last executing test programs: 1m27.717442026s ago: executing program 0 (id=47): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000001000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000180)={[{@errors_remount}]}, 0xfe, 0x274, &(0x7f0000000980)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x50) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000a40)={0x20, r1, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x800) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4c) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) creat(0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x44, 0x8604, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fef, 0x1, @perf_config_ext={0x9, 0x9}, 0x8000, 0x10000, 0x0, 0x3, 0x6916, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, &(0x7f0000000240)) open(0x0, 0x4a003, 0x0) creat(&(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x154) link(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1m27.14838422s ago: executing program 0 (id=58): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x4, 0xa}, {}, {0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x1, 0xb}}]}}]}, 0x4c}, 0x1, 0xf2ff, 0x0, 0x8858}, 0x20004804) 1m26.914427943s ago: executing program 0 (id=64): r0 = syz_io_uring_setup(0x49e, &(0x7f0000000700)={0x0, 0x8eb7, 0x3381, 0x2, 0x60024d}, &(0x7f00000003c0), &(0x7f0000000040)) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f0000000480)=[{0x80, 0x7, 0x0, 0x7}, {0x80, 0xff, 0x3}, {0x6, 0x0, 0xff}]}) (async) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x64, 0x0, 0x0, &(0x7f0000000200), 0x100}, 0x40000000) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xb8}, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) syz_clone(0x43160000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_NAPI(r0, 0x1b, 0x0, 0x1) 1m26.63413221s ago: executing program 0 (id=72): r0 = syz_mount_image$iso9660(&(0x7f00000001c0), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[], 0x2, 0x5ce, &(0x7f0000000980)="$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") r1 = open(&(0x7f0000000240)='.\x00', 0x0, 0x1b0) unshare(0x8000280) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) ioctl$EXT4_IOC_MIGRATE(r3, 0xff08) getdents(r1, &(0x7f00000002c0)=""/196, 0xc4) preadv2(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/78, 0x4e}], 0x1, 0x9, 0x40, 0x22) 1m26.514071327s ago: executing program 0 (id=74): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) write$binfmt_elf32(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c4601079704080000000000000002000600010000004300000038000000c0010000030000000100200002"], 0x78) close(r0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$cgroup_int(r0, &(0x7f0000000000)=0x100, 0x12) 1m26.281905651s ago: executing program 0 (id=78): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x12, 0x4, 0x4, 0x5, 0x0, 0x1}, 0x50) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000014c0)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="05"], 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@map=r0, 0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x51, &(0x7f0000000180)={[{@errors_remount}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x40}}, {@norecovery}, {@commit={'commit', 0x3d, 0x5}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xb760}}]}, 0x8, 0x610, &(0x7f0000000200)="$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") 1m26.255582392s ago: executing program 32 (id=78): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x12, 0x4, 0x4, 0x5, 0x0, 0x1}, 0x50) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000014c0)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="05"], 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@map=r0, 0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x51, &(0x7f0000000180)={[{@errors_remount}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x40}}, {@norecovery}, {@commit={'commit', 0x3d, 0x5}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xb760}}]}, 0x8, 0x610, &(0x7f0000000200)="$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") 1.760320656s ago: executing program 3 (id=1638): r0 = socket$netlink(0x10, 0x3, 0x8000000004) unshare(0x22020600) unshare(0x100) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0x1, 0x3, 0xbec, 0x7}, 0x50) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB="78000000100003042bbd70000000000000000400", @ANYRES32=0x0, @ANYBLOB="00030000000000005000128009000100766c616e00000000400002800600010002000000340004800c000100ff030000080000000c00010000000000e1c5ffff0c00010800040000000000000c000100070000000900000008000500", @ANYRES32=r4], 0x78}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0xfffffeed}]}]}], {0x14}}, 0x68}}, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, r1}, 0x38) socket$kcm(0xa, 0x2, 0x106) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001200192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800034004000000", 0x58}], 0x1) 1.630309484s ago: executing program 3 (id=1641): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x81, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x80049367, &(0x7f00000001c0)) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="c80000000002010400000000010000000a0000033c0003800c00028005000100000000002c00018014000300fe80000000000000000000000000002414000400000000000000000000000000000000003c0002802c00018014000300fc00000000000000000000000000000014000400fc0100000000000000000000000000010c00028005000100000000003c0001800c000280040001003a0000002c00018014000300fc01000000000000000000000000000014000400"], 0xc8}, 0x1, 0x0, 0x0, 0x10}, 0x8000) r4 = socket(0x2b, 0x80801, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000500)=@can_delroute={0x34, 0x19, 0x1, 0xfffffffe, 0x80000, {0x1d, 0x1, 0x7}, [@CGW_MOD_XOR={0x15, 0x3, {{{0x2, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "49fd003900"}, 0x4}}, @CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffff7, 0x4, 0x2, 0xcc}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r4, 0x0, 0x42, &(0x7f0000000080)={'ipvs\x00'}, &(0x7f0000000140)=0x1e) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYRES64=0x0], 0x1, 0x3ab, &(0x7f0000000bc0)="$eJzs3U9PXGUXAPAz05YB3heGhTFRY3xSN7qZAH6BEtMmRhIN7ZjqwuRWBp0wZcjMBDPEWHZu/RyNS3cmxi/Aou7duWPjsoum1zB/ygCVqh2YNv5+CdzDPM/JPXMvc3M2cA5uf393c6Nd2cg6UbyWohgRxYcRC72orzA4FnvxVIzai3fLt3978+ann324srp6fS2lGyu33ltOKc2/9fPX3/xw9ZfO/z75cf6nUuwvfH7wx/Lv+6/uv3bw+NZX9Xaqt9NWs5OydKfZ7GR3GrW0Xm9vVlL6uFHL2rVU32rXWsfWNxrN7e29yLbW52a3W7V2O2Vb3bRZ66ZOM3Va3ZR9mdW3UqVSSXOzwb1nrFfvr61lK/14+ox918ZZFGN3+czVVmslO/wMl06tVO+fY1EAwAvqeP8f/6T/3zv8NnWy/785WP1X/f+V+Bv9fzfp/8dktP8fKJzaNHOBBXEODvv/qcHnd0RJ/w8AAAAAAAAAAAAAAC+Hh3lezvO8PDzmpYgoDP6eOM/Lk66P83Xq/p/4mnR9nK+Rf9wxHdH4bqe6U+0f++srG1GPRtRiMcrx6PCRMNSPb3ywen0xIqWUCjF3914v/+qDiOql4/lLUY6Fkfzp3vOll7+U+gb588PaZkfzl6Mcrzz9/HnpWH414vA4Fe+8PZJfiXL8+kU0oxHrvVMf5X+7lNL7H62eyC/19gEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADw31BJQ29Ef+79TjViJnYG8/srRxsKg5TBfPz+D0/m6y9GOR49fT7/YsovnZ7Pfzlevzy59w0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAo9rd3c2s0ai1LioYzvzvvTI1DP46q9DfvndiaSaeda4HveDSmIovjusiPM7z/Lwu7/TF3srnCa5EnHUH88FvyfOf6/8RccaeUkRM/mq8iMGknkgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwOUdDvyddCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJPU7u5uZo1GrdXu7hZjEDx5ZTzBpN8jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAy+TPAAAA//91jwgX") setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r6, &(0x7f00000000c0)='a', 0x200000c1, 0x404043000) r7 = epoll_create(0x1ff) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r1, &(0x7f0000000980)={0x40000000}) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0x8, 0x3, 0x4e8, 0x340, 0x11, 0x148, 0x340, 0x0, 0x450, 0x2a8, 0x2a8, 0x450, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @fd}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'pim6reg\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x81}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x4f, 0x7, "72f6daeff0a9c6294e211d2d88fe6dcff5d0e552201da3b7a1fdb30dcb59"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x550) 1.454058184s ago: executing program 4 (id=1642): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x6, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.dequeue\x00', 0x275a, 0x0) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x20002f7}) 1.451803604s ago: executing program 4 (id=1643): socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x84000, 0x0) r0 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00'}) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001e0000000c0001800800", @ANYRES32], 0x20}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000300000001000000", @ANYRES32, @ANYBLOB="00000000000000ed070778000000000000000000", @ANYRES32=0x0, @ANYRES32], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe}, [@call={0x85, 0x0, 0x0, 0x50}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100", @ANYRES16, @ANYRES8], 0x7c}}, 0x4040000) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c0002"], 0xdc}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) setsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000100)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) sendto$inet6(r3, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$eJzs3c9vVFsdAPDvnXZoKQMFZaFGBRFFQ5j+ABqCC2GjMYTESFy5gNoOTdMZpum0SCuLsnRvIokr/RPcuTBh5cKdO925wYUJKnkv9CVvMS/3zqUd2g7te7Qd6Hw+ye2955xhvufMcM6Ze2B6AuhZZyNiNSKORMS9iBjO85P8iButI33cq5ePp9ZePp5Kotm8878kK0/zou3PpI7lzzkYET/7ccQvk61xG8src5PVamUhT48s1uZHGssrl2YLec74xNjE6LXLV8f3rK1nan968aPZWz//y5+/8fzvq9//dVqt0m+OZ2Xt7dhLraYXo9SW1x8Rt/YjWJf0539/+PCkve1LEXEu6//D0Ze9mwDAYdZsDkdzuD0NABx26f1/KZJCOV8LKEWhUC631vBOx1ChWm8sXhyuLz2YjmwN62QUC/dnq5XRfK3wZBSTND2WXW+kxzelL0fEqYj47cDRLF2eqlenu/nBBwB62LFN8//HA635HwA45Aa7XQEA4MCZ/wGg95j/AaD3fI7537cDAeCQcP8PAL3H/A8AvWfH+f/JwdQDADgQP719Oz2aa/nvv55+uLz0g9LDS9OVxly5tjRVnqovzJdn6vWZaqU81Wzu9HzVen1+7Mp6srG8crdWX3qweHe2NjlTuVsp7nN7AICdnTrz7J9JRKxeP5od0baXg7kaDrdCtysAdE1ftysAdI3v80Dv2sU9vmUAOOS22aL3DR3/i9BTm7/Ch+rCV63/Q6+y/g+964ut//9wz+sBHDzr/9C7ms3Env8A0GOs8QPv9O//AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0KNK2ZEUytle4Kvpz0K5HHE8Ik5GMbk/W62MRsSJiPjHQHEgTY91u9IAwDsq/CfJ9/+6MHy+tLn0SPLJQHaOiF/9/s7vHk0uLi6Mpfn/X89ffJrnjx/pRgMAgHY3tma15un83HYj/+rl46nXx0FW8cXN1uaiady1/GiV9Ed/dh6MYkQMfZTk6Zb080rfHsRffRIRX9lo/6O2CKVsDaS18+nm+Gns4/sQf+P13xy/8Eb8QlaWnovZa/HlPagL9JpnN1vjZN730i6W979CnM3O2/f/wWyEenevx7+1LeNfYX3869sSP8n6/Nn19Ntr8uLKX3+yJbM53Cp7EvG1/u3iJ+vxkw7j7/ldtvFfX//muU5lzT9EXIjt47fUsmF2ZLE2P9JYXrk0W5ucqcxUHoyPT4xNjF67fHV8JFujbv3823Yx/nv94olO8dP2D3WIP7hD+7+zy/b/8dN7v/jWW+J/79vbv/+n3xI/nRO/u8v4k0M3Om7fncaf7tD+nd7/i7uM//zfK9O7fCgAcAAayytzk9VqZWGHi/Sz5k6PcfFhXsRqxHtQDRfv1UW3RyZgv210+m7XBAAAAAAAAAAAAAAA6KSxvDI3EPv7daJutxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDD67MAAAD//w/PzvM=") lsetxattr$trusted_overlay_upper(&(0x7f0000000080)='./file1\x00', &(0x7f0000000840), &(0x7f0000000940)=ANY=[], 0x361, 0x1) socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_setup(0x10f, 0x0, &(0x7f00000001c0), 0x0) accept$unix(0xffffffffffffffff, 0x0, 0x0) stat(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000180)='./file1\x00', r4, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x800000, 0x11, r3, 0x7ac87000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000640)=""/4051, 0xfd3, 0x0, 0x0}, &(0x7f0000000180)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000380)=0x40) 1.368266489s ago: executing program 4 (id=1645): mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="290000002000190f00003fffffffda060a00008bfee80001dd0048040d000600fe7f00000005000500", 0x29}], 0x1) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x401, 0x800000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x62040}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_STATS_PER_PORT={0x5, 0x2d, 0x40}]}}}]}, 0x3c}}, 0x4000002) 1.284385764s ago: executing program 2 (id=1647): r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000100)='rxrpc\x00', 0x0, &(0x7f0000000280)="0000000000000004ff6943b80000000800000028f2000000008607000000ebb01f63dd65dd530700a28f2cbf86f474fad8cb594ed9fabe9ec277bb8d0000009c238532dd4c6ee9eddd58a599264432dc88941a476f8674c3b25a20e8d25504d773dd523add126ab51ca15c9d0436b3d0164bda8d9ed4e88158a20d3c55bd06050b964a5503bd0ef4b3a0823ad11bfae501057d95ba3e8d12893e6201c24e96b3031a817db4aa92e708a23ec370714940856977cb6f99f8ddc11996d1d5587f9c325bf5c2f77088d08a05af40a5392711377de42a66c2adee5a0612b9", 0xdc, r0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000000100)) readv(r2, &(0x7f0000003400)=[{0x0}, {&(0x7f00000003c0)=""/4096, 0x1000}, {0x0, 0xffffffab}, {0x0}, {0x0}], 0x5) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@ipv6_newroute={0x34, 0x18, 0x111, 0x1, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8}, [@RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_ID={0xc, 0x1, 0x8}}, @RTA_EXPIRES={0x8, 0x17, 0xffffffff}]}, 0x34}, 0x1, 0x0, 0x0, 0x4805}, 0x4) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003240)=@newtfilter={0x1ec4, 0x2c, 0xd27, 0x70bd28, 0x25df9bfb, {0x0, 0x0, 0x0, 0x0, {0xb, 0x6}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0x54, 0x2, [@TCA_ROUTE4_ACT={0x50, 0x6, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x5, 0x20, 0x7, 0x8}, 0x39}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}, @filter_kind_options=@f_matchall={{0xd}, {0x1e30, 0x2, [@TCA_MATCHALL_ACT={0xcc, 0x2, [@m_bpf={0xc8, 0x16, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x4}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x37c4, 0x2, 0x3, 0x101, 0x1}}]}, {0x75, 0x6, "f3136875f5994d00e89ab7d81b4a88bd64dd156909d093c2378d730545c0e51e81e73142973c9629ddc623029fba672bc69657a2d14954b688dd41684620ce8ce413873eca21120ea5894dbb0a038b56f957c852f872b5375c664a99ee249bbe5225f2290fb315281a2355fd55438325f2"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x6}}}}]}, @TCA_MATCHALL_ACT={0x1d60, 0x2, [@m_simple={0x94, 0x1e, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x8, 0x3, '-$:\x00'}]}, {0x5f, 0x6, "700ef56e931e7d4e6309f48af4dbee926775384b74210bf253ad39d8999dee493c7084630de04bb58bd913a05778be0d56ee8b506a965467c77b1a081114e0f5721c924c3a17353eb42c4ac7a935bb720d2397b88eea1e0ce00113"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_nat={0xe78, 0x18, 0x0, 0x0, {{0x8}, {0x4}, {0xe4d, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0xe50, 0x2, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x200, 0x1, 0x10000000, 0xc, 0x4}, 0xb3, 0x40}, [{0xb, 0x9, 0x8, 0x3, 0x81, 0x8}, {0x9, 0x4, 0xfffffffa, 0x8001, 0x40, 0x8}, {0xfffffeff, 0x9, 0xdcc, 0x3, 0xb, 0x2}, {0x4, 0x400, 0x0, 0x0, 0x0, 0x7}, {0x0, 0xc, 0x18000000, 0xffff9c46, 0x2, 0x400}, {0x7, 0x3, 0xe08, 0xffffffff, 0xb, 0x6}, {0x7, 0x0, 0xfffffc00, 0x5, 0xfffffff5, 0x7d2a}, {0x9, 0x8, 0xfffffff9, 0x10001, 0x0, 0x8}, {0x23, 0x10, 0x2, 0x1, 0x7fff, 0x8}, {0x7, 0x69, 0x6, 0x800, 0x1, 0x3}, {0x9, 0x1, 0x2, 0x9, 0x2, 0x2b}, {0x3, 0x5, 0xfffffff7, 0x7, 0xcf4c, 0x7}, {0x5, 0x3, 0x96800000, 0x9, 0xc86, 0x9}, {0x9, 0x3, 0x1ff, 0x8, 0xa}, {0x100, 0x7fff, 0x4, 0x0, 0xb, 0x9}, {0x5, 0x8, 0x606, 0xf5, 0x0, 0x1}, {0x0, 0x6, 0x2, 0x7, 0x101, 0x7ff}, {0x4, 0x0, 0x9, 0x3, 0xff, 0x5}, {0x800, 0xb066, 0x9, 0xb, 0x1, 0x7f}, {0x80000001, 0x9, 0x6, 0x3, 0xffffe8b0, 0x9}, {0x10, 0x2, 0x3, 0x8000, 0x7, 0x4}, {0x10, 0x92, 0x6, 0x6, 0x8, 0x6}, {0x3c4, 0xff, 0x200, 0x5, 0x81, 0x9}, {0x14, 0x8, 0x3, 0x40, 0x8}, {0xffffffff, 0x8, 0x5, 0x7c56, 0x5}, {0x400, 0x5, 0x6, 0x10000, 0x15b, 0x1}, {0x7fffffff, 0x5, 0x1ff, 0xe0c, 0x8, 0x51}, {0x4, 0x8, 0x643, 0xfffffffc, 0x5}, {0x0, 0xfffffff8, 0x1, 0xd, 0x7, 0x3}, {0x3, 0x3, 0x9, 0x5f25, 0x8, 0xfff}, {0x41, 0x2, 0x8, 0x6, 0x8, 0x5}, {0x5, 0x0, 0x4, 0x6, 0xf, 0x1}, {0x8, 0x1, 0x8, 0xd, 0xedad, 0x9}, {0x1, 0x3, 0x9, 0x6, 0x2, 0xe9}, {0x8, 0x80000, 0x3, 0x3ff, 0x2, 0x8}, {0x8, 0x2, 0x4, 0x2, 0xfffffc00, 0x5}, {0x4, 0xfffffff8, 0x2c, 0x6, 0x1000, 0x2}, {0x2, 0x5735ee2d, 0x6, 0x2, 0x5, 0x1}, {0x13b, 0x9, 0xffff, 0x2, 0x40004, 0x3}, {0xad, 0x8001, 0x8, 0xf, 0x5, 0x8001}, {0x73d, 0xe, 0x3, 0x10, 0x6, 0x3e5f}, {0x0, 0x1, 0x6, 0x3, 0x4}, {0x4, 0x4, 0x3a4eaad9, 0x6, 0x7ff}, {0x97, 0x1, 0x3a, 0x7b2c53fe, 0x40, 0x59}, {0x16, 0x7, 0x100, 0xffff, 0x7, 0x7ff}, {0x47, 0x1, 0x180, 0x9, 0x200, 0x1}, {0x8000, 0x3, 0x80, 0xd, 0x9d63, 0x9}, {0x3, 0x1, 0x6b01, 0x5, 0x1, 0x6}, {0x1ff, 0x9, 0x362, 0x80000001, 0x1, 0x101}, {0x9, 0x1000, 0xbc04, 0x8001, 0x1, 0x1}, {0x4, 0xff, 0x0, 0x7, 0x9, 0x10}, {0x4, 0x1000, 0x9, 0x3ff, 0xfffffffa, 0x1}, {0xffffffff, 0x7, 0xe8d, 0x8001, 0x10001, 0x8}, {0x7, 0x7, 0x101, 0x1, 0x6, 0x2cb6}, {0x1ff, 0x1, 0x4, 0x6, 0xa, 0x10001}, {0x7fffffff, 0x0, 0x6, 0x3ff, 0x5}, {0x7fffffff, 0x4, 0xd, 0x1000, 0x0, 0xc0000}, {0x200, 0x0, 0x7, 0x1ff, 0x9}, {0x5, 0x300, 0x8, 0xfffffffc, 0x2}, {0xd, 0x4, 0x0, 0x0, 0xf0e1fa9, 0x3}, {0x4, 0x1, 0x7, 0xdb, 0x3, 0x1}, {0x6, 0x2, 0x0, 0x3, 0x423c, 0x50d0}, {0x67, 0x9, 0x2, 0x4c, 0x10, 0x2}, {0x79, 0xe, 0x7, 0x9, 0xc065}, {0xa, 0x80000001, 0xd257, 0x3, 0x6d1c, 0xfffffffe}, {0xe3, 0x85a, 0xa70, 0x6, 0x8, 0x5}, {0x7, 0x3ff, 0x2, 0x4, 0x6, 0x3}, {0x2d1a, 0x1000, 0x8, 0xa, 0x9, 0x2}, {0x2, 0x7ff, 0x6, 0x401, 0x1, 0x7}, {0x0, 0x1, 0x9, 0x7, 0x7fff, 0x4}, {0x5, 0x4, 0x8, 0x3ff, 0x80000000, 0x2e}, {0x4, 0x2, 0xf, 0xb4, 0x28000}, {0x544, 0x277, 0x9, 0x9, 0x9, 0x8000}, {0x9, 0x3ff, 0x4, 0x6, 0xb, 0x3}, {0x10, 0x1de, 0xa, 0x4, 0xfe}, {0x0, 0x5, 0x80c7, 0x8, 0x0, 0x5}, {0x3e, 0x7fff, 0x2, 0x2, 0x7, 0x6}, {0x7fff, 0x10, 0x10, 0x5, 0x1, 0x81}, {0x3, 0x81, 0x5, 0xc9, 0x10, 0x400}, {0xffff0000, 0x1ff, 0x6, 0x7fff, 0x8, 0x7f}, {0xed, 0x6, 0x9, 0x4, 0x8be, 0x2}, {0x6, 0x80, 0xffffffff, 0x1e4b, 0x3, 0x9}, {0x9e, 0xc, 0x3, 0x7, 0x2b8, 0x4}, {0x80, 0x0, 0x1bb, 0x0, 0xbe5, 0x2}, {0xfffffff5, 0x1, 0x6, 0x4, 0x100, 0x9}, {0x9, 0x8, 0x3ef9, 0x1, 0x1, 0x361}, {0xcf5, 0x4, 0x101, 0x7, 0x5, 0x8469}, {0xd, 0x6, 0x6, 0x9bb, 0x10, 0x2}, {0x4, 0x5, 0xdc4, 0xbca8, 0x8, 0x7}, {0xb92, 0xfffffffc, 0x7, 0x1, 0x472, 0x8}, {0x10001, 0xb96c, 0x10001, 0x81, 0x0, 0x8}, {0x505, 0x10000, 0x1, 0xa9, 0x3, 0xfffffe4b}, {0x81, 0x4, 0xfffffffe, 0xd, 0x4, 0x8001}, {0x8, 0x6, 0x7, 0x6dbc, 0xd3f2, 0x6}, {0x0, 0x3, 0x100, 0x3, 0x6, 0x100}, {0x68, 0xfffffffe, 0xfff, 0x9, 0x0, 0x4}, {0x4, 0x5, 0x6, 0xb77f, 0x101}, {0x3, 0xfffffff9, 0xffff, 0x9, 0x2, 0xffffffff}, {0x800, 0x81, 0x8, 0x0, 0x0, 0x4}, {0xe, 0x2, 0x80000001, 0x7fffffff, 0x2, 0x2}, {0xff, 0x0, 0x6b2a, 0xfffff000, 0x756}, {0x377b, 0x6, 0x0, 0x9c2, 0x1, 0x9}, {0x9, 0x4, 0x800, 0x3, 0xf, 0x40}, {0xfffffff7, 0x57a3, 0x1, 0x7ff, 0x4, 0x5}, {0x9, 0x2, 0x8, 0x8, 0x10001, 0x274caa57}, {0x3, 0x9, 0x1, 0x8db4, 0x7fffffff, 0x7}, {0x5f, 0x8a, 0x3, 0x200, 0x4, 0x100}, {0x802, 0x0, 0x75f, 0x70, 0x4, 0x6}, {0x3, 0x7, 0x800, 0xfffffffc, 0x1, 0x800}, {0x10, 0x7fffffff, 0xf, 0x2e03141b, 0x5, 0x7f}, {0x8, 0x9, 0x7, 0x5, 0x4}, {0xab4, 0x1000, 0x2, 0x100, 0x6cc, 0x4}, {0xe85, 0x7, 0xffff8001, 0x1, 0x2, 0x6}, {0xabf3, 0x80000001, 0xc13a, 0xf9a, 0x10000, 0xead}, {0x2, 0x0, 0x6, 0x7, 0xa, 0x68}, {0x4, 0x1, 0x9, 0x4, 0x5, 0x1}, {0x4, 0x7, 0x1000, 0x2, 0x7, 0x5}, {0x2, 0x80, 0x8, 0x6a36, 0x5, 0x1}, {0x80000000, 0xfff, 0x3d, 0x2, 0xd5a, 0xd}, {0xfffff6a4, 0xf, 0x2, 0x62352aa3, 0x3, 0x617b}, {0x7, 0x0, 0xffffcc2b, 0x5, 0x7, 0x2}, {0x2, 0x4, 0x1, 0x4, 0x7, 0x4}, {0x3, 0x4, 0xffffffff, 0xfffffff7, 0x5, 0xe}, {0x9d2c, 0xfffffffb, 0x6, 0x4, 0x8, 0x6}, {0xd02, 0x6, 0xe65, 0x80000001, 0xb, 0x3}, {0x3, 0x7fffffff, 0x7, 0xef08, 0x3, 0x7ff}, {0x3, 0x7f, 0x5, 0x0, 0xffffffff, 0x2}, {0xc, 0xfffffffb, 0x3, 0x0, 0x81, 0x2}], [{0x2, 0x1}, {0x2, 0x1}, {0x7}, {0x5}, {0x2, 0x1}, {0x4, 0x1}, {0x4}, {0x0, 0x1}, {}, {}, {}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x6, 0x8e374ffa257e0e5c}, {0x0, 0x1}, {0x4, 0x1}, {0x1}, {}, {0x1, 0x1}, {0x2}, {0x4, 0xe817c89abefabadf}, {0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x5, 0x1}, {}, {0x2}, {0x3}, {0x5, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x4}, {0x3}, {}, {0x5}, {0x2, 0x3}, {0x5, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x3}, {0x5}, {0x4}, {0x2}, {0x5, 0x1}, {}, {0x2}, {0x5}, {0x4, 0x1}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x4}, {0x3}, {0x1}, {0x2}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3}, {0x2}, {0x0, 0x1}, {0x5}, {0x1, 0x1}, {0x2}, {0x1}, {0x2, 0x1}, {0x4, 0x4d312ab464675260}, {}, {0x5}, {0x6, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5}, {0x5, 0x1}, {0x4, 0x1}, {0x2}, {0x5, 0x1}, {0x4}, {0x4, 0x1}, {0x1}, {0x4, 0x1}, {0x2}, {0x5, 0x1}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x92f6ebb2a9581059, 0x1}, {0x4}, {0x1}, {0x2, 0x1}, {0x3}, {0x4}, {0x2}, {0x5}, {0x5}, {0x2}, {0x0, 0x1}, {0x2}, {0x5}, {}, {0x2}, {0x1, 0x1}, {0x3}, {0x3}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {0x0, 0x1}, {0x3}, {0x3, 0x1}, {0x3}]}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x1ec4}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000013c0)={0x0, 0x0}) r5 = perf_event_open$cgroup(&(0x7f0000001440)={0x4, 0x80, 0x75, 0x4a, 0x5, 0x6, 0x0, 0xb1, 0x80, 0x6, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xe, 0x2, @perf_config_ext={0x6a8, 0x7}, 0x8800, 0x9, 0x9, 0x7, 0x3, 0x4d8a, 0x3, 0x0, 0x2104, 0x0, 0x100000001}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0xa1, 0xbb, 0x80, 0x9, 0x0, 0xcf7c, 0x2e27, 0x8, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={&(0x7f00000001c0), 0xf}, 0x100000, 0x4, 0xb, 0xaaf48a50768e80b2, 0xff, 0xf4, 0xe4, 0x0, 0xfffffffc, 0x0, 0x8000}, r4, 0x9, r5, 0x2) r6 = add_key$keyring(&(0x7f0000000340), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r7, 0x107, 0xd, &(0x7f0000000380)=@req={0xfc000000, 0x4, 0x1, 0x401}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001540), 0x0, 0xc044080}, 0x4841) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r8 