last executing test programs: 1m12.851485284s ago: executing program 1 (id=20): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50) timer_create(0xffffffea, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x3}, 0x201, 0x9, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB="d000", @ANYBLOB="010000000000000000000100000008000100000000000400048008000c8004000b800800020001000000a00008801c000780080077144ebb0000080006000000000008"], 0xd0}}, 0x571f68543cec8180) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) getsockopt$inet_pktinfo(r0, 0x29, 0x8, &(0x7f00000001c0)={0x0, @empty, @dev}, &(0x7f0000000300)=0xc) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f64e40992f79ecf0", "53c272d8b763f690b35605dff8a4a8d2", "021000", "72392a24199b5903"}, 0x28) readv(r0, &(0x7f00000006c0)=[{0x0}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"/1664], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffffe}, 0x48) 1m12.566434998s ago: executing program 1 (id=24): syz_read_part_table(0x104e, &(0x7f0000000000)="$eJzsz7ENwjAQBdBLHCWkQKJlMPbxJlQ0LMYKUB0yWGQChJDeK8722V/WBT81lDnKa7crQ43IzLlfTVMsUcd+2pct815qK+t8ucXSmr37yLhnRBz6++MntrZyznX7fDxdvzgaAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPyNZwAAAP//P1oNLw==") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)={0x68, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0xfffd}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x1f}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x54}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x68}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="010002000000000000001000000018000180140002006e657464657673696d30000000000000080006"], 0x34}, 0x1, 0x0, 0x0, 0x20004055}, 0x0) 1m11.989552657s ago: executing program 1 (id=25): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x2, 0x5, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x1ff, 0x4, 0x0, 0x4, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000200)}], 0x2}, 0x4000000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x78}, 0x2000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'dummy0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) close(0x3) r4 = syz_usb_connect(0x1, 0x56, 0x0, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYRES32=r2, @ANYRES64=r4, @ANYBLOB="0107400000000000000026000000", @ANYRES64, @ANYBLOB="88f579a48cffded0f0df121d8fd7bc5bb7470345d87c8709663266d65b0665aaf3f2b24f7c17d231fe55e0d1b46c0c76d9211346b60433f7fba2d8d37e985e4b9383fa0b55795f9d3659f8532912092332c7167754546afa5adf567ac182585f04250218ab7a6512dfcdda08c6e6f5b8d038a882fbd791812f4ebd0e7714af4be197d06231c5bc7f655e0fbc17ded50d9723101b98ca3d7267ce39eb032902ff71b3be62cc38f7c93917cfcd710f728b82a7574aa76d80a340d9c974be090f06e0f919c377f158d37d86c413d29a510acc655d2a9b53f5fa3744e4184d00172ecc99ff909cb49b69"], 0x14}, 0x1, 0x0, 0x0, 0x4004014}, 0x4044000) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) splice(r5, 0x0, r6, 0x0, 0x9, 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x862b01) ioctl$EVIOCGKEY(r7, 0x80404518, &(0x7f0000000400)=""/62) 1m11.234943929s ago: executing program 1 (id=33): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, &(0x7f0000000080)={{0xe10c, 0xfffffff9}, {0x0, 0x400}, 0x8800, 0x2}) 1m11.122432571s ago: executing program 1 (id=34): creat(&(0x7f0000000040)='./file0\x00', 0x11) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x9, 0x8, 0x0) mbind(&(0x7f0000a8a000/0x2000)=nil, 0x2000, 0x3, 0x0, 0x0, 0x1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount_setattr(0xffffffffffffff9c, 0x0, 0x100, 0x0, 0xfffffec3) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x4, 0x0, &(0x7f0000000480)) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0xc0500, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x11) ioctl$FIONREAD(r3, 0x541b, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) clock_gettime(0x0, &(0x7f0000000140)) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x9, &(0x7f0000001300)=0x6, 0x4) timer_gettime(r2, &(0x7f0000000240)) timer_settime(r2, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000002e0000001600000000a3badd47000000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x9, 0x0, 0xffffffffffffffff, 0x0, 0x4, '\x00', 0x0, @sk_skb=0x26}, 0x94) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001000010400000000fcdbdf2500000000", @ANYRESOCT=r1, @ANYBLOB="2c06010000000000280012800b00010065727370616e00001800028008001500f3cd0100040012000500160001"], 0x48}}, 0x0) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) write$P9_RAUTH(0xffffffffffffffff, &(0x7f0000000280)={0x14, 0x67, 0x1, {0x1, 0x4, 0x7}}, 0x14) preadv2(r6, &(0x7f0000000200)=[{&(0x7f0000000500)=""/61, 0x3d}], 0x20, 0x40, 0x4, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f00000c7000/0x1000)=nil, &(0x7f000012f000/0x3000)=nil, &(0x7f000006c000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000098000/0x2000)=nil, &(0x7f0000104000/0xc00000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00003c3000/0x1000)=nil, &(0x7f0000000340)="df6805690d55cbad5ad09f5abc1123738492f21eacaebf14aef3d9102d21d9b1eb9b599c630360e3ef701eb07d845e9951926c5fd3169f651f95fe3a361f27f2d252d7ac46236eaa94c04f07231fb2bfb11ae337f9c76fd56213b551917e93d2f628854e220276e858925406689e47fcd492b01039db5ff95454394d39264f3ba8d60160c92d9400c5549a316f8a7f17b51e969d26009cc406ca95d9802fbfd5f36d92ac69e5856a8e", 0xa9, r4}, 0x68) futex(0x0, 0x80000000000b, 0x0, 0x0, 0x0, 0x2) 1m10.653644558s ago: executing program 1 (id=36): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x2000001, &(0x7f0000000340)={[{@nojournal_checksum}, {@noacl}, {@jqfmt_vfsv1}, {@nojournal_checksum}, {@jqfmt_vfsv1}, {@usrjquota}], [{@audit}, {@uid_gt}, {@hash}, {@smackfstransmute={'smackfstransmute', 0x3d, 'syz0\x00'}}, {@flag='posixacl'}, {@euid_lt}]}, 0xff, 0x44d, &(0x7f0000000900)="$eJzs3MtvG8UfAPDvrp30/Ut+UB4tLQQKouKRNOnzwKUIJA4gIcGhiFNI0qrUbaAJEq0qKBzKEVXijjgi8RdwggsCTkhc4Y4qVaiXFiQko13vpsa107hx6rb+fKRNZrzjzHx3d+zZGTsBDKyx7EcSsTkifouIkUb2vwXGGr+uXTk389eVczNJ1Otv/Jnk5a5eOTdTFi2ft6mRqdeL/Lo29V54O2K6Vps7XeQnFk++N7Fw5uzzx09OH5s7Nndq6tChfXt3Dh+Y2t+TOLO4rm7/aH7HtlfeuvjazJGL7/z0TdbezcX+5jh6ZaxxdNt6qteV9dmWpnRS7WND6EolIrLTNZT3/5GoxIalfSPx8qd9bRywpur1er3d+3PhfB24hyXR7xYA/VG+0Wf3v+V2m4Yed4TLhyPeP9iI/1qxNfZUIy3KDLXc3/bSWEQcOf/3l9kWazQPAQDQ7LvDEfFcu/FfGg82lftfsYYyGhH/j4j7IuL+iNgaEQ9E5GUfioiHu6y/dYXkxvFPeumWAluhbPz3QrG2tTT++6eex18YrRS5LXn8Q8nR47W5PcUx2R1D67L85DJ1fP/Sr5932tc8/su2rP5yLNiQXqq2TNDNTi9OrzLsJZc/idhebYk/l0S5jJNExLaI2N7VX75+h3H8ma93dCp18/iX0YN1pvpXEU83zv/5aIm/lHRcn5w8eGBq/8T6qM3tmSivihv9/MuF1zvVv6r4eyA7/xtbr//cUvyjyfqIhTNnT+TrtQvd13Hh98863tPc6vU/nLyZp4eLxz6cXlw8PRkxnLx64+NT159b5svyWfy7d7WLP81f48oj8UhEZBfxzoh4NCIeK9r+eEQ8ERG7lon/xxeffLf7+JeZle+hLP7Zm53/aD7/3ScqJ374tvv4S9n535endhePrOT1b6UNXM2xAwAAgLtFmn8GPknHl9JpOj7e+Az/1tiY1uYXFp89Ov/BqdnGZ+VHYygtZ7pGmuZDJ4u54TI/1ZLfW8wbf1HZkOfHZ+Zrs/0OHgbcpg79P/NHpd+tA9ac72vB4NL/YXDp/zC49H8YXPo/DK52/f/jPrQDuP28/8Pg0v9hcOn/MLj0fxhIHb8bn67qK/8S93wi0u6fVY07pPF3U6K64n9mcYuJdW139fuVCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoDf+DQAA//9X4u4v") prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x374a76c8977093c, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r6, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c642b4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x10, 0xc, &(0x7f0000001180)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006b00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000040), 0x4) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r8) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = syz_open_dev$usbfs(&(0x7f0000000180), 0xb, 0x103381) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000100)={0x1, 0x0, 0x9, 0x10000000000000}) ioctl$USBDEVFS_SUBMITURB(r10, 0x8038550a, &(0x7f00000017c0)=@urb_type_control={0x2, {}, 0x2000006, 0xc1, &(0x7f00000002c0)={0x9a, 0x8, 0x9, 0x7}, 0x8, 0x1ec, 0xa, 0x0, 0x313, 0x3, 0x0}) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000900)=@filter={'filter\x00', 0x4, 0x4, 0x470, 0xffffffff, 0x0, 0x0, 0x268, 0xfeffffff, 0xffffffff, 0x3a0, 0x3a0, 0x3a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x0, 0x35, {0x3}}}}, {{@uncond, 0x0, 0x130, 0x178, 0x0, {}, [@common=@srh={{0x30}, {0x89, 0x8, 0x5, 0x7, 0x1, 0x80, 0x200}}, @common=@inet=@hashlimit1={{0x58}, {'sit0\x00', {0x52, 0x3, 0xfffffffc, 0x7, 0x80000001, 0x9, 0x5d, 0x8, 0x20}, {0x9}}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x1, 0x3d, {0x10}}}}, {{@ipv6={@private0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, [0xff, 0x0, 0xff000000, 0xff000000], [0x0, 0xff, 0xff000000, 0xffffff00], 'team0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0xfb, 0xe7, 0x4, 0x44}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@dst={{0x48}, {0x4, 0x8, 0x1, [0x3, 0x5b, 0x9, 0xfff, 0x8, 0x101, 0x1, 0x101, 0x8, 0x5, 0x800, 0xb9e, 0x6, 0x8, 0x7, 0x4], 0xf}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x0, 0x2, {0x7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) 55.565032586s ago: executing program 32 (id=36): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x2000001, &(0x7f0000000340)={[{@nojournal_checksum}, {@noacl}, {@jqfmt_vfsv1}, {@nojournal_checksum}, {@jqfmt_vfsv1}, {@usrjquota}], [{@audit}, {@uid_gt}, {@hash}, {@smackfstransmute={'smackfstransmute', 0x3d, 'syz0\x00'}}, {@flag='posixacl'}, {@euid_lt}]}, 0xff, 0x44d, &(0x7f0000000900)="$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") prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x374a76c8977093c, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r6, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c642b4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x10, 0xc, &(0x7f0000001180)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006b00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000040), 0x4) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r8) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = syz_open_dev$usbfs(&(0x7f0000000180), 0xb, 0x103381) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000100)={0x1, 0x0, 0x9, 0x10000000000000}) ioctl$USBDEVFS_SUBMITURB(r10, 0x8038550a, &(0x7f00000017c0)=@urb_type_control={0x2, {}, 0x2000006, 0xc1, &(0x7f00000002c0)={0x9a, 0x8, 0x9, 0x7}, 0x8, 0x1ec, 0xa, 0x0, 0x313, 0x3, 0x0}) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000900)=@filter={'filter\x00', 0x4, 0x4, 0x470, 0xffffffff, 0x0, 0x0, 0x268, 0xfeffffff, 0xffffffff, 0x3a0, 0x3a0, 0x3a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x0, 0x35, {0x3}}}}, {{@uncond, 0x0, 0x130, 0x178, 0x0, {}, [@common=@srh={{0x30}, {0x89, 0x8, 0x5, 0x7, 0x1, 0x80, 0x200}}, @common=@inet=@hashlimit1={{0x58}, {'sit0\x00', {0x52, 0x3, 0xfffffffc, 0x7, 0x80000001, 0x9, 0x5d, 0x8, 0x20}, {0x9}}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x1, 0x3d, {0x10}}}}, {{@ipv6={@private0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, [0xff, 0x0, 0xff000000, 0xff000000], [0x0, 0xff, 0xff000000, 0xffffff00], 'team0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0xfb, 0xe7, 0x4, 0x44}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@dst={{0x48}, {0x4, 0x8, 0x1, [0x3, 0x5b, 0x9, 0xfff, 0x8, 0x101, 0x1, 0x101, 0x8, 0x5, 0x800, 0xb9e, 0x6, 0x8, 0x7, 0x4], 0xf}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x0, 0x2, {0x7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) 6.96097189s ago: executing program 2 (id=379): pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x2000) lseek(r3, 0x8, 0x4) close(r2) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2000000014000305000000000000000002180000", @ANYRES32=r6, @ANYBLOB="0e00000048418af50ce3bac34ee7cfd9edc60200000000"], 0x20}, 0x1, 0x0, 0x0, 0x44001}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x200000000622c, 0x0) 5.904237457s ago: executing program 2 (id=391): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_io_uring_setup(0x31c5, &(0x7f0000000040)={0x0, 0x8d73c, 0x2}, &(0x7f00000001c0), &(0x7f00000003c0), &(0x7f0000000000)) syz_io_uring_setup(0x263f, &(0x7f0000000840)={0x0, 0xb8da, 0x186a, 0x0, 0x0, 0x0, r0}, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) syz_open_procfs(0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3c5f, &(0x7f0000000240)={0x0, 0x20, 0x27, 0x7ffffffe, 0x0, 0x0, r0}, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000000)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x0, 0x5b}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffefbfbfffffffff, 0xffffffffffffffff, 0xb) syz_clone3(0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4080) 5.72600297s ago: executing program 2 (id=392): mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x9) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x3d}}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x457, &(0x7f0000000bc0)="$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") r0 = open(&(0x7f0000000140)='.\x00', 0x0, 0x112) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) unshare(0x22020600) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='ns\x00') open_tree(r1, &(0x7f0000000300)='./cgroup\x00', 0x89801) 5.606817592s ago: executing program 2 (id=393): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x1}) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101090, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00') r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="31032fbd7000fddbdf250800000008000300", @ANYRES32=r4, @ANYBLOB="05002d0001000000080006"], 0x2c}, 0x1, 0x0, 0x0, 0x8814}, 0x20000084) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') (async) epoll_create1(0x80000) (async) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x1}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) (async) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101090, 0x0) (async) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') (async) mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) (async) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00') (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)) (async) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="31032fbd7000fddbdf250800000008000300", @ANYRES32=r4, @ANYBLOB="05002d0001000000080006"], 0x2c}, 0x1, 0x0, 0x0, 0x8814}, 0x20000084) (async) 5.476139624s ago: executing program 2 (id=394): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_io_uring_setup(0x31c5, &(0x7f0000000040)={0x0, 0x8d73c, 0x2}, &(0x7f00000001c0), &(0x7f00000003c0), &(0x7f0000000000)) syz_io_uring_setup(0x263f, &(0x7f0000000840)={0x0, 0xb8da, 0x186a, 0x0, 0x0, 0x0, r0}, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) syz_open_procfs(0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001180)={0x1c, r2, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x28000}, 0x40) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000004c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x528, 0x98, 0x98, 0x98, 0x98, 0x98, 0x490, 0x490, 0x490, 0x490, 0x490, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0xff, 'macvlan0\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11, 0x2, 0x71}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x23}, 0x0, 0xffffffff, 'vlan1\x00', 'nr0\x00', {0xff}}, 0x0, 0x1c0, 0x1e8, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'batadv0\x00', {0x100, 0x401, 0x14, 0x3, 0x9, 0x7, 0xaad, 0x78, 0x20}, {0x9}}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x3, {0x5}}}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x8}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00', {}, {}, 0x11, 0x3}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0xc, 0x8}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x588) syz_io_uring_setup(0x3c5f, &(0x7f0000000240)={0x0, 0x20, 0x27, 0x2, 0x0, 0x0, r0}, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000000)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x0, 0x5b}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffefbfbfffffffff, 0xffffffffffffffff, 0xb) syz_clone3(0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4080) 4.516303579s ago: executing program 4 (id=397): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) syz_mount_image$ext4(&(0x7f0000000780)='ext2\x00', &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000000040)={[{@oldalloc}, {@nomblk_io_submit}]}, 0x1, 0x478, &(0x7f0000000300)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r3, 0xc08c5336, &(0x7f0000000080)={0x5, 0x3f, 0x0, 'queue1\x00', 0x5}) truncate(&(0x7f0000000280)='./file1\x00', 0x1bf8) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001180)=@newtfilter={0x24, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xfff3, 0xfff3}, {0x0, 0xfff3}, {0xd, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x20041004}, 0x0) write$P9_RXATTRCREATE(r2, &(0x7f0000000000)={0x7, 0x21, 0x1}, 0x7) 4.404694801s ago: executing program 0 (id=398): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x24, r1, 0x1, 0x0, 0x0, {0x6, 0x0, 0x900}, [@NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}]}, 0x24}, 0x2, 0x34005}, 0x0) (fail_nth: 6) 4.345737572s ago: executing program 4 (id=399): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) syz_open_dev$tty1(0xc, 0x4, 0x4) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x5, 0x510, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x3b, 0x5}, 0x1040, 0x5, 0x20da, 0x0, 0xe, 0xd3e, 0x8a6, 0x0, 0x0, 0x0, 0x20000009}, 0x0, 0xffffffffffffffbc, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x382, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xf) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x12, 0x8, 0x4, 0x7cb4, 0x13, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) fsopen(&(0x7f0000000080)='iso9660\x00', 0x1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="09000000160000000800000040"], 0x50) signalfd(r4, &(0x7f0000000000)={[0xd1e2]}, 0x8) r5 = semget$private(0x0, 0x6, 0x0) semtimedop(r5, &(0x7f0000000000)=[{0x4, 0xc49, 0x1800}], 0x1, 0x0) semop(r5, &(0x7f00000000c0)=[{0x4}, {0x2}], 0x2) semctl$GETZCNT(r5, 0x4, 0xf, 0x0) fcntl$setstatus(r0, 0x4, 0x8e000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff4000/0x9000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0, r0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r6 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc89e, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x8, 0x0, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) r7 = syz_open_dev$sg(&(0x7f00000002c0), 0xe6, 0x2602) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000f, 0x12, r7, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 4.093695216s ago: executing program 0 (id=400): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x201080a, &(0x7f00000005c0)={[{@minixdf}, {@errors_remount}]}, 0x1, 0x445, &(0x7f0000000b00)="$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") r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x109342, 0x0) pwrite64(r1, &(0x7f0000000140)='2', 0x1, 0x8080c61) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000200)={[{@max_batch_time={'max_batch_time', 0x3d, 0xff}}, {@nodioread_nolock}, {@delalloc}, {@barrier}, {@auto_da_alloc}, {@barrier}, {@bh}]}, 0x4, 0x59c, &(0x7f0000001840)="$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") openat(0xffffffffffffff9c, 0x0, 0x143041, 0x2a) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) close(0x3) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) fallocate(r1, 0x3, 0x4, 0x8000c62) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x2041c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100c, 0x0, 0x2, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000040)={{r3, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f00000003c0)='%pS \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r4}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={0xffffffffffffffff, 