last executing test programs: 25.840987554s ago: executing program 2 (id=97): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0xd, 0x5, 0x5da, 0x40, @dev={0xfe, 0x80, '\x00', 0x1c}, @empty, 0x7800, 0x8, 0x9, 0x7}}) setsockopt$inet6_IPV6_PKTINFO(r3, 0x29, 0x32, &(0x7f0000000100)={@private0={0xfc, 0x0, '\x00', 0x1}, r4}, 0x14) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x2000002, 0x3a, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 25.576064716s ago: executing program 2 (id=103): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x12}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40044) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) r3 = getpid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x30, r2, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_PID={0x8, 0x1c, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x30}, 0x1, 0x0, 0x0, 0x20040000}, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r4, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) 25.370872091s ago: executing program 2 (id=106): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd28, 0x25dfdbfc, {0x2, 0x20, 0x1, 0xc8, r2}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x40000c0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="3c000000100003052abd70000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006a8000014001280090001007663616e000000000400028008000a00", @ANYRES32=r2, @ANYBLOB="ff75a18448a2bed3b2558b0026fede42af8f1890f51a148c883b24f0509644a87021cafe9f15f621676b2b89450e2e4197b98542b5c35c4b97db4023a2ddcbd146709743164cb61564f6d2d4873e8e173b9c9802cea4ccdef5f4645120dc347f9033ebf0e3f0b4dd556993b2020ec91ebf4bbb62f0bbd1964f97c00ac892359f8ca73e96e84f3353993fc7cd37b75c38076654d271cfcbc7bb075357ebfa26a6ce526e19934597ef57c66f93b9731b5694d9d0a34a2a3ce9a71db07497f3b1108c4fa46d7170ef812b12d1d31abd40dc7181021121980a8779f372c48089115ab80250543f8e58e466aa0e46a8c72c49d38aec5334b71688"], 0x3c}}, 0x440b0) r3 = socket(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r4 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) ioctl$XFS_IOC_FSBULKSTAT(r3, 0xc0205865, &(0x7f0000000680)={&(0x7f00000002c0)=0x54f, 0x9, &(0x7f0000000340)=[{}, {}, {}, {}], &(0x7f0000000640)}) ftruncate(r4, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r4, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth0_to_hsr\x00', 0x0}) fstat(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_GETINFO(r1, 0xffffffff80000502, r6, &(0x7f0000000740)) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c583, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_RATE_ENABLE={0x8, 0x5, 0x7ffffffe}, @TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0x3}]}}]}, 0x40}}, 0x4048000) 25.160309985s ago: executing program 2 (id=110): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c40)={0x5, 0x3, &(0x7f0000000180)=ANY=[@ANYRESOCT=r0], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) unshare(0x60000600) sync() sync() sync() syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000640), 0x1, 0x5a8, &(0x7f0000000680)="$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") perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x5, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8006, 0x6}, 0x0, 0x10001, 0xda, 0x5, 0xc31bc7e, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func={0x1, 0x0, 0x0, 0xc, 0x3}]}, {0x0, [0x61, 0x30]}}, 0x0, 0x28, 0x0, 0x1, 0x5}, 0x28) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'veth0_virt_wifi\x00', 0x6bf1c2d5adba8c32}) r3 = dup(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_clone(0x1100011, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4000800}, 0x20004000) ptrace(0x10, r5) ptrace$setregset(0x4205, r5, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98}) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) ptrace$setregset(0x4205, r5, 0x1, &(0x7f00000001c0)={0x0}) getpgrp(0x0) sendmsg$AUDIT_SET(r3, 0x0, 0x20040090) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r4, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x1040) write$tun(r2, &(0x7f0000000740)=ANY=[], 0x2e) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x17, 0x4, &(0x7f0000000700)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x8a, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffe2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x100, 0x62) 24.796147745s ago: executing program 2 (id=113): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)={0x4c, 0x14, 0x101, 0x70bda4, 0x25dfdbfd, {0x1, 0x1f, 0x88, 0x10, {0x4e24, 0x4e22, [0x3, 0x7f, 0xf, 0xc3], [0x6, 0x0, 0x8, 0x7], 0x0, [0xfffffa9c, 0x7fffffff]}, 0x4000001, 0xc7}}, 0x73}, 0x1, 0x0, 0x0, 0x40480cc}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400020000007468305f746f5f68737200000000080002"], 0xe8}, 0x1, 0x0, 0x0, 0x4014}, 0x0) 24.216020558s ago: executing program 2 (id=121): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$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") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000140)={{}, {}, [], {0x4, 0x2}}, 0x24, 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x10}, 0x4, 0x0, 0x10000, 0x5, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) io_setup(0x8, &(0x7f0000002740)=0x0) io_pgetevents(r0, 0x2, 0x2, &(0x7f0000000000)=[{}, {}], &(0x7f0000000080)={0x0, 0x989680}, 0x0) dup(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) open(&(0x7f0000000140)='./file1\x00', 0x8041, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[], 0x15) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4004045) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399}) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000300)={0x3, {{0x2, 0x4e23, @remote}}, 0x1}, 0x90) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x7, @local}, 0x1c) io_uring_enter(r1, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) 24.150727654s ago: executing program 32 (id=121): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$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") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000140)={{}, {}, [], {0x4, 0x2}}, 0x24, 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x10}, 0x4, 0x0, 0x10000, 0x5, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) io_setup(0x8, &(0x7f0000002740)=0x0) io_pgetevents(r0, 0x2, 0x2, &(0x7f0000000000)=[{}, {}], &(0x7f0000000080)={0x0, 0x989680}, 0x0) dup(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) open(&(0x7f0000000140)='./file1\x00', 0x8041, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[], 0x15) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4004045) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399}) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000300)={0x3, {{0x2, 0x4e23, @remote}}, 0x1}, 0x90) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x7, @local}, 0x1c) io_uring_enter(r1, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) 3.094026898s ago: executing program 4 (id=362): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@can_delroute={0x68, 0x19, 0xc03, 0x0, 0x0, {}, [@CGW_DST_IF={0x8}, @CGW_MOD_XOR={0x15, 0x3, {{{}, 0x0, 0x0, 0x0, 0x0, "062e346aa0f99857"}}}, @CGW_MOD_SET={0x15, 0x4, {{{}, 0x0, 0x0, 0x0, 0x0, "82e11e0974088aea"}, 0x1}}, @CGW_SRC_IF={0x8}, @CGW_FILTER={0xc}, @CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffff8}}]}, 0x68}}, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f00000001c0)=0x6a, 0x4) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000180)=0xd13, 0x4) recvmmsg(r0, &(0x7f0000000380)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/3, 0x3}, 0x100}], 0x1, 0x45833af92e4a39ff, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000200)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x1c, 0x6, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @local, {[], {{0xfffe, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0x0, 0x0, 0x0, {[@generic={0xfe, 0x5, "e6673f"}, @window={0x3, 0x3, 0xfe}]}}}}}}}}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) fsetxattr$system_posix_acl(r2, &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000540)={{}, {0x1, 0x4}, [], {0x4, 0x2}, [{}], {0x10, 0x5}, {0x20, 0x2}}, 0x2c, 0x3) 2.285624391s ago: executing program 4 (id=368): ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000080)={0x40, 0x400, 0x8006, 0x2, 0x4, 0x6da2cadc, 0x8000, 0x6, 0x0}, &(0x7f00000000c0)=0x20) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000100)={r2, @in={{0x2, 0x4e23, @loopback}}, 0x7fffffff, 0xa98, 0x9, 0x10, 0x0, 0x79, 0x1}, 0x9c) r3 = openat$cgroup(0xffffffffffffffff, &(0x7f00000001c0)='syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000200)='cpuset.memory_pressure\x00', 0x0, 0x0) read$msr(r4, &(0x7f0000000240)=""/137, 0x89) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={r1, r4, 0x0, 0x17, &(0x7f0000000300)='cpuset.memory_pressure\x00', 0x0}, 0x30) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000380)={r5}, 0x4) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x5, 0x110, r4, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x80, &(0x7f00000003c0)=0x800, 0x0, 0x4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000680)={'syztnl1\x00', &(0x7f0000000580)={'sit0\x00', 0x0, 0x7800, 0x7800, 0xe37064bc, 0x4, {{0x2d, 0x4, 0x3, 0x0, 0xb4, 0x67, 0x0, 0x95, 0x2f, 0x0, @local, @remote, {[@ssrr={0x89, 0x1f, 0x91, [@rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @dev={0xac, 0x14, 0x14, 0x12}, @dev={0xac, 0x14, 0x14, 0x34}, @loopback]}, @end, @end, @ssrr={0x89, 0x17, 0x23, [@multicast2, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102, @multicast1]}, @lsrr={0x83, 0xb, 0x80, [@private=0xa010100, @loopback]}, @rr={0x7, 0x1f, 0xfd, [@private=0xa010100, @rand_addr=0x64010100, @rand_addr=0x64010102, @local, @multicast2, @broadcast, @private=0xa010101]}, @timestamp={0x44, 0x10, 0x63, 0x0, 0x8, [0xc, 0xffff2cf6, 0x2]}, @timestamp={0x44, 0x20, 0x26, 0x0, 0x8, [0x9b, 0x6, 0x1, 0x8, 0x100, 0xfffffffb, 0x7]}, @lsrr={0x83, 0xb, 0x75, [@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000780)=@o_path={&(0x7f0000000740)='./file0\x00', 0x0, 0x8, r3}, 0x18) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000800)=@o_path={&(0x7f00000007c0)='./file0\x00', 0x0, 0x8, r6}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x10, 0x1f, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xf}}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @map_val={0x18, 0x4, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x9b}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000500)='syzkaller\x00', 0x3, 0x25, &(0x7f0000000540)=""/37, 0x41100, 0x91b9c240db0b7c6b, '\x00', r8, @fallback=0xb, r4, 0x8, &(0x7f00000006c0)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000700)={0x2, 0x5, 0x3, 0x6}, 0x10, 0x0, r4, 0x0, &(0x7f0000000840)=[r4, r4, r4, r4, r9, r10], 0x0, 0x10, 0xfff, @value=r4}, 0x94) msgsnd(0x0, &(0x7f0000000940)={0x2, "0b73ffebf2f51fcd604f472dc582afa01b55609ed431d2baef041cc2b1f89352fa102523cc5da95a91766dc86d2e59e2547e995a09b8c6986d273e98d70b695f0e3cb4693aee6b41227b05bb2371d43590886942de010eb1ea670258a2b871d539c6f3032ffdb7d6406b540c258773e7d2be8ece9b2eb70f137fae9aa61e7d645283e80bec0eb5d860708413698f2637727000b256ab7b82442a8c7cfcd9f993a3be47d29d0611701c31858778a631737679113b10390a56b6fab8e26eca09ffde8c59350e97469d11b32efffa4b60234a29783d326108f2d2f576"}, 0xe3, 0x800) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a80), r4) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r11, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x78, r12, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x3}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x6}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5}, @ETHTOOL_A_LINKMODES_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x9}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x64}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x9}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x2}]}, 0x78}, 0x1, 0x0, 0x0, 0xd0}, 0x800) connect$inet(r4, &(0x7f0000000bc0)={0x2, 0x4e21, @multicast2}, 0x10) gettid() r13 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, 0x0, &(0x7f0000000c00)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index=0x8, 0x8, 0x0, 0x9, 0x4, 0x0, {0x0, r13}}) pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r14, &(0x7f0000000c80)={0x67446698, 0x1, 0x4, 0x0, 0x3, "842c8a5ba704faf776a633248758c4b354244b2af089398368b7933bccc5b2d8f81e40ca52df9adb06929c708c20b81bc4b991432de67f2e58c4f5aa4e4566d6f7cfb41298124c9d029102b0f690bf7b73a080d321bb1a7de827ee60cc2e4cfa15f399bd29c4b5178fe26c9768c5d2b12289ee2be8be9c9d3be805b0490d431883ce1e0014cf1cd9"}, 0x98) pidfd_send_signal(r15, 0x1b, &(0x7f0000000d40)={0x17, 0x400, 0x7a64456c}, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r14, 0xf503, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000e40)={r2, 0x58, &(0x7f0000000dc0)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}, @in6={0xa, 0x4e23, 0x1, @mcast2, 0xc}, @in6={0xa, 0x4e24, 0x400, @ipv4={'\x00', '\xff\xff', @loopback}, 0xfff}, @in={0x2, 0x4e22, @local}]}, &(0x7f0000000e80)=0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000ec0)=@bloom_filter={0x1e, 0x3, 0xb2d4, 0x4, 0x101, r4, 0x3, '\x00', r8, r15, 0x4, 0x2, 0x5, 0xd}, 0x50) 2.237780941s ago: executing program 4 (id=369): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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"/4195, @ANYBLOB="fe2ecf20a9a17bd2ed7e803f830375c150a1f848f604c2c1f932d2b7163be4b2b9a5bd521d185cfbee555b27608594beba6325923aaf5db74cff01000053db92c6c5fcbba0abd975fc76bea49b00513afc856ed89d3fadeda307ca587354322803b0983cc65725ae7f45fb95e7cdb28c6b886959b7dde2c87c73f6008cf6eed7861f24b7423704b95f3d05b92d3d7ff9d392833ecd02443320b60131a350360fcc1d659e2a03cb469caf0498bacae0735a161345b3d71a55f14ef636b6f832c7a6071fce83904dfd871b6d8e03648dbaa3a039eb5673792cae80335732030f9aeabaf3bb3cc4ca5fe75271d69b2e78beb2b81fc3cf3a18a7ae93a3cdbe6599b99408275e2b4b4477c6fcf4806134e839e13533ec000000000000006a1c000000000000000000000000000000000000000000000000000069c3288311b7414705e975eb3f1b77a120", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r4, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x64, r3, 0x1, 0x70bd2e, 0x25dfdbfc, {0x35}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r7 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r7, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x40000000) recvmsg$unix(r7, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x10102) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) readlinkat(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x0) r8 = open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x0) ftruncate(r8, 0x2007ffc) sendfile(r8, r8, 0x0, 0x2000000000006) 2.042803718s ago: executing program 1 (id=370): socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) socket(0x28, 0x5, 0x0) socket$igmp6(0xa, 0x3, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x20000015) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x121e, &(0x7f0000001b00)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0xfb07) signalfd4(r0, 0x0, 0x0, 0x80800) 2.018027522s ago: executing program 1 (id=371): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="38000000550069ed02000000fdffffff07000000", @ANYRES32, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="00010ffe0000000000000000000000000000000086dd"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x24000840) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="340000d3", @ANYRES16=r2, @ANYBLOB="010000004000fcdbdf2501000000040001801c0002800c00018008000100030000000c0001800800010004000000"], 0x34}}, 0x2000c050) 2.000746658s ago: executing program 1 (id=372): syz_io_uring_setup(0xe42, &(0x7f0000000180)={0x0, 0x2119, 0x100, 0x13, 0x169}, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB], 0x14}}, 0x0) r2 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r2, &(0x7f0000000140)=[{{&(0x7f0000000040)=@in={0x2, 0x4e20, @empty}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000029000000030000005700000000000000f1638b15066b289cd8bc43436168b204000000000000000f8189da27b21cea2db3df30e1ee76da"], 0x18}}], 0x1, 0x24008000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.empty_time\x00', 0x26e1, 0x0) close(r4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r5, 0x29, 0x33, &(0x7f0000000000)=0x7, 0x4) setsockopt$inet6_int(r5, 0x29, 0x31, &(0x7f0000000240)=0xf2b, 0x4) fallocate(r4, 0x4, 0x3, 0xa) getsockopt$inet6_buf(r5, 0x29, 0x6, &(0x7f0000000280)=""/10, &(0x7f0000000080)=0xfffffffffffffedc) socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r6, 0x0) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) sync_file_range(r3, 0xffffffffffffffff, 0xd, 0x1) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f0000000140), &(0x7f0000000040)=0x8) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r7) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./bus\x00', 0x0, &(0x7f0000000100)={[{@lazytime}, {@nobarrier}, {@journal_ioprio}, {@data_err_ignore}, {@delalloc}], [{@fsname={'fsname', 0x3d, 'lazytime'}}, {@subj_role={'subj_role', 0x3d, ':'}}, {@euid_eq={'euid', 0x3d, r7}}, {@permit_directio}]}, 0x1, 0x4c0, &(0x7f0000000580)="$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") socket$isdn(0x22, 0x3, 0x26) r8 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000a40)=[@in6={0xa, 0x4e23, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, @in6={0xa, 0x4e22, 0x400, @mcast2, 0xfffffffc}, @in6={0xa, 0x4e24, 0x2, @remote, 0x2}, @in6={0xa, 0x4e24, 0x918d, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @in={0x2, 0x4e20, @multicast2}, @in6={0xa, 0x4e22, 0x3, @empty, 0x80}], 0x9c) ioctl$XFS_IOC_GOINGDOWN(r8, 0x8004587d, &(0x7f00000003c0)=0x8) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x0) 1.855608857s ago: executing program 1 (id=374): r0 = socket$kcm(0x10, 0x5, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x1, 0x0, 0x2, 0x9, 0x0, 0x100000000, 0x10a14, 0x4, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000000), 0x9}, 0x214, 0x9, 0x9, 0x3, 0x0, 0x9, 0x7, 0x0, 0x6, 0x0, 0x9}, 0xffffffffffffffff, 0xb, r0, 0x2) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x3, 0x7d, 0xa, 0x2, 0x0, 0x200, 0x0, 0xb, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0xf81, 0x4, @perf_config_ext={0x4, 0x7}, 0x80, 0x100000001, 0x401, 0x3, 0x6, 0x4, 0x81, 0x0, 0x3ff}, r1, 0x3, r2, 0xb) r3 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r3, 0x28, 0x6, &(0x7f0000002080)=""/4116, &(0x7f00000000c0)=0x1014) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x0) 1.680460308s ago: executing program 1 (id=375): socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) socket(0x28, 0x5, 0x0) socket$igmp6(0xa, 0x3, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x20000015) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x121e, &(0x7f0000001b00)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) (fail_nth: 13) signalfd4(r0, 0x0, 0x0, 0x80800) 1.450786228s ago: executing program 0 (id=377): mknod(&(0x7f0000000040)='./file0\x00', 0x8001422, 0x0) r0 = creat(&(0x7f0000000180)='./file0\x00', 0x40) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='uid_map\x00') socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) read$msr(r1, &(0x7f0000000d40)=""/43, 0x2b) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0xff, 0x0, 0x0, 0x0, 0x3}}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000400)={'veth0_to_team\x00', 0x1}) r3 = socket$netlink(0x10, 0x3, 0x8) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd2b, 0xfffffffc, {0x60, 0x0, 0x0, r4, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_TARGET={0x8, 0x1, 0x3}, @TCA_PIE_TUPDATE={0x8, 0x3, 0x3ff}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x3000c81c) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/mdstat\x00', 0x1800, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r6 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc89e, 0xca20, 0x200008, 0xc1, 0x0, r0}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000a6d7721600000000ff00000085000000a00000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000002000000850000001700000095"], 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x17, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f00000008c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0xd, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, 0x94) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000740)={@fallback=r1, 0x11, 0x0, 0x7, &(0x7f0000000700)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000680)=[0x0, 