last executing test programs: 2m13.028606791s ago: executing program 0 (id=189): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmmsg(r4, 0x0, 0x0, 0x20004040) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r6], 0x54}}, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x50, 0x10, 0xf11, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x104}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x20, 0x20}}}}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2m12.897349749s ago: executing program 0 (id=191): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="180000003900090002bd7000000000000400000004000000"], 0x18}, 0x1, 0x0, 0x0, 0x200080c0}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r1, 0x6, &(0x7f0000000000)={0x1, 0x0, 0x8, 0x1}) fcntl$lock(r1, 0x26, &(0x7f0000000080)={0x0, 0x0, 0x2007, 0x1fd}) fcntl$lock(r1, 0x6, &(0x7f0000000180)={0x2, 0x1, 0x400000200, 0x4}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x6, [@typedef={0xc, 0x0, 0x0, 0x8, 0x1}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x4}, @typedef={0x0, 0x0, 0x0, 0x2}, @type_tag={0x4, 0x0, 0x0, 0x12, 0x3}]}, {0x0, [0x0, 0x2e, 0x0, 0x61]}}, 0x0, 0x4e}, 0x28) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x3f00, 0x40, &(0x7f0000001640)=@mangle={'mangle\x00', 0x44, 0x6, 0x508, 0x98, 0x3a0, 0x138, 0x138, 0x98, 0x470, 0x470, 0x470, 0x470, 0x470, 0x6, 0x0, {[{{@ip={@rand_addr=0x64010101, @multicast1=0xe0007600, 0x11000000, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'batadv0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'veth1_virt_wifi\x00'}, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x0, 0x0, 0x4, 0x400, 0xf8c, {0x7}}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'virt_wifi0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@uncond, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x568) symlinkat(&(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r3 = open(&(0x7f0000000400)='./bus\x00', 0x42b42, 0x1a0) chmod(&(0x7f0000000040)='./bus\x00', 0x1ad5d7de6a77a4fd) r4 = socket(0x1, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r5, r5) write$P9_RGETATTR(r3, &(0x7f0000000340)={0xa0, 0x19, 0x1, {0x820, {0x9, 0x0, 0x7}, 0x85, r5, 0x0, 0x4, 0xe, 0x60fc, 0x5, 0x7fffffff, 0x0, 0xffff, 0x7, 0xfffffffffffffe01, 0xf, 0x6, 0x4, 0x7, 0xe, 0x1ff}}, 0xa0) execve(&(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = dup(r7) setsockopt$inet_int(r8, 0x0, 0xb, &(0x7f0000000100)=0x3, 0x4) syz_emit_ethernet(0x32, &(0x7f0000000300)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @empty, @val={@val={0x88a8, 0x4, 0x1, 0x4}, {0x8100, 0x4, 0x1, 0x1}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x8, 0x1c, 0x64, 0x0, 0x5, 0x1, 0x0, @local, @rand_addr=0x64010101}, @address_request={0x11, 0x0, 0x0, 0x400}}}}}, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e21, 0x8, @local, 0x58d}}}, &(0x7f0000000000)=0x84) syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={r9, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) msgsnd(0x0, &(0x7f0000000480)=ANY=[@ANYRESDEC], 0x2000, 0x0) 2m11.973959713s ago: executing program 0 (id=211): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x80003, 0x7) socket$inet6(0xa, 0x80002, 0x0) socket$inet6(0xa, 0x2, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0), 0x80000, 0x0) syz_pidfd_open(r0, 0x0) setregid(0xee00, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@cred={{0x1c}}], 0x20, 0x8040}}], 0x2, 0x0) socket$kcm(0x21, 0x2, 0x2) socket$kcm(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000900)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x14, 0x0, 0x11004, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300), 0x111, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffc, 0x2, @empty, 0xa09c}, {0xa, 0x2, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x39}}, 0xffffffffffffffff, 0x40099d}}, 0x37) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0xffffffff}, 0x8) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 2m11.819540132s ago: executing program 0 (id=217): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280)={[{@usrquota}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000e80)="$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") ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140)=0x0) tkill(r0, 0x18) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x84}, [@ldst={0x4, 0x3, 0x0, 0x1c10a1}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) ptrace(0x10, r1) ptrace$setsig(0x4203, r1, 0x0, &(0x7f00000000c0)={0xc, 0x81, 0x1}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xee01, 0xee00, 0x1000) setxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="020000000100020062b2d8ab0400000000000000100006000000000020"], 0x24, 0x3) 2m11.588373286s ago: executing program 0 (id=220): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x7, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xd139}}, './file0\x00'}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$cgroup_int(r3, &(0x7f0000000540), 0xfffffdd8) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0xffffffffffffffff, 0x4000000}, 0x50) mmap(&(0x7f00005e8000/0x1000)=nil, 0x1000, 0x2000003, 0x28011, r4, 0xffff8000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) 2m9.396133665s ago: executing program 0 (id=237): syz_emit_ethernet(0x363, &(0x7f00000003c0)={@local, @local, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "e9a3c4", 0x329, 0x3a, 0x1, @dev={0xfe, 0x80, '\x00', 0xa}, @loopback, {[@fragment={0x3b, 0x0, 0x0, 0x1, 0x0, 0x6, 0x67}], @pkt_toobig={0x2, 0x0, 0x0, 0x1, {0x7, 0x6, "bd648b", 0x1, 0x16, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00', [@srh={0x33, 0x8, 0x4, 0x4, 0x3, 0x68, 0x2, [@mcast1, @remote, @mcast1, @mcast1]}, @hopopts={0x87, 0x1f, '\x00', [@padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x10, {0x3, 0x2, 0x8, 0x2, [0x4]}}, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}, @pad1, @ra={0x5, 0x2, 0x4}, @generic={0x4, 0xbd, "f788239b1462f9bc3ea337a4a6b97ad35785531fe5248b426fdcabfdc3daa72987b1267fe2448aea947d0e6b2acad58c30c8376b740082d88f250b996daffdcec7dae29127a0bebe2e6bc10a910b3b3791b9fd71762d982832e24470ec68d479e12d889d1bb499c0eddbe10bd3be2f04559218702a5b27a1f97636525737627a798cef4e7f68bf18e303669441782350f0f84d9f5303f1b665077ffae9918428c81876bd07d7bd689d2fa6f0d088521746e41a1d318eb3b1230f38b674"}, @enc_lim={0x4, 0x1, 0xfc}, @pad1]}, @fragment={0x1b, 0x0, 0x2, 0x1, 0x0, 0x4, 0x66}, @fragment={0x0, 0x0, 0x8, 0x0, 0x0, 0x3, 0x68}, @fragment={0x3a, 0x0, 0x9, 0x1, 0x0, 0x18, 0x65}, @srh={0x88, 0x4, 0x4, 0x2, 0x81, 0x0, 0x6, [@private1={0xfc, 0x1, '\x00', 0x1}, @private2]}, @srh={0x87, 0x12, 0x4, 0x9, 0xe0, 0x0, 0xf65, [@private2={0xfc, 0x2, '\x00', 0x1}, @loopback, @rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0x3b}, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, @local, @private0]}], "a46acbb4bcefef22af75ac0d674d95d68743cca72b3596a46fb8636ce8147c001bf9e43d5e8dad00d92d64c8cd93a3ca456f89d524995140d054d73f853e3afa7c4e0ab6634d762bb3b8964880d041584508e98d483ee435eeec828133afaf6aab1b0be619d8f8768ddc2ddc74a3d5639bdb2dc97bbc87395e45efbc9c237b94a3c1f7aa9bc12098d951894cf093174d24561ebf9ea5bea48305d6da8b90e380d8c00b5b64eacd90deafcead24c00ca81ff58bdc5d45036e8b3109624d2e3d6c24e72969239cec0d21"}}}}}}}, 0x0) 2m9.285108901s ago: executing program 32 (id=237): syz_emit_ethernet(0x363, &(0x7f00000003c0)={@local, @local, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "e9a3c4", 0x329, 0x3a, 0x1, @dev={0xfe, 0x80, '\x00', 0xa}, @loopback, {[@fragment={0x3b, 0x0, 0x0, 0x1, 0x0, 0x6, 0x67}], @pkt_toobig={0x2, 0x0, 0x0, 0x1, {0x7, 0x6, "bd648b", 0x1, 0x16, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00', [@srh={0x33, 0x8, 0x4, 0x4, 0x3, 0x68, 0x2, [@mcast1, @remote, @mcast1, @mcast1]}, @hopopts={0x87, 0x1f, '\x00', [@padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x10, {0x3, 0x2, 0x8, 0x2, [0x4]}}, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}, @pad1, @ra={0x5, 0x2, 0x4}, @generic={0x4, 0xbd, "f788239b1462f9bc3ea337a4a6b97ad35785531fe5248b426fdcabfdc3daa72987b1267fe2448aea947d0e6b2acad58c30c8376b740082d88f250b996daffdcec7dae29127a0bebe2e6bc10a910b3b3791b9fd71762d982832e24470ec68d479e12d889d1bb499c0eddbe10bd3be2f04559218702a5b27a1f97636525737627a798cef4e7f68bf18e303669441782350f0f84d9f5303f1b665077ffae9918428c81876bd07d7bd689d2fa6f0d088521746e41a1d318eb3b1230f38b674"}, @enc_lim={0x4, 0x1, 0xfc}, @pad1]}, @fragment={0x1b, 0x0, 0x2, 0x1, 0x0, 0x4, 0x66}, @fragment={0x0, 0x0, 0x8, 0x0, 0x0, 0x3, 0x68}, @fragment={0x3a, 0x0, 0x9, 0x1, 0x0, 0x18, 0x65}, @srh={0x88, 0x4, 0x4, 0x2, 0x81, 0x0, 0x6, [@private1={0xfc, 0x1, '\x00', 0x1}, @private2]}, @srh={0x87, 0x12, 0x4, 0x9, 0xe0, 0x0, 0xf65, [@private2={0xfc, 0x2, '\x00', 0x1}, @loopback, @rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0x3b}, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, @local, @private0]}], "a46acbb4bcefef22af75ac0d674d95d68743cca72b3596a46fb8636ce8147c001bf9e43d5e8dad00d92d64c8cd93a3ca456f89d524995140d054d73f853e3afa7c4e0ab6634d762bb3b8964880d041584508e98d483ee435eeec828133afaf6aab1b0be619d8f8768ddc2ddc74a3d5639bdb2dc97bbc87395e45efbc9c237b94a3c1f7aa9bc12098d951894cf093174d24561ebf9ea5bea48305d6da8b90e380d8c00b5b64eacd90deafcead24c00ca81ff58bdc5d45036e8b3109624d2e3d6c24e72969239cec0d21"}}}}}}}, 0x0) 14.345997737s ago: executing program 2 (id=2187): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x6, [@func_proto={0x0, 0x36, 0x0, 0xd, 0x2}, @union={0xf, 0x0, 0x0, 0x5, 0x1, 0x6, [{0x6, 0x5, 0x8}, {0x2, 0x0, 0x3}, {0x7, 0x5, 0x9}, {0x8, 0x0, 0x5}, {0x1, 0x2, 0x8}]}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, &(0x7f0000000700)=""/4096, 0x36, 0x1000, 0x8}, 0x20) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) 14.232645714s ago: executing program 2 (id=2190): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) getitimer(0x2, 0x0) write$UHID_CREATE2(r0, 0x0, 0x119) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)='\x00\x00\x00\x00', 0x4}], 0x1) r1 = memfd_create(&(0x7f00000000c0)='-\x00', 0x2) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000440)={0x11, 0x2, {0x200000000, @struct={0x8001, 0x7ff}, 0x0, 0x5, 0xdb, 0x8000, 0x8001, 0x8001, 0x400, @struct={0x598e, 0x8000}, 0x3, 0x2, [0x1, 0xd, 0x4, 0x6, 0x3, 0x2412]}, {0x74bd, @struct={0x7, 0x5}, 0x0, 0x8, 0x2, 0x6, 0xf4, 0x7, 0x80, @usage=0x3, 0x9, 0x5, [0xd7, 0x4, 0x5, 0x1, 0x6, 0x4]}, {0x1, @usage=0x1, 0x0, 0x2, 0x2, 0x1, 0xa7, 0x7fff, 0x400, @usage=0x4, 0x0, 0xfffffffa, [0x9, 0x9, 0xa775, 0x7, 0x180, 0x7]}, {0xb051, 0x4ca, 0xe}}) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f0000000840)={r2, 0x7, 0x5}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002) ioctl$int_in(r3, 0x5452, &(0x7f00000000c0)=0x400) sendmsg$inet(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)='l', 0x1}], 0x1}, 0x400c941) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x80c406, &(0x7f00000005c0)=ANY=[], 0xff, 0x2bc, &(0x7f0000000180)="$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") r5 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/cgroup.procs\x00', &(0x7f0000000080)={0x2, 0x0, 0x1}, 0x18) truncate(&(0x7f0000000000)='./file0\x00', 0x1) dup3(r5, r0, 0x0) 13.276276429s ago: executing program 2 (id=2203): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, 0x0, 0x0) (async) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, 0x0, 0x0) getsockopt$netlink(r0, 0x10e, 0x9, &(0x7f0000001840)=""/42, &(0x7f0000000100)=0x2a) (async) getsockopt$netlink(r0, 0x10e, 0x9, &(0x7f0000001840)=""/42, &(0x7f0000000100)=0x2a) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x5, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fffffff}, [@map_fd={0x18, 0x7}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fsopen(&(0x7f0000000180)='debugfs\x00', 0x0) (async) r1 = fsopen(&(0x7f0000000180)='debugfs\x00', 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_SET_REPORT_REPLY(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="0e0000000400000004f8b70038fee0c1e54e87cb6e7f65f7c4dd95fff38a6ece974f41a740e913b8e4b2348901b07c6660a2886cba13f733041131297bf7eb46e7130bae56bdf4542fdfca9904ab05574164a4a5575d2fb8da5f1ebe71fbe79ad9a1079655b5d44ce20bdaa1eced370dc540d4713b5a6fc2fdeffb2fe8866089dce6f84416bb925489b755144a8f36dabe8a5b765a8b62ad0f3893b1ccf45f277391a3f88a16d1ac7173a3ceea5bcde337b1d7e665b3f6154907d0e2261f364bc87ed7"], 0xc3) (async) write$UHID_SET_REPORT_REPLY(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="0e0000000400000004f8b70038fee0c1e54e87cb6e7f65f7c4dd95fff38a6ece974f41a740e913b8e4b2348901b07c6660a2886cba13f733041131297bf7eb46e7130bae56bdf4542fdfca9904ab05574164a4a5575d2fb8da5f1ebe71fbe79ad9a1079655b5d44ce20bdaa1eced370dc540d4713b5a6fc2fdeffb2fe8866089dce6f84416bb925489b755144a8f36dabe8a5b765a8b62ad0f3893b1ccf45f277391a3f88a16d1ac7173a3ceea5bcde337b1d7e665b3f6154907d0e2261f364bc87ed7"], 0xc3) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) r5 = open(&(0x7f0000000480)='.\x00', 0x68800, 0x101) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) (async) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) pwrite64(r6, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00') (async) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00') getdents(r5, &(0x7f0000001fc0)=""/184, 0xb8) (async) getdents(r5, &(0x7f0000001fc0)=""/184, 0xb8) chown(&(0x7f0000001840)='./file1\x00', 0x0, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000500), 0x80, 0x0) (async) r7 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000500), 0x80, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000072c0)=ANY=[@ANYRES32, @ANYRES32=r7, @ANYBLOB="36000000102d2eeb84432a07", @ANYRES32=r7, @ANYBLOB, @ANYRES64=0x0], 0x20) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYRESOCT=r8, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES8=r3, @ANYBLOB="08001b"], 0x30}, 0x1, 0x0, 0x0, 0x40841}, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, r8, {r8}}, './file1\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, r8, {r8}}, './file1\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000050000000000000000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e8500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = fsopen(&(0x7f0000000040)='bdev\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r11, 0x3, &(0x7f0000000000)='source', &(0x7f0000000080)='[\x8b\xa4[\x13\x9b\x00w#\x9b\x94\xb6@\x874L\xf5U\xd7\xcb+3,\x999\xa9\":|\x98\xc5\x93\xba\x8d\xff\x14\x8ag+\xcd\xb1\x96d&\x8dn\x00\xdb\xd2\r!A\x1dZ\x16\xa3\x84\xa1\f\\%$\xd3\x9f\xf4a\xdb\x10\xd1&\x83\xba\x9d\x91e[\xea\x11\x91\x8d\xbav5{\xe4M;\xa2:\xe0\xfc\xa2G\xd3bBM\xe3i\xfc\x01\xc2\xa1|\x90\xd5\x8d;U\xe2', 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x115b, &(0x7f0000000080)={0x0, 0xa1a1, 0x400, 0x1, 0xfa, 0x0, r10}, &(0x7f0000000100), &(0x7f0000000300)) (async) syz_io_uring_setup(0x115b, &(0x7f0000000080)={0x0, 0xa1a1, 0x400, 0x1, 0xfa, 0x0, r10}, &(0x7f0000000100), &(0x7f0000000300)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020001, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) 12.608235459s ago: executing program 2 (id=2216): r0 = syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="756e695f786c6174653d302c73686f72746e616d653d6c6f7765722c756e695f786c6174653d302c73686f72746e616d653d6d697865642c696f636861727365743d61736369692c646973636172642c696f636861727365743d63703836312c73686f72746e616d653d77696e39352c696f636861727365743d757466382c73686f72746e616d653d6d697865642c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e39352c757365667265652c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6d697865642c6e6f6e756d7461696c3d302c6e6f6e756d7461696c3d302c756e695f786c6174653d312c6e6e6f6e756d7461696c3d312c726f6469722c6e6f6e756d7461696c3d302c726f6469722c696f636861727365743d6d616363656c7469632c7065726d69745f646972656374696f2c66d07f6f6e746578743d726f6f742c00"], 0x1, 0x36b, &(0x7f0000000a00)="$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") r1 = socket(0x1e, 0x9, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000180), r1) r4 = syz_open_procfs$userns(r2, &(0x7f00000001c0)) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, r3, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_PEER_ADDR6={0x14, 0xb, @remote}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_FAMILY={0x5, 0xd, 0x1d}]}, 0x40}, 0x1, 0x0, 0x0, 0x10004}, 0x10) ptrace$setregs(0xd, r2, 0x20000000002, &(0x7f0000000040)) prctl$PR_SET_SECUREBITS(0x1c, 0x12) setresuid(0xee01, 0xee01, 0x0) r5 = geteuid() setreuid(r5, 0x0) setresuid(r5, 0xee01, r5) syz_read_part_table(0x104d, &(0x7f00000000c0)="$eJzszzEKwkAQBdC/bjZG8RDpLKytPYR4SSuPZmepBI14ARHhvWL5y3wGJvzW4vNTtpfsx9raMvekyzpDbilTqSTZJRlbDhmSWqZ3tnlvSHKdQ3Jc1ZbuNatzqU//DKfzl68DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgL/wCAAA//8CiQZr") ptrace$cont(0x9, r2, 0x7ff, 0x3) ptrace$cont(0x21, r2, 0x80000001, 0x4) shutdown(r1, 0x2) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0, {r1}}, './file0\x00'}) kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r0, &(0x7f0000000380)={r6, r1, 0x31a1c03d}) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r7, 0x84, 0x6e, &(0x7f0000000100)=[@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x10}}], 0x10) socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000540)={r8, 0x1}, 0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000000)={r8, 0x10, 0x10}, &(0x7f0000000080)=0xc) socket(0x1e, 0x80000, 0xc) r9 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0x6, @mcast2, 0x7}], 0x1c) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xd40, 0xd2) 12.300590067s ago: executing program 2 (id=2224): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x4, &(0x7f0000000180)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x18}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r0, 0x18000000000002a0, 0x7, 0x0, &(0x7f00000002c0)="d2ff0307600300", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 12.022049564s ago: executing program 2 (id=2231): r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001680)=ANY=[@ANYBLOB="a00000000001010400000000000000000a000000440001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c000280050001000000000016000340000100003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c00028005000100000000000800074000000000040006"], 0xa0}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'veth0_vlan\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={@private2, 0x2, r4}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000040)={@private2, r4}, 0x14) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0xb4, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x400}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xb4}}, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x3, @random="bb7fb37b9489", 'bond0\x00'}}, 0x1e) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@newtclass={0x24, 0x28, 0x0, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x9, 0x4}, {0x7, 0xfffc}, {0xb, 0xf}}}, 0x24}}, 0x80800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x5c, 0x10, 0x401, 0x70bd26, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x89}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x8000}, @IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}, @IFLA_IFNAME={0x14, 0x3, 'nicvf0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8c1}, 0x80) 11.974737816s ago: executing program 33 (id=2231): r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001680)=ANY=[@ANYBLOB="a00000000001010400000000000000000a000000440001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c000280050001000000000016000340000100003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c00028005000100000000000800074000000000040006"], 0xa0}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'veth0_vlan\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={@private2, 0x2, r4}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000040)={@private2, r4}, 0x14) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0xb4, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x400}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xb4}}, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x3, @random="bb7fb37b9489", 