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x635c, 0x1f480, 0x0, 0x399}) r9 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001040), 0x120600) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r9, 0x80045400, &(0x7f00000004c0)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) io_uring_enter(r8, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000140)={0x1, 0x7f, 0x4}, 0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x9436, 0x8000}, 0x0, 0x10000, 0x0, 0x6, 0x10000, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) r10 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r10, 0x2284, &(0x7f0000000080)) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r8, 0xc058534b, &(0x7f00000014c0)={0x9, 0x1, 0x5, 0x3, 0xffffffff, 0x4}) keyctl$restrict_keyring(0xa, r6, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000400)='ex:\xac\xd1\xeb\xf4\xd8&w\xef\x9f`T3%\xfa\xbf\xef\xeb\x8e1w\xfd') 1.213891128s ago: executing program 3 (id=1649): r0 = socket$key(0xf, 0x3, 0x2) socket$netlink(0x10, 0x3, 0xa35d6b4a370b49c5) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r2, 0x24, &(0x7f00000000c0)={0xf813b3c89bb9c002, 0x2, 0x4004, 0x409}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8991, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001900010000000000000000001c14"], 0x24}}, 0x4000000) r3 = socket(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x2}, 0x10, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r4, &(0x7f00000003c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000200)={&(0x7f0000000340)={0x64, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x38, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x6}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xe0}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x200}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x4008040) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x405}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x58}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000) sendmsg$key(r0, &(0x7f0000000100)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x2, 0xe, 0x8, 0x0, 0xa, 0x0, 0x0, 0x25dfdbfe, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @multicast1}}, @sadb_address={0x5, 0x6, 0x0, 0x20, 0x0, @in6={0xa, 0x4e23, 0xffff, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}}]}, 0x50}}, 0x0) 1.211747058s ago: executing program 5 (id=1651): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_int(r0, 0x0, 0x17, 0x0, &(0x7f0000000000)) 1.199393869s ago: executing program 5 (id=1652): lsm_list_modules(&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=0x28, 0x0) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x24, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0xffffff02}, {}, {}, [@tail_call, @map_fd={0x18, 0x3}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x8}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @map_val={0x18, 0x2, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000001c0)='syzkaller\x00', 0x5, 0xfd, &(0x7f0000000200)=""/253, 0x41100, 0x43, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x4, 0x1, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000380)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x1], 0x0, 0x10, 0xfffffff8}, 0x94) r1 = syz_open_dev$vcsa(&(0x7f0000000480), 0xffff, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000004c0)={r0, r1, 0x16, 0x0, @void}, 0x10) r2 = syz_open_dev$rtc(&(0x7f0000000500), 0x9, 0x20000) ioctl$RTC_IRQP_READ(r2, 0x8008700b, &(0x7f0000000540)) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r2) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x11, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xe}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @call={0x85, 0x0, 0x0, 0xc3}, @alu={0x3, 0x1, 0x9, 0x5, 0x8, 0x4, 0x4}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xc3f0}}]}, &(0x7f0000000640)='syzkaller\x00', 0x4, 0x65, &(0x7f0000000680)=""/101, 0x40f00, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x4, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000740)=[{0x1, 0x4, 0xf, 0xb}, {0x4, 0x33e0, 0x0, 0x1}, {0x1, 0x5, 0x3, 0x3}], 0x10, 0xffff}, 0x94) (async, rerun: 32) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000ac0)={'gretap0\x00', &(0x7f0000000a40)={'sit0\x00', 0x0, 0x10, 0x8000, 0x4, 0xfb, {{0xf, 0x4, 0x0, 0xf, 0x3c, 0x64, 0x0, 0xf8, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, {[@ra={0x94, 0x4}, @rr={0x7, 0x23, 0x9, [@dev={0xac, 0x14, 0x14, 0xa}, @private=0xa010101, @empty, @private=0xa010100, @broadcast, @multicast1, @private=0xa010101, @multicast2]}]}}}}}) (rerun: 32) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000b00), 0x410003, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000bc0)={0x18, 0x18, &(0x7f0000000840)=@framed={{0x18, 0x0, 0x0, 0x0, 0x499, 0x0, 0x0, 0x0, 0xc4}, [@btf_id={0x18, 0x3, 0x3, 0x0, 0x1}, @generic={0x0, 0x8, 0x2, 0xbd65, 0x9}, @jmp={0x5, 0x1, 0x8, 0x8, 0x3, 0x8, 0x8}, @map_val={0x18, 0x7, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0xffffffff}, @exit, @jmp={0x5, 0x0, 0x4, 0x3, 0x5, 0x0, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfa9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000900)='GPL\x00', 0x67, 0xf8, &(0x7f0000000940)=""/248, 0x41100, 0x15, '\x00', r3, 0x0, r4, 0x8, &(0x7f0000000b40)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000b80)={0x0, 0x6, 0x5, 0x34}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000c80)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) io_uring_register$IORING_UNREGISTER_RING_FDS(r6, 0x15, &(0x7f0000001440)=[{0x6, 0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000cc0)=""/122, 0x7a}, {&(0x7f0000000d40)=""/29, 0x1d}, {&(0x7f0000000d80)=""/105, 0x69}, {&(0x7f0000000e00)=""/92, 0x5c}, {&(0x7f0000000e80)=""/179, 0xb3}, {&(0x7f0000000f40)=""/44, 0x2c}], &(0x7f0000001000)=[0x7, 0x0, 0x4, 0x5, 0x9, 0x4f]}, {0x5, 0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001040)=""/112, 0x70}, {&(0x7f00000010c0)=""/69, 0x45}, {&(0x7f0000001140)=""/38, 0x26}, {&(0x7f0000001180)=""/230, 0xe6}, {&(0x7f0000001280)=""/29, 0x1d}], &(0x7f0000001340)=[0xb5c, 0x8]}, {0x1, 0x1, 0x0, &(0x7f00000013c0)=[{&(0x7f0000001380)=""/43, 0x2b}], &(0x7f0000001400)=[0x401, 0x2]}], 0x3) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r4, 0x4002f516, &(0x7f00000014c0)={0x8, 0x5}) (async) ioctl$TUNSETLINK(r6, 0x400454cd, 0x324) (async) r8 = semget(0x2, 0x2, 0x107) semop(r8, &(0x7f0000001500)=[{0x4, 0x9}, {0x0, 0x5adb, 0x800}, {0x2, 0x10, 0x1000}], 0x3) ioctl$BINDER_SET_MAX_THREADS(r4, 0x40046205, &(0x7f0000001540)=0xfffff9bc) (async) ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x0) (async) openat$cgroup_freezer_state(r4, &(0x7f0000001580), 0x2, 0x0) (async, rerun: 64) pipe2$9p(&(0x7f0000001640)={0xffffffffffffffff}, 0x4000) (rerun: 64) mount$9p_fd(0x0, &(0x7f00000015c0)='./file0\x00', &(0x7f0000001600), 0x184004, &(0x7f0000001680)={'trans=fd,', {'rfdno', 0x3d, r9}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@cache_readahead}, {@cache_readahead}, {@noextend}], [{@appraise_type}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@subj_type}]}}) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) sendmsg$NFQNL_MSG_VERDICT_BATCH(r6, &(0x7f0000001800)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x3, 0x3, 0x401, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x2}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xb}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x5}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x3}]}, 0x34}}, 0x4000) (async, rerun: 32) recvmsg$unix(r6, &(0x7f0000001b00)={&(0x7f0000001840), 0x6e, &(0x7f00000019c0)=[{&(0x7f00000018c0)=""/200, 0xc8}], 0x1, &(0x7f0000001a00)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd8}, 0x40000000) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r7, 0x8008f511, &(0x7f0000001b40)) (async) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r6, 0xc018937a, &(0x7f0000001b80)={{0x1, 0x1, 0x18, r10, {0x7fffffff}}, './file0\x00'}) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r11, &(0x7f0000001c80)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001c40)={&(0x7f0000001c00)={0x14, 0x4, 0x1, 0x101, 0x0, 0x0, {0x5}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20000004) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001cc0)) 1.194712669s ago: executing program 2 (id=1653): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000007440), 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x22000406, &(0x7f00000004c0)={[{@dioread_lock}, {@noblock_validity}, {@abort}, {@grpquota}, {@stripe={'stripe', 0x3d, 0x1f5}}, {@grpjquota, 0x2e}, {@barrier}, {@nolazytime}, {@jqfmt_vfsv1}, {@grpid}], [], 0x2c}, 0x84, 0x4aa, &(0x7f0000000c00)="$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") (async) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x22000406, &(0x7f00000004c0)={[{@dioread_lock}, {@noblock_validity}, {@abort}, {@grpquota}, {@stripe={'stripe', 0x3d, 0x1f5}}, {@grpjquota, 0x2e}, {@barrier}, {@nolazytime}, {@jqfmt_vfsv1}, {@grpid}], [], 0x2c}, 0x84, 0x4aa, &(0x7f0000000c00)="$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") sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, r1, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24008040}, 0x891) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000007580)={0x0, 0x0, &(0x7f0000007540)={&(0x7f0000000000)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000fddbdf25090000003c0003800800010001000000140002006272696467655f736c6176655f30000008000300000000001400060000000000ac"], 0x50}}, 0x20048800) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0xfffffc16, 0x8, 0x100, 0x100, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x4, 0x7}, 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0xfffffc16, 0x8, 0x100, 0x100, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x4, 0x7}, 0x50) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) (async) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000080)={0x32b, @tick=0x440, 0xff, {}, 0x0, 0x0, 0xfb}) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000640), 0x1, 0x5bd, &(0x7f0000000000)="$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") 1.18042198s ago: executing program 4 (id=1654): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1562, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000000000000000f195"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_lsm={0x6, 0x3, &(0x7f00000007c0)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x2e}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) syz_emit_ethernet(0x0, 0x0, 0x0) r2 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000100)={0x28, 0x0, 0xffffffff}, 0x10, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xc044000c}, 0xc, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[], 0x450}, 0x1, 0x0, 0x0, 0x2400c001}, 0x44) setsockopt$sock_int(r2, 0x1, 0x24, 0x0, 0x49) socket$inet6_udp(0xa, 0x2, 0x0) r4 = shmget$private(0x0, 0x800000, 0x54003f00, &(0x7f0000800000/0x800000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xbbdccba4532b703b) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='fd\x00') fchdir(r5) exit(0x3) setreuid(0xee01, 0xee01) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz1\x00', 0x200002, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1000000, 0x12, r6, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0xb, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000019ffff0f0000000001000201180100002020732500000000002020207b0af8ff00000000bfa100000000000007010000f6ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x9, 0xfe4, &(0x7f0000001e00)=""/4068, 0x41000, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.097513035s ago: executing program 5 (id=1655): r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/ip6_flowlabel\x00') lseek(r0, 0x2000, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000300)={0x2e, @private=0xa010100, 0x4e20, 0x3, 'nq\x00', 0x5, 0x10, 0x37}, 0x2c) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180), 0x20802, 0x0) write$vga_arbiter(r3, &(0x7f0000000200)=@other={'unlock', ' ', 'none'}, 0xc) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000280), 0x802, 0x0) writev(r5, &(0x7f0000000040), 0x1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)=@ipv4_getaddr={0x20, 0x16, 0x4, 0x70bd28, 0x25dfdbfe, {0x2, 0x78, 0x45, 0xfe, r7}, [@IFA_TARGET_NETNSID={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x4014) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x1c, 0x0, 0x4, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, [@mon_options]}, 0x1c}}, 0x81) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f00000003c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)={0x88, r4, 0x10, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x1, 0xa}}}}, [@NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x4000, 0x1, 0x1, 0x0, {0x6e, 0x1, 0x0, 0x7, 0x0, 0x0, 0x1, 0x2, 0x1}, 0x1, 0xffff5d75}}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x2, 0x3, 0x5, 0x0, {0x4, 0x2, 0x0, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1}, 0x300, 0x800, 0xe}}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x83, 0x0, 0x1, 0x0, {0x3, 0x1, 0x0, 0x5, 0x0, 0x1, 0x0, 0x3}, 0x800, 0x7, 0xff}}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000}, 0x40010) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x61, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a70000000090a010400000000000000000a0000040900020073797a310000000008000a40fffffffc0900010073797a3100000000080005400000000d2c00128014110180090001006c6173740000000004000280140001800c000100636f756e746572000400028008000340000001"], 0x98}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) sendmsg$NFT_BATCH(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b160000000000000000020000082400048020000180080001006e617400140002800800014000ef000108000540000000140900010073797a30000000000900020073797a3200"], 0x78}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000070000000850000000e00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001b40)={r10, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="bd000000", @ANYRES16=r4, @ANYBLOB="00042dbd7000fbdbdf253a0000000c0099000e000000790000000600650007000000060065002f09000011005b00e6b51d2c237be1fd4f8e67b9b400000077005b007f2653ff04e0a09f40ed23bbc5cb554a750cbb7f2498878bae36ae97f9c13e19d9b2ba26f88b481f684329d391d9f8652233d4f5ddce5e257523e061a38c8f9fd654d822cbbb33bc86f32481679a23009ca4e3a23e585d27141c8d580d26b6ee11f4e4caf583abb148918136eca51ccbdb184f00"], 0xbc}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000008) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="400000ec", @ANYRES16=r4, @ANYBLOB="080028bd7000fedbdf252b0000000400bf000400cc001e009400020013b539000000000000d50005001500000006000700000006000004003c00"], 0x40}}, 0x8001) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x12, &(0x7f00000004c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c00000010004b0422000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c00028008000400000000000800150000000000050016"], 0x4c}, 0x1, 0x0, 0x0, 0x200400a0}, 0x0) 1.086539695s ago: executing program 2 (id=1656): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) ioctl$SNAPSHOT_S2RAM(0xffffffffffffffff, 0x330b) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x4c, r1, 0x1, 0x70bd27, 0x0, {0x4f}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}, {0x6}}]}, 0x4c}}, 0x0) syz_read_part_table(0x5be, &(0x7f00000005c0)="$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") 1.068188257s ago: executing program 5 (id=1658): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x9}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r1 = syz_io_uring_setup(0x70ca, &(0x7f0000000080)={0x0, 0x1, 0x8000, 0x8000003, 0x178}, &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x40, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r4}}) io_uring_enter(r1, 0x4d0c, 0x2, 0x69, 0x0, 0x0) unshare(0x40600) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000004c0)) 963.949853ms ago: executing program 2 (id=1659): syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x8000, &(0x7f00000000c0), 0x2, 0xbd1, &(0x7f0000001340)="$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") bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYRES32, @ANYRES32=0x0], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) (async) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000380)={[{@jqfmt_vfsold}, {@orlov}, {@debug}, {@noload}, {@nombcache}, {@noblock_validity}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}]}, 0xfa, 0x47c, &(0x7f0000000a80)="$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") (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) (async) r0 = syz_io_uring_setup(0xbd7, 0x0, &(0x7f00000002c0), &(0x7f00000001c0)) (async) flock(0xffffffffffffffff, 0x1) r1 = socket$rxrpc(0x21, 0x2, 0xa) sendto$rxrpc(r1, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r2 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r2, &(0x7f0000000100)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e20, 0x4, @mcast2, 0x7da3}}, 0x24) (async) r3 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x717f, 0x100, 0x14, 0x7f, 0x0, r0}, &(0x7f00000000c0)=0x0, &(0x7f0000000200)=0x0) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) (async) r6 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001440), 0x200, 0x0) readv(r6, &(0x7f0000000140)=[{&(0x7f0000000300)=""/253, 0xfd}], 0x1) (async) ioctl$IMADDTIMER(r6, 0x80044940, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000003c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd=r2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./bus\x00', 0x2901401, 0x0, 0x0, 0x0, &(0x7f000009de00)) rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000a00)='./bus/file0\x00') 959.490733ms ago: executing program 3 (id=1660): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x22, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1f0519, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x9, 0x7}, 0xec25, 0x4085, 0xb, 0x4, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELOBJ={0xd4, 0x14, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_OBJ_USERDATA={0xb7, 0x8, "807923e9063337782b7127a657b56e85385d476b92a9952f9b483c6f3464309d3d1ba78fbec5b063dec7851fdcdac605487153cbaf2acccfad32780f8d368b56531f6ca1c93984fc447e9ea76dfed351910047ea7e606d8bf3c72cd83637e101e814f5c7dffbe1b77bd1fd5afb0484a7240a8cb6ff3075a3d27ff236e75b5ff626a0a56db9641158505e9a4515f4251ac94c279222f21f4379a2c2dc8b8b7d63ed5ff721b2a45b38f3b285c50b5e9fd6446ba3"}]}, @NFT_MSG_DELTABLE={0xb0, 0x2, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_TABLE_USERDATA={0x9c, 0x6, "24c356342b1738369583d69a39153be8f264f5bf86ff2d9da8926b7d110eda514c86780d82ac9e918ade2db2623ad83bf94281a8ca330c49e00ffef4277c3d8b74a48c2cd77246773a8ea46d333dcaf34c74c65ea1006b63cdc0fd23cda89a16af77b84f563b3c88d0de971cc4260316a465a3c8e2d4598b997cc0849ea27f76d9d0a49b4d3465a59ba7ff2784dc5da5cfe5ca2f0b5fbfff"}]}, @NFT_MSG_DELSET={0x64, 0xb, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_SET_EXPR={0xc, 0x11, 0x0, 0x1, @cmp={{0x8}, @void}}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xc0}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x6}]}, @NFT_MSG_NEWSET={0x30, 0x9, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x6}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELTABLE={0xe8, 0x2, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0xe60527f7685125cd}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0x86, 0x6, "e84ecce9b8b9bec853739e843e429b04e501969f27cc70aca5a07c6e6ddffa3b697569a268a7080d2d41f8ad696330e5ba19976eb6b71827062172039ee588ac55f0cda807b245f0cfc083ba3c0166a89b2471274997a0b576a068b256679abf2d9e3a9b9401fc4c6ea8d3af4187d8e1e01caf9e3874775bee1f18c2494ae8a13ae6"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xa}, @NFT_OBJECT_CT_HELPER=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x348}}, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, 0x0) sendmsg$AUDIT_SET(r0, 0x0, 0x24008814) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x80, 0x0) ioctl$TIOCSLCKTRMIOS(r2, 0x5457, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r4 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0xfe, 0x0, 0xff, 0xfe, 0x0, 0x5022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) close(r4) 876.977288ms ago: executing program 1 (id=1662): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB='\n\x00\x00\x00\v\x00\x00\x00B\x00\x00\x00>'], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000ffffffff0008c3ad00112fb6d5773266680bcc643e20331c5c258f449cadcd81894f6b98be5664152b5100b6e21e90c438d01ee81bfe615406c44ec21593b1647a48c237ee92d806c41b232e7e65a4c6ab8eddde78ed016ef74efc665a0482763b75e19b6a27a7fce7a75e2fdf9b733f12864db76fa4b62803699fb938cb42e369a6250866c6e3be859b02727f956c23cbcbe2700fe547c816a8f4f793b9cef75bd010084b211321cbf305b22da45e27", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b71600230000000085000000030800009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x9, 0x1005, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x94) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) r4 = inotify_init1(0x0) inotify_add_watch(r4, &(0x7f0000000000)='.