0x0], &(0x7f00000006c0)=[0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000019200)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00', @ANYRES32=r5, @ANYBLOB="306dbccd2940cfd36995199d1d429eb61d82ee5d9ebe22981b5d526ff02edf4745c85abab234a03f6fee777ef789c5cf9777050005ad8514ec9f1d06dc90c899096cdf4792cb921c2a7b83ab6b30515e1f5d26ffff3aa9da6d4e46a123d07aa1ea20", @ANYRES64=r8], 0x20) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) pread64(r7, &(0x7f0000000200)=""/102400, 0x14b93, 0x1000000000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r9, 0x107, 0x12, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) 1.420638491s ago: executing program 1 (id=378): unshare(0x22020600) r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140), 0x4aa683, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300), 0x84, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) close_range(r1, 0xffffffffffffffff, 0x0) pidfd_send_signal(r0, 0x0, 0x0, 0x2) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000540)={{}, {0x1, 0x4}, [], {0x4, 0x2}, [{}], {0x10, 0x5}, {0x20, 0x2}}, 0x2c, 0x3) 1.029288385s ago: executing program 4 (id=381): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000200), 0x1, 0x4d6, &(0x7f0000000540)="$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") r0 = getpgid(0x0) syz_open_procfs$pagemap(r0, &(0x7f0000000080)) r1 = inotify_init1(0x80800) inotify_add_watch(r1, &(0x7f0000000040)='./file0\x00', 0x610003d5) syz_clone3(&(0x7f0000000400)={0x2000, &(0x7f0000000140), &(0x7f0000000240)=0x0, &(0x7f0000000280), {0xb}, &(0x7f00000002c0)=""/117, 0x75, &(0x7f0000000340)=""/107, &(0x7f00000003c0)=[r0, r0, r0, r0, r0, r0], 0x6}, 0x58) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x2c, 0x7, 0xc, 0x1, 0x0, 0x8, 0x20010, 0x9, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1ff, 0xffff}, 0xa01, 0x800, 0x5, 0x8, 0xffffffff, 0x400, 0x7f, 0x0, 0x4, 0x0, 0x80}, r2, 0xd, 0xffffffffffffffff, 0x8) setxattr$incfs_metadata(&(0x7f0000000f80)='./file0\x00', &(0x7f0000000fc0), 0x0, 0x0, 0x0) lremovexattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@known='user.incfs.metadata\x00') syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000200), 0x1, 0x4d6, &(0x7f0000000540)="$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") (async) getpgid(0x0) (async) syz_open_procfs$pagemap(r0, &(0x7f0000000080)) (async) inotify_init1(0x80800) (async) inotify_add_watch(r1, &(0x7f0000000040)='./file0\x00', 0x610003d5) (async) syz_clone3(&(0x7f0000000400)={0x2000, &(0x7f0000000140), &(0x7f0000000240), &(0x7f0000000280), {0xb}, &(0x7f00000002c0)=""/117, 0x75, &(0x7f0000000340)=""/107, &(0x7f00000003c0)=[r0, r0, r0, r0, r0, r0], 0x6}, 0x58) (async) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x2c, 0x7, 0xc, 0x1, 0x0, 0x8, 0x20010, 0x9, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1ff, 0xffff}, 0xa01, 0x800, 0x5, 0x8, 0xffffffff, 0x400, 0x7f, 0x0, 0x4, 0x0, 0x80}, r2, 0xd, 0xffffffffffffffff, 0x8) (async) setxattr$incfs_metadata(&(0x7f0000000f80)='./file0\x00', &(0x7f0000000fc0), 0x0, 0x0, 0x0) (async) lremovexattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@known='user.incfs.metadata\x00') (async) 799.502355ms ago: executing program 4 (id=383): prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 32) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) (rerun: 32) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) (async) write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd0900301103003000000060ce902d9f0c2f0081e949b93897bc3b0000000000007d01ff02000000000000000000000000000112006558"], 0xfdef) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) (async, rerun: 64) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (rerun: 64) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0xfffffff8, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) write(0xffffffffffffffff, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149", 0x13) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x2, 0x6, 0x2, 0xffffffff}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x880}, 0x8010) (async, rerun: 32) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'dummy0\x00'}) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002200000425bd7000ffdbdf2500b8b3fe1b00"], 0x1c}, 0x1, 0x0, 0x0, 0xc1}, 0x40) (async) unshare(0x2040400) (async) syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r8 = syz_open_dev$loop(&(0x7f0000000040), 0x1b3, 0x0) ioctl$BLKPG(r8, 0x1269, &(0x7f0000000140)={0x2, 0x0, 0x98, &(0x7f0000000080)={0xffffffff, 0x0, 0xa}}) 741.724622ms ago: executing program 3 (id=384): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'veth0_macvtap\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r2], 0x68}, 0x1, 0x0, 0x0, 0x4048000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x839, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x1, 0x2}, {0xe, 0x10}, {0x1, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x845}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x2e, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff00000000fdffffff00000000", @ANYRES32=0x0, @ANYBLOB="0000020089000600280012800b000100697036746e8800001800028014000300fe8000000000000000000000000000aa0800040044000000"], 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$TCSETSW2(r4, 0x402c542c, &(0x7f0000000040)={0x3, 0x1ff, 0xfffffff9, 0xc6d5, 0xfd, "01000000000060e800000000060cc1d600", 0x240001, 0x1fd}) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b70500000000000061107a000000000007000000000000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x400}, 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'veth0_macvtap\x00'}) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r2], 0x68}, 0x1, 0x0, 0x0, 0x4048000}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x839, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x1, 0x2}, {0xe, 0x10}, {0x1, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x845}, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x2e, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff00000000fdffffff00000000", @ANYRES32=0x0, @ANYBLOB="0000020089000600280012800b000100697036746e8800001800028014000300fe8000000000000000000000000000aa0800040044000000"], 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) ioctl$TCSETSW2(r4, 0x402c542c, &(0x7f0000000040)={0x3, 0x1ff, 0xfffffff9, 0xc6d5, 0xfd, "01000000000060e800000000060cc1d600", 0x240001, 0x1fd}) (async) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x1) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b70500000000000061107a000000000007000000000000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x400}, 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) (async) 682.63632ms ago: executing program 5 (id=386): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1f, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffffdbd}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x4d) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000680)={0xa, 0x4e20, 0x5, @mcast2, 0xde9}, 0x1c) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001400add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) rename(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='./file0\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1f, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffffdbd}]}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x4d) (async) socket$inet6(0xa, 0x2, 0x0) (async) bind$inet6(r0, &(0x7f0000000680)={0xa, 0x4e20, 0x5, @mcast2, 0xde9}, 0x1c) (async) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) (async) socket$netlink(0x10, 0x3, 0x8000000004) (async) writev(r1, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001400add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) (async) rename(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='./file0\x00') (async) 651.510923ms ago: executing program 5 (id=387): ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) syz_clone3(&(0x7f0000000300)={0x800, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)=0x0, {0x2d}, &(0x7f0000000140)=""/207, 0xcf, &(0x7f0000000240)=""/66, &(0x7f00000002c0)=[0x0], 0x1}, 0x58) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x84200}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x44, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_PID={0x8, 0x1c, r0}, @NL802154_ATTR_PID={0x8, 0x1c, 0xffffffffffffffff}, @NL802154_ATTR_PID={0x8, 0x1c, r1}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_PID={0x8, 0x1c, 0xffffffffffffffff}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x8010) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000480)={0x0, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2f}}}}, &(0x7f0000000540)=0x84) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f0000000580)={r3, 0xfffc}, 0x8) r4 = syz_open_dev$sg(&(0x7f00000005c0), 0x9, 0x20302) syz_emit_ethernet(0x5a, &(0x7f0000000600)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @multicast, @val={@void, {0x8100, 0x5}}, {@canfd={0xd, {{0x0, 0x0, 0x0, 0x1}, 0x2f, 0x1, 0x0, 0x0, "308893a7fc8ba17ea97149e49768dd520e1a43a31e954733252df3ab876c8900affd632d6eaa5f8b9a22f0c84174a58b202b598a41fdf69dbff405ef35f83ab9"}}}}, &(0x7f0000000680)={0x0, 0x2, [0xf3, 0x9d4, 0x560, 0x390]}) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000006c0)={0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000700)=0x28) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000740)={r7, @in={{0x2, 0x4e21, @multicast2}}, 0x2, 0x80, 0x4, 0x7fffffff, 0x1, 0xfffffff9, 0x35}, &(0x7f0000000800)=0x9c) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000000840)=0x804, 0x4) ioctl$XFS_IOC_FSGEOMETRY_V4(r2, 0x8070587c, &(0x7f0000000880)) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000900), 0x440000, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000000d00)=[{&(0x7f0000000940)=""/99, 0x63}, {&(0x7f00000009c0)=""/5, 0x5}, {&(0x7f0000000a00)=""/152, 0x98}, {&(0x7f0000000ac0)=""/7, 0x7}, {&(0x7f0000000b00)=""/106, 0x6a}, {&(0x7f0000000b80)=""/79, 0x4f}, {&(0x7f0000000c00)=""/203, 0xcb}], 0x7, 0x1, 0xff, 0x1e) r8 = geteuid() quotactl_fd$Q_QUOTAOFF(r4, 0xffffffff80000302, r8, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000f00)={0xffffffffffffffff, 0x20, &(0x7f0000000ec0)={&(0x7f0000000d80)=""/45, 0x2d, 0x0, &(0x7f0000000dc0)=""/225, 0xe1}}, 0x10) sendto$phonet(0xffffffffffffffff, &(0x7f0000000f40)="4b6c52cb3d7cfbd7db2eb4ead9c5649a86faf2ce1bc26e3d8586e247fbea28bd0da4246ad49851528eb4e28bbb59ea703abc4c11437ef1185b995230de02016e1fb94335eff220c092da442ed9f544f4416bb56b8fe6dfcb314bd256e44545a4b5896f", 0x63, 0x4040, &(0x7f0000000fc0)={0x23, 0x6, 0x81, 0xfa}, 0x10) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f0000001000)={r6, 0x7}, 0x8) fsetxattr$trusted_overlay_origin(r5, &(0x7f0000001040), &(0x7f0000001080), 0x2, 0x0) r9 = accept$unix(0xffffffffffffffff, &(0x7f00000010c0), &(0x7f0000001140)=0x6e) bind$unix(r9, &(0x7f0000001180)=@file={0x1, './file0\x00'}, 0x6e) r10 = fsopen(&(0x7f0000001200)='cpuset\x00', 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r10, 0x400c6615, &(0x7f0000001240)={0x0, @aes256, 0x0, @desc1}) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f00000012c0), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000001300)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(r11, &(0x7f00000014c0)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001480)={&(0x7f0000001340)={0x110, r12, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_EEE_MODES_OURS={0xd8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xcb, 0x5, "84d8e5bbdf2dac439c5e23df5baf64462461f5d4a2ade1800c97454cdfc8d924caa2950012c80824857030606c6f27ece32c501797e8112a49e1b1b15e95e12cebcd21cad96ec62ff2f91c4d53b47131279ba53ac7953569ae4a2fb4a6cddceccaa4d5c3effb4077254e42e145684ce390da6191f4cb1510c31f90407434ad9a7fe865c0bc082296453602cae5c800750f5acc605849c85fab5f9dab738af3c1c26c958ad9d40c62f7424819725259dd72c9fd3318211dc9b4d8365076e9a47903824c37437053"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1ff}]}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x2}, @ETHTOOL_A_EEE_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x50}, 0x4) syz_open_dev$vcsn(&(0x7f0000001500), 0x8e38, 0x80) 627.922757ms ago: executing program 5 (id=388): socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0xe0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f0000000580)=[0x0], &(0x7f00000005c0)=[0x0, 0x0], 0x0, 0x1b, &(0x7f0000000940)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0x16, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000100000000000000000000007112ab000000000095"], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="840000000002010400000000000000000a00000004000180300003802c00018014000300fc00000000000000000000100000000014004400fe800000001f610000000000000000bb3c0002800c00028005000100000000002c00018014000300fc02000000000000000000000000000014"], 0x84}}, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='!\x00\x00\x00', @ANYRES16, @ANYBLOB="000228bd7000fedbdf2518000000080001007063690011000200303030303a30303a31302e3000000000080003"], 0x60}, 0x1, 0x0, 0x0, 0x200400c0}, 0x20044014) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r4, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="10002dbd7000fddbdf257f0000000c009900010000001e0000000a00f5000802110000000000f7a4f595402982d5140034001185bc0546438510ad1d995e2f3e8ab70a0034000202020202020000"], 0x54}, 0x1, 0x0, 0x0, 0x4000004}, 0x814) socket$qrtr(0x2a, 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x24, 0x2a, 0xfffffffffffffffd, 0xec0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x1}, {0xe}, {0xfff1, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x8020}, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="911015000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r5, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x8000000004) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) listen(r6, 0x7) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x10e) r8 = syz_open_dev$loop(&(0x7f0000000440), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1a, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000300000000000000fe02001085000000b700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x12, '\x00', 0x0, @tracing=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) ioctl$BLKROGET(r8, 0x125e, &(0x7f0000000480)) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="02002bbd7000fbdbdf250d00000040000180140002007465616d3000000000000000000000000800030002000000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="080003000300000008000100", @ANYRES32=0x0, @ANYBLOB="83bc52d175a3e8208524a6b3655bd078f31af38ea08fcfc5912fda14f35a39ad9ea135bb4652d318fe363f3695a392d83617eb56dc2f55e4818f73fe3af04ef81aa3efffe6354bbf30dbec91c6fa1b92b179f3ced3664a762d3adb7de411db58167c691b8e6c0fc21f13d87e6f6cff40981ee9d8b80b762a5ff164e8c60c9282cc8bcbeb6055caef5f612a12c1cb51b458094e525fa5957a60b1941d0d99c3b7141f315b638e549d2fe0218737e3edd990c4b72af9"], 0x54}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="020c0100060000002cbd70000000000004000700010100f002"], 0x30}}, 0x40) sendmsg$ETHTOOL_MSG_PAUSE_SET(r6, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="7aae8000", @ANYRES16=r3, @ANYBLOB="00082bbd7000fcdbdf25160000002400018008000100", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="080003000100000008000100", @ANYRES32=r5, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x40081}, 0x810) r10 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) 574.928746ms ago: executing program 3 (id=389): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) syz_io_uring_setup(0x1104, &(0x7f0000000ac0)={0x0, 0xfffffffd, 0x100, 0xfffffffe, 0xca}, &(0x7f00000003c0)=0x0, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x42710, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x58, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x80) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1fc, 0x0, 0x1}) connect$inet(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) io_setup(0x2278, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, r6) sendmsg$IEEE802154_START_REQ(r5, 0x0, 0x8080) r7 = perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) socket(0x10, 0x3, 0x0) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) mknod$loop(0x0, 0x0, 0x1) r9 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r9, 0x11b, 0x8, &(0x7f00000000c0), &(0x7f0000000100)=0x30) io_submit(0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x300) 573.803526ms ago: executing program 0 (id=390): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/devices.allow\x00', 0x0, 0x48) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x41}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a09040000000000000000020009000900010073797a30000000000900020073797a320000000048000480440001800c0001007061796c6f61640034000280080004400000000008000840001000010800024000000002080005400000000f0800034000"], 0x9c}}, 0x0) open_by_handle_at(r0, &(0x7f00000006c0)=@ceph_nfs_fh={0x8, 0xfe, {0x40}}, 0x755c00) 542.787939ms ago: executing program 0 (id=391): r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x4, 0x1, 0x0, 0x0, 0x0, 0x9, 0x65280, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x2, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, r0, 0x0, 0xffffffffffffffff, 0x9) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f00000001c0)={'bridge0\x00', &(0x7f0000000080)=@ethtool_ringparam={0x7, 0x0, 0x5, 0x0, 0x2, 0x10004003, 0x7, 0x0, 0x7}}) r4 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x6) ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000040)={0x9, 0x9, 0x8, 0x5, 0x5, "c1e15fb309d5a940cdc68c232a18a7675c6942"}) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/mdstat\x00', 0x41, 0x0) writev(r5, &(0x7f0000000000)=[{&(0x7f0000001180)="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", 0x1000}], 0x1) 513.044872ms ago: executing program 3 (id=392): syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) (async) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x8, 0x2, 0x2, 0x3f, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x2f00020b, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r2 = socket(0x400000000010, 0x3, 0x0) (async) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000011c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x8}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) (async) r8 = socket$unix(0x1, 0x5, 0x0) (async) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1022002, 0x0) r10 = dup(r9) (async) r11 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) sendfile(r10, r11, 0x0, 0x8000fffffffe) (async) r12 = syz_io_uring_setup(0x1108, &(0x7f0000000880)={0x0, 0x2, 0x80, 0x2, 0x21e}, &(0x7f00000003c0)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r13, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) io_uring_enter(r12, 0x471b, 0xfffffffe, 0x20, 0x0, 0xffffffffffffff68) (async) ioctl$TIOCSETD(r10, 0x5423, &(0x7f0000000100)=0xf) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, 0x0) (async) sendmsg$nl_route_sched(r7, 0x0, 0xc884) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) 416.046481ms ago: executing program 0 (id=393): socket$inet_udp(0x2, 0x2, 0x0) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000004cc0)={0x1, 0x59, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x605, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xa5ba, 0x1, @perf_bp={0x0, 0x1}, 0x100410, 0x200, 0x4000006, 0x1, 0x9, 0x9, 0xfffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) (async) perf_event_open(&(0x7f0000004cc0)={0x1, 0x59, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x605, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xa5ba, 0x1, @perf_bp={0x0, 0x1}, 0x100410, 0x200, 0x4000006, 0x1, 0x9, 0x9, 0xfffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) setreuid(0x0, 0xee00) (async) setreuid(0x0, 0xee00) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x181002, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000180)={0x49db, 0x0, 0x3, 0x201, 0x19, "089ea164f13d7607"}) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xff2e) (async) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000001c0)={0x0, 0x6c6, 0x1, 0xb2, 0x10, "1b090000401400000a94c9355ab28b8725fd00"}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a01080000000000000000010000090900010073797a3100000000d0000000030a030000000000000000000100000a0900010073797a31000000000900030073797a3000000000a400030062", @ANYRES32, @ANYRESOCT, @ANYRESDEC], 0x118}, 0x1, 0x0, 0x0, 0x24000144}, 0x20000050) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000540001002bbd70000200000047000000", @ANYRES32=0x0], 0x18}, 0x1, 0x0, 0x0, 0x22004804}, 0x80c0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400c000}, 