ 111.453431][ T6469] EXT4-fs (loop2): 1 orphan inode deleted [ 111.495150][ T6478] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 111.544285][ T6469] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.557257][ T6478] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 111.586165][ T6482] netlink: 'syz.3.776': attribute type 10 has an invalid length. [ 111.596181][ T6482] team0: Failed to send options change via netlink (err -105) [ 111.603715][ T6482] team0: Port device dummy0 added [ 111.609077][ T6482] netlink: 'syz.3.776': attribute type 10 has an invalid length. [ 111.618119][ T6482] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 111.628254][ T6482] netlink: 'syz.3.776': attribute type 10 has an invalid length. [ 111.636173][ T6482] netlink: 'syz.3.776': attribute type 10 has an invalid length. [ 111.644052][ T6482] netlink: 'syz.3.776': attribute type 10 has an invalid length. [ 111.645628][ T6469] ext4 filesystem being mounted at /151/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.653712][ T6482] netlink: 'syz.3.776': attribute type 10 has an invalid length. [ 111.677880][ T6478] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 111.696319][ T6482] team0: Failed to send options change via netlink (err -105) [ 111.703849][ T6482] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 111.713510][ T6482] team0: Port device dummy0 removed [ 111.721240][ T6482] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 111.752650][ T6478] EXT4-fs (loop4): 1 truncate cleaned up [ 111.760323][ T6478] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.803195][ T6490] unsupported nla_type 24929 [ 111.803612][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.819515][ T6490] Invalid ELF header magic: != ELF [ 111.836580][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.988734][ T6501] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0007-000000000000 r/w without journal. Quota mode: writeback. [ 112.019907][ T6501] ext4 filesystem being mounted at /154/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.051405][ T6501] EXT4-fs error (device loop5): ext4_search_dir:1474: inode #2: block 3: comm syz.5.783: bad entry in directory: directory entry overrun - offset=16444, inode=113, rec_len=2048, size=2048 fake=0 [ 112.105602][ T6517] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.787: bg 0: block 393: padding at end of block bitmap is not set [ 112.150643][ T6517] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 112.165137][ T6517] EXT4-fs (loop0): 2 truncates cleaned up [ 112.171396][ T6517] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.229885][ T3741] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0007-000000000000. [ 112.250289][ T6529] tmpfs: Unknown parameter 'mp' [ 112.260424][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.393148][ T6546] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 112.401730][ T6546] EXT4-fs (loop4): orphan cleanup on readonly fs [ 112.408612][ T6546] __quota_error: 145 callbacks suppressed [ 112.408631][ T6546] Quota error (device loop4): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 112.425363][ T6546] EXT4-fs warning (device loop4): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 112.440479][ T6546] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 112.451026][ T6546] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #16: comm syz.4.795: inode has both inline data and extents flags [ 112.464377][ T6546] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.795: couldn't read orphan inode 16 (err -117) [ 112.476993][ T6546] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 112.509433][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.617474][ T29] audit: type=1400 audit(3916217222.845:3733): avc: denied { create } for pid=6573 comm="syz.3.803" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 112.639321][ T29] audit: type=1400 audit(3916217222.845:3734): avc: denied { listen } for pid=6573 comm="syz.3.803" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 112.658850][ T29] audit: type=1400 audit(3916217222.845:3735): avc: denied { connect } for pid=6573 comm="syz.3.803" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 112.755628][ T6578] validate_nla: 60 callbacks suppressed [ 112.755647][ T6578] netlink: 'syz.4.800': attribute type 5 has an invalid length. [ 112.977959][ T6594] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 112.984607][ T6594] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 112.992385][ T6594] vhci_hcd vhci_hcd.0: Device attached [ 113.008245][ T6593] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(9) [ 113.014900][ T6593] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 113.022741][ T6593] vhci_hcd vhci_hcd.0: Device attached [ 113.037585][ T6597] vhci_hcd: connection closed [ 113.037668][ T37] vhci_hcd vhci_hcd.4: stop threads [ 113.038893][ T6596] vhci_hcd: connection closed [ 113.042443][ T37] vhci_hcd vhci_hcd.4: release socket [ 113.057908][ T37] vhci_hcd vhci_hcd.4: disconnect device [ 113.077829][ T37] vhci_hcd vhci_hcd.4: stop threads [ 113.083180][ T37] vhci_hcd vhci_hcd.4: release socket [ 113.088695][ T37] vhci_hcd vhci_hcd.4: disconnect device [ 113.103847][ T6606] set_capacity_and_notify: 6 callbacks suppressed [ 113.103867][ T6606] loop2: detected capacity change from 0 to 1024 [ 113.118171][ T6606] EXT4-fs: Ignoring removed nomblk_io_submit option [ 113.138495][ T6606] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.152702][ T29] audit: type=1400 audit(3916217223.385:3736): avc: denied { write } for pid=6605 comm="syz.2.812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 113.194444][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.217049][ T6616] netlink: 'syz.0.815': attribute type 5 has an invalid length. [ 113.596937][ T6646] loop2: detected capacity change from 0 to 512 [ 113.619759][ T29] audit: type=1400 audit(3916217223.845:3737): avc: denied { map } for pid=6650 comm="syz.3.825" path="net:[4026532474]" dev="nsfs" ino=4026532474 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 113.691718][ T6669] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 113.693226][ T6646] EXT4-fs (loop2): 1 orphan inode deleted [ 113.742238][ T6673] netlink: 'syz.4.830': attribute type 1 has an invalid length. [ 113.754922][ T6646] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.773138][ T6673] bond2: entered promiscuous mode [ 113.779304][ T6646] ext4 filesystem being mounted at /167/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.795066][ T29] audit: type=1400 audit(3916217224.025:3738): avc: denied { validate_trans } for pid=6677 comm="syz.0.832" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 113.800433][ T6673] 8021q: adding VLAN 0 to HW filter on device bond2 [ 113.822860][ T6678] loop0: detected capacity change from 0 to 164 [ 113.877826][ T6681] 8021q: adding VLAN 0 to HW filter on device bond2 [ 113.885718][ T6681] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address [ 113.897155][ T6681] bond2: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 113.909545][ T6685] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 113.918284][ T29] audit: type=1326 audit(3916217224.135:3739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6677 comm="syz.0.832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a4dc3acb9 code=0x7ffc0000 [ 113.928322][ T6681] wireguard: wireguard0: Could not create IPv4 socket [ 113.941786][ T29] audit: type=1326 audit(3916217224.135:3740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6677 comm="syz.0.832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2a4dc3acb9 code=0x7ffc0000 [ 113.949907][ T6681] bond2: (slave wireguard0): Opening slave failed [ 113.971916][ T29] audit: type=1326 audit(3916217224.135:3741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6677 comm="syz.0.832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a4dc3acb9 code=0x7ffc0000 [ 114.016680][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.033554][ T6673] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address [ 114.049043][ T6673] wireguard: wireguard0: Could not create IPv4 socket [ 114.056112][ T6673] bond2: (slave wireguard0): Opening slave failed [ 114.149030][ T6701] loop2: detected capacity change from 0 to 512 [ 114.166995][ T6701] EXT4-fs (loop2): 1 orphan inode deleted [ 114.178988][ T6701] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.192218][ T6701] ext4 filesystem being mounted at /169/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.217368][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.305756][ T6714] SELinux: policydb version 1967251698 does not match my version range 15-35 [ 114.314948][ T6714] SELinux: failed to load policy [ 114.395373][ T6730] loop2: detected capacity change from 0 to 1024 [ 114.412209][ T6730] EXT4-fs: Ignoring removed mblk_io_submit option [ 114.466323][ T6730] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.491604][ T6730] __nla_validate_parse: 4 callbacks suppressed [ 114.491670][ T6730] netlink: 44 bytes leftover after parsing attributes in process `syz.2.838'. [ 114.519651][ T6730] netlink: 