\x00', 0x2000775) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x420000, 0x0) (async) write$binfmt_elf64(r0, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x378) (async) close(r0) (async) ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000400)) (async) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) (async) ioctl$TIOCL_GETKMSGREDIRECT(r0, 0x541c, &(0x7f0000000040)) 777.900614ms ago: executing program 2 (id=1663): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x5}]}, 0x64}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x5}]}, 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000001ac0)=@urb_type_bulk={0x3, {0x1, 0x1}, 0xffff, 0x40, 0x0, 0x0, 0x200006, 0x75, 0x6, 0x8, 0x79, 0x0}) (async) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000001ac0)=@urb_type_bulk={0x3, {0x1, 0x1}, 0xffff, 0x40, 0x0, 0x0, 0x200006, 0x75, 0x6, 0x8, 0x79, 0x0}) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[], 0x98}, 0x1, 0x0, 0x0, 0x20040800}, 0x0) 770.061884ms ago: executing program 1 (id=1664): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_int(r0, 0x11, 0x17, 0x0, &(0x7f0000000000)) 752.513846ms ago: executing program 1 (id=1665): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000006c0)={[{@orlov}, {@noauto_da_alloc}, {@inlinecrypt}, {@dioread_lock}, {@data_err_ignore}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@data_err_ignore}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@resuid}, {@errors_remount}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x42, 0x1fe) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f0000000000)='2', 0x1, 0xffff) fallocate(r0, 0x10, 0x7, 0x10001) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x54, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}, @IFLA_BR_NF_CALL_IP6TABLES={0x5, 0x25, 0x1}, @IFLA_BR_VLAN_STATS_ENABLED={0x5}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x8044) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) io_uring_setup(0x4e60, &(0x7f00000003c0)={0x0, 0xcba9, 0x40, 0x1, 0x2c2, 0x0, r4}) ioctl$NS_GET_OWNER_UID(r4, 0xb704, &(0x7f0000000180)=0x0) sendmsg$nl_xfrm(r1, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000780)=@updpolicy={0x1fc, 0x19, 0x2, 0x70bd2d, 0x25dfdbfc, {{@in=@dev={0xac, 0x14, 0x14, 0xa}, @in=@multicast2, 0x4e22, 0x0, 0x4e24, 0x101, 0x2, 0x20, 0xc0, 0x32, r3, r5}, {0x0, 0xfffffffffffffff7, 0x1, 0xe, 0x800, 0x4, 0x2, 0x5}, {0x5, 0xa3, 0x361, 0x9}, 0x0, 0x6e6bbb, 0x2, 0x0, 0x0, 0x1}, [@extra_flags={0x8, 0x18, 0x84d3}, @srcaddr={0x14, 0xd, @in=@empty}, @algo_auth={0x127, 0x1, {{'michael_mic\x00'}, 0x6f8, "15679450234ccd5d69aabbc953203703ccc179c41f0c889bac337f05cc08a86b9dd1a347bf56790ab68fd63ea4b6563163eafaad028361940090fe285faef09bee3794650e17715fcf7abce11d02b0336c949a523cd47d32bb3a853a035883378ee3193cefa337421bbe89a84dffb6c735c948bfbeac49ba6cb33e5a4be0ee0d9bea123624ed9b0f0aee0e2ce2108491ec92cc370d39dafb7a9dca100d2a03bcf246c89e1162081ed1242b196660b3b646e304a749a869500d6dbd0c755a802d59e5f7c0974569a3050b395ca812d370777773eb235309ee88454104ca9658"}}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x40800}, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000005c0)={{{@in=@loopback, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@empty}}, 0x0) setresuid(r5, 0x0, r6) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) setresuid(0xee01, r7, r7) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=@acquire={0x17c, 0x17, 0x8, 0x70bd26, 0x25dfdbfc, {{@in=@dev={0xac, 0x14, 0x14, 0x13}, 0x4d2, 0xff}, @in6=@private2, {@in=@rand_addr=0x64010101, @in=@multicast1, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x20, 0xa0, 0x29, r3, r5}, {{@in=@broadcast, @in6=@private2, 0x4e22, 0x0, 0x4e23, 0x1c62, 0xa, 0x80, 0x80, 0x3b, 0x0, r7}, {0x2, 0x8, 0x0, 0x100000001, 0x9, 0x0, 0x2, 0x2}, {0xe, 0x20000, 0x971, 0x1}, 0x8, 0x6e6bc0, 0x1, 0x1, 0x3, 0x1}, 0x9, 0xc, 0x2, 0x70bd2c}, [@tfcpad={0x8, 0x16, 0x2}, @algo_auth={0x4a, 0x1, {{'sha512-arm64\x00'}, 0x10, '\t='}}]}, 0x17c}, 0x1, 0x0, 0x0, 0x91}, 0x4810) 590.059915ms ago: executing program 1 (id=1666): setreuid(0x0, 0xee00) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000002000000000000000000000000001e000000000000"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x7) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x2) futex(&(0x7f000000cffc), 0x3, 0x801, 0x0, &(0x7f0000000040), 0xfffffffc) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) clock_settime(0x4, &(0x7f0000000080)={0x77359400}) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mlock2(&(0x7f0000495000/0x2000)=nil, 0x2000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) lseek(0xffffffffffffffff, 0x2000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 586.179615ms ago: executing program 2 (id=1667): syz_io_uring_setup(0x17af, &(0x7f0000000440)={0x0, 0xbc48, 0x80, 0x0, 0x1e1}, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000036000000180100006420002500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001800000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r0, r2, 0x25, 0x0, @void}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xac, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x154b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11eba, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x10000003, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x5, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, 0x0, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x70}, 0x122) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'dummy0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8946, &(0x7f0000000080)) 482.531261ms ago: executing program 1 (id=1668): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e000701000000000000000003"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x9, &(0x7f0000000380), 0x98) r1 = gettid() timer_create(0x0, &(0x7f0000000380)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x4370, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6(0xa, 0x5, 0x0) epoll_create1(0x0) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x1, 0xfffffffffffffffc, 0x4, 0xfffffffffffffffd, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x20000, 0x0, 0x9, 0x7, 0x0, 0x80000000, 0x6ec}, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x8400, &(0x7f0000001180)=ANY=[@ANYBLOB='overriderockperm,iocharset=macturkish,showassoc,dmode=0x0000000000000005,nojoliet,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c3d7265a4f26c617865642c7362736563746f723d3078303030303030303030303030303030322c00"], 0x0, 0x688, &(0x7f0000000100)="$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") 377.957438ms ago: executing program 1 (id=1669): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = gettid() mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x13, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4005, 0x0, 0x0, 0x0, 0x7}, [@generic={0x6b, 0x1, 0x1, 0xa}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, r0, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) poll(&(0x7f0000000c80), 0x0, 0xb5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0xffff, 0x0) syz_emit_ethernet(0x116, &(0x7f0000000740)={@local, @local, @val={@val={0x88a8, 0x3, 0x0, 0x2}, {0x8100, 0x0, 0x0, 0x2}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000300", 0xd8, 0x3a, 0x0, @private0, @mcast2, {[@hopopts={0x87, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x5}]}, @srh={0x6c, 0x10, 0x4, 0x8, 0x9, 0x78, 0x6, [@mcast1, @private2, @dev={0xfe, 0x80, '\x00', 0x30}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1, @dev={0xfe, 0x80, '\x00', 0xe}, @empty, @local]}], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, '\x00', 0x0, 0x3c, 0x0, @remote, @empty, [@srh={0x2f, 0x0, 0x4, 0x0, 0x4}, @fragment={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}]}}}}}}}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000540)={{0x2, 0x0, 0x0, 0x0, 0x0, 0x4a, 0x7}, 0x0, 0x0, 0xd4, 0x9, 0x0, 0xffffffff80000001, 0x100000000, 0x9c, 0x514, 0x4, r2, r2}) close(0x3) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x6) sendmmsg$unix(r4, &(0x7f0000003d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24004040}}], 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x1, 0x510, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x101, 0x10000, 0x0, 0x5, 0x8, 0xd9a, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x3ffffffffd, 0xffffffffffffffff, 0x1) syz_open_procfs(0xffffffffffffffff, 0x0) r5 = socket$inet(0x2, 0x80001, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x61, &(0x7f0000000100)={'security\x00', 0x2, [{}, {}]}, 0x48) 329.472811ms ago: executing program 4 (id=1670): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000440)={@ipv4={'\x00', '\xff\xff', @local}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @multicast1}, 0x200001, 0x5, 0x0, 0x100, 0xfc8, 0x20c200a3, r4}) (async) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x1, 0xf0, 0x4}, 0xfe}, 0x18) lsetxattr$security_capability(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4c, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) (async) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) r6 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r7, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x40004) (async) write(r5, &(0x7f0000000240)='T', 0x1) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r9, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x1, 0x1}}, 0x40) (async) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r5, 0x0) (async) creat(&(0x7f00000001c0)='./file0\x00', 0x65) request_key(0x0, &(0x7f0000001ffb)={'syz', 0x1, 0xc}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVix:De', 0x0) (async) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800483, &(0x7f0000000200)={[{@debug}, {@nodiscard}, {@nolazytime}, {@norecovery}]}, 0x2, 0x5bf, &(0x7f0000001480)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000180)=[{0x1, 0x1, {0x0, 0xff, 0x3}, {0x2, 0xff, 0x4}, 0xff}, {0x3, 0x0, {0x0, 0x1, 0x6}, {0x0, 0xf0, 0x1}, 0x0, 0x1}, {0x2, 0x3, {0x0, 0xf0}, {0x0, 0xff, 0x3}, 0x2, 0xfd}], 0x60) (async) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xfff3, 0x10}, {0xfff1, 0x9}, {0x2, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x48044}, 0x40000) 296.363853ms ago: executing program 4 (id=1671): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000001}, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x27) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000000c0)={r3, 0x3, 0x9, 0x6}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000400)={r2, 0x97, "d9b5af6719b739e7493b5059b31e04b39a44767278ce91dabe87707d1ad21281be4ae5193f000b13d5aaa24ffd0c5475aea139afac1cf87b7bcc8ecff74a8ceb972f081a1ea9b1e333663e0b0b5cef80198413587de2c8d7d30ade0eeb5b02aaee9f4f0d8e48a628c52e5731a62d2c9e8f8dbd748f1e562c223625a3b93a28e87310d3ff1acbacaaeda92e9c65024b480e00fad1ca0e6a"}, &(0x7f0000000200)=0x9f) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x6, 0x28254, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbffe, 0x1, @perf_bp={0x0}, 0x0, 0xfffd, 0x8, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x5}, 0x48) bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @empty}, 0x1c) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) accept$inet6(r5, &(0x7f0000000240)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000580)=0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x6, @remote, 0x2}}, 0x0, 0x0, 0x8, 0x0, "3f114438efdaca16d374b49a365be44d5e860ea3ba676c0b5047b80e2c3535d5bd9db3c8572560f4d1be5cd41f7716082ee3589f099942e6f1c395ddb8160381baadf27900"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x0, 0x20000000, @remote}}, 0x0, 0x0, 0x0, 0x0, "ddfd3b7ed7c6a1c172a987ae5ce3cafd64c9a736831a5912d606798fb75c9981c4b3ac0e06891ff18bc5543ed57215a3c45f9154dfa319e52a15a2b9acf80c07fb1a854dad742eef6187f2304844c296"}, 0xd8) sendto$inet6(r4, 0x0, 0x0, 0x20004002, &(0x7f0000b63fe4)={0xa, 0x2, 0x80000000}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) rt_sigsuspend(&(0x7f0000000000)={[0x50f]}, 0x8) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@nobarrier}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r8 = socket(0x40000000015, 0x5, 0x0) getsockopt(r8, 0x200000000114, 0x2717, &(0x7f0000032580)=""/102390, &(0x7f0000000040)=0x18ff6) r9 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r9, &(0x7f00000001c0)="f1", 0x1) sendfile(r9, r6, 0x0, 0x40001) sendfile(r9, r7, 0x0, 0x7ffff000) 125.948063ms ago: executing program 5 (id=1672): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="200000006a0001002abd7000fddbdf250a00000000000100080001"], 0x20}, 0x1, 0x0, 0x0, 0x4010}, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x94) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r1, &(0x7f00000001c0)={0x1d, r2}, 0x10) readv(r1, &(0x7f0000000fc0)=[{&(0x7f0000003880)=""/4102, 0x1006}], 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000200)=0xd, 0x4) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4) sendmsg$can_raw(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@can={{}, 0x6, 0x1, 0x0, 0x0, "0000000800000003"}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x20004000) memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, {0x6}}, '.\x00'}) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x66c}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8001}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40011}, 0x80) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000180)) syz_emit_ethernet(0x44, &(0x7f00000001c0)={@empty, @broadcast, @void, {@generic={0x8, "8138e6b91368fa717d13c294d1da5ada330f1eb3f8ba86419f7481562899dd1526307c3307f390d15f67ce32716107a33516da278fea"}}}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000240)={0x0, 0x69, "8fcdeb1df9495da673cddc4f30dbe4b16ba49c7602343f482ed8a4cdcb01036e6a7be99b02294c1a0bce7d06f539e6351702fccd6236f9d08b568b95749abaf9efd2ee38307de9f2127ab881b6fcf044acc900242b08ab94b5f7642a36a8334c98cd32dd70f1c92276"}, &(0x7f00000002c0)=0x71) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000300)={0x0, 0xffff, 0x8, [0x7, 0x0, 0x4d5, 0x5, 0xac, 0x0, 0x2, 0x1]}, &(0x7f0000000340)=0x18) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000380)={r1, 0x0, 0x8caeade, 0x401, 0x7f, 0x5, 0x1, 0xae6, {r2, @in6={{0xa, 0x4e20, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}}, 0x0, 0x7, 0x8, 0xbb, 0x10001}}, &(0x7f0000000440)=0xb0) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, &(0x7f0000000480)) setsockopt$MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f00000004c0)={{0xa, 0x4e20, 0x0, @private2, 0x10000}, {0xa, 0x4e20, 0x4, @private1, 0x10001}, 0xffffffffffffffff, {[0x4, 0x7, 0x2, 0x9, 0x3, 0x5, 0x9, 0x8]}}, 0x5c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000540)={r2, @in6={{0xa, 0x4e22, 0x5, @remote, 0x8}}, 0x6, 0x6, 0x6, 0x5, 0x9d, 0xd, 0xf8}, 0x9c) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000001, 0x2010, 0xffffffffffffffff, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x22001, 0x100) pwritev2(r3, &(0x7f0000000800)=[{&(0x7f0000000640)="e61531c2a36516a05ea07a31829f1aeb869e79174f7a37243dd1ec4758cc6635ae70c97dc5cec41c4ace3661f46d3419578fda4b6670b1d6f2d98cdd74211739295161ede69238ad88b0e4b530a4ab54e49029f0b05f330fc96f5848be12dd9d734fd9a709a521ff8c02f2d43da0ecb5e53f4f7e6c", 0x75}, {&(0x7f00000006c0)="e19cf68e715a35765d547b368214", 0xe}, {&(0x7f0000000700)="1c0ea17fa5e69f81df3bad80df52fd484e9924f592bdc372323a4b436e8bdd3497e1996246c27290c31a513e9588912c98b59bdfe425662f3ce4ca30fc77f4cf23b62b33fe7fdbca3c83119b4668fd3c4b188d5a952aebf8c6513a64397446a80b", 0x61}, {&(0x7f0000000780)="b67e6396f988c1e48253e9683ed51f6aadd074534a4ad0743d34f56b5c25a64457d4c35573e5b5d4c2b1f8a6c0684709793c34c28a2f7220cbde16e0e3ac3347794a4b44656ccc3c6dd5844642ee9db8b26eb77261695ae65477252ef4b8000a", 0x60}], 0x4, 0x9, 0xa24f, 0x1) ioctl$IOC_PR_REGISTER(r0, 0x401870c8, &(0x7f0000000840)={0x1, 0xd}) readv(r3, &(0x7f0000000c00)=[{&(0x7f0000000880)=""/78, 0x4e}, {&(0x7f0000000900)=""/35, 0x23}, {&(0x7f0000000940)=""/206, 0xce}, {&(0x7f0000000a40)=""/42, 0x2a}, {&(0x7f0000000a80)=""/183, 0xb7}, {&(0x7f0000000b40)=""/27, 0x1b}, {&(0x7f0000000b80)=""/104, 0x68}], 0x7) write$evdev(r0, &(0x7f0000000c80)=[{{}, 0x4, 0x9, 0x7}, {{0x77359400}, 0x4, 0x9, 0xfffffffc}, {{0x77359400}, 0x11, 0x7, 0x6}], 0x48) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000d00)={r2, 0x7ff}, &(0x7f0000000d40)=0x8) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000dc0), r0) sendmsg$TIPC_NL_KEY_FLUSH(r0, &(0x7f0000000ec0)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)={0x78, r4, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}, @TIPC_NLA_PUBL={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x401}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x10001}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xe853}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000840}, 0x48001) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000f00)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(r5, 0x4004f506, &(0x7f0000000f40)) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000f80)={r1, 0x1000}, &(0x7f0000000fc0)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000001000)={r6, @in={{0x2, 0x4e22, @remote}}, 0x5, 0x9, 0x2, 0x8, 0x9}, &(0x7f00000010c0)=0x98) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000001100)=0x0) sched_setattr(r7, &(0x7f0000001140)={0x38, 0x6, 0x1, 0x3, 0xfcf, 0x9, 0x0, 0x1, 0x6, 0x6}, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000001180)={r6, 0x2}, &(0x7f00000011c0)=0x8) bpf$LINK_DETACH(0x22, &(0x7f0000001200)=r0, 0x4) r8 = creat(&(0x7f0000001240)='./file0\x00', 0xc) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), r0) sendmsg$NL80211_CMD_DEL_MPATH(r8, &(0x7f00000013c0)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x34, r9, 0x300, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x44) 0s ago: executing program 3 (id=1675): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x1a, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') mount$9p_tcp(0x0, &(0x7f0000000640)='./file0\x00', 0x0, 0x204000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_clone3(&(0x7f0000001940)={0x8100000, 0x0, 0x0, 0x0, {0x16}, 0x0, 0x0, 0x0, &(0x7f0000001900)=[0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x4}, 0x58) kernel console output (not intermixed with test programs): 95 subj=root:sysadm_r:sysadm_t pid=5452 comm="syz.1.509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c9f94aeb9 code=0x7ffc0000 [ 72.731840][ T29] audit: type=1326 audit(1769771500.743:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5452 comm="syz.1.509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4c9f94aeb9 code=0x7ffc0000 [ 72.755182][ T29] audit: type=1326 audit(1769771500.743:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5452 comm="syz.1.509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c9f94aeb9 code=0x7ffc0000 [ 72.778712][ T29] audit: type=1326 audit(1769771500.743:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5452 comm="syz.1.509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=106 compat=0 ip=0x7f4c9f94aeb9 code=0x7ffc0000 [ 72.791203][ T5426] IPVS: set_ctl: invalid protocol: 29 224.0.0.1:20001 [ 72.848928][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 72.874491][ T10] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 73.004054][ T5472] loop1: detected capacity change from 0 to 512 [ 73.023951][ T5472] EXT4-fs: Ignoring removed i_version option [ 73.030570][ T5472] EXT4-fs: Ignoring removed bh option [ 73.081100][ T5472] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.104610][ T5476] loop5: detected capacity change from 0 to 512 [ 73.111245][ T5476] EXT4-fs: inline encryption not supported [ 73.133445][ T5472] ext4 filesystem being mounted at /114/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 73.147196][ T5476] EXT4-fs error (device loop5): ext4_quota_enable:7177: comm syz.5.516: inode #129: comm syz.5.516: iget: illegal inode # [ 73.180583][ T5476] EXT4-fs error (device loop5): ext4_quota_enable:7180: comm syz.5.516: Bad quota inode: 129, type: 2 [ 73.217375][ T5476] EXT4-fs warning (device loop5): ext4_enable_quotas:7221: Failed to enable quota tracking (type=2, err=-117, ino=129). Please run e2fsck to fix. [ 73.273002][ T5411] syz.3.497 (5411) used greatest stack depth: 7432 bytes left [ 73.284748][ T5476] EXT4-fs (loop5): mount failed [ 73.349090][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.406551][ T5486] x_tables: duplicate underflow at hook 2 [ 73.420886][ T5483] xt_CT: No such helper "pptp" [ 73.486347][ T5490] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=6 sclass=netlink_route_socket pid=5490 comm=syz.1.520 [ 73.502400][ T3401] IPVS: starting estimator thread 0... [ 73.590771][ T5506] __nla_validate_parse: 11 callbacks suppressed [ 73.590793][ T5506] netlink: 4 bytes leftover after parsing attributes in process `syz.2.525'. [ 73.625910][ T5491] IPVS: using max 1920 ests per chain, 96000 per kthread [ 73.655692][ T5506] netlink: 4 bytes leftover after parsing attributes in process `syz.2.525'. [ 73.668137][ T5512] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.679189][ T5512] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.688416][ T5514] veth3: entered promiscuous mode [ 73.693497][ T5514] veth3: entered allmulticast mode [ 73.755882][ T5518] netlink: 16 bytes leftover after parsing attributes in process `syz.1.529'. [ 73.772930][ T5517] netlink: 8 bytes leftover after parsing attributes in process `syz.4.530'. [ 73.906012][ T5521] ip6t_srh: unknown srh match flags 4000 [ 73.991454][ T5529] loop5: detected capacity change from 0 to 8192 [ 74.085189][ T3776] FAT-fs (loop5): error, invalid access to FAT (entry 0x0000e1b1) [ 74.093129][ T3776] FAT-fs (loop5): Filesystem has been set read-only [ 74.123258][ T5543] netlink: 'syz.4.538': attribute type 10 has an invalid length. [ 74.131242][ T5543] netlink: 40 bytes leftover after parsing attributes in process `syz.4.538'. [ 74.145867][ T5543] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 