0x20008800) (async) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400c000}, 0x20008800) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000140)={0xa3, 0x6, 0xf0, 0xff, 0xfe, "516b238ddf008f4436106d6269bd9200", 0x3, 0x3}) r4 = syz_open_pts(r1, 0x20800) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) recvmsg$inet_nvme(r6, &(0x7f0000000640)={&(0x7f00000002c0)=@vsock={0x28, 0x0, 0x0, @local}, 0xffffffffffffff68, &(0x7f0000000700), 0x2, &(0x7f0000000500)=""/83, 0x53}, 0x40012100) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000440)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000100)=0x44) (async) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000100)=0x44) socket$packet(0x11, 0x3, 0x300) (async) socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x13, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000010000000000000000000000711863000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 415.791421ms ago: executing program 5 (id=394): socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) socket(0x28, 0x5, 0x0) socket$igmp6(0xa, 0x3, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x20000015) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x121e, &(0x7f0000001b00)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0xffff) signalfd4(r0, 0x0, 0x0, 0x80800) 389.489785ms ago: executing program 0 (id=395): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000300)={0x7fffffff, 0xfc}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1c00000022008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a090400000000000000000200fffa2400048020000180ef00010073796e70726f7879000000000c00028005000200050000000900010073797a30000000000900020073797a3200000000140000001100010000000200000000009faa2965"], 0x78}, 0x1, 0x0, 0x0, 0xc010}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000540)="d8000000120081414e81f782db010000001d080b01008100e8fe55a1010115000600142603600e120800040000001101a80012000500054006000d30514d3afab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef6aa98516277ce06bba020017cbec040000000000000000001fb791643a5ee0ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4688df216265e5dbf66f282ac02781245bd3f1aeb4edbb57a7025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40d", 0xd8}], 0x1}, 0xc000) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x400000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000a40)="2e9b3d0007e03dd651930100c575963f886411", 0x13}, {&(0x7f0000000180)="e220bf09000000", 0x7}], 0x2) 298.823066ms ago: executing program 3 (id=396): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xfffffffffffff000, 0xea}, 0x106240, 0x4, 0x20d8, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x5, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x468, 0x24, 0x4ee4e6a52ff56541, 0xc000000, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x43c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xc0000001}, {0x3, 0x0, 0xf, 0x0, 0x1, 0xffffdfff}, 0x7, 0x10, 0x2000000}}, @TCA_TBF_PTAB={0x404, 0x3, [0x77, 0x5, 0x3201, 0x1, 0x10001, 0x1000, 0x40, 0x9, 0x4, 0x3fd, 0x10001, 0x4, 0x69, 0x9, 0x401, 0xffffffff, 0x8, 0x5, 0x5, 0xffff, 0x4, 0xf44, 0x3, 0x10, 0xf04, 0xffffffff, 0x3, 0xf1, 0xa, 0x89b, 0x7fffffff, 0x454, 0x5, 0xc7a, 0x10000, 0x5, 0x6, 0x8000, 0x0, 0x0, 0x3, 0x900000, 0xdc, 0xc7, 0x5, 0x193, 0x5, 0x8, 0x8001, 0xd3, 0xfffffff0, 0x9, 0x7a80000, 0x8e82, 0x5, 0x1, 0x3, 0xffff0001, 0x35f8, 0x1, 0x10, 0x1, 0x5, 0x200, 0x8, 0xffa, 0x67a51429, 0x0, 0x0, 0x88b, 0xffffffff, 0x4, 0x8, 0x8, 0x5560, 0x1, 0x7f, 0x0, 0xffff, 0x97a, 0x2, 0xf, 0x8000, 0x1, 0xfffffff9, 0x0, 0x6, 0x2, 0x4d, 0x6, 0x3, 0x4, 0x3, 0x2abd3907, 0x8, 0x9, 0x80000001, 0x7, 0x0, 0x3, 0xd5, 0x4, 0x3, 0x4, 0xffff8001, 0x1, 0x8, 0x9, 0x5, 0x1ff, 0xd2, 0x98, 0x5, 0x0, 0x5ab3, 0x8, 0x0, 0x698, 0x7ff, 0xfff, 0x8001, 0x3, 0x1a1, 0x5, 0x6, 0x6cc7899, 0xb0, 0x40000, 0x2, 0xfffeffff, 0x5, 0x1, 0x80000001, 0x6, 0x4, 0x5, 0xfffffffb, 0x200, 0x2, 0x2, 0x6cf, 0xfffffff7, 0x10, 0x5, 0x3, 0x59980657, 0x9, 0xda, 0x5, 0xffffffff, 0x5, 0x80, 0x3b2, 0x5, 0x7, 0x3, 0x8, 0x9, 0x1, 0x7, 0x0, 0x9, 0x9f16, 0x8, 0x8, 0xdcc, 0x956, 0x1, 0x401, 0x10000, 0xad, 0x7, 0x0, 0x2, 0x38f89028, 0x7, 0x9c, 0x3, 0x4, 0xe178, 0x176a, 0x6, 0x3, 0x95b9d4d4, 0x5, 0x6, 0x0, 0x7, 0x2, 0x7f, 0x7, 0x689, 0xe65, 0x1, 0x8, 0x8, 0x6, 0x5, 0x5, 0x8, 0x1000, 0x9, 0x80, 0xd1, 0x10000, 0x100, 0x5, 0x8, 0x5, 0x1, 0x800, 0x2, 0x1, 0x6, 0x0, 0xb7f, 0xfffffff8, 0x1, 0x100, 0x1, 0x8, 0x6, 0x10000, 0xa, 0xace, 0xc, 0x200, 0x2, 0xd636, 0xfffe0000, 0xcc, 0x0, 0xb, 0x800, 0x40, 0x9, 0x4, 0x5, 0x9, 0x5, 0x9, 0x4ba7, 0xb5d, 0x2, 0x1, 0x3ff, 0x1, 0x5, 0x2, 0x28000, 0x3, 0x7fff, 0x9, 0xf, 0xefc7, 0x9]}, @TCA_TBF_RATE64={0xc, 0x4, 0xe53980014da857b9}]}}]}, 0x468}}, 0x0) 294.689694ms ago: executing program 5 (id=397): syz_clone(0x80820411, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) listen(r0, 0x5f14) accept$phonet_pipe(r0, 0x0, 0x0) 262.870708ms ago: executing program 0 (id=398): semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000001d00)=""/117) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x3000010, &(0x7f0000000040)={[{@errors_remount}, {@debug}]}, 0x1, 0x51a, &(0x7f00000001c0)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) socket$nl_rdma(0x10, 0x3, 0x14) (async) r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x34, 0x1407, 0x400, 0x70bd28, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r1}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000050}, 0x400c040) r2 = socket$l2tp6(0xa, 0x2, 0x73) sendto$inet6(r2, 0x0, 0x0, 0x42050, &(0x7f00000002c0)={0xa, 0xcaa1, 0x5, @mcast2, 0x404}, 0x1c) 228.60009ms ago: executing program 3 (id=399): socket(0x10, 0x3, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) unshare(0x24060400) r1 = fsopen(&(0x7f0000000240)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r2, 0x58, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=@newlink={0x94, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2017, 0x2021}, [@IFLA_LINKINFO={0x6c, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x60, 0x2, 0x0, 0x1, [@IFLA_HSR_VERSION={0x5, 0x6, 0x81}, @IFLA_HSR_SLAVE2={0x8, 0x2, r5}, @IFLA_HSR_SLAVE1={0x8, 0x1, r4}, @IFLA_HSR_SUPERVISION_ADDR={0xa}, @IFLA_HSR_SUPERVISION_ADDR={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}, @IFLA_HSR_SUPERVISION_ADDR={0xa, 0x4, @random="39d877b9f1e1"}, @IFLA_HSR_MULTICAST_SPEC={0x5, 0x3, 0xf8}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}, @IFLA_HSR_SEQ_NR={0x6, 0x5, 0x7}, @IFLA_HSR_SEQ_NR={0x6, 0x5, 0xfff}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x94}, 0x1, 0x200000000000000, 0x0, 0x1}, 0x8000002) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r7, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000440)=@filter={'filter\x00', 0x4, 0x4, 0x370, 0xffffffff, 0x1d0, 0x0, 0x0, 0xfeffffff, 0xffffffff, 0x2a0, 0x2a0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x33}, @loopback, [0xffffffff, 0xffffff00, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xffffffff, 0xffffff00], 'wlan1\x00', 'sit0\x00', {}, {0xff}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [0x0, 0x0, 0x0, 0xffffff00], [0x0, 0x0, 0xff000000, 0x1ffffff01], 'sit0\x00', 'batadv_slave_1\x00', {0xff}, {}, 0x34}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x0, {0x2000010}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000200)={r8, 0x0, &(0x7f0000001780)=""/4096}, 0x20) r10 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) write(r10, &(0x7f0000000000)="b8", 0x1) socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0x8}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x1}]}}]}, 0x48}}, 0x0) r11 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r11, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x1}, 0x1c) r12 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x29840) r13 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r14) ioctl$SG_IO(r12, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffffffffffb, 0x6, 0x1, @buffer={0x300, 0x0, 0x0}, &(0x7f0000000380)="259374c94982", 0x0, 0x0, 0x1c, 0x0, 0x0}) setsockopt$SO_ATTACH_FILTER(r11, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000005300)=[{0x28, 0x0, 0xfb, 0xfffff034}, {0x80000006, 0x66, 0x0, 0x30}]}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000100)={@random="806cdbf5202f", @broadcast, @val={@val={0x88a8, 0x4, 0x1, 0x3}, {0x8100, 0x7, 0x0, 0x4}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @address_request={0x11, 0x0, 0x0, 0x1000}}}}}, 0x0) 82.894958ms ago: executing program 3 (id=400): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000001080)={[{@discard}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@bsdgroups}, {@quota}]}, 0x3, 0x43a, &(0x7f0000001100)="$eJzs28tvG1UXAPAzfrRfX19CVR59AIGCqHgkTVpKF2xAILEACQkWZRmStCp1G9QEiVYRBITKCqFK7BFLJP4CVrBBwAqJLexRpQpl08LKaOyZxHYcNzFOnOLfT5r23plr3XM8c+07c+MABtZI+k8SsTcifouIoXq1ucFI/b/bSwtTfy0tTCVRrb7xZ1Jrd2tpYSpvmr9uT14pRRQ+SeJwm37nrly9MFmpzFzO6mPzF98dm7ty9ZnzFyfPzZybuTRx+vTJE+PPnZp4tid5pnndOvTB7JGDr7x1/bWpM9ff/umbJM+/JY8eGel08PFqtcfd9de+hnJS6mMgbEixPkyjXBv/Q1GMlZM3FC9/3NfggE1VrVar9619eLEK/Icl0e8IgP7Iv+jT+99826Kpx7Zw84X6DVCa9+1sqx8pRSFrU265v+2lkYg4s/j3l+kWm/McAgCgyXfp/OfpdvO/QjQ+F/p/toYyHBH3RMT+iDgVEQci4t6IWtv7I+KBDfbfukiyev5TuNFVYuuUzv+ez9a2mud/+ewvhotZbV8t/3Jy9nxl5nj2nhyL8s60Pt6hj+9f+vXztY41zv/SLe0/nwtmcdwo7Wx+zfTk/GRziN27+VHEoVK7/JPllYAkIg5GxKEu+zj/5NdH1jp25/w76ME6U/WriCfq538xWvLPJZ3XJ8f+F5WZ42P5VbHaz79ce32t/v9V/j2Qnv/dba//5fyHk8b12rmN93Ht90/XvKfp9vrfkbzZtO/9yfn5y+MRO5JX60E37p9oaTex0j7N/9jR9uN/f6y8E4cjIr2IH4yIhyLi4Sz2RyLi0Yg42iH/H1987J3u899caf7TGzr/K4Ud0bqnfaF44Ydvmzod3kj+6fk/WSsdy/Ysf/51sJ64uruaAQAA4O5TiIi9kRRGl8uFwuho/W/4D8TuQmV2bv6ps7PvXZqu/0ZgOMqF/EnXUMPz0PHstj6vT7TUT2TPjb8o7qrVR6dmK9P9Th4G3J4otR3/qT+K/Y4O2HR+rwWDy/iHwWX8w+Ay/mFwtRn/u/oRB7D12n3/f9iHOICt1zL+LfvBAHH/D4PL+IfBZfzDQJrbFXf+kbyCwqpCFLZFGOssfFbeFmHcRYV+fzIBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD0xj8BAAD//3g65pw=") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0xc, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0x1, &(0x7f0000000600)={0x5, 0x20000008b}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) sendfile(r1, r1, 0x0, 0xffffffff) 29.650046ms ago: executing program 5 (id=401): ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee00}}, './file1\x00'}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x2000000, &(0x7f0000000180)={[{@block_validity}, {}, {@minixdf}, {@inode_readahead_blks}, {@user_xattr}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@grpjquota}], [{@uid_gt={'uid>', r0}}, {@pcr={'pcr', 0x3d, 0x5}}]}, 0x3, 0x57b, &(0x7f0000000800)="$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") r1 = open(&(0x7f0000000140)='./file1\x00', 0x141242, 0x40) ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522) close(0x3) r2 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) fcntl$lock(0xffffffffffffffff, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f00000005c0), r2) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r3, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008808c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c640009801c000080060001000200000008000200ffffffff05000300030000001c000080060001000200000008000200ac141427050003"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x80) pwrite64(r1, &(0x7f0000000140)='2', 0x1, 0x8000c61) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r4, &(0x7f0000000240)={0xa, 0x2, 0x1000, @empty}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, "fbddf0", 0x8, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @mcast2, {[], @echo_reply={0x81, 0x0, 0x0, 0x2, 0x4}}}}}}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107042, 0x20) fallocate(r5, 0x10, 0x0, 0x8800000) 0s ago: executing program 4 (id=402): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000380)={{{@in, @in=@multicast2}}, {{@in6=@private0}}}, &(0x7f0000000480)=0xe8) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000700)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5560}}, './file0\x00'}) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000980)='./file1\x00', &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) statx(0xffffffffffffffff, &(0x7f0000000a40)='./file0\x00', 0x4000, 0x100, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r4, 0x0, r5, r6, 0x1000) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x401, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r7, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)=@o_path={&(0x7f00000004c0)='./file0\x00', 0x0, 0x4000, r0}, 0x18) sendmmsg$unix(r2, &(0x7f0000000c00)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000280)="04a8cd9bd60e4cb5c28e103ecde4533b4eac3bada4b5a37eca2527aa43325424c76535aebafb30abff2d390648ef3d0c8eb9a1d4e5526d3631b71247afbe31a475b50362afe8", 0x46}, {&(0x7f00000001c0)="a931", 0x2}], 0x2, &(0x7f0000000540), 0x0, 0x20000000}}, {{&(0x7f00000005c0)=@abs={0x873ef4b77b205104, 0x0, 0x4e24}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000640)="bb11945e6816c305f0f9c2346694457e03f6c7d7d4271003e416da7548366b31370d8197940dd2d27e36818282b328e00bdf0608350cba49e7b0f999366a22e4a43f8bdffed3eb340128", 0x4a}, {&(0x7f0000000cc0)="8732236ca78f475fdd801f5eea3b87b3d0669df63bf6a7bea7085ae4622f61f41fffa33f3ea2f78bd0ad27e22e9e10a1adf91800138c6074d75895b5727fdd", 0x3f}], 0x2, &(0x7f0000000780)=[@cred={{0x1c, 0x1, 0x2, {r1, 0xffffffffffffffff, r6}}}], 0x20, 0x1}}, {{&(0x7f00000007c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000bc0)=[{&(0x7f0000000840)="af647bf0d3444bbac689b87f60c250355ddb0b5f5f439319ff072f0ec8aa270dfc8ba74309f2f067b1f04f0375fad8574634665ca349bbae52c443be9c0e39562a9e0932f72efa3abfab28827f4502d5f4b6b4", 0x53}, {&(0x7f00000008c0)="46d8bd0f968caeb90812bd2829d2d8a80fab66306cfcb7686f824c79ec1b2ed14d7d483f2a225d0318120a285fb7fe0328b5bd87b380640dc842b83ebe50ce876eccd3cab230360769e9e770409ad2be25d6758ee8ccf5ee185dc491f720eced623d840110126ca3a1ca9aa6bc790259619c3de0e72b898bcbda37e8361b26848b97f930b3e7fe969b3565a2f5", 0x8d}, {&(0x7f0000000b80)="f5e5b3c98051e5ed823eb871c685701dcb10fbe01d692dd96708b4cd9aebb84995246c0b6da957ea3e1e3b6f248e92146821ed8a30d3322844", 0x39}], 0x3, 0x0, 0x0, 0x88d4}}], 0x3, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) modify_ldt$write(0x1, 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r9}, 0x2c, {'wfdno', 0x3d, r8}}) write$P9_RVERSION(r10, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff"], 0x15) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000001000000611498000000000005000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) eventfd2(0x100004, 0x800) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000000d00)={0x0, 0x0, {}, {0x0, @struct}}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x1000000000000b1, 0x42758, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0xd07, 0x4}, 0x2000, 0x4, 0x0, 0x0, 0xb, 0x3, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x1, 0xffffffffffffffff, 0x1) kernel console output (not intermixed with test programs): atman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.492282][ T3309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.510263][ T3309] team0: Port device team_slave_0 added [ 29.536019][ T3309] team0: Port device team_slave_1 added [ 29.542988][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.556604][ T3317] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.563719][ T3317] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.570847][ T3317] bridge_slave_0: entered allmulticast mode [ 29.577377][ T3317] bridge_slave_0: entered promiscuous mode [ 29.584034][ T3317] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.591109][ T3317] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.598252][ T3317] bridge_slave_1: entered allmulticast mode [ 29.604564][ T3317] bridge_slave_1: entered promiscuous mode [ 29.617276][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.627324][ T3310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.641977][ T3310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.677650][ T3317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.692041][ T3317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.701328][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.708266][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.734322][ T3309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.749749][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.756790][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.782796][ T3309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.795661][ T3311] hsr_slave_0: entered promiscuous mode [ 29.801767][ T3311] hsr_slave_1: entered promiscuous mode [ 29.808172][ T3310] team0: Port device team_slave_0 added [ 29.818912][ T3313] team0: Port device team_slave_0 added [ 29.828337][ T3310] team0: Port device team_slave_1 added [ 29.842367][ T3313] team0: Port device team_slave_1 added [ 29.857740][ T3317] team0: Port device team_slave_0 added [ 29.868564][ T3317] team0: Port device team_slave_1 added [ 29.878934][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.886116][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.912035][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.927192][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.934385][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.960412][ T3310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.971538][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.978481][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.004375][ T3310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.025989][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.033095][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.059211][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.079716][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.086740][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.112855][ T3317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.128034][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.135139][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.161018][ T3317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.182096][ T3309] hsr_slave_0: entered promiscuous mode [ 30.188015][ T3309] hsr_slave_1: entered promiscuous mode [ 30.193851][ T3309] debugfs: 'hsr0' already exists in 'hsr' [ 30.199601][ T3309] Cannot create hsr debugfs directory [ 30.236979][ T3317] hsr_slave_0: entered promiscuous mode [ 30.242955][ T3317] hsr_slave_1: entered promiscuous mode [ 30.248824][ T3317] debugfs: 'hsr0' already exists in 'hsr' [ 30.254741][ T3317] Cannot create hsr debugfs directory [ 30.268240][ T3310] hsr_slave_0: entered promiscuous mode [ 30.274294][ T3310] hsr_slave_1: entered promiscuous mode [ 30.280091][ T3310] debugfs: 'hsr0' already exists in 'hsr' [ 30.285840][ T3310] Cannot create hsr debugfs directory [ 30.298339][ T3313] hsr_slave_0: entered promiscuous mode [ 30.304355][ T3313] hsr_slave_1: entered promiscuous mode [ 30.310170][ T3313] debugfs: 'hsr0' already exists in 'hsr' [ 30.315915][ T3313] Cannot create hsr debugfs directory [ 30.489410][ T3311] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 30.503172][ T3311] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 30.511601][ T3311] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 30.522328][ T3311] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 30.540856][ T3317] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 30.549711][ T3317] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 30.561766][ T3317] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 30.572135][ T3317] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 30.609609][ T3309] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 30.619790][ T3309] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 30.629424][ T3309] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 30.640569][ T3309] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 30.675101][ T3313] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 30.684269][ T3313] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 30.694860][ T3313] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 30.703698][ T3313] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 30.726004][ T3311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.743012][ T3311] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.750024][ T3310] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 30.759307][ T3310] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 30.775173][ T3310] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 30.785433][ T3317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.796387][ T3310] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 