0x0, 0xe, 0x48000000, &(0x7f0000000300)="40f0538ef047b21fb60068305500", 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.082249636s ago: executing program 5 (id=401): ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000080)=0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000900)={{{@in=@multicast2, @in=@empty, 0x4e20, 0x0, 0x4e23, 0x8, 0xa, 0x20, 0x20, 0x73, 0x0, r0}, {0xfffffffffffffffc, 0x5, 0x9, 0xe9f2, 0x5, 0x0, 0x8, 0xfffffffffffffff8}, {0x1ff, 0x10, 0x3, 0x200}, 0x5, 0x6e6bb5, 0x0, 0x1}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d4, 0x32}, 0xa, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3503, 0x3, 0x1, 0xa6, 0x8000, 0x6, 0xa0}}, 0xe8) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) close(0x3) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x20000080}, 0x4040) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180), 0x140, 0x0) r4 = syz_clone(0x80001000, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r4, 0x0, 0x60000000, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x46a02) syz_open_dev$tty1(0xc, 0x4, 0x4) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f00000001c0), 0x0) ioctl$RTC_AIE_ON(r3, 0x7001) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000800)={0x0, @in={{0x2, 0x4e24, @private=0xa010102}}, 0xad1d, 0x3}, &(0x7f00000008c0)=0x90) ioctl$RTC_ALM_SET(r3, 0x40247007, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000780)='./bus\x00', 0x41, &(0x7f0000000a00)={[{@delalloc}, {@noload}, {@mb_optimize_scan}, {@jqfmt_vfsold}, {@noblock_validity}, {@auto_da_alloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4}}, {@dioread_lock}, {@usrjquota}], [{@context={'context', 0x3d, 'user_u'}}, {@measure}], 0x3d}, 0x1, 0x51c, &(0x7f0000000200)="$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") ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r1, 0x80083314, 0x0) r6 = syz_open_procfs$pagemap(0xffffffffffffffff, 0x0) ioctl$PAGEMAP_SCAN(r6, 0xc0606610, &(0x7f0000000100)={0x60, 0x1, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}) r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000740), 0x223, 0x0) ioctl$PPPIOCGIDLE32(r7, 0x8008743f, &(0x7f00000007c0)) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000011c0)=@filter={'filter\x00', 0xe, 0x5, 0x636, [0x0, 0x200000000b80, 0x200000000c6e, 0x200000001012], 0x0, &(0x7f0000000b40), &(0x7f0000000b80)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{0x9, 0x4, 0x1c, 'ip6erspan0\x00', 'ip_vti0\x00', 'rose0\x00', 'netdevsim0\x00', @remote, [], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}, [0xff, 0xff, 0xff, 0xff, 0x0, 0x4b7ecb6d3baa3905], 0x6e, 0x6e, 0xbe, [], [], @common=@log={'log\x00', 0x28, {{0x2, "2a0862c7541d8a91745934f644da69e49143ac5f8976ca8d817e782a0043", 0x8}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x2, [{0x5, 0x13, 0x8100, 'pim6reg0\x00', '\x00', 'veth0_to_team\x00', 'bond_slave_0\x00', @broadcast, [0x0, 0xff, 0x101, 0xff, 0xff], @local, [0x0, 0x0, 0xff, 0xff, 0xff], 0x1c6, 0x1c6, 0x1f6, [@comment={{'comment\x00', 0x0, 0x100}}, @cgroup0={{'cgroup\x00', 0x0, 0x8}, {{0x100, 0x1}}}], [], @common=@AUDIT={'AUDIT\x00', 0x8}}, {0x3, 0x40, 0x883e, 'wg1\x00', 'ip6tnl0\x00', 'geneve0\x00', 'sit0\x00', @empty, [0xff, 0xff, 0x0, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], 0xee, 0x14e, 0x17e, [@state={{'state\x00', 0x0, 0x8}, {{0x2000400}}}, @helper={{'helper\x00', 0x0, 0x28}, {{0x0, 'RAS\x00'}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0xffffffff}}}, @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x8}}}], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}}]}, {0x0, '\x00', 0x3, 0xffffffffffffffff, 0x2, [{0x5a0476d6efc07406, 0x20, 0x3, 'pim6reg\x00', 'macvtap0\x00', 'batadv0\x00', 'veth0_to_bond\x00', @remote, [0xff, 0xff, 0x0, 0xff, 0xff], @random="d5acf245cb26", [0x0, 0xff, 0x0, 0xff, 0xff, 0xff], 0x6e, 0x6e, 0xa6, [], [], @common=@dnat={'dnat\x00', 0x10, {{@local, 0xfffffffffffffffc}}}}, {0x9, 0x8, 0x8035, 'veth0_to_batadv\x00', 'veth1_vlan\x00', 'veth0_virt_wifi\x00', 'batadv_slave_0\x00', @link_local, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], @remote, [0x0, 0x0, 0x0, 0xff, 0xff, 0xff], 0x6e, 0x6e, 0x9e, [], [], @common=@STANDARD={'\x00', 0x8, {0xffffffffffffffff}}}]}, {0x0, '\x00', 0x5, 0xfffffffffffffffc}]}, 0x6ae) socket$inet6_sctp(0xa, 0x1, 0x84) dup(0xffffffffffffffff) accept4$inet(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x800) 4.081455386s ago: executing program 3 (id=402): r0 = socket$rds(0x15, 0x5, 0x0) unshare(0x8040480) setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000000)={{0x0, 0xa9}, 0x46}, 0x10) 4.026641947s ago: executing program 3 (id=403): unshare(0x6a040000) syz_usb_disconnect(0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x40) open(0x0, 0xecb42, 0x83) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000a80)={r1}, &(0x7f0000000040)=0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x6, 0xf4198, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x4, @perf_bp={0x0, 0x7}, 0x6b04, 0x0, 0x10000, 0x8, 0x81, 0x6, 0x6, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x3fffffffff, 0xffffffffffffffff, 0xa) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x58e, &(0x7f0000000180), 0x1, 0x451, &(0x7f0000000780)="$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") r2 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r3}, 0xc) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) socket$unix(0x1, 0x5, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) 3.779861781s ago: executing program 5 (id=404): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x280000, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r3 = socket(0x10, 0x3, 0x9) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendfile(r3, r4, 0x0, 0x7fffffffffffffff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x4c142, 0x12) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000580)=@newtaction={0x98, 0x30, 0x109, 0x70bd26, 0x0, {}, [{0x84, 0x1, [@m_tunnel_key={0x80, 0xd, 0x0, 0x0, {{0xf}, {0xc, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e24}]}, {0x46, 0x6, "0dc1664d58c5eaba1b36bedc92dd5c1a0bc02cb453369ca3bbed3cbdfe28b7394ab94d32424706e5d1312716100234818f1bd0bc60864550dd1d8693a4641f2c0dac"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}]}]}, 0x98}}, 0x0) sendfile(r5, r5, 0x0, 0xe3aa6ea) r7 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x68, 0x14, 0xf0b, 0xfffffffe, 0x0, {0x2, 0x0, 0x0, 0x0, {0x0, 0x7}, {0x1, 0x5}, {0xe, 0xd}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x0, 0x0, 0x1ffe, 0x0, 0x1d64765e, 0x1}}, {0x4}}, {{0x1c, 0x1, {0xd, 0x4, 0xc, 0x2000800, 0x1, 0x0, 0x8}}, {0x4}}]}]}, 0x68}}, 0x8000) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r5, &(0x7f0000000200)={&(0x7f00000000c0), 0xc, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="cc0e0c73efe7e9cc2a4f415f407051b2dd2e4de168814c0c49d19da445ed90f43f1a4f", @ANYRES16=r8, @ANYBLOB="000828bd7000fcdbdf256300000008000300", @ANYRES32=r9, @ANYBLOB="0c0099000300000072000000"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4800) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x44, r2, 0x2, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x10001, 0x10}}}}, [@NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}, @NL80211_ATTR_STA_PLINK_STATE={0x5}, @NL80211_ATTR_STA_WME={0x4}, @NL80211_ATTR_STA_FLAGS={0x8, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHENTICATED={0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008010}, 0x8840) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000000440)="b25b", 0x2}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)='\b', 0x1}, {&(0x7f0000000100)="2a1b1a4552a31452d5c73c376f8a", 0xe}, {&(0x7f0000002b40)='-', 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f00000006c0)="ce410c4aa3ae6bfd695000000000fe5607b2fa945d2693ac627b6c66c73212026f5db6298ff880818bcc8d65dd93cb5b6e8c3591623faec8ca421ef1b5add083b9c66981ad71d683aba1", 0x4a}, {&(0x7f0000000140)="f2", 0x1}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000b40)}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000340)='\x00', 0x1}], 0x1}}], 0x4, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r10, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a002800726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r11 = socket$kcm(0xa, 0x922000000003, 0x11) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x38, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xb}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa8}}, 0x0) sendmsg$kcm(r11, &(0x7f0000000040)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x4, @loopback, 0xffffffff, 0x1}, 0x80, 0x0}, 0x0) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x3, 0x4) 3.778988501s ago: executing program 2 (id=405): prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f00007e1000/0x4000)=nil, 0x4000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, 0x0, 0x0, &(0x7f0000121000), 0x0, 0x0) madvise(&(0x7f00007e6000/0x2000)=nil, 0x2000, 0x15) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[], 0x10c}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r2, &(0x7f0000000080)=""/1, 0x1) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) keyctl$invalidate(0x15, 0x0) io_uring_setup(0x7d3, &(0x7f0000000580)={0x0, 0xddf7, 0x0, 0xfffffffe, 0x2d3}) socket$inet(0x2, 0x2, 0x1) r6 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20040845}, 0x0) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) read$char_usb(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x7}, {0xffff, 0xffff}, {0x10, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x48048}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) close_range(r8, r4, 0x2) openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) socket(0x10, 0x3, 0x4) 3.778697341s ago: executing program 33 (id=405): prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f00007e1000/0x4000)=nil, 0x4000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, 0x0, 0x0, &(0x7f0000121000), 0x0, 0x0) madvise(&(0x7f00007e6000/0x2000)=nil, 0x2000, 0x15) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[], 0x10c}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r2, &(0x7f0000000080)=""/1, 0x1) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) keyctl$invalidate(0x15, 0x0) io_uring_setup(0x7d3, &(0x7f0000000580)={0x0, 0xddf7, 0x0, 0xfffffffe, 0x2d3}) socket$inet(0x2, 0x2, 0x1) r6 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20040845}, 0x0) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) read$char_usb(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x7}, {0xffff, 0xffff}, {0x10, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x48048}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) close_range(r8, r4, 0x2) openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) socket(0x10, 0x3, 0x4) 3.749567711s ago: executing program 4 (id=407): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_GET_NEXT_KEY(0x15, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x4, 0x9, 0xa, 0x3, 0x0, 0x2, 0x600, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0, 0x4}, 0xea, 0x7, 0x6, 0x1, 0x8, 0xffffffff, 0xfffc, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, 0x0, 0xf, 0xffffffffffffffff, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x24040014) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=ANY=[@ANYBLOB="1400000010000000000a5400000002000006200004801c0001800a00010071756575650000000c00028008000440000000090900010073797a30000000000900020073797a32000000000500074003000000140000081100010000000000000000000000000a00000000"], 0x7c}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x40000) connect$llc(r1, &(0x7f0000000340)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x13, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="4eaa200000000000711091000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0xb3) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001580), 0x0, 0x0) pread64(r3, &(0x7f0000000400)=""/86, 0x56, 0x8) r4 = syz_io_uring_setup(0x6d98, &(0x7f00000002c0)={0x0, 0x0, 0x3fe, 0x1, 0x8000005}, &(0x7f0000ff0000), 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, 0x0, 0x0) shmget$private(0x0, 0x4000, 0x10, &(0x7f0000ffc000/0x4000)=nil) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000080)={0x20071026}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x3) socket$inet6_tcp(0xa, 0x1, 0x0) 3.649795723s ago: executing program 4 (id=408): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x2000001, &(0x7f0000000340)={[{@nojournal_checksum}, {@noacl}, {@jqfmt_vfsv1}, {@nojournal_checksum}, {@jqfmt_vfsv1}, {@usrjquota}], [{@audit}, {@uid_gt}, {@hash}, {@smackfstransmute={'smackfstransmute', 0x3d, 'syz0\x00'}}, {@flag='posixacl'}, {@euid_lt}]}, 0xff, 0x44d, &(0x7f0000000900)="$eJzs3MtvG8UfAPDvrp30/Ut+UB4tLQQKouKRNOnzwKUIJA4gIcGhiFNI0qrUbaAJEq0qKBzKEVXijjgi8RdwggsCTkhc4Y4qVaiXFiQko13vpsa107hx6rb+fKRNZrzjzHx3d+zZGTsBDKyx7EcSsTkifouIkUb2vwXGGr+uXTk389eVczNJ1Otv/Jnk5a5eOTdTFi2ft6mRqdeL/Lo29V54O2K6Vps7XeQnFk++N7Fw5uzzx09OH5s7Nndq6tChfXt3Dh+Y2t+TOLO4rm7/aH7HtlfeuvjazJGL7/z0TdbezcX+5jh6ZaxxdNt6qteV9dmWpnRS7WND6EolIrLTNZT3/5GoxIalfSPx8qd9bRywpur1er3d+3PhfB24hyXR7xYA/VG+0Wf3v+V2m4Yed4TLhyPeP9iI/1qxNfZUIy3KDLXc3/bSWEQcOf/3l9kWazQPAQDQ7LvDEfFcu/FfGg82lftfsYYyGhH/j4j7IuL+iNgaEQ9E5GUfioiHu6y/dYXkxvFPeumWAluhbPz3QrG2tTT++6eex18YrRS5LXn8Q8nR47W5PcUx2R1D67L85DJ1fP/Sr5932tc8/su2rP5yLNiQXqq2TNDNTi9OrzLsJZc/idhebYk/l0S5jJNExLaI2N7VX75+h3H8ma93dCp18/iX0YN1pvpXEU83zv/5aIm/lHRcn5w8eGBq/8T6qM3tmSivihv9/MuF1zvVv6r4eyA7/xtbr//cUvyjyfqIhTNnT+TrtQvd13Hh98863tPc6vU/nLyZp4eLxz6cXlw8PRkxnLx64+NT159b5svyWfy7d7WLP81f48oj8UhEZBfxzoh4NCIeK9r+eEQ8ERG7lon/xxeffLf7+JeZle+hLP7Zm53/aD7/3ScqJ374tvv4S9n535endhePrOT1b6UNXM2xAwAAgLtFmn8GPknHl9JpOj7e+Az/1tiY1uYXFp89Ov/BqdnGZ+VHYygtZ7pGmuZDJ4u54TI/1ZLfW8wbf1HZkOfHZ+Zrs/0OHgbcpg79P/NHpd+tA9ac72vB4NL/YXDp/zC49H8YXPo/DK52/f/jPrQDuP28/8Pg0v9hcOn/MLj0fxhIHb8bn67qK/8S93wi0u6fVY07pPF3U6K64n9mcYuJdW139fuVCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoDf+DQAA//9X4u4v") prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_int(r5, 0x107, 0x14, &(0x7f0000000180)=0x19ca, 0x4) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r5, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c642b4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x10, 0xc, &(0x7f0000001180)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006b00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040), 0x4) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r7) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = syz_open_dev$usbfs(&(0x7f0000000180), 0xb, 0x103381) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000100)={0x1, 0x0, 0x9, 0x10000000000000}) ioctl$USBDEVFS_SUBMITURB(r9, 0x8038550a, &(0x7f00000017c0)=@urb_type_control={0x2, {}, 0x2000006, 0xc1, &(0x7f00000002c0)={0x9a, 0x8, 0x9, 0x7}, 0x8, 0x1ec, 0xa, 0x0, 0x313, 0x3, 0x0}) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000900)=@filter={'filter\x00', 0x4, 0x4, 0x470, 0xffffffff, 0x0, 0x0, 0x268, 0xfeffffff, 0xffffffff, 0x3a0, 0x3a0, 0x3a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x0, 0x35, {0x3}}}}, {{@uncond, 0x0, 0x130, 0x178, 0x0, {}, [@common=@srh={{0x30}, {0x89, 0x8, 0x5, 0x7, 0x1, 0x80, 0x200}}, @common=@inet=@hashlimit1={{0x58}, {'sit0\x00', {0x52, 0x3, 0xfffffffc, 0x7, 0x80000001, 0x9, 0x5d, 0x8, 0x20}, {0x9}}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x1, 0x3d, {0x10}}}}, {{@ipv6={@private0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, [0xff, 0x0, 0xff000000, 0xff000000], [0x0, 0xff, 0xff000000, 0xffffff00], 'team0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0xfb, 0xe7, 0x4, 0x44}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@dst={{0x48}, {0x4, 0x8, 0x1, [0x3, 0x5b, 0x9, 0xfff, 0x8, 0x101, 0x1, 0x101, 0x8, 0x5, 0x800, 0xb9e, 0x6, 0x8, 0x7, 0x4], 0xf}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x0, 0x2, {0x7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) 3.439092016s ago: executing program 0 (id=409): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000140)='./file2\x00', 0x1000000, &(0x7f00000000c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$eJzs3D1rW1cYB/AjWa6tlhZPhXbpoV3a5bb10qVDS3GhVNCSRCEv0zWWEyFFAl8NksmgOVM+RwhkCWQL+QL+DFmymYDx5Ck3OJKs2NixE0dy4vx+ix6e/z1X5+jARVy9bP5+91ZjNUtW004ozRdC8Y/QDzuFsBCKYaQffnpwZfvOxavX/v2zUlm6MDvsx/jVd4+v377//ZPOF5cf7nYKIYStxWcbX298s/ni0s16FutZbLU7MY3L7XYnXW7W4ko9ayQx/t+spVkt1ltZbW1fvtpsj5861LIspq1ebNR6sdOOnbVeTG+k9VZMkiTOB06lem8nz8NWnuf5XD/kef62JyhMZl5Myyn3n4/c3kU97l5Nn/e71W518DjI//6nsvRLfGVhPGq7263O7OW/DvK4P58Nnw/zxUPzz8KPPwzy3eyv/yoH8nJYmfzyAQAAAADgXErinkPv7yfJUfmgeu3zgQP370vh29K4MzP5pQAAAABHyHrrjbS5Mrs2KJq1Myvmwv7Ob4+GUzxu+M9Pjz9mQsWXwyK843nKIYSjjymGM9+U6RSj75EPO6PfF5xseOl9TaP8gbwao2I+HBaVw3pjbjqbAgAAnC/jN/0nHlKc6IQAAAAAAAAAAAAAAAAAAADgEzSNPzM76zUCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALzJywAAAP//ixdW4w==") (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000004c0), 0x208e24b) ftruncate(r1, 0x9) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="50000000100001002a2b9e9507a6c357787b407b", @ANYRES32=0x0, @ANYRESOCT=r0], 0x50}, 0x1, 0x0, 0x0, 0x8001}, 0x10001) 2.699912108s ago: executing program 5 (id=410): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = syz_open_dev$mouse(&(0x7f0000000040), 0x1, 0x0) ioctl$BLKCLOSEZONE(r2, 0x40101287, &(0x7f0000000180)={0x3, 0xcf}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x2d1}, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xb, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) r6 = socket(0x10, 0x3, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_REG(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000800000001a000000280022800414008004000080040000808341f1680200008014000080040000800400008004000080060021"], 0x44}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000e40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r6, &(0x7f0000000f40)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e80)={0x50, r7, 0x4, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0xa, 0x11}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x32}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xc}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3e}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1d}]}, 0x50}, 0x1, 0x0, 0x0, 0x41}, 0x54) sendmsg$NL80211_CMD_SET_MPATH(r4, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x58, r5, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x4) syz_clone(0x4400, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100, 0x0, 0x0, 0x5, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) rseq(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x3}, 0x20, 0xfffffffffffffffd, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff00000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a030000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) 2.609411559s ago: executing program 3 (id=411): openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xb, 0x830d}, 0x180, 0x2, 0xfffffffe, 0x7, 0x3}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000000180), 0x7, 0x103482) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x100800) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000140)={0x1d, r1, 0x1, {0x0, 0x1, 0x3}, 0x4}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) set_mempolicy(0x0, &(0x7f00000001c0), 0x6) 2.010515428s ago: executing program 0 (id=412): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000740), 0x101000) ioctl$SNDRV_TIMER_IOCTL_TREAD64(r1, 0x400454a4, &(0x7f0000000f80)=0x1) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000580)={@cgroup, 0xffffffffffffffff, 0x2b, 0x10}, 0x20) add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x8, 