74.182565][ T5547] loop4: detected capacity change from 0 to 512 [ 74.197890][ T5547] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 74.211052][ T5547] ext4 filesystem being mounted at /82/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.238020][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 74.271949][ T5551] bond1: (slave bond_slave_1): Device is not our slave [ 74.279053][ T5551] bond1: option active_slave: invalid value (bond_slave_1) [ 74.290115][ T5551] bond1 (unregistering): Released all slaves [ 74.310614][ T5554] netlink: 'syz.3.541': attribute type 4 has an invalid length. [ 74.340810][ T5561] netlink: 'syz.3.544': attribute type 6 has an invalid length. [ 74.357446][ T5561] netlink: 4 bytes leftover after parsing attributes in process `syz.3.544'. [ 74.374808][ T5561] netlink: 12 bytes leftover after parsing attributes in process `syz.3.544'. [ 74.435341][ T5566] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5566 comm=syz.3.546 [ 74.435350][ T5567] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5567 comm=syz.3.546 [ 74.435378][ T5567] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=5567 comm=syz.3.546 [ 74.447817][ T5566] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=5566 comm=syz.3.546 [ 74.731019][ T5611] netlink: 44 bytes leftover after parsing attributes in process `syz.3.555'. [ 74.758199][ T5614] netlink: 24 bytes leftover after parsing attributes in process `syz.3.556'. [ 74.777550][ T5616] netlink: 60 bytes leftover after parsing attributes in process `syz.1.557'. [ 74.845632][ T5623] loop2: detected capacity change from 0 to 1024 [ 74.862680][ T5626] syzkaller0: entered promiscuous mode [ 74.862896][ T5623] EXT4-fs: Ignoring removed orlov option [ 74.868473][ T5626] syzkaller0: entered allmulticast mode [ 74.891325][ T5623] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.976295][ T5632] macvlan3: entered promiscuous mode [ 74.981648][ T5632] macvlan3: entered allmulticast mode [ 74.987105][ T5632] veth0_virt_wifi: entered allmulticast mode [ 75.151208][ T5657] loop1: detected capacity change from 0 to 512 [ 75.167275][ T5657] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 75.184959][ T5634] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.193568][ T5634] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.204640][ T5657] ext4 filesystem being mounted at /128/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.243812][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 75.268944][ T5666] loop4: detected capacity change from 0 to 512 [ 75.280412][ T5666] EXT4-fs: Ignoring removed mblk_io_submit option [ 75.299464][ T5666] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=885ec129, mo2=0006] [ 75.311819][ T5666] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.573: Invalid inode bitmap blk 4 in block_group 0 [ 75.325163][ T5666] EXT4-fs (loop4): Remounting filesystem read-only [ 75.332412][ T5666] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.367218][ T5676] xt_hashlimit: size too large, truncated to 1048576 [ 75.373982][ T5676] xt_hashlimit: overflow, try lower: 18446744073709551610/3 [ 75.386993][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.465327][ T5685] gretap0: entered promiscuous mode [ 75.506196][ T5688] loop4: detected capacity change from 0 to 1024 [ 75.519135][ T5688] ext4: Unknown parameter 'pcr' [ 75.613158][ T5697] IPv6: NLM_F_REPLACE set, but no existing node found! [ 75.661704][ T5699] loop1: detected capacity change from 0 to 1024 [ 75.799385][ T5708] chnl_net:caif_netlink_parms(): no params data found [ 76.149275][ T5726] EXT4-fs: Ignoring removed oldalloc option [ 76.155698][ T5726] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 76.165479][ T5726] EXT4-fs (loop1): orphan cleanup on readonly fs [ 76.172249][ T5726] EXT4-fs warning (device loop1): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 76.187497][ T5726] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 76.244018][ T5726] EXT4-fs error (device loop1): __ext4_iget:5426: inode #14: block 1886221359: comm syz.1.590: invalid block [ 76.288295][ T5726] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.590: couldn't read orphan inode 14 (err -117) [ 76.300456][ T5726] EXT4-fs (loop1): 1 truncate cleaned up [ 76.306637][ T5726] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 76.344794][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.497382][ T5745] IPv6: A: Disabled Multicast RS [ 76.507755][ T5741] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.594: couldn't read orphan inode 26 (err -116) [ 76.530967][ T5741] EXT4-fs (loop1): Remounting filesystem read-only [ 76.548297][ T5741] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.561279][ T5741] ext4 filesystem being mounted at /141/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.614509][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.622477][ T5754] EXT4-fs: Ignoring removed bh option [ 76.671392][ T5754] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.700788][ T5766] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5766 comm=syz.3.600 [ 76.713932][ T5762] ext4: Invalid gid '0x00000000ffffffff' [ 76.785765][ T5766] IPVS: persistence engine module ip_vs_pe_ý not found [ 76.822549][ T5772] tmpfs: Bad value for 'mpol' [ 76.893529][ T5778] SELinux: security_context_str_to_sid () failed with errno=-22 [ 76.917895][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.975494][ T29] kauditd_printk_skb: 120 callbacks suppressed [ 76.975543][ T29] audit: type=1326 audit(1769771505.103:895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5779 comm="syz.4.604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2f2adaeb9 code=0x7ffc0000 [ 77.005216][ T29] audit: type=1326 audit(1769771505.103:896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5779 comm="syz.4.604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe2f2adaeb9 code=0x7ffc0000 [ 77.029156][ T29] audit: type=1326 audit(1769771505.103:897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5779 comm="syz.4.604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2f2adaeb9 code=0x7ffc0000 [ 77.052483][ T29] audit: type=1326 audit(1769771505.103:898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5779 comm="syz.4.604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2f2adaeb9 code=0x7ffc0000 [ 77.075794][ T29] audit: type=1326 audit(1769771505.103:899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5779 comm="syz.4.604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2f2adaeb9 code=0x7ffc0000 [ 77.099325][ T29] audit: type=1326 audit(1769771505.103:900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5779 comm="syz.4.604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fe2f2adaeb9 code=0x7ffc0000 [ 77.122587][ T29] audit: type=1326 audit(1769771505.103:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5779 comm="syz.4.604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2f2adaeb9 code=0x7ffc0000 [ 77.145947][ T29] audit: type=1326 audit(1769771505.103:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5779 comm="syz.4.604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2f2adaeb9 code=0x7ffc0000 [ 77.169323][ T29] audit: type=1326 audit(1769771505.103:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5779 comm="syz.4.604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2f2adaeb9 code=0x7ffc0000 [ 77.192774][ T29] audit: type=1326 audit(1769771505.103:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5779 comm="syz.4.604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2f2adaeb9 code=0x7ffc0000 [ 77.245809][ T5787] xt_TPROXY: Can be used only with -p tcp or -p udp [ 77.428238][ T5799] set_capacity_and_notify: 4 callbacks suppressed [ 77.428258][ T5799] loop4: detected capacity change from 0 to 512 [ 77.458202][ T5799] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.470901][ T5799] ext4 filesystem being mounted at /96/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 77.520586][ T5808] netlink: 'syz.1.613': attribute type 4 has an invalid length. [ 77.533132][ T5808] netlink: 'syz.1.613': attribute type 4 has an invalid length. [ 77.585563][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.770426][ T5818] loop4: detected capacity change from 0 to 8192 [ 77.905841][ T3804] loop4: p1 p2 p4 [ 77.915200][ T3804] loop4: p4 size 262912 extends beyond EOD, truncated [ 77.944805][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.013924][ T5818] loop4: p1 p2 p4 [ 78.026082][ T5818] loop4: p4 size 262912 extends beyond EOD, truncated [ 78.046376][ T5834] loop2: detected capacity change from 0 to 1024 [ 78.066174][ T5834] EXT4-fs: Ignoring removed mblk_io_submit option [ 78.102143][ T5834] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 78.113635][ T5834] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.144787][ T5834] EXT4-fs error (device loop2): __ext4_iget:5426: inode #12: block 13: comm syz.2.619: invalid block [ 78.156178][ T5834] EXT4-fs (loop2): Remounting filesystem read-only [ 78.236979][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.246971][ T3804] udevd[3804]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 78.260755][ T3805] udevd[3805]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 78.274204][ T3298] udevd[3298]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 78.361762][ T5865] loop1: detected capacity change from 0 to 512 [ 78.387679][ T5860] loop4: detected capacity change from 0 to 8192 [ 78.425860][ T5877] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 78.436104][ T3298] loop4: p1 p2 p3 p4 [ 78.440219][ T3298] loop4: p1 size 461056 extends beyond EOD, truncated [ 78.448515][ T5865] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 78.460125][ T5865] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 78.470269][ T5865] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.628: Corrupt directory, running e2fsck is recommended [ 78.489909][ T3298] loop4: p2 size 8388608 extends beyond EOD, truncated [ 78.496055][ T5865] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 78.498257][ T3298] loop4: p3 start 4279894019 is beyond EOD, truncated [ 78.511974][ T3298] loop4: p4 start 33554432 is beyond EOD, truncated [ 78.524764][ T5860] loop4: p1 p2 p3 p4 [ 78.528884][ T5860] loop4: p1 size 461056 extends beyond EOD, truncated [ 78.536650][ T5860] loop4: p2 size 8388608 extends beyond EOD, truncated [ 78.544475][ T5860] loop4: p3 start 4279894019 is beyond EOD, truncated [ 78.549626][ T5865] EXT4-fs error (device loop1): ext4_iget_extra_inode:5073: inode #15: comm syz.1.628: corrupted in-inode xattr: e_name out of bounds [ 78.551321][ T5860] loop4: p4 start 33554432 is beyond EOD, truncated [ 78.602541][ T5865] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.628: couldn't read orphan inode 15 (err -117) [ 78.617156][ T5883] __nla_validate_parse: 13 callbacks suppressed [ 78.617182][ T5883] netlink: 5 bytes leftover after parsing attributes in process `syz.5.634'. [ 78.632744][ T5883] 0ªî{X¹¦: renamed from gretap0 [ 78.640345][ T5865] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.653108][ T5883] 0ªî{X¹¦: entered allmulticast mode [ 78.666907][ T3804] udevd[3804]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 78.668949][ T3298] udevd[3298]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 78.694208][ T5883] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 78.726899][ T4798] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 78.740660][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.741070][ T3298] udevd[3298]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 78.753654][ T3804] udevd[3804]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 78.775012][ T4798] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 78.808216][ T5893] loop5: detected capacity change from 0 to 136 [ 78.844940][ T5893] iso9660: Unknown parameter 'ªô nå' [ 78.874429][ T5896] loop2: detected capacity change from 0 to 512 [ 78.883622][ T5901] netlink: 14 bytes leftover after parsing attributes in process `syz.3.641'. [ 78.936750][ T5901] .` (unregistering): (slave bridge0): Releasing backup interface [ 78.995196][ T5901] bridge0: port 1(syz_tun) entered disabled state [ 79.026851][ T5901] .` (unregistering): Released all slaves [ 79.041467][ T5916] netlink: 8 bytes leftover after parsing attributes in process `syz.2.646'. [ 79.050952][ T5911] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 79.085240][ T5916] netlink: 28 bytes leftover after parsing attributes in process `syz.2.646'. [ 79.153889][ T5605] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.196364][ T5605] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.208168][ T5598] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.208217][ T5598] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.307654][ T5943] netlink: 224 bytes leftover after parsing attributes in process `syz.2.653'. [ 79.316804][ T5943] netlink: 16 bytes leftover after parsing attributes in process `syz.2.653'. [ 79.359468][ T5945] Falling back ldisc for ptm0. [ 79.364378][ T5943] netlink: 12 bytes leftover after parsing attributes in process `syz.2.653'. [ 79.379795][ T5947] SET target dimension over the limit! [ 79.464739][ T5952] netlink: 4 bytes leftover after parsing attributes in process `syz.5.656'. [ 79.545267][ T5958] loop1: detected capacity change from 0 to 1764 [ 79.553827][ T5958] iso9660: Unknown parameter '' [ 79.614057][ T5976] loop4: detected capacity change from 0 to 128 [ 79.646441][ T5976] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 79.687128][ T5976] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 79.708629][ T5982] xt_TPROXY: Can be used only with -p tcp or -p udp [ 79.743509][ T5987] tipc: Enabling of bearer rejected, already enabled [ 79.842277][ T5998] can0: slcan on ttyS3. [ 79.863217][ T5991] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 79.884741][ T6004] netlink: 12 bytes leftover after parsing attributes in process `syz.2.664'. [ 79.916230][ T6004] netlink: 8 bytes leftover after parsing attributes in process `syz.2.664'. [ 79.954324][ T5998] can0 (unregistered): slcan off ttyS3. [ 79.993675][ T6020] netlink: 'syz.2.668': attribute type 21 has an invalid length. [ 80.076142][ T6020] syzkaller1: entered promiscuous mode [ 80.081679][ T6020] syzkaller1: entered allmulticast mode [ 80.155765][ T5996] team0: Device gtp0 is of different type [ 80.273728][ T6037] bridge0: port 3(macvtap1) entered blocking state [ 80.280601][ T6037] bridge0: port 3(macvtap1) entered disabled state [ 80.289875][ T6037] macvtap1: entered allmulticast mode [ 80.295597][ T6037] bridge0: entered allmulticast mode [ 80.301864][ T6037] macvtap1: left allmulticast mode [ 80.307226][ T6037] bridge0: left allmulticast mode [ 80.329036][ T6038] bridge0: port 3(macvtap1) entered blocking state [ 80.335947][ T6038] bridge0: port 3(macvtap1) entered disabled state [ 80.364530][ T6038] macvtap1: entered allmulticast mode [ 80.370070][ T6038] bridge0: entered allmulticast mode [ 80.389008][ T6038] macvtap1: left allmulticast mode [ 80.394203][ T6038] bridge0: left allmulticast mode [ 80.426449][ T6045] netlink: 'syz.1.675': attribute type 1 has an invalid length. [ 80.437825][ T6046] vlan2: entered promiscuous mode [ 80.443076][ T6046] dummy0: entered promiscuous mode [ 80.457775][ T6045] bond2: entered promiscuous mode [ 80.462901][ T6045] bond2: entered allmulticast mode [ 80.468440][ T6045] 8021q: adding VLAN 0 to HW filter on device bond2 [ 80.471391][ T6050] loop2: detected capacity change from 0 to 1024 [ 80.489116][ T6051] macvlan2: entered promiscuous mode [ 80.494500][ T6051] macvlan2: entered allmulticast mode [ 80.501847][ T6051] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 80.510731][ T6050] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 80.523113][ T6050] ext4 filesystem being mounted at /114/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.572380][ T6056] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 80.606708][ T6058] EXT4-fs error (device loop2): ext4_free_blocks:6728: comm syz.2.677: Freeing blocks not in datazone - block = 0, count = 16 [ 80.762864][ T5605] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm kworker/u8:15: bg 0: block 112: padding at end of block bitmap is not set [ 80.778217][ T5605] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 80.790584][ T5605] EXT4-fs (loop2): This should not happen!! Data will be lost [ 80.790584][ T5605] [ 80.800489][ T5605] EXT4-fs (loop2): Total free blocks count 0 [ 80.806587][ T5605] EXT4-fs (loop2): Free/Dirty block details [ 80.812568][ T5605] EXT4-fs (loop2): free_blocks=16 [ 80.817722][ T5605] EXT4-fs (loop2): dirty_blocks=16 [ 80.822863][ T5605] EXT4-fs (loop2): Block reservation details [ 80.828929][ T5605] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 80.849912][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 80.894722][ T6088] EXT4-fs: Ignoring removed orlov option [ 80.902259][ T6088] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #4: comm syz.2.683: pblk 98 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 80.920508][ T6088] EXT4-fs error (device loop2): ext4_quota_enable:7180: comm syz.2.683: Bad quota inode: 4, type: 1 [ 80.931735][ T6088] EXT4-fs warning (device loop2): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 80.949696][ T6088] EXT4-fs (loop2): mount failed [ 81.196647][ T6116] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 81.207667][ T6124] ieee802154 phy0 wpan0: encryption failed: -22 [ 81.222564][ T6126] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 81.248685][ T6124] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 81.284425][ T6124] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 81.304418][ T6124] EXT4-fs error (device loop5): ext4_map_blocks:825: inode #3: block 1: comm syz.5.695: lblock 1 mapped to illegal pblock 1 (length 1) [ 81.324743][ T6124] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.695: Failed to acquire dquot type 0 [ 81.368746][ T6124] EXT4-fs error (device loop5): ext4_free_blocks:6728: comm syz.5.695: Freeing blocks not in datazone - block = 0, count = 4096 [ 81.398553][ T6124] EXT4-fs error (device loop5): ext4_read_inode_bitmap:139: comm syz.5.695: Invalid inode bitmap blk 0 in block_group 0 [ 81.413193][ T6124] EXT4-fs error (device loop5) in ext4_free_inode:361: Corrupt filesystem [ 81.422746][ T5605] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:15: lblock 1 mapped to illegal pblock 1 (length 1) [ 81.441550][ T6121] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.694: inode has both inline data and extents flags [ 81.455019][ T6124] EXT4-fs (loop5): 1 orphan inode deleted [ 81.464569][ T5605] EXT4-fs error (device loop5): ext4_release_dquot:7022: comm kworker/u8:15: Failed to release dquot type 0 [ 81.466384][ T6124] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.488835][ T6121] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.694: couldn't read orphan inode 15 (err -117) [ 81.511722][ T6121] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.558104][ T6147] ip6tnl1: entered allmulticast mode [ 81.564697][ T3776] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.611305][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.655569][ T6150] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 81.728036][ T6162] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47953 sclass=netlink_route_socket pid=6162 comm=syz.2.706 [ 81.819650][ T6171] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 81.852636][ T6175] vfat: Bad value for 'shortname' [ 81.957740][ T5897] loop5: p1 < > p3 [ 81.963352][ T5897] loop5: p3 size 134217728 extends beyond EOD, truncated [ 81.986665][ T6177] loop5: p1 < > p3 [ 81.994804][ T6177] loop5: p3 size 134217728 extends beyond EOD, truncated [ 82.028976][ T29] kauditd_printk_skb: 186 callbacks suppressed [ 82.028996][ T29] audit: type=1400 audit(1769771510.153:1088): avc: denied { read write } for pid=6174 comm="syz.5.710" name="loop5p3" dev="devtmpfs" ino=1020 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 82.058554][ T29] audit: type=1400 audit(1769771510.153:1089): avc: denied { open } for pid=6174 comm="syz.5.710" path="/dev/loop5p3" dev="devtmpfs" ino=1020 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 82.139455][ T6185] syzkaller0: entered promiscuous mode [ 82.145068][ T6185] syzkaller0: entered allmulticast mode [ 82.327716][ T6198] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 82.355466][ T6198] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.716: bad orphan inode 15 [ 82.372453][ T6201] xt_TCPMSS: Only works on TCP SYN packets [ 82.383249][ T6198] ext4_test_bit(bit=14, block=18) = 1 [ 82.388851][ T6198] is_bad_inode(inode)=0 [ 82.393062][ T6198] NEXT_ORPHAN(inode)=1023 [ 82.397462][ T6198] max_ino=32 [ 82.400685][ T6198] i_nlink=0 [ 82.415014][ T29] audit: type=1400 audit(1769771510.543:1090): avc: denied { ioctl } for pid=6202 comm="syz.3.718" path="socket:[15388]" dev="sockfs" ino=15388 ioctlcmd=0x8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 82.440925][ T6198] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none. [ 82.464411][ T6198] ext2 filesystem being mounted at /120/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 82.466460][ T6162] set_capacity_and_notify: 6 callbacks suppressed [ 82.466503][ T6162] loop2: detected capacity change from 0 to 8192 [ 82.502651][ T6209] loop1: detected capacity change from 0 to 512 [ 82.524971][ T6209] EXT4-fs: Ignoring removed oldalloc option [ 82.544570][ T6209] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 82.554639][ T3776] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0009-000000000000. [ 82.563889][ T5897] loop2: p1 p2 p4 [ 82.573423][ T5897] loop2: p4 size 262912 extends beyond EOD, truncated [ 82.588759][ T6210] netlink: 'syz.1.719': attribute type 39 has an invalid length. [ 82.639700][ T6162] loop2: p1 p2 p4 [ 82.650282][ T6162] loop2: p4 size 262912 extends beyond EOD, truncated [ 82.685388][ T6216] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 82.765780][ T3804] udevd[3804]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 82.766053][ T3298] udevd[3298]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 82.778882][ T5897] udevd[5897]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 82.848224][ T6223] netlink: 'syz.2.723': attribute type 26 has an invalid length. [ 82.898975][ T6241] 9pnet: p9_errstr2errno: server reported unknown error [ 82.900309][ T29] audit: type=1400 audit(1769771511.023:1091): avc: denied { mount } for pid=6237 comm="syz.1.726" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 82.928424][ T29] audit: type=1400 audit(1769771511.023:1092): avc: denied { write } for pid=6237 comm="syz.1.726" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 83.054425][ T29] audit: type=1400 audit(1769771511.183:1093): avc: denied { create } for pid=6255 comm="syz.3.732" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 83.077561][ T6256] netlink: 'syz.3.732': attribute type 1 has an invalid length. [ 83.086267][ T6254] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 83.095053][ T29] audit: type=1400 audit(1769771511.203:1094): avc: denied { write } for pid=6255 comm="syz.3.732" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 83.096619][ T6254] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.181471][ T29] audit: type=1400 audit(1769771511.303:1095): avc: denied { write } for pid=6266 comm="syz.3.734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 83.244196][ T6254] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 83.254685][ T6254] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.317465][ T6277] loop5: detected capacity change from 0 to 128 [ 83.338274][ T6254] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 83.348685][ T6254] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.427854][ T6254] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 83.438567][ T6254] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.492431][ T6286] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 83.521413][ T5598] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.529713][ T5598] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.543843][ T31] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.552129][ T31] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.589748][ T5598] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.598077][ T5598] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.648074][ T5598] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.656418][ T5598] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.794654][ T29] audit: type=1400 audit(1769771511.923:1096): avc: denied { getopt } for pid=6297 comm="syz.5.743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 83.814857][ T4146] Bluetooth: hci0: command 0x1003 tx timeout [ 83.820905][ T3693] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 83.882268][ T6301] tipc: Started in network mode [ 83.887344][ T6301] tipc: Node identity 06c358a678d, cluster identity 4711 [ 83.894581][ T6301] tipc: Enabled bearer , priority 0 [ 83.915864][ T29] audit: type=1400 audit(1769771512.043:1097): avc: denied { cmd } for pid=6303 comm="syz.4.745" path="socket:[15170]" dev="sockfs" ino=15170 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 83.925775][ T6293] loop2: detected capacity change from 0 to 256 [ 83.963456][ T6297] tipc: Resetting bearer [ 83.997409][ T6311] loop1: detected capacity change from 0 to 128 [ 84.050275][ T6297] tipc: Disabling bearer [ 84.099815][ T6300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.162941][ T6316] batadv1: entered promiscuous mode [ 84.198240][ T6318] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 84.245814][ T6320] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5809 sclass=netlink_route_socket pid=6320 comm=syz.5.752 [ 85.019237][ T6352] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 85.105881][ T6354] loop1: detected capacity change from 0 to 512 [ 85.124445][ T6354] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.185696][ T6354] ext4 filesystem being mounted at /174/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.209820][ T6363] gretap0: entered allmulticast mode [ 85.238223][ T6354] EXT4-fs (loop1): shut down requested (1) [ 85.290617][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.401992][ T6381] openvswitch: netlink: Flow actions attr not present in new flow. [ 85.473694][ T6385] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 85.517660][ T6392] __nla_validate_parse: 12 callbacks suppressed [ 85.517795][ T6392] netlink: 4 bytes leftover after parsing attributes in process `syz.5.771'. [ 85.552175][ T6392] netlink: 12 bytes leftover after parsing attributes in process `syz.5.771'. [ 85.568557][ T6392] vlan2: entered promiscuous mode [ 85.573637][ T6392] bridge2: entered promiscuous mode [ 85.579223][ T6392] vlan2: entered allmulticast mode [ 85.584527][ T6392] bridge2: entered allmulticast mode [ 85.752797][ T6408] nft_compat: unsupported protocol 1 [ 85.826221][ T6414] loop5: detected capacity change from 0 to 128 [ 85.840462][ T6417] netlink: 24 bytes leftover after parsing attributes in process `syz.2.781'. [ 85.853899][ T6421] loop1: detected capacity change from 0 to 256 [ 85.861828][ T6418] netlink: 12 bytes leftover after parsing attributes in process `syz.2.781'. [ 85.872238][ T6413] netlink: 'syz.5.779': attribute type 39 has an invalid length. [ 85.889884][ T6421] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 85.903284][ T6414] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 85.986652][ T6414] ext4 filesystem being mounted at /134/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.049608][ T6430] loop2: detected capacity change from 0 to 512 [ 86.074469][ T6430] EXT4-fs (loop2): orphan cleanup on readonly fs [ 86.084488][ T6430] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 86.100298][ T3776] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 86.109634][ T6430] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.784: invalid indirect mapped block 8 (level 2) [ 86.124758][ T6430] EXT4-fs (loop2): Remounting filesystem read-only [ 86.146853][ T6430] EXT4-fs (loop2): 1 truncate cleaned up [ 86.169241][ T6430] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 86.251403][ T6436] syzkaller0: entered promiscuous mode [ 86.256999][ T6436] syzkaller0: entered allmulticast mode [ 86.266415][ T6430] netlink: 56 bytes leftover after parsing attributes in process `syz.2.784'. [ 86.332152][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.432182][ T6446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.447244][ T6450] loop2: detected capacity change from 0 to 512 [ 86.456556][ T6446] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.472545][ T6446] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 86.496914][ T6446] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 86.509675][ T6450] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.523299][ T6450] ext4 filesystem being mounted at /133/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 86.535773][ T6450] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #2: comm syz.2.792: corrupted inode contents [ 86.560661][ T6450] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #2: comm syz.2.792: mark_inode_dirty error [ 86.590106][ T6450] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #2: comm syz.2.792: corrupted inode contents [ 86.639549][ T6450] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #2: comm syz.2.792: mark_inode_dirty error [ 86.721209][ T6458] netlink: 28 bytes leftover after parsing attributes in process `syz.3.793'. [ 86.730314][ T6458] netlink: 28 bytes leftover after parsing attributes in process `syz.3.793'. [ 86.757870][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.910187][ T6479] EXT4-fs (loop2): orphan cleanup on readonly fs [ 86.917016][ T6479] EXT4-fs warning (device loop2): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 86.936068][ T6479] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 86.943601][ T6479] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.800: bad orphan inode 14 [ 86.960063][ T6468] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 86.982775][ T6467] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=6467 comm=syz.1.796 [ 86.991018][ T6468] EXT4-fs (loop1): 1 truncate cleaned up [ 87.005366][ T6479] ext4_test_bit(bit=13, block=18) = 1 [ 87.010931][ T6479] is_bad_inode(inode)=0 [ 87.015261][ T6479] NEXT_ORPHAN(inode)=0 [ 87.019347][ T6479] max_ino=32 [ 87.022574][ T6479] i_nlink=1 [ 87.030801][ T6468] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.044755][ T6479] EXT4-fs (loop2): 1 truncate cleaned up [ 87.055043][ T6479] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 87.076915][ T6488] netlink: 182 bytes leftover after parsing attributes in process `syz.3.801'. [ 87.090144][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.112134][ T6489] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 87.145031][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.159779][ T6489] EXT4-fs (loop5): orphan cleanup on readonly fs [ 87.182342][ T6489] EXT4-fs warning (device loop5): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 87.197038][ T6489] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 87.204055][ T6489] EXT4-fs error (device loop5): ext4_free_blocks:6728: comm syz.5.811: Freeing blocks not in datazone - block = 0, count = 4096 [ 87.218392][ T6489] EXT4-fs (loop5): 1 orphan inode deleted [ 87.220119][ T6492] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 87.225112][ T6489] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 87.307058][ T3776] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.412899][ T6512] netlink: 420 bytes leftover after parsing attributes in process `syz.4.810'. [ 87.455637][ T6517] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.465898][ T6517] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.475953][ T6517] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.479725][ T6514] netlink: 96 bytes leftover after parsing attributes in process `syz.5.812'. [ 87.492776][ T6517] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.528516][ T6517] ip6gretap0: entered promiscuous mode [ 87.559700][ T6517] macsec1: entered promiscuous mode [ 87.593257][ T6517] ip6gretap0: left promiscuous mode [ 87.732937][ T6514] bridge3: entered promiscuous mode [ 87.739085][ T6514] bridge3: entered allmulticast mode [ 87.808190][ T6534] set_capacity_and_notify: 3 callbacks suppressed [ 87.808224][ T6534] loop1: detected capacity change from 0 to 512 [ 87.838366][ T6518] 8021q: VLANs not supported on ipvlan0 [ 87.860158][ T6534] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.874962][ T29] kauditd_printk_skb: 173 callbacks suppressed [ 87.874977][ T29] audit: type=1400 audit(1769774076.002:1270): avc: denied { remount } for pid=6533 comm="syz.1.816" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 87.934479][ T6534] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 87.950387][ T6540] loop5: detected capacity change from 0 to 512 [ 87.967341][ T6538] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 87.988799][ T6546] loop4: detected capacity change from 0 to 1024 [ 88.026167][ T6551] xt_CT: You must specify a L4 protocol and not use inversions on it [ 88.034702][ T6550] xt_CT: You must specify a L4 protocol and not use inversions on it [ 88.055503][ T6546] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 88.067857][ T6546] ext4 filesystem being mounted at /124/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.120257][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.261337][ T29] audit: type=1400 audit(1769774076.372:1271): avc: denied { getopt } for pid=6568 comm="syz.5.822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 88.280846][ T29] audit: type=1326 audit(1769774076.372:1272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6568 comm="syz.5.822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabd50aaeb9 code=0x7ffc0000 [ 88.304254][ T29] audit: type=1326 audit(1769774076.372:1273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6568 comm="syz.5.822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabd50aaeb9 code=0x7ffc0000 [ 88.327688][ T29] audit: type=1326 audit(1769774076.372:1274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6568 comm="syz.5.822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabd50aaeb9 code=0x7ffc0000 [ 88.351095][ T29] audit: type=1326 audit(1769774076.372:1275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6568 comm="syz.5.822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=71 compat=0 ip=0x7fabd50aaeb9 code=0x7ffc0000 [ 88.374471][ T29] audit: type=1326 audit(1769774076.372:1276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6568 comm="syz.5.822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabd50aaeb9 code=0x7ffc0000 [ 88.398131][ T29] audit: type=1326 audit(1769774076.372:1277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6568 comm="syz.5.822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabd50aaeb9 code=0x7ffc0000 [ 88.421569][ T29] audit: type=1326 audit(1769774076.372:1278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6568 comm="syz.5.822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabd50aaeb9 code=0x7ffc0000 [ 88.444958][ T29] audit: type=1326 audit(1769774076.372:1279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6568 comm="syz.5.822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fabd50aaeb9 code=0x7ffc0000 [ 88.513585][ T5599] EXT4-fs error (device loop4): ext4_map_blocks:825: inode #15: comm kworker/u8:10: lblock 0 mapped to illegal pblock 0 (length 4) [ 88.527660][ T5599] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 4 with error 117 [ 88.540240][ T5599] EXT4-fs (loop4): This should not happen!! Data will be lost [ 88.540240][ T5599] [ 88.550642][ T31] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm kworker/u8:1: bg 0: block 112: padding at end of block bitmap is not set [ 88.565927][ T6575] bond3: Invalid ad_actor_system MAC address. [ 88.572075][ T6575] bond3: option ad_actor_system: invalid value (4294967295) [ 88.580843][ T6575] bond3 (unregistering): Released all slaves [ 88.590332][ T31] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 48 with max blocks 12 with error 117 [ 88.602894][ T31] EXT4-fs (loop4): This should not happen!! Data will be lost [ 88.602894][ T31] [ 88.650420][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 89.049245][ T6607] loop1: detected capacity change from 0 to 32768 [ 89.155763][ T6645] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6645 comm=syz.3.844 [ 89.187251][ T6640] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.194511][ T6640] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.322110][ T6640] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 89.336812][ T6640] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 89.494483][ T6648] netlink: 'syz.3.845': attribute type 15 has an invalid length. [ 89.525534][ T5599] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 89.534169][ T5599] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.566576][ T5599] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 89.575084][ T5599] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.642141][ T5599] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 89.650621][ T5599] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.685373][ T5599] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 89.693971][ T5599] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.714651][ T6670] vhci_hcd vhci_hcd.3: invalid port number 9 [ 89.720715][ T6670] vhci_hcd vhci_hcd.3: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 89.757392][ T6670] loop2: detected capacity change from 0 to 2048 [ 89.766228][ T6668] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 89.788177][ T6670] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.991724][ T6686] loop1: detected capacity change from 0 to 1024 [ 90.056266][ T6686] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 90.067340][ T6686] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 90.087241][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.106237][ T6686] EXT4-fs error (device loop1): ext4_ext_check_inode:523: inode #2: comm syz.1.853: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 2, max 1(4), depth 0(0) [ 90.155719][ T6686] EXT4-fs (loop1): no journal found [ 90.277059][ T6717] xt_nfacct: accounting object `syz1' does not exist [ 90.295605][ T6720] loop4: detected capacity change from 0 to 128 [ 90.307735][ T6720] FAT-fs (loop4): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 90.382956][ T6730] netlink: 'syz.2.856': attribute type 21 has an invalid length. [ 90.396561][ T6726] netlink: 'syz.1.865': attribute type 15 has an invalid length. [ 90.410111][ T6730] netlink: 'syz.2.856': attribute type 4 has an invalid length. [ 90.417912][ T6730] netlink: 'syz.2.856': attribute type 5 has an invalid length. [ 90.439950][ T6734] loop5: detected capacity change from 0 to 2048 [ 90.447751][ T6734] EXT4-fs: Ignoring removed mblk_io_submit option [ 90.496479][ T6734] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.603636][ T6746] __nla_validate_parse: 14 callbacks suppressed [ 90.603745][ T6746] netlink: 64 bytes leftover after parsing attributes in process `syz.3.871'. [ 90.676346][ T6750] netlink: 12 bytes leftover after parsing attributes in process `syz.2.873'. [ 90.685476][ T6750] netlink: 20 bytes leftover after parsing attributes in process `syz.2.873'. [ 90.825298][ T6759] loop2: detected capacity change from 0 to 128 [ 90.887258][ T6759] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 90.952582][ T6734] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.867: bg 0: block 234: padding at end of block bitmap is not set [ 90.969752][ T6734] EXT4-fs (loop5): Remounting filesystem read-only [ 90.984523][ T6759] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 90.992411][ T6759] FAT-fs (loop2): Filesystem has been set read-only [ 91.062933][ T6759] netlink: 84 bytes leftover after parsing attributes in process `syz.2.876'. [ 91.224177][ T3776] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.435454][ T6795] loop5: detected capacity change from 0 to 1024 [ 91.442529][ T6795] EXT4-fs: Ignoring removed bh option [ 91.452527][ T6795] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 91.487258][ T6795] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.605269][ T6810] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.619077][ T6810] EXT4-fs (loop2): Online resizing not supported with bigalloc [ 91.720031][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.845007][ T6821] netlink: 24 bytes leftover after parsing attributes in process `syz.2.894'. [ 91.854122][ T6821] netlink: 24 bytes leftover after parsing attributes in process `syz.2.894'. [ 91.863124][ T6821] netlink: 24 bytes leftover after parsing attributes in process `syz.2.894'. [ 92.129441][ T6823] netlink: 'syz.1.895': attribute type 8 has an invalid length. [ 92.168373][ T3776] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.207911][ T6832] vfat: Unknown parameter ' ' [ 92.307947][ T6839] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 92.315555][ T6839] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 92.432906][ T6857] 9p: Bad value for 'rfdno' [ 92.493949][ T6865] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 92.551946][ T6869] x_tables: ip_tables: dccp match: only valid for protocol 33 [ 92.560263][ T6867] netlink: 8 bytes leftover after parsing attributes in process `syz.3.908'. [ 92.569146][ T6867] netlink: 20 bytes leftover after parsing attributes in process `syz.3.908'. [ 92.584459][ T6867] netlink: 8 bytes leftover after parsing attributes in process `syz.3.908'. [ 92.801404][ T6900] EXT4-fs (loop2): orphan cleanup on readonly fs [ 92.813949][ T6900] EXT4-fs (loop2): 1 truncate cleaned up [ 92.820178][ T6900] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 92.870459][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.890029][ T29] kauditd_printk_skb: 404 callbacks suppressed [ 92.890059][ T29] audit: type=1326 audit(1769774081.013:1684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6901 comm="syz.3.919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f94c3fbaeb9 code=0x7ffc0000 [ 92.979854][ T29] audit: type=1326 audit(1769774081.053:1685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6901 comm="syz.3.919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94c3fbaeb9 code=0x7ffc0000 [ 93.003575][ T29] audit: type=1326 audit(1769774081.053:1686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6901 comm="syz.3.919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94c3fbaeb9 code=0x7ffc0000 [ 93.027381][ T29] audit: type=1326 audit(1769774081.053:1687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6901 comm="syz.3.919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f94c3fbaeb9 code=0x7ffc0000 [ 93.051248][ T29] audit: type=1326 