'bond0\x00'}}, 0x1e) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@newtclass={0x24, 0x28, 0x0, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x9, 0x4}, {0x7, 0xfffc}, {0xb, 0xf}}}, 0x24}}, 0x80800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x5c, 0x10, 0x401, 0x70bd26, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x89}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x8000}, @IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}, @IFLA_IFNAME={0x14, 0x3, 'nicvf0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8c1}, 0x80) 1.635225594s ago: executing program 5 (id=2376): r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001680)=ANY=[@ANYBLOB="a00000000001010400000000000000000a000000440001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c000280050001000000000016000340000100003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c00028005000100000000000800074000000000040006"], 0xa0}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={@private2, 0x2}) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000040)={@private2}, 0x14) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x3, @random="bb7fb37b9489", 'bond0\x00'}}, 0x1e) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x5c, 0x10, 0x401, 0x70bd26, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x89}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x8000}, @IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}, @IFLA_IFNAME={0x14, 0x3, 'nicvf0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8c1}, 0x80) 1.618902245s ago: executing program 3 (id=2377): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/oops_count', 0x161000, 0x0) perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x1, 0x0, 0x7, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x48400, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(r1, 0x0, 0x275a, 0x0) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x100000000000009, 0x3c033, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x8312, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x400000000, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$PIO_UNIMAPCLR(r5, 0x4b68, 0x0) close(r2) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), 0x0}, 0x20) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) unlink(0x0) close(0x3) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x200, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x6}, 0xa03, 0x0, 0xfffffffd, 0x4, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x2, 0x2, 0x88, &(0x7f0000000580)) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x5, 0x80, 0xec, 0x7, 0x40, 0x8, 0x0, 0x0, 0xd000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x2, @perf_bp={0x0, 0x2}, 0x986, 0xfc, 0x4, 0x0, 0x81, 0x9, 0x81, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0xfffffffffffffffe}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000280)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x4, 0x3, 0x3, {0xa, 0x4e20, 0xff, @mcast2, 0x44b}}}, 0x3a) sendfile(r0, r1, 0x0, 0x104) open(0x0, 0x60840, 0x0) 1.591928666s ago: executing program 5 (id=2378): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x58, @local, 0x802}], 0x1c) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f00000010c0)={0xc, {"a2e3ad21ed0d52f91b5d320987f70e06d038e7ff7fc6e5539b356d298b089b0708374b090890e0878f0e1ac6e7049b3350959bfc9a240d2567f3988f7ef319520100ffe8d178708c523c921b1b9b31070d074b0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb056d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498be0800000000000000f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6efcffac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ec126c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b8247068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c198045651cf4778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c5409711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e24919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f00000000000000000000b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d53588a0f9455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d664130bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7899484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ea4cd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f031755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb24ee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x40, 0x0, 0xfc, 0x2}, {0x28, 0x6, 0xef, 0xfffff034}, {0x6, 0x6, 0x6, 0x1057c}]}, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r3 = syz_clone(0x0, 0x0, 0x43, 0x0, 0x0, 0x0) process_vm_writev(r3, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) r4 = dup2(r0, r0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r4) 1.166568092s ago: executing program 5 (id=2381): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040845}, 0x48d4) 1.159262452s ago: executing program 3 (id=2382): r0 = open(&(0x7f0000000140)='.\x00', 0x88202, 0x112) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'macvlan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0xef, &(0x7f0000000040)={&(0x7f0000002140)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="814f0400000000002000128008000100687372001400028008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="de4a1264dbee5f6da5e1135cd55f8829c67fb88f6f529356014c1c87654f0f59a90e088fecee209f0141148740fbf0ea160cbcf4238d09c0c3d02039"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x80c0) symlinkat(&(0x7f0000000000)='./file0\x00', r0, &(0x7f00000015c0)='./file0\x00') r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r4, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1b, 0x1, &(0x7f0000000480)=@raw=[@ldst={0x3, 0x3, 0x3, 0xa, 0x5, 0xfffffffffffffee3, 0xfffffffffffffffb}], 0x0, 0xfffffff5, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r5, r6, 0x0, 0x0, 0x0, 0x10, 0x54f42d0d}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001940)=ANY=[@ANYBLOB="1e00000002000000060000000700000000200000", @ANYRES32=r0, @ANYBLOB="0200"/20, @ANYRES32=r2, @ANYRES32=r0, @ANYBLOB="05000000031000"/28], 0x50) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) fcntl$F_GET_RW_HINT(r8, 0x40b, 0xfffffffffffffffc) bpf$PROG_LOAD(0x5, &(0x7f0000002080)={0xe, 0x8, &(0x7f0000001700)=@raw=[@generic={0xc3, 0x7, 0xd, 0x4, 0x2c}, @alu={0x7, 0x0, 0x2, 0x4, 0x0, 0xc, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0xb8f9}], &(0x7f0000001840)='syzkaller\x00', 0x0, 0x0, &(0x7f0000001880), 0x40f00, 0x12, '\x00', r3, @fallback=0xc, r0, 0x8, &(0x7f00000018c0)={0x1, 0xcb18}, 0x8, 0x10, &(0x7f0000001900)={0x3, 0x9, 0x401, 0x9}, 0x10, r5, 0xffffffffffffffff, 0x7, &(0x7f00000019c0)=[0xffffffffffffffff, r7, r0, r0, r8], &(0x7f0000001f40)=[{0x5, 0x3, 0x10, 0x1}, {0x0, 0x4, 0xd, 0x4}, {0x4, 0x2, 0x10, 0x7}, {0x2, 0x4, 0x2, 0x7}, {0x4, 0x3, 0x9, 0x6}, {0x5, 0x3, 0x0, 0xc}, {0x0, 0x1, 0xf, 0x6}], 0x10, 0x2}, 0xfe89) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000140)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3e0, 0x2f0, 0x0, 0x0, 0x1c0, 0xd8, 0x410, 0x410, 0x410, 0x410, 0x410, 0x6, &(0x7f0000000040), {[{{@ip={@loopback, @remote, 0xff, 0xffffff00, 'team0\x00', 'dummy0\x00', {}, {}, 0x5c, 0x0, 0x64}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x9, 0x6, @ipv4=@private=0xa010101, 0x4e21}}}, {{@ip={@empty, @loopback, 0xffffffff, 0xffffffff, 'lo\x00', 'bond0\x00', {0xff}, {}, 0x62, 0x1, 0x20}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010101, @remote, 0xff, 0xff, 'vlan1\x00', 'erspan0\x00', {}, {}, 0x11, 0x0, 0x8}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x2, 0xc}}}, {{@ip={@empty, @rand_addr=0x64010101, 0x0, 0x0, 'bond0\x00', 'veth0_to_team\x00', {}, {}, 0x29, 0x0, 0x1}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x3, 0x2, 0x4}, {0x3, 0x1, 0x1}}}}, {{@ip={@rand_addr=0x64010101, @multicast2, 0xffffffff, 0x0, 'ip6gre0\x00', 'veth0_macvtap\x00', {}, {}, 0x88, 0x0, 0x60}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x0, 0x0, 0x2], 0x2, 0x2}, {0x2, [0x6, 0x6, 0x4, 0x5, 0x3], 0x0, 0x5}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x440) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0xa007ca, &(0x7f00000002c0), 0x0, 0x483, &(0x7f0000001040)="$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") r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="a00000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c000180140003000000000000000000000200000000000014000400fe8000000000000000000000000000aa0c0002800500010000000000080007400000000004000e80080008"], 0xa0}, 0x1, 0xfffff000, 0x0, 0xa0}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x8, &(0x7f0000000500)={[{@bh}, {@noblock_validity}, {@quota}, {@jqfmt_vfsold}, {@noinit_itable}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@noauto_da_alloc}, {@sysvgroups}, {@resgid, 0x32}]}, 0x4, 0x4e0, &(0x7f0000001a40)="$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") r10 = open$dir(&(0x7f0000001600)='./file0\x00', 0x40002, 0x102) getdents(r10, &(0x7f0000001640)=""/170, 0xaa) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001880)=@getchain={0x2c, 0x11, 0x200, 0x2000000, 0x0, {0x0, 0x0, 0x0, r13, {}, {}, {0xfff3, 0x6}}, [{0x8, 0xb, 0x4}]}, 0x2c}}, 0x0) r14 = syz_open_procfs(0x0, &(0x7f0000000040)='mounts\x00') preadv(r14, &(0x7f00000001c0)=[{&(0x7f00000005c0)=""/4088, 0xff8}], 0x1, 0x1000015f, 0x0) 964.251864ms ago: executing program 5 (id=2383): openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) connect$qrtr(0xffffffffffffffff, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) listen(r0, 0x7) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x80, 0x0, 0x7ffc1ffb}]}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000080003851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50afdff00000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xa}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) ftruncate(r1, 0xc17a) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001b00)=@newqdisc={0x5c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x2c, 0x2, {{0x0, 0x0, 0x0, 0x386561e9}, [@TCA_NETEM_DELAY_DIST={0xe, 0xd, "85def352b66e12dffcff"}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x8080) r6 = socket$kcm(0x10, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$kcm(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="d80000001d0081044e81f782db44b9040a1d080005000000e8fe54a1180015000600142603600e1208000f0000000401a80016002000014003000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000040)='westwood', 0x8) connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e21, @broadcast}, 0xcd2c1caf9b3bcf1) 872.022979ms ago: executing program 4 (id=2387): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f00000005c0)={&(0x7f0000000400)={0x2, 0x0, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000080)='\b\x00', 0x2}, {&(0x7f0000000180)}], 0x2, &(0x7f0000000240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @broadcast}}}], 0x20}, 0x24008004) 859.7572ms ago: executing program 6 (id=2389): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040), 0xc000) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x89fb, &(0x7f0000000040)={'bond0\x00', 0x3}) (async) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000f80)=[{{&(0x7f0000000180)={0xa, 0x4e22, 0xff1, @mcast2, 0x50}, 0x1c, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000029000000360000002f00000000020500000000000000000029000002430000000500000000000000"], 0x30}}], 0x1, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="050000000000000000a78d7d5900000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000030000000200"/28], 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x6, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x1000}, [@ldst={0x3, 0x2, 0x4, 0xb, 0x8, 0x4fbdd151965f55de, 0x1}, @map_fd={0x18, 0x6, 0x1, 0x0, 0x1}]}, &(0x7f0000000140)='syzkaller\x00', 0x6, 0xd0, &(0x7f00000001c0)=""/208, 0x41000, 0x4d, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x4, 0x2}, 0x7, 0x10, &(0x7f0000000300)={0x2, 0x3, 0x40, 0x3c}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)=[{0x4, 0x1, 0x8, 0xb}], 0x10, 0xe}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r1}, &(0x7f0000000000), &(0x7f0000000440)=r4}, 0x20) 788.877554ms ago: executing program 6 (id=2390): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x7, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402) r1 = dup(r0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000180)={0x0, 0x9, 0xa, 0x2, 0x0, 0x3fc, 0x0}) 704.030829ms ago: executing program 6 (id=2392): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20000004}, 0x20000000) 667.641791ms ago: executing program 4 (id=2394): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x20040845}, 0x48d4) 640.101873ms ago: executing program 6 (id=2396): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f"], 0xfc}}, 0x0) 616.362784ms ago: executing program 3 (id=2397): arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000000)) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f00000000c0)) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x3, &(0x7f0000000040)=[{0x101, 0x2, 0x0, 0x8}, {0x81, 0xc, 0x0, 0xfffffffa}, {0x9, 0xe, 0xfa}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000200)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) getdents(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r6 = getpid() io_setup(0x2007, &(0x7f0000000980)=0x0) r8 = eventfd2(0x7, 0x80001) r9 = socket$inet(0x2, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r9, 0x1, 0x41, &(0x7f0000000100)=0x340, 0x4) bind$inet(r9, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r9, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) sendto$inet(r9, &(0x7f0000000000)="93", 0x1, 0x80, 0x0, 0x0) io_submit(r7, 0x4c, &(0x7f00000001c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x8, 0x5, r1, &(0x7f0000000280)="65b3f0150b85630584be1779e4bba58b4c4b395f83d7c8baac1327949ba02f97d81acde98c00fc3c5a770fbd1b1b16a0b4c926aac9dbd3d43ab6c64ce06d31a4ca28b8304af01df9e30749caea8451632f63a08ca92a1de70fc8c63cbea13759d8c0b76ec486730962da4dd685645dad896d826b050a47ac1844c59f5c1fc113b7c581e26070689629bdf0098cc276750eb225fdd30ca6c3f6abf937954c961abbcb75b33255c3fde9d76df6dffa0ee52590ff92c25e53db867c77cb852e6eaae93ce0c85ca470d4e1b6ab68a8a7c84ea69d5471c7d9e081dc217e498b073d7f6ef4417c590df61d3ebe1bbda5", 0x0, 0x7, 0x0, 0x2, r8}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1, r2, &(0x7f0000000440)="287140177c8236400d88b52fe195e80071329e996e283f00c78c4e5975d7f4a82312e05e9aa9f1a73a85002ccf886039eff0d27f65a6c18f2543ec1241a20f4c977cc2c7c384da51e81ef715b6040fd4c62199d71fd2001710ffbb94d61e6e4f1e59007df25dec38b74e52a72b907e8b0c7560def3bd4eae1156ef7a4532646bd9", 0x0, 0x80000001, 0x0, 0x3, r8}]) ptrace(0x10, r6) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x58, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r4, 0x0, 0x1) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r11, @ANYBLOB="0100000000000000000017000000500006804c00040067636d2861657329000000000000000000000000000000000000000000000000240000002da0ef4d4f08ef16"], 0x8c}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r12, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000400)={0x2c, r13, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'ip6_vti0\x00'}}]}]}, 0x2c}}, 0x8000) 503.297071ms ago: executing program 6 (id=2398): socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsync(0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$can_bcm(0x1d, 0x2, 0x2) listen(0xffffffffffffffff, 0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'veth1_to_bridge\x00'}) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) sendmsg$nl_route(r2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x0, 0x3c}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a3100000000ac000000030a010300000000000000000100000014000480080002400000000008000140000000010900030073797a30000000000900010073797a310000000008000b4000000003640008800c00014000000000800000000c"], 0x92fc}}, 0x0) 483.480392ms ago: executing program 4 (id=2399): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x40, 0x0, 0xfc, 0x2}, {0x28, 0x6, 0xef, 0xfffff034}, {0x6, 0x6, 0x6, 0x1057c}]}, 0x10) sendmsg$BATADV_CMD_SET_VLAN(r0, 0x0, 0x20000000) 451.403324ms ago: executing program 4 (id=2400): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x9, &(0x7f0000000000)=0xfff, 0x4) getsockopt$inet6_tcp_int(r0, 0x6, 0x9, 0x0, &(0x7f000000a040)) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x138, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x8, 0x2}, {0x0, 0x1}, {0x5}}, [@TCA_CHAIN={0x8, 0xb, 0x4}, @TCA_RATE={0x6, 0x5, {0xb, 0x40}}, @filter_kind_options=@f_bpf={{0x8}, {0xfc, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_ACT={0xf0, 0x1, [@m_simple={0x30, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_skbmod={0x8c, 0x4, 0x0, 0x0, {{0xb}, {0x4}, {0x5e, 0x6, "bb189fc69a0c4fe8d92afb82557a6770b7fa99c093bc4a859960aeab05917b7914c80f6ffb9df6fbe758b635630587d37f33f3ddb1d739c6e02d58b8af923a342a2dd6338501d46638c0d6ddbd9439390d2e3f09c6182d245068"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_mpls={0x30, 0x13, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}]}]}}]}, 0x138}}, 0x20000080) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x72, 0x11cfa, 0x9, 0x5, 0x3, 0x4, 0x1, 0x0, 0x7cce8c743ee810df, 0x6}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x40505330, &(0x7f0000000bc0)={0x800100, 0x0, 0x0, 0x724f, 0x400, 0x55a}) 450.209234ms ago: executing program 5 (id=2401): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x1, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e23, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x108) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 404.036826ms ago: executing program 3 (id=2402): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x7, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402) r1 = dup(r0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000180)={0x0, 0x9, 0xa, 0x2, 0x0, 0x3fc, 0x0}) 401.388607ms ago: executing program 6 (id=2403): r0 = io_uring_setup(0x304a, &(0x7f00000003c0)={0x0, 0x60b13d, 0x2, 0x1, 0x53}) r1 = socket(0x2b, 0x80801, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8000000, 0x7fffffe, 0x2d0, 0x0, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x200, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x3, 0x0}, @mcast1, [0x0, 0x0, 0x0, 0xffffff], [0x0, 0x0, 0x4c62d6309aaa1bde, 0xff000000], 'ip6tnl0\x00', 'nicvf0\x00', {}, {0xff}, 0x3a}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x4, '\x00', 'syz1\x00'}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [], [0x0, 0x0, 0xffffff00, 0xffffff00], 'veth1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000100, 0x0) perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0xc}, 0x119310, 0x1, 0x1, 0x4, 0x8, 0x6, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000300)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfa, 0x0, 0x7ffc0002}]}) r2 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x9, 0x0) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x6, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000380)=0x2, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f00006dbffc), 0x4) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) close(r0) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), r5) sendmsg$NLBL_MGMT_C_LISTALL(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r6, 0xb136d679ea3cf1b, 0x70bd2d, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x44040000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4040854}, 0xc0) bind$inet(0xffffffffffffffff, 0x0, 0x0) 324.447041ms ago: executing program 5 (id=2404): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mlock(&(0x7f00007db000/0x2000)=nil, 0x2000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) unshare(0x20060400) r0 = open(&(0x7f0000000180)='./bus\x00', 0x16927c, 0x7f) copy_file_range(r0, 