0x830b}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x20800, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000007c0)) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000080)) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000180)=ANY=[], 0x8) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x1e9842, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000000)=0x2) ioctl$PPPIOCSPASS(r5, 0x40107447, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x6, 0xfd, 0xee}]}) write$ppp(r5, &(0x7f00000000c0)="43f1", 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendto$inet6(r0, &(0x7f00000000c0)="cfc850de060efd27", 0x8, 0x3b00, 0x0, 0x0) 1.876064851s ago: executing program 3 (id=413): socket$nl_netfilter(0x10, 0x3, 0xc) (async) pipe(&(0x7f0000000140)={0xffffffffffffffff}) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffdef, 0xd) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) (async) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000840)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0}, 0x100, 0x7, 0x80000003, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9) (async) recvfrom$inet6(r0, &(0x7f0000000240)=""/21, 0x15, 0x322, 0x0, 0x0) (async) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f0000000280)={0x80, 0x3e48}) r2 = socket$kcm(0x10, 0x2, 0x4) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x80478b, &(0x7f0000000500), 0x0, 0x489, &(0x7f0000000c80)="$eJzs3M1vFOUfAPDvTF+AHy/tD/EFRK0Sk0ZDSwsqBy8aTTxgNNEDXkxqu5CGhRpajRAixRg8aGJI9Gw8mvgXeDMmRj2ZeNWLJ0NClAvoqWZ2Z8p224WW7naQ/XzCss+zM8vz/faZmX3mebYE0LWGsr+SiG0R8WtEDNSrS3cYqj9dv3pu8u+r5yaTWFh47c+ktt+1q+cmi12L923NK8NpRPphkjey1OyZsycmqtXK6bw+Onfy7dHZiP3vnpw4XjleOTV++PChg2PPPD3+VFvyzPK6tuf9mb27X3rj0suTRy+99ePXWbzb8u2NebTLUJb4Xws1zdseb3djJdveUE56SwyENemJiKy7+mrn/0D0xI3OG4gXPyg1OKCjss+mTa03zy8Ad7Ekyo4AKEfxQZ/d/xaPDRp63BGuPFe/Acryvp4/6lt6I8336Wu6v22noYg4Ov/PF9kjOjQPAQDQ6JPJz4/0N4w78uffb+xRL+7I11AGI+L/EbEzIu6JiF0RcW9E3BcR90fEAys38+aeVcazfPyTXr7N1FYlG/89m69tLR3/FaO/GOzJa9tr+fclx6arlQP5z2Q4+jZl9bGbtPHtC7982mpb4/gve2TtF2PBPI7LvU0TdFMTcxO1QWkbXLkQsad3pfyTxZWAJCJ2R8Rq+zC3oyhMP/HV3lY73Tr/m2jDOtPCl1l681n+89GUfyFZXJ88c3b/9LL1ydHNUa0cGC2OiuV++vniq63aX1f+bXClUn9u6P/mXQaTxvXa2bW3cfG3j1re09zm8Z/2J6/X1pn789fem5ibOz0W0Z8cqdWXvD5+471Fvdg/O/6H9y07/tPsz878PVn+D0ZEdhA/FBEPR8QjeeyPRsRjEbHvJvn/8HzrbUX+kZbU/xcipla8/i0e/039v/ZCz4nvv2nV/ur6/1CtNJy/Urv+3cJK4WSXi+YA1/OzAwAAgP+KtPYd+CQdWSyn6chI/Tv8u+J/aXVmdu7JYzPvnJqqf1d+MPrSYqZrIJ8PrU5XK2PJfP4v1udHx/O54mK+9GA+b/xZz5ZafWRypjpVcu7Q7ba2OP8zf/SUHR3QYVuKwpLTfby/lGCADda8jp4urZ5/JVwM4G7l97Whe93i/E83Kg5g4/n8h+610vl/vqluLQDuTj7/oXut6fz/uHNxABss/a7sCIASGf9DV1rP7/V3sLD5zgij+I8nNrb19XTKYKcjjCgKadm9o9DJQskXJgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgDb5NwAA//+XduYy") (async) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000014006b03000000d86e6c1d0010ffff0af32c6e586575f800250002000f00000017d34460bc24eab556a705251e6182949a369f3d3b48dfd8cdbf9367b4fa51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x8}, 0x10ecc9, 0x1224, 0x5b16, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x2}, 0x8) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) dup(r3) (async) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000080)={0xffffffffffffffff, r2, 0x6, 0x0, 0x0, 0x53, 0x14, 0xb8da, 0x9, 0x400, 0x2, 0x3, 'syz0\x00'}) socket(0x10, 0x3, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) (async) perf_event_open(0x0, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) (async) rename(&(0x7f0000000440)='./file0\x00', 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) (async) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x8000, 0xcb}, 0x204, 0x200000006, 0x43a1bd76, 0x5, 0x8, 0xa48, 0x2, 0x0, 0x810000, 0x0, 0x6e13}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x0) 1.875309351s ago: executing program 3 (id=414): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@file={0x0, './mnt\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa420, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000340)={0xffffffffffffffff}, 0x2, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r7, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @mcast2, 0x3}, r8, 0x7}}, 0x48) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r9, 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND(r9, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x10, 0x0, @in={0x2, 0x4e23, @empty}}}, 0x90) sendfile(r5, r3, &(0x7f0000000340)=0x3, 0x3e) sendmsg$nl_route_sched(r6, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=@newtaction={0x3c0, 0x30, 0xb, 0x0, 0x1, {}, [{0x3ac, 0x1, [@m_vlan={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x655}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x60005, 0x1, 0x8, 0x1, 0xc}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_gact={0x198, 0x1d, 0x0, 0x0, {{0x9}, {0x7c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x8, 0x3, 0x10000000, 0x231}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x2235, 0x5}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1d0a, 0x8}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x507, 0x6}}, @TCA_GACT_PARMS={0x18, 0x2, {0x62, 0x8, 0x0, 0x1, 0x200}}, @TCA_GACT_PARMS={0x18, 0x2, {0xfffffffb, 0x10001, 0x3, 0x1, 0x1}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x670, 0x6}}]}, {0xf1, 0x6, "2319a7382117ecb12f24e539027fc3467d6ff1e7db4c8c8c1f64d89c787599a300e3c57a6534caa786e3a02aaa9dd85fbdee4a5b5f62524ceb1a1e175b2cfc005d47cf59b3b36901296e7a6c505b8387ab462343d5bfd45acfa756a6489ec02c09163005284d4ddd3fe3acd64543c98b33a3bf962a11996fb9b6cd35180f4ffa942fe245c20f4dbb784d82b6595643b7c26003910952c01fd4c92edfb466f23e2adb9c02ed448fb5fcf1a6bb3a369cd6fa0a7f49c0eef31a560334bd7546b7ecb03618b1d8d5fa2a4d73b640b6d757619578ae78755fe0a3323ebc71dff7b69e756c783471321b638a74dda2f0"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_ife={0xa0, 0x0, 0x0, 0x0, {{0x8}, {0x78, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x6, 0xfffff28f, 0x4, 0x4, 0xe9}}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x81, 0x81, 0x8, 0x4, 0x101}, 0x1}}, @TCA_IFE_METALST={0x3c, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x3}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x5}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x280}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x5}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}]}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_connmark={0x114, 0x1c, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xf, 0x2, 0x10000000, 0x0, 0x64}, 0x7}}]}, {0xc5, 0x6, "08b38f69eff018409a9bd0e8b235bc97debc82dd3a949417f6706b0af9a46a9bf53a8ebf54123d115414b2675d246c23668ed32fe3f7ee7a6df5e4aef884a55937120171eb661381ed1dc4dc9989be8fb41428fe2f58ea0f1b73593fb13d9b23e55381c6d2f04cf9490a7cd122e32b801fc1a24e53898ac9314fb097e4084034f043d2de93e53439d1c1f1bc4f2aba608d0a1f3da2af688097c2308f955a28e9b09e29b1f77e7e613c1bb985387eefb7511bdf9be21e169e0da17a4509ff91d9b9"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}]}]}, 0x3c0}, 0x1, 0x0, 0x0, 0x4004000}, 0x40044) epoll_wait(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0xffffff90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32, @ANYRES16=r3], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc641}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x2000000000000122, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x94) socket$netlink(0x10, 0x3, 0xc) 1.718592293s ago: executing program 5 (id=415): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)={0x30, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0xfffd}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x30}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010002000000000000001000000018000180140002006e657464657673696d30000000000000080006"], 0x34}, 0x1, 0x0, 0x0, 0x20004055}, 0x0) 1.667713864s ago: executing program 4 (id=416): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @mcast1, 0xfffffffd}, 0x1c, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000002900000004000000020000000000000018000000000000002900000037000000640000000000000028000000000000002900000005000000ff02020100000000fe9200000000040000000000000000aa140000000000000029000000080000000400000000000000"], 0x70}, 0x0) (async) syz_mount_image$vfat(&(0x7f0000000500), &(0x7f0000000480)='./file0\x00', 0x2004000, &(0x7f0000000040)=ANY=[@ANYRES64=0x0], 0xfe, 0x1227, &(0x7f00000024c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x4c142, 0x12) ioctl$XFS_IOC_RTGROUP_GEOMETRY(r1, 0xc0805841, &(0x7f00000000c0)={0xd727, 0x953, 0xd, 0xffff, 0x401}) (async) sendfile(r1, r1, 0x0, 0xe3aa6ea) 1.522803716s ago: executing program 5 (id=417): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a310000000014000480080002403cb140bb0800014000000003080005400000000014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a2c000000050a010100000000000000000a00000a0900010073797a31000000000c0002400000000000e4000220000000080a010100000000000000000a0000090900010073797a3100000000140000001100010000000000000000000000000a"], 0x61}, 0x1, 0x0, 0x0, 0xb0}, 0x20008890) 1.379413408s ago: executing program 5 (id=418): syz_usb_disconnect(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000080000000000000000000080850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000725e850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r1}, 0xc) socket$kcm(0x10, 0x400000002, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r3, 0x0, {}, 0xfd}, 0x18) connect$can_j1939(r2, &(0x7f0000000140)={0x1d, r3, 0x0, {0x1, 0xf1, 0xa8fe8ad4eea2351f}, 0xfe}, 0x18) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x4000, 0x0, 0x0, 0x9, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x80001) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f0000000040)={0x3, 0x7, 0x0, 'queue1\x00', 0x7ff}) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, 0x0, 0x0) sendmsg$can_raw(0xffffffffffffffff, 0x0, 0xd209f6d83486bb56) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sendmmsg(r2, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_emit_ethernet(0x104a, 0x0, 0x0) 1.124183843s ago: executing program 4 (id=419): openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) getpid() rename(0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000380)='\x00', 0x89901) unshare(0x22020600) close(r0) move_mount(0xffffffffffffff9c, 0x0, r0, 0x0, 0x262) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x4, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0x8000, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x100) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3000010, &(0x7f0000000000), 0x3e, 0x524, &(0x7f0000000680)="$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") sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="81bd2bbd7000fbdbdf251400000018000780080002"], 0x2c}, 0x1, 0x0, 0x0, 0x2004c8c5}, 0x80) 585.289901ms ago: executing program 0 (id=420): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, 0x0, 0x0) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x4bd1bfda, 0x0, 0x6}, 0x1c) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000380)="39000000140081ae10003c000500018311001f9f66560fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e921", 0x39}], 0x1}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3801000010000100feffffbf00010000fe8000000000000000000000000000aa00000000000000000000ffff7f000001000107944e230000000000003a000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="7f000001000000000000000000000000000004d46c0000007f000001000000000000000000000000000000000000000009000000000000000600000000000000ffff0000000000001c25080000000000020000000000000083000000000000000000000000000000fcffffffffffffffff7f0000000000001f00000000000000ff010000000000"], 0x138}, 0x1, 0x0, 0x0, 0xc801}, 0x10) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@broadcast, @in=@private=0xa010101, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x6}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x0, 0x6c}, 0x0, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}}, 0xe8) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x4e22, 0x0, 0xa, 0x0, 0x0, 0x4f}, {0x40}, {0xffffffffffffffff, 0x0, 0x9}, 0x0, 0x0, 0x0, 0x1}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}}, 0xe8) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x4e21, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @empty}, 0xc6e}, 0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x106, 0x8}}, 0x20) setsockopt$sock_int(r3, 0x1, 0x20, &(0x7f0000000000)=0x1e, 0x4) r5 = shmget$private(0x0, 0x800000, 0x54003f00, &(0x7f0000800000/0x800000)=nil) shmctl$IPC_INFO(r5, 0x3, &(0x7f00000003c0)=""/211) syz_open_procfs(0x0, &(0x7f00000001c0)='task\x00') 314.159125ms ago: executing program 0 (id=421): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000004, 0x2, @perf_bp={&(0x7f0000000140), 0x1}, 0x4580, 0x0, 0xcd5a, 0x1, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4c2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000001}, 0x0, 0x400000, 0x6, 0x7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$inet(0x2, 0x4000000000000001, 0x0) r4 = memfd_secret(0x80000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xa, 0x50, r4, 0x0) openat$selinux_policy(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000000, 0x12, r0, 0xa6b9b000) io_setup(0x7, &(0x7f0000000280)=0x0) r6 = openat$sysfs(0xffffff9c, &(0x7f00000001c0)='/sys/power/pm_trace', 0x42, 0x0) io_submit(r5, 0x1, &(0x7f0000000500)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0xfffffc98}]) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00', @ANYRES32=r6, @ANYBLOB="19205803ac1cf837b399c000000000000000", @ANYRES64=0x0], 0x20) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r7, &(0x7f0000000200)={0xa, 0x20, 0x0, @rand_addr=' \x01\x00', 0xfff}, 0x1c) r8 = syz_open_dev$loop(&(0x7f0000000180), 0x3, 0x2041) connect$netlink(0xffffffffffffffff, 0x0, 0x0) getuid() socket(0x1e, 0xa, 0x200007) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f00000002c0)={'\x00', 0x802, 0x4, 0x1, 0x5, 0x80ffffffff}) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) 0s ago: executing program 3 (id=422): writev(0xffffffffffffffff, 0x0, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x11c0, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(0x0, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x200000b, 0x28011, r0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x28}}, 0x0) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"], 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setitimer(0x2, &(0x7f0000000000)={{0x6}, {0x0, 0x3}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) syz_open_dev$sg(0x0, 0x0, 0x9840) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'sit0\x00'}) creat(&(0x7f0000000080)='./bus\x00', 0x154) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x8c, &(0x7f0000000300)='trans=rdma,') prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = syz_usb_connect$midi(0x5, 0xd5, &(0x7f0000000340)=ANY=[@ANYBLOB="1201000200000010820533004000010203010902c30001010320b0090400000701032003072401ff010700072401040007000724010600070009050d10400009090609250105c7210fa69009050f0010000406041025010cfd6ccfa5c80f34050fe8cc560905061008007b42000a2501066558758e5f1b0905010408000603040d2501096490a8216ca425b25f0905060000029609031125010d6b168ca983db7b1545b8f1c8070905dc104000002e05142501107ff518fdf53bf6fbe034007af3b9e3be09050b0410000d0e0508250fa685086d73"], &(0x7f0000000800)={0xa, &(0x7f0000000440)={0xa, 0x6, 0x300, 0x1, 0x6, 0x6, 0x8, 0x9}, 0xc, &(0x7f0000000880)=ANY=[@ANYBLOB="050f0c000107100200d60e003598fa4184b3e4f7d8056771a59686e2ae601486b8af3407e480ee07ff6467d26d3ed22efd22f628dabf189aeaa32f3afb3dae69222676dbaa8bc3ac0f1be80f53367976042f37a19aa9c1c32d72fa7c77b744b7174fff7990f61568e529f4a2800cf12ab0863ac998b8985c23035a0dc2a4f1550dde8c04862ea4ad14aed7575267e76a14015f60d761f3b6cecf2f080f9dff5744af91dec093a40c9babaff51017de44e8002b51dc2d9723e39527a4777928543ed63327"], 0x6, [{0x2f, &(0x7f00000004c0)=@string={0x2f, 0x3, "28c1d1032a3ab9c7725ac0ff2c60083d26729e16d7f9b05f5332a1fe97b8c74abd8abd1060a312137716b1480a"}}, {0xed, &(0x7f0000000500)=@string={0xed, 0x3, "5c1257b73b1909ebd32d47905a88bb869964c92e4e2e8fd8200917f62016b8ada35fa0952fdbd59fd6e36a21b86a62519b59f80d42600ac527462138269daab87114ff6827dd394088c7f61e58ba637e88676ede0a8d165e15f33833c87c76caff5d21a862ec989f984171f796320caebd941431ad72c905fd9c63238ce266dc5ebfd55debe145834b142aa62e55f4593c1e94b8240f7d49f6d2e033387731aa227f0c9b58b1ce52c13499816be49524b644de4d0626ce9543f9f85da04a767b7e041f08538117e6b68a9d0b10680bf3595c0db441ac47f83adc20da9de444e5d4622fc2d4ddd78dc42313"}}, {0xfa, &(0x7f0000000600)=@string={0xfa, 0x3, "e26e01a42971bef1fea2926cedd77fe85a641ac647b6677ed03fe224619f417b0160b5cd1017888e58be7d8595e858f48a2b6173fd335e165b2e4ce8b5ee0fc6a2571c7becf8d7bfd843211f1db945d27887999d719f6de127bc5d6c7db9c203022e00741bfdf8acc1c06f0ade17e7a56d64cfd3c899029e0f82f3831905d37dda5aa77f8d4d879ff840690b42acc94db55b283616fa6a105b78719b2583ba8868774f1cdade0e76b19ad7bdae82aa6b3a122ee69c992825d65f85d0dfac395bafa1fb8f68743ef4c215370e7b070019c23e363af74afc61c4743e67d368f3d04939401375ff2b46ca95ed76b7a65272d77b5eba356ab634"}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x500a}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x427}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x2c0a}}]}) syz_usb_disconnect(r1) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000100)={0x0, 0x4e39, 0x1, 0x22, 0x6, 0x10001}, &(0x7f0000000140)=0x14) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000002c0)={r2, 0x9c, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0x7ff, @empty, 0x2}, @in6={0xa, 0x4e21, 0xbb1d, @loopback, 0x3}, @in6={0xa, 0x4e22, 0x200, @empty, 0x4}, @in={0x2, 0x4e24, @private=0xa010100}, @in6={0xa, 0x4e21, 0x6, @empty, 0xc}, @in6={0xa, 0x4e23, 0x0, @private2, 0x5}]}, &(0x7f0000000300)=0x10) r3 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) kernel console output (not intermixed with test programs): val 1, probability 0, space 0, times 0 [ 54.025999][ T3852] memory+swap: usage 35712kB, limit 9007199254740988kB, failcnt 0 [ 54.045515][ T3864] CPU: 1 UID: 0 PID: 3864 Comm: syz.4.91 Not tainted syzkaller #0 PREEMPT(lazy) [ 54.045545][ T3864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 54.045558][ T3864] Call Trace: [ 54.045579][ T3864] [ 54.045587][ T3864] __dump_stack+0x1d/0x30 [ 54.045616][ T3864] dump_stack_lvl+0x95/0xd0 [ 54.045673][ T3864] dump_stack+0x15/0x1b [ 54.045695][ T3864] should_fail_ex+0x25e/0x270 [ 54.045727][ T3864] should_fail+0xb/0x20 [ 54.045752][ T3864] should_fail_usercopy+0x1a/0x20 [ 54.045784][ T3864] _copy_from_iter+0xcc/0xe70 [ 54.045842][ T3864] ? __alloc_skb+0x511/0x6f0 [ 54.045885][ T3864] ? __alloc_skb+0x205/0x6f0 [ 54.045912][ T3864] netlink_sendmsg+0x4a4/0x6f0 [ 54.045941][ T3864] ? __pfx_netlink_sendmsg+0x10/0x10 [ 54.046018][ T3864] ____sys_sendmsg+0x532/0x580 [ 54.046051][ T3864] ___sys_sendmsg+0x195/0x1e0 [ 54.046177][ T3864] __x64_sys_sendmsg+0xd4/0x160 [ 54.046211][ T3864] x64_sys_call+0x194c/0x3020 [ 54.046236][ T3864] do_syscall_64+0x136/0x3c0 [ 54.046269][ T3864] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.046294][ T3864] RIP: 0033:0x7fc83a8ace59 [ 54.046312][ T3864] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 54.046403][ T3864] RSP: 002b:00007fc839307028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 54.046487][ T3864] RAX: ffffffffffffffda RBX: 00007fc83ab25fa0 RCX: 00007fc83a8ace59 [ 54.046504][ T3864] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 54.046518][ T3864] RBP: 00007fc839307090 R08: 0000000000000000 R09: 0000000000000000 [ 54.046533][ T3864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 54.046599][ T3864] R13: 00007fc83ab26038 R14: 00007fc83ab25fa0 R15: 00007ffcd284fdd8 [ 54.046621][ T3864] [ 54.046739][ T3852] kmem: usage 26704kB, limit 9007199254740988kB, failcnt 0 [ 54.360223][ T3882] syzkaller0: entered promiscuous mode [ 54.369971][ T3882] syzkaller0: entered allmulticast mode [ 54.381508][ T3852] Memory cgroup stats for /syz2: [ 54.381785][ T3852] cache 0 [ 54.403204][ T3879] netlink: 12 bytes leftover after parsing attributes in process `syz.0.94'. [ 54.413941][ T3852] rss 12288 [ 54.418231][ T3879] netlink: 12 bytes leftover after parsing attributes in process `syz.0.94'. [ 54.430343][ T3852] shmem 0 [ 54.434631][ T3852] mapped_file 0 [ 54.448653][ T3852] dirty 0 [ 54.459010][ T3852] writeback 0 [ 54.465400][ T3852] workingset_refault_anon 167 [ 54.478592][ T3852] workingset_refault_file 0 [ 54.487229][ T3852] swap 200704 [ 54.495254][ T3852] swapcached 909312 [ 54.502336][ T3852] pgpgin 22764 [ 54.509333][ T3852] pgpgout 22759 [ 54.517211][ T3852] pgfault 24966 [ 54.523944][ T3852] pgmajfault 28 [ 54.530752][ T3852] inactive_anon 0 [ 54.540398][ T3852] active_anon 20480 [ 54.549216][ T3852] inactive_file 0 [ 54.554123][ T3852] active_file 0 [ 54.561581][ T3852] unevictable 0 [ 54.572903][ T3852] hierarchical_memory_limit 314572800 [ 54.584210][ T3852] hierarchical_memsw_limit 9223372036854771712 [ 54.591968][ T3852] total_cache 0 [ 54.596371][ T3852] total_rss 12288 [ 54.606603][ T3852] total_shmem 0 [ 54.614753][ T3852] total_mapped_file 0 [ 54.623731][ T3852] total_dirty 0 [ 54.627867][ T3852] total_writeback 0 [ 54.635556][ T3852] total_workingset_refault_anon 167 [ 54.644992][ T3852] total_workingset_refault_file 0 [ 54.651234][ T3852] total_swap 200704 [ 54.655249][ T3852] total_swapcached 909312 [ 54.660775][ T3852] total_pgpgin 22764 [ 54.664781][ T3852] total_pgpgout 22759 [ 54.669150][ T3852] total_pgfault 24966 [ 54.673877][ T3852] total_pgmajfault 28 [ 54.678189][ T3852] total_inactive_anon 0 [ 54.682970][ T3852] total_active_anon 20480 [ 54.687830][ T3852] total_inactive_file 0 [ 54.692431][ T3852] total_active_file 0 [ 54.693035][ T3870] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.696827][ T3852] total_unevictable 0 [ 54.709025][ T3852] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.89,pid=3852,uid=0 [ 54.725576][ T3852] Memory cgroup out of memory: Killed process 3852 (syz.2.89) total-vm:94300kB, anon-rss:1248kB, file-rss:22492kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 54.729024][ T3870] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.805812][ T3870] bridge_slave_0: entered allmulticast mode [ 54.820516][ T3870] bridge_slave_0: entered promiscuous mode [ 54.840292][ T3870] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.856282][ T3870] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.871310][ T3870] bridge_slave_1: entered allmulticast mode [ 54.886415][ T3870] bridge_slave_1: entered promiscuous mode [ 54.953645][ T3893] syzkaller0: entered promiscuous mode [ 54.959817][ T3893] syzkaller0: entered allmulticast mode [ 54.968385][ T3870] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.979985][ T3870] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.001432][ T3870] team0: Port device team_slave_0 added [ 55.008121][ T3870] team0: Port device team_slave_1 added [ 55.024503][ T3870] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.031720][ T3870] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.058918][ T3870] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.070533][ T3870] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.077965][ T3870] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.105577][ T3870] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.136920][ T3870] hsr_slave_0: entered promiscuous mode [ 55.144222][ T3870] hsr_slave_1: entered promiscuous mode [ 55.151102][ T3870] debugfs: 'hsr0' already exists in 'hsr' [ 55.157035][ T3870] Cannot create hsr debugfs directory [ 55.233874][ T3870] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 55.336824][ T3870] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 55.345157][ T3870] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 55.354026][ T3870] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 55.399367][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 55.399384][ T28] audit: type=1400 audit(1782397081.716:315): avc: denied { create } for pid=3896 comm="syz.4.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 55.434512][ T28] audit: type=1400 audit(1782397081.746:316): avc: denied { bind } for pid=3896 comm="syz.4.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 55.457714][ T28] audit: type=1400 audit(1782397081.746:317): avc: denied { connect } for pid=3896 comm="syz.4.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 55.480656][ T3870] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 55.493500][ T28] audit: type=1400 audit(1782397081.806:318): avc: denied { write } for pid=3896 comm="syz.4.97" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=6359 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 55.528108][ T3897] mmap: syz.4.97 (3897) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 55.557460][ T3870] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 55.612071][ T3902] netlink: 700 bytes leftover after parsing attributes in process `syz.2.100'. [ 55.632728][ T1020] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.821523][ T3870] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 55.846079][ T3870] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 55.933036][ T3897] pim6reg: entered allmulticast mode [ 55.948065][ T3898] pim6reg: left allmulticast mode [ 55.980586][ T1020] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.981057][ T28] audit: type=1400 audit(1782397082.296:319): avc: denied { setopt } for pid=3916 comm="syz.3.102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 56.062270][ T28] audit: type=1400 audit(1782397082.376:320): avc: denied { create } for pid=3923 comm="syz.0.103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 56.063656][ T1020] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.104440][ T3922] loop4: detected capacity change from 0 to 128 [ 56.116116][ T3922] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 56.128568][ T3870] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.133700][ T3870] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.151756][ T3434] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.159212][ T3434] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.167887][ T3922] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 56.193249][ T3922] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 56.203897][ T3434] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.211365][ T3434] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.219142][ T3922] FAT-fs (loop4): Filesystem has been set read-only [ 56.227695][ T3922] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 56.241610][ T28] audit: type=1400 audit(1782397082.556:321): avc: denied { ioctl } for pid=3916 comm="syz.3.102" path="socket:[6467]" dev="sockfs" ino=6467 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 56.270166][ T28] audit: type=1400 audit(1782397082.556:322): avc: denied { setopt } for pid=3921 comm="syz.4.104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 56.337967][ T28] audit: type=1400 audit(1782397082.656:323): avc: denied { create } for pid=3930 comm="syz.3.105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 56.364090][ T28] audit: type=1400 audit(1782397082.676:324): avc: denied { ioctl } for pid=3930 comm="syz.3.105" path="socket:[6477]" dev="sockfs" ino=6477 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 56.414821][ T1020] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.549090][ T3943] loop4: detected capacity change from 0 to 512 [ 56.576478][ T3943] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 56.603735][ T3943] EXT4-fs (loop4): 1 truncate cleaned up [ 56.644232][ T3943] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.661530][ T1020] bond0: left allmulticast mode [ 56.701314][ T1020] bond_slave_0: left allmulticast mode [ 56.733965][ T1020] bond_slave_1: left allmulticast mode [ 56.768778][ T1020] bond0: left promiscuous mode [ 56.803095][ T1020] bond_slave_0: left promiscuous mode [ 56.809223][ T3975] loop0: detected capacity change from 0 to 512 [ 56.816684][ T1020] bond_slave_1: left promiscuous mode [ 56.829089][ T1020] bridge0: port 3(bond0) entered disabled state [ 56.832772][ T3975] ext4: Unknown parameter 'noacl' [ 56.857021][ T1020] bridge_slave_1: left allmulticast mode [ 56.881437][ T1020] bridge_slave_1: left promiscuous mode [ 56.897182][ T1020] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.988469][ T1020] bridge_slave_0: left allmulticast mode [ 56.994812][ T1020] bridge_slave_0: left promiscuous mode [ 57.001244][ T1020] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.180860][ T3983] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 57.190413][ T3983] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 57.197812][ T3983] vhci_hcd vhci_hcd.0: default hub control req: 9a08 v0009 i0007 l0 [ 57.206906][ T3983] xt_hashlimit: max too large, truncated to 1048576 [ 57.877494][ T3985] loop3: detected capacity change from 0 to 512 [ 57.895303][ T3985] ext4: Unknown parameter 'noacl' [ 58.075897][ T1020] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 58.086652][ T1020] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 58.096790][ T1020] bond0 (unregistering): Released all slaves [ 59.058170][ T3018] 8021q: adding VLAN 0 to HW filter on device eth1 [ 59.434345][ T3870] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.583090][ T3988] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 59.591848][ T3988] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 59.601076][ T3988] vhci_hcd vhci_hcd.0: default hub control req: 9a08 v0009 i0007 l0 [ 59.614454][ T3988] xt_hashlimit: max too large, truncated to 1048576 [ 60.540499][ T3994] netlink: 8 bytes leftover after parsing attributes in process `syz.0.114'. [ 60.597803][ T3994] batadv0: entered promiscuous mode [ 60.619442][ T3994] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 60.789537][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.841914][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 60.841930][ T28] audit: type=1400 audit(1782397087.156:331): avc: denied { ioctl } for pid=4002 comm="syz.4.115" path="socket:[6644]" dev="sockfs" ino=6644 ioctlcmd=0x5879 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 60.963271][ T4003] netlink: 24 bytes leftover after parsing attributes in process `syz.4.115'. [ 61.036443][ T4006] netlink: 700 bytes leftover after parsing attributes in process `syz.2.117'. [ 61.138803][ T28] audit: type=1400 audit(1782397087.446:332): avc: denied { setopt } for pid=4002 comm="syz.4.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 61.209050][ T4011] loop4: detected capacity change from 0 to 512 [ 61.300155][ T4013] netlink: 16 bytes leftover after parsing attributes in process `syz.3.118'. [ 61.332255][ T4011] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.115: attempt to clear invalid blocks 2 len 1 [ 61.371895][ T28] audit: type=1400 audit(1782397087.446:333): avc: denied { write } for pid=4002 comm="syz.4.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 61.454887][ T4011] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 61.457083][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 61.476504][ C0] EXT4-fs (loop4): initial error at time 1782397087: ext4_clear_blocks:876: inode 13 [ 61.487082][ C0] EXT4-fs (loop4): last error at time 1782397087: ext4_clear_blocks:876: inode 13 [ 61.501265][ T4011] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters [ 61.540308][ T28] audit: type=1400 audit(1782397087.556:334): avc: denied { write } for pid=4012 comm="syz.3.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 61.563838][ T4011] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.115: invalid indirect mapped block 1819239214 (level 0) [ 61.610195][ T4011] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 61.610588][ T4011] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.115: invalid indirect mapped block 1819239214 (level 1) [ 61.639751][ T28] audit: type=1400 audit(1782397087.726:335): avc: denied { listen } for pid=4012 comm="syz.3.118" lport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 61.669230][ T4011] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 61.669879][ T4011] EXT4-fs (loop4): 1 truncate cleaned up [ 61.687159][ T4011] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.784026][ T4019] loop3: detected capacity change from 0 to 764 [ 61.837338][ T1020] hsr_slave_0: left promiscuous mode [ 61.869627][ T3994] syz.0.114 (3994) used greatest stack depth: 9536 bytes left [ 61.907254][ T1020] hsr_slave_1: left promiscuous mode [ 61.930577][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.948333][ T1020] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 62.000869][ T1020] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 62.037384][ T4029] loop0: detected capacity change from 0 to 512 [ 62.046165][ T1020] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 62.059513][ T4025] loop3: detected capacity change from 0 to 512 [ 62.071391][ T1020] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 62.085864][ T4025] EXT4-fs: Ignoring removed oldalloc option [ 62.101196][ T4029] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 62.119385][ T1020] veth1_macvtap: left promiscuous mode [ 62.126243][ T1020] veth0_macvtap: left promiscuous mode [ 62.132122][ T28] audit: type=1400 audit(1782397088.436:336): avc: denied { write } for pid=4031 comm="syz.4.125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 62.136889][ T4029] EXT4-fs (loop0): 1 truncate cleaned up [ 62.167231][ T4029] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.188791][ T1020] veth1_vlan: left promiscuous mode [ 62.194909][ T1020] veth0_vlan: left promiscuous mode [ 62.221758][ T4025] EXT4-fs error (device loop3): ext4_orphan_get:1425: comm syz.3.123: bad orphan inode 32 [ 62.232727][ T4025] loop3: lost filesystem error report for type 5 error -117 [ 62.233175][ T4025] ext4_test_bit(bit=31, block=4) = 0 [ 62.240693][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 62.240715][ C0] EXT4-fs (loop3): initial error at time 1782397088: ext4_orphan_get:1425 [ 62.240742][ C0] EXT4-fs (loop3): last error at time 1782397088: ext4_orphan_get:1425 [ 62.277761][ T4025] EXT4-fs (loop3): 1 truncate cleaned up [ 62.285844][ T4025] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.534039][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.596482][ T1020] team0 (unregistering): Port device team_slave_1 removed [ 62.612101][ T1020] team0 (unregistering): Port device team_slave_0 removed [ 62.706091][ T4038] pim6reg: entered allmulticast mode [ 62.732365][ T4039] pim6reg: left allmulticast mode [ 63.020432][ T3870] veth0_vlan: entered promiscuous mode [ 63.045188][ T3870] veth1_vlan: entered promiscuous mode [ 63.066675][ T28] audit: type=1400 audit(1782397089.376:337): avc: denied { write } for pid=4042 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 63.111382][ T3870] veth0_macvtap: entered promiscuous mode [ 63.161727][ T3870] veth1_macvtap: entered promiscuous mode [ 63.168603][ T28] audit: type=1400 audit(1782397089.426:338): avc: denied { unmount } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 63.205240][ T4063] loop3: detected capacity change from 0 to 128 [ 63.224465][ T3870] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.283006][ T4063] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 63.310351][ T3018] 8021q: adding VLAN 0 to HW filter on device eth2 [ 63.325950][ T3870] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.363837][ T1020] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.378034][ T4063] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 63.398636][ T1020] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.421448][ T4063] FAULT_INJECTION: forcing a failure. [ 63.421448][ T4063] name failslab, interval 1, probability 0, space 0, times 1 [ 63.441512][ T1020] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.460285][ T1020] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.474709][ T4063] CPU: 0 UID: 0 PID: 4063 Comm: syz.3.126 Not tainted syzkaller #0 PREEMPT(lazy) [ 63.474786][ T4063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 63.474801][ T4063] Call Trace: [ 63.474810][ T4063] [ 63.474819][ T4063] __dump_stack+0x1d/0x30 [ 63.474854][ T4063] dump_stack_lvl+0x95/0xd0 [ 63.474876][ T4063] dump_stack+0x15/0x1b [ 63.474956][ T4063] should_fail_ex+0x25e/0x270 [ 63.474982][ T4063] should_failslab+0x8c/0xb0 [ 63.475005][ T4063] kmem_cache_alloc_node_noprof+0x85/0x3d0 [ 63.475029][ T4063] ? __alloc_skb+0x2db/0x6f0 [ 63.475080][ T4063] ? __alloc_skb+0x2db/0x6f0 [ 63.475107][ T4063] __alloc_skb+0x2db/0x6f0 [ 63.475131][ T4063] ? __alloc_skb+0x205/0x6f0 [ 63.475226][ T4063] netlink_alloc_large_skb+0xbf/0xf0 [ 63.475300][ T4063] netlink_sendmsg+0x40c/0x6f0 [ 63.475374][ T4063] ? __pfx_netlink_sendmsg+0x10/0x10 [ 63.475395][ T4063] ____sys_sendmsg+0x532/0x580 [ 63.475424][ T4063] ___sys_sendmsg+0x195/0x1e0 [ 63.475527][ T4063] __x64_sys_sendmsg+0xd4/0x160 [ 63.475560][ T4063] x64_sys_call+0x194c/0x3020 [ 63.475646][ T4063] do_syscall_64+0x136/0x3c0 [ 63.475676][ T4063] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.475703][ T4063] RIP: 0033:0x7fa81620ce59 [ 63.475726][ T4063] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 63.475823][ T4063] RSP: 002b:00007fa814c67028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 63.475855][ T4063] RAX: ffffffffffffffda RBX: 00007fa816485fa0 RCX: 00007fa81620ce59 [ 63.475873][ T4063] RDX: 0000000024000840 RSI: 0000200000000080 RDI: 0000000000000008 [ 63.475889][ T4063] RBP: 00007fa814c67090 R08: 0000000000000000 R09: 0000000000000000 [ 63.475904][ T4063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 63.475977][ T4063] R13: 00007fa816486038 R14: 00007fa816485fa0 R15: 00007ffe2f3b2d98 [ 63.475999][ T4063] [ 63.751527][ T4029] netlink: 32 bytes leftover after parsing attributes in process `syz.0.124'. [ 63.790910][ T28] audit: type=1400 audit(1782397089.456:339): avc: denied { write } for pid=4062 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 63.813908][ T28] audit: type=1400 audit(1782397089.996:340): avc: denied { write } for pid=4028 comm="syz.0.124" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 63.873136][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.946362][ T4075] FAULT_INJECTION: forcing a failure. [ 63.946362][ T4075] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 63.967487][ T4075] CPU: 1 UID: 0 PID: 4075 Comm: syz.3.129 Not tainted syzkaller #0 PREEMPT(lazy) [ 63.967519][ T4075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 63.967535][ T4075] Call Trace: [ 63.967543][ T4075] [ 63.967553][ T4075] __dump_stack+0x1d/0x30 [ 63.967580][ T4075] dump_stack_lvl+0x95/0xd0 [ 63.967621][ T4075] dump_stack+0x15/0x1b [ 63.967643][ T4075] should_fail_ex+0x25e/0x270 [ 63.967675][ T4075] should_fail+0xb/0x20 [ 63.967715][ T4075] should_fail_usercopy+0x1a/0x20 [ 63.967758][ T4075] _copy_from_user+0x1c/0xb0 [ 63.967789][ T4075] __copy_msghdr+0x242/0x300 [ 63.967844][ T4075] ___sys_sendmsg+0x10c/0x1e0 [ 63.967885][ T4075] __x64_sys_sendmsg+0xd4/0x160 [ 63.967991][ T4075] x64_sys_call+0x194c/0x3020 [ 63.968020][ T4075] do_syscall_64+0x136/0x3c0 [ 63.968049][ T4075] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.968071][ T4075] RIP: 0033:0x7fa81620ce59 [ 63.968088][ T4075] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 63.968142][ T4075] RSP: 