30.807594][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.814637][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.823722][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.830747][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.856331][ T3317] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.872563][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.879658][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.907595][ T3311] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.918347][ T3311] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.933815][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.940847][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.956314][ T3309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.986570][ T3309] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.005468][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.017865][ T3317] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.031814][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.039054][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.047904][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.055121][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.093223][ T3310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.100652][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.116839][ T3311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.128833][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.135897][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.167993][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.175258][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.189126][ T3317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.203744][ T3310] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.215967][ T3313] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.226673][ T3313] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.248634][ T3309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.259508][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.266592][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.275731][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.282844][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.389898][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.439932][ T3311] veth0_vlan: entered promiscuous mode [ 31.464458][ T3317] veth0_vlan: entered promiscuous mode [ 31.475990][ T3311] veth1_vlan: entered promiscuous mode [ 31.484964][ T3309] veth0_vlan: entered promiscuous mode [ 31.493518][ T3310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.505911][ T3317] veth1_vlan: entered promiscuous mode [ 31.514881][ T3309] veth1_vlan: entered promiscuous mode [ 31.528907][ T3311] veth0_macvtap: entered promiscuous mode [ 31.549138][ T3309] veth0_macvtap: entered promiscuous mode [ 31.559136][ T3317] veth0_macvtap: entered promiscuous mode [ 31.566923][ T3311] veth1_macvtap: entered promiscuous mode [ 31.577196][ T3317] veth1_macvtap: entered promiscuous mode [ 31.586024][ T3309] veth1_macvtap: entered promiscuous mode [ 31.611127][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.619761][ T3313] veth0_vlan: entered promiscuous mode [ 31.628052][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.641550][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.653209][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.662347][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.671346][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.682202][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.689437][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.698555][ T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.712634][ T3313] veth1_vlan: entered promiscuous mode [ 31.720690][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.730409][ T78] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.751664][ T78] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.763303][ T3310] veth0_vlan: entered promiscuous mode [ 31.771072][ T78] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.779877][ T78] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.795867][ T78] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.804886][ T78] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.819345][ T3310] veth1_vlan: entered promiscuous mode [ 31.825932][ T78] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.834821][ T78] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.859015][ T3317] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.889471][ T3310] veth0_macvtap: entered promiscuous mode [ 31.899039][ T3310] veth1_macvtap: entered promiscuous mode [ 31.909592][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.920412][ T3313] veth0_macvtap: entered promiscuous mode [ 31.932970][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.953252][ T3481] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1'. [ 31.962072][ T3313] veth1_macvtap: entered promiscuous mode [ 31.975854][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.988009][ T3481] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 32.012131][ T3481] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 32.043868][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.054183][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.063431][ T3485] loop2: detected capacity change from 0 to 512 [ 32.064882][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.080470][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.087957][ T3485] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 32.091471][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.119559][ T3485] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.3: bad orphan inode 15 [ 32.130300][ T3485] loop2: lost filesystem error report for type 5 error -117 [ 32.130399][ T3485] ext4_test_bit(bit=14, block=18) = 1 [ 32.137723][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 32.137737][ C1] EXT4-fs (loop2): initial error at time 1772284254: ext4_orphan_get:1417 [ 32.137760][ C1] EXT4-fs (loop2): last error at time 1772284254: ext4_orphan_get:1417 [ 32.138354][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.143876][ C1] hrtimer: interrupt took 53443 ns [ 32.159994][ T3485] is_bad_inode(inode)=0 [ 32.185524][ T3485] NEXT_ORPHAN(inode)=1023 [ 32.190588][ T3485] max_ino=32 [ 32.192538][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.194690][ T3485] i_nlink=0 [ 32.207307][ T3485] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2970: inode #15: comm syz.2.3: corrupted xattr block 19: invalid header [ 32.216017][ T3489] process 'syz.4.6' launched '/dev/fd/11' with NULL argv: empty string added [ 32.221948][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.238320][ T3485] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 32.238594][ T3485] EXT4-fs warning (device loop2): ext4_evict_inode:275: xattr delete (err -117) [ 32.257532][ T3485] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none. [ 32.271863][ T3485] ext2 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.286569][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.324826][ T3489] loop4: detected capacity change from 0 to 512 [ 32.359914][ T3489] ------------[ cut here ]------------ [ 32.370945][ T3489] EA inode 11 i_nlink=2 [ 32.370967][ T3489] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x313/0x350, CPU#0: syz.4.6/3489 [ 32.388255][ T3489] Modules linked in: [ 32.392973][ T3489] CPU: 0 UID: 0 PID: 3489 Comm: syz.4.6 Not tainted syzkaller #0 PREEMPT(full) [ 32.402549][ T3489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 32.414855][ T3489] RIP: 0010:ext4_xattr_inode_update_ref+0x332/0x350 [ 32.422085][ T3489] Code: 74 5f 99 ff 4c 8d 2d 7d ef 5d 05 49 8d 7e 40 e8 f4 f0 b5 ff 49 8b 6e 40 4c 89 e7 e8 28 ec b5 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 02 ff ff ff e8 cf 49 dd 03 66 66 66 66 66 66 2e [ 32.442364][ T3489] RSP: 0018:ffffc90001887778 EFLAGS: 00010246 [ 32.449065][ T3489] RAX: ffff8881049d8a78 RBX: ffff888100705328 RCX: ffffffff81bff5c8 [ 32.457681][ T3489] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff871de530 [ 32.459990][ T3495] loop3: detected capacity change from 0 to 4096 [ 32.467207][ T3489] RBP: 000000000000000b R08: 00018881007052db R09: 0000000000000000 [ 32.481024][ T28] kauditd_printk_skb: 51 callbacks suppressed [ 32.481058][ T28] audit: type=1400 audit(1772284255.349:131): avc: denied { create } for pid=3497 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 32.484344][ T3489] R10: ffffc900018876a8 R11: 0001c900018876a8 R12: ffff8881007052d8 [ 32.501425][ T28] audit: type=1400 audit(1772284255.359:132): avc: denied { write } for pid=3497 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 32.510537][ T3489] R13: ffffffff871de530 R14: ffff888100705290 R15: 0000000000000001 [ 32.531603][ T3495] EXT4-fs: Ignoring removed bh option [ 32.537404][ T3489] FS: 00007f923381e6c0(0000) GS:ffff8882ae8dc000(0000) knlGS:0000000000000000 [ 32.561253][ T3489] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 32.565098][ T28] audit: type=1400 audit(1772284255.359:133): avc: denied { connect } for pid=3497 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 32.568211][ T3489] CR2: 0000000034747865 CR3: 000000011b31a000 CR4: 00000000003506f0 [ 32.597073][ T3489] Call Trace: [ 32.600806][ T3489] [ 32.605435][ T3489] ext4_xattr_inode_dec_ref_all+0x57c/0x880 [ 32.611934][ T3489] ? errseq_check+0x2c/0x50 [ 32.616933][ T3489] ext4_xattr_delete_inode+0x6c1/0x7a0 [ 32.623064][ T3489] ext4_evict_inode+0xa1f/0xd60 [ 32.628171][ T3495] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.628274][ T3489] ? __pfx_ext4_evict_inode+0x10/0x10 [ 32.646707][ T3489] evict+0x2af/0x510 [ 32.649390][ T3498] syz.1.2 (3498) used greatest stack depth: 9344 bytes left [ 32.651688][ T3489] ? __dquot_initialize+0x146/0x7c0 [ 32.661494][ T28] audit: type=1400 audit(1772284255.359:134): avc: denied { name_connect } for pid=3497 comm="syz.1.2" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 32.664664][ T3489] iput+0x41a/0x580 [ 32.690703][ T3489] ext4_process_orphan+0x1a9/0x1c0 [ 32.696253][ T3489] ext4_orphan_cleanup+0x6a8/0xa00 [ 32.698104][ T28] audit: type=1400 audit(1772284255.419:135): avc: denied { shutdown } for pid=3497 comm="syz.1.2" laddr=fe80::a8aa:aaff:feaa:aa16 lport=34764 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 32.702610][ T3489] ext4_fill_super+0x3408/0x37c0 [ 32.732955][ T3489] ? set_blocksize+0x14c/0x270 [ 32.737934][ T3489] ? setup_bdev_super+0x30e/0x370 [ 32.743574][ T3489] ? __pfx_ext4_fill_super+0x10/0x10 [ 32.749614][ T3489] get_tree_bdev_flags+0x291/0x300 [ 32.755684][ T3489] ? __pfx_ext4_fill_super+0x10/0x10 [ 32.761663][ T3489] get_tree_bdev+0x1f/0x30 [ 32.766435][ T3489] ext4_get_tree+0x1c/0x30 [ 32.768561][ T3491] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 449: padding at end of block bitmap is not set [ 32.771576][ T3489] vfs_get_tree+0x57/0x1d0 [ 32.791045][ T3489] do_new_mount+0x288/0x8d0 [ 32.796324][ T3489] path_mount+0x4d0/0xbc0 [ 32.800854][ T3489] __se_sys_mount+0x28c/0x2e0 [ 32.805943][ T3489] __x64_sys_mount+0x67/0x80 [ 32.810863][ T3489] x64_sys_call+0x2d61/0x3020 [ 32.815881][ T3489] do_syscall_64+0x12c/0x370 [ 32.820615][ T3489] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 32.826781][ T3489] RIP: 0033:0x7f9234deda0a [ 32.827385][ T28] audit: type=1400 audit(1772284255.709:136): avc: denied { add_name } for pid=3494 comm="syz.3.4" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 32.831635][ T3489] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 32.874534][ T3489] RSP: 002b:00007f923381de58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 32.882724][ T28] audit: type=1400 audit(1772284255.709:137): avc: denied { create } for pid=3494 comm="syz.3.4" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 32.884048][ T3489] RAX: ffffffffffffffda RBX: 00007f923381dee0 RCX: 00007f9234deda0a [ 32.903575][ T28] audit: type=1400 audit(1772284255.729:138): avc: denied { read open } for pid=3494 comm="syz.3.4" path="/0/file3/bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 32.905549][ T28] audit: type=1400 audit(1772284255.779:139): avc: denied { create } for pid=3494 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 32.905968][ T28] audit: type=1400 audit(1772284255.779:140): avc: denied { write } for pid=3494 comm="syz.3.4" path=2F302F66696C65332F233139202864656C6574656429 dev="loop3" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 32.986596][ T3489] RDX: 00002000000009c0 RSI: 0000200000000540 RDI: 00007f923381dea0 [ 32.994915][ T3489] RBP: 00002000000009c0 R08: 00007f923381dee0 R09: 0000000000800718 [ 33.003813][ T3489] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000540 [ 33.012205][ T3489] R13: 00007f923381dea0 R14: 000000000000048d R15: 0000200000000200 [ 33.020753][ T3489] [ 33.024163][ T3489] ---[ end trace 0000000000000000 ]--- [ 33.031366][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.042954][ T3489] EXT4-fs (loop4): 1 orphan inode deleted [ 33.049660][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0009-000000000000. [ 33.064227][ T3489] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.106368][ T3507] bridge_slave_0: left allmulticast mode [ 33.122849][ T3511] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7'. [ 33.134061][ T3507] bridge_slave_0: left promiscuous mode [ 33.139830][ T3507] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.148468][ T3507] bridge_slave_1: left allmulticast mode [ 33.154233][ T3507] bridge_slave_1: left promiscuous mode [ 33.159837][ T3507] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.169251][ T3507] bond0: (slave bond_slave_0): Releasing backup interface [ 33.179049][ T3507] bond0: (slave bond_slave_1): Releasing backup interface [ 33.179180][ T3514] loop2: detected capacity change from 0 to 512 [ 33.199884][ T3507] team0: Port device team_slave_0 removed [ 33.208613][ T3514] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.210586][ T3507] team0: Port device team_slave_1 removed [ 33.231839][ T3507] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 33.251324][ T3514] ext4 filesystem being mounted at /1/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 33.266452][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.276011][ T3507] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 33.295818][ T3507] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 33.303782][ T3507] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 33.342061][ T3507] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 33.468159][ T3522] Zero length message leads to an empty skb [ 33.484243][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.559156][ T3530] loop2: detected capacity change from 0 to 512 [ 33.607583][ T3530] EXT4-fs error (device loop2): __ext4_iget:5378: inode #15: block 1803188595: comm syz.2.13: invalid block [ 33.631069][ T3530] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 33.631350][ T3530] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.13: couldn't read orphan inode 15 (err -117) [ 33.652135][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 33.652153][ C0] EXT4-fs (loop2): initial error at time 1772284512: __ext4_iget:5378: inode 15: block 1803188595 [ 33.652203][ C0] EXT4-fs (loop2): last error at time 1772284512: __ext4_iget:5378: inode 15: block 1803188595 [ 33.679911][ T3534] netlink: 'syz.0.15': attribute type 2 has an invalid length. [ 33.710817][ T3537] capability: warning: `syz.0.15' uses deprecated v2 capabilities in a way that may be insecure [ 33.736899][ T3530] loop2: lost filesystem error report for type 5 error -117 [ 33.739001][ T3530] EXT4-fs (loop2): mounted filesystem 4d550000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.772628][ T3530] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=3530 comm=syz.2.13 [ 33.829567][ T3309] EXT4-fs (loop2): unmounting filesystem 4d550000-0000-0000-0000-000000000000. [ 33.879597][ T3542] loop3: detected capacity change from 0 to 1024 [ 33.894823][ T3542] ======================================================= [ 33.894823][ T3542] WARNING: The mand mount option has been deprecated and [ 33.894823][ T3542] and is ignored by this kernel. Remove the mand [ 33.894823][ T3542] option from the mount to silence this warning. [ 33.894823][ T3542] ======================================================= [ 33.965192][ T3542] EXT4-fs: inline encryption not supported [ 33.976383][ T3542] EXT4-fs: Ignoring removed orlov option [ 33.986482][ T3542] EXT4-fs: inline encryption not supported [ 33.996567][ T3542] EXT4-fs: Ignoring removed orlov option [ 34.017208][ T3542] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.065807][ T3542] EXT4-fs error (device loop3): mb_free_blocks:2047: group 0, inode 15: block 385:freeing already freed block (bit 24); block bitmap corrupt. [ 34.102401][ T3542] EXT4-fs (loop3): Remounting filesystem read-only [ 34.111169][ T3536] Driver unsupported XDP return value 0 on prog (id 6) dev N/A, expect packet loss! [ 34.161767][ T3580] loop0: detected capacity change from 0 to 2048 [ 34.194656][ T3580] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.207919][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.262795][ T3577] loop2: detected capacity change from 0 to 1024 [ 34.271676][ T3577] EXT4-fs: Ignoring removed orlov option [ 34.366663][ T3577] EXT4-fs (loop2): stripe (9) is not aligned with cluster size (16), stripe is disabled [ 34.437787][ T3595] netlink: 'syz.3.26': attribute type 10 has an invalid length. [ 34.451041][ T3595] team0: Port device dummy0 added [ 34.715663][ T3577] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.005824][ T3617] loop1: detected capacity change from 0 to 256 [ 35.021237][ T3617] msdos: Bad value for 'check' [ 35.059845][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.084999][ T3617] loop1: detected capacity change from 0 to 512 [ 35.114598][ T3617] EXT4-fs (loop1): invalid inodes per group: 44576 [ 35.114598][ T3617] [ 35.228853][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.288600][ T3628] veth0_virt_wifi: entered promiscuous mode [ 35.372384][ T3638] FAULT_INJECTION: forcing a failure. [ 35.372384][ T3638] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 35.391544][ T3638] CPU: 1 UID: 0 PID: 3638 Comm: syz.3.35 Tainted: G W syzkaller #0 PREEMPT(full) [ 35.391580][ T3638] Tainted: [W]=WARN [ 35.391586][ T3638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 35.391598][ T3638] Call Trace: [ 35.391605][ T3638] [ 35.391613][ T3638] __dump_stack+0x1d/0x30 [ 35.391664][ T3638] dump_stack_lvl+0x95/0xd0 [ 35.391695][ T3638] dump_stack+0x15/0x1b [ 35.391723][ T3638] should_fail_ex+0x263/0x280 [ 35.391782][ T3638] should_fail+0xb/0x20 [ 35.391802][ T3638] should_fail_usercopy+0x1a/0x20 [ 35.391832][ T3638] _copy_from_user+0x1c/0xb0 [ 35.391904][ T3638] do_semtimedop+0x152/0x220 [ 35.391952][ T3638] __x64_sys_semop+0x41/0x50 [ 35.392042][ T3638] x64_sys_call+0x2b04/0x3020 [ 35.392073][ T3638] do_syscall_64+0x12c/0x370 [ 35.392148][ T3638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 35.392170][ T3638] RIP: 0033:0x7f82be92c799 [ 35.392185][ T3638] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 35.392205][ T3638] RSP: 002b:00007f82bd366028 EFLAGS: 00000246 ORIG_RAX: 0000000000000041 [ 35.392228][ T3638] RAX: ffffffffffffffda RBX: 00007f82beba6090 RCX: 00007f82be92c799 [ 35.392241][ T3638] RDX: 00000000000001f4 RSI: 0000200000001240 RDI: 0000000000000000 [ 35.392253][ T3638] RBP: 00007f82bd366090 R08: 0000000000000000 R09: 0000000000000000 [ 35.392311][ T3638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 35.392326][ T3638] R13: 00007f82beba6128 R14: 00007f82beba6090 R15: 00007ffc4d1704b8 [ 35.392351][ T3638] [ 35.869171][ T3656] netlink: 16 bytes leftover after parsing attributes in process `syz.2.41'. [ 35.942672][ T3658] ipip0: entered promiscuous mode [ 36.003833][ T3660] vhci_hcd vhci_hcd.3: invalid port number 255 [ 36.010114][ T3660] vhci_hcd vhci_hcd.3: default hub control req: 1f0a v9b6b i00ff l5 [ 36.126882][ T3660] bridge_slave_0: left allmulticast mode [ 36.133233][ T3660] bridge_slave_0: left promiscuous mode [ 36.140285][ T3660] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.175089][ T3660] bridge_slave_1: left allmulticast mode [ 36.181297][ T3660] bridge_slave_1: left promiscuous mode [ 36.188409][ T3660] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.229572][ T3660] bond0: (slave bond_slave_0): Releasing backup interface [ 36.262181][ T3660] bond0: (slave bond_slave_1): Releasing backup interface [ 