audit(1769774081.053:1688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6901 comm="syz.3.919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94c3fbaeb9 code=0x7ffc0000 [ 93.074759][ T29] audit: type=1326 audit(1769774081.053:1689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6901 comm="syz.3.919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94c3fbaeb9 code=0x7ffc0000 [ 93.098646][ T29] audit: type=1326 audit(1769774081.053:1690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6897 comm="syz.1.918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4c9f90b78e code=0x7ffc0000 [ 93.122260][ T29] audit: type=1326 audit(1769774081.053:1691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6897 comm="syz.1.918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4c9f90b78e code=0x7ffc0000 [ 93.145781][ T29] audit: type=1326 audit(1769774081.053:1692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6901 comm="syz.3.919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f94c3fbaeb9 code=0x7ffc0000 [ 93.169214][ T29] audit: type=1326 audit(1769774081.053:1693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6901 comm="syz.3.919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94c3fbaeb9 code=0x7ffc0000 [ 93.346425][ T6923] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 93.371586][ T6925] tipc: Cannot configure node identity twice [ 93.590519][ T6945] netlink: 'syz.5.928': attribute type 2 has an invalid length. [ 93.667167][ T6947] set_capacity_and_notify: 3 callbacks suppressed [ 93.667214][ T6947] loop1: detected capacity change from 0 to 2048 [ 93.803871][ T6947] loop1: p3 p4 < > [ 93.808126][ T6947] loop1: p3 start 11362048 is beyond EOD, truncated [ 93.834500][ T3001] loop1: p3 p4 < > [ 93.844289][ T3001] loop1: p3 start 11362048 is beyond EOD, truncated [ 94.110933][ T6960] loop1: detected capacity change from 0 to 8192 [ 94.149840][ T6960] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 94.260478][ T6981] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 94.425755][ T6996] loop5: detected capacity change from 0 to 128 [ 94.439533][ T6996] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 94.457180][ T6996] ext4 filesystem being mounted at /165/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 94.842001][ T7051] tmpfs: Bad value for 'nr_inodes' [ 94.879146][ T7055] loop5: detected capacity change from 0 to 2048 [ 94.926845][ T7055] xt_recent: Unsupported userspace flags (000000b1) [ 95.077268][ T7070] tipc: Enabling of bearer rejected, failed to enable media [ 95.643712][ T7082] __nla_validate_parse: 7 callbacks suppressed [ 95.643732][ T7082] netlink: 60 bytes leftover after parsing attributes in process `syz.1.970'. [ 95.675164][ T7082] loop1: detected capacity change from 0 to 128 [ 95.696354][ T7081] syz.1.970: attempt to access beyond end of device [ 95.696354][ T7081] loop1: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 96.019008][ T7101] loop5: detected capacity change from 0 to 512 [ 96.113975][ T7116] bridge1: entered promiscuous mode [ 96.241671][ T7136] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7136 comm=syz.1.988 [ 96.294906][ T7136] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=7136 comm=syz.1.988 [ 96.341894][ T7143] geneve2: entered promiscuous mode [ 96.369505][ T7152] erspan1: entered allmulticast mode [ 96.430664][ T7154] netlink: 'syz.3.995': attribute type 1 has an invalid length. [ 96.447979][ T7154] 8021q: adding VLAN 0 to HW filter on device bond3 [ 96.458197][ T7154] bond3: option lp_interval: invalid value (18446744073709551608) [ 96.466169][ T7154] bond3: option lp_interval: allowed values 1 - 2147483647 [ 96.674053][ T7182] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 96.719583][ T7187] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1005'. [ 96.734789][ T7185] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1004'. [ 96.786447][ T7185] bridge3: entered promiscuous mode [ 97.085261][ T7211] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1013'. [ 97.107497][ T7200] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 97.114793][ T7200] IPv6: NLM_F_CREATE should be set when creating new route [ 97.123513][ T7211] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1013'. [ 97.319811][ T7231] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1020'. [ 97.398354][ T7234] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 97.689958][ T7269] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=36 sclass=netlink_audit_socket pid=7269 comm=syz.3.1028 [ 97.806437][ T7268] netlink: 'syz.5.1030': attribute type 2 has an invalid length. [ 97.817032][ T7268] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1030'. [ 97.829092][ T7268] bridge3: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 97.839887][ T7268] bridge3: entered promiscuous mode [ 97.845171][ T7268] bridge3: entered allmulticast mode [ 97.852600][ T7271] loop2: detected capacity change from 0 to 1024 [ 97.859966][ T7271] EXT4-fs: Ignoring removed bh option [ 97.871464][ T7271] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 97.889750][ T7282] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1031'. [ 97.902130][ T29] kauditd_printk_skb: 404 callbacks suppressed [ 97.902149][ T29] audit: type=1326 audit(1769774086.033:2098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7251 comm="syz.2.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1052aaeb9 code=0x7ffc0000 [ 97.934381][ T29] audit: type=1326 audit(1769774086.033:2099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7251 comm="syz.2.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb1052aaeb9 code=0x7ffc0000 [ 97.957983][ T29] audit: type=1326 audit(1769774086.033:2100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7251 comm="syz.2.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1052aaeb9 code=0x7ffc0000 [ 97.981898][ T29] audit: type=1326 audit(1769774086.033:2101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7251 comm="syz.2.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1052aaeb9 code=0x7ffc0000 [ 98.005435][ T29] audit: type=1326 audit(1769774086.033:2102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7251 comm="syz.2.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb1052aaeb9 code=0x7ffc0000 [ 98.028983][ T29] audit: type=1326 audit(1769774086.033:2103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7251 comm="syz.2.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1052aaeb9 code=0x7ffc0000 [ 98.052592][ T29] audit: type=1326 audit(1769774086.033:2104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7251 comm="syz.2.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb1052aaeb9 code=0x7ffc0000 [ 98.076095][ T29] audit: type=1326 audit(1769774086.033:2105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7251 comm="syz.2.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1052aaeb9 code=0x7ffc0000 [ 98.099600][ T29] audit: type=1326 audit(1769774086.033:2106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7251 comm="syz.2.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1052aaeb9 code=0x7ffc0000 [ 98.123096][ T29] audit: type=1326 audit(1769774086.033:2107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7251 comm="syz.2.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb1052aaeb9 code=0x7ffc0000 [ 98.246881][ T7290] loop5: detected capacity change from 0 to 2048 [ 98.255742][ T7290] EXT4-fs: Ignoring removed nomblk_io_submit option [ 98.271213][ T7286] loop1: detected capacity change from 0 to 32768 [ 98.299377][ T7290] EXT4-fs error (device loop5): empty_inline_dir:1770: inode #12: block 5: comm syz.5.1033: bad entry in directory: directory entry overrun - offset=4, inode=13, rec_len=7952, size=60 fake=0 [ 98.371065][ T7290] EXT4-fs (loop5): Remounting filesystem read-only [ 98.377993][ T7290] EXT4-fs warning (device loop5): empty_inline_dir:1777: bad inline directory (dir #12) - inode 13, rec_len 7952, name_len 0inline size 60 [ 98.408203][ T7294] netlink: 'syz.4.1035': attribute type 10 has an invalid length. [ 98.448600][ T7294] bridge0: port 3(netdevsim1) entered blocking state [ 98.455790][ T7294] bridge0: port 3(netdevsim1) entered disabled state [ 98.473289][ T7294] netdevsim netdevsim4 netdevsim1: entered allmulticast mode [ 98.481724][ T7294] netdevsim netdevsim4 netdevsim1: entered promiscuous mode [ 98.530279][ T7299] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 98.552213][ T7302] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 98.558787][ T7302] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 98.566541][ T7302] vhci_hcd vhci_hcd.0: Device attached [ 98.580437][ T7304] vhci_hcd: cannot find the pending unlink 0 [ 98.676447][ T7323] netlink: 83992 bytes leftover after parsing attributes in process `syz.5.1043'. [ 98.706901][ T7323] netlink: zone id is out of range [ 98.708718][ T7304] vhci_hcd: connection closed [ 98.712104][ T7323] netlink: zone id is out of range [ 98.733617][ T31] vhci_hcd vhci_hcd.2: stop threads [ 98.736957][ T7323] netlink: zone id is out of range [ 98.738996][ T31] vhci_hcd vhci_hcd.2: release socket [ 98.744256][ T7323] netlink: zone id is out of range [ 98.749650][ T31] vhci_hcd vhci_hcd.2: disconnect device [ 98.755314][ T7323] netlink: zone id is out of range [ 98.790099][ T7323] netlink: zone id is out of range [ 98.795364][ T7323] netlink: zone id is out of range [ 98.800616][ T7323] netlink: zone id is out of range [ 98.805874][ T7323] netlink: zone id is out of range [ 98.811229][ T7323] netlink: zone id is out of range [ 98.833067][ T7327] loop2: detected capacity change from 0 to 512 [ 98.855610][ T7327] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 98.873831][ T7335] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1046'. [ 98.891749][ T7327] EXT4-fs (loop2): 1 truncate cleaned up [ 98.963522][ T7338] loop5: detected capacity change from 0 to 512 [ 98.977489][ T7338] EXT4-fs: Ignoring removed nobh option [ 98.983209][ T7338] ext4: Unknown parameter 'noacl' [ 98.989910][ T7340] loop2: detected capacity change from 0 to 512 [ 99.036555][ T7340] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 99.125401][ T7335] loop1: detected capacity change from 0 to 32768 [ 99.143074][ T7343] loop5: detected capacity change from 0 to 128 [ 99.309250][ T7358] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=7358 comm=syz.5.1055 [ 99.405191][ T7369] loop1: detected capacity change from 0 to 256 [ 99.443956][ T7369] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 99.454397][ T7369] FAT-fs (loop1): Filesystem has been set read-only [ 99.456192][ T7368] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 99.469240][ T7371] loop2: detected capacity change from 0 to 128 [ 99.476453][ T7369] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 99.490749][ T7369] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 99.591538][ T7386] 9p: Bad value for 'rfdno' [ 99.608664][ T7386] loop2: detected capacity change from 0 to 1024 [ 99.629443][ T7389] loop5: detected capacity change from 0 to 512 [ 99.730969][ T7386] EXT4-fs error (device loop2): mb_free_blocks:2037: group 0, inode 18: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 99.769787][ T7386] EXT4-fs (loop2): Remounting filesystem read-only [ 99.921687][ T7428] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 100.019484][ T7449] can0: slcan on ptm0. [ 100.116698][ T7406] loop5: detected capacity change from 0 to 32768 [ 100.182108][ T7447] can0 (unregistered): slcan off ptm0. [ 100.308518][ T7478] program syz.2.1086 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 100.392182][ T7489] netlink: 'syz.2.1088': attribute type 21 has an invalid length. [ 100.596802][ T7502] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 100.630639][ T7512] netlink: 'syz.3.1092': attribute type 83 has an invalid length. [ 100.802651][ T7529] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e018, mo2=0002] [ 100.817089][ T7529] System zones: 1-12 [ 100.832178][ T7529] EXT4-fs warning (device loop5): ext4_xattr_inode_get:546: inode #11: comm syz.5.1096: ea_inode file size=0 entry size=6 [ 100.855156][ T7529] EXT4-fs (loop5): 1 orphan inode deleted [ 101.020646][ T7548] EXT4-fs: Ignoring removed bh option [ 101.052013][ T7548] EXT4-fs: inline encryption not supported [ 101.069368][ T7548] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 101.107805][ T7556] vlan0: entered promiscuous mode [ 101.113820][ T7548] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 101.137549][ T7548] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #3: block 2: comm syz.5.1101: lblock 2 mapped to illegal pblock 2 (length 1) [ 101.164065][ T7548] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #3: block 48: comm syz.5.1101: lblock 0 mapped to illegal pblock 48 (length 1) [ 101.226960][ T7568] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 101.252856][ T7548] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.1101: Failed to acquire dquot type 0 [ 101.264445][ T7548] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 101.274505][ T7548] EXT4-fs error (device loop5): ext4_evict_inode:253: inode #11: comm syz.5.1101: mark_inode_dirty error [ 101.316570][ T7548] EXT4-fs warning (device loop5): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 101.327083][ T7548] EXT4-fs (loop5): 1 orphan inode deleted [ 101.333501][ T7548] EXT4-fs mount: 13 callbacks suppressed [ 101.333521][ T7548] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.354671][ T5608] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:18: lblock 1 mapped to illegal pblock 1 (length 1) [ 101.378135][ T5608] EXT4-fs error (device loop5): ext4_release_dquot:7022: comm kworker/u8:18: Failed to release dquot type 0 [ 101.401943][ T7548] __nla_validate_parse: 3 callbacks suppressed [ 101.401963][ T7548] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1101'. [ 101.441265][ T3776] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.474978][ T3776] EXT4-fs error (device loop5): __ext4_get_inode_loc:4830: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 101.519487][ T7595] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 101.520874][ T3776] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 101.546963][ T3776] EXT4-fs error (device loop5): ext4_quota_off:7270: inode #3: comm syz-executor: mark_inode_dirty error [ 101.552084][ T7596] netlink: 47 bytes leftover after parsing attributes in process `syz.4.1116'. [ 101.575507][ T7595] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.602254][ T7595] ext4 filesystem being mounted at /191/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 101.636849][ T7596] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1116'. [ 101.693965][ T7596] bond0: entered promiscuous mode [ 101.699080][ T7596] bond_slave_0: entered promiscuous mode [ 101.705141][ T7596] bond_slave_1: entered promiscuous mode [ 101.723044][ T7596] dummy0: entered promiscuous mode [ 101.729274][ T7596] bond0: left promiscuous mode [ 101.734168][ T7596] bond_slave_0: left promiscuous mode [ 101.739721][ T7596] bond_slave_1: left promiscuous mode [ 101.745753][ T7596] dummy0: left promiscuous mode [ 102.062259][ T7637] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 102.355737][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.466965][ T7668] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1138'. [ 102.483107][ T7672] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1138'. [ 102.496609][ T7676] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1141'. [ 102.547171][ T7676] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.598872][ T3776] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.677519][ T7690] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 102.713133][ T7701] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1147'. [ 102.928699][ T7713] netlink: 'syz.4.1151': attribute type 11 has an invalid length. [ 102.994931][ T7718] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1152'. [ 103.003972][ T7718] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1152'. [ 103.048879][ T7718] 9pnet_virtio: no channels available for device dummy0 [ 103.071587][ T7725] netlink: 'syz.1.1153': attribute type 7 has an invalid length. [ 103.087402][ T29] kauditd_printk_skb: 906 callbacks suppressed [ 103.087466][ T29] audit: type=1400 audit(1769774091.214:3011): avc: denied { associate } for pid=7727 comm="syz.1.1153" name="core" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 103.395928][ T29] audit: type=1400 audit(1769774091.524:3012): avc: denied { map } for pid=7739 comm="syz.2.1157" path="/195" dev="tmpfs" ino=1075 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 103.427871][ T7738] netlink: 'syz.3.1156': attribute type 39 has an invalid length. [ 103.435804][ T29] audit: type=1400 audit(1769774091.524:3013): avc: denied { execute } for pid=7739 comm="syz.2.1157" path="/195" dev="tmpfs" ino=1075 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 103.460959][ T7738] No such timeout policy "syz1" [ 103.495126][ T7746] netlink: 'syz.3.1159': attribute type 10 has an invalid length. [ 103.508501][ T7744] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 103.531465][ T7746] team0: Port device dummy0 added [ 103.545381][ T7746] netlink: 'syz.3.1159': attribute type 10 has an invalid length. [ 103.565987][ T7750] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1160'. [ 103.589142][ T7746] team0: Port device dummy0 removed [ 103.606611][ T7750] wireguard0: entered promiscuous mode [ 103.612231][ T7750] wireguard0: entered allmulticast mode [ 103.695042][ T29] audit: type=1326 audit(1769774091.824:3014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7753 comm="syz.3.1161" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f94c3fbaeb9 code=0x0 [ 103.722057][ T7757] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7757 comm=syz.5.1162 [ 103.743877][ T7757] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=7757 comm=syz.5.1162 [ 103.807570][ T29] audit: type=1326 audit(1769774091.924:3015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7753 comm="syz.3.1161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94c3fbaeb9 code=0x7ffc0000 [ 103.831111][ T29] audit: type=1326 audit(1769774091.924:3016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7753 comm="syz.3.1161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94c3fbaeb9 code=0x7ffc0000 [ 103.854690][ T29] audit: type=1326 audit(1769774091.924:3017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7753 comm="syz.3.1161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f94c3fbaeb9 code=0x7ffc0000 [ 103.878224][ T29] audit: type=1326 audit(1769774091.924:3018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7753 comm="syz.3.1161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94c3fbaeb9 code=0x7ffc0000 [ 103.901744][ T29] audit: type=1326 audit(1769774091.924:3019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7753 comm="syz.3.1161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94c3fbaeb9 code=0x7ffc0000 [ 103.925219][ T29] audit: type=1326 audit(1769774091.924:3020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7753 comm="syz.3.1161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f94c3fbaeb9 code=0x7ffc0000 [ 104.606084][ T7823] netlink: 'syz.4.1184': attribute type 21 has an invalid length. [ 105.198530][ T7880] set_capacity_and_notify: 5 callbacks suppressed [ 105.198548][ T7880] loop5: detected capacity change from 0 to 1024 [ 105.224070][ T7880] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.266469][ T7880] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: comm syz.5.1203: inode #2803304040: comm syz.5.1203: iget: illegal inode # [ 105.282580][ T7880] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.1203: error while reading EA inode 2803304040 err=-117 [ 105.344766][ T3776] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.404262][ T7895] loop5: detected capacity change from 0 to 2048 [ 105.451830][ T7895] loop5: p1 < > p4 [ 105.457061][ T7895] loop5: p4 start 268435456 is beyond EOD, truncated [ 105.469975][ T3001] loop5: p1 < > p4 [ 105.474579][ T3001] loop5: p4 start 268435456 is beyond EOD, truncated [ 105.506177][ T5897] udevd[5897]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 105.533720][ T5897] udevd[5897]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 105.544084][ T7895] loop5: detected capacity change from 0 to 2048 [ 105.592486][ T5897] loop5: p1 < > p4 [ 105.597659][ T5897] loop5: p4 start 268435456 is beyond EOD, truncated [ 105.607047][ T7895] loop5: p1 < > p4 [ 105.612531][ T7895] loop5: p4 start 268435456 is beyond EOD, truncated [ 105.663981][ T3001] loop5: p1 < > p4 [ 105.668719][ T3001] loop5: p4 start 268435456 is beyond EOD, truncated [ 105.697216][ T5897] udevd[5897]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 105.715887][ T5897] udevd[5897]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 105.897823][ T7930] loop2: detected capacity change from 0 to 512 [ 105.908904][ T7930] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 105.918085][ T7930] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 105.934574][ T7930] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e09c, mo2=0006] [ 105.942719][ T7930] System zones: 0-2, 18-18, 34-35 [ 105.948609][ T7930] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 105.979065][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.004933][ T7933] macvtap1: entered promiscuous mode [ 106.010340][ T7933] batadv0: entered promiscuous mode [ 106.015802][ T7933] macvtap1: entered