84 bytes leftover after parsing attributes in process `syz.2.838'. [ 114.599839][ T6748] loop2: detected capacity change from 0 to 512 [ 114.617341][ T6748] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 114.639747][ T6748] EXT4-fs (loop2): 1 truncate cleaned up [ 114.647042][ T6748] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.842: bg 0: block 4: invalid block bitmap [ 114.740436][ T6765] loop2: detected capacity change from 0 to 512 [ 114.758443][ T6765] EXT4-fs (loop2): 1 orphan inode deleted [ 114.768760][ T6765] ext4 filesystem being mounted at /174/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.998882][ T6798] loop2: detected capacity change from 0 to 1024 [ 115.008041][ T6798] EXT4-fs: Ignoring removed nomblk_io_submit option [ 115.016644][ T6798] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 115.026218][ T6798] System zones: 0-1, 3-36 [ 115.034921][ T6798] netlink: 8 bytes leftover after parsing attributes in process `syz.2.847'. [ 115.043767][ T6798] netlink: 8 bytes leftover after parsing attributes in process `syz.2.847'. [ 115.139448][ T6813] netlink: 8 bytes leftover after parsing attributes in process `syz.2.848'. [ 115.175363][ T6816] loop2: detected capacity change from 0 to 1024 [ 115.200519][ T6816] ext4 filesystem being mounted at /177/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.366679][ T6837] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.445264][ T3421] syb2: Port: 1 Link DOWN [ 115.973048][ T6890] loop0: detected capacity change from 0 to 512 [ 115.986611][ T6890] EXT4-fs (loop0): 1 orphan inode deleted [ 116.011363][ T6890] ext4 filesystem being mounted at /167/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.068909][ T6900] netlink: 12 bytes leftover after parsing attributes in process `syz.2.859'. [ 116.099096][ T6900] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 116.160312][ T6907] netlink: 144 bytes leftover after parsing attributes in process `syz.0.862'. [ 116.170209][ T6907] netlink: 4 bytes leftover after parsing attributes in process `syz.0.862'. [ 116.254275][ T6911] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 116.279779][ T6888] ================================================================== [ 116.287939][ T6888] BUG: KCSAN: data-race in bpf_obj_memcpy / copy_map_value [ 116.295357][ T6888] [ 116.298144][ T6888] write to 0xffff8881217cb5e0 of 1389 bytes by task 6903 on cpu 0: [ 116.306063][ T6888] bpf_obj_memcpy+0x13c/0x1a0 [ 116.310800][ T6888] htab_lru_map_update_elem+0x17c/0x700 [ 116.316405][ T6888] bpf_map_update_value+0x4f3/0x570 [ 116.321641][ T6888] generic_map_update_batch+0x3eb/0x540 [ 116.327222][ T6888] bpf_map_do_batch+0x25c/0x380 [ 116.332130][ T6888] __sys_bpf+0x5f8/0x7b0 [ 116.336405][ T6888] __x64_sys_bpf+0x41/0x50 [ 116.340901][ T6888] x64_sys_call+0x28e1/0x3000 [ 116.345642][ T6888] do_syscall_64+0xc0/0x2a0 [ 116.350164][ T6888] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.356110][ T6888] [ 116.358448][ T6888] read to 0xffff8881217cb5e0 of 1389 bytes by task 6888 on cpu 1: [ 116.366266][ T6888] copy_map_value+0x128/0x140 [ 116.371008][ T6888] bpf_map_copy_value+0x495/0x510 [ 116.376066][ T6888] map_lookup_elem+0x426/0x560 [ 116.380850][ T6888] __sys_bpf+0x3b9/0x7b0 [ 116.385114][ T6888] __x64_sys_bpf+0x41/0x50 [ 116.389572][ T6888] x64_sys_call+0x28e1/0x3000 [ 116.394273][ T6888] do_syscall_64+0xc0/0x2a0 [ 116.398802][ T6888] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.404744][ T6888] [ 116.407081][ T6888] Reported by Kernel Concurrency Sanitizer on: [ 116.413283][ T6888] CPU: 1 UID: 0 PID: 6888 Comm: syz.4.855 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 116.424771][ T6888] Tainted: [W]=WARN [ 116.428595][ T6888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 116.438670][ T6888] ================================================================== [ 116.449483][ T6919] netlink: 'syz.0.866': attribute type 1 has an invalid length. [ 116.467190][ T6920] 9p: Bad value for 'rfdno' [ 116.472007][ T6921] 9p: Bad value for 'rfdno' [ 116.479498][ T6911] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 116.509702][ T6919] 8021q: adding VLAN 0 to HW filter on device bond4 [ 116.521894][ T6911] vfat filesystem being mounted at /183/bus supports timestamps until 2107-12-31 (0x10391447e) [ 116.555222][ T6918] veth3: entered promiscuous mode [ 116.571775][ T6918] bond4: (slave veth3): Enslaving as an active interface with a down link [ 116.593744][ T12] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 116.609849][ T6918] bond4: entered allmulticast mode