36.309129][ T3660] team0: Port device team_slave_0 removed [ 36.336289][ T3660] team0: Port device team_slave_1 removed [ 36.351226][ T3660] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 36.358913][ T3660] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 36.378173][ T3660] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 36.385929][ T3660] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 36.409478][ T3660] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 36.764282][ T3663] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.965894][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.284318][ T3685] set_capacity_and_notify: 3 callbacks suppressed [ 37.284342][ T3685] loop1: detected capacity change from 0 to 1024 [ 37.317836][ T3685] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.338033][ T3685] netlink: 20 bytes leftover after parsing attributes in process `syz.1.50'. [ 37.589768][ T28] kauditd_printk_skb: 64 callbacks suppressed [ 37.589789][ T28] audit: type=1400 audit(1772284516.462:205): avc: denied { ioctl } for pid=3689 comm="syz.0.51" path="socket:[5473]" dev="sockfs" ino=5473 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 37.625327][ T3690] veth0: entered promiscuous mode [ 37.684679][ T3690] veth0: left promiscuous mode [ 37.740397][ T3695] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 37.884665][ T3702] loop3: detected capacity change from 0 to 512 [ 37.913862][ T3702] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 37.963506][ T3702] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.48: bg 0: block 393: padding at end of block bitmap is not set [ 38.011740][ T3702] loop3: lost filesystem error report for type 5 error -117 [ 38.013810][ T3702] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 38.021176][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 38.021194][ C0] EXT4-fs (loop3): initial error at time 1772284516: ext4_validate_block_bitmap:441 [ 38.021217][ C0] EXT4-fs (loop3): last error at time 1772284516: ext4_validate_block_bitmap:441 [ 38.090264][ T3702] loop3: lost filesystem error report for type 5 error -117 [ 38.090581][ T3702] EXT4-fs (loop3): 2 truncates cleaned up [ 38.135552][ T3685] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4222: comm syz.1.50: Allocating blocks 497-513 which overlap fs metadata [ 38.169737][ T3702] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.185511][ T3685] EXT4-fs (loop1): pa ffff88810787a4d0: logic 48, phys. 177, len 21 [ 38.193689][ T3685] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5465: group 0, free 0, pa_free 1 [ 38.207817][ T28] audit: type=1400 audit(1772284517.082:206): avc: denied { read } for pid=3697 comm="syz.2.53" path="socket:[5494]" dev="sockfs" ino=5494 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 38.230256][ T3702] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.255918][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.312023][ T3716] loop2: detected capacity change from 0 to 1024 [ 38.318864][ T3716] EXT4-fs: inline encryption not supported [ 38.336248][ T3715] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 38.354879][ T3713] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 38.488238][ T3721] loop3: detected capacity change from 0 to 512 [ 38.517857][ T3721] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 38.539455][ T3711] loop0: detected capacity change from 0 to 1024 [ 38.552948][ T3721] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.56: couldn't read orphan inode 26 (err -116) [ 38.566566][ T3716] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.582265][ T28] audit: type=1400 audit(1772284517.162:207): avc: denied { block_suspend } for pid=3712 comm="syz.1.55" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 38.604301][ T3721] loop3: lost filesystem error report for type 5 error -116 [ 38.610938][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 38.624692][ C0] EXT4-fs (loop3): initial error at time 1772284517: ext4_orphan_get:1396 [ 38.633242][ C0] EXT4-fs (loop3): last error at time 1772284517: ext4_orphan_get:1396 [ 38.649813][ T28] audit: type=1400 audit(1772284517.412:208): avc: denied { ioctl } for pid=3707 comm="syz.0.54" path="socket:[4904]" dev="sockfs" ino=4904 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 38.670583][ T3721] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.676861][ T28] audit: type=1400 audit(1772284517.522:209): avc: denied { bpf } for pid=3720 comm="syz.1.57" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 38.709149][ T28] audit: type=1400 audit(1772284517.522:210): avc: denied { perfmon } for pid=3720 comm="syz.1.57" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 38.759822][ T3721] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.816919][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.820060][ T3727] loop1: detected capacity change from 0 to 512 [ 38.973886][ T3727] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.111096][ T3711] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.145606][ T28] audit: type=1400 audit(1772284518.002:211): avc: denied { audit_write } for pid=3733 comm="syz.3.59" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 39.175306][ T3727] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.301260][ T28] audit: type=1400 audit(1772284518.012:212): avc: denied { create } for pid=3733 comm="syz.3.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 39.338871][ T28] audit: type=1400 audit(1772284518.012:213): avc: denied { ioctl } for pid=3733 comm="syz.3.59" path="socket:[4927]" dev="sockfs" ino=4927 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 39.380958][ T28] audit: type=1400 audit(1772284518.012:214): avc: denied { getopt } for pid=3733 comm="syz.3.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 39.477129][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.518156][ T3741] loop1: detected capacity change from 0 to 136 [ 39.561608][ T3741] Attempt to read inode for relocated directory [ 39.603084][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.766261][ T3756] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 39.822282][ T3758] loop4: detected capacity change from 0 to 8192 [ 39.831703][ T3760] loop1: detected capacity change from 0 to 512 [ 39.848984][ T3760] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #3: comm syz.1.66: corrupted inode contents [ 39.860882][ T3760] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 39.862007][ T3760] EXT4-fs error (device loop1): ext4_dirty_inode:6450: inode #3: comm syz.1.66: mark_inode_dirty error [ 39.870959][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 39.888518][ C1] EXT4-fs (loop1): initial error at time 1772284518: ext4_do_update_inode:5569: inode 3 [ 39.894564][ T3760] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 39.898295][ C1] EXT4-fs (loop1): last error at time 1772284518: ext4_do_update_inode:5569 [ 39.900882][ T3760] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #3: comm syz.1.66: corrupted inode contents [ 39.907361][ C1] : inode 3 [ 39.931934][ T3760] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 39.932090][ T3760] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #3: comm syz.1.66: mark_inode_dirty error [ 39.952462][ T3760] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 39.967789][ T3760] EXT4-fs error (device loop1): ext4_acquire_dquot:7001: comm syz.1.66: Failed to acquire dquot type 0 [ 39.989215][ T3760] loop1: lost filesystem error report for type 5 error -117 [ 39.990489][ T3760] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #16: comm syz.1.66: corrupted inode contents [ 40.026641][ T3760] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 40.027110][ T3760] EXT4-fs error (device loop1): ext4_dirty_inode:6450: inode #16: comm syz.1.66: mark_inode_dirty error [ 40.049553][ T3760] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 40.049921][ T3760] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #16: comm syz.1.66: corrupted inode contents [ 40.076342][ T3760] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 40.076506][ T3760] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #16: comm syz.1.66: mark_inode_dirty error [ 40.097037][ T3760] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 40.098165][ T3760] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #16: comm syz.1.66: corrupted inode contents [ 40.119243][ T3760] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 40.120358][ T3760] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 40.130807][ T3766] loop3: detected capacity change from 0 to 128 [ 40.138531][ T3760] loop1: lost filesystem error report for type 5 error -117 [ 40.144890][ T3760] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #16: comm syz.1.66: corrupted inode contents [ 40.164875][ T3760] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 40.167189][ T3760] EXT4-fs error (device loop1): ext4_truncate:4587: inode #16: comm syz.1.66: mark_inode_dirty error [ 40.187612][ T3760] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 40.196639][ T3760] loop1: lost filesystem error report for type 5 error -117 [ 40.196971][ T3760] EXT4-fs (loop1): 1 truncate cleaned up [ 40.210377][ T3760] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.223059][ T3760] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.403087][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.544869][ T3773] netlink: 8 bytes leftover after parsing attributes in process `syz.0.70'. [ 40.585093][ T3778] netlink: 4 bytes leftover after parsing attributes in process `syz.1.73'. [ 40.600397][ T3773] netlink: 12 bytes leftover after parsing attributes in process `syz.0.70'. [ 40.626331][ T3773] netlink: 'syz.0.70': attribute type 13 has an invalid length. [ 40.900059][ T3781] ext3: Unknown parameter 'fsmagic' [ 41.035765][ T3803] netlink: 'syz.3.77': attribute type 8 has an invalid length. [ 42.131165][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.877571][ T3829] set_capacity_and_notify: 3 callbacks suppressed [ 42.877629][ T3829] loop2: detected capacity change from 0 to 1024 [ 42.897515][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 42.897528][ T28] audit: type=1400 audit(1772284521.772:230): avc: denied { module_request } for pid=3830 comm="syz.3.86" kmod="net-pf-0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 42.971540][ T3385] Process accounting resumed [ 42.992951][ T3829] EXT4-fs: inline encryption not supported [ 43.050971][ T3829] EXT4-fs: Ignoring removed nobh option [ 43.069747][ T3829] EXT4-fs: Ignoring removed nobh option [ 43.086852][ T3829] EXT4-fs: Ignoring removed bh option [ 43.142174][ T3829] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.163141][ T3829] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4222: comm syz.2.85: Allocating blocks 385-513 which overlap fs metadata [ 43.187480][ T28] audit: type=1400 audit(1772284522.062:231): avc: denied { mounton } for pid=3828 comm="syz.2.85" path="/13/file1/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 43.213519][ T3829] EXT4-fs (loop2): pa ffff888107e119a0: logic 16, phys. 129, len 24 [ 43.221611][ T3829] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5465: group 0, free 0, pa_free 8 [ 43.283067][ T28] audit: type=1400 audit(1772284522.162:232): avc: denied { setattr } for pid=3841 comm="syz.1.88" name="CAN_RAW" dev="sockfs" ino=6241 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 43.339642][ T3845] batadv_slave_1: entered promiscuous mode [ 43.347037][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.358744][ T3845] netlink: 4 bytes leftover after parsing attributes in process `syz.0.87'. [ 43.370186][ T3845] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 43.380992][ T28] audit: type=1400 audit(1772284522.252:233): avc: denied { write } for pid=3848 comm="syz.1.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 43.397649][ T3850] loop3: detected capacity change from 0 to 1024 [ 43.444735][ T3845] batadv_slave_1 (unregistering): left promiscuous mode [ 43.454218][ T3850] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 43.463028][ T28] audit: type=1400 audit(1772284522.252:234): avc: denied { nlmsg_write } for pid=3848 comm="syz.1.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 43.467008][ T3845] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 43.506914][ T3850] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.533435][ T3850] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.89: bg 0: block 112: padding at end of block bitmap is not set [ 43.552628][ T3850] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 44 with error 117 [ 43.568758][ T3850] EXT4-fs (loop3): This should not happen!! Data will be lost [ 43.568758][ T3850] [ 43.597612][ T3850] netlink: 332 bytes leftover after parsing attributes in process `syz.3.89'. [ 43.606580][ T3850] netlink: 'syz.3.89': attribute type 9 has an invalid length. [ 43.614210][ T3850] netlink: 108 bytes leftover after parsing attributes in process `syz.3.89'. [ 43.623197][ T3419] IPVS: starting estimator thread 0... [ 43.629093][ T3850] netlink: 32 bytes leftover after parsing attributes in process `syz.3.89'. [ 43.638166][ T3850] sock: sock_set_timeout: `syz.3.89' (pid 3850) tries to set negative timeout [ 43.699164][ T3859] EXT4-fs error (device loop3): ext4_free_blocks:6724: comm syz.3.89: Freeing blocks not in datazone - block = 0, count = 16 [ 43.711047][ T3861] IPVS: using max 2688 ests per chain, 134400 per kthread [ 44.049997][ T3863] loop4: detected capacity change from 0 to 8192 [ 44.341462][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 44.363272][ T28] audit: type=1400 audit(1772284523.242:235): avc: denied { listen } for pid=3864 comm="syz.0.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 44.407068][ T3878] loop1: detected capacity change from 0 to 256 [ 44.449966][ T3880] netlink: 4 bytes leftover after parsing attributes in process `syz.3.101'. [ 44.476777][ T28] audit: type=1400 audit(1772284523.352:236): avc: denied { setopt } for pid=3875 comm="syz.1.100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 44.512004][ T3882] netlink: 32 bytes leftover after parsing attributes in process `syz.3.101'. [ 44.649087][ T3889] loop1: detected capacity change from 0 to 256 [ 44.663642][ T3888] loop3: detected capacity change from 0 to 8192 [ 44.702130][ T28] audit: type=1326 audit(1772284523.582:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3883 comm="syz.1.102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f964f30c799 code=0x7ffc0000 [ 44.745783][ T28] audit: type=1326 audit(1772284523.582:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3883 comm="syz.1.102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f964f30c799 code=0x7ffc0000 [ 44.774679][ T28] audit: type=1326 audit(1772284523.582:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3883 comm="syz.1.102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f964f30c799 code=0x7ffc0000 [ 44.805711][ T3894] netlink: 'syz.2.106': attribute type 1 has an invalid length. [ 44.955015][ T3903] netlink: 104 bytes leftover after parsing attributes in process `syz.3.109'. [ 44.973379][ T3903] loop3: detected capacity change from 0 to 2048 [ 45.017154][ T3903] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a840c018, mo2=0002] [ 45.039763][ T3903] System zones: 0-4 [ 45.052805][ T3903] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.065036][ T3903] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.231279][ T3912] loop4: detected capacity change from 0 to 2048 [ 45.249734][ T3912] EXT4-fs: Ignoring removed nobh option [ 45.256914][ T3913] loop2: detected capacity change from 0 to 512 [ 45.283328][ T3912] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.296340][ T3913] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.335086][ T3912] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.537216][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.636781][ T3924] netlink: 4 bytes leftover after parsing attributes in process `syz.3.114'. [ 45.675040][ T3926] loop0: detected capacity change from 0 to 8192 [ 45.742846][ T3930] netlink: 276 bytes leftover after parsing attributes in process `syz.3.117'. [ 45.916387][ T3920] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.934923][ T3575] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.955675][ T3940] netlink: 8 bytes leftover after parsing attributes in process `syz.0.116'. [ 45.999189][ T3575] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.046046][ T3575] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.115348][ T3956] EXT4-fs: Ignoring removed orlov option [ 46.137369][ T3575] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.148076][ T3956] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 46.194391][ T3956] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.240321][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.387012][ T3575] bridge_slave_1: left allmulticast mode [ 46.396086][ T3575] bridge_slave_1: left promiscuous mode [ 46.403457][ T3575] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.411119][ T3575] bridge_slave_0: left allmulticast mode [ 46.419716][ T3575] bridge_slave_0: left promiscuous mode [ 46.859220][ T3575] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.931218][ T3673] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 345: padding at end of block bitmap is not set [ 46.988073][ T3673] EXT4-fs (loop4): Remounting filesystem read-only [ 47.141418][ T4010] syz.1.131 uses obsolete (PF_INET,SOCK_PACKET) [ 47.242988][ T3575] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 47.255408][ T3575] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 47.265280][ T3575] bond0 (unregistering): Released all slaves [ 47.420498][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.445060][ T4021] syz.0.134 (4021) used greatest stack depth: 9336 bytes left [ 47.452758][ T3575] hsr_slave_0: left promiscuous mode [ 47.458658][ T3575] hsr_slave_1: left promiscuous mode [ 47.480945][ T3575] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 47.491510][ T4046] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4046 comm=syz.4.135 [ 47.506522][ T3575] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 47.519579][ T3575] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 47.527193][ T3575] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 47.554624][ T3575] veth1_macvtap: left promiscuous mode [ 47.560247][ T3575] veth0_macvtap: left promiscuous mode [ 47.575370][ T3575] veth1_vlan: left promiscuous mode [ 47.580666][ T3575] veth0_vlan: left promiscuous mode [ 47.659770][ T3575] team0 (unregistering): Port device team_slave_1 removed [ 47.669681][ T3575] team0 (unregistering): Port device team_slave_0 removed [ 47.788657][ T3957] chnl_net:caif_netlink_parms(): no params data found [ 47.909332][ T3957] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.938768][ T3957] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.962856][ T3957] bridge_slave_0: entered allmulticast mode [ 47.983205][ T3957] bridge_slave_0: entered promiscuous mode [ 48.013022][ T3957] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.029457][ T4084] set_capacity_and_notify: 3 callbacks suppressed [ 48.029536][ T4084] loop0: detected capacity change from 0 to 1024 [ 48.038440][ T3957] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.072189][ T4084] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 48.074448][ T3957] bridge_slave_1: entered allmulticast mode [ 48.087113][ T4084] System zones: 0-1, 3-36 [ 48.109782][ T4084] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.144: bad orphan inode 134217728 [ 48.123208][ T3957] bridge_slave_1: entered promiscuous mode [ 48.143111][ T4084] loop0: lost filesystem error report for type 5 error -117 [ 48.148972][ T3575] IPVS: stop unused estimator thread 0... [ 48.158392][ T28] kauditd_printk_skb: 26 callbacks suppressed [ 48.158420][ T28] audit: type=1400 audit(1772284527.032:266): avc: denied { append } for pid=4091 comm="syz.3.145" name="hwrng" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 48.193792][ T3957] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.200345][ T4084] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.202941][ T28] audit: type=1400 audit(1772284527.072:267): avc: denied { lock } for pid=4091 comm="syz.3.145" path="socket:[6756]" dev="sockfs" ino=6756 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 48.205022][ T3957] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.277767][ T3957] team0: Port device team_slave_0 added [ 48.295084][ T3957] team0: Port device team_slave_1 added [ 48.310604][ T3957] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.317936][ T3957] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.358425][ T3957] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.371889][ T3957] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.379062][ T3957] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.407032][ T3957] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.450041][ T3957] hsr_slave_0: entered promiscuous mode [ 48.456025][ T3957] hsr_slave_1: entered promiscuous mode [ 48.462301][ T3957] debugfs: 'hsr0' already exists in 'hsr' [ 48.468066][ T3957] Cannot create hsr debugfs directory [ 48.485340][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.622276][ T4105] tipc: Started in network mode [ 48.627194][ T4105] tipc: Node identity aaaaaaaaaa2a, cluster identity 4711 [ 48.634526][ T4105] tipc: Enabled bearer , priority 28 [ 48.884912][ T28] audit: type=1400 audit(1772284527.762:268): avc: denied { accept } for pid=4110 comm="syz.0.147" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 48.920811][ T4113] __nla_validate_parse: 2 callbacks suppressed [ 48.920839][ T4113] netlink: 4 bytes leftover after parsing attributes in process `syz.4.149'. [ 48.935614][ T28] audit: type=1400 audit(1772284527.792:269): avc: denied { bind } for pid=4112 comm="syz.4.149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 48.941906][ T3957] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 48.986376][ T28] audit: type=1400 audit(1772284527.852:270): avc: denied { write } for pid=4110 comm="syz.0.147" path="socket:[7010]" dev="sockfs" ino=7010 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 49.023022][ T3957] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 49.035993][ T3957] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 49.052094][ T3957] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 49.106666][ T28] audit: type=1400 audit(1772284527.982:271): avc: denied { ioctl } for pid=4130 comm="syz.4.151" path="socket:[7210]" dev="sockfs" ino=7210 ioctlcmd=0x6722 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 49.216852][ T3957] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.243128][ T28] audit: type=1400 audit(1772284528.112:272): avc: denied { read write } for pid=4134 comm="syz.3.152" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 49.284968][ T3957] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.310584][ T4141] loop3: detected capacity change from 0 to 1024 [ 49.319857][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.320635][ T28] audit: type=1400 audit(1772284528.112:273): avc: denied { open } for pid=4134 comm="syz.3.152" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 49.327022][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.359951][ T4141] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 49.382544][ T4141] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 49.419521][ T3568] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.426696][ T3568] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.434416][ T4141] JBD2: no valid journal superblock found [ 49.449816][ T28] audit: type=1400 audit(1772284528.112:274): avc: denied { write } for pid=4134 comm="syz.3.152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 49.476588][ T4153] loop0: detected capacity change from 0 to 1024 [ 49.486952][ T4153] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (24670!=35945) [ 49.498005][ T4141] EXT4-fs (loop3): Could not load journal inode [ 49.504964][ T4153] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 49.546745][ T4141] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 49.570044][ T4153] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 49.579062][ T4153] EXT4-fs (loop0): Can't support bigalloc feature without extents feature [ 49.579062][ T4153] [ 49.592340][ T3957] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.621925][ T4153] EXT4-fs (loop0): Skipping orphan cleanup due to unknown ROCOMPAT features [ 49.631056][ T35] tipc: Node number set to 8432298 [ 49.631200][ T4153] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 49.720791][ T28] audit: type=1400 audit(1772284528.592:275): avc: denied { create } for pid=4177 comm="syz.1.157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 49.760708][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.804115][ T4184] loop0: detected capacity change from 0 to 764 [ 49.817399][ T4184] Symlink component flag not implemented [ 49.823467][ T4184] Symlink component flag not implemented (116) [ 49.873477][ T3957] veth0_vlan: entered promiscuous mode [ 49.881390][ T3957] veth1_vlan: entered promiscuous mode [ 49.905988][ T3957] veth0_macvtap: entered promiscuous mode [ 49.925798][ T4191] netlink: 4 bytes leftover after parsing attributes in process `syz.0.159'. [ 49.939978][ T3957] veth1_macvtap: entered promiscuous mode [ 49.951317][ T3957] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.969844][ T3957] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.999973][ T3568] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.009153][ T3568] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.023427][ T3568] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.024610][ T4189] netlink: 16 bytes leftover after parsing attributes in process `syz.1.157'. [ 50.032571][ T3568] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.034447][ T4196] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4196 comm=syz.0.161 [ 50.084095][ T4196] loop0: detected capacity change from 0 to 512 [ 50.096507][ T4196] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.120811][ T4196] ext4 filesystem being mounted at /34/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 50.254923][ T4209] vlan2: entered promiscuous mode [ 50.260036][ T4209] vlan2: entered allmulticast mode [ 50.265325][ T4209] hsr_slave_1: entered allmulticast mode [ 50.284509][ T4211] netlink: 'syz.3.165': attribute type 20 has an invalid length. [ 50.292618][ T4211] netlink: 4 bytes leftover after parsing attributes in process `syz.3.165'. [ 50.301605][ T4202] netlink: 'syz.4.163': attribute type 2 has an invalid length. [ 50.311317][ T30] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 50.320158][ T4211] netlink: 'syz.3.165': attribute type 20 has an invalid length. [ 50.328111][ T4202] loop4: detected capacity change from 0 to 1764 [ 50.328802][ T30] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 50.334868][ T4202] iso9660: Unknown parameter 'utf' [ 50.349600][ T4211] netlink: 4 bytes leftover after parsing attributes in process `syz.3.165'. [ 50.352205][ T4209] netlink: 4 bytes leftover after parsing attributes in process `syz.5.122'. [ 50.372108][ T30] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 50.387354][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.412890][ T4215] loop0: detected capacity change from 0 to 1024 [ 50.419862][ T4215] EXT4-fs: inline encryption not supported [ 50.430423][ T4215] EXT4-fs: Ignoring removed nobh option [ 50.436189][ T4215] EXT4-fs: Ignoring removed nobh option [ 50.442199][ T4215] EXT4-fs: Ignoring removed bh option [ 50.466758][ T4215] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.482141][ T30] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 50.554110][ T4215] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4222: comm syz.0.166: Allocating blocks 497-513 which overlap fs metadata [ 50.591941][ T4222] loop1: detected capacity change from 0 to 256 [ 50.609380][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.644056][ T4226] loop0: detected capacity change from 0 to 128 [ 50.654416][ T4226] FAT-fs (loop0): bogus number of reserved sectors [ 50.661184][ T4226] FAT-fs (loop0): This looks like a DOS 1.x volume, but isn't a recognized floppy size (128 sectors) [ 50.672332][ T4226] FAT-fs (loop0): Can't find a valid FAT filesystem [ 50.689325][ T4229] netlink: 4 bytes leftover after parsing attributes in process `syz.1.170'. [ 50.718347][ T3573] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.748956][ T4231] netlink: 56 bytes leftover after parsing attributes in process `syz.1.172'. [ 50.771345][ T3573] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.806322][ T3573] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.893597][ T3573] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.947434][ T4237] chnl_net:caif_netlink_parms(): no params data found [ 51.039464][ T4237] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.053931][ T4263] netlink: 104 bytes leftover after parsing attributes in process `syz.1.176'. [ 51.075675][ T4263] loop1: detected capacity change from 0 to 2048 [ 51.083449][ T4237] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.091187][ T4237] bridge_slave_0: entered allmulticast mode [ 51.097661][ T4237] bridge_slave_0: entered promiscuous mode [ 51.111529][ T4237] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.126704][ T4237] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.138156][ T4237] bridge_slave_1: entered allmulticast mode [ 51.146059][ T4263] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a840c018, mo2=0002] [ 51.147222][ T4265] netlink: 'syz.0.177': attribute type 10 has an invalid length. [ 51.162502][ T4237] bridge_slave_1: entered promiscuous mode [ 51.171157][ T4263] System zones: 0-4 [ 51.189466][ T4263] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.202118][ T4263] ext4 filesystem being mounted at /47/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.450086][ T4279] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 51.459671][ T4279] System zones: 0-1, 3-36 [ 51.473092][ T3573] bond0 (unregistering): Released all slaves [ 51.476290][ T4279] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.179: bad orphan inode 134217728 [ 51.498351][ T4279] loop3: lost filesystem error report for type 5 error -117 [ 51.512575][ T4279] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.536767][ T4265] team0 (unregistering): Port device team_slave_0 removed [ 51.548241][ T4265] team0 (unregistering): Port device team_slave_1 removed [ 51.564156][ T4237] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.607910][ T3573] hsr_slave_0: left promiscuous mode [ 51.617293][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.626923][ T3573] hsr_slave_1: left promiscuous mode [ 51.665137][ T3573] veth1_macvtap: left promiscuous mode [ 51.675879][ T3573] veth0_macvtap: left promiscuous mode [ 51.684690][ T3573] veth1_vlan: left promiscuous mode [ 51.690243][ T3573] veth0_vlan: left promiscuous mode [ 51.800172][ T4312] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 51.813410][ T4312] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.825818][ T4309] EXT4-fs error (device loop5): ext4_map_blocks:818: inode #15: block 3: comm syz.5.185: lblock 3 mapped to illegal pblock 3 (length 3) [ 51.842760][ T4309] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 51.856432][ T4309] EXT4-fs (loop5): This should not happen!! Data will be lost [ 51.856432][ T4309] [ 51.966346][ T4237] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.975568][ T4315] netlink: 60 bytes leftover after parsing attributes in process `syz.0.187'. [ 52.012989][ T4237] team0: Port device team_slave_0 added [ 52.032041][ T4237] team0: Port device team_slave_1 added [ 52.139873][ T4237] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.147091][ T4237] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 52.185368][ T4237] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.197015][ T4237] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.204476][ T4237] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 52.230561][ T4237] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.331374][ T4331] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 52.515009][ T4237] hsr_slave_0: entered promiscuous mode [ 52.522085][ T4237] hsr_slave_1: entered promiscuous mode [ 52.765915][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.162173][ T4237] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 53.190662][ T4237] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 53.209115][ T3568] EXT4-fs error (device loop5): ext4_map_blocks:818: inode #15: block 8: comm kworker/u8:23: lblock 8 mapped to illegal pblock 8 (length 8) [ 53.271103][ T3568] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 53.296796][ T4237] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 53.315356][ T3568] EXT4-fs (loop5): This should not happen!! Data will be lost [ 53.315356][ T3568] [ 53.336467][ T4237] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 53.372135][ T3957] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 53.477350][ T4237] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.514704][ T4237] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.541174][ T3568] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.548264][ T3568] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.599258][ T4237] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 53.640934][ T4237] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 53.662396][ T3553] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.669528][ T3553] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.751609][ T4237] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.854807][ T4393] set_capacity_and_notify: 3 callbacks suppressed [ 53.854818][ T4393] loop1: detected capacity change from 0 to 2048 [ 53.922960][ T4393] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a840c018, mo2=0002] [ 53.943741][ T4396] gtp0: entered promiscuous mode [ 53.955319][ T4393] System zones: 0-4 [ 53.959371][ T4396] gtp0: entered allmulticast mode [ 53.970263][ T4393] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.020497][ T4393] ext4 filesystem being mounted at /51/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.043381][ T4237] veth0_vlan: entered promiscuous mode [ 54.051265][ T4237] veth1_vlan: entered promiscuous mode [ 54.065722][ T4237] veth0_macvtap: entered promiscuous mode [ 54.073007][ T4237] veth1_macvtap: entered promiscuous mode [ 54.083417][ T4237] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.094215][ T4237] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.116812][ T3575] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.338729][ T3575] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.353397][ T3575] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.381884][ T4417] loop0: detected capacity change from 0 to 1024 [ 54.403694][ T3575] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.430677][ T4417] EXT4-fs: Ignoring removed orlov option [ 54.443971][ T4417] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.462381][ T4419] loop5: detected capacity change from 0 to 8192 [ 54.515357][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.530849][ T4417] tmpfs: Bad value for 'mpol' [ 54.536166][ T4417] __nla_validate_parse: 1 callbacks suppressed [ 54.536181][ T4417] netlink: 24 bytes leftover after parsing attributes in process `syz.0.196'. [ 54.552672][ T28] kauditd_printk_skb: 23 callbacks suppressed [ 54.552686][ T28] audit: type=1400 audit(1772284533.402:299): avc: denied { mounton } for pid=4416 comm="syz.0.196" path="/44/file1/file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 54.682762][ T4437] netlink: 14 bytes leftover after parsing attributes in process `syz.5.200'. [ 54.698966][ T4431] loop1: detected capacity change from 0 to 8192 [ 54.708319][ T4434] bond1: down delay (6) is not a multiple of miimon (100), value rounded to 0 ms [ 54.723121][ T28] audit: type=1400 audit(1772284533.592:300): avc: denied { execute } for pid=4416 comm="syz.0.196" path="/44/file1/cpu.stat" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 54.766817][ T4431] FAULT_INJECTION: forcing a failure. [ 54.766817][ T4431] name failslab, interval 1, probability 0, space 0, times 1 [ 54.780714][ T4431] CPU: 1 UID: 0 PID: 4431 Comm: syz.1.199 Tainted: G W syzkaller #0 PREEMPT(full) [ 54.780739][ T4431] Tainted: [W]=WARN [ 54.780745][ T4431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 54.780755][ T4431] Call Trace: [ 54.780761][ T4431] [ 54.780768][ T4431] __dump_stack+0x1d/0x30 [ 54.780796][ T4431] dump_stack_lvl+0x95/0xd0 [ 54.780822][ T4431] dump_stack+0x15/0x1b [ 54.780839][ T4431] should_fail_ex+0x263/0x280 [ 54.780862][ T4431] should_failslab+0x8c/0xb0 [ 54.780918][ T4431] kmem_cache_alloc_noprof+0x66/0x400 [ 54.780940][ T4431] ? do_getname+0x2e/0x1c0 [ 54.780965][ T4431] do_getname+0x2e/0x1c0 [ 54.780988][ T4431] getname_flags+0x1d/0x30 [ 54.781079][ T4431] do_sys_openat2+0x60/0x130 [ 54.781107][ T4431] __x64_sys_openat+0xf2/0x120 [ 54.781129][ T4431] x64_sys_call+0x1e39/0x3020 [ 54.781156][ T4431] do_syscall_64+0x12c/0x370 [ 54.781190][ T4431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.781221][ T4431] RIP: 0033:0x7f964f30c799 [ 54.781233][ T4431] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 54.781248][ T4431] RSP: 002b:00007f964dd5f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 54.781309][ T4431] RAX: ffffffffffffffda RBX: 00007f964f585fa0 RCX: 00007f964f30c799 [ 54.781323][ T4431] RDX: 000000000000275a RSI: 0000200000000100 RDI: ffffffffffffff9c [ 54.781335][ T4431] RBP: 00007f964dd5f090 R08: 0000000000000000 R09: 0000000000000000 [ 54.781404][ T4431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 54.781415][ T4431] R13: 00007f964f586038 R14: 00007f964f585fa0 R15: 00007ffd7439fe28 [ 54.781441][ T4431] [ 54.852009][ T4434] 8021q: adding VLAN 0 to HW filter on device bond1 [ 54.955217][ T4438] loop5: detected capacity change from 0 to 8192 [ 55.026017][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.045315][ T4437] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 55.073417][ T28] audit: type=1326 audit(1772284533.952:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4439 comm="syz.4.205" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5e84e6c799 code=0x0 [ 55.135087][ T4437] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 55.139396][ T28] audit: type=1400 audit(1772284534.012:302): avc: denied { write } for pid=4449 comm="syz.3.207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 55.166733][ T4437] bond0 (unregistering): Released all slaves [ 55.174227][ T28] audit: type=1326 audit(1772284534.042:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4449 comm="syz.3.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82be92c799 code=0x7ffc0000 [ 55.197892][ T28] audit: type=1326 audit(1772284534.042:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4449 comm="syz.3.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82be92c799 code=0x7ffc0000 [ 55.225862][ T4451] ipip0: entered promiscuous mode [ 55.232812][ T28] audit: type=1326 audit(1772284534.042:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4449 comm="syz.3.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82be92c799 code=0x7ffc0000 [ 55.257996][ T28] audit: type=1326 audit(1772284534.042:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4449 comm="syz.3.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82be92c799 code=0x7ffc0000 [ 55.296584][ T28] audit: type=1326 audit(1772284534.042:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4449 comm="syz.3.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82be92c799 code=0x7ffc0000 [ 55.298494][ T4458] netlink: 104 bytes leftover after parsing attributes in process `syz.1.209'. [ 55.327898][ T28] audit: type=1326 audit(1772284534.042:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4449 comm="syz.3.