allmulticast mode [ 106.021284][ T7933] batadv0: entered allmulticast mode [ 106.042038][ T7933] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 106.052765][ T7933] batadv0: left allmulticast mode [ 106.057909][ T7933] batadv0: left promiscuous mode [ 106.154195][ T7941] loop5: detected capacity change from 0 to 1024 [ 106.184673][ T7941] EXT4-fs: Ignoring removed bh option [ 106.196130][ T7941] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 106.261472][ T7941] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.478529][ T7970] __nla_validate_parse: 13 callbacks suppressed [ 106.478609][ T7970] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1231'. [ 106.523322][ T7972] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 106.901518][ T3776] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.947946][ T7987] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1236'. [ 106.957265][ T7987] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1236'. [ 107.013866][ T7991] netlink: 'syz.2.1237': attribute type 1 has an invalid length. [ 107.021774][ T7991] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1237'. [ 107.043406][ T7987] bond3: option arp_validate: invalid value (609091586) [ 107.072451][ T7998] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1237'. [ 107.083565][ T7987] bond3 (unregistering): Released all slaves [ 107.126170][ T7991] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1237'. [ 107.135311][ T7991] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1237'. [ 107.172163][ T7991] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1237'. [ 107.181210][ T7991] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1237'. [ 107.268564][ T8006] batadv_slave_0: entered promiscuous mode [ 107.362213][ T8005] batadv_slave_0: left promiscuous mode [ 107.561145][ T8019] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 107.707380][ T8024] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1248'. [ 107.734458][ T8027] bond0: (slave dummy0): Releasing backup interface [ 107.745062][ T8027] bridge_slave_0: left allmulticast mode [ 107.750800][ T8027] bridge_slave_0: left promiscuous mode [ 107.756574][ T8027] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.787815][ T8027] bridge_slave_1: left allmulticast mode [ 107.793674][ T8027] bridge_slave_1: left promiscuous mode [ 107.799442][ T8027] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.835657][ T8027] bond0: (slave bond_slave_0): Releasing backup interface [ 107.857090][ T8027] bond0: (slave bond_slave_1): Releasing backup interface [ 107.882923][ T8027] team0: Port device team_slave_0 removed [ 107.898585][ T8027] team0: Port device team_slave_1 removed [ 107.915005][ T8027] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 107.931402][ T8027] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 107.941293][ T8027] net_ratelimit: 7 callbacks suppressed [ 107.941307][ T8027] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 107.965366][ T8028] team0: Mode changed to "loadbalance" [ 107.990149][ T8024] loop5: detected capacity change from 0 to 32768 [ 108.051724][ T8039] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=8039 comm=syz.3.1252 [ 108.107636][ T29] kauditd_printk_skb: 79 callbacks suppressed [ 108.107655][ T29] audit: type=1326 audit(1769774096.235:3100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8043 comm="syz.5.1255" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fabd50aaeb9 code=0x0 [ 108.114989][ T8039] syz_tun: left allmulticast mode [ 108.143308][ T8039] syz_tun: left promiscuous mode [ 108.148629][ T8039] bridge0: port 1(syz_tun) entered disabled state [ 108.170314][ T29] audit: type=1400 audit(1769774096.285:3101): avc: denied { connect } for pid=8040 comm="syz.4.1253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 108.188216][ T8039] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 108.209167][ T8041] netlink: 'syz.4.1253': attribute type 1 has an invalid length. [ 108.346323][ T8054] loop2: detected capacity change from 0 to 512 [ 108.379550][ T8054] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 108.397913][ T8054] EXT4-fs (loop2): 1 truncate cleaned up [ 108.403874][ T29] audit: type=1326 audit(1769774096.525:3102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8058 comm="syz.4.1260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2f2adaeb9 code=0x7ffc0000 [ 108.404355][ T8054] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.427510][ T29] audit: type=1326 audit(1769774096.525:3103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8058 comm="syz.4.1260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7fe2f2adaeb9 code=0x7ffc0000 [ 108.557866][ T8062] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 108.585439][ T8054] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.753248][ T8071] loop2: detected capacity change from 0 to 512 [ 108.800169][ T8071] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 108.962565][ T8098] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 108.978453][ T8101] x_tables: unsorted underflow at hook 2 [ 108.979100][ T8098] team0 (unregistering): Port device team_slave_0 removed [ 109.001936][ T8105] netlink: 'syz.5.1272': attribute type 3 has an invalid length. [ 109.009814][ T8105] netlink: 'syz.5.1272': attribute type 1 has an invalid length. [ 109.036879][ T29] audit: type=1326 audit(1769774097.165:3104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8058 comm="syz.4.1260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2f2adaeb9 code=0x7ffc0000 [ 109.060522][ T29] audit: type=1326 audit(1769774097.165:3105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8058 comm="syz.4.1260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2f2adaeb9 code=0x7ffc0000 [ 109.091295][ T8098] team0 (unregistering): Failed to send options change via netlink (err -105) [ 109.117638][ T29] audit: type=1400 audit(1769774097.235:3106): avc: denied { getattr } for pid=8109 comm="syz.5.1273" name="/" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 109.143088][ T8098] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 109.154200][ T8098] team0 (unregistering): Port device team_slave_1 removed [ 109.166445][ T8101] vlan3: entered allmulticast mode [ 109.171669][ T8101] team0: entered allmulticast mode [ 109.203682][ T8117] loop5: detected capacity change from 0 to 512 [ 109.210108][ T8116] xt_hashlimit: size too large, truncated to 1048576 [ 109.323986][ T8117] EXT4-fs (loop5): Invalid log block size: 4294967295 [ 109.415381][ T8125] netlink: 'syz.3.1277': attribute type 3 has an invalid length. [ 109.450025][ T8126] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 109.460097][ T8126] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.507917][ T5598] kworker/u8:9: attempt to access beyond end of device [ 109.507917][ T5598] loop2: rw=1, sector=2680, nr_sectors = 2064 limit=512 [ 109.527775][ T5598] kworker/u8:9: attempt to access beyond end of device [ 109.527775][ T5598] loop2: rw=1, sector=4744, nr_sectors = 2816 limit=512 [ 109.547555][ T5598] kworker/u8:9: attempt to access beyond end of device [ 109.547555][ T5598] loop2: rw=1, sector=7560, nr_sectors = 2104 limit=512 [ 109.565439][ T5598] kworker/u8:9: attempt to access beyond end of device [ 109.565439][ T5598] loop2: rw=1, sector=9664, nr_sectors = 2056 limit=512 [ 109.583149][ T5598] kworker/u8:9: attempt to access beyond end of device [ 109.583149][ T5598] loop2: rw=1, sector=11720, nr_sectors = 2352 limit=512 [ 109.601663][ T5598] kworker/u8:9: attempt to access beyond end of device [ 109.601663][ T5598] loop2: rw=1, sector=14072, nr_sectors = 2048 limit=512 [ 109.615916][ T8126] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 109.619095][ T5598] kworker/u8:9: attempt to access beyond end of device [ 109.619095][ T5598] loop2: rw=1, sector=16120, nr_sectors = 472 limit=512 [ 109.625773][ T8126] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.673731][ T8143] loop5: detected capacity change from 0 to 2048 [ 109.703409][ T8126] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 109.713409][ T8126] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.728073][ T29] audit: type=1400 audit(1769774097.855:3107): avc: denied { read } for pid=8144 comm="syz.2.1282" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 109.752506][ T29] audit: type=1400 audit(1769774097.855:3108): avc: denied { open } for pid=8144 comm="syz.2.1282" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 109.777271][ T29] audit: type=1400 audit(1769774097.855:3109): avc: denied { ioctl } for pid=8144 comm="syz.2.1282" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 109.805015][ T8143] loop5: p1 < > p2 p3 < > p4 < p5 > [ 109.810347][ T8143] loop5: partition table partially beyond EOD, truncated [ 109.817665][ T8143] loop5: p1 start 4294967288 is beyond EOD, truncated [ 109.825893][ T8143] loop5: p3 start 4284289 is beyond EOD, truncated [ 109.882388][ T8126] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 109.892730][ T8126] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.918676][ T3804] udevd[3804]: inotify_add_watch(7, /dev/loop5p5, 10) failed: No such file or directory [ 109.931694][ T5897] udevd[5897]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 109.980592][ T8160] bond3: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 109.991857][ T8160] bond3 (unregistering): Released all slaves [ 110.013622][ T5598] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.021928][ T5598] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.037936][ T5598] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.046362][ T5598] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.055208][ T5598] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.063511][ T5598] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.075886][ T5598] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.084236][ T5598] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.107491][ T8167] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.150858][ T3776] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.018514][ T8195] netem: incorrect gi model size [ 111.023639][ T8195] netem: change failed [ 111.579095][ T8215] __nla_validate_parse: 12 callbacks suppressed [ 111.579115][ T8215] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1304'. [ 111.967264][ T8232] netlink: 'syz.3.1309': attribute type 10 has an invalid length. [ 111.975255][ T8232] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1309'. [ 112.123668][ T8243] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 112.275776][ T8261] bridge2: entered promiscuous mode [ 112.388991][ T8272] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1321'. [ 112.476459][ T8279] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1323'. [ 112.534192][ T8288] xt_cluster: node mask cannot exceed total number of nodes [ 112.622896][ T8300] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1330'. [ 112.807103][ T8320] netlink: 'syz.4.1335': attribute type 10 has an invalid length. [ 112.818220][ T8320] team0: Port device dummy0 added [ 112.824004][ T8320] netlink: 'syz.4.1335': attribute type 10 has an invalid length. [ 112.834212][ T8320] team0: Port device dummy0 removed [ 112.841130][ T8314] set_capacity_and_notify: 1 callbacks suppressed [ 112.841146][ T8314] loop5: detected capacity change from 0 to 128 [ 112.854894][ T8314] ext4: Unknown parameter 'fsuuid' [ 112.864572][ T8320] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 112.899583][ T8329] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8329 comm=syz.3.1338 [ 113.127466][ T8358] loop5: detected capacity change from 0 to 512 [ 113.162094][ T29] kauditd_printk_skb: 81 callbacks suppressed [ 113.162113][ T29] audit: type=1400 audit(1769774101.295:3191): avc: denied { read } for pid=8360 comm="syz.4.1350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 113.191988][ T8358] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 113.201898][ T8358] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (45506!=33349) [ 113.213893][ T8364] sctp: [Deprecated]: syz.1.1352 (pid 8364) Use of int in max_burst socket option. [ 113.213893][ T8364] Use struct sctp_assoc_value instead [ 113.236177][ T8366] netlink: 'syz.4.1353': attribute type 1 has an invalid length. [ 113.245930][ T8361] loop2: detected capacity change from 0 to 1764 [ 113.280989][ T8358] EXT4-fs error (device loop5): __ext4_get_inode_loc:4830: comm syz.5.1349: Invalid inode table block 1 in block_group 0 [ 113.328554][ T8375] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.1344'. [ 113.352625][ T29] audit: type=1400 audit(1769774101.475:3192): avc: denied { mounton } for pid=8376 comm="syz.2.1355" path="mnt:[4026532384]" dev="nsfs" ino=4026532384 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 113.391265][ T8358] EXT4-fs (loop5): Remounting filesystem read-only [ 113.397849][ T8358] EXT4-fs (loop5): get root inode failed [ 113.403565][ T8358] EXT4-fs (loop5): mount failed [ 113.532419][ T8399] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 113.532419][ T8399] The task syz.5.1349 (8399) triggered the difference, watch for misbehavior. [ 113.580646][ T29] audit: type=1326 audit(1769774101.695:3193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8398 comm="syz.1.1362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c9f94aeb9 code=0x7ffc0000 [ 113.604222][ T29] audit: type=1326 audit(1769774101.695:3194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8398 comm="syz.1.1362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=118 compat=0 ip=0x7f4c9f94aeb9 code=0x7ffc0000 [ 113.627801][ T29] audit: type=1326 audit(1769774101.695:3195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8398 comm="syz.1.1362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c9f94aeb9 code=0x7ffc0000 [ 113.651431][ T29] audit: type=1326 audit(1769774101.695:3196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8398 comm="syz.1.1362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f4c9f94aeb9 code=0x7ffc0000 [ 113.676466][ T29] audit: type=1326 audit(1769774101.695:3197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8398 comm="syz.1.1362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c9f94aeb9 code=0x7ffc0000 [ 113.699982][ T29] audit: type=1326 audit(1769774101.695:3198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8398 comm="syz.1.1362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f4c9f94aeb9 code=0x7ffc0000 [ 113.723462][ T29] audit: type=1326 audit(1769774101.705:3199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8398 comm="syz.1.1362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c9f94aeb9 code=0x7ffc0000 [ 113.728534][ T8389] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1359'. [ 113.747017][ T29] audit: type=1326 audit(1769774101.705:3200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8398 comm="syz.1.1362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c9f94aeb9 code=0x7ffc0000 [ 113.782405][ T8408] 9p: Bad value for 'wfdno' [ 114.238386][ T8423] loop5: detected capacity change from 0 to 512 [ 114.501202][ T8433] netlink: 'syz.3.1368': attribute type 10 has an invalid length. [ 114.509093][ T8433] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1368'. [ 114.535836][ T8433] dummy0: entered allmulticast mode [ 114.542423][ T8433] bridge0: port 1(dummy0) entered blocking state [ 114.548927][ T8433] bridge0: port 1(dummy0) entered disabled state [ 114.582431][ T8441] loop5: detected capacity change from 0 to 128 [ 114.938847][ T8463] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1379'. [ 115.608294][ T8513] loop5: detected capacity change from 0 to 764 [ 115.664548][ T8519] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1391'. [ 115.855064][ T8534] loop2: detected capacity change from 0 to 512 [ 115.886882][ T8534] msdos: Unknown parameter ' [ 115.886882][ T8534] ' [ 115.985679][ T8543] loop5: detected capacity change from 0 to 128 [ 116.739499][ T8640] xt_CT: No such helper "syz0" [ 116.744991][ T8640] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2306 sclass=netlink_route_socket pid=8640 comm=syz.1.1411 [ 116.759121][ T8643] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8643 comm=syz.4.1412 [ 116.759680][ T8640] bridge0: entered allmulticast mode [ 116.830381][ T5606] kworker/u8:16: attempt to access beyond end of device [ 116.830381][ T5606] loop5: rw=1, sector=145, nr_sectors = 8 limit=128 [ 116.858110][ T5606] kworker/u8:16: attempt to access beyond end of device [ 116.858110][ T5606] loop5: rw=1, sector=161, nr_sectors = 8 limit=128 [ 116.897929][ T5606] kworker/u8:16: attempt to access beyond end of device [ 116.897929][ T5606] loop5: rw=1, sector=177, nr_sectors = 8 limit=128 [ 116.931829][ T5606] kworker/u8:16: attempt to access beyond end of device [ 116.931829][ T5606] loop5: rw=1, sector=193, nr_sectors = 8 limit=128 [ 116.971248][ T5606] kworker/u8:16: attempt to access beyond end of device [ 116.971248][ T5606] loop5: rw=1, sector=209, nr_sectors = 8 limit=128 [ 116.977487][ T8665] macvtap0: entered promiscuous mode [ 117.001224][ T5606] kworker/u8:16: attempt to access beyond end of device [ 117.001224][ T5606] loop5: rw=1, sector=225, nr_sectors = 8 limit=128 [ 117.012734][ T8665] macvtap0: left promiscuous mode [ 117.041938][ T5606] kworker/u8:16: attempt to access beyond end of device [ 117.041938][ T5606] loop5: rw=1, sector=241, nr_sectors = 8 limit=128 [ 117.074151][ T5606] kworker/u8:16: attempt to access beyond end of device [ 117.074151][ T5606] loop5: rw=1, sector=257, nr_sectors = 8 limit=128 [ 117.103917][ T5606] kworker/u8:16: attempt to access beyond end of device [ 117.103917][ T5606] loop5: rw=1, sector=273, nr_sectors = 8 limit=128 [ 117.131933][ T5606] kworker/u8:16: attempt to access beyond end of device [ 117.131933][ T5606] loop5: rw=1, sector=289, nr_sectors = 8 limit=128 [ 117.326850][ T8688] __nla_validate_parse: 3 callbacks suppressed [ 117.326873][ T8688] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1426'. [ 117.367812][ T8688] netlink: 'syz.1.1426': attribute type 8 has an invalid length. [ 117.370342][ T8680] loop5: detected capacity change from 0 to 4096 [ 117.402209][ T8680] EXT4-fs: Ignoring removed bh option [ 117.407808][ T8680] EXT4-fs: Ignoring removed mblk_io_submit option [ 117.507551][ T8680] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.552478][ T8700] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1428'. [ 117.580626][ T8704] loop2: detected capacity change from 0 to 512 [ 117.651654][ T8704] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.691473][ T8704] ext4 filesystem being mounted at /240/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 117.816282][ T8723] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 117.854123][ T8725] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1429'. [ 117.863239][ T8725] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1429'. [ 117.890448][ T3776] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.980022][ T8737] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1439'. [ 118.034111][ T8747] loop5: detected capacity change from 0 to 512 [ 118.044402][ T8747] EXT4-fs: Ignoring removed orlov option [ 118.051442][ T8739] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1440'. [ 118.060729][ T8749] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1440'. [ 118.079338][ T8747] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 118.088762][ T8750] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1444'. [ 118.089223][ T8747] EXT4-fs (loop5): orphan cleanup on readonly fs [ 118.122095][ T8747] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1443: bg 0: block 248: padding at end of block bitmap is not set [ 118.145899][ T8747] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.1443: Failed to acquire dquot type 1 [ 118.167873][ T8747] EXT4-fs (loop5): 1 truncate cleaned up [ 118.174684][ T8747] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 118.191511][ T8747] RDS: rds_bind could not find a transport for 2001::2, load rds_tcp or rds_rdma? [ 118.223352][ T3776] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.515483][ T8766] ip6gre1: entered promiscuous mode [ 118.671841][ T29] kauditd_printk_skb: 71 callbacks suppressed [ 118.671859][ T29] audit: type=1326 audit(1769774106.804:3270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8774 comm="syz.3.1452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94c3fbaeb9 code=0x7ffc0000 [ 118.710961][ T29] audit: type=1326 audit(1769774106.834:3271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8774 comm="syz.3.1452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94c3fbaeb9 code=0x7ffc0000 [ 118.735305][ T29] audit: type=1326 audit(1769774106.834:3272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8774 comm="syz.3.1452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94c3fbaeb9 code=0x7ffc0000 [ 118.758899][ T29] audit: type=1326 audit(1769774106.834:3273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8774 comm="syz.3.1452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94c3fbaeb9 code=0x7ffc0000 [ 118.783289][ T29] audit: type=1326 audit(1769774106.834:3274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8774 comm="syz.3.1452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f94c3fbaeb9 code=0x7ffc0000 [ 118.806977][ T29] audit: type=1326 audit(1769774106.834:3275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8774 comm="syz.3.1452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94c3fbaeb9 code=0x7ffc0000 [ 118.831245][ T29] audit: type=1326 audit(1769774106.834:3276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8774 comm="syz.3.1452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94c3fbaeb9 code=0x7ffc0000 [ 118.854793][ T29] audit: type=1326 audit(1769774106.834:3277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8774 comm="syz.3.1452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94c3fbaeb9 code=0x7ffc0000 [ 118.879026][ T29] audit: type=1326 audit(1769774106.834:3278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8774 comm="syz.3.1452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f94c3fbaeb9 code=0x7ffc0000 [ 118.903231][ T29] audit: type=1326 audit(1769774106.834:3279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8774 comm="syz.3.1452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94c3fbaeb9 code=0x7ffc0000 [ 119.008408][ T8784] netlink: 'syz.3.1454': attribute type 5 has an invalid length. [ 119.016495][ T8784] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1454'. [ 119.204048][ T8788] loop5: detected capacity change from 0 to 8192 [ 119.262680][ T8788] loop5: p1 < > p2 < > p3 p4 < > [ 119.267824][ T8788] loop5: partition table partially beyond EOD, truncated [ 119.286840][ T8788] loop5: p1 start 67108864 is beyond EOD, truncated [ 119.294518][ T8788] loop5: p3 start 100859904 is beyond EOD, truncated [ 119.383683][ T3804] udevd[3804]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 119.395553][ T5897] udevd[5897]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 119.422778][ T8794] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1458'. [ 119.534087][ T8800] syzkaller1: entered promiscuous mode [ 119.539630][ T8800] syzkaller1: entered allmulticast mode [ 119.879149][ T8822] netlink: 'syz.1.1469': attribute type 3 has an invalid length. [ 120.118122][ T8841] loop5: detected capacity change from 0 to 128 [ 120.495468][ T8896] macsec2: entered allmulticast mode [ 120.500828][ T8896] syz_tun: entered allmulticast mode [ 120.518160][ T8896] syz_tun: left allmulticast mode [ 120.533317][ T8899] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 120.545510][ T8870] tipc: New replicast peer: 255.255.255.255 [ 120.551682][ T8870] tipc: Enabled bearer , priority 10 [ 120.558979][ T8899] 9p: Bad value for 'wfdno' [ 120.593073][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.852352][ T23] IPVS: starting estimator thread 0... [ 120.920065][ T8914] loop5: detected capacity change from 0 to 512 [ 120.947297][ T8914] EXT4-fs (loop5): 1 truncate cleaned up [ 120.953087][ T8920] IPVS: using max 2064 ests per chain, 103200 per kthread [ 120.958242][ T8927] loop2: detected capacity change from 0 to 512 [ 120.968090][ T8927] EXT4-fs: Ignoring removed nobh option [ 120.971038][ T8914] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.992187][ T8927] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 121.008695][ T8927] EXT4-fs (loop2): 1 truncate cleaned up [ 121.015243][ T8927] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.026768][ T8914] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1494: bg 0: block 465: padding at end of block bitmap is not set [ 121.048606][ T8914] EXT4-fs (loop5): Remounting filesystem read-only [ 121.114350][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.132685][ T3776] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.219270][ T5604] IPVS: stop unused estimator thread 0... [ 121.238878][ T8945] SELinux: Context system_u:object_r:fsa is not valid (left unmapped). [ 121.317577][ T8951] loop5: detected capacity change from 0 to 512 [ 121.324948][ T8952] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8952 comm=syz.2.1502 [ 121.343063][ T8952] loop2: detected capacity change from 0 to 128 [ 121.365333][ T8951] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1503: bg 0: block 248: padding at end of block bitmap is not set [ 121.392932][ T8951] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.1503: Failed to acquire dquot type 1 [ 121.404989][ T8951] EXT4-fs (loop5): 1 truncate cleaned up [ 121.411371][ T8951] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.426358][ T8951] ext4 filesystem being mounted at /282/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.439717][ T8951] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.561537][ T23] tipc: Node number set to 2115197094 [ 122.113815][ T8997] loop2: detected capacity change from 0 to 512 [ 122.124798][ T8997] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 122.146591][ T8997] EXT4-fs (loop2): 1 truncate cleaned up [ 122.153092][ T8997] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.166099][ T8997] EXT4-fs error (device loop2): ext4_generic_delete_entry:2666: inode #2: block 13: comm syz.2.1517: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 122.187476][ T8997] EXT4-fs (loop2): Remounting filesystem read-only [ 122.194100][ T8997] EXT4-fs warning (device loop2): ext4_rename_delete:3729: inode #2: comm syz.2.1517: Deleting old file: nlink 4, error=-117 [ 122.347408][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.380249][ T9004] loop5: detected capacity change from 0 to 32768 [ 122.405534][ T9013] __nla_validate_parse: 8 callbacks suppressed [ 122.405554][ T9013] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1522'. [ 122.506329][ T9025] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 122.528867][ T9027] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 122.538255][ T9027] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1528'. [ 122.563549][ T9030] loop5: detected capacity change from 0 to 512 [ 122.624737][ T9030] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.642078][ T9046] netlink: 120 bytes leftover after parsing attributes in process `syz.3.1530'. [ 122.665879][ T9048] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1533'. [ 122.675167][ T9030] ext4 filesystem being mounted at /284/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.750244][ T9050] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1535'. [ 122.790139][ T3776] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.839365][ T9061] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1549 sclass=netlink_route_socket pid=9061 comm=syz.2.1538 [ 122.850671][ T9066] EXT4-fs: Ignoring removed oldalloc option [ 122.884512][ T9066] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.278932][ T3776] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.439926][ T9115] bridge0: port 1(veth0_to_bridge) entered blocking state [ 123.447415][ T9115] bridge0: port 1(veth0_to_bridge) entered disabled state [ 123.455235][ T9115] veth0_to_bridge: entered allmulticast mode [ 123.462291][ T9115] veth0_to_bridge: entered promiscuous mode [ 123.514124][ T9123] set_capacity_and_notify: 1 callbacks suppressed [ 123.514168][ T9123] loop2: detected capacity change from 0 to 512 [ 123.536063][ T9125] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1557'. [ 123.538808][ T9123] EXT4-fs: Ignoring removed orlov option [ 123.551473][ T9123] EXT4-fs: quotafile must be on filesystem root [ 123.554183][ T9125] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1557'. [ 123.584211][ T9123] netlink: 'syz.2.1555': attribute type 13 has an invalid length. [ 123.694964][ T9136] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1562'. [ 123.715715][ T9139] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1559'. [ 123.877957][ T9130] loop2: detected capacity change from 0 to 32768 [ 123.906252][ T9146] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1564'. [ 124.206861][ T9165] bond0: entered promiscuous mode [ 124.212574][ T9165] bond_slave_0: entered promiscuous mode [ 124.218431][ T9165] bond_slave_1: entered promiscuous mode [ 124.229476][ T9165] bond0: left promiscuous mode [ 124.234503][ T9165] bond_slave_0: left promiscuous mode [ 124.240252][ T9165] bond_slave_1: left promiscuous mode [ 124.369247][ T9178] loop2: detected capacity change from 0 to 512 [ 124.406717][ T29] kauditd_printk_skb: 257 callbacks suppressed [ 124.406738][ T29] audit: type=1400 audit(1769774112.534:3535): avc: denied { listen } for pid=9173 comm="syz.3.1574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 124.483460][ T29] audit: type=1326 audit(1769774112.614:3536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9188 comm="syz.1.1580" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4c9f94aeb9 code=0x0 [ 124.596288][ T9193] SELinux: security_context_str_to_sid () failed with errno=-22 [ 124.653051][ T9200] loop2: detected capacity change from 0 to 128 [ 124.684730][ T9200] /dev/loop2: Can't open blockdev [ 124.933099][ T9209] loop2: detected capacity change from 0 to 2048 [ 125.090837][ T9209] Alternate GPT is invalid, using primary GPT. [ 125.097850][ T9209] loop2: p1 p2 p3 [ 125.101821][ T9209] loop2: partition table partially beyond EOD, truncated [ 125.154935][ T9223] loop2: detected capacity change from 0 to 1024 [ 125.193727][ T3804] udevd[3804]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 125.205311][ T5897] udevd[5897]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 125.222980][ T3298] udevd[3298]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 125.450593][ T9223] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.481886][ T9232] w: entered promiscuous mode [ 125.493651][ T9232] 8021q: adding VLAN 0 to HW filter on device w [ 125.585044][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.744494][ T29] audit: type=1326 audit(1769774113.874:3537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9246 comm="syz.3.1597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94c3fbaeb9 code=0x7ffc0000 [ 125.807353][ T29] audit: type=1326 audit(1769774113.894:3538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9246 comm="syz.3.1597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f94c3fbaeb9 code=0x7ffc0000 [ 125.831090][ T29] audit: type=1326 audit(1769774113.894:3539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9246 comm="syz.3.1597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94c3fbaeb9 code=0x7ffc0000 [ 125.846621][ T9248] loop2: detected capacity change from 0 to 8192 [ 125.854748][ T29] audit: type=1326 audit(1769774113.894:3540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9246 comm="syz.3.1597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94c3fbaeb9 code=0x7ffc0000 [ 125.854841][ T29] audit: type=1326 audit(1769774113.894:3541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9246 comm="syz.3.1597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f94c3fbaeb9 code=0x7ffc0000 [ 125.854885][ T29] audit: type=1326 audit(1769774113.894:3542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9246 comm="syz.3.1597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94c3fbaeb9 code=0x7ffc0000 [ 125.854915][ T29] audit: type=1326 audit(1769774113.894:3543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9246 comm="syz.3.1597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94c3fbaeb9 code=0x7ffc0000 [ 125.854985][ T29] audit: type=1326 audit(1769774113.894:3544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9246 comm="syz.3.1597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7f94c3fbaeb9 code=0x7ffc0000 [ 126.073258][ T9263] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9263 comm=syz.3.1602 [ 126.536044][ T9302] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000 [ 126.619340][ T9305] loop5: detected capacity change from 0 to 1024 [ 126.627652][ T9304] 8021q: adding VLAN 0 to HW filter on device bond4 [ 126.644200][ T9305] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 126.655182][ T9305] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 126.665341][ T9305] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 126.665441][ T9308] loop2: detected capacity change from 0 to 512 [ 126.679178][ T9308] EXT4-fs: Ignoring removed nobh option [ 126.688962][ T9305] EXT4-fs (loop5): invalid journal inode [ 126.695491][ T9305] EXT4-fs (loop5): can't get journal size [ 126.695580][ T9308] EXT4-fs (loop2): unsupported inode size: 4 [ 126.703366][ T9305] EXT4-fs error (device loop5): ext4_protect_reserved_inode:182: inode #3: comm syz.5.1613: blocks 2-2 from inode overlap system zone [ 126.707798][ T9308] EXT4-fs (loop2): blocksize: 1024 [ 126.721717][ T9305] EXT4-fs (loop5): failed to initialize system zone (-117) [ 126.734985][ T9305] EXT4-fs (loop5): mount failed [ 126.859158][ T9325] netlink: 'syz.5.1620': attribute type 27 has an invalid length. [ 126.868443][ T9329] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 126.902918][ T9325] 0ªî{X¹¦: left allmulticast mode [ 126.953917][ T9342] netlink: 'syz.3.1625': attribute type 10 has an invalid length. [ 126.977806][ T9325] vlan2: left promiscuous mode [ 126.982738][ T9325] bridge2: left promiscuous mode [ 126.987896][ T9325] vlan2: left allmulticast mode [ 126.993522][ T9325] bridge2: left allmulticast mode [ 127.008224][ T9325] wireguard0: left promiscuous mode [ 127.013661][ T9325] wireguard0: left allmulticast mode [ 127.029472][ T1660] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.043384][ T9342] ipvlan2: entered promiscuous mode [ 127.074371][ T9342] bridge0: port 2(ipvlan2) entered blocking state [ 127.080896][ T9342] bridge0: port 2(ipvlan2) entered disabled state [ 127.112862][ T9342] ipvlan2: entered allmulticast mode [ 127.118295][ T9342] bridge0: entered allmulticast mode [ 127.131215][ T9342] ipvlan2: left allmulticast mode [ 127.136436][ T9342] bridge0: left allmulticast mode [ 127.156371][ T1660] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.324122][ T1660] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.369295][ T1660] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.417641][ T9364] loop5: detected capacity change from 0 to 128 [ 127.653546][ T9373] Cannot find del_set index 0 as target [ 127.896541][ T9361] __nla_validate_parse: 12 callbacks suppressed [ 127.896560][ T9361] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1626'. [ 127.946445][ T9361] hsr_slave_1 (unregistering): left promiscuous mode [ 127.976605][ T9398] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1632: bg 0: block 393: padding at end of block bitmap is not set [ 128.001004][ T9398] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 128.023131][ T9398] EXT4-fs (loop2): 2 truncates cleaned up [ 128.045896][ T9398] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.095285][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.140079][ T9411] tipc: Started in network mode [ 128.145141][ T9411] tipc: Node identity 7d0000, cluster identity 7 [ 128.151539][ T9411] tipc: Node number set to 8192000 [ 128.159894][ T9411] 9p: Bad value for 'rfdno' [ 128.196463][ T9413] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 128.213370][ T9413] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 128.230358][ T9413] EXT4-fs (loop2): orphan cleanup on readonly fs [ 128.237575][ T9413] EXT4-fs error (device loop2): __ext4_get_inode_loc:4830: comm syz.2.1637: Invalid inode table block 0 in block_group 0 [ 128.250750][ T9413] EXT4-fs (loop2): Remounting filesystem read-only [ 128.257569][ T9413] EXT4-fs (loop2): 1 truncate cleaned up [ 128.264141][ T9413] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 128.362082][ T9422] vlan4: entered promiscuous mode [ 128.367201][ T9422] geneve1: entered promiscuous mode [ 128.373330][ T9422] vlan4: entered allmulticast mode [ 128.378474][ T9422] geneve1: entered allmulticast mode [ 128.386730][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.402417][ T9422] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1638'. [ 128.475191][ T9429] netlink: 'syz.3.1641': attribute type 1 has an invalid length. [ 128.517256][ T9431] EXT4-fs: inline encryption not supported [ 128.539892][ T9431] EXT4-fs: Ignoring removed nobh option [ 128.543678][ T9432] xt_hashlimit: max too large, truncated to 1048576 [ 128.545697][ T9431] EXT4-fs: Ignoring removed bh option [ 128.575005][ T9431] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.649852][ T9440] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1643'. [ 128.664019][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.747843][ T9445] netlink: 'syz.4.1645': attribute type 6 has an invalid length. [ 128.781626][ T9450] IPv6: NLM_F_REPLACE set, but no existing node found! [ 128.829737][ T9450] sd 0:0:1:0: device reset [ 128.929599][ T9467] set_capacity_and_notify: 10 callbacks suppressed [ 128.929617][ T9467] loop2: detected capacity change from 0 to 512 [ 128.988443][ T9478] loop2: detected capacity change from 0 to 2048 [ 129.003902][ T9474] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1649'. [ 129.036892][ T9478] GPT:first_usable_lbas don't match. [ 129.042305][ T9478] GPT:34 != 290 [ 129.045820][ T9478] GPT: Use GNU Parted to correct GPT errors. [ 129.052036][ T9478] loop2: p1 p2 p3 [ 129.086113][ T9482] netlink: 296 bytes leftover after parsing attributes in process `syz.1.1657'. [ 129.113640][ T3298] udevd[3298]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 129.117117][ T5897] udevd[5897]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 129.127998][ T3804] udevd[3804]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 129.179180][ T9488] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 129.189067][ T9488] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.214295][ T9491] loop2: detected capacity change from 0 to 4096 [ 129.224135][ T9488] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 129.234190][ T9488] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.248848][ T9491] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.275623][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.286472][ T9488] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 129.296420][ T9488] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.354450][ T9508] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1663'. [ 129.366086][ T9488] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 129.376055][ T9488] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.389586][ T9511] bridge3: entered promiscuous mode [ 129.395516][ T9511] bridge3: entered allmulticast mode [ 129.401388][ T9509] usb usb8: usbfs: process 9509 (syz.2.1663) did not claim interface 0 before use [ 129.405355][ T9511] team0: Port device bridge3 added [ 129.411371][ T9508] usb usb8: usbfs: process 9508 (syz.2.1663) did not claim interface 0 before use [ 129.427218][ T9509] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1663'. [ 129.442052][ T1660] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 129.450328][ T1660] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.467226][ T1660] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 129.475569][ T1660] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.487406][ T1660] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 129.496101][ T1660] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.517585][ T1660] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 129.525913][ T1660] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.778342][ T9524] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1670'. [ 129.865821][ T29] kauditd_printk_skb: 103 callbacks suppressed [ 129.865848][ T29] audit: type=1400 audit(1769774117.994:3646): avc: denied { accept } for pid=9528 comm="syz.4.1671" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 130.140027][ T9543] ================================================================== [ 130.148194][ T9543] BUG: KCSAN: data-race in atime_needs_update / inode_update_timestamps [ 130.156582][ T9543] [ 130.158933][ T9543] write to 0xffff8881259e4c94 of 4 bytes by task 9539 on cpu 1: [ 130.166586][ T9543] inode_update_timestamps+0x147/0x270 [ 130.172093][ T9543] file_update_time_flags+0x269/0x300 [ 130.177517][ T9543] file_update_time+0x17/0x20 [ 130.182236][ T9543] shmem_file_write_iter+0x9c/0xf0 [ 130.187389][ T9543] iter_file_splice_write+0x6bc/0xa80 [ 130.192795][ T9543] direct_splice_actor+0x156/0x2a0 [ 130.197960][ T9543] splice_direct_to_actor+0x311/0x670 [ 130.203373][ T9543] do_splice_direct+0x119/0x1a0 [ 130.208265][ T9543] do_sendfile+0x382/0x650 [ 130.212727][ T9543] __x64_sys_sendfile64+0x105/0x150 [ 130.218061][ T9543] x64_sys_call+0x2db1/0x3000 [ 130.222776][ T9543] do_syscall_64+0xc0/0x2a0 [ 130.227341][ T9543] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.233264][ T9543] [ 130.235606][ T9543] read to 0xffff8881259e4c94 of 4 bytes by task 9543 on cpu 0: [ 130.243180][ T9543] atime_needs_update+0x2a8/0x3e0 [ 130.248240][ T9543] touch_atime+0x4a/0x340 [ 130.252609][ T9543] shmem_file_splice_read+0x5b1/0x600 [ 130.258035][ T9543] splice_direct_to_actor+0x26e/0x670 [ 130.263533][ T9543] do_splice_direct+0x119/0x1a0 [ 130.268441][ T9543] do_sendfile+0x382/0x650 [ 130.272914][ T9543] __x64_sys_sendfile64+0x105/0x150 [ 130.278151][ T9543] x64_sys_call+0x2db1/0x3000 [ 130.282875][ T9543] do_syscall_64+0xc0/0x2a0 [ 130.287424][ T9543] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.293357][ T9543] [ 130.295699][ T9543] value changed: 0x0f2561c8 -> 0x0fbdf59c [ 130.301601][ T9543] [ 130.303963][ T9543] Reported by Kernel Concurrency Sanitizer on: [ 130.310145][ T9543] CPU: 0 UID: 0 PID: 9543 Comm: syz.4.1671 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 130.321484][ T9543] Tainted: [W]=WARN [ 130.325320][ T9543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 130.335446][ T9543] ================================================================== [ 130.551426][ T9536] netlink: 'syz.5.1673': attribute type 1 has an invalid length.