0x0, r0, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0xfffffffffffffffe) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x803, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x6, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000000000000000000000850000000e000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000001b701000000000000850000007b00000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x41100, 0x62}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$can_raw(r5, &(0x7f0000000300)={&(0x7f00000000c0), 0x10, &(0x7f0000000280)={0x0, 0x39}, 0x2, 0x0, 0x0, 0x4080}, 0x4) sendmmsg$unix(r0, &(0x7f0000000cc0)=[{{&(0x7f0000000340)=@file={0x1, './bus\x00'}, 0x6e, &(0x7f0000000600)=[{&(0x7f0000000d80)="4786c1cd1ee7fd4c07b8f6a3948b10b7903f541ed3dba48369175706558e3abc4f49b6771efe3a2a46f2fa52db48d1b5236348df4ca23e8567c803431502d932a8efca3333701cb3e48ede755ffca582a5980c0146fec9e3a60e0b28a5c08bd2f9a7b7a90d092eea7b3b4c126f93ba1c2b8402356f5c05cdd935df0a1bfc456a2155db08e30c5e8c95122f4dae6a3c616405418ae6965614cd189b12af778db1f25eb50b610c69a17921a95141bd3648b78357fdc8a9950b7d58b117a4d80cc9b6e60dee6c8b9faa3934ee6f2de704b7bbc9", 0x72}, {&(0x7f0000000480)="42f8219779c8f65f2dc7bb61279c99a11690b14780ea6c29186910425f4637d20a2ec78843cea54de1b2f51803726ef3f377f4db03db1695bd718958dd397ee5464d7b8e6ac4785d3555d6b7cb3cd7a1b9ae", 0x52}, {&(0x7f0000000500)="d3b4c3a1fe1d879f090229fd846d8bf5c50bc8ddcdc6112f295a0e42e61370fcf927d37e3eb510d7b94ac1d3859c0aa65f749c7d81aabb502cb0de90a3f64f4dc53bd7fb072c335ebc125cb78c72d7e72c2a56ba88cb682d62eeb142f82831d708f1119fc39cf4a0f91f81a6", 0x6c}, {&(0x7f00000002c0)="edbbbfe112d24c48302e89ee867aebe8c31e877df65792a10b0dc250e60c9ce07d96419646f2e5f3c5307edea98f60c18cdb0a62135ee39b773e", 0x3a}], 0x4, 0x0, 0x0, 0x48010}}, {{&(0x7f0000000640)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000900)=[{&(0x7f00000006c0)="8b32d0e64e6413152b873b8650107cbc1f7329e4b9e6fd5665e49d8b11fae6cdff32a1b4dde7114b863fa520541c8adb023b1aaaddc7a804973d26e86dfd31a2d3bbcba6eb72bb953cfad9cf62e944717829b767d020f40e145cdd51e0bfd769b43d7d856fcf5d2d3c", 0x69}, {&(0x7f0000000740)="80b02d9c01c3e4950ae53da918b5a18d254e1e5b8dc50d6eb84b5dcf203263098b2af83e387a5235dbd80f21dcea42829661a80f5e97f1b205712bd5c5c7ecb21596f61e03c27a7596d162860f222583161d7bfe1fd61d6fbd2f54925b83", 0x5e}, {&(0x7f00000007c0)="9f1863d82caa4e331354d6202acda7fe832448e40459832df977189330999cd0ae2d51ef5ce85bf671bcc56f6a96cddf5361dadd2ed43c5d6e55a449cb69fe5041d37d9cbfa3ed9933f3f28b8b84e108f6a888be6571f3c860f4087f0aa4295e0aa19d760c3cd09e", 0x68}], 0x3, 0x0, 0x0, 0x810}}, {{&(0x7f0000000940)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000b80)=[{&(0x7f00000009c0)="33f2a601661343dfa5488ba94b33e62e5863c2b3623d8f47f8c249d8a730f57a4bd23943d202e7e8d88e671be70a31119850022275eaf763dc1a5a322f7fbc5ffdb83184e4d4612713ca02416278d6a266ced52da4c80f48", 0x58}, {&(0x7f0000000a40)="6a6ddad8c6756e25fc99462b67256eb068c5960012a078c2faab9fa72dd16ea7affe67c0650d7c1acd337e6f739bfdd57634e337c10bfb810177e5567266b08737964651ab5ed18009a5d05d39c54f27717002a541315f7885507d691a27839064cbb54f274531742bc7c1c190f14ce140eca6af897ab0893421d176c6fcbcd9079d0f015389edd013e21e030df981df8797d9679a6976b1ac591f025dce7e839df12d84a06d7af6d71f1404d25737b0ff0c5b21c16b481e2e3cec64535c6167fed32feccc2cafc8a751ed4f892dc6c27c", 0xfffffffffffffc25}, {&(0x7f0000000b40)="dc8c965978e9f2560472b491a235", 0xe}], 0x3, &(0x7f0000000c40)=[@cred={{0x1c, 0x1, 0x2, {r1}}}, @rights={{0x38, 0x1, 0x1, [r3, r4, r4, r0, r4, r2, r5, r4, r4, r2]}}, @rights={{0x1c, 0x1, 0x1, [r5, r3, r4]}}], 0x78, 0x10000004}}], 0x3, 0x8841) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$GIO_CMAP(0xffffffffffffffff, 0x4b70, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000440)={'sit0\x00', 0x0}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) 324.179551ms ago: executing program 4 (id=2405): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f00000005c0)={&(0x7f0000000400)={0x2, 0x0, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000080)='\b\x00', 0x2}, {&(0x7f0000000180)}], 0x2, &(0x7f0000000240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @broadcast}}}], 0x20}, 0x24008004) 223.489207ms ago: executing program 3 (id=2408): r0 = io_uring_setup(0x194e, &(0x7f0000000500)={0x0, 0xd3d1, 0x80, 0x1, 0x2b0}) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x80b0, 0x4d, 0x800020, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x77a3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="580100001000010000000000fcdbdf00088000000000000000000000000000bb0000000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000320000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000600000000000000090000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000000400000000000000000000000a000000ad0000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000170060"], 0x158}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82) syz_open_dev$sg(&(0x7f00000008c0), 0x0, 0x482) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0_vlan\x00', 0x0}) bind$packet(r1, &(0x7f00000001c0)={0x11, 0xf6, r4, 0x1, 0xbd, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) sendto$packet(r1, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086", 0x17, 0x88a8ffff, &(0x7f0000000140)={0x11, 0x88a8, r4}, 0x14) connect$can_j1939(0xffffffffffffffff, &(0x7f0000000140)={0x1d, r4, 0x0, {0x1, 0xff}, 0xfe}, 0x18) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)={0xffffffffffffffff}) splice(r6, 0x0, r5, 0x0, 0x10000008ebc, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 139.992342ms ago: executing program 1 (id=2409): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x20040845}, 0x48d4) 139.836832ms ago: executing program 4 (id=2410): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000040)={0x0, 0xd, 0x7, 0xffffffff, 0x20, "01000000000e65300000001e00000200"}) readv(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/68, 0x44}], 0x1) 122.719363ms ago: executing program 1 (id=2411): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000000)='./file0/file0\x00', 0x8008, &(0x7f00000000c0)={[{@lazytime}, {@errors_remount}]}, 0x82, 0x53a, &(0x7f0000000a40)="$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") (async) bpf$MAP_CREATE(0x0, 0x0, 0x50) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) 93.433585ms ago: executing program 3 (id=2412): r0 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x11, 0x0}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000780)="80005b020eaa4da2", 0x8}], 0x1, 0x0, 0x0, 0x900}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000380)=0x12008, 0x4) write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCXONC(r2, 0x540a, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0xfffffffffffffff9) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)) ioctl$TCXONC(r2, 0x540a, 0x1) r4 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x80002, 0x0) socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000340), 0x8, 0x10, 0x0, 0xffffffffffffff50}, 0x94) socket$packet(0x11, 0x2, 0x300) r7 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, 0x0) sendfile(r4, r4, 0x0, 0x2000006) io_setup(0x4, &(0x7f00000014c0)=0x0) r9 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') io_submit(r8, 0x1, &(0x7f0000000280)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0xfffe, r9, 0x0}]) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x6}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r10, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'ipvlan1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000180)={@loopback, @rand_addr=' \x01\x00', @loopback, 0x9, 0x6, 0x2, 0x100, 0x9, 0x800d0040, r11}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, 0x0) 28.698168ms ago: executing program 1 (id=2413): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x58, @local, 0x802}], 0x18) 28.252428ms ago: executing program 1 (id=2414): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x35, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000018000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x80078b, &(0x7f0000000680)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x471, &(0x7f0000000bc0)="$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") 15.977169ms ago: executing program 1 (id=2415): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f"], 0xfc}}, 0x0) 0s ago: executing program 1 (id=2416): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="20000000130001002cbd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB='G'], 0xfffffffffffffd2b}, 0x1, 0x0, 0x0, 0x80640d0}, 0x200488c9) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_bp={0x0, 0x6}, 0x9092, 0x0, 0x43a1bd76, 0x9, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) ioprio_set$pid(0x3, 0x0, 0x4007) syz_clone(0x700, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) kernel console output (not intermixed with test programs): nset [1, 0] type 2 family 0 port 6081 - 0 [ 142.070972][ T8851] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.109981][ T8851] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.171293][ T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.185768][ T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.189821][ T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.193782][ T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.195758][ T8853] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.254070][ T8853] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.319874][ T8853] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.380005][ T8853] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.510359][ T8870] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1720'. [ 142.701002][ T8886] loop2: detected capacity change from 0 to 512 [ 142.727965][ T8886] EXT4-fs: Ignoring removed nobh option [ 142.739782][ T8888] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 142.803710][ T8895] 9p: Bad value for 'wfdno' [ 142.808554][ T8886] EXT4-fs (loop2): orphan cleanup on readonly fs [ 142.838517][ T8886] EXT4-fs warning (device loop2): ext4_xattr_inode_get:546: inode #11: comm syz.2.1722: ea_inode file size=4 entry size=6 [ 142.914566][ T8898] loop5: detected capacity change from 0 to 1024 [ 142.925482][ T8898] journal_path: Lookup failure for './file1' [ 142.931707][ T8898] EXT4-fs: error: could not find journal device path [ 142.938932][ T8886] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 142.953027][ T8898] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.962732][ T8898] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.972650][ T8898] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1729'. [ 142.981709][ T8898] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1729'. [ 142.993399][ T8886] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #15: comm syz.2.1722: corrupted inode contents [ 143.004397][ T8897] loop4: detected capacity change from 0 to 1024 [ 143.011778][ T8886] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #15: comm syz.2.1722: mark_inode_dirty error [ 143.043647][ T8886] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #15: comm syz.2.1722: corrupted inode contents [ 143.056057][ T8897] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869) [ 143.076264][ T8886] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3001: inode #15: comm syz.2.1722: mark_inode_dirty error [ 143.086465][ T8897] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 143.099814][ T8886] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3004: inode #15: comm syz.2.1722: mark inode dirty (error -117) [ 143.118197][ T8897] EXT4-fs (loop4): invalid journal inode [ 143.124107][ T8897] EXT4-fs (loop4): can't get journal size [ 143.133773][ T8886] EXT4-fs warning (device loop2): ext4_evict_inode:273: xattr delete (err -117) [ 143.146345][ T8897] EXT4-fs error (device loop4): ext4_protect_reserved_inode:182: inode #2: comm syz.4.1728: blocks 48-48 from inode overlap system zone [ 143.153479][ T8886] EXT4-fs (loop2): 1 orphan inode deleted [ 143.178219][ T8897] EXT4-fs (loop4): failed to initialize system zone (-117) [ 143.187028][ T8886] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 143.198230][ T8897] EXT4-fs (loop4): mount failed [ 143.225920][ T8894] uprobe: syz.4.1728:8894 failed to unregister, leaking uprobe [ 143.468858][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.512893][ T8907] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1731'. [ 143.566298][ T8910] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1733'. [ 143.707325][ T8919] netlink: 'syz.5.1737': attribute type 1 has an invalid length. [ 143.776840][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 143.776859][ T29] audit: type=1326 audit(2000000009.530:2045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8927 comm="syz.2.1740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67e743acb9 code=0x7ffc0000 [ 143.894773][ T8936] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1742'. [ 143.950267][ T29] audit: type=1326 audit(2000000009.560:2046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8927 comm="syz.2.1740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67e743acb9 code=0x7ffc0000 [ 143.973947][ T29] audit: type=1326 audit(2000000009.570:2047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8927 comm="syz.2.1740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f67e743acb9 code=0x7ffc0000 [ 143.997435][ T29] audit: type=1326 audit(2000000009.570:2049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8933 comm="syz.2.1740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f67e73fb58e code=0x7ffc0000 [ 144.021066][ T29] audit: type=1326 audit(2000000009.570:2048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8927 comm="syz.2.1740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67e743acb9 code=0x7ffc0000 [ 144.044618][ T29] audit: type=1326 audit(2000000009.570:2050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8927 comm="syz.2.1740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67e743acb9 code=0x7ffc0000 [ 144.068258][ T29] audit: type=1326 audit(2000000009.580:2051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8927 comm="syz.2.1740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f67e743acb9 code=0x7ffc0000 [ 144.091786][ T29] audit: type=1326 audit(2000000009.580:2052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8927 comm="syz.2.1740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67e743acb9 code=0x7ffc0000 [ 144.115374][ T29] audit: type=1326 audit(2000000009.580:2053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8927 comm="syz.2.1740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f67e73dc0d9 code=0x7ffc0000 [ 144.138984][ T29] audit: type=1326 audit(2000000009.580:2054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8927 comm="syz.2.1740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67e743acb9 code=0x7ffc0000 [ 144.734000][ T8962] netlink: 'syz.4.1751': attribute type 1 has an invalid length. [ 144.788541][ T8966] loop5: detected capacity change from 0 to 512 [ 144.795718][ T8966] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 144.838314][ T8966] EXT4-fs (loop5): orphan cleanup on readonly fs [ 144.848639][ T8966] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4215: comm syz.5.1752: Allocating blocks 41-42 which overlap fs metadata [ 144.914339][ T8966] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4215: comm syz.5.1752: Allocating blocks 41-42 which overlap fs metadata [ 144.966703][ T8966] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.1752: Failed to acquire dquot type 1 [ 145.008207][ T8966] EXT4-fs error (device loop5): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 145.048266][ T8974] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1754'. [ 145.053372][ T8966] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #12: comm syz.5.1752: corrupted inode contents [ 145.078095][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 145.108491][ T8966] EXT4-fs error (device loop5): ext4_dirty_inode:6502: inode #12: comm syz.5.1752: mark_inode_dirty error [ 145.138134][ T8966] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #12: comm syz.5.1752: corrupted inode contents [ 145.188243][ T8966] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #12: comm syz.5.1752: mark_inode_dirty error [ 145.226547][ T8966] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #12: comm syz.5.1752: corrupted inode contents [ 145.226741][ T8966] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 145.227031][ T8966] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #12: comm syz.5.1752: corrupted inode contents [ 145.228335][ T8966] EXT4-fs error (device loop5): ext4_truncate:4635: inode #12: comm syz.5.1752: mark_inode_dirty error [ 145.231111][ T8966] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 145.243636][ T8966] EXT4-fs (loop5): 1 truncate cleaned up [ 145.244129][ T8966] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 145.308279][ T8980] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1757'. [ 145.310377][ T4304] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.331038][ T8984] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1759'. [ 145.374689][ T8987] netlink: 'syz.5.1760': attribute type 1 has an invalid length. [ 145.392522][ T8987] 8021q: adding VLAN 0 to HW filter on device bond8 [ 145.405470][ T8987] 8021q: adding VLAN 0 to HW filter on device bond8 [ 145.406052][ T8987] bond8: (slave vxcan1): The slave device specified does not support setting the MAC address [ 145.407549][ T8987] bond8: (slave vxcan1): Error -95 calling set_mac_address [ 145.530888][ T8994] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1762'. [ 145.605115][ T8996] netlink: 'syz.2.1763': attribute type 1 has an invalid length. [ 145.853663][ T9004] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1765'. [ 145.853738][ T9004] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1765'. [ 146.131163][ T9018] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1770'. [ 146.171269][ T9021] netlink: 'syz.2.1771': attribute type 10 has an invalid length. [ 146.216696][ T9021] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.225436][ T9021] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.501805][ T9049] loop4: detected capacity change from 0 to 512 [ 146.524239][ T9052] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1776'. [ 146.538062][ T9049] EXT4-fs: Ignoring removed bh option [ 146.546995][ T9052] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 146.564065][ T9049] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 146.573695][ T9052] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 146.642299][ T9059] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 146.652210][ T9059] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.675657][ T9049] EXT4-fs (loop4): 1 truncate cleaned up [ 146.688690][ T9049] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.739853][ T9059] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 146.749743][ T9059] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.810146][ T9059] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 146.820130][ T9059] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.855945][ T9072] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1778'. [ 146.900082][ T9059] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 146.910076][ T9059] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.951027][ T9080] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1781'. [ 146.951027][ T3327] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.989966][ T31] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.998506][ T31] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.008016][ T31] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.016245][ T31] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.029196][ T31] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.037448][ T31] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.051227][ T31] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.059588][ T31] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.101600][ T9085] netlink: 'syz.4.1780': attribute type 1 has an invalid length. [ 147.169375][ T9085] 8021q: adding VLAN 0 to HW filter on device bond19 [ 147.181871][ T9094] 9p: Bad value for 'wfdno' [ 147.195152][ T1627] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.227334][ T9100] netlink: 'syz.2.1787': attribute type 4 has an invalid length. [ 147.269340][ T9092] 8021q: adding VLAN 0 to HW filter on device bond19 [ 147.284525][ T9101] loop5: detected capacity change from 0 to 1024 [ 147.298343][ T9104] netlink: 'syz.2.1787': attribute type 4 has an invalid length. [ 147.307074][ T9101] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869) [ 147.323183][ T9092] bond19: (slave vxcan1): The slave device specified does not support setting the MAC address [ 147.339210][ T9105] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9105 comm=syz.2.1787 [ 147.340941][ T9101] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 147.369109][ T9101] EXT4-fs (loop5): invalid journal inode [ 147.375665][ T9092] bond19: (slave vxcan1): Error -95 calling set_mac_address [ 147.383414][ T9101] EXT4-fs (loop5): can't get journal size [ 147.394029][ T9101] EXT4-fs error (device loop5): ext4_protect_reserved_inode:182: inode #2: comm syz.5.1786: blocks 48-48 from inode overlap system zone [ 147.408254][ T9101] EXT4-fs (loop5): failed to initialize system zone (-117) [ 147.415522][ T9101] EXT4-fs (loop5): mount failed [ 147.459685][ T53] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.485749][ T53] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.509044][ T53] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.696857][ T9125] netlink: 'syz.5.1796': attribute type 2 has an invalid length. [ 147.710252][ T9124] FAULT_INJECTION: forcing a failure. [ 147.710252][ T9124] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 147.723476][ T9124] CPU: 1 UID: 0 PID: 9124 Comm: syz.3.1797 Not tainted syzkaller #0 PREEMPT(voluntary) [ 147.723509][ T9124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 147.723527][ T9124] Call Trace: [ 147.723536][ T9124] [ 147.723546][ T9124] __dump_stack+0x1d/0x30 [ 147.723629][ T9124] dump_stack_lvl+0x95/0xd0 [ 147.723701][ T9124] dump_stack+0x15/0x1b [ 147.723729][ T9124] should_fail_ex+0x263/0x280 [ 147.723801][ T9124] should_fail+0xb/0x20 [ 147.723845][ T9124] should_fail_usercopy+0x1a/0x20 [ 147.723873][ T9124] _copy_from_user+0x1c/0xb0 [ 147.723908][ T9124] ___sys_sendmsg+0xc1/0x1e0 [ 147.723953][ T9124] __x64_sys_sendmsg+0xd4/0x160 [ 147.724058][ T9124] x64_sys_call+0x17ba/0x3000 [ 147.724197][ T9124] do_syscall_64+0xc0/0x2a0 [ 147.724235][ T9124] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.724298][ T9124] RIP: 0033:0x7fa4edf7acb9 [ 147.724320][ T9124] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 147.724449][ T9124] RSP: 002b:00007fa4ec9d7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 147.724485][ T9124] RAX: ffffffffffffffda RBX: 00007fa4ee1f5fa0 RCX: 00007fa4edf7acb9 [ 147.724504][ T9124] RDX: 0000000008000002 RSI: 0000200000000180 RDI: 0000000000000003 [ 147.724528][ T9124] RBP: 00007fa4ec9d7090 R08: 0000000000000000 R09: 0000000000000000 [ 147.724573][ T9124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 147.724590][ T9124] R13: 00007fa4ee1f6038 R14: 00007fa4ee1f5fa0 R15: 00007ffcc99be068 [ 147.724616][ T9124] [ 147.926174][ T9128] cgroup: Name too long [ 148.138844][ T9140] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 148.148842][ T9140] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.210270][ T9146] netlink: 'syz.2.1804': attribute type 10 has an invalid length. [ 148.236842][ T9146] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.246410][ T9146] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.248936][ T9140] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 148.264526][ T9140] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.349680][ T9140] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 148.359633][ T9140] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.412025][ T9154] 9p: Bad value for 'rfdno' [ 148.429931][ T9140] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 148.439966][ T9140] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.758239][ T9174] loop4: detected capacity change from 0 to 512 [ 148.775635][ T9174] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 148.808430][ T9174] EXT4-fs (loop4): orphan cleanup on readonly fs [ 148.818459][ T9174] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4215: comm syz.4.1814: Allocating blocks 41-42 which overlap fs metadata [ 148.848165][ T9174] __quota_error: 28 callbacks suppressed [ 148.848186][ T9174] Quota error (device loop4): write_blk: dquota write failed [ 148.861346][ T9174] Quota error (device loop4): find_free_dqentry: Can't write quota data block 5 [ 148.887808][ T9174] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4215: comm syz.4.1814: Allocating blocks 41-42 which overlap fs metadata [ 148.907058][ T9174] Quota error (device loop4): write_blk: dquota write failed [ 148.928165][ T9174] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 148.938247][ T9174] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.1814: Failed to acquire dquot type 1 [ 148.950265][ T9174] EXT4-fs error (device loop4): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 148.965575][ T9174] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.1814: corrupted inode contents [ 148.979521][ T9174] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #12: comm syz.4.1814: mark_inode_dirty error [ 148.991173][ T9174] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.1814: corrupted inode contents [ 149.004784][ T9174] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #12: comm syz.4.1814: mark_inode_dirty error [ 149.017387][ T9174] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.1814: corrupted inode contents [ 149.030228][ T9174] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 149.039208][ T9174] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.1814: corrupted inode contents [ 149.053521][ T9174] EXT4-fs error (device loop4): ext4_truncate:4635: inode #12: comm syz.4.1814: mark_inode_dirty error [ 149.064892][ T9186] netlink: 'syz.1.1817': attribute type 1 has an invalid length. [ 149.082664][ T9186] 8021q: adding VLAN 0 to HW filter on device bond12 [ 149.127872][ T9174] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 149.158405][ T9174] EXT4-fs (loop4): 1 truncate cleaned up [ 149.164760][ T9174] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 149.205498][ T3327] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.230433][ T9198] 9p: Bad value for 'wfdno' [ 149.331492][ T9198] loop4: detected capacity change from 0 to 1024 [ 149.338796][ T9198] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869) [ 149.348531][ T9198] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 149.359324][ T29] audit: type=1326 audit(2000000015.120:2079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9201 comm="syz.2.1824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67e743acb9 code=0x7ffc0000 [ 149.389186][ T9202] loop2: detected capacity change from 0 to 1024 [ 149.395669][ T9198] EXT4-fs (loop4): invalid journal inode [ 149.405259][ T9198] EXT4-fs (loop4): can't get journal size [ 149.412040][ T29] audit: type=1326 audit(2000000015.140:2080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9201 comm="syz.2.1824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67e743acb9 code=0x7ffc0000 [ 149.435658][ T29] audit: type=1326 audit(2000000015.140:2081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9201 comm="syz.2.1824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7f67e743acb9 code=0x7ffc0000 [ 149.459197][ T29] audit: type=1326 audit(2000000015.140:2082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9201 comm="syz.2.1824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67e743acb9 code=0x7ffc0000 [ 149.482716][ T29] audit: type=1326 audit(2000000015.140:2083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9201 comm="syz.2.1824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67e743acb9 code=0x7ffc0000 [ 149.506284][ T29] audit: type=1326 audit(2000000015.140:2084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9201 comm="syz.2.1824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f67e743acb9 code=0x7ffc0000 [ 149.531412][ T9198] EXT4-fs error (device loop4): ext4_protect_reserved_inode:182: inode #2: comm syz.4.1822: blocks 48-48 from inode overlap system zone [ 149.545739][ T9198] EXT4-fs (loop4): failed to initialize system zone (-117) [ 149.558823][ T9198] EXT4-fs (loop4): mount failed [ 149.568285][ T9202] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.587942][ T9202] ext4 filesystem being mounted at /343/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.767510][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.423842][ T9226] loop2: detected capacity change from 0 to 1024 [ 150.442226][ T9226] EXT4-fs: Ignoring removed orlov option [ 150.454025][ T9226] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 150.478998][ T9226] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840c018, mo2=0002] [ 150.488584][ T9226] System zones: 0-1, 3-12 [ 150.507144][ T9226] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.561037][ T9236] loop3: detected capacity change from 0 to 256 [ 150.599928][ T9240] netlink: 'syz.1.1836': attribute type 1 has an invalid length. [ 150.632775][ T9240] 8021q: adding VLAN 0 to HW filter on device bond13 [ 150.656707][ T9243] __nla_validate_parse: 9 callbacks suppressed [ 150.656779][ T9243] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1838'. [ 150.657823][ T9245] 9p: Bad value for 'wfdno' [ 150.694875][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.802582][ T9250] loop4: detected capacity change from 0 to 1024 [ 150.816646][ T9253] loop2: detected capacity change from 0 to 512 [ 150.825065][ T9253] EXT4-fs: Ignoring removed bh option [ 150.833644][ T9250] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 150.843604][ T9250] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 150.854400][ T9253] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 150.862925][ T9245] loop3: detected capacity change from 0 to 1024 [ 150.863181][ T9250] EXT4-fs (loop4): stripe (9) is not aligned with cluster size (16), stripe is disabled [ 150.881062][ T9253] EXT4-fs (loop2): 1 truncate cleaned up [ 150.887700][ T9253] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.899896][ T9250] EXT4-fs error (device loop4): ext4_get_journal_inode:5849: inode #32: comm syz.4.1840: iget: special inode unallocated [ 150.914575][ T9250] EXT4-fs (loop4): no journal found [ 150.919890][ T9250] EXT4-fs (loop4): can't get journal size [ 150.948081][ T9250] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 150.960787][ T9245] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869) [ 150.970911][ T9245] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 150.981165][ T9250] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1840'. [ 150.981664][ T9245] EXT4-fs (loop3): invalid journal inode [ 150.995965][ T9245] EXT4-fs (loop3): can't get journal size [ 151.002501][ T9245] EXT4-fs error (device loop3): ext4_protect_reserved_inode:182: inode #2: comm syz.3.1837: blocks 48-48 from inode overlap system zone [ 151.017016][ T9245] EXT4-fs (loop3): failed to initialize system zone (-117) [ 151.038670][ T9245] EXT4-fs (loop3): mount failed [ 151.047563][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.068766][ T3327] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.244537][ T53] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.253128][ T53] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.265006][ T53] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.273288][ T53] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.291084][ T9271] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1846'. [ 151.295499][ T53] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.308519][ T53] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.323738][ T53] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.332047][ T53] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.342022][ T9144] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 151.351962][ T9144] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.432012][ T9144] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 151.442010][ T9144] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.480432][ T9285] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1851'. [ 151.496325][ T9281] dvmrp6: entered allmulticast mode [ 151.507575][ T9285] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1851'. [ 151.548820][ T9296] netlink: 'syz.1.1855': attribute type 1 has an invalid length. [ 151.571514][ T9296] 8021q: adding VLAN 0 to HW filter on device bond14 [ 151.584452][ T9144] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 151.594379][ T9144] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.648118][ T9299] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(15) [ 151.654789][ T9299] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 151.662382][ T9299] vhci_hcd vhci_hcd.0: Device attached [ 151.674960][ T9299] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(17) [ 151.681627][ T9299] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 151.689462][ T9299] vhci_hcd vhci_hcd.0: Device attached [ 151.699423][ T9144] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 151.709570][ T9144] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.725638][ T9299] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(19) [ 151.732363][ T9299] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 151.740096][ T9299] vhci_hcd vhci_hcd.0: Device attached [ 151.764931][ T9299] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 151.774083][ T9299] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(23) [ 151.780825][ T9299] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 151.788607][ T9299] vhci_hcd vhci_hcd.0: Device attached [ 151.800960][ T9299] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(25) [ 151.807663][ T9299] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 151.815495][ T9299] vhci_hcd vhci_hcd.0: Device attached [ 151.832172][ T9299] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(27) [ 151.838832][ T9299] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 151.846566][ T9299] vhci_hcd vhci_hcd.0: Device attached [ 151.885254][ T9299] vhci_hcd vhci_hcd.0: pdev(4) rhport(5) sockfd(29) [ 151.891901][ T9299] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 151.899640][ T9299] vhci_hcd vhci_hcd.0: Device attached [ 151.917710][ T2969] usb 9-1: new low-speed USB device number 2 using vhci_hcd [ 151.928790][ T9299] vhci_hcd vhci_hcd.0: pdev(4) rhport(6) sockfd(31) [ 151.935524][ T9299] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 151.943243][ T9299] vhci_hcd vhci_hcd.0: Device attached [ 151.954391][ T9325] loop2: detected capacity change from 0 to 512 [ 151.973958][ T9325] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.1860: couldn't read orphan inode 26 (err -116) [ 151.980545][ T9315] vhci_hcd: connection closed [ 151.986073][ T9311] vhci_hcd: connection closed [ 151.986292][ T9306] vhci_hcd: connection closed [ 151.990847][ T9308] vhci_hcd: connection closed [ 151.995482][ T9325] EXT4-fs (loop2): Remounting filesystem read-only [ 151.996985][ T9321] vhci_hcd: connection closed [ 152.001028][ T9325] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.014598][ T9300] vhci_hcd: connection reset by peer [ 152.018809][ T9303] vhci_hcd: connection closed [ 152.037864][ T31] vhci_hcd vhci_hcd.4: stop threads [ 152.048269][ T31] vhci_hcd vhci_hcd.4: release socket [ 152.053689][ T31] vhci_hcd vhci_hcd.4: disconnect device [ 152.061312][ T9325] ext4 filesystem being mounted at /352/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 152.072781][ T31] vhci_hcd vhci_hcd.4: stop threads [ 152.078191][ T31] vhci_hcd vhci_hcd.4: release socket [ 152.083636][ T31] vhci_hcd vhci_hcd.4: disconnect device [ 152.091185][ T9329] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.093599][ T31] vhci_hcd vhci_hcd.4: stop threads [ 152.104468][ T9329] ext4 filesystem being mounted at /357/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 152.109074][ T31] vhci_hcd vhci_hcd.4: release socket [ 152.109113][ T31] vhci_hcd vhci_hcd.4: disconnect device [ 152.131757][ T31] vhci_hcd vhci_hcd.4: stop threads [ 152.137094][ T31] vhci_hcd vhci_hcd.4: release socket [ 152.142658][ T31] vhci_hcd vhci_hcd.4: disconnect device [ 152.148558][ T31] vhci_hcd vhci_hcd.4: stop threads [ 152.153798][ T31] vhci_hcd vhci_hcd.4: release socket [ 152.159272][ T31] vhci_hcd vhci_hcd.4: disconnect device [ 152.165113][ T31] vhci_hcd vhci_hcd.4: stop threads [ 152.170465][ T31] vhci_hcd vhci_hcd.4: release socket [ 152.175922][ T31] vhci_hcd vhci_hcd.4: disconnect device [ 152.182246][ T31] vhci_hcd vhci_hcd.4: stop threads [ 152.187558][ T31] vhci_hcd vhci_hcd.4: release socket [ 152.187915][ T9329] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #2: comm syz.3.1861: corrupted inode contents [ 152.193299][ T31] vhci_hcd vhci_hcd.4: disconnect device [ 152.220927][ T9329] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #2: comm syz.3.1861: mark_inode_dirty error [ 152.233063][ T9329] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #2: comm syz.3.1861: corrupted inode contents [ 152.236623][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.254294][ T9329] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #2: comm syz.3.1861: mark_inode_dirty error [ 152.320234][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.363204][ T9345] set_capacity_and_notify: 1 callbacks suppressed [ 152.363280][ T9345] loop3: detected capacity change from 0 to 512 [ 152.377029][ T9345] EXT4-fs: Ignoring removed orlov option [ 152.382873][ T9345] EXT4-fs: Ignoring removed i_version option [ 152.388946][ T9345] EXT4-fs: Ignoring removed nomblk_io_submit option [ 152.440857][ T9352] netlink: 'syz.2.1869': attribute type 1 has an invalid length. [ 152.449757][ T9352] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 152.460853][ T9345] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 152.477215][ T9345] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c040e118, mo2=0002] [ 152.485742][ T9345] EXT4-fs (loop3): orphan cleanup on readonly fs [ 152.499765][ T9345] EXT4-fs warning (device loop3): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 152.514424][ T9345] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 152.521902][ T9345] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1867: bg 0: block 40: padding at end of block bitmap is not set [ 152.536696][ T9345] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 152.557974][ T9345] EXT4-fs (loop3): 1 truncate cleaned up [ 152.567243][ T9345] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 152.580761][ T9345] EXT4-fs (loop3): shut down requested (1) [ 152.596908][ T9323] vhci_hcd: connection closed [ 152.597120][ T298] vhci_hcd vhci_hcd.4: stop threads [ 152.602691][ T9345] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=16 [ 152.607186][ T298] vhci_hcd vhci_hcd.4: release socket [ 152.621401][ T298] vhci_hcd vhci_hcd.4: disconnect device [ 152.641912][ T9345] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=16 [ 152.655353][ T9363] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1872'. [ 152.670669][ T9365] xt_l2tp: v2 doesn't support IP mode [ 152.676459][ T9363] bridge0: port 3(batadv0) entered disabled state [ 152.694753][ T9363] bridge_slave_1: left allmulticast mode [ 152.700568][ T9363] bridge_slave_1: left promiscuous mode [ 152.706375][ T9363] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.714013][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.727312][ T9363] bridge_slave_0: left allmulticast mode [ 152.733072][ T9363] bridge_slave_0: left promiscuous mode [ 152.738983][ T9363] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.772226][ T9363] bridge0 (unregistering): left promiscuous mode [ 152.784410][ T9373] 9p: Bad value for 'wfdno' [ 152.864316][ T9374] loop4: detected capacity change from 0 to 1024 [ 152.886848][ T9374] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869) [ 152.904640][ T9374] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 152.947106][ T9374] EXT4-fs (loop4): invalid journal inode [ 152.953807][ T9374] EXT4-fs (loop4): can't get journal size [ 152.960214][ T9374] EXT4-fs error (device loop4): ext4_protect_reserved_inode:182: inode #2: comm syz.4.1876: blocks 48-48 from inode overlap system zone [ 152.974882][ T9374] EXT4-fs (loop4): failed to initialize system zone (-117) [ 152.974940][ T9374] EXT4-fs (loop4): mount failed [ 153.082807][ T9388] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1882'. [ 153.138435][ T9390] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1883'. [ 153.239425][ T9398] netlink: 'syz.2.1886': attribute type 10 has an invalid length. [ 153.338146][ T9403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.346814][ T9403] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.393733][ T9411] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1890'. [ 153.405363][ T9406] syzkaller0: entered promiscuous mode [ 153.410953][ T9406] syzkaller0: entered allmulticast mode [ 153.427514][ T9411] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1890'. [ 153.542932][ T9422] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 154.306177][ T9435] loop4: detected capacity change from 0 to 1024 [ 154.329607][ T9435] EXT4-fs: Ignoring removed orlov option [ 154.343502][ T9435] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 154.380251][ T9435] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840c018, mo2=0002] [ 154.389673][ T9435] System zones: 0-1, 3-12 [ 154.407145][ T9435] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.662212][ T3327] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.743271][ T9453] loop2: detected capacity change from 0 to 1024 [ 154.758559][ T9453] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 154.800387][ T9453] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 154.822978][ T9453] EXT4-fs (loop2): orphan cleanup on readonly fs [ 154.854623][ T9453] EXT4-fs error (device loop2): ext4_map_blocks:825: inode #3: block 3: comm syz.2.1904: lblock 3 mapped to illegal pblock 3 (length 1) [ 154.889327][ T9453] __quota_error: 120 callbacks suppressed [ 154.889345][ T9453] Quota error (device loop2): write_blk: dquota write failed [ 154.902731][ T9453] Quota error (device loop2): find_free_dqentry: Can't write quota data block 3 [ 154.930866][ T29] audit: type=1400 audit(2000000020.691:2204): avc: denied { read } for pid=9456 comm="syz.4.1903" name="usbmon8" dev="devtmpfs" ino=166 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 154.977439][ T29] audit: type=1400 audit(2000000020.691:2205): avc: denied { open } for pid=9456 comm="syz.4.1903" path="/dev/usbmon8" dev="devtmpfs" ino=166 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 154.991618][ T9457] 8021q: adding VLAN 0 to HW filter on device bond20 [ 155.001525][ T29] audit: type=1400 audit(2000000020.691:2206): avc: denied { ioctl } for pid=9456 comm="syz.4.1903" path="/dev/usbmon8" dev="devtmpfs" ino=166 ioctlcmd=0x9204 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 155.019784][ T9458] macsec2: entered promiscuous mode [ 155.033296][ T29] audit: type=1400 audit(2000000020.721:2207): avc: denied { write } for pid=9456 comm="syz.4.1903" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 155.038510][ T9458] bond20: entered promiscuous mode [ 155.038746][ T9458] macsec2: entered allmulticast mode [ 155.068708][ T9458] bond20: entered allmulticast mode [ 155.075286][ T9453] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 155.085619][ T9453] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.1904: Failed to acquire dquot type 0 [ 155.118780][ T9453] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #3: block 3: comm syz.2.1904: lblock 3 mapped to illegal pblock 3 (length 1) [ 155.141399][ T9461] loop4: detected capacity change from 0 to 128 [ 155.164745][ T9453] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 155.175793][ T9453] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.1904: Failed to acquire dquot type 0 [ 155.187691][ T9453] EXT4-fs error (device loop2): ext4_free_blocks:6728: comm syz.2.1904: Freeing blocks not in datazone - block = 0, count = 4096 [ 155.261654][ T9453] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #3: block 3: comm syz.2.1904: lblock 3 mapped to illegal pblock 3 (length 1) [ 155.317754][ T9453] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 155.350506][ T9453] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.1904: Failed to acquire dquot type 0 [ 155.350654][ T9453] EXT4-fs (loop2): 1 orphan inode deleted [ 155.351436][ T9453] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 155.389822][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.396954][ T274] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 155.396993][ T274] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.435885][ T9470] netlink: 'syz.2.1909': attribute type 10 has an invalid length. [ 155.458165][ T274] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 155.458269][ T274] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.464222][ T274] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 155.464261][ T274] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.472607][ T31] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 155.472681][ T31] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.510096][ T9470] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.510384][ T9470] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.590808][ T29] audit: type=1326 audit(2000000021.341:2208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9475 comm="syz.5.1910" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2ede3aacb9 code=0x0 [ 155.940679][ T9480] loop5: detected capacity change from 0 to 1024 [ 155.953496][ T9480] EXT4-fs: Ignoring removed orlov option [ 155.967754][ T9480] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 155.992600][ T9480] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840c018, mo2=0002] [ 155.992850][ T9480] System zones: 0-1, 3-12 [ 156.251726][ T9496] loop2: detected capacity change from 0 to 2048 [ 156.259729][ T9500] __nla_validate_parse: 8 callbacks suppressed [ 156.259785][ T9500] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1918'. [ 156.369674][ T9496] EXT4-fs error (device loop2): ext4_ext_precache:632: inode #2: comm syz.2.1916: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 156.478954][ T9506] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1920'. [ 156.483855][ T9506] netlink: 236 bytes leftover after parsing attributes in process `syz.5.1920'. [ 156.493368][ T9506] loop5: detected capacity change from 0 to 2048 [ 156.497001][ T4266] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 156.498225][ T4266] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 156.744809][ T9527] netlink: 'syz.5.1926': attribute type 10 has an invalid length. [ 156.800746][ T9528] lo speed is unknown, defaulting to 1000 [ 156.809256][ T9527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.832377][ T9528] lo speed is unknown, defaulting to 1000 [ 156.838940][ T9527] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.853002][ T9528] lo speed is unknown, defaulting to 1000 [ 156.974282][ T9528] infiniband syz1: set active [ 156.979085][ T9528] infiniband syz1: added lo [ 156.983659][ T4266] lo speed is unknown, defaulting to 1000 [ 157.007592][ T2969] usb 9-1: enqueue for inactive port 0 [ 157.013212][ T2969] usb 9-1: enqueue for inactive port 0 [ 157.024668][ T9528] RDS/IB: syz1: added [ 157.037503][ T9528] smc: adding ib device syz1 with port count 1 [ 157.066626][ T9528] smc: ib device syz1 port 1 has no pnetid [ 157.072907][ T4266] lo speed is unknown, defaulting to 1000 [ 157.087360][ T2969] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 157.095668][ T9528] lo speed is unknown, defaulting to 1000 [ 157.274789][ T9528] lo speed is unknown, defaulting to 1000 [ 157.427049][ T9528] lo speed is unknown, defaulting to 1000 [ 157.598184][ T9557] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1938'. [ 157.640398][ T9558] loop5: detected capacity change from 0 to 512 [ 157.652598][ T9545] loop4: detected capacity change from 0 to 1024 [ 157.662710][ T9528] lo speed is unknown, defaulting to 1000 [ 157.668970][ T9545] EXT4-fs: Ignoring removed orlov option [ 157.680661][ T9545] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 157.681496][ T9560] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 157.700734][ T9560] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.769167][ T9560] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 157.779220][ T9560] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.798563][ T9558] ext4 filesystem being mounted at /306/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 157.811625][ T9545] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840c018, mo2=0002] [ 157.821523][ T9545] System zones: 0-1, 3-12 [ 157.853581][ T9528] lo speed is unknown, defaulting to 1000 [ 157.861433][ T9560] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 157.871546][ T9560] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.919488][ T9560] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 157.929353][ T9560] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.956187][ T9558] lo speed is unknown, defaulting to 1000 [ 158.040726][ T37] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 158.049038][ T37] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.097389][ T37] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 158.105749][ T37] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.117696][ T9581] netlink: 'syz.2.1947': attribute type 10 has an invalid length. [ 158.140457][ T9582] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1946'. [ 158.147370][ T37] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 158.157721][ T37] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.176153][ T9581] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.184741][ T37] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 158.193040][ T37] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.208500][ T9581] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.363560][ T9594] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1950'. [ 158.438255][ T9597] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1952'. [ 158.472537][ T9602] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1954'. [ 158.517070][ T9602] bond15: option ad_actor_sys_prio: invalid value (0) [ 158.524013][ T9602] bond15: option ad_actor_sys_prio: allowed values 1 - 65535 [ 158.554269][ T9602] bond15 (unregistering): Released all slaves [ 158.571105][ T9607] loop5: detected capacity change from 0 to 1024 [ 158.578037][ T9607] EXT4-fs: Ignoring removed orlov option [ 158.584462][ T9607] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 158.598860][ T9607] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840c018, mo2=0002] [ 158.607141][ T9607] System zones: 0-1, 3-12 [ 158.641705][ T9612] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1955'. [ 158.794876][ T9624] netlink: 'syz.1.1961': attribute type 4 has an invalid length. [ 158.857322][ T9630] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1963'. [ 158.897858][ T9634] 9p: Bad value for 'wfdno' [ 158.941253][ T9636] netlink: 'syz.3.1966': attribute type 1 has an invalid length. [ 158.955763][ T9636] 8021q: adding VLAN 0 to HW filter on device bond9 [ 158.967226][ T9634] lo speed is unknown, defaulting to 1000 [ 159.143807][ T9651] loop2: detected capacity change from 0 to 764 [ 159.168196][ T9634] loop4: detected capacity change from 0 to 1024 [ 159.189174][ T9652] loop3: detected capacity change from 0 to 1024 [ 159.197546][ T9652] EXT4-fs: Ignoring removed orlov option [ 159.203393][ T9652] EXT4-fs: Ignoring removed nomblk_io_submit option [ 159.214197][ T9652] ext4: Unknown parameter 'subj_role' [ 159.220125][ T9634] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869) [ 159.230628][ T9634] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 159.243481][ T9634] EXT4-fs (loop4): invalid journal inode [ 159.249504][ T9634] EXT4-fs (loop4): can't get journal size [ 159.255888][ T9634] EXT4-fs error (device loop4): ext4_protect_reserved_inode:182: inode #2: comm syz.4.1965: blocks 48-48 from inode overlap system zone [ 159.270129][ T9634] EXT4-fs (loop4): failed to initialize system zone (-117) [ 159.277814][ T9634] EXT4-fs (loop4): mount failed [ 159.394487][ T9660] netlink: 'syz.3.1975': attribute type 1 has an invalid length. [ 159.504735][ T9670] loop4: detected capacity change from 0 to 2048 [ 159.607420][ T3412] usb usb10-port1: attempt power cycle [ 159.632430][ T9670] EXT4-fs error (device loop4): ext4_find_extent:939: inode #2: comm syz.4.1979: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 159.787479][ T9670] EXT4-fs error (device loop4): ext4_find_extent:939: inode #2: comm syz.4.1979: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 159.825034][ T9680] Cannot find set identified by id 0 to match [ 159.834703][ T53] Bluetooth: hci0: Frame reassembly failed (-84) [ 159.995497][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 159.995516][ T29] audit: type=1400 audit(2000000025.751:2216): avc: denied { create } for pid=9693 comm="syz.3.1989" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_netfilter_socket permissive=1 [ 160.025068][ T9694] netlink: 'syz.3.1989': attribute type 3 has an invalid length. [ 160.045518][ T9694] netlink: 'syz.3.1989': attribute type 3 has an invalid length. [ 160.053434][ T29] audit: type=1400 audit(2000000025.781:2217): avc: denied { write } for pid=9693 comm="syz.3.1989" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_netfilter_socket permissive=1 [ 160.093820][ T29] audit: type=1400 audit(2000000025.831:2218): avc: denied { create } for pid=9693 comm="syz.3.1989" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_socket permissive=1 [ 160.093913][ T29] audit: type=1400 audit(2000000025.831:2219): avc: denied { create } for pid=9693 comm="syz.3.1989" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=sctp_socket permissive=1 [ 160.093946][ T29] audit: type=1400 audit(2000000025.831:2220): avc: denied { setopt } for pid=9693 comm="syz.3.1989" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=sctp_socket permissive=1 [ 160.118830][ T29] audit: type=1400 audit(2000000025.881:2221): avc: denied { setopt } for pid=9701 comm="syz.4.1993" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 160.260353][ T9710] loop4: detected capacity change from 0 to 128 [ 160.262574][ T29] audit: type=1400 audit(2000000026.021:2222): avc: denied { associate } for pid=9708 comm="syz.4.1995" name="file1" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 160.262604][ T29] audit: type=1400 audit(2000000026.021:2223): avc: denied { mounton } for pid=9708 comm="syz.4.1995" path="mnt:[4026532389]" dev="nsfs" ino=4026532389 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 160.329656][ T9716] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 160.337279][ T29] audit: type=1400 audit(2000000026.091:2224): avc: denied { lock } for pid=9717 comm="syz.4.1998" path="socket:[29195]" dev="sockfs" ino=29195 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 160.358450][ T9716] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 160.398737][ T9720] netlink: 'syz.4.1999': attribute type 1 has an invalid length. [ 160.849744][ T9735] random: crng reseeded on system resumption [ 160.867460][ T29] audit: type=1400 audit(2000000026.631:2225): avc: denied { ioctl } for pid=9734 comm="syz.5.2005" path="/dev/snapshot" dev="devtmpfs" ino=90 ioctlcmd=0x3311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 160.899116][ T9735] loop5: detected capacity change from 0 to 128 [ 160.915060][ T9736] loop3: detected capacity change from 0 to 512 [ 160.922133][ T9736] EXT4-fs: Ignoring removed bh option [ 160.954774][ T9736] ext4 filesystem being mounted at /390/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 160.974914][ T9735] ext4 filesystem being mounted at /320/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 161.070859][ T9736] syzkaller0: entered promiscuous mode [ 161.076439][ T9736] syzkaller0: entered allmulticast mode [ 161.447335][ T3412] usb usb10-port1: unable to enumerate USB device [ 161.699559][ T3317] EXT4-fs unmount: 17 callbacks suppressed [ 161.699641][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.746588][ T9766] __nla_validate_parse: 12 callbacks suppressed [ 161.746607][ T9766] netlink: 92 bytes leftover after parsing attributes in process `syz.3.2014'. [ 161.877170][ T3714] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 161.955096][ T9774] netlink: 'syz.3.2016': attribute type 1 has an invalid length. [ 162.085811][ T9781] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2020'. [ 162.292736][ T9790] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2022'. [ 162.404324][ T9795] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2026'. [ 162.437804][ T9797] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 162.455696][ T9797] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2027'. [ 162.467952][ T9797] macsec1: entered allmulticast mode [ 162.473319][ T9797] geneve0: entered allmulticast mode [ 162.517184][ T9797] geneve0: left allmulticast mode [ 162.918008][ T9812] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2031'. [ 162.963017][ T9812] netlink: 120 bytes leftover after parsing attributes in process `syz.4.2031'. [ 163.004394][ T9812] program syz.4.2031 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 163.060019][ T9807] loop5: detected capacity change from 0 to 1024 [ 163.076977][ T9812] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 163.079081][ T9807] EXT4-fs: Ignoring removed orlov option [ 163.099846][ T9807] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 163.124961][ T9807] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840c018, mo2=0002] [ 163.133878][ T9807] System zones: 0-1, 3-12 [ 163.150979][ T9807] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.364055][ T9829] syzkaller0: entered promiscuous mode [ 163.369919][ T9829] syzkaller0: entered allmulticast mode [ 163.415600][ T4304] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.570708][ T9847] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2043'. [ 164.510194][ T9865] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2050'. [ 164.700479][ T9892] loop4: detected capacity change from 0 to 512 [ 164.801803][ T9892] can0: slcan on ttyS3. [ 164.976856][ T9896] can0 (unregistered): slcan off ttyS3. [ 164.996802][ T29] kauditd_printk_skb: 4211 callbacks suppressed [ 164.996849][ T29] audit: type=1326 audit(2000000030.751:6438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9853 comm="syz.2.2047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f67e73dc0d9 code=0x7ffc0000 [ 165.077092][ T29] audit: type=1326 audit(2000000030.791:6439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9853 comm="syz.2.2047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f67e7434ad7 code=0x7ffc0000 [ 165.100810][ T29] audit: type=1326 audit(2000000030.791:6440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9853 comm="syz.2.2047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f67e73dc0d9 code=0x7ffc0000 [ 165.124196][ T29] audit: type=1326 audit(2000000030.791:6441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9853 