002b:00007fa814c67028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 63.968165][ T4075] RAX: ffffffffffffffda RBX: 00007fa816485fa0 RCX: 00007fa81620ce59 [ 63.968181][ T4075] RDX: 0000000000000040 RSI: 0000200000000680 RDI: 0000000000000007 [ 63.968197][ T4075] RBP: 00007fa814c67090 R08: 0000000000000000 R09: 0000000000000000 [ 63.968230][ T4075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 63.968245][ T4075] R13: 00007fa816486038 R14: 00007fa816485fa0 R15: 00007ffe2f3b2d98 [ 63.968272][ T4075] [ 64.196053][ T4094] loop5: detected capacity change from 0 to 512 [ 64.203456][ T4094] EXT4-fs: Ignoring removed mblk_io_submit option [ 64.211043][ T4094] EXT4-fs: Ignoring removed nomblk_io_submit option [ 64.230761][ T4094] EXT4-fs error (device loop5): ext4_orphan_get:1399: inode #15: comm syz.5.92: inode has both inline data and extents flags [ 64.263219][ T4094] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 64.265874][ T4094] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.92: couldn't read orphan inode 15 (err -117) [ 64.276265][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 64.276463][ C1] EXT4-fs (loop5): initial error at time 1782397090: ext4_orphan_get:1399: inode 15 [ 64.276564][ C1] EXT4-fs (loop5): last error at time 1782397090: ext4_orphan_get:1399: inode 15 [ 64.321634][ T3018] 8021q: adding VLAN 0 to HW filter on device eth3 [ 64.328956][ T4094] loop5: lost filesystem error report for type 5 error -117 [ 64.336802][ T4094] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.388597][ T4111] random: crng reseeded on system resumption [ 64.390369][ T4094] EXT4-fs error (device loop5): __ext4_add_entry:2412: inode #2: comm syz.5.92: Directory hole found for htree leaf block 0 [ 64.541387][ T4131] loop0: detected capacity change from 0 to 512 [ 64.576591][ T4131] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 64.627621][ T4131] EXT4-fs (loop0): 1 truncate cleaned up [ 64.645977][ T4131] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.659190][ T3018] 8021q: adding VLAN 0 to HW filter on device eth4 [ 64.783347][ T4144] netlink: 36 bytes leftover after parsing attributes in process `syz.4.140'. [ 65.175524][ T4131] netlink: 32 bytes leftover after parsing attributes in process `syz.0.141'. [ 65.190770][ T3870] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.296702][ T4155] FAULT_INJECTION: forcing a failure. [ 65.296702][ T4155] name failslab, interval 1, probability 0, space 0, times 0 [ 65.327730][ T4155] CPU: 1 UID: 0 PID: 4155 Comm: syz.2.143 Not tainted syzkaller #0 PREEMPT(lazy) [ 65.327763][ T4155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 65.327827][ T4155] Call Trace: [ 65.327833][ T4155] [ 65.327840][ T4155] __dump_stack+0x1d/0x30 [ 65.327948][ T4155] dump_stack_lvl+0x95/0xd0 [ 65.327967][ T4155] dump_stack+0x15/0x1b [ 65.327999][ T4155] should_fail_ex+0x25e/0x270 [ 65.328106][ T4155] should_failslab+0x8c/0xb0 [ 65.328132][ T4155] kmem_cache_alloc_node_noprof+0x85/0x3d0 [ 65.328158][ T4155] ? __alloc_skb+0x2db/0x6f0 [ 65.328184][ T4155] ? __alloc_skb+0x2db/0x6f0 [ 65.328213][ T4155] __alloc_skb+0x2db/0x6f0 [ 65.328276][ T4155] ? __alloc_skb+0x205/0x6f0 [ 65.328342][ T4155] netlink_alloc_large_skb+0xbf/0xf0 [ 65.328450][ T4155] netlink_sendmsg+0x40c/0x6f0 [ 65.328473][ T4155] ? __pfx_netlink_sendmsg+0x10/0x10 [ 65.328492][ T4155] ____sys_sendmsg+0x532/0x580 [ 65.328577][ T4155] ___sys_sendmsg+0x195/0x1e0 [ 65.328619][ T4155] __x64_sys_sendmsg+0xd4/0x160 [ 65.328648][ T4155] x64_sys_call+0x194c/0x3020 [ 65.328676][ T4155] do_syscall_64+0x136/0x3c0 [ 65.328777][ T4155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.328802][ T4155] RIP: 0033:0x7fea3f31ce59 [ 65.328819][ T4155] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 65.328836][ T4155] RSP: 002b:00007fea3dd77028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 65.328855][ T4155] RAX: ffffffffffffffda RBX: 00007fea3f595fa0 RCX: 00007fea3f31ce59 [ 65.328949][ T4155] RDX: 000000002000c800 RSI: 00002000000070c0 RDI: 0000000000000007 [ 65.328962][ T4155] RBP: 00007fea3dd77090 R08: 0000000000000000 R09: 0000000000000000 [ 65.329023][ T4155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 65.329038][ T4155] R13: 00007fea3f596038 R14: 00007fea3f595fa0 R15: 00007ffe974a83d8 [ 65.329060][ T4155] [ 65.381879][ T4157] loop5: detected capacity change from 0 to 128 [ 65.394298][ T4163] loop2: detected capacity change from 0 to 512 [ 65.399443][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.465348][ T4163] EXT4-fs warning (device loop2): dx_probe:801: inode #2: comm syz.2.146: Unrecognised inode hash code 255 [ 65.480196][ T4157] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 65.489873][ T4163] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.146: Corrupt directory, running e2fsck is recommended [ 65.510339][ T4157] ext4 filesystem being mounted at /1/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 65.537607][ T4163] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 65.657380][ T4163] EXT4-fs error (device loop2): ext4_iget_extra_inode:5180: inode #15: comm syz.2.146: corrupted in-inode xattr: e_name out of bounds [ 65.665082][ T3870] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 65.672506][ T4163] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 65.687069][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 65.703509][ C1] EXT4-fs (loop2): initial error at time 1782397091: ext4_iget_extra_inode:5180: inode 15 [ 65.713828][ C1] EXT4-fs (loop2): last error at time 1782397091: ext4_iget_extra_inode:5180: inode 15 [ 65.725178][ T4163] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.146: couldn't read orphan inode 15 (err -117) [ 65.740510][ T4163] loop2: lost filesystem error report for type 5 error -117 [ 65.772743][ T4163] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.802024][ T4177] loop0: detected capacity change from 0 to 512 [ 65.809054][ T4176] loop3: detected capacity change from 0 to 512 [ 65.815867][ T4176] EXT4-fs: Ignoring removed oldalloc option [ 65.823195][ T4177] EXT4-fs: Ignoring removed oldalloc option [ 65.844347][ T4177] EXT4-fs error (device loop0): ext4_orphan_get:1425: comm syz.0.147: bad orphan inode 32 [ 65.857206][ T4176] EXT4-fs error (device loop3): ext4_orphan_get:1425: comm syz.3.149: bad orphan inode 32 [ 65.885305][ T4186] loop4: detected capacity change from 0 to 128 [ 65.887843][ T4176] loop3: lost filesystem error report for type 5 error -117 [ 65.891679][ T4177] loop0: lost filesystem error report for type 5 error -117 [ 65.907074][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 65.921503][ C0] EXT4-fs (loop3): initial error at time 1782397092: ext4_orphan_get:1425 [ 65.924864][ T4181] netlink: 'syz.4.151': attribute type 298 has an invalid length. [ 65.930562][ C0] EXT4-fs (loop3): last error at time 1782397092: ext4_orphan_get:1425 [ 65.932701][ T4177] ext4_test_bit(bit=31, block=4) = 0 [ 65.939847][ T4176] ext4_test_bit(bit=31, block=4) = 0 [ 65.947652][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 65.947674][ C0] EXT4-fs (loop0): initial error at time 1782397092: ext4_orphan_get:1425 [ 65.967210][ T28] kauditd_printk_skb: 20 callbacks suppressed [ 65.967227][ T28] audit: type=1400 audit(1782397092.276:361): avc: denied { bind } for pid=4178 comm="syz.5.150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 65.974278][ C0] EXT4-fs (loop0): last error at time 1782397092: ext4_orphan_get:1425 [ 65.989260][ T4176] EXT4-fs (loop3): 1 truncate cleaned up [ 66.000465][ C0] [ 66.005857][ T4177] EXT4-fs (loop0): 1 truncate cleaned up [ 66.023254][ T4177] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.024702][ T28] audit: type=1400 audit(1782397092.336:362): avc: denied { setopt } for pid=4178 comm="syz.5.150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 66.058510][ T4176] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.092368][ T28] audit: type=1400 audit(1782397092.386:363): avc: denied { name_bind } for pid=4162 comm="syz.2.146" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 66.119820][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.240697][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.254480][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.264998][ T28] audit: type=1400 audit(1782397092.576:364): avc: denied { append } for pid=4191 comm="syz.4.153" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 66.335178][ T28] audit: type=1400 audit(1782397092.576:365): avc: denied { open } for pid=4191 comm="syz.4.153" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 66.403261][ T4205] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 66.444797][ T4205] EXT4-fs (loop3): 1 truncate cleaned up [ 66.451222][ T4205] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.485247][ T28] audit: type=1400 audit(1782397092.606:366): avc: denied { ioctl } for pid=4191 comm="syz.4.153" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 ioctlcmd=0x5872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 66.620796][ T28] audit: type=1400 audit(1782397092.876:367): avc: denied { mount } for pid=4208 comm="syz.0.158" name="/" dev="loop0" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 66.651669][ T4215] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.698220][ T4209] netlink: 8 bytes leftover after parsing attributes in process `syz.0.158'. [ 66.711781][ T4209] netlink: 4 bytes leftover after parsing attributes in process `syz.0.158'. [ 66.726472][ T4209] netlink: 'syz.0.158': attribute type 7 has an invalid length. [ 66.751077][ T28] audit: type=1400 audit(1782397092.986:368): avc: denied { append } for pid=4208 comm="syz.0.158" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 66.796195][ T28] audit: type=1400 audit(1782397093.110:369): avc: denied { write } for pid=4204 comm="syz.3.157" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 66.832395][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.940211][ T3434] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 66.958032][ T3434] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 66.968532][ T3434] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 66.968586][ T3434] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 67.037706][ T4229] netlink: 28 bytes leftover after parsing attributes in process `syz.4.163'. [ 67.049433][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.148287][ T4233] FAULT_INJECTION: forcing a failure. [ 67.148287][ T4233] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 67.173265][ T4237] set_capacity_and_notify: 3 callbacks suppressed [ 67.173283][ T4237] loop2: detected capacity change from 0 to 1024 [ 67.212284][ T4241] loop4: detected capacity change from 0 to 512 [ 67.212599][ T4233] CPU: 1 UID: 0 PID: 4233 Comm: syz.3.164 Not tainted syzkaller #0 PREEMPT(lazy) [ 67.212636][ T4233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 67.212650][ T4233] Call Trace: [ 67.212657][ T4233] [ 67.212691][ T4233] __dump_stack+0x1d/0x30 [ 67.212716][ T4233] dump_stack_lvl+0x95/0xd0 [ 67.212809][ T4233] dump_stack+0x15/0x1b [ 67.212830][ T4233] should_fail_ex+0x25e/0x270 [ 67.212859][ T4233] should_fail+0xb/0x20 [ 67.212937][ T4233] should_fail_usercopy+0x1a/0x20 [ 67.213034][ T4233] _copy_from_iter+0xcc/0xe70 [ 67.213069][ T4233] ? copy_page_from_iter+0x138/0x1f0 [ 67.213114][ T4233] copy_page_from_iter+0x15d/0x1f0 [ 67.213213][ T4233] tun_get_user+0x612/0x2820 [ 67.213250][ T4233] ? ref_tracker_alloc+0x1eb/0x2f0 [ 67.213331][ T4233] tun_chr_write_iter+0x15a/0x210 [ 67.213359][ T4233] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 67.213445][ T4233] vfs_write+0x57d/0x990 [ 67.213468][ T4233] ksys_write+0xdc/0x1a0 [ 67.213489][ T4233] __x64_sys_write+0x40/0x50 [ 67.213509][ T4233] x64_sys_call+0x27e1/0x3020 [ 67.213535][ T4233] do_syscall_64+0x136/0x3c0 [ 67.213576][ T4233] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.213600][ T4233] RIP: 0033:0x7fa8161cd68e [ 67.213617][ T4233] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 67.213637][ T4233] RSP: 002b:00007fa814c66fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 67.213658][ T4233] RAX: ffffffffffffffda RBX: 00007fa814c676c0 RCX: 00007fa8161cd68e [ 67.213728][ T4233] RDX: 0000000000000042 RSI: 00002000000000c0 RDI: 00000000000000c8 [ 67.213742][ T4233] RBP: 00007fa814c67090 R08: 0000000000000000 R09: 0000000000000000 [ 67.213757][ T4233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 67.213770][ T4233] R13: 00007fa816486038 R14: 00007fa816485fa0 R15: 00007ffe2f3b2d98 [ 67.213812][ T4233] [ 67.214361][ T4237] ext4: Unknown parameter 'nouser_xattr' [ 67.254391][ T4242] loop5: detected capacity change from 0 to 512 [ 67.468557][ T4237] loop2: detected capacity change from 0 to 1024 [ 67.471978][ T28] audit: type=1400 audit(1782397093.737:370): avc: denied { write } for pid=4245 comm="syz.3.168" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 67.506440][ T4246] FAULT_INJECTION: forcing a failure. [ 67.506440][ T4246] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 67.512378][ T4237] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 67.586246][ T4248] bridge_slave_1: left allmulticast mode [ 67.590046][ T4246] CPU: 1 UID: 0 PID: 4246 Comm: syz.3.168 Not tainted syzkaller #0 PREEMPT(lazy) [ 67.590074][ T4246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 67.590088][ T4246] Call Trace: [ 67.590155][ T4246] [ 67.590164][ T4246] __dump_stack+0x1d/0x30 [ 67.590259][ T4246] dump_stack_lvl+0x95/0xd0 [ 67.590397][ T4246] dump_stack+0x15/0x1b [ 67.590417][ T4246] should_fail_ex+0x25e/0x270 [ 67.590446][ T4246] should_fail+0xb/0x20 [ 67.590557][ T4246] should_fail_usercopy+0x1a/0x20 [ 67.590589][ T4246] _copy_from_user+0x1c/0xb0 [ 67.590624][ T4246] sg_write+0x65a/0x7a0 [ 67.590710][ T4246] vfs_writev+0x41e/0x8b0 [ 67.590796][ T4246] ? __pfx_sg_write+0x10/0x10 [ 67.590858][ T4246] do_writev+0xe9/0x210 [ 67.590886][ T4246] __x64_sys_writev+0x45/0x50 [ 67.590909][ T4246] x64_sys_call+0x1c0c/0x3020 [ 67.590997][ T4246] do_syscall_64+0x136/0x3c0 [ 67.591070][ T4246] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.591094][ T4246] RIP: 0033:0x7fa81620ce59 [ 67.591112][ T4246] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 67.591131][ T4246] RSP: 002b:00007fa814c67028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 67.591220][ T4246] RAX: ffffffffffffffda RBX: 00007fa816485fa0 RCX: 00007fa81620ce59 [ 67.591236][ T4246] RDX: 0000000000000002 RSI: 0000200000000000 RDI: 0000000000000003 [ 67.591250][ T4246] RBP: 00007fa814c67090 R08: 0000000000000000 R09: 0000000000000000 [ 67.591264][ T4246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 67.591278][ T4246] R13: 00007fa816486038 R14: 00007fa816485fa0 R15: 00007ffe2f3b2d98 [ 67.591380][ T4246] [ 67.640268][ T4249] FAULT_INJECTION: forcing a failure. [ 67.640268][ T4249] name failslab, interval 1, probability 0, space 0, times 0 [ 67.765881][ T4248] bridge_slave_1: left promiscuous mode [ 67.807721][ T4248] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.817517][ T4249] CPU: 0 UID: 0 PID: 4249 Comm: syz.2.166 Not tainted syzkaller #0 PREEMPT(lazy) [ 67.817545][ T4249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 67.817560][ T4249] Call Trace: [ 67.817568][ T4249] [ 67.817578][ T4249] __dump_stack+0x1d/0x30 [ 67.817681][ T4249] dump_stack_lvl+0x95/0xd0 [ 67.817703][ T4249] dump_stack+0x15/0x1b [ 67.817733][ T4249] should_fail_ex+0x25e/0x270 [ 67.817762][ T4249] should_failslab+0x8c/0xb0 [ 67.817784][ T4249] kmem_cache_alloc_node_noprof+0x85/0x3d0 [ 67.817807][ T4249] ? __alloc_skb+0x2db/0x6f0 [ 67.817903][ T4249] ? __alloc_skb+0x2db/0x6f0 [ 67.817929][ T4249] __alloc_skb+0x2db/0x6f0 [ 67.817955][ T4249] ? __alloc_skb+0x205/0x6f0 [ 67.817982][ T4249] netlink_alloc_large_skb+0xbf/0xf0 [ 67.818071][ T4249] netlink_sendmsg+0x40c/0x6f0 [ 67.818160][ T4249] ? __pfx_netlink_sendmsg+0x10/0x10 [ 67.818179][ T4249] ____sys_sendmsg+0x532/0x580 [ 67.818232][ T4249] ___sys_sendmsg+0x195/0x1e0 [ 67.818272][ T4249] __x64_sys_sendmsg+0xd4/0x160 [ 67.818323][ T4249] x64_sys_call+0x194c/0x3020 [ 67.818347][ T4249] do_syscall_64+0x136/0x3c0 [ 67.818377][ T4249] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.818415][ T4249] RIP: 0033:0x7fea3f31ce59 [ 67.818445][ T4249] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 67.818467][ T4249] RSP: 002b:00007fea3dd56028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 67.818492][ T4249] RAX: ffffffffffffffda RBX: 00007fea3f596090 RCX: 00007fea3f31ce59 [ 67.818509][ T4249] RDX: 0000000000000014 RSI: 0000200000000100 RDI: 000000000000000a [ 67.818525][ T4249] RBP: 00007fea3dd56090 R08: 0000000000000000 R09: 0000000000000000 [ 67.818538][ T4249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 67.818748][ T4249] R13: 00007fea3f596128 R14: 00007fea3f596090 R15: 00007ffe974a83d8 [ 67.818825][ T4249] [ 68.104317][ T4248] bridge_slave_0: left allmulticast mode [ 68.118129][ T4248] bridge_slave_0: left promiscuous mode [ 68.150198][ T4248] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.293358][ T4220] syz.0.158 (4220) used greatest stack depth: 8696 bytes left [ 68.410695][ T4264] loop4: detected capacity change from 0 to 512 [ 68.420002][ T4264] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 68.634738][ T4273] loop3: detected capacity change from 0 to 512 [ 68.642541][ T4273] EXT4-fs: Ignoring removed i_version option [ 68.648741][ T4273] EXT4-fs: Ignoring removed bh option [ 68.674408][ T23] IPVS: starting estimator thread 0... [ 68.771282][ T4274] IPVS: using max 2496 ests per chain, 124800 per kthread [ 69.457485][ T4273] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.482339][ T4273] ext4 filesystem being mounted at /48/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 69.521738][ T4264] EXT4-fs (loop4): 1 truncate cleaned up [ 69.528352][ T4264] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.989531][ T4284] loop2: detected capacity change from 0 to 512 [ 69.998744][ T4284] EXT4-fs: Ignoring removed oldalloc option [ 70.025922][ T4284] EXT4-fs error (device loop2): ext4_orphan_get:1425: comm syz.2.178: bad orphan inode 32 [ 70.047433][ T4284] loop2: lost filesystem error report for type 5 error -117 [ 70.047620][ T4284] ext4_test_bit(bit=31, block=4) = 0 [ 70.055527][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 70.055550][ C1] EXT4-fs (loop2): initial error at time 1782397096: ext4_orphan_get:1425 [ 70.055579][ C1] EXT4-fs (loop2): last error at time 1782397096: ext4_orphan_get:1425 [ 70.130379][ T4284] EXT4-fs (loop2): 1 truncate cleaned up [ 70.138385][ T4284] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.244825][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.267941][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.505622][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.660738][ T4307] tipc: Started in network mode [ 70.694653][ T4307] tipc: Node identity 00000000000000000040ffffe0000001, cluster identity 4711 [ 70.734392][ T4307] tipc: Enabling of bearer rejected, failed to enable media [ 70.751356][ T4311] 9p: Bad value for 'rfdno' [ 71.583979][ T4320] FAULT_INJECTION: forcing a failure. [ 71.583979][ T4320] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 71.638684][ T4320] CPU: 0 UID: 0 PID: 4320 Comm: syz.0.190 Not tainted syzkaller #0 PREEMPT(lazy) [ 71.638784][ T4320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 71.638797][ T4320] Call Trace: [ 71.638806][ T4320] [ 71.638815][ T4320] __dump_stack+0x1d/0x30 [ 71.638845][ T4320] dump_stack_lvl+0x95/0xd0 [ 71.638865][ T4320] dump_stack+0x15/0x1b [ 71.638883][ T4320] should_fail_ex+0x25e/0x270 [ 71.638968][ T4320] should_fail+0xb/0x20 [ 71.638990][ T4320] should_fail_usercopy+0x1a/0x20 [ 