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f82be92e007 code=0x7ffc0000 [ 55.390000][ T4458] loop1: detected capacity change from 0 to 2048 [ 55.403610][ T3385] IPVS: starting estimator thread 0... [ 55.412866][ T4460] netlink: 4 bytes leftover after parsing attributes in process `syz.3.210'. [ 55.422883][ T4460] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 55.431500][ T4458] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a840c018, mo2=0002] [ 55.439629][ T4458] System zones: 0-4 [ 55.454937][ T4458] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.472817][ T4460] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 55.496527][ T4460] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 55.501074][ T4462] IPVS: using max 2064 ests per chain, 103200 per kthread [ 55.504627][ T4458] ext4 filesystem being mounted at /54/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.524848][ T4460] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 55.539809][ T4460] tipc: Resetting bearer [ 55.567370][ T4460] tipc: Disabling bearer [ 55.773670][ T4474] loop3: detected capacity change from 0 to 8192 [ 55.842227][ T4480] loop0: detected capacity change from 0 to 1024 [ 55.879161][ T4480] EXT4-fs: Ignoring removed orlov option [ 55.906536][ T4480] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.930557][ T4482] loop3: detected capacity change from 0 to 8192 [ 55.944500][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.955590][ T4480] tmpfs: Bad value for 'mpol' [ 55.957824][ T4482] FAULT_INJECTION: forcing a failure. [ 55.957824][ T4482] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 55.961810][ T4480] netlink: 24 bytes leftover after parsing attributes in process `syz.0.214'. [ 55.984170][ T4482] CPU: 1 UID: 0 PID: 4482 Comm: syz.3.215 Tainted: G W syzkaller #0 PREEMPT(full) [ 55.984249][ T4482] Tainted: [W]=WARN [ 55.984256][ T4482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 55.984270][ T4482] Call Trace: [ 55.984276][ T4482] [ 55.984284][ T4482] __dump_stack+0x1d/0x30 [ 55.984312][ T4482] dump_stack_lvl+0x95/0xd0 [ 55.984339][ T4482] dump_stack+0x15/0x1b [ 55.984372][ T4482] should_fail_ex+0x263/0x280 [ 55.984396][ T4482] should_fail+0xb/0x20 [ 55.984415][ T4482] should_fail_usercopy+0x1a/0x20 [ 55.984461][ T4482] strncpy_from_user+0x27/0x250 [ 55.984494][ T4482] ? kmem_cache_alloc_noprof+0x18c/0x400 [ 55.984519][ T4482] do_getname+0x59/0x1c0 [ 55.984553][ T4482] getname_flags+0x1d/0x30 [ 55.984576][ T4482] do_sys_openat2+0x60/0x130 [ 55.984638][ T4482] __x64_sys_openat+0xf2/0x120 [ 55.984669][ T4482] x64_sys_call+0x1e39/0x3020 [ 55.984701][ T4482] do_syscall_64+0x12c/0x370 [ 55.984723][ T4482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.984747][ T4482] RIP: 0033:0x7f82be92c799 [ 55.984763][ T4482] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 55.984826][ T4482] RSP: 002b:00007f82bd387028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 55.984848][ T4482] RAX: ffffffffffffffda RBX: 00007f82beba5fa0 RCX: 00007f82be92c799 [ 55.984881][ T4482] RDX: 000000000000275a RSI: 0000200000000100 RDI: ffffffffffffff9c [ 55.984896][ T4482] RBP: 00007f82bd387090 R08: 0000000000000000 R09: 0000000000000000 [ 55.984910][ T4482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 55.984963][ T4482] R13: 00007f82beba6038 R14: 00007f82beba5fa0 R15: 00007ffc4d1704b8 [ 55.984984][ T4482] [ 56.172283][ T4488] loop4: detected capacity change from 0 to 128 [ 56.208778][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.272409][ T4490] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 56.340507][ T4490] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.398040][ T4490] EXT4-fs error (device loop1): ext4_map_blocks:818: inode #15: block 3: comm syz.1.216: lblock 3 mapped to illegal pblock 3 (length 3) [ 56.431681][ T4490] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 56.451977][ T4505] netlink: 8 bytes leftover after parsing attributes in process `syz.0.221'. [ 56.464061][ T4490] EXT4-fs (loop1): This should not happen!! Data will be lost [ 56.464061][ T4490] [ 56.563596][ T4511] netlink: 15 bytes leftover after parsing attributes in process `syz.5.223'. [ 56.603650][ T3568] EXT4-fs error (device loop1): ext4_map_blocks:818: inode #15: block 8: comm kworker/u8:23: lblock 8 mapped to illegal pblock 8 (length 8) [ 56.630600][ T3568] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 56.657488][ T3568] EXT4-fs (loop1): This should not happen!! Data will be lost [ 56.657488][ T3568] [ 56.692050][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 56.768534][ T4523] EXT4-fs: Ignoring removed orlov option [ 56.804385][ T4523] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.893984][ T4523] tmpfs: Bad value for 'mpol' [ 56.900604][ T4523] netlink: 24 bytes leftover after parsing attributes in process `syz.5.228'. [ 56.949096][ T4535] random: crng reseeded on system resumption [ 57.004559][ T4531] FAULT_INJECTION: forcing a failure. [ 57.004559][ T4531] name failslab, interval 1, probability 0, space 0, times 0 [ 57.021545][ T3957] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.051062][ T4531] CPU: 1 UID: 0 PID: 4531 Comm: syz.1.229 Tainted: G W syzkaller #0 PREEMPT(full) [ 57.051166][ T4531] Tainted: [W]=WARN [ 57.051174][ T4531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 57.051269][ T4531] Call Trace: [ 57.051283][ T4531] [ 57.051292][ T4531] __dump_stack+0x1d/0x30 [ 57.051317][ T4531] dump_stack_lvl+0x95/0xd0 [ 57.051416][ T4531] dump_stack+0x15/0x1b [ 57.051449][ T4531] should_fail_ex+0x263/0x280 [ 57.051547][ T4531] should_failslab+0x8c/0xb0 [ 57.051594][ T4531] kmem_cache_alloc_noprof+0x66/0x400 [ 57.051674][ T4531] ? alloc_empty_file+0x76/0x200 [ 57.051703][ T4531] alloc_empty_file+0x76/0x200 [ 57.051801][ T4531] path_openat+0x65/0x2050 [ 57.051832][ T4531] ? _parse_integer_limit+0x170/0x190 [ 57.051860][ T4531] ? _parse_integer+0x27/0x40 [ 57.051964][ T4531] ? kstrtoull+0x111/0x140 [ 57.052000][ T4531] ? kstrtouint+0x76/0xc0 [ 57.052081][ T4531] do_file_open+0x16c/0x290 [ 57.052117][ T4531] do_sys_openat2+0x94/0x130 [ 57.052193][ T4531] __x64_sys_openat+0xf2/0x120 [ 57.052223][ T4531] x64_sys_call+0x1e39/0x3020 [ 57.052262][ T4531] do_syscall_64+0x12c/0x370 [ 57.052287][ T4531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.052332][ T4531] RIP: 0033:0x7f964f30c799 [ 57.052348][ T4531] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 57.052390][ T4531] RSP: 002b:00007f964dd5f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 57.052406][ T4531] RAX: ffffffffffffffda RBX: 00007f964f585fa0 RCX: 00007f964f30c799 [ 57.052417][ T4531] RDX: 000000000000275a RSI: 0000200000000100 RDI: ffffffffffffff9c [ 57.052427][ T4531] RBP: 00007f964dd5f090 R08: 0000000000000000 R09: 0000000000000000 [ 57.052512][ T4531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 57.052525][ T4531] R13: 00007f964f586038 R14: 00007f964f585fa0 R15: 00007ffd7439fe28 [ 57.052543][ T4531] [ 57.465485][ T4548] team0: Port device vlan3 added [ 57.486655][ T4551] EXT4-fs: Ignoring removed orlov option [ 57.496705][ T4551] EXT4-fs: Ignoring removed nobh option [ 57.547083][ T4551] EXT4-fs warning (device loop0): ext4_multi_mount_protect:394: Unable to create kmmpd thread for loop0. [ 57.580869][ T4556] batadv0: entered promiscuous mode [ 57.605216][ T4556] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 57.663220][ T4556] batadv0: left promiscuous mode [ 57.791365][ T4567] x_tables: duplicate underflow at hook 1 [ 57.856981][ T4570] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.874069][ T4570] ext4 filesystem being mounted at /55/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 57.935461][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.994848][ T4578] EXT4-fs error (device loop5): ext4_get_branch:178: inode #11: block 4294967295: comm syz.5.244: invalid block [ 58.051898][ T4581] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.071032][ T4578] fserror_report: 1 callbacks suppressed [ 58.071042][ T4578] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 58.097068][ T4585] netlink: 4 bytes leftover after parsing attributes in process `syz.1.245'. [ 58.118788][ T4578] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.244: invalid indirect mapped block 4294967295 (level 1) [ 58.132683][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 58.132697][ C1] EXT4-fs (loop5): initial error at time 1772284536: ext4_get_branch:178: inode 11: block 4294967295 [ 58.132722][ C1] EXT4-fs (loop5): last error at time 1772284536: ext4_get_branch:178: inode 11: block 4294967295 [ 58.163066][ T4581] ext4 filesystem being mounted at /56/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.212860][ T4578] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 58.213127][ T4578] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.244: invalid indirect mapped block 4294967295 (level 1) [ 58.243125][ T4587] netlink: 'syz.3.243': attribute type 2 has an invalid length. [ 58.243289][ T4578] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 58.250776][ T4587] netlink: 'syz.3.243': attribute type 4 has an invalid length. [ 58.250793][ T4587] netlink: 132 bytes leftover after parsing attributes in process `syz.3.243'. [ 58.281307][ T4578] EXT4-fs (loop5): 2 truncates cleaned up [ 58.318046][ T4578] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.495706][ T4594] bond2: option lacp_active: invalid value (5) [ 58.540149][ T4594] bond2 (unregistering): Released all slaves [ 58.565484][ T4604] vfat: Unknown parameter 'ÿÿÿÿÿÿ' [ 58.600563][ T4606] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 58.624567][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.634457][ T4606] EXT4-fs error (device loop0): ext4_map_blocks:818: inode #3: block 3: comm syz.0.249: lblock 3 mapped to illegal pblock 3 (length 1) [ 58.661213][ T3957] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.716716][ T4606] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 58.716813][ T4606] EXT4-fs error (device loop0): ext4_acquire_dquot:7001: comm syz.0.249: Failed to acquire dquot type 0 [ 58.726013][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 58.726029][ C0] EXT4-fs (loop0): initial error at time 1772284537: ext4_map_blocks:818: inode 3: block 3 [ 58.726053][ C0] EXT4-fs (loop0): last error at time 1772284537: ext4_map_blocks:818: inode 3: block 3 [ 58.801017][ T4606] loop0: lost filesystem error report for type 5 error -117 [ 58.801106][ T4606] EXT4-fs error (device loop0): ext4_map_blocks:776: inode #3: block 3: comm syz.0.249: lblock 3 mapped to illegal pblock 3 (length 1) [ 58.870679][ T4606] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 58.871203][ T4606] EXT4-fs error (device loop0): ext4_acquire_dquot:7001: comm syz.0.249: Failed to acquire dquot type 0 [ 58.911063][ T4606] loop0: lost filesystem error report for type 5 error -117 [ 58.911508][ T4606] EXT4-fs error (device loop0): ext4_free_blocks:6724: comm syz.0.249: Freeing blocks not in datazone - block = 0, count = 4096 [ 58.957615][ T4606] loop0: lost filesystem error report for type 5 error -117 [ 58.957773][ T4606] EXT4-fs error (device loop0): ext4_map_blocks:776: inode #3: block 3: comm syz.0.249: lblock 3 mapped to illegal pblock 3 (length 1) [ 59.008669][ T4625] set_capacity_and_notify: 10 callbacks suppressed [ 59.008680][ T4625] loop5: detected capacity change from 0 to 256 [ 59.014903][ T4626] loop1: detected capacity change from 0 to 512 [ 59.029336][ T4606] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 59.029520][ T4606] EXT4-fs error (device loop0): ext4_acquire_dquot:7001: comm syz.0.249: Failed to acquire dquot type 0 [ 59.186457][ T4606] loop0: lost filesystem error report for type 5 error -117 [ 59.187057][ T4606] EXT4-fs (loop0): 1 orphan inode deleted [ 59.220548][ T4626] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 4294443010)! [ 59.259949][ T4626] EXT4-fs (loop1): group descriptors corrupted! [ 59.270887][ T4606] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.448895][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.508065][ T4629] loop5: detected capacity change from 0 to 8192 [ 59.569594][ T28] kauditd_printk_skb: 288 callbacks suppressed [ 59.569605][ T28] audit: type=1400 audit(1772284538.442:592): avc: denied { bind } for pid=4628 comm="syz.5.254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 59.604294][ T28] audit: type=1400 audit(1772284538.472:593): avc: denied { setopt } for pid=4628 comm="syz.5.254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 59.666921][ T4638] loop5: detected capacity change from 0 to 736 [ 59.743795][ T4639] loop0: detected capacity change from 0 to 8192 [ 59.804063][ T4642] __nla_validate_parse: 1 callbacks suppressed [ 59.804078][ T4642] netlink: 76 bytes leftover after parsing attributes in process `syz.3.258'. [ 59.824402][ T4639] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 59.885246][ T4651] loop1: detected capacity change from 0 to 512 [ 59.894356][ T4651] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 59.911595][ T28] audit: type=1400 audit(1772284538.792:594): avc: denied { create } for pid=4640 comm="syz.5.259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 59.956379][ T4651] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ee02c, mo2=0002] [ 60.001086][ T4651] System zones: 1-12 [ 60.011403][ T4651] EXT4-fs (loop1): orphan cleanup on readonly fs [ 60.033887][ T4651] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.261: invalid indirect mapped block 2 (level 2) [ 60.064039][ T28] audit: type=1400 audit(1772284538.942:595): avc: denied { setopt } for pid=4659 comm="syz.5.264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 60.071151][ T4651] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 60.084598][ T4651] EXT4-fs (loop1): Remounting filesystem read-only [ 60.093743][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 60.093759][ C0] EXT4-fs (loop1): initial error at time 1772284538: ext4_free_branches:1023: inode 11 [ 60.093799][ C0] EXT4-fs (loop1): last error at time 1772284538: ext4_free_branches:1023: inode 11 [ 60.127694][ T4631] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001) [ 60.136382][ T4631] FAT-fs (loop0): Filesystem has been set read-only [ 60.144343][ T4631] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001) [ 60.153454][ T4631] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001) [ 60.166447][ T4651] EXT4-fs (loop1): 1 truncate cleaned up [ 60.179615][ T4651] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback. [ 60.399704][ T28] audit: type=1400 audit(1772284539.272:596): avc: denied { ioctl } for pid=4650 comm="syz.1.261" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 60.439669][ T4665] loop5: detected capacity change from 0 to 32768 [ 60.631566][ T3583] loop5: p1 p3 < > [ 60.874054][ T4665] loop5: p1 p3 < > [ 60.876177][ T4686] loop4: detected capacity change from 0 to 512 [ 60.884862][ T4686] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 60.911973][ T4686] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.267: bg 0: block 255: padding at end of block bitmap is not set [ 60.934877][ T4686] loop4: lost filesystem error report for type 5 error -117 [ 60.935132][ T4686] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 60.942575][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 60.942596][ C0] EXT4-fs (loop4): initial error at time 1772284539: ext4_validate_block_bitmap:441 [ 60.942620][ C0] EXT4-fs (loop4): last error at time 1772284539: ext4_validate_block_bitmap:441 [ 60.989037][ T4690] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 61.021032][ T4686] loop4: lost filesystem error report for type 5 error -117 [ 61.034422][ T4686] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.267: invalid indirect mapped block 1 (level 1) [ 61.071973][ T3583] udevd[3583]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 61.083499][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 61.093838][ T4686] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 61.093873][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 61.114053][ T4686] EXT4-fs (loop4): 1 truncate cleaned up [ 61.126712][ T4686] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.133518][ T3583] udevd[3583]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 61.149309][ T3834] udevd[3834]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 61.177943][ T4686] netlink: 8 bytes leftover after parsing attributes in process `syz.4.267'. [ 61.230615][ T4707] loop1: detected capacity change from 0 to 512 [ 61.243126][ T4712] 9pnet_fd: p9_fd_create_tcp (4712): problem connecting socket to 127.0.0.1 [ 61.248467][ T4709] loop0: detected capacity change from 0 to 512 [ 61.266250][ T28] audit: type=1400 audit(1772284540.122:597): avc: denied { mounton } for pid=4711 comm="syz.5.270" path="/syzcgroup/cpu/syz5/cgroup.procs" dev="cgroup" ino=298 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 61.292492][ T4714] netlink: 4 bytes leftover after parsing attributes in process `syz.4.267'. [ 61.302598][ T4709] EXT4-fs: Ignoring removed mblk_io_submit option [ 61.309062][ T4709] EXT4-fs: dax option not supported [ 61.345985][ T4707] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 61.367990][ T4707] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 61.376930][ T4707] EXT4-fs (loop1): 1 truncate cleaned up [ 61.383051][ T4707] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.431574][ T4707] EXT4-fs error (device loop1): ext4_readdir:265: inode #2: block 4: comm syz.1.271: path /71/file0: bad entry in directory: inode out of bounds - offset=0, inode=131071, rec_len=1024, size=1024 fake=0 [ 61.536196][ T28] audit: type=1400 audit(1772284540.412:598): avc: denied { setattr } for pid=4705 comm="syz.1.271" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 61.681951][ T4741] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.274'. [ 61.691567][ T4728] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.274'. [ 61.701244][ T4738] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.274'. [ 61.769232][ T4237] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.801509][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.866105][ T4761] netlink: 8 bytes leftover after parsing attributes in process `syz.1.280'. [ 61.868842][ T28] audit: type=1400 audit(1772284540.742:599): avc: denied { append } for pid=4759 comm="syz.0.281" name="001" dev="devtmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 61.904241][ T4761] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 61.924296][ T28] audit: type=1400 audit(1772284540.802:600): avc: denied { shutdown } for pid=4760 comm="syz.1.280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 61.995978][ T28] audit: type=1400 audit(1772284540.842:601): avc: denied { ioctl } for pid=4759 comm="syz.0.281" path="socket:[8191]" dev="sockfs" ino=8191 ioctlcmd=0x8910 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 62.025918][ T4758] FAULT_INJECTION: forcing a failure. [ 62.025918][ T4758] name failslab, interval 1, probability 0, space 0, times 0 [ 62.039089][ T4758] CPU: 1 UID: 0 PID: 4758 Comm: syz.4.278 Tainted: G W syzkaller #0 PREEMPT(full) [ 62.039180][ T4758] Tainted: [W]=WARN [ 62.039188][ T4758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 62.039202][ T4758] Call Trace: [ 62.039209][ T4758] [ 62.039216][ T4758] __dump_stack+0x1d/0x30 [ 62.039244][ T4758] dump_stack_lvl+0x95/0xd0 [ 62.039271][ T4758] dump_stack+0x15/0x1b [ 62.039358][ T4758] should_fail_ex+0x263/0x280 [ 62.039380][ T4758] ? fat_parse_long+0x62/0x430 [ 62.039444][ T4758] should_failslab+0x8c/0xb0 [ 62.039476][ T4758] __kmalloc_cache_noprof+0x5f/0x410 [ 62.039498][ T4758] fat_parse_long+0x62/0x430 [ 62.039587][ T4758] fat_search_long+0x1cc/0x9b0 [ 62.039622][ T4758] ? avc_has_perm+0x101/0x190 [ 62.039653][ T4758] vfat_lookup+0xd5/0x2e0 [ 62.039755][ T4758] ? __pfx_vfat_lookup+0x10/0x10 [ 62.039781][ T4758] path_openat+0xbf0/0x2050 [ 62.039819][ T4758] do_file_open+0x16c/0x290 [ 62.039888][ T4758] do_sys_openat2+0x94/0x130 [ 62.039913][ T4758] __x64_sys_openat+0xf2/0x120 [ 62.040010][ T4758] x64_sys_call+0x1e39/0x3020 [ 62.040035][ T4758] do_syscall_64+0x12c/0x370 [ 62.040054][ T4758] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.040074][ T4758] RIP: 0033:0x7f5e84e6c799 [ 62.040087][ T4758] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 62.040103][ T4758] RSP: 002b:00007f5e838bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 62.040166][ T4758] RAX: ffffffffffffffda RBX: 00007f5e850e5fa0 RCX: 00007f5e84e6c799 [ 62.040178][ T4758] RDX: 000000000000275a RSI: 0000200000000100 RDI: ffffffffffffff9c [ 62.040226][ T4758] RBP: 00007f5e838bf090 R08: 0000000000000000 R09: 0000000000000000 [ 62.040237][ T4758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 62.040248][ T4758] R13: 00007f5e850e6038 R14: 00007f5e850e5fa0 R15: 00007ffd411db1d8 [ 62.040266][ T4758] [ 62.346848][ T3558] kworker/u8:13: attempt to access beyond end of device [ 62.346848][ T3558] loop5: rw=1, sector=145, nr_sectors = 896 limit=128 [ 62.425831][ T4793] IPVS: set_ctl: invalid protocol: 50 172.30.1.6:20000 [ 62.602802][ T4808] xt_hashlimit: size too large, truncated to 1048576 [ 62.725053][ T4832] netlink: 8 bytes leftover after parsing attributes in process `syz.1.291'. [ 62.825366][ T4832] netlink: 'syz.1.291': attribute type 1 has an invalid length. [ 62.840961][ T4840] EXT4-fs (loop0): bad s_want_extra_isize: 2336 [ 62.931758][ T4832] netlink: 'syz.1.291': attribute type 2 has an invalid length. [ 62.949644][ T4832] netlink: 60 bytes leftover after parsing attributes in process `syz.1.291'. [ 63.188852][ T4875] Cannot find set identified by id 0 to match [ 63.200594][ T4877] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.294'. [ 63.567534][ T4907] tipc: Failed to remove unknown binding: 66,0,0/8432298:573905592/573905594 [ 63.612214][ T4917] netlink: 'syz.1.304': attribute type 1 has an invalid length. [ 63.646911][ T4907] tipc: Failed to remove unknown binding: 66,0,0/8432298:573905592/573905593 [ 63.823835][ T4942] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 63.893521][ T30] kworker/u8:1: attempt to access beyond end of device [ 63.893521][ T30] loop0: rw=1, sector=145, nr_sectors = 896 limit=128 [ 63.930385][ T4942] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 64.021899][ T4942] EXT4-fs (loop5): orphan cleanup on readonly fs [ 64.044059][ T4942] EXT4-fs warning (device loop5): ext4_enable_quotas:7236: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 64.067187][ T4942] EXT4-fs (loop5): Cannot turn on quotas: error -5 [ 64.113560][ T4942] EXT4-fs (loop5): 1 truncate cleaned up [ 64.135419][ T4942] EXT4-fs error (device loop5): ext4_search_dir:1474: inode #2: block 16: comm syz.5.312: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 64.459624][ T4980] set_capacity_and_notify: 8 callbacks suppressed [ 64.459670][ T4980] loop3: detected capacity change from 0 to 2048 [ 64.557366][ T4977] loop0: detected capacity change from 0 to 8192 [ 64.576333][ T4980] ext4 filesystem being mounted at /70/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.590054][ T4977] FAULT_INJECTION: forcing a failure. [ 64.590054][ T4977] name failslab, interval 1, probability 0, space 0, times 0 [ 64.699119][ T4977] CPU: 0 UID: 0 PID: 4977 Comm: syz.0.319 Tainted: G W syzkaller #0 PREEMPT(full) [ 64.699203][ T4977] Tainted: [W]=WARN [ 64.699236][ T4977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 64.699311][ T4977] Call Trace: [ 64.699316][ T4977] [ 64.699322][ T4977] __dump_stack+0x1d/0x30 [ 64.699346][ T4977] dump_stack_lvl+0x95/0xd0 [ 64.699378][ T4977] dump_stack+0x15/0x1b [ 64.699402][ T4977] should_fail_ex+0x263/0x280 [ 64.699468][ T4977] ? vfat_add_entry+0x17e/0x2280 [ 64.699495][ T4977] should_failslab+0x8c/0xb0 [ 64.699566][ T4977] __kmalloc_cache_noprof+0x5f/0x410 [ 64.699613][ T4977] vfat_add_entry+0x17e/0x2280 [ 64.699645][ T4977] ? fat_search_long+0x93a/0x9b0 [ 64.699730][ T4977] ? __pfx_vfat_create+0x10/0x10 [ 64.699755][ T4977] vfat_create+0xb2/0x1b0 [ 64.699807][ T4977] ? __pfx_vfat_create+0x10/0x10 [ 64.699838][ T4977] path_openat+0xd75/0x2050 [ 64.699908][ T4977] do_file_open+0x16c/0x290 [ 64.699983][ T4977] do_sys_openat2+0x94/0x130 [ 64.700005][ T4977] __x64_sys_openat+0xf2/0x120 [ 64.700027][ T4977] x64_sys_call+0x1e39/0x3020 [ 64.700052][ T4977] do_syscall_64+0x12c/0x370 [ 64.700112][ T4977] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.700570][ T4977] RIP: 0033:0x7f68642ac799 [ 64.700587][ T4977] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 64.700606][ T4977] RSP: 002b:00007f6862cff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 64.700625][ T4977] RAX: ffffffffffffffda RBX: 00007f6864525fa0 RCX: 00007f68642ac799 [ 64.700639][ T4977] RDX: 000000000000275a RSI: 0000200000000100 RDI: ffffffffffffff9c [ 64.700652][ T4977] RBP: 00007f6862cff090 R08: 0000000000000000 R09: 0000000000000000 [ 64.700685][ T4977] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 64.700697][ T4977] R13: 00007f6864526038 R14: 00007f6864525fa0 R15: 00007ffd5c0fd338 [ 64.700714][ T4977] [ 64.991685][ T28] kauditd_printk_skb: 91 callbacks suppressed [ 64.991698][ T28] audit: type=1400 audit(1772284543.872:692): avc: denied { bind } for pid=4995 comm="syz.0.323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 65.078958][ T30] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm kworker/u8:1: bg 0: block 345: padding at end of block bitmap is not set [ 65.161447][ T30] EXT4-fs (loop3): Remounting filesystem read-only [ 65.700317][ T5029] loop3: detected capacity change from 0 to 8192 [ 65.710697][ T5029] forcing mempool usage for bio_alloc_bioset+0x453/0x9a0 [ 65.767869][ T28] audit: type=1400 audit(1772284544.642:693): avc: denied { create } for pid=5030 comm="syz.0.334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 65.811032][ T28] audit: type=1400 audit(1772284544.642:694): avc: denied { mounton } for pid=5030 comm="syz.0.334" path="/76/file0" dev="tmpfs" ino=428 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 65.995126][ T5051] loop4: detected capacity change from 0 to 128 [ 66.043019][ T5057] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.051729][ T5057] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.117377][ T5060] __nla_validate_parse: 3 callbacks suppressed [ 66.117387][ T5060] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.326'. [ 66.133164][ T5051] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.326'. [ 66.142660][ T5058] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.326'. [ 66.181535][ T28] audit: type=1400 audit(1772284545.062:695): avc: denied { create } for pid=5061 comm="syz.5.343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 66.238178][ T5068] loop5: detected capacity change from 0 to 512 [ 66.262574][ T5068] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.284691][ T5068] netlink: 4 bytes leftover after parsing attributes in process `syz.5.345'. [ 66.646960][ T28] audit: type=1400 audit(1772284545.522:696): avc: denied { bind } for pid=5096 comm="syz.0.350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 66.668328][ T28] audit: type=1400 audit(1772284545.522:697): avc: denied { listen } for pid=5096 comm="syz.0.350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 66.679864][ T30] kworker/u8:1: attempt to access beyond end of device [ 66.679864][ T30] loop4: rw=1, sector=145, nr_sectors = 896 limit=128 [ 66.706444][ T28] audit: type=1400 audit(1772284545.562:698): avc: denied { allowed } for pid=5107 comm="syz.1.353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 66.729331][ T28] audit: type=1400 audit(1772284545.602:699): avc: denied { ioctl } for pid=5107 comm="syz.1.353" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=10109 ioctlcmd=0xf505 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 66.783571][ T5108] loop3: detected capacity change from 0 to 512 [ 66.827812][ T5113] loop5: detected capacity change from 0 to 8192 [ 66.885118][ T28] audit: type=1400 audit(1772284545.712:700): avc: denied { mounton } for pid=5094 comm="syz.3.349" path="/file0" dev="ramfs" ino=10112 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=fifo_file permissive=1 [ 66.986892][ T28] audit: type=1400 audit(1772284545.862:701): avc: denied { create } for pid=5134 comm="syz.5.358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 67.684226][ T5152] TCP: tcp_parse_options: Illegal window scaling value 254 > 14 received [ 67.723212][ T5154] vlan2: entered allmulticast mode [ 67.733395][ T5154] bond0: entered allmulticast mode [ 67.744707][ T5154] bond_slave_0: entered allmulticast mode [ 67.758184][ T5154] bond_slave_1: entered allmulticast mode [ 67.850800][ T5160] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5133 sclass=netlink_route_socket pid=5160 comm=syz.1.366 [ 67.867457][ T5162] netlink: 27 bytes leftover after parsing attributes in process `syz.3.367'. [ 67.943080][ T5160] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1043 sclass=netlink_route_socket pid=5160 comm=syz.1.366 [ 68.110803][ T5169] loop4: detected capacity change from 0 to 128 [ 68.123691][ T5171] loop1: detected capacity change from 0 to 8192 [ 68.233495][ T5177] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.369'. [ 68.243138][ T5169] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.369'. [ 68.252622][ T5176] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.369'. [ 68.399915][ T5182] loop5: detected capacity change from 0 to 512 [ 68.410105][ T5182] ext4: Unknown parameter 'euid>00000000000000060929' [ 68.536564][ T5180] syz.5.373 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 68.548480][ T5180] CPU: 0 UID: 0 PID: 5180 Comm: syz.5.373 Tainted: G W syzkaller #0 PREEMPT(full) [ 68.548550][ T5180] Tainted: [W]=WARN [ 68.548557][ T5180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 68.548647][ T5180] Call Trace: [ 68.548654][ T5180] [ 68.548662][ T5180] __dump_stack+0x1d/0x30 [ 68.548690][ T5180] dump_stack_lvl+0x95/0xd0 [ 68.548716][ T5180] dump_stack+0x15/0x1b [ 68.548814][ T5180] dump_header+0x80/0x240 [ 68.548839][ T5180] oom_kill_process+0x295/0x350 [ 68.548935][ T5180] out_of_memory+0x97d/0xb80 [ 68.548957][ T5180] try_charge_memcg+0x62e/0xa10 [ 68.549036][ T5180] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 68.549071][ T5180] __swap_cache_prepare_and_add+0x386/0x530 [ 68.549141][ T5180] swap_cache_alloc_folio+0xa2/0x120 [ 68.549221][ T5180] swap_cluster_readahead+0x26e/0x3d0 [ 68.549306][ T5180] swapin_readahead+0xde/0x840 [ 68.549334][ T5180] ? __rcu_read_unlock+0x4e/0x70 [ 68.549352][ T5180] ? __perf_event_task_sched_in+0xa65/0xad0 [ 68.549370][ T5180] ? __list_add_valid_or_report+0x38/0xe0 [ 68.549466][ T5180] ? __rcu_read_unlock+0x4e/0x70 [ 68.549488][ T5180] ? swap_cache_get_folio+0x26f/0x280 [ 68.549553][ T5180] do_swap_page+0x309/0x2210 [ 68.549586][ T5180] ? __schedule+0x85a/0xd40 [ 68.549609][ T5180] ? __rcu_read_lock+0x36/0x50 [ 68.549637][ T5180] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 68.549667][ T5180] handle_mm_fault+0xb40/0x3020 [ 68.549766][ T5180] ? vma_start_read+0x1c7/0x2c0 [ 68.549818][ T5180] do_user_addr_fault+0x62f/0x1050 [ 68.549855][ T5180] ? trace_page_fault_user+0x1f/0xe0 [ 68.549881][ T5180] exc_page_fault+0x62/0xa0 [ 68.549922][ T5180] asm_exc_page_fault+0x26/0x30 [ 68.549942][ T5180] RIP: 0033:0x7fe9e56ccfce [ 68.549959][ T5180] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 68.549975][ T5180] RSP: 002b:00007ffd06f314f8 EFLAGS: 00010246 [ 68.549988][ T5180] RAX: 0000000000000000 RBX: 0000555589544500 RCX: 00007fe9e56ccfce [ 68.549999][ T5180] RDX: 00007ffd06f31550 RSI: 0000000000000000 RDI: 0000000000000000 [ 68.550061][ T5180] RBP: 00007fe9e5987da0 R08: 0000000000000000 R09: 0000000000000000 [ 68.550075][ T5180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000010dea [ 68.550088][ T5180] R13: 00007fe9e598609c R14: 0000000000010b73 R15: 00007fe9e5986090 [ 68.550109][ T5180] [ 68.550148][ T5185] FAULT_INJECTION: forcing a failure. [ 68.550148][ T5185] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 68.641956][ T5180] memory: usage 279380kB, limit 307200kB, failcnt 193 [ 68.663737][ T5185] CPU: 0 UID: 0 PID: 5185 Comm: syz.1.375 Tainted: G W syzkaller #0 PREEMPT(full) [ 68.663915][ T5185] Tainted: [W]=WARN [ 68.663936][ T5185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 68.663968][ T5185] Call Trace: [ 68.663987][ T5185] [ 68.664013][ T5185] __dump_stack+0x1d/0x30 [ 68.664086][ T5185] dump_stack_lvl+0x95/0xd0 [ 68.664223][ T5185] dump_stack+0x15/0x1b [ 68.664302][ T5185] should_fail_ex+0x263/0x280 [ 68.664447][ T5185] should_fail+0xb/0x20 [ 68.664529][ T5185] should_fail_usercopy+0x1a/0x20 [ 68.664634][ T5185] _copy_to_user+0x20/0xa0 [ 68.664703][ T5185] simple_read_from_buffer+0xb5/0x130 [ 68.664788][ T5185] proc_fail_nth_read+0x10e/0x150 [ 68.664861][ T5185] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 68.664932][ T5185] vfs_read+0x1ab/0x7f0 [ 68.665071][ T5185] ? __rcu_read_unlock+0x4e/0x70 [ 68.665129][ T5185] ? __fget_files+0x184/0x1c0 [ 68.665216][ T5185] ? mutex_lock+0x57/0x90 [ 68.665306][ T5185] ksys_read+0xdc/0x1a0 [ 68.665379][ T5185] __x64_sys_read+0x40/0x50 [ 68.665482][ T5185] x64_sys_call+0x2886/0x3020 [ 68.665552][ T5185] do_syscall_64+0x12c/0x370 [ 68.665596][ T5185] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.665665][ T5185] RIP: 0033:0x7f964f2ccfce [ 68.665697][ T5185] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 68.665750][ T5185] RSP: 002b:00007f964dd5efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 68.665797][ T5185] RAX: ffffffffffffffda RBX: 00007f964dd5f6c0 RCX: 00007f964f2ccfce [ 68.665834][ T5185] RDX: 000000000000000f RSI: 00007f964dd5f0a0 RDI: 000000000000004d [ 68.665869][ T5185] RBP: 00007f964dd5f090 R08: 0000000000000000 R09: 0000000000000000 [ 68.665899][ T5185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 68.665961][ T5185] R13: 00007f964f586038 R14: 00007f964f585fa0 R15: 00007ffd7439fe28 [ 68.666009][ T5185] [ 69.010946][ T5180] memory+swap: usage 266832kB, limit 9007199254740988kB, failcnt 0 [ 69.036071][ T5180] kmem: usage 224896kB, limit 9007199254740988kB, failcnt 0 [ 69.065729][ T5180] Memory cgroup stats for /syz5: [ 69.065930][ T5180] cache 0 [ 69.079558][ T5180] rss 4096 [ 69.086744][ T5180] shmem 0 [ 69.092963][ T5180] mapped_file 0 [ 69.106413][ T5180] dirty 0 [ 69.112511][ T5180] writeback 0 [ 69.120501][ T5180] workingset_refault_anon 2 [ 69.129436][ T5180] workingset_refault_file 0 [ 69.141487][ T3553] kworker/u8:8: attempt to access beyond end of device [ 69.141487][ T3553] loop4: rw=1, sector=145, nr_sectors = 896 limit=128 [ 69.157661][ T5180] swap 196608 [ 69.171175][ T5180] swapcached 204800 [ 69.177339][ T5180] pgpgin 19597 [ 69.184674][ T5180] pgpgout 19595 [ 69.207893][ T5180] pgfault 26327 [ 69.219735][ T5180] pgmajfault 1 [ 69.227310][ T5180] inactive_anon 0 [ 69.231077][ T5180] active_anon 8192 [ 69.234902][ T5180] inactive_file 0 [ 69.238553][ T5180] active_file 0 [ 69.242123][ T5180] unevictable 0 [ 69.245604][ T5180] hierarchical_memory_limit 314572800 [ 69.251252][ T5180] hierarchical_memsw_limit 9223372036854771712 [ 69.257471][ T5180] total_cache 0 [ 69.261038][ T5180] total_rss 4096 [ 69.264822][ T5180] total_shmem 0 [ 69.268300][ T5180] total_mapped_file 0 [ 69.272547][ T5180] total_dirty 0 [ 69.276402][ T5209] EXT4-fs mount: 8 callbacks suppressed [ 69.276416][ T5209] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.291022][ T5180] total_writeback 0 [ 69.294524][ T5209] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.308962][ T5180] total_workingset_refault_anon 2 [ 69.314266][ T5180] total_workingset_refault_file 0 [ 69.319389][ T5180] total_swap 196608 [ 69.328908][ T5180] total_swapcached 204800 [ 69.333965][ T5180] total_pgpgin 19597 [ 69.337969][ T5180] total_pgpgout 19595 [ 69.342151][ T5180] total_pgfault 26327 [ 69.346236][ T5180] total_pgmajfault 1 [ 69.350158][ T5180] total_inactive_anon 0 [ 69.356831][ T5180] total_active_anon 8192 [ 69.361401][ T5180] total_inactive_file 0 [ 69.365571][ T5180] total_active_file 0 [ 69.369602][ T5180] total_unevictable 0 [ 69.371990][ T4237] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.374021][ T5180] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.373,pid=5180,uid=0 [ 69.397269][ T5180] Memory cgroup out of memory: Killed process 5180 (syz.5.373) total-vm:94160kB, anon-rss:1228kB, file-rss:22476kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 69.435096][ T5217] netlink: 4 bytes leftover after parsing attributes in process `syz.3.384'. [ 69.594433][ T5238] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5238 comm=syz.5.388 [ 69.635093][ T5238] netlink: 40 bytes leftover after parsing attributes in process `syz.5.388'. [ 69.654002][ T5222] syzkaller1: entered promiscuous mode [ 69.659615][ T5222] syzkaller1: entered allmulticast mode [ 69.791017][ T5254] set_capacity_and_notify: 3 callbacks suppressed [ 69.791034][ T5254] loop5: detected capacity change from 0 to 8192 [ 69.871999][ T5258] sch_tbf: peakrate 4294959103 is lower than or equals to rate 16517373851444205497 ! [ 69.921350][ T5264] loop0: detected capacity change from 0 to 512 [ 69.944310][ T5264] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e028, mo2=0002] [ 69.955126][ T5268] ieee802154 phy0 wpan0: encryption failed: -22 [ 69.962130][ T5264] System zones: 0-2, 18-18, 34-34 [ 69.968269][ T5264] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 42 vs 41 free clusters [ 69.983386][ T5264] EXT4-fs (loop0): Remounting filesystem read-only [ 69.990122][ T5264] EXT4-fs (loop0): 1 truncate cleaned up [ 69.995821][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 69.995838][ C0] EXT4-fs (loop0): initial error at time 1772284548: ext4_mb_generate_buddy:1315 [ 69.995874][ C0] EXT4-fs (loop0): last error at time 1772284548: ext4_mb_generate_buddy:1315 [ 70.020602][ T3575] __quota_error: 17 callbacks suppressed [ 70.020612][ T3575] Quota error (device loop0): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 70.041417][ T5264] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.056416][ T3575] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 70.069536][ T5270] loop3: detected capacity change from 0 to 512 [ 70.075921][ T3575] Quota error (device loop0): write_blk: dquota write failed [ 70.083744][ T3575] Quota error (device loop0): remove_free_dqentry: Can't write block (5) with free entries [ 70.091025][ T5270] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 70.096277][ T3575] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 70.107773][ T5264] ext4 filesystem being mounted at /88/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.114983][ T3575] Quota error (device loop0): write_blk: dquota write failed [ 70.146852][ T3575] Quota error (device loop0): free_dqentry: Can't move quota data block (5) to free list [ 70.156714][ T3575] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 70.172613][ T3575] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 70.181995][ T5270] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 70.195201][ T3575] Quota error (device loop0): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 70.207547][ T5270] EXT4-fs (loop3): 1 truncate cleaned up [ 70.237661][ T3575] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 70.251406][ T5270] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.265052][ T5274] loop5: detected capacity change from 0 to 1024 [ 70.271844][ T5274] EXT4-fs: Ignoring removed orlov option [ 70.277803][ T5274] ext4: Unknown parameter 'uid>00000000000000000000' [ 70.288759][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.298525][ T3317] ================================================================== [ 70.306628][ T3317] BUG: KCSAN: data-race in __lru_add_drain_all / folio_add_lru [ 70.314195][ T3317] [ 70.316531][ T3317] read-write to 0xffff888237c26668 of 1 bytes by task 5276 on cpu 0: [ 70.324602][ T3317] folio_add_lru+0xa4/0x1e0 [ 70.329121][ T3317] shmem_get_folio_gfp+0x7b0/0xd60 [ 70.334264][ T3317] shmem_fault+0xf6/0x250 [ 70.338626][ T3317] __do_fault+0xbc/0x200 [ 70.342890][ T3317] handle_mm_fault+0x11d7/0x3020 [ 70.347841][ T3317] __get_user_pages+0x1023/0x1ea0 [ 70.352892][ T3317] __mm_populate+0x242/0x390 [ 70.357492][ T3317] vm_mmap_pgoff+0x23b/0x2d0 [ 70.362090][ T3317] ksys_mmap_pgoff+0xc1/0x310 [ 70.366790][ T3317] x64_sys_call+0x14df/0x3020 [ 70.371498][ T3317] do_syscall_64+0x12c/0x370 [ 70.376105][ T3317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.382050][ T3317] [ 70.384383][ T3317] read to 0xffff888237c26668 of 1 bytes by task 3317 on cpu 1: [ 70.391934][ T3317] __lru_add_drain_all+0x17e/0x450 [ 70.397054][ T3317] lru_add_drain_all+0x10/0x20 [ 70.401822][ T3317] invalidate_bdev+0x47/0x70 [ 70.406423][ T3317] ext4_put_super+0x624/0x7d0 [ 70.411104][ T3317] generic_shutdown_super+0xee/0x220 [ 70.416401][ T3317] kill_block_super+0x2a/0x70 [ 70.421092][ T3317] ext4_kill_sb+0x42/0x80 [ 70.425424][ T3317] deactivate_locked_super+0x75/0x1c0 [ 70.430808][ T3317] deactivate_super+0x97/0xa0 [ 70.435492][ T3317] cleanup_mnt+0x2bb/0x330 [ 70.439916][ T3317] __cleanup_mnt+0x19/0x20 [ 70.444343][ T3317] task_work_run+0x130/0x1a0 [ 70.448958][ T3317] exit_to_user_mode_loop+0x1f4/0x6f0 [ 70.454330][ T3317] do_syscall_64+0x249/0x370 [ 70.458924][ T3317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.464843][ T3317] [ 70.467170][ T3317] value changed: 0x0a -> 0x0d [ 70.471848][ T3317] [ 70.474175][ T3317] Reported by Kernel Concurrency Sanitizer on: [ 70.480328][ T3317] CPU: 1 UID: 0 PID: 3317 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(full) [ 70.491373][ T3317] Tainted: [W]=WARN [ 70.495174][ T3317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 70.505277][ T3317] ================================================================== [ 70.518417][ T28] audit: type=1400 audit(1772284549.392:719): avc: denied { append } for pid=5275 comm="syz.4.402" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 70.544453][ T28] audit: type=1400 audit(1772284549.392:720): avc: denied { open } for pid=5275 comm="syz.4.402" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 70.570167][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.