comm="syz.2.2047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f67e7434ad7 code=0x7ffc0000 [ 165.147729][ T29] audit: type=1326 audit(2000000030.791:6442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9853 comm="syz.2.2047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f67e73dc0d9 code=0x7ffc0000 [ 165.171113][ T29] audit: type=1326 audit(2000000030.791:6443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9853 comm="syz.2.2047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f67e7434ad7 code=0x7ffc0000 [ 165.194571][ T29] audit: type=1326 audit(2000000030.791:6444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9853 comm="syz.2.2047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f67e73dc0d9 code=0x7ffc0000 [ 165.217927][ T29] audit: type=1326 audit(2000000030.791:6445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9853 comm="syz.2.2047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f67e7434ad7 code=0x7ffc0000 [ 165.241447][ T29] audit: type=1326 audit(2000000030.791:6446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9853 comm="syz.2.2047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f67e73dc0d9 code=0x7ffc0000 [ 165.265114][ T29] audit: type=1326 audit(2000000030.791:6447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9853 comm="syz.2.2047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f67e7434ad7 code=0x7ffc0000 [ 165.367744][ T9915] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2060'. [ 165.827385][ T9944] lo speed is unknown, defaulting to 1000 [ 166.012595][ T9945] lo speed is unknown, defaulting to 1000 [ 166.328939][ T9956] 9p: Bad value for 'rfdno' [ 166.404153][ T9956] lo speed is unknown, defaulting to 1000 [ 166.599208][ T9967] loop4: detected capacity change from 0 to 256 [ 166.821783][ T9975] 9p: Bad value for 'wfdno' [ 166.905971][ T9982] __nla_validate_parse: 1 callbacks suppressed [ 166.905991][ T9982] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2078'. [ 166.918638][ T9981] loop5: detected capacity change from 0 to 1024 [ 166.982160][ T9981] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869) [ 167.009870][ T9981] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 167.065196][ T9981] EXT4-fs (loop5): invalid journal inode [ 167.096704][ T9981] EXT4-fs (loop5): can't get journal size [ 167.111456][ T9989] loop2: detected capacity change from 0 to 512 [ 167.124969][ T9981] EXT4-fs error (device loop5): ext4_protect_reserved_inode:182: inode #2: comm syz.5.2076: blocks 48-48 from inode overlap system zone [ 167.148771][ T9989] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 167.176967][ T9981] EXT4-fs (loop5): failed to initialize system zone (-117) [ 167.207647][ T9981] EXT4-fs (loop5): mount failed [ 167.228183][ T9989] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.2082: bad orphan inode 13 [ 167.245815][ T9995] loop3: detected capacity change from 0 to 512 [ 167.252609][ T9989] ext4_test_bit(bit=12, block=18) = 1 [ 167.258111][ T9989] is_bad_inode(inode)=0 [ 167.262339][ T9989] NEXT_ORPHAN(inode)=0 [ 167.266510][ T9989] max_ino=32 [ 167.269803][ T9989] i_nlink=1 [ 167.291044][ T9989] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 167.304254][ T9989] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.2082: Failed to acquire dquot type 1 [ 167.316301][ T9989] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.2082: Failed to acquire dquot type 1 [ 167.358932][ T9995] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.393413][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 167.420008][ T9995] ext4 filesystem being mounted at /404/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 167.551101][T10004] xt_TCPMSS: Only works on TCP SYN packets [ 167.609093][T10004] xt_limit: Overflow, try lower: 268435456/134217728 [ 167.616785][T10007] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2086'. [ 167.729171][T10011] 9p: Bad value for 'rfdno' [ 167.834660][T10013] lo speed is unknown, defaulting to 1000 [ 168.192333][T10028] loop5: detected capacity change from 0 to 256 [ 168.205336][T10025] loop2: detected capacity change from 0 to 256 [ 168.217882][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.343946][T10033] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2094'. [ 168.389418][T10042] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2098'. [ 168.477503][T10049] loop2: detected capacity change from 0 to 512 [ 168.510351][T10049] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.2100: inode has both inline data and extents flags [ 168.527929][T10054] 9p: Bad value for 'rfdno' [ 168.557116][T10049] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.2100: couldn't read orphan inode 15 (err -117) [ 168.597479][T10049] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.626921][T10056] netlink: 80 bytes leftover after parsing attributes in process `syz.5.2104'. [ 168.653981][T10054] lo speed is unknown, defaulting to 1000 [ 168.739161][T10049] can: request_module (can-proto-0) failed. [ 168.767229][T10049] netlink: 6 bytes leftover after parsing attributes in process `syz.2.2100'. [ 168.781851][T10049] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2858: Unable to expand inode 2. Delete some EAs or run e2fsck. [ 168.829056][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.168472][T10070] loop2: detected capacity change from 0 to 256 [ 170.101570][T10080] xt_CT: You must specify a L4 protocol and not use inversions on it [ 170.268489][ T29] kauditd_printk_skb: 6001 callbacks suppressed [ 170.268573][ T29] audit: type=1400 audit(2000000036.032:12444): avc: denied { mount } for pid=10087 comm="syz.1.2112" name="/" dev="configfs" ino=97 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 170.416539][T10090] loop3: detected capacity change from 0 to 2048 [ 170.444630][ T29] audit: type=1400 audit(2000000036.072:12445): avc: denied { search } for pid=10087 comm="syz.1.2112" name="/" dev="configfs" ino=97 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 170.466996][ T29] audit: type=1400 audit(2000000036.102:12446): avc: denied { search } for pid=10087 comm="syz.1.2112" name="/" dev="configfs" ino=97 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 170.489468][ T29] audit: type=1400 audit(2000000036.102:12447): avc: denied { read open } for pid=10087 comm="syz.1.2112" path="/" dev="configfs" ino=97 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 170.512079][ T29] audit: type=1400 audit(2000000036.102:12448): avc: denied { map } for pid=10087 comm="syz.1.2112" path="socket:[30998]" dev="sockfs" ino=30998 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 170.566909][ T3311] loop3: p2 p3 < > p4 < p5 > [ 170.571659][ T3311] loop3: partition table partially beyond EOD, truncated [ 170.581579][ T3311] loop3: p3 start 4284289 is beyond EOD, truncated [ 170.592121][T10095] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2115'. [ 170.619567][T10090] loop3: p2 p3 < > p4 < p5 > [ 170.624368][T10090] loop3: partition table partially beyond EOD, truncated [ 170.634406][T10097] lo speed is unknown, defaulting to 1000 [ 170.769169][T10090] loop3: p3 start 4284289 is beyond EOD, truncated [ 170.810161][ T3006] loop3: p2 p3 < > p4 < p5 > [ 170.814903][ T3006] loop3: partition table partially beyond EOD, truncated [ 170.843017][ T3006] loop3: p3 start 4284289 is beyond EOD, truncated [ 170.867264][ T3311] udevd[3311]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 170.889183][ T3310] udevd[3310]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 170.910845][ T29] audit: type=1400 audit(2000000036.672:12449): avc: denied { read } for pid=10112 comm="syz.3.2123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 170.937678][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory [ 170.981788][ T3310] udevd[3310]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 170.982060][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory [ 171.003836][ T3311] udevd[3311]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 171.014353][ T29] audit: type=1326 audit(2000000036.732:12450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10113 comm="syz.4.2124" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6839beacb9 code=0x0 [ 171.068006][T10118] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2125'. [ 171.241182][T10128] netlink: 80 bytes leftover after parsing attributes in process `syz.5.2130'. [ 171.336882][T10136] 9p: Bad value for 'rfdno' [ 171.371045][T10117] loop4: detected capacity change from 0 to 1024 [ 171.391403][T10117] EXT4-fs: Ignoring removed orlov option [ 171.405613][T10117] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 171.424325][T10136] lo speed is unknown, defaulting to 1000 [ 171.438302][T10117] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840c018, mo2=0002] [ 171.448250][T10117] System zones: 0-1, 3-12 [ 171.470626][T10117] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.494776][T10141] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2135'. [ 171.506654][T10141] syz.2.2135: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 171.521578][T10141] CPU: 1 UID: 0 PID: 10141 Comm: syz.2.2135 Not tainted syzkaller #0 PREEMPT(voluntary) [ 171.521664][T10141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 171.521678][T10141] Call Trace: [ 171.521686][T10141] [ 171.521694][T10141] __dump_stack+0x1d/0x30 [ 171.521723][T10141] dump_stack_lvl+0x95/0xd0 [ 171.521751][T10141] dump_stack+0x15/0x1b [ 171.521777][T10141] warn_alloc+0x145/0x1c0 [ 171.521825][T10141] __vmalloc_node_range_noprof+0xa0/0x12b0 [ 171.521859][T10141] ? __futex_wait+0x1fd/0x260 [ 171.521901][T10141] ? __pfx_futex_wake_mark+0x10/0x10 [ 171.521940][T10141] ? __rcu_read_unlock+0x4e/0x70 [ 171.521964][T10141] ? avc_has_perm_noaudit+0xab/0x130 [ 171.522072][T10141] ? should_fail_ex+0x30/0x280 [ 171.522094][T10141] ? should_failslab+0x8c/0xb0 [ 171.522125][T10141] vmalloc_user_noprof+0x7d/0xb0 [ 171.522199][T10141] ? xskq_create+0x80/0xe0 [ 171.522227][T10141] xskq_create+0x80/0xe0 [ 171.522343][T10141] xsk_init_queue+0x91/0xe0 [ 171.522378][T10141] xsk_setsockopt+0x3f5/0x640 [ 171.522406][T10141] ? __pfx_xsk_setsockopt+0x10/0x10 [ 171.522432][T10141] __sys_setsockopt+0x184/0x200 [ 171.522506][T10141] __x64_sys_setsockopt+0x64/0x80 [ 171.522542][T10141] x64_sys_call+0x21d5/0x3000 [ 171.522629][T10141] do_syscall_64+0xc0/0x2a0 [ 171.522659][T10141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.522681][T10141] RIP: 0033:0x7f67e743acb9 [ 171.522698][T10141] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 171.522723][T10141] RSP: 002b:00007f67e5e97028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 171.522773][T10141] RAX: ffffffffffffffda RBX: 00007f67e76b5fa0 RCX: 00007f67e743acb9 [ 171.522788][T10141] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 171.522805][T10141] RBP: 00007f67e74a8bf7 R08: 0000000000000004 R09: 0000000000000000 [ 171.522822][T10141] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 171.522840][T10141] R13: 00007f67e76b6038 R14: 00007f67e76b5fa0 R15: 00007ffeaab49778 [ 171.522867][T10141] [ 171.523014][T10141] Mem-Info: [ 171.735987][T10141] active_anon:29887 inactive_anon:1 isolated_anon:0 [ 171.735987][T10141] active_file:27589 inactive_file:2542 isolated_file:0 [ 171.735987][T10141] unevictable:16453 dirty:406 writeback:0 [ 171.735987][T10141] slab_reclaimable:3688 slab_unreclaimable:19520 [ 171.735987][T10141] mapped:41193 shmem:17943 pagetables:1569 [ 171.735987][T10141] sec_pagetables:0 bounce:0 [ 171.735987][T10141] kernel_misc_reclaimable:0 [ 171.735987][T10141] free:1799252 free_pcp:26274 free_cma:0 [ 171.782281][T10141] Node 0 active_anon:118736kB inactive_anon:4kB active_file:110356kB inactive_file:10168kB unevictable:65812kB isolated(anon):0kB isolated(file):0kB mapped:164772kB dirty:1624kB writeback:0kB shmem:70728kB kernel_stack:5232kB pagetables:6276kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 171.810419][T10141] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 171.840113][T10141] lowmem_reserve[]: 0 2879 7858 7858 [ 171.845543][T10141] Node 0 DMA32 free:2945488kB boost:0kB min:4128kB low:7056kB high:9984kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2949016kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:0kB free_cma:0kB [ 171.876892][T10141] lowmem_reserve[]: 0 0 4978 4978 [ 171.882193][T10141] Node 0 Normal free:4238376kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:116416kB inactive_anon:4kB active_file:110356kB inactive_file:10168kB unevictable:65812kB writepending:1624kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:102300kB local_pcp:38244kB free_cma:0kB [ 171.916242][T10141] lowmem_reserve[]: 0 0 0 0 [ 171.920882][T10141] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 171.933680][T10141] Node 0 DMA32: 4*4kB (M) 2*8kB (M) 3*16kB (M) 4*32kB (M) 4*64kB (M) 2*128kB (M) 3*256kB (M) 2*512kB (M) 4*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2945488kB [ 171.950020][T10141] Node 0 Normal: 3242*4kB (UM) 2239*8kB (UME) 1457*16kB (UME) 834*32kB (UME) 383*64kB (UME) 140*128kB (UM) 54*256kB (UME) 31*512kB (UM) 27*1024kB (UM) 27*2048kB (U) 978*4096kB (UM) = 4241840kB [ 171.969641][T10141] Node 0 hugepages_total=8 hugepages_free=0 hugepages_surp=4 hugepages_size=2048kB [ 171.979072][T10141] 62815 total pagecache pages [ 171.983783][T10141] 1 pages in swap cache [ 171.987979][T10141] Free swap = 124992kB [ 171.992159][T10141] Total swap = 124996kB [ 171.996373][T10141] 2097051 pages RAM [ 172.000243][T10141] 0 pages HighMem/MovableOnly [ 172.001281][ T3327] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.004975][T10141] 81397 pages reserved [ 172.052415][T10153] loop3: detected capacity change from 0 to 256 [ 172.335014][T10167] __nla_validate_parse: 1 callbacks suppressed [ 172.335034][T10167] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2144'. [ 172.431818][T10171] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2146'. [ 172.446391][ T29] audit: type=1400 audit(2000000038.192:12451): avc: denied { map } for pid=10170 comm="syz.3.2146" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 172.579330][T10178] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2149'. [ 172.606533][T10174] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2139'. [ 172.677917][T10151] loop5: detected capacity change from 0 to 1764 [ 172.687099][T10151] iso9660: Bad value for 'map' [ 172.693225][ T29] audit: type=1326 audit(2000000038.432:12452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10150 comm="syz.5.2139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ede3aacb9 code=0x7ffc0000 [ 172.716932][ T29] audit: type=1326 audit(2000000038.432:12453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10150 comm="syz.5.2139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ede3aacb9 code=0x7ffc0000 [ 172.871045][T10184] loop3: detected capacity change from 0 to 2048 [ 172.898648][T10184] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.948845][T10189] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 172.958826][T10189] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.978535][T10184] EXT4-fs error (device loop3): ext4_find_extent:939: inode #2: comm syz.3.2150: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 173.058357][T10189] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 173.068363][T10189] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.185128][T10189] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 173.195092][T10189] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.230848][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.255481][T10196] bond0: (slave bond_slave_1): Releasing backup interface [ 173.298170][T10189] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 173.308154][T10189] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.351115][T10198] 9p: Bad value for 'wfdno' [ 173.414295][T10198] lo speed is unknown, defaulting to 1000 [ 173.426542][T10201] loop3: detected capacity change from 0 to 1024 [ 173.434032][T10201] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869) [ 173.450523][T10201] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 173.497715][ T298] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.506053][ T298] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.517160][T10201] EXT4-fs (loop3): invalid journal inode [ 173.529651][ T298] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.538239][ T298] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.547565][T10203] vhci_hcd vhci_hcd.3: invalid port number 254 [ 173.555017][T10201] EXT4-fs (loop3): can't get journal size [ 173.564277][T10203] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2154'. [ 173.582084][ T298] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.590485][ T298] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.602549][T10201] EXT4-fs error (device loop3): ext4_protect_reserved_inode:182: inode #2: comm syz.3.2153: blocks 48-48 from inode overlap system zone [ 173.617704][T10203] loop2: detected capacity change from 0 to 1024 [ 173.627356][T10203] EXT4-fs: Ignoring removed nobh option [ 173.671550][ T298] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.679927][ T298] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.688346][T10203] EXT4-fs (loop2): unsupported inode size: 16384 [ 173.694792][T10203] EXT4-fs (loop2): blocksize: 1024 [ 173.755041][T10201] EXT4-fs (loop3): failed to initialize system zone (-117) [ 173.811092][T10201] EXT4-fs (loop3): mount failed [ 173.846528][T10209] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2157'. [ 173.930565][T10220] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2160'. [ 173.972232][T10212] lo speed is unknown, defaulting to 1000 [ 174.173478][T10247] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2171'. [ 174.260866][T10251] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2172'. [ 174.564117][T10261] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2175'. [ 174.763669][T10272] netlink: 'syz.2.2179': attribute type 9 has an invalid length. [ 174.927935][T10284] loop4: detected capacity change from 0 to 1024 [ 174.954931][T10284] EXT4-fs: Ignoring removed orlov option [ 174.984730][T10284] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 175.095686][T10284] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.120165][T10289] lo speed is unknown, defaulting to 1000 [ 175.167519][T10284] EXT4-fs error (device loop4): ext4_find_dest_de:2050: inode #12: block 7: comm syz.4.2184: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 175.250758][T10303] loop2: detected capacity change from 0 to 128 [ 175.278836][T10303] msdos: Unknown parameter ' ' [ 175.320124][ T3327] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.409377][T10311] loop4: detected capacity change from 0 to 1024 [ 175.422000][T10311] EXT4-fs: Ignoring removed orlov option [ 175.439721][T10316] loop3: detected capacity change from 0 to 128 [ 175.469388][T10311] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 175.595986][T10311] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.708499][ T29] kauditd_printk_skb: 79 callbacks suppressed [ 175.708518][ T29] audit: type=1400 audit(2000000041.472:12533): avc: denied { mounton } for pid=10310 comm="syz.4.2194" path="/465/file1/file0/file0" dev="loop4" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 176.017168][ T3327] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.088555][T10333] netlink: 'syz.1.2201': attribute type 2 has an invalid length. [ 176.115199][ T29] audit: type=1400 audit(2000000041.502:12534): avc: denied { execute } for pid=10310 comm="syz.4.2194" name="file0" dev="loop4" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 176.137939][ T29] audit: type=1400 audit(2000000041.502:12535): avc: denied { execute_no_trans } for pid=10310 comm="syz.4.2194" path="/465/file1/file0/file0" dev="loop4" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 176.216159][ T29] audit: type=1400 audit(2000000041.932:12536): avc: denied { mount } for pid=10334 comm="syz.2.2203" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 176.322250][T10337] netlink: 'syz.1.2201': attribute type 9 has an invalid length. [ 176.577492][T10355] 9pnet_fd: Insufficient options for proto=fd [ 176.756194][ T29] audit: type=1400 audit(2000000042.472:12537): avc: denied { connect } for pid=10363 comm="syz.1.2213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 176.776126][ T29] audit: type=1400 audit(2000000042.472:12538): avc: denied { map } for pid=10363 comm="syz.1.2213" path="socket:[31864]" dev="sockfs" ino=31864 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 176.823288][T10370] netlink: 'syz.4.2217': attribute type 9 has an invalid length. [ 176.833682][T10368] loop2: detected capacity change from 0 to 512 [ 176.869199][T10368] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 176.941971][ T29] audit: type=1400 audit(2000000042.702:12539): avc: denied { setopt } for pid=10377 comm="syz.1.2219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 176.991633][ T29] audit: type=1400 audit(2000000042.732:12540): avc: denied { watch watch_reads } for pid=10380 comm="syz.4.2220" path="/" dev="configfs" ino=97 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 177.059310][ T3321] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 177.069513][ T3321] FAT-fs (loop2): Filesystem has been set read-only [ 177.088116][ T3321] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 177.177159][T10393] loop4: detected capacity change from 0 to 2048 [ 177.219420][T10393] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.305869][T10393] EXT4-fs error (device loop4): ext4_find_extent:939: inode #2: comm syz.4.2228: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 177.365842][ T3327] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.450798][T10405] netlink: 'syz.5.2232': attribute type 10 has an invalid length. [ 177.487024][T10403] FAULT_INJECTION: forcing a failure. [ 177.487024][T10403] name failslab, interval 1, probability 0, space 0, times 0 [ 177.501325][T10403] CPU: 1 UID: 0 PID: 10403 Comm: syz.4.2229 Not tainted syzkaller #0 PREEMPT(voluntary) [ 177.501361][T10403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 177.501379][T10403] Call Trace: [ 177.501438][T10403] [ 177.501449][T10403] __dump_stack+0x1d/0x30 [ 177.501482][T10403] dump_stack_lvl+0x95/0xd0 [ 177.501512][T10403] dump_stack+0x15/0x1b [ 177.501540][T10403] should_fail_ex+0x263/0x280 [ 177.501571][T10403] should_failslab+0x8c/0xb0 [ 177.501671][T10403] kmem_cache_alloc_noprof+0x68/0x490 [ 177.501716][T10403] ? prepare_creds+0x38/0x550 [ 177.501737][T10403] prepare_creds+0x38/0x550 [ 177.501756][T10403] __sys_setuid+0x66/0x310 [ 177.501800][T10403] __x64_sys_setuid+0x1e/0x30 [ 177.501835][T10403] x64_sys_call+0x1563/0x3000 [ 177.501869][T10403] do_syscall_64+0xc0/0x2a0 [ 177.501906][T10403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.501966][T10403] RIP: 0033:0x7f6839beacb9 [ 177.501983][T10403] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 177.502008][T10403] RSP: 002b:00007f6838647028 EFLAGS: 00000246 ORIG_RAX: 0000000000000069 [ 177.502035][T10403] RAX: ffffffffffffffda RBX: 00007f6839e65fa0 RCX: 00007f6839beacb9 [ 177.502054][T10403] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000ee01 [ 177.502071][T10403] RBP: 00007f6838647090 R08: 0000000000000000 R09: 0000000000000000 [ 177.502093][T10403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 177.502141][T10403] R13: 00007f6839e66038 R14: 00007f6839e65fa0 R15: 00007fff8dfd5908 [ 177.502168][T10403] [ 177.689243][T10405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.697811][ T29] audit: type=1400 audit(2000000043.452:12541): avc: denied { mounton } for pid=10414 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 177.712909][T10410] __nla_validate_parse: 8 callbacks suppressed [ 177.712962][T10410] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2235'. [ 177.727444][T10405] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.849175][T10157] bond5 (unregistering): (slave ip6gretap1): Releasing backup interface [ 177.988535][T10157] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 177.998552][ T29] audit: type=1326 audit(2000000043.762:12542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10427 comm="syz.4.2238" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6839beacb9 code=0x0 [ 178.022439][T10157] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 178.038852][T10157] bond0 (unregistering): Released all slaves [ 178.047849][T10157] bond1 (unregistering): Released all slaves [ 178.074078][T10157] bond2 (unregistering): Released all slaves [ 178.090229][T10157] bond3 (unregistering): (slave veth3): Releasing backup interface [ 178.099977][T10157] bond3 (unregistering): Released all slaves [ 178.109156][T10157] bond4 (unregistering): Released all slaves [ 178.118392][T10157] bond5 (unregistering): Released all slaves [ 178.131984][T10442] loop4: detected capacity change from 0 to 1024 [ 178.138838][T10442] EXT4-fs: Ignoring removed orlov option [ 178.145319][T10442] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 178.171958][T10442] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840c018, mo2=0002] [ 178.180337][T10442] System zones: 0-1, 3-12 [ 178.185354][T10442] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 178.191671][T10157] bond6 (unregistering): Released all slaves [ 178.212008][T10157] bond7 (unregistering): Released all slaves [ 178.224027][T10157] bond8 (unregistering): Released all slaves [ 178.233723][T10447] loop3: detected capacity change from 0 to 2048 [ 178.243796][T10157] bond9 (unregistering): Released all slaves [ 178.270347][T10157] bond10 (unregistering): Released all slaves [ 178.283706][T10447] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.299985][T10157] bond11 (unregistering): Released all slaves [ 178.310747][T10157] bond12 (unregistering): Released all slaves [ 178.318108][T10447] EXT4-fs error (device loop3): ext4_find_extent:939: inode #2: comm syz.3.2240: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 178.338132][T10157] bond13 (unregistering): Released all slaves [ 178.428382][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.485178][T10465] program syz.3.2243 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 178.495314][T10466] program syz.3.2243 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 178.523656][T10157] hsr_slave_0: left promiscuous mode [ 178.535616][T10157] hsr_slave_1: left promiscuous mode [ 178.545368][T10157] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 178.600746][T10467] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2242'. [ 178.692259][T10414] lo speed is unknown, defaulting to 1000 [ 178.814622][ T3327] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.910804][T10500] netlink: 'syz.3.2251': attribute type 10 has an invalid length. [ 178.939022][T10414] chnl_net:caif_netlink_parms(): no params data found [ 178.989293][T10157] IPVS: stop unused estimator thread 0... [ 179.008152][T10500] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.024071][T10512] set_capacity_and_notify: 1 callbacks suppressed [ 179.024086][T10512] loop4: detected capacity change from 0 to 256 [ 179.046282][T10500] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.108023][T10414] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.115206][T10414] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.163282][T10414] bridge_slave_0: entered allmulticast mode [ 179.178054][T10414] bridge_slave_0: entered promiscuous mode [ 179.194688][T10414] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.201889][T10414] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.219211][T10414] bridge_slave_1: entered allmulticast mode [ 179.231576][T10414] bridge_slave_1: entered promiscuous mode [ 179.277773][T10533] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2255'. [ 179.290332][T10414] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 179.311313][T10414] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 179.354385][T10414] team0: Port device team_slave_0 added [ 179.372992][T10414] team0: Port device team_slave_1 added [ 179.390058][T10537] loop4: detected capacity change from 0 to 512 [ 179.402654][T10414] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 179.409722][T10414] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 179.435838][T10414] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 179.448153][T10414] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 179.455346][T10414] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 179.481517][T10414] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 179.502970][T10537] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.2256: inode has both inline data and extents flags [ 179.519011][T10537] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.2256: couldn't read orphan inode 15 (err -117) [ 179.534262][T10414] hsr_slave_0: entered promiscuous mode [ 179.540408][T10414] hsr_slave_1: entered promiscuous mode [ 179.546798][T10414] debugfs: 'hsr0' already exists in 'hsr' [ 179.552560][T10414] Cannot create hsr debugfs directory [ 179.554169][T10537] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 179.599484][T10537] can: request_module (can-proto-0) failed. [ 179.652610][ T3327] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.699302][T10553] loop6: detected capacity change from 0 to 7 [ 179.716719][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 179.726359][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 179.741478][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 179.751170][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 179.759243][T10553] loop6: unable to read partition table [ 179.761825][T10414] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 179.778145][T10414] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 179.785186][T10553] loop_reread_partitions: partition scan of loop6 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 179.800735][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 179.810377][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 179.820171][T10414] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 179.836158][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 179.845845][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 179.854161][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 179.858488][T10414] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 179.863814][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 179.878792][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 179.888410][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 179.896438][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 179.906239][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 179.915923][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 179.922470][T10556] batadv_slave_0: entered promiscuous mode [ 179.925963][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 179.931830][T10556] batadv_slave_0: entered allmulticast mode [ 179.940750][T10555] loop6: unable to read partition table [ 179.955942][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 179.965599][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 180.023291][T10574] bridge_slave_0: left allmulticast mode [ 180.029128][T10574] bridge_slave_0: left promiscuous mode [ 180.035029][T10574] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.054484][T10574] bridge_slave_1: left allmulticast mode [ 180.060479][T10574] bridge_slave_1: left promiscuous mode [ 180.066348][T10574] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.077470][T10574] bond0: (slave 5@): Releasing backup interface [ 180.105161][T10577] loop5: detected capacity change from 0 to 256 [ 180.114658][T10574] bond0: (slave bond_slave_1): Releasing backup interface [ 180.187322][T10574] team0: Port device team_slave_0 removed [ 180.207918][T10574] team0: Port device team_slave_1 removed [ 180.214751][T10574] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 180.222276][T10574] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 180.267267][T10574] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 180.319593][T10588] loop5: detected capacity change from 0 to 512 [ 180.334798][T10414] 8021q: adding VLAN 0 to HW filter on device bond0 [ 180.357458][T10414] 8021q: adding VLAN 0 to HW filter on device team0 [ 180.368941][T10588] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #15: comm syz.5.2266: inode has both inline data and extents flags [ 180.383242][ T2157] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.390370][ T2157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 180.404170][ T3761] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.411296][ T3761] bridge0: port 2(bridge_slave_1) entered forwarding state [ 180.419415][T10588] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.2266: couldn't read orphan inode 15 (err -117) [ 180.432049][T10588] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.525441][T10414] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 180.535988][T10414] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 180.559842][T10588] can: request_module (can-proto-0) failed. [ 180.578985][ T4304] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.699854][T10414] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.954704][T10414] veth0_vlan: entered promiscuous mode [ 180.976249][T10414] veth1_vlan: entered promiscuous mode [ 180.985935][T10620] netlink: 'syz.5.2270': attribute type 2 has an invalid length. [ 180.993741][T10620] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2270'. [ 181.013971][T10622] netlink: 'syz.3.2269': attribute type 10 has an invalid length. [ 181.040502][T10414] veth0_macvtap: entered promiscuous mode [ 181.059449][T10414] veth1_macvtap: entered promiscuous mode [ 181.069005][T10622] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.084691][T10414] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 181.092309][T10622] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.105726][T10414] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 181.147362][ T31] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.182359][ T31] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.207412][ T31] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.214931][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 181.214985][ T29] audit: type=1400 audit(2000000046.972:12546): avc: denied { mounton } for pid=10414 comm="syz-executor" path="/root/syzkaller.oGeN3g/syz-tmp" dev="sda1" ino=2049 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 181.236023][ T31] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.302208][ T29] audit: type=1400 audit(2000000047.022:12547): avc: denied { mounton } for pid=10414 comm="syz-executor" path="/root/syzkaller.oGeN3g/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 181.329400][ T29] audit: type=1400 audit(2000000047.022:12548): avc: denied { mounton } for pid=10414 comm="syz-executor" path="/root/syzkaller.oGeN3g/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=32595 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 181.357903][ T29] audit: type=1400 audit(2000000047.022:12549): avc: denied { mounton } for pid=10414 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 181.381093][ T29] audit: type=1400 audit(2000000047.022:12550): avc: denied { mount } for pid=10414 comm="syz-executor" name="/" dev="gadgetfs" ino=3978 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 181.430847][T10640] loop4: detected capacity change from 0 to 256 [ 181.475037][T10642] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2234'. [ 181.538895][T10655] 9p: Bad value for 'wfdno' [ 181.609312][T10664] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2281'. [ 181.625475][T10655] lo speed is unknown, defaulting to 1000 [ 181.638423][T10666] loop6: detected capacity change from 0 to 1024 [ 181.647797][T10666] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869) [ 181.685932][T10666] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 181.723626][T10666] EXT4-fs (loop6): invalid journal inode [ 181.762945][T10666] EXT4-fs (loop6): can't get journal size [ 181.792249][T10666] EXT4-fs error (device loop6): ext4_protect_reserved_inode:182: inode #2: comm syz.6.2278: blocks 48-48 from inode overlap system zone [ 181.801394][T10679] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2284'. [ 181.816142][T10666] EXT4-fs (loop6): failed to initialize system zone (-117) [ 181.823530][T10666] EXT4-fs (loop6): mount failed [ 181.870270][T10685] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2285'. [ 181.991512][T10692] loop3: detected capacity change from 0 to 1764 [ 182.012068][ T29] audit: type=1400 audit(2000000047.772:12551): avc: denied { mount } for pid=10691 comm="syz.3.2286" name="/" dev="loop3" ino=1920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 182.062965][T10696] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2288'. [ 182.145009][ T29] audit: type=1400 audit(2000000047.842:12552): avc: denied { unmount } for pid=3317 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 182.200632][T10699] loop4: detected capacity change from 0 to 2048 [ 182.234020][T10707] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2292'. [ 182.275469][T10699] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 182.380844][ T3327] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.407893][ T29] audit: type=1326 audit(2000000048.172:12553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10721 comm="syz.1.2298" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3b20ddacb9 code=0x0 [ 182.467199][T10726] netlink: 'syz.4.2297': attribute type 10 has an invalid length. [ 182.494278][T10729] loop5: detected capacity change from 0 to 512 [ 182.511327][T10726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.520427][T10726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.636472][T10729] ------------[ cut here ]------------ [ 182.642020][T10729] EA inode 11 i_nlink=2 [ 182.642048][T10729] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x313/0x350, CPU#0: syz.5.2301/10729 [ 182.657457][T10729] Modules linked in: [ 182.661403][T10729] CPU: 0 UID: 0 PID: 10729 Comm: syz.5.2301 Not tainted syzkaller #0 PREEMPT(voluntary) [ 182.671283][T10729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 182.681505][T10729] RIP: 0010:ext4_xattr_inode_update_ref+0x332/0x350 [ 182.688266][T10729] Code: f4 cd 9b ff 4c 8d 2d 0d 87 3f 05 49 8d 7e 40 e8 f4 7f b7 ff 49 8b 6e 40 4c 89 e7 e8 28 7b b7 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 02 ff ff ff e8 1f 4c c5 03 66 66 66 66 66 66 2e [ 182.708021][T10729] RSP: 0018:ffffc9000c0935a8 EFLAGS: 00010246 [ 182.714254][T10729] RAX: ffff88810da88a90 RBX: ffff88811b063688 RCX: ffffffff81bc76e8 [ 182.722327][T10729] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff86fbfde0 [ 182.730391][T10729] RBP: 000000000000000b R08: 000188811b06363b R09: 0000000000000000 [ 182.738462][T10729] R10: ffffc9000c0934d8 R11: 0001c9000c0934d8 R12: ffff88811b063638 [ 182.746684][T10729] R13: ffffffff86fbfde0 R14: ffff88811b0635f0 R15: 0000000000000001 [ 182.754885][T10729] FS: 00007f2edce076c0(0000) GS:ffff8882aeb7e000(0000) knlGS:0000000000000000 [ 182.763962][T10729] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 182.770662][T10729] CR2: 00007f6839c38400 CR3: 00000001d42f0000 CR4: 00000000003506f0 [ 182.778749][T10729] DR0: 0000000000000007 DR1: 0000000000000000 DR2: 0000000000000000 [ 182.786818][T10729] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 182.794872][T10729] Call Trace: [ 182.798347][T10729] [ 182.801351][T10729] ext4_xattr_set_entry+0x77c/0x1010 [ 182.806766][T10729] ext4_xattr_ibody_set+0x184/0x3c0 [ 182.812086][T10729] ext4_expand_extra_isize_ea+0xd7b/0x11a0 [ 182.818074][T10729] __ext4_expand_extra_isize+0x246/0x280 [ 182.823914][T10729] __ext4_mark_inode_dirty+0x29d/0x3f0 [ 182.829495][T10729] ext4_evict_inode+0x7c3/0xd40 [ 182.834499][T10729] ? __pfx_ext4_evict_inode+0x10/0x10 [ 182.840438][T10729] evict+0x2af/0x510 [ 182.844472][T10729] ? __dquot_initialize+0x146/0x7c0 [ 182.849817][T10729] iput+0x4b9/0x650 [ 182.853688][T10729] ext4_process_orphan+0x1a9/0x1c0 [ 182.858934][T10729] ext4_orphan_cleanup+0x6a8/0xa00 [ 182.864254][T10729] ext4_fill_super+0x3476/0x3800 [ 182.869296][T10729] ? set_blocksize+0x1a3/0x310 [ 182.874134][T10729] ? setup_bdev_super+0x30e/0x370 [ 182.879316][T10729] ? __pfx_ext4_fill_super+0x10/0x10 [ 182.884714][T10729] get_tree_bdev_flags+0x291/0x300 [ 182.889952][T10729] ? __pfx_ext4_fill_super+0x10/0x10 [ 182.895317][T10729] get_tree_bdev+0x1f/0x30 [ 182.900029][T10729] ext4_get_tree+0x1c/0x30 [ 182.904538][T10729] vfs_get_tree+0x57/0x1d0 [ 182.909074][T10729] do_new_mount+0x288/0x700 [ 182.913745][T10729] path_mount+0x4c0/0xb90 [ 182.918301][T10729] ? user_path_at+0xbf/0x130 [ 182.922969][T10729] __se_sys_mount+0x28c/0x2e0 [ 182.927897][T10729] __x64_sys_mount+0x67/0x80 [ 182.932633][T10729] x64_sys_call+0x2cca/0x3000 [ 182.937432][T10729] do_syscall_64+0xc0/0x2a0 [ 182.942065][T10729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.948125][T10729] RIP: 0033:0x7f2ede3abf4a [ 182.952764][T10729] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 182.972791][T10729] RSP: 002b:00007f2edce06e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 182.981388][T10729] RAX: ffffffffffffffda RBX: 00007f2edce06ee0 RCX: 00007f2ede3abf4a [ 182.989634][T10729] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f2edce06ea0 [ 182.997699][T10729] RBP: 0000200000000180 R08: 00007f2edce06ee0 R09: 0000000000800700 [ 183.005763][T10729] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 183.013784][T10729] R13: 00007f2edce06ea0 R14: 0000000000000484 R15: 000000000000002c [ 183.021842][T10729] [ 183.024974][T10729] ---[ end trace 0000000000000000 ]--- [ 183.089113][T10729] EXT4-fs (loop5): 1 orphan inode deleted [ 183.095552][T10729] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 183.186907][ T4304] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.196136][T10759] geneve2: entered promiscuous mode [ 183.286650][ T29] audit: type=1326 audit(2000000049.052:12554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10772 comm="syz.5.2306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ede3aacb9 code=0x7ffc0000 [ 183.334807][ T29] audit: type=1326 audit(2000000049.072:12555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10772 comm="syz.5.2306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=442 compat=0 ip=0x7f2ede3aacb9 code=0x7ffc0000 [ 183.470000][T10784] __nla_validate_parse: 2 callbacks suppressed [ 183.470021][T10784] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2310'. [ 183.591241][T10791] can: request_module (can-proto-0) failed. [ 183.690203][T10805] 9p: Bad value for 'wfdno' [ 183.710815][T10805] lo speed is unknown, defaulting to 1000 [ 183.924245][T10811] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869) [ 183.951400][T10813] netlink: 'syz.1.2319': attribute type 10 has an invalid length. [ 183.998298][T10811] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 184.040269][T10818] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 184.050197][T10818] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.052886][T10806] set_capacity_and_notify: 3 callbacks suppressed [ 184.053021][T10806] loop4: detected capacity change from 0 to 1024 [ 184.062562][T10811] EXT4-fs (loop5): invalid journal inode [ 184.074295][T10806] EXT4-fs: Ignoring removed orlov option [ 184.093276][T10806] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 184.110315][T10811] EXT4-fs (loop5): can't get journal size [ 184.119787][T10811] EXT4-fs error (device loop5): ext4_protect_reserved_inode:182: inode #2: comm syz.5.2317: blocks 48-48 from inode overlap system zone [ 184.146922][T10811] EXT4-fs (loop5): failed to initialize system zone (-117) [ 184.154359][T10806] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840c018, mo2=0002] [ 184.154758][T10811] EXT4-fs (loop5): mount failed [ 184.170986][T10806] System zones: 0-1, 3-12 [ 184.186119][T10806] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 184.223964][T10825] loop3: detected capacity change from 0 to 512 [ 184.224682][T10818] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 184.240162][T10818] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.280850][T10825] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.293872][T10825] ext4 filesystem being mounted at /447/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 184.308249][T10818] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 184.318134][T10818] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.356716][T10830] loop6: detected capacity change from 0 to 512 [ 184.366259][T10830] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #15: comm syz.6.2324: inode has both inline data and extents flags [ 184.368132][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.381112][T10830] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.2324: couldn't read orphan inode 15 (err -117) [ 184.404738][T10830] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 184.410039][T10818] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 184.426792][T10818] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.441040][T10830] can: request_module (can-proto-0) failed. [ 184.484817][T10837] loop3: detected capacity change from 0 to 512 [ 184.495060][T10837] EXT4-fs: Ignoring removed nomblk_io_submit option [ 184.504873][T10837] EXT4-fs: Ignoring removed orlov option [ 184.520551][ T31] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 184.529718][ T31] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.546182][ T3327] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.546441][T10414] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.558069][ T31] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 184.572667][ T31] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.602166][T10837] EXT4-fs error (device loop3): ext4_iget_extra_inode:5073: inode #15: comm syz.3.2325: corrupted in-inode xattr: bad e_name length [ 184.616501][T10837] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.2325: couldn't read orphan inode 15 (err -117) [ 184.631033][T10837] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 184.643192][ T31] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 184.652183][ T31] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.664670][T10845] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #2: block 12: comm syz.3.2325: lblock 3 mapped to illegal pblock 12 (length 1) [ 184.666184][ T31] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 184.687230][ T31] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.697720][T10819] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 184.707565][T10819] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.777263][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.788753][T10819] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 184.798683][T10819] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.825369][T10855] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2332'. [ 184.847616][T10819] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 184.857531][T10819] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.907748][T10858] lo speed is unknown, defaulting to 1000 [ 184.947302][T10819] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 184.957352][T10819] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.970107][T10861] loop4: detected capacity change from 0 to 1024 [ 184.992845][T10861] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869) [ 185.065700][T10861] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 185.085779][T10861] EXT4-fs (loop4): invalid journal inode [ 185.096053][T10861] EXT4-fs (loop4): can't get journal size [ 185.106032][T10861] EXT4-fs error (device loop4): ext4_protect_reserved_inode:182: inode #2: comm syz.4.2334: blocks 48-48 from inode overlap system zone [ 185.127017][T10861] EXT4-fs (loop4): failed to initialize system zone (-117) [ 185.158723][T10861] EXT4-fs (loop4): mount failed [ 185.279721][T10873] loop3: detected capacity change from 0 to 512 [ 185.302529][T10873] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.2338: inode has both inline data and extents flags [ 185.330516][T10873] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.2338: couldn't read orphan inode 15 (err -117) [ 185.346384][T10873] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 185.448926][T10873] can: request_module (can-proto-0) failed. [ 185.517328][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.558025][T10884] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2343'. [ 185.579632][T10884] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10884 comm=syz.4.2343 [ 185.593975][T10886] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2342'. [ 185.713143][T10890] geneve2: entered promiscuous mode [ 185.727303][T10890] 8021q: VLANs not supported on syzkaller1 [ 185.827644][T10900] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=1002 sclass=netlink_tcpdiag_socket pid=10900 comm=syz.6.2349 [ 185.840693][T10900] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=1001 sclass=netlink_tcpdiag_socket pid=10900 comm=syz.6.2349 [ 185.907613][T10907] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(16) [ 185.914288][T10907] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 185.921973][T10907] vhci_hcd vhci_hcd.0: Device attached [ 185.956248][T10907] vhci_hcd vhci_hcd.0: pdev(6) rhport(1) sockfd(18) [ 185.963189][T10907] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 185.971043][T10907] vhci_hcd vhci_hcd.0: Device attached [ 185.977819][T10907] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 185.995742][T10907] vhci_hcd vhci_hcd.0: pdev(6) rhport(4) sockfd(24) [ 186.002414][T10907] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 186.010161][T10907] vhci_hcd vhci_hcd.0: Device attached [ 186.046003][T10907] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(26) [ 186.052784][T10907] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 186.060547][T10907] vhci_hcd vhci_hcd.0: Device attached [ 186.094152][T10907] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 186.106836][T10907] vhci_hcd vhci_hcd.0: pdev(6) rhport(6) sockfd(30) [ 186.113551][T10907] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 186.121297][T10907] vhci_hcd vhci_hcd.0: Device attached [ 186.146096][T10907] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 186.165855][ T2969] usb 13-1: new high-speed USB device number 2 using vhci_hcd [ 186.173523][T10916] vhci_hcd: connection closed [ 186.173676][T10911] vhci_hcd: connection closed [ 186.178573][T10908] vhci_hcd: connection closed [ 186.183812][T10073] vhci_hcd vhci_hcd.6: stop threads [ 186.193825][T10073] vhci_hcd vhci_hcd.6: release socket [ 186.199465][T10073] vhci_hcd vhci_hcd.6: disconnect device [ 186.205706][T10909] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 186.216207][T10914] vhci_hcd: connection closed [ 186.234774][T10073] vhci_hcd vhci_hcd.6: stop threads [ 186.244843][T10073] vhci_hcd vhci_hcd.6: release socket [ 186.250296][T10073] vhci_hcd vhci_hcd.6: disconnect device [ 186.261483][T10073] vhci_hcd vhci_hcd.6: stop threads [ 186.266927][T10073] vhci_hcd vhci_hcd.6: release socket [ 186.272453][T10073] vhci_hcd vhci_hcd.6: disconnect device [ 186.279568][T10073] vhci_hcd vhci_hcd.6: stop threads [ 186.284821][T10073] vhci_hcd vhci_hcd.6: release socket [ 186.290462][T10073] vhci_hcd vhci_hcd.6: disconnect device [ 186.315833][T10922] loop4: detected capacity change from 0 to 512 [ 186.335689][T10922] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.2352: inode has both inline data and extents flags [ 186.375997][T10922] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.2352: couldn't read orphan inode 15 (err -117) [ 186.452308][T10922] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 186.471966][T10933] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2358'. [ 186.509443][ T29] kauditd_printk_skb: 78 callbacks suppressed [ 186.509462][ T29] audit: type=1400 audit(2000000052.272:12634): avc: denied { read } for pid=10934 comm="syz.3.2356" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 186.539008][ T29] audit: type=1400 audit(2000000052.272:12635): avc: denied { open } for pid=10934 comm="syz.3.2356" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 186.563369][T10922] can: request_module (can-proto-0) failed. [ 186.569557][ T29] audit: type=1400 audit(2000000052.332:12636): avc: denied { ioctl } for pid=10934 comm="syz.3.2356" path="/dev/nvram" dev="devtmpfs" ino=98 ioctlcmd=0x9377 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 186.609405][ T3327] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.721502][T10919] vhci_hcd: connection closed [ 186.721833][ T37] vhci_hcd vhci_hcd.6: stop threads [ 186.721856][ T37] vhci_hcd vhci_hcd.6: release socket [ 186.721881][ T37] vhci_hcd vhci_hcd.6: disconnect device [ 187.037774][T10964] loop6: detected capacity change from 0 to 128 [ 187.057433][T10964] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 187.095791][T10964] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 187.153991][ T29] audit: type=1400 audit(2000000052.912:12637): avc: denied { map } for pid=10941 comm="syz.3.2361" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 187.231752][ T29] audit: type=1400 audit(2000000052.912:12638): avc: denied { execute } for pid=10941 comm="syz.3.2361" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 187.256272][ T29] audit: type=1326 audit(2000000052.972:12639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10970 comm="syz.6.2370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f6bcaacb9 code=0x7ffc0000 [ 187.279973][ T29] audit: type=1326 audit(2000000052.972:12640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10970 comm="syz.6.2370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f6bcaacb9 code=0x7ffc0000 [ 187.291011][T10973] netlink: 'syz.4.2371': attribute type 10 has an invalid length. [ 187.303733][ T29] audit: type=1326 audit(2000000052.972:12641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10970 comm="syz.6.2370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f0f6bcaacb9 code=0x7ffc0000 [ 187.335213][ T29] audit: type=1326 audit(2000000052.982:12642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10970 comm="syz.6.2370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f6bcaacb9 code=0x7ffc0000 [ 187.358921][ T29] audit: type=1326 audit(2000000052.982:12643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10970 comm="syz.6.2370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=207 compat=0 ip=0x7f0f6bcaacb9 code=0x7ffc0000 [ 187.456183][T10976] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.626606][T10976] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.724958][T10984] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 187.739187][T10984] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2375'. [ 187.794933][T10990] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2376'. [ 187.913159][T10992] lo speed is unknown, defaulting to 1000 [ 187.953042][ T274] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.961427][ T274] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.976772][ T274] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.985050][ T274] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.040949][ T31] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 188.049836][ T31] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.091780][ T31] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 188.100702][ T31] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.292425][T11004] macvlan1: entered promiscuous mode [ 188.316259][T11008] sctp: [Deprecated]: syz.6.2380 (pid 11008) Use of int in max_burst socket option. [ 188.316259][T11008] Use struct sctp_assoc_value instead [ 188.331043][T11004] macvlan1: left promiscuous mode [ 188.341478][T11008] sctp: [Deprecated]: syz.6.2380 (pid 11008) Use of struct sctp_assoc_value in delayed_ack socket option. [ 188.341478][T11008] Use struct sctp_sack_info instead [ 188.367190][T11009] loop3: detected capacity change from 0 to 512 [ 188.376410][T11009] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #15: comm syz.3.2382: corrupted inode contents [ 188.458770][T11009] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 188.530231][T11009] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #15: comm syz.3.2382: corrupted inode contents [ 188.591926][T11009] EXT4-fs error (device loop3): ext4_evict_inode:301: inode #15: comm syz.3.2382: mark_inode_dirty error [ 188.616068][T11009] EXT4-fs (loop3): 1 orphan inode deleted [ 188.622328][T11009] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 188.815771][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.839973][T11040] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2395'. [ 188.849020][T11040] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2395'. [ 188.851200][T11044] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2397'. [ 188.858029][T11040] netlink: 176 bytes leftover after parsing attributes in process `syz.1.2395'. [ 188.871146][T11044] tipc: Started in network mode [ 188.876210][T11040] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2395'. [ 188.881108][T11044] tipc: Node identity , cluster identity 4711 [ 188.896184][T11044] tipc: Failed to obtain node identity [ 188.901726][T11044] tipc: Enabling of bearer rejected, failed to enable media [ 188.928707][T11046] netlink: 72 bytes leftover after parsing attributes in process `syz.6.2398'. [ 189.611612][T11093] ================================================================== [ 189.619815][T11093] BUG: KCSAN: data-race in __lru_add_drain_all / folios_put_refs [ 189.627595][T11093] [ 189.629957][T11093] write to 0xffff888237c26468 of 1 bytes by task 10956 on cpu 0: [ 189.637708][T11093] folios_put_refs+0x285/0x2d0 [ 189.642530][T11093] folio_batch_move_lru+0x247/0x270 [ 189.647771][T11093] folio_add_lru+0x149/0x1e0 [ 189.652409][T11093] shmem_get_folio_gfp+0x7b0/0xd60 [ 189.657573][T11093] shmem_write_begin+0xfc/0x1f0 [ 189.662475][T11093] generic_perform_write+0x183/0x490 [ 189.667819][T11093] shmem_file_write_iter+0xc5/0xf0 [ 189.673084][T11093] __kernel_write_iter+0x319/0x590 [ 189.678253][T11093] dump_user_range+0x63e/0x8f0 [ 189.683070][T11093] elf_core_dump+0x21a2/0x2330 [ 189.687888][T11093] coredump_write+0xacf/0xdf0 [ 189.692620][T11093] vfs_coredump+0x26bc/0x3120 [ 189.697349][T11093] get_signal+0xd7b/0xf60 [ 189.701728][T11093] arch_do_signal_or_restart+0x96/0x450 [ 189.707407][T11093] irqentry_exit+0xf7/0x510 [ 189.711957][T11093] asm_exc_page_fault+0x26/0x30 [ 189.716844][T11093] [ 189.719193][T11093] read to 0xffff888237c26468 of 1 bytes by task 11093 on cpu 1: [ 189.726850][T11093] __lru_add_drain_all+0x17e/0x450 [ 189.732026][T11093] lru_cache_disable+0x1f/0x30 [ 189.736839][T11093] __se_sys_mbind+0x491/0xb30 [ 189.741652][T11093] __x64_sys_mbind+0x78/0x90 [ 189.746276][T11093] x64_sys_call+0x2a2b/0x3000 [ 189.750989][T11093] do_syscall_64+0xc0/0x2a0 [ 189.755519][T11093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.761610][T11093] [ 189.763943][T11093] value changed: 0x15 -> 0x00 [ 189.768636][T11093] [ 189.770976][T11093] Reported by Kernel Concurrency Sanitizer on: [ 189.777149][T11093] CPU: 1 UID: 0 PID: 11093 Comm: syz.5.2404 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 189.788547][T11093] Tainted: [W]=WARN [ 189.792377][T11093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 189.802628][T11093] ================================================================== [ 191.305385][ T2969] vhci_hcd vhci_hcd.6: vhci_device speed not set