71.639021][ T4320] _copy_from_user+0x1c/0xb0 [ 71.639060][ T4320] __sys_bpf+0x1e2/0xc30 [ 71.639088][ T4320] ? get_pid_task+0x92/0xc0 [ 71.639110][ T4320] ? vfs_write+0x770/0x990 [ 71.639229][ T4320] __x64_sys_bpf+0x69/0x80 [ 71.639361][ T4320] x64_sys_call+0x10cb/0x3020 [ 71.639386][ T4320] do_syscall_64+0x136/0x3c0 [ 71.639424][ T4320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.639452][ T4320] RIP: 0033:0x7fb84338ce59 [ 71.639492][ T4320] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 71.639510][ T4320] RSP: 002b:00007fb841ddf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 71.639530][ T4320] RAX: ffffffffffffffda RBX: 00007fb843605fa0 RCX: 00007fb84338ce59 [ 71.639584][ T4320] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 000000000000000a [ 71.639600][ T4320] RBP: 00007fb841ddf090 R08: 0000000000000000 R09: 0000000000000000 [ 71.639616][ T4320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 71.639667][ T4320] R13: 00007fb843606038 R14: 00007fb843605fa0 R15: 00007ffdb659ce98 [ 71.639688][ T4320] [ 71.922615][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 71.922632][ T28] audit: type=1400 audit(1782397097.890:379): avc: denied { map } for pid=4322 comm="syz.4.191" path="socket:[7836]" dev="sockfs" ino=7836 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 72.001414][ T28] audit: type=1400 audit(1782397097.890:380): avc: denied { read } for pid=4322 comm="syz.4.191" path="socket:[7836]" dev="sockfs" ino=7836 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 72.158437][ T28] audit: type=1400 audit(1782397098.105:381): avc: denied { append } for pid=4328 comm="syz.0.193" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 72.373157][ T4341] FAULT_INJECTION: forcing a failure. [ 72.373157][ T4341] name failslab, interval 1, probability 0, space 0, times 0 [ 72.386569][ T4341] CPU: 1 UID: 0 PID: 4341 Comm: syz.3.196 Not tainted syzkaller #0 PREEMPT(lazy) [ 72.386599][ T4341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 72.386614][ T4341] Call Trace: [ 72.386621][ T4341] [ 72.386629][ T4341] __dump_stack+0x1d/0x30 [ 72.386652][ T4341] dump_stack_lvl+0x95/0xd0 [ 72.386673][ T4341] dump_stack+0x15/0x1b [ 72.386743][ T4341] should_fail_ex+0x25e/0x270 [ 72.386853][ T4341] should_failslab+0x8c/0xb0 [ 72.386875][ T4341] kmem_cache_alloc_node_noprof+0x85/0x3d0 [ 72.386899][ T4341] ? __alloc_skb+0x2db/0x6f0 [ 72.387000][ T4341] ? __alloc_skb+0x2db/0x6f0 [ 72.387027][ T4341] __alloc_skb+0x2db/0x6f0 [ 72.387054][ T4341] ? __alloc_skb+0x205/0x6f0 [ 72.387080][ T4341] netlink_alloc_large_skb+0xbf/0xf0 [ 72.387200][ T4341] netlink_sendmsg+0x40c/0x6f0 [ 72.387228][ T4341] ? __pfx_netlink_sendmsg+0x10/0x10 [ 72.387248][ T4341] ____sys_sendmsg+0x532/0x580 [ 72.387286][ T4341] ___sys_sendmsg+0x195/0x1e0 [ 72.387394][ T4341] __x64_sys_sendmsg+0xd4/0x160 [ 72.387432][ T4341] x64_sys_call+0x194c/0x3020 [ 72.387455][ T4341] do_syscall_64+0x136/0x3c0 [ 72.387488][ T4341] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.387513][ T4341] RIP: 0033:0x7fa81620ce59 [ 72.387532][ T4341] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 72.387600][ T4341] RSP: 002b:00007fa814c67028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 72.387622][ T4341] RAX: ffffffffffffffda RBX: 00007fa816485fa0 RCX: 00007fa81620ce59 [ 72.387637][ T4341] RDX: 0000000000000090 RSI: 00002000000002c0 RDI: 0000000000000004 [ 72.387645][ T4341] RBP: 00007fa814c67090 R08: 0000000000000000 R09: 0000000000000000 [ 72.387652][ T4341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 72.387692][ T4341] R13: 00007fa816486038 R14: 00007fa816485fa0 R15: 00007ffe2f3b2d98 [ 72.387704][ T4341] [ 72.621660][ T4343] FAULT_INJECTION: forcing a failure. [ 72.621660][ T4343] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 72.635880][ T4343] CPU: 0 UID: 0 PID: 4343 Comm: syz.5.197 Not tainted syzkaller #0 PREEMPT(lazy) [ 72.635906][ T4343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 72.635954][ T4343] Call Trace: [ 72.635961][ T4343] [ 72.635970][ T4343] __dump_stack+0x1d/0x30 [ 72.635997][ T4343] dump_stack_lvl+0x95/0xd0 [ 72.636083][ T4343] dump_stack+0x15/0x1b [ 72.636097][ T4343] should_fail_ex+0x25e/0x270 [ 72.636114][ T4343] should_fail+0xb/0x20 [ 72.636158][ T4343] should_fail_usercopy+0x1a/0x20 [ 72.636265][ T4343] _copy_from_user+0x1c/0xb0 [ 72.636296][ T4343] __sys_bpf+0x1e2/0xc30 [ 72.636381][ T4343] ? ktime_get+0x150/0x240 [ 72.636396][ T4343] __x64_sys_bpf+0x69/0x80 [ 72.636413][ T4343] x64_sys_call+0x10cb/0x3020 [ 72.636482][ T4343] do_syscall_64+0x136/0x3c0 [ 72.636501][ T4343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.636518][ T4343] RIP: 0033:0x7fb1bbeece59 [ 72.636529][ T4343] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 72.636540][ T4343] RSP: 002b:00007fb1ba947028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 72.636604][ T4343] RAX: ffffffffffffffda RBX: 00007fb1bc165fa0 RCX: 00007fb1bbeece59 [ 72.636612][ T4343] RDX: 0000000000000094 RSI: 0000200000000880 RDI: 0000000000000005 [ 72.636620][ T4343] RBP: 00007fb1ba947090 R08: 0000000000000000 R09: 0000000000000000 [ 72.636660][ T4343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 72.636667][ T4343] R13: 00007fb1bc166038 R14: 00007fb1bc165fa0 R15: 00007ffc27eb79b8 [ 72.636679][ T4343] [ 72.816533][ T4348] netlink: 24 bytes leftover after parsing attributes in process `syz.3.198'. [ 72.849848][ T4350] loop5: detected capacity change from 0 to 1024 [ 72.875780][ T4350] ext4: Unknown parameter 'nouser_xattr' [ 72.888094][ T3384] IPVS: starting estimator thread 0... [ 72.896909][ T4350] loop5: detected capacity change from 0 to 1024 [ 72.923116][ T4357] netlink: 24 bytes leftover after parsing attributes in process `syz.0.202'. [ 72.934263][ T4350] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 72.955066][ T28] audit: type=1400 audit(1782397098.863:382): avc: denied { bind } for pid=4349 comm="syz.5.200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 72.979287][ T28] audit: type=1400 audit(1782397098.863:383): avc: denied { name_bind } for pid=4349 comm="syz.5.200" src=512 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 73.004805][ T4353] IPVS: using max 2496 ests per chain, 124800 per kthread [ 73.005037][ T28] audit: type=1400 audit(1782397098.863:384): avc: denied { node_bind } for pid=4349 comm="syz.5.200" saddr=ffff:ffff:: src=512 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 73.025757][ T4360] netlink: 700 bytes leftover after parsing attributes in process `syz.0.203'. [ 73.341840][ T28] audit: type=1400 audit(1782397099.227:385): avc: denied { name_bind } for pid=4369 comm="syz.4.206" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 73.423801][ T4370] vhci_hcd vhci_hcd.3: default hub control req: 1f01 v0002 i0002 l0 [ 73.812817][ T4375] netlink: 20 bytes leftover after parsing attributes in process `syz.4.208'. [ 74.114168][ T4384] SELinux: Context system_u:object_r:system_cron_spool_t:s0 is not valid (left unmapped). [ 74.125063][ T28] audit: type=1400 audit(1782397099.948:386): avc: denied { mac_admin } for pid=4380 comm="syz.4.211" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 74.151123][ T4381] loop4: detected capacity change from 0 to 512 [ 74.170195][ T4381] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 74.206293][ T4381] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 74.206325][ T4381] EXT4-fs: failed to create workqueue [ 74.240431][ T28] audit: type=1400 audit(1782397100.022:387): avc: denied { relabelto } for pid=4380 comm="syz.4.211" name="cpuset.effective_mems" dev="tmpfs" ino=278 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:system_cron_spool_t:s0" [ 74.291002][ T4381] EXT4-fs (loop4): mount failed [ 74.373882][ T28] audit: type=1400 audit(1782397100.022:388): avc: denied { associate } for pid=4380 comm="syz.4.211" name="cpuset.effective_mems" dev="tmpfs" ino=278 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:system_cron_spool_t:s0" [ 74.939233][ T4399] loop4: detected capacity change from 0 to 512 [ 74.967821][ T4399] ext4: Unknown parameter 'noacl' [ 77.540405][ T4413] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 77.565536][ T4413] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 77.573854][ T4413] vhci_hcd vhci_hcd.0: default hub control req: 9a08 v0009 i0007 l0 [ 77.687265][ T4413] xt_hashlimit: max too large, truncated to 1048576 [ 77.984746][ T4424] netlink: 700 bytes leftover after parsing attributes in process `syz.4.220'. [ 78.129017][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 78.129034][ T28] audit: type=1400 audit(1782397103.708:392): avc: denied { write } for pid=4415 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.254011][ T28] audit: type=1400 audit(1782397103.820:393): avc: denied { write } for pid=4442 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.466557][ T4449] loop2: detected capacity change from 0 to 512 [ 78.607686][ T4449] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 78.619842][ T4449] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 78.630227][ T4449] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.224: Corrupt directory, running e2fsck is recommended [ 78.645545][ T4449] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 78.654035][ T4449] EXT4-fs error (device loop2): ext4_iget_extra_inode:5180: inode #15: comm syz.2.224: corrupted in-inode xattr: e_name out of bounds [ 78.668698][ T4449] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 78.692435][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 78.709236][ C1] EXT4-fs (loop2): initial error at time 1782397104: ext4_iget_extra_inode:5180: inode 15 [ 78.719822][ C1] EXT4-fs (loop2): last error at time 1782397104: ext4_iget_extra_inode:5180: inode 15 [ 78.735889][ T4449] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.224: couldn't read orphan inode 15 (err -117) [ 78.749564][ T4449] loop2: lost filesystem error report for type 5 error -117 [ 78.792496][ T4449] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.460222][ T4451] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 80.636848][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.667305][ T28] audit: type=1400 audit(1782397106.074:394): avc: denied { write } for pid=4455 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 80.674127][ T4443] loop0: detected capacity change from 0 to 512 [ 80.687814][ T4443] EXT4-fs: Ignoring removed orlov option [ 80.691763][ T4443] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 80.737185][ T4443] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #16: comm syz.0.226: invalid indirect mapped block 32768 (level 2) [ 80.773905][ T4443] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 80.776184][ T28] audit: type=1400 audit(1782397106.140:395): avc: denied { write } for pid=4480 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 80.779884][ T4443] EXT4-fs (loop0): 1 orphan inode deleted [ 80.795148][ T4482] loop2: detected capacity change from 0 to 512 [ 80.808177][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 80.808203][ C0] EXT4-fs (loop0): initial error at time 1782397106: ext4_free_branches:1023: inode 16 [ 80.827063][ C0] EXT4-fs (loop0): last error at time 1782397106: ext4_free_branches:1023: inode 16 [ 80.851011][ T4443] EXT4-fs (loop0): 1 truncate cleaned up [ 80.851901][ T28] audit: type=1326 audit(1782397106.224:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4465 comm="syz.4.227" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc83a8ace59 code=0x7ffc0000 [ 80.851933][ T28] audit: type=1326 audit(1782397106.224:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4465 comm="syz.4.227" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fc83a8ace59 code=0x7ffc0000 [ 80.852019][ T28] audit: type=1326 audit(1782397106.243:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4465 comm="syz.4.227" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc83a8ace59 code=0x7ffc0000 [ 80.852387][ T4443] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.856942][ T4482] ext4: Unknown parameter 'noacl' [ 80.905323][ T28] audit: type=1326 audit(1782397106.299:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4465 comm="syz.4.227" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fc83a8ace59 code=0x7ffc0000 [ 80.970457][ T28] audit: type=1400 audit(1782397106.355:400): avc: denied { connect } for pid=4471 comm="syz.5.229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 81.066974][ T4486] loop3: detected capacity change from 0 to 512 [ 81.090951][ T4495] loop4: detected capacity change from 0 to 512 [ 81.101348][ T28] audit: type=1400 audit(1782397106.430:401): avc: denied { read } for pid=4471 comm="syz.5.229" path="socket:[8354]" dev="sockfs" ino=8354 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 81.103267][ T4495] EXT4-fs: Ignoring removed oldalloc option [ 81.131710][ T4495] EXT4-fs: Ignoring removed orlov option [ 81.221150][ T4500] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 81.228824][ T4500] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 81.236237][ T4500] vhci_hcd vhci_hcd.0: default hub control req: 9a08 v0009 i0007 l0 [ 81.245685][ T4500] xt_hashlimit: max too large, truncated to 1048576 [ 81.257575][ T4501] netlink: 104 bytes leftover after parsing attributes in process `syz.5.229'. [ 81.283915][ T4486] msdos: Unknown parameter 'dloppy' [ 81.750454][ T4495] EXT4-fs: Invalid want_extra_isize 32768 [ 82.241130][ T4534] netlink: 700 bytes leftover after parsing attributes in process `syz.4.237'. [ 82.383583][ T4544] netlink: 'syz.3.239': attribute type 1 has an invalid length. [ 82.395401][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.465479][ T4544] 8021q: adding VLAN 0 to HW filter on device bond1 [ 82.801119][ T4556] loop3: detected capacity change from 0 to 128 [ 82.834664][ T4556] FAT-fs (loop3): bogus number of FAT sectors [ 82.845587][ T4556] FAT-fs (loop3): Can't find a valid FAT filesystem [ 82.909381][ T4556] loop3: detected capacity change from 0 to 512 [ 82.963764][ T4556] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.977095][ T4556] ext4 filesystem being mounted at /64/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.020884][ T4556] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.066333][ T4567] loop4: detected capacity change from 0 to 764 [ 83.119056][ T4556] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.197816][ T4556] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.211190][ T4576] loop5: detected capacity change from 0 to 512 [ 83.219001][ T4576] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 83.228548][ T4576] EXT4-fs (loop5): external journal device major/minor numbers have changed [ 83.256094][ T4576] EXT4-fs (loop5): failed to open journal device unknown-block(0,3) -ENXIO [ 83.272477][ T4576] netlink: 40 bytes leftover after parsing attributes in process `syz.5.249'. [ 83.339015][ T4556] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.455570][ T3434] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.471639][ T3434] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.487521][ T3434] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.503199][ T3434] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.550777][ T4556] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.645676][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 83.645705][ T28] audit: type=1400 audit(1782397108.862:415): avc: denied { execute } for pid=4585 comm="syz.3.252" dev="tmpfs" ino=1072 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 83.718800][ T4592] loop0: detected capacity change from 0 to 512 [ 83.725776][ T4592] ext4: Unknown parameter 'noacl' [ 83.828866][ T28] audit: type=1400 audit(1782397109.040:416): avc: denied { create } for pid=4594 comm="syz.4.254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 83.831943][ T4595] pimreg: entered allmulticast mode [ 83.849746][ T28] audit: type=1400 audit(1782397109.040:417): avc: denied { setopt } for pid=4594 comm="syz.4.254" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 83.854337][ T4595] pimreg: left allmulticast mode [ 84.013919][ T4601] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 84.021469][ T4601] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 84.029062][ T4601] vhci_hcd vhci_hcd.0: default hub control req: 9a08 v0009 i0007 l0 [ 84.038093][ T4601] xt_hashlimit: max too large, truncated to 1048576 [ 84.118593][ T28] audit: type=1400 audit(1782397109.292:418): avc: denied { block_suspend } for pid=4603 comm="syz.4.256" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 84.155422][ T4605] netlink: 700 bytes leftover after parsing attributes in process `syz.5.255'. [ 84.882394][ T4616] netlink: 52 bytes leftover after parsing attributes in process `syz.4.260'. [ 85.822385][ T28] audit: type=1400 audit(1782397110.892:419): avc: denied { write } for pid=4621 comm="syz.4.263" lport=41624 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 85.847309][ T28] audit: type=1400 audit(1782397110.901:420): avc: denied { getopt } for pid=4621 comm="syz.4.263" lport=41624 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 86.790910][ T4586] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 86.961508][ T4632] loop0: detected capacity change from 0 to 764 [ 86.992703][ T28] audit: type=1400 audit(1782397111.996:421): avc: denied { connect } for pid=4626 comm="syz.4.267" lport=47 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 87.139342][ T4642] loop2: detected capacity change from 0 to 512 [ 87.151179][ T4642] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 87.164390][ T28] audit: type=1400 audit(1782397112.127:422): avc: denied { write } for pid=4628 comm="syz.2.266" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 87.238425][ T28] audit: type=1400 audit(1782397112.127:423): avc: denied { ioctl } for pid=4628 comm="syz.2.266" path="socket:[8691]" dev="sockfs" ino=8691 ioctlcmd=0x8907 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 87.299232][ T4642] EXT4-fs error (device loop2): ext4_orphan_get:1425: comm syz.2.266: bad orphan inode 131083 [ 87.310290][ T4642] loop2: lost filesystem error report for type 5 error -117 [ 87.312424][ T4642] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.342589][ T28] audit: type=1400 audit(1782397112.314:424): avc: denied { write } for pid=4628 comm="syz.2.266" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 87.391469][ T4647] FAULT_INJECTION: forcing a failure. [ 87.391469][ T4647] name failslab, interval 1, probability 0, space 0, times 0 [ 87.478333][ T4647] CPU: 1 UID: 0 PID: 4647 Comm: syz.4.271 Not tainted syzkaller #0 PREEMPT(lazy) [ 87.478413][ T4647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 87.478426][ T4647] Call Trace: [ 87.478432][ T4647] [ 87.478441][ T4647] __dump_stack+0x1d/0x30 [ 87.478469][ T4647] dump_stack_lvl+0x95/0xd0 [ 87.478492][ T4647] dump_stack+0x15/0x1b [ 87.478571][ T4647] should_fail_ex+0x25e/0x270 [ 87.478615][ T4647] should_failslab+0x8c/0xb0 [ 87.478635][ T4647] kmem_cache_alloc_node_noprof+0x85/0x3d0 [ 87.478660][ T4647] ? __alloc_skb+0x2db/0x6f0 [ 87.478757][ T4647] ? __alloc_skb+0x2db/0x6f0 [ 87.478835][ T4647] __alloc_skb+0x2db/0x6f0 [ 87.478987][ T4647] ? __alloc_skb+0x205/0x6f0 [ 87.479008][ T4647] netlink_alloc_large_skb+0xbf/0xf0 [ 87.479039][ T4647] netlink_sendmsg+0x40c/0x6f0 [ 87.479066][ T4647] ? __pfx_netlink_sendmsg+0x10/0x10 [ 87.479086][ T4647] sock_write_iter+0x2c5/0x2f0 [ 87.479158][ T4647] ? __pfx_sock_write_iter+0x10/0x10 [ 87.479241][ T4647] vfs_write+0x57d/0x990 [ 87.479268][ T4647] ksys_write+0xdc/0x1a0 [ 87.479291][ T4647] __x64_sys_write+0x40/0x50 [ 87.479312][ T4647] x64_sys_call+0x27e1/0x3020 [ 87.479334][ T4647] do_syscall_64+0x136/0x3c0 [ 87.479503][ T4647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.479580][ T4647] RIP: 0033:0x7fc83a8ace59 [ 87.479596][ T4647] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.479616][ T4647] RSP: 002b:00007fc839307028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 87.479672][ T4647] RAX: ffffffffffffffda RBX: 00007fc83ab25fa0 RCX: 00007fc83a8ace59 [ 87.479738][ T4647] RDX: 0000000000000024 RSI: 0000200000000000 RDI: 0000000000000003 [ 87.479751][ T4647] RBP: 00007fc839307090 R08: 0000000000000000 R09: 0000000000000000 [ 87.479788][ T4647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 87.479803][ T4647] R13: 00007fc83ab26038 R14: 00007fc83ab25fa0 R15: 00007ffcd284fdd8 [ 87.479824][ T4647] [ 87.735984][ T4653] loop4: detected capacity change from 0 to 1024 [ 87.763830][ T4653] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.879328][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.889297][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.982597][ T4670] loop0: detected capacity change from 0 to 512 [ 88.005619][ T4670] ext4: Unknown parameter 'noacl' [ 88.033524][ T4669] loop2: detected capacity change from 0 to 2048 [ 88.150773][ T4675] FAULT_INJECTION: forcing a failure. [ 88.150773][ T4675] name failslab, interval 1, probability 0, space 0, times 0 [ 88.168173][ T4675] CPU: 0 UID: 0 PID: 4675 Comm: syz.5.280 Not tainted syzkaller #0 PREEMPT(lazy) [ 88.168209][ T4675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 88.168223][ T4675] Call Trace: [ 88.168231][ T4675] [ 88.168240][ T4675] __dump_stack+0x1d/0x30 [ 88.168268][ T4675] dump_stack_lvl+0x95/0xd0 [ 88.168302][ T4675] dump_stack+0x15/0x1b [ 88.168324][ T4675] should_fail_ex+0x25e/0x270 [ 88.168354][ T4675] ? page_pool_create_percpu+0x49/0x680 [ 88.168385][ T4675] should_failslab+0x8c/0xb0 [ 88.168418][ T4675] __kmalloc_cache_node_noprof+0x81/0x3e0 [ 88.168456][ T4675] ? page_pool_create_percpu+0x49/0x680 [ 88.168541][ T4675] ? __kvmalloc_node_noprof+0x306/0x590 [ 88.168572][ T4675] page_pool_create_percpu+0x49/0x680 [ 88.168672][ T4675] page_pool_create+0x1a/0x30 [ 88.168702][ T4675] bpf_test_run_xdp_live+0x1a5/0x1330 [ 88.168759][ T4675] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 88.168795][ T4675] ? __pfx_autoremove_wake_function+0x10/0x10 [ 88.168822][ T4675] ? mutex_unlock+0x4e/0x90 [ 88.168861][ T4675] ? 0xffffffffa0205240 [ 88.168953][ T4675] ? bpf_dispatcher_change_prog+0x7b7/0x800 [ 88.168988][ T4675] ? 0xffffffffa0205240 [ 88.169025][ T4675] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 88.169057][ T4675] bpf_prog_test_run_xdp+0x559/0x9e0 [ 88.169153][ T4675] ? sysvec_call_function_single+0x51/0x80 [ 88.169184][ T4675] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 88.169209][ T4675] bpf_prog_test_run+0x208/0x340 [ 88.169318][ T4675] __sys_bpf+0x8da/0xc30 [ 88.169380][ T4675] ? vfs_write+0x770/0x990 [ 88.169411][ T4675] __x64_sys_bpf+0x69/0x80 [ 88.169448][ T4675] x64_sys_call+0x10cb/0x3020 [ 88.169527][ T4675] do_syscall_64+0x136/0x3c0 [ 88.169561][ T4675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.169587][ T4675] RIP: 0033:0x7fb1bbeece59 [ 88.169638][ T4675] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 88.169660][ T4675] RSP: 002b:00007fb1ba947028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 88.169683][ T4675] RAX: ffffffffffffffda RBX: 00007fb1bc165fa0 RCX: 00007fb1bbeece59 [ 88.169700][ T4675] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 88.169715][ T4675] RBP: 00007fb1ba947090 R08: 0000000000000000 R09: 0000000000000000 [ 88.169730][ T4675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 88.169744][ T4675] R13: 00007fb1bc166038 R14: 00007fb1bc165fa0 R15: 00007ffc27eb79b8 [ 88.169829][ T4675] [ 88.533857][ T4679] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 88.542224][ T4679] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 88.550411][ T4679] vhci_hcd vhci_hcd.0: default hub control req: 9a08 v0009 i0007 l0 [ 88.562148][ T4679] xt_hashlimit: max too large, truncated to 1048576 [ 88.695962][ T4678] loop3: detected capacity change from 0 to 1024 [ 88.769356][ T4678] EXT4-fs: Ignoring removed bh option [ 88.779228][ T4678] EXT4-fs (loop3): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 88.813671][ T4682] netlink: 40 bytes leftover after parsing attributes in process `syz.5.283'. [ 88.927593][ T4684] netlink: 36 bytes leftover after parsing attributes in process `syz.5.284'. [ 89.022857][ T4669] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.040777][ T4678] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.063071][ T28] kauditd_printk_skb: 23 callbacks suppressed [ 89.063088][ T28] audit: type=1400 audit(1782397113.932:448): avc: denied { write } for pid=4667 comm="syz.2.277" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 89.137357][ T4678] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 89.173117][ T28] audit: type=1400 audit(1782397113.969:449): avc: denied { map } for pid=4667 comm="syz.2.277" path="/51/file1/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 89.276626][ T28] audit: type=1400 audit(1782397113.969:450): avc: denied { execute } for pid=4667 comm="syz.2.277" path="/51/file1/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 89.393539][ T28] audit: type=1400 audit(1782397113.997:451): avc: denied { write } for pid=4677 comm="syz.3.282" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 89.501134][ T28] audit: type=1400 audit(1782397114.166:452): avc: denied { ioctl } for pid=4677 comm="syz.3.282" path="/69/file1/file1" dev="loop3" ino=15 ioctlcmd=0x6629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 89.953357][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.965376][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.970309][ T4697] random: crng reseeded on system resumption [ 89.975505][ T28] audit: type=1400 audit(1782397114.774:453): avc: denied { write } for pid=4696 comm="syz.4.287" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 90.018634][ T4699] FAULT_INJECTION: forcing a failure. [ 90.018634][ T4699] name failslab, interval 1, probability 0, space 0, times 0 [ 90.031451][ T4699] CPU: 1 UID: 0 PID: 4699 Comm: syz.0.288 Not tainted syzkaller #0 PREEMPT(lazy) [ 90.031496][ T4699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 90.031507][ T4699] Call Trace: [ 90.031600][ T4699] [ 90.031615][ T4699] __dump_stack+0x1d/0x30 [ 90.031650][ T4699] dump_stack_lvl+0x95/0xd0 [ 90.031671][ T4699] dump_stack+0x15/0x1b [ 90.031692][ T4699] should_fail_ex+0x25e/0x270 [ 90.031718][ T4699] should_failslab+0x8c/0xb0 [ 90.031739][ T4699] __kmalloc_node_track_caller_noprof+0xd5/0x4c0 [ 90.031839][ T4699] ? __request_module+0x1df/0x3c0 [ 90.031868][ T4699] ? __request_module+0x1df/0x3c0 [ 90.031895][ T4699] ? __kmalloc_cache_noprof+0x19a/0x3d0 [ 90.031919][ T4699] kstrdup+0x3e/0xd0 [ 90.031982][ T4699] __request_module+0x1df/0x3c0 [ 90.032013][ T4699] dev_load+0xa3/0xc0 [ 90.032132][ T4699] dev_ioctl+0x776/0x960 [ 90.032234][ T4699] sock_ioctl+0x58f/0x610 [ 90.032267][ T4699] ? __pfx_sock_ioctl+0x10/0x10 [ 90.032301][ T4699] __se_sys_ioctl+0xce/0x140 [ 90.032419][ T4699] __x64_sys_ioctl+0x43/0x50 [ 90.032454][ T4699] x64_sys_call+0x1563/0x3020 [ 90.032481][ T4699] do_syscall_64+0x136/0x3c0 [ 90.032551][ T4699] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.032641][ T4699] RIP: 0033:0x7fb84338ce59 [ 90.032659][ T4699] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 90.032737][ T4699] RSP: 002b:00007fb841ddf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 90.032756][ T4699] RAX: ffffffffffffffda RBX: 00007fb843605fa0 RCX: 00007fb84338ce59 [ 90.032771][ T4699] RDX: 0000200000001280 RSI: 00000000000089f0 RDI: 0000000000000003 [ 90.032865][ T4699] RBP: 00007fb841ddf090 R08: 0000000000000000 R09: 0000000000000000 [ 90.032879][ T4699] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 90.032899][ T4699] R13: 00007fb843606038 R14: 00007fb843605fa0 R15: 00007ffdb659ce98 [ 90.032921][ T4699] [ 90.242146][ T28] audit: type=1400 audit(1782397114.774:454): avc: denied { open } for pid=4696 comm="syz.4.287" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 90.267665][ T28] audit: type=1400 audit(1782397114.830:455): avc: denied { ioctl } for pid=4701 comm="syz.4.291" path="/dev/nvram" dev="devtmpfs" ino=98 ioctlcmd=0x7041 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 90.387884][ T28] audit: type=1400 audit(1782397115.176:456): avc: denied { setopt } for pid=4703 comm="syz.3.290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 90.411086][ T4705] loop2: detected capacity change from 0 to 512 [ 90.430741][ T28] audit: type=1400 audit(1782397115.195:457): avc: denied { getopt } for pid=4703 comm="syz.3.290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 90.513302][ T4717] loop0: detected capacity change from 0 to 512 [ 90.551195][ T4723] ref_ctr increment failed for inode: 0x1b1 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88812a913800 [ 90.554429][ T4705] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.577361][ T4705] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.578199][ T4717] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 90.604376][ T4705] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 90.604396][ T4717] EXT4-fs (loop0): 1 truncate cleaned up [ 90.619418][ T4717] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.731066][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.845848][ T4733] loop2: detected capacity change from 0 to 512 [ 90.853958][ T4733] ext4: Unknown parameter 'noacl' [ 91.073913][ T4736] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 91.081717][ T4736] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 91.089264][ T4736] vhci_hcd vhci_hcd.0: default hub control req: 9a08 v0009 i0007 l0 [ 91.098165][ T4736] xt_hashlimit: max too large, truncated to 1048576 [ 92.010256][ T4739] loop5: detected capacity change from 0 to 512 [ 92.023162][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.137197][ T4739] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 92.155599][ T4739] EXT4-fs error (device loop5): ext4_orphan_get:1399: inode #15: comm syz.5.300: iget: bad i_size value: 38620345925642 [ 92.206910][ T4739] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 92.207131][ T4739] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.300: couldn't read orphan inode 15 (err -117) [ 92.228039][ T4739] loop5: lost filesystem error report for type 5 error -117 [ 92.277039][ T4739] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.334479][ T4747] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.398669][ T4744] netlink: 700 bytes leftover after parsing attributes in process `syz.0.302'. [ 92.432352][ T4739] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.300: bg 0: block 5: invalid block bitmap [ 92.499029][ T4739] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 428 with error 28 [ 92.565721][ T4756] set_capacity_and_notify: 1 callbacks suppressed [ 92.565742][ T4756] loop0: detected capacity change from 0 to 512 [ 92.584930][ T4739] EXT4-fs (loop5): This should not happen!! Data will be lost [ 92.584930][ T4739] [ 92.625283][ T4739] EXT4-fs (loop5): Total free blocks count 0 [ 92.656991][ T4739] EXT4-fs (loop5): Free/Dirty block details [ 92.683172][ T4739] EXT4-fs (loop5): free_blocks=0 [ 92.703757][ T4739] EXT4-fs (loop5): dirty_blocks=432 [ 92.733514][ T4739] EXT4-fs (loop5): Block reservation details [ 92.764102][ T4739] EXT4-fs (loop5): i_reserved_data_blocks=432 [ 92.816841][ T3870] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.034259][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.443838][ T4778] loop5: detected capacity change from 0 to 512 [ 94.454253][ T4778] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 94.568512][ T4778] EXT4-fs (loop5): 1 truncate cleaned up [ 94.574907][ T4778] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.773633][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 94.773651][ T28] audit: type=1400 audit(1782397119.273:471): avc: denied { write } for pid=4776 comm="syz.5.312" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 95.044978][ T28] audit: type=1400 audit(1782397119.526:472): avc: denied { read } for pid=4784 comm="syz.4.315" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 95.072095][ T28] audit: type=1400 audit(1782397119.526:473): avc: denied { open } for pid=4784 comm="syz.4.315" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 95.097326][ T3870] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.231407][ T28] audit: type=1400 audit(1782397119.694:474): avc: denied { setopt } for pid=4793 comm="syz.3.319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 95.266638][ T4796] random: crng reseeded on system resumption [ 95.346922][ T4806] loop0: detected capacity change from 0 to 1024 [ 95.354964][ T4799] 9p: Could not find request transport: unix [ 95.369589][ T4806] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 95.386870][ T4806] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.324: Invalid block bitmap block 0 in block_group 0 [ 95.410616][ T4806] loop0: lost filesystem error report for type 5 error -117 [ 95.412127][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 95.426450][ C0] EXT4-fs (loop0): initial error at time 1782397119: ext4_read_block_bitmap_nowait:483 [ 95.436425][ C0] EXT4-fs (loop0): last error at time 1782397119: ext4_read_block_bitmap_nowait:483 [ 95.463547][ T4799] netlink: 8 bytes leftover after parsing attributes in process `syz.5.322'. [ 95.482078][ T4806] Quota error (device loop0): write_blk: dquota write failed [ 95.482108][ T4806] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 95.482148][ T4806] EXT4-fs error (device loop0): ext4_acquire_dquot:7041: comm syz.0.324: Failed to acquire dquot type 0 [ 95.482173][ T4806] loop0: lost filesystem error report for type 5 error -117 [ 95.482373][ T4806] EXT4-fs error (device loop0): ext4_free_blocks:6718: comm syz.0.324: Freeing blocks not in datazone - block = 0, count = 4096 [ 95.482400][ T4806] loop0: lost filesystem error report for type 5 error -117 [ 95.482535][ T4806] EXT4-fs error (device loop0): ext4_read_inode_bitmap:141: comm syz.0.324: Invalid inode bitmap blk 0 in block_group 0 [ 95.482563][ T4806] loop0: lost filesystem error report for type 5 error -117 [ 95.482685][ T4806] EXT4-fs error (device loop0) in ext4_free_inode:363: Corrupt filesystem [ 95.482744][ T4806] loop0: lost filesystem error report for type 5 error -117 [ 95.482918][ T4806] EXT4-fs (loop0): 1 orphan inode deleted [ 95.483233][ T4806] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.485242][ T28] audit: type=1400 audit(1782397119.937:475): avc: denied { write } for pid=4805 comm="syz.0.324" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 95.557316][ T28] audit: type=1400 audit(1782397120.003:476): avc: denied { create } for pid=4805 comm="syz.0.324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 95.581517][ T4799] netlink: 'syz.5.322': attribute type 30 has an invalid length. [ 95.669961][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.684921][ T46] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 95.696976][ T1020] Quota error (device loop0): do_check_range: Getting block 0 out of range 1-7 [ 95.719123][ T1020] EXT4-fs error (device loop0): ext4_release_dquot:7077: comm kworker/u8:6: Failed to release dquot type 0 [ 95.731231][ T4819] loop2: detected capacity change from 0 to 512 [ 95.731824][ T46] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 95.749785][ T4819] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.330: iget: bad i_size value: 38620345925642 [ 95.757344][ T1020] loop0: lost filesystem error report for type 5 error -117 [ 95.765616][ T4819] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 95.773436][ T4819] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.330: couldn't read orphan inode 15 (err -117) [ 95.781237][ T46] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 95.782875][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 95.796930][ T46] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 95.803726][ C0] EXT4-fs (loop2): initial error at time 1782397120: ext4_orphan_get:1399 [ 95.814967][ T4818] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 95.819379][ C0] : inode 15 [ 95.819397][ C0] EXT4-fs (loop2): last error at time 1782397120: ext4_orphan_get:1399: inode 15 [ 95.853193][ T4819] loop2: lost filesystem error report for type 5 error -117 [ 95.853918][ T4819] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.861285][ T3375] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 95.885062][ T28] audit: type=1400 audit(1782397120.293:477): avc: denied { write } for pid=4817 comm="syz.2.330" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 95.924800][ T4824] FAULT_INJECTION: forcing a failure. [ 95.924800][ T4824] name failslab, interval 1, probability 0, space 0, times 0 [ 95.938566][ T4824] CPU: 1 UID: 0 PID: 4824 Comm: syz.0.328 Not tainted syzkaller #0 PREEMPT(lazy) [ 95.938596][ T4824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 95.938607][ T4824] Call Trace: [ 95.938613][ T4824] [ 95.938621][ T4824] __dump_stack+0x1d/0x30 [ 95.938653][ T4824] dump_stack_lvl+0x95/0xd0 [ 95.938677][ T4824] dump_stack+0x15/0x1b [ 95.938699][ T4824] should_fail_ex+0x25e/0x270 [ 95.938728][ T4824] should_failslab+0x8c/0xb0 [ 95.938753][ T4824] __kmalloc_noprof+0xd4/0x4a0 [ 95.938840][ T4824] ? genl_family_rcv_msg_attrs_parse+0x8c/0x1b0 [ 95.938893][ T4824] ? genl_family_rcv_msg_attrs_parse+0x8c/0x1b0 [ 95.938928][ T4824] genl_family_rcv_msg_attrs_parse+0x8c/0x1b0 [ 95.938963][ T4824] genl_family_rcv_msg_doit+0x4b/0x1f0 [ 95.938994][ T4824] ? selinux_capable+0x31/0x40 [ 95.939078][ T4824] ? security_capable+0x7b/0x90 [ 95.939102][ T4824] ? ns_capable+0x80/0xb0 [ 95.939140][ T4824] genl_rcv_msg+0x42f/0x470 [ 95.939249][ T4824] ? __pfx_ieee802154_llsec_del_key+0x10/0x10 [ 95.939285][ T4824] netlink_rcv_skb+0x11e/0x220 [ 95.939307][ T4824] ? __pfx_genl_rcv_msg+0x10/0x10 [ 95.939344][ T4824] genl_rcv+0x28/0x40 [ 95.939425][ T4824] netlink_unicast+0x5a7/0x680 [ 95.939609][ T4824] netlink_sendmsg+0x5be/0x6f0 [ 95.939631][ T4824] ? __pfx_netlink_sendmsg+0x10/0x10 [ 95.939651][ T4824] ____sys_sendmsg+0x532/0x580 [ 95.939685][ T4824] ___sys_sendmsg+0x195/0x1e0 [ 95.939785][ T4824] __x64_sys_sendmsg+0xd4/0x160 [ 95.939815][ T4824] x64_sys_call+0x194c/0x3020 [ 95.939906][ T4824] do_syscall_64+0x136/0x3c0 [ 95.939937][ T4824] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.939963][ T4824] RIP: 0033:0x7fb84338ce59 [ 95.939979][ T4824] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.940054][ T4824] RSP: 002b:00007fb841ddf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 95.940076][ T4824] RAX: ffffffffffffffda RBX: 00007fb843605fa0 RCX: 00007fb84338ce59 [ 95.940094][ T4824] RDX: 0000000004004850 RSI: 0000200000000800 RDI: 0000000000000005 [ 95.940110][ T4824] RBP: 00007fb841ddf090 R08: 0000000000000000 R09: 0000000000000000 [ 95.940125][ T4824] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 95.940169][ T4824] R13: 00007fb843606038 R14: 00007fb843605fa0 R15: 00007ffdb659ce98 [ 95.940187][ T4824] [ 96.246292][ T134] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 96.320224][ T4830] netlink: 'syz.5.333': attribute type 7 has an invalid length. [ 96.372868][ T4834] random: crng reseeded on system resumption [ 96.483208][ T4840] loop4: detected capacity change from 0 to 256 [ 96.517899][ T4840] FAT-fs (loop4): data area starts beyond volume (274 > 64) [ 96.526762][ T4840] FAT-fs (loop4): Can't find a valid FAT filesystem [ 96.649529][ T58] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm kworker/u8:4: bg 0: block 5: invalid block bitmap [ 96.664751][ T58] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 96.679706][ T58] EXT4-fs (loop2): This should not happen!! Data will be lost [ 96.679706][ T58] [ 96.690813][ T58] EXT4-fs (loop2): Total free blocks count 0 [ 96.697104][ T58] EXT4-fs (loop2): Free/Dirty block details [ 96.703211][ T58] EXT4-fs (loop2): free_blocks=0 [ 96.721145][ T58] EXT4-fs (loop2): dirty_blocks=4820 [ 96.727488][ T58] EXT4-fs (loop2): Block reservation details [ 96.734840][ T58] EXT4-fs (loop2): i_reserved_data_blocks=4820 [ 96.763945][ T58] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 96.785837][ T4847] loop0: detected capacity change from 0 to 256 [ 96.823398][ T3375] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 96.842450][ T3307] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 96.867295][ T4847] FAT-fs (loop0): data area starts beyond volume (274 > 64) [ 96.882909][ T4847] FAT-fs (loop0): Can't find a valid FAT filesystem [ 97.126398][ T4863] tipc: Started in network mode [ 97.131671][ T4863] tipc: Node identity ac14140f, cluster identity 4711 [ 97.139122][ T4863] tipc: New replicast peer: 255.255.255.255 [ 97.145674][ T4863] tipc: Enabled bearer , priority 10 [ 97.336742][ T134] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 97.346840][ T134] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 97.395277][ T4876] loop4: detected capacity change from 0 to 512 [ 97.404176][ T4871] netlink: 8 bytes leftover after parsing attributes in process `syz.0.348'. [ 97.413137][ T4871] netlink: 44 bytes leftover after parsing attributes in process `syz.0.348'. [ 97.527335][ T4882] loop5: detected capacity change from 0 to 1024 [ 97.535658][ T4882] EXT4-fs: inline encryption not supported [ 97.550710][ T4882] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 97.570660][ T4882] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #3: block 2: comm syz.5.350: lblock 2 mapped to illegal pblock 2 (length 1) [ 97.584941][ T4882] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 97.585599][ T4882] EXT4-fs error (device loop5): __ext4_get_inode_loc:4886: comm syz.5.350: Invalid inode table block 1 in block_group 0 [ 97.607817][ T4882] loop5: lost filesystem error report for type 5 error -117 [ 97.608730][ T4882] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 97.626859][ C1] EXT4-fs (loop5): error count since last fsck: 2 [ 97.626904][ C1] EXT4-fs (loop5): initial error at time 1782397121: ext4_map_blocks:791: inode 3: block 2 [ 97.626987][ C1] EXT4-fs (loop5): last error at time 1782397121: __ext4_get_inode_loc:4886 [ 97.662867][ T4882] loop5: lost filesystem error report for type 5 error -117 [ 97.663343][ T4882] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #3: comm syz.5.350: mark_inode_dirty error [ 97.683054][ T4882] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 97.683858][ T4882] EXT4-fs error (device loop5): ext4_acquire_dquot:7041: comm syz.5.350: Failed to acquire dquot type 0 [ 97.705027][ T4882] loop5: lost filesystem error report for type 5 error -117 [ 97.706261][ T4882] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 97.727596][ T4882] EXT4-fs error (device loop5): ext4_evict_inode:267: inode #11: comm syz.5.350: mark_inode_dirty error [ 97.739684][ T4882] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 97.741321][ T4882] EXT4-fs warning (device loop5): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 97.768400][ T4891] loop2: detected capacity change from 0 to 128 [ 97.789945][ T4891] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 97.791560][ T4882] EXT4-fs (loop5): 1 orphan inode deleted [ 97.808426][ T1020] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 97.823087][ T4891] xt_hashlimit: size too large, truncated to 1048576 [ 97.826556][ T4882] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.843567][ T1020] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 97.845246][ T1020] EXT4-fs error (device loop5): ext4_release_dquot:7077: comm kworker/u8:6: Failed to release dquot type 0 [ 97.922105][ T3870] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.931969][ T3870] EXT4-fs error (device loop5): __ext4_get_inode_loc:4886: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 97.947600][ T3870] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 97.974501][ T3870] EXT4-fs error (device loop5): ext4_quota_off:7325: inode #3: comm syz-executor: mark_inode_dirty error [ 97.995395][ T3870] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 98.106586][ T11] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 98.256893][ T805] tipc: Node number set to 2886997007 [ 98.423273][ T4913] loop5: detected capacity change from 0 to 512 [ 98.592693][ T4913] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 98.683399][ T4913] EXT4-fs (loop5): 1 truncate cleaned up [ 98.733602][ T4913] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.387288][ T58] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 99.534937][ T4928] loop0: detected capacity change from 0 to 512 [ 99.542811][ T4928] EXT4-fs error (device loop0): ext4_orphan_get:1425: comm syz.0.363: bad orphan inode 15 [ 99.553334][ T4928] ext4_test_bit(bit=14, block=18) = 1 [ 99.559156][ T4928] is_bad_inode(inode)=0 [ 99.563600][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 99.563623][ C1] EXT4-fs (loop0): initial error at time 1782397123: ext4_orphan_get:1425 [ 99.563645][ C1] EXT4-fs (loop0): last error at time 1782397123: ext4_orphan_get:1425 [ 99.588107][ T4928] NEXT_ORPHAN(inode)=1023 [ 99.592745][ T4928] max_ino=32 [ 99.596391][ T4928] i_nlink=0 [ 99.599858][ T4928] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2972: inode #15: comm syz.0.363: corrupted xattr block 19: invalid header [ 99.614122][ T4928] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 99.616448][ T4928] EXT4-fs warning (device loop0): ext4_evict_inode:287: xattr delete (err -117) [ 99.640647][ T4928] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none. [ 99.653480][ T4928] ext4 filesystem being mounted at /72/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 99.828769][ T3870] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.130491][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 100.130586][ T28] audit: type=1400 audit(1782397124.287:483): avc: denied { nlmsg_read } for pid=4943 comm="syz.2.369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 100.137186][ T4944] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4944 comm=syz.2.369 [ 100.204117][ T28] audit: type=1400 audit(1782397124.352:484): avc: denied { getopt } for pid=4943 comm="syz.2.369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 100.251452][ T4944] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=4944 comm=syz.2.369 [ 100.284230][ T4947] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4947 comm=syz.2.369 [ 100.320776][ T28] audit: type=1400 audit(1782397124.455:485): avc: denied { audit_write } for pid=4943 comm="syz.2.369" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 100.349572][ T4947] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=4947 comm=syz.2.369 [ 100.351055][ T4944] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=21 sclass=netlink_audit_socket pid=4944 comm=syz.2.369 [ 100.486504][ T28] audit: type=1400 audit(1782397124.614:486): avc: denied { mount } for pid=4952 comm="syz.2.371" name="/" dev="ramfs" ino=9973 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 100.542690][ T28] audit: type=1400 audit(1782397124.661:487): avc: denied { mounton } for pid=4952 comm="syz.2.371" path="/file0" dev="ramfs" ino=9975 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 100.683300][ T28] audit: type=1400 audit(1782397124.801:488): avc: denied { mmap_zero } for pid=4952 comm="syz.2.371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 100.778945][ T4958] FAULT_INJECTION: forcing a failure. [ 100.778945][ T4958] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 100.802027][ T4958] CPU: 0 UID: 0 PID: 4958 Comm: syz.2.373 Not tainted syzkaller #0 PREEMPT(lazy) [ 100.802059][ T4958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 100.802075][ T4958] Call Trace: [ 100.802082][ T4958] [ 100.802090][ T4958] __dump_stack+0x1d/0x30 [ 100.802117][ T4958] dump_stack_lvl+0x95/0xd0 [ 100.802141][ T4958] dump_stack+0x15/0x1b [ 100.802173][ T4958] should_fail_ex+0x25e/0x270 [ 100.802201][ T4958] should_fail+0xb/0x20 [ 100.802297][ T4958] should_fail_usercopy+0x1a/0x20 [ 100.802324][ T4958] _copy_to_user+0x20/0xa0 [ 100.802424][ T4958] simple_read_from_buffer+0xb5/0x130 [ 100.802450][ T4958] proc_fail_nth_read+0x10e/0x150 [ 100.802471][ T4958] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 100.802494][ T4958] vfs_read+0x18e/0x7c0 [ 100.802531][ T4958] ? rtnl_unlock+0xe/0x20 [ 100.802559][ T4958] ? __rcu_read_unlock+0x4e/0x70 [ 100.802589][ T4958] ? __fget_files+0x184/0x1c0 [ 100.802704][ T4958] ? mutex_lock+0x57/0x90 [ 100.802765][ T4958] ksys_read+0xdc/0x1a0 [ 100.802786][ T4958] __x64_sys_read+0x40/0x50 [ 100.802806][ T4958] x64_sys_call+0x2886/0x3020 [ 100.802830][ T4958] do_syscall_64+0x136/0x3c0 [ 100.802909][ T4958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.802984][ T4958] RIP: 0033:0x7fea3f2dd68e [ 100.803003][ T4958] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 100.803095][ T4958] RSP: 002b:00007fea3dd76fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 100.803119][ T4958] RAX: ffffffffffffffda RBX: 00007fea3dd776c0 RCX: 00007fea3f2dd68e [ 100.803136][ T4958] RDX: 000000000000000f RSI: 00007fea3dd770a0 RDI: 0000000000000005 [ 100.803164][ T4958] RBP: 00007fea3dd77090 R08: 0000000000000000 R09: 0000000000000000 [ 100.803177][ T4958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 100.803191][ T4958] R13: 00007fea3f596038 R14: 00007fea3f595fa0 R15: 00007ffe974a83d8 [ 100.803210][ T4958] [ 101.148442][ T4965] netlink: 700 bytes leftover after parsing attributes in process `syz.3.375'. [ 101.210736][ T4964] loop2: detected capacity change from 0 to 4096 [ 101.325470][ T4964] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.364224][ T28] audit: type=1400 audit(1782397125.419:489): avc: denied { write } for pid=4960 comm="syz.2.374" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 101.442273][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 102.749762][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.807722][ T4982] netlink: 8 bytes leftover after parsing attributes in process `syz.2.379'. [ 102.920655][ T4986] ieee802154 phy0 wpan0: encryption failed: -22 [ 102.936562][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0009-000000000000. [ 102.946336][ T28] audit: type=1400 audit(1782397126.850:490): avc: denied { create } for pid=4983 comm="syz.3.380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 102.973413][ T28] audit: type=1400 audit(1782397126.896:491): avc: denied { write } for pid=4983 comm="syz.3.380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 103.006090][ T4984] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 103.014932][ T28] audit: type=1400 audit(1782397126.971:492): avc: denied { create } for pid=4983 comm="syz.3.380" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 103.377918][ T5005] loop5: detected capacity change from 0 to 764 [ 103.424718][ T5009] loop0: detected capacity change from 0 to 764 [ 103.536998][ T5005] netlink: 8 bytes leftover after parsing attributes in process `syz.5.388'. [ 103.549552][ T5005] netlink: 4 bytes leftover after parsing attributes in process `syz.5.388'. [ 103.559625][ T5005] netlink: 'syz.5.388': attribute type 7 has an invalid length. [ 104.401919][ T3870] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 104.436577][ T3870] CPU: 1 UID: 0 PID: 3870 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(lazy) [ 104.436609][ T3870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 104.436621][ T3870] Call Trace: [ 104.436628][ T3870] [ 104.436636][ T3870] __dump_stack+0x1d/0x30 [ 104.436660][ T3870] dump_stack_lvl+0x95/0xd0 [ 104.436761][ T3870] dump_stack+0x15/0x1b [ 104.436779][ T3870] dump_header+0x80/0x240 [ 104.436801][ T3870] oom_kill_process+0x295/0x350 [ 104.436854][ T3870] out_of_memory+0x981/0xbc0 [ 104.436912][ T3870] try_charge_memcg+0x621/0xa00 [ 104.436960][ T3870] charge_memcg+0x6d/0x120 [ 104.437003][ T3870] mem_cgroup_swapin_charge_folio+0xc2/0x150 [ 104.437046][ T3870] swap_cache_alloc_folio+0x47b/0x5e0 [ 104.437123][ T3870] swap_cluster_readahead+0x2b1/0x460 [ 104.437155][ T3870] swapin_readahead+0xd8/0x8a0 [ 104.437276][ T3870] ? _raw_spin_unlock_irqrestore+0x9/0x30 [ 104.437307][ T3870] ? hrtimer_start_range_ns+0x108/0x120 [ 104.437341][ T3870] ? __rcu_read_unlock+0x4e/0x70 [ 104.437370][ T3870] ? swap_cache_get_folio+0x1f7/0x200 [ 104.437418][ T3870] do_swap_page+0x2a2/0x1ec0 [ 104.437442][ T3870] ? __schedule+0x799/0xd10 [ 104.437587][ T3870] ? __rcu_read_lock+0x36/0x50 [ 104.437615][ T3870] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 104.437647][ T3870] handle_mm_fault+0xb3c/0x2da0 [ 104.437685][ T3870] do_user_addr_fault+0x634/0x1060 [ 104.437795][ T3870] ? trace_page_fault_user+0x1f/0xa0 [ 104.437826][ T3870] exc_page_fault+0x62/0xa0 [ 104.437863][ T3870] asm_exc_page_fault+0x26/0x30 [ 104.437888][ T3870] RIP: 0033:0x7fb1bbea7fd7 [ 104.437978][ T3870] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 104.437999][ T3870] RSP: 002b:00007ffc27eb7cb0 EFLAGS: 00010202 [ 104.438015][ T3870] RAX: 0000000000000000 RBX: 000055556a665500 RCX: 00007fb1bbea7fd7 [ 104.438084][ T3870] RDX: 00007ffc27eb7cf0 RSI: 0000000000000000 RDI: 0000000000000000 [ 104.438100][ T3870] RBP: 00007ffc27eb7d5c R08: 0000000000000000 R09: 0000000000000000 [ 104.438168][ T3870] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 104.438183][ T3870] R13: 00000000000927c0 R14: 0000000000018db3 R15: 00007ffc27eb7db0 [ 104.438206][ T3870] [ 104.438230][ T3870] memory: usage 307200kB, limit 307200kB, failcnt 79 [ 104.812369][ T3870] memory+swap: usage 2780kB, limit 9007199254740988kB, failcnt 0 [ 104.828528][ T3870] kmem: usage 2012kB, limit 9007199254740988kB, failcnt 0 [ 104.837101][ T3870] Memory cgroup stats for /syz5: [ 104.837340][ T3870] cache 4096 [ 104.846726][ T3870] rss 12288 [ 104.849952][ T3870] shmem 0 [ 104.853124][ T3870] mapped_file 0 [ 104.857317][ T3870] dirty 0 [ 104.860524][ T3870] writeback 0 [ 104.864601][ T3870] workingset_refault_anon 16 [ 104.869276][ T3870] workingset_refault_file 0 [ 104.874139][ T3870] swap 593920 [ 104.877529][ T3870] swapcached 659456 [ 104.881399][ T3870] pgpgin 29684 [ 104.885219][ T3870] pgpgout 29680 [ 104.889331][ T3870] pgfault 36468 [ 104.893199][ T3870] pgmajfault 5 [ 104.897262][ T3870] inactive_anon 0 [ 104.901104][ T3870] active_anon 12288 [ 104.904974][ T3870] inactive_file 0 [ 104.910293][ T3870] active_file 4096 [ 104.914488][ T3870] unevictable 0 [ 104.918495][ T3870] hierarchical_memory_limit 314572800 [ 104.924346][ T3870] hierarchical_memsw_limit 9223372036854771712 [ 104.931002][ T3870] total_cache 4096 [ 104.934879][ T3870] total_rss 12288 [ 104.938751][ T3870] total_shmem 0 [ 104.942576][ T3870] total_mapped_file 0 [ 104.946691][ T3870] total_dirty 0 [ 104.950512][ T3870] total_writeback 0 [ 104.954499][ T3870] total_workingset_refault_anon 16 [ 104.961091][ T3870] total_workingset_refault_file 0 [ 104.966784][ T3870] total_swap 593920 [ 104.971081][ T3870] total_swapcached 659456 [ 104.975668][ T3870] total_pgpgin 29684 [ 104.979680][ T3870] total_pgpgout 29680 [ 104.984203][ T3870] total_pgfault 36468 [ 104.988488][ T3870] total_pgmajfault 5 [ 104.992650][ T3870] total_inactive_anon 0 [ 104.996924][ T3870] total_active_anon 12288 [ 105.001363][ T3870] total_inactive_file 0 [ 105.005812][ T3870] total_active_file 4096 [ 105.010112][ T3870] total_unevictable 0 [ 105.014353][ T3870] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.388,pid=5004,uid=0 [ 105.030976][ T3870] Memory cgroup out of memory: Killed process 5004 (syz.5.388) total-vm:96348kB, anon-rss:1248kB, file-rss:22668kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 105.049392][ T5012] syz.5.388 (5012) used greatest stack depth: 8632 bytes left [ 105.153961][ T5035] loop4: detected capacity change from 0 to 512 [ 105.160722][ T5035] EXT4-fs: Ignoring removed oldalloc option [ 105.183401][ T5035] EXT4-fs: Ignoring removed nomblk_io_submit option [ 105.190875][ T5035] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 105.200783][ T5035] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.397: bg 0: block 104: invalid block bitmap [ 105.213792][ T5035] fserror_report: 4 callbacks suppressed [ 105.213808][ T5035] loop4: lost filesystem error report for type 5 error -117 [ 105.219864][ T5035] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 105.227223][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 105.227244][ C1] EXT4-fs (loop4): initial error at time 1782397129: ext4_validate_block_bitmap:432 [ 105.227287][ C1] EXT4-fs (loop4): last error at time 1782397129: ext4_validate_block_bitmap:432 [ 105.264916][ T5035] loop4: lost filesystem error report for type 5 error -117 [ 105.265096][ T5035] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.397: invalid indirect mapped block 1 (level 1) [ 105.286977][ T5035] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 105.287163][ T5035] EXT4-fs (loop4): 1 truncate cleaned up [ 105.303068][ T5035] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.328577][ T5039] FAULT_INJECTION: forcing a failure. [ 105.328577][ T5039] name failslab, interval 1, probability 0, space 0, times 0 [ 105.344121][ T5039] CPU: 1 UID: 0 PID: 5039 Comm: syz.0.398 Not tainted syzkaller #0 PREEMPT(lazy) [ 105.344148][ T5039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 105.344162][ T5039] Call Trace: [ 105.344170][ T5039] [ 105.344180][ T5039] __dump_stack+0x1d/0x30 [ 105.344204][ T5039] dump_stack_lvl+0x95/0xd0 [ 105.344292][ T5039] dump_stack+0x15/0x1b [ 105.344311][ T5039] should_fail_ex+0x25e/0x270 [ 105.344338][ T5039] should_failslab+0x8c/0xb0 [ 105.344430][ T5039] kmem_cache_alloc_node_noprof+0x85/0x3d0 [ 105.344453][ T5039] ? __alloc_skb+0x2db/0x6f0 [ 105.344479][ T5039] ? __alloc_skb+0x2db/0x6f0 [ 105.344581][ T5039] __alloc_skb+0x2db/0x6f0 [ 105.344603][ T5039] ? __alloc_skb+0x205/0x6f0 [ 105.344628][ T5039] netlink_ack+0xfd/0x530 [ 105.344649][ T5039] ? __pfx_netlbl_unlabel_staticadddef+0x10/0x10 [ 105.344675][ T5039] netlink_rcv_skb+0x18d/0x220 [ 105.344736][ T5039] ? __pfx_genl_rcv_msg+0x10/0x10 [ 105.344817][ T5039] genl_rcv+0x28/0x40 [ 105.344897][ T5039] netlink_unicast+0x5a7/0x680 [ 105.344954][ T5039] netlink_sendmsg+0x5be/0x6f0 [ 105.344976][ T5039] ? __pfx_netlink_sendmsg+0x10/0x10 [ 105.345000][ T5039] ____sys_sendmsg+0x532/0x580 [ 105.345078][ T5039] ___sys_sendmsg+0x195/0x1e0 [ 105.345116][ T5039] __x64_sys_sendmsg+0xd4/0x160 [ 105.345219][ T5039] x64_sys_call+0x194c/0x3020 [ 105.345247][ T5039] do_syscall_64+0x136/0x3c0 [ 105.345279][ T5039] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.345306][ T5039] RIP: 0033:0x7fb84338ce59 [ 105.345386][ T5039] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.345405][ T5039] RSP: 002b:00007fb841ddf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 105.345494][ T5039] RAX: ffffffffffffffda RBX: 00007fb843605fa0 RCX: 00007fb84338ce59 [ 105.345512][ T5039] RDX: 0000000000000000 RSI: 0000200000000d40 RDI: 0000000000000004 [ 105.345524][ T5039] RBP: 00007fb841ddf090 R08: 0000000000000000 R09: 0000000000000000 [ 105.345537][ T5039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 105.345551][ T5039] R13: 00007fb843606038 R14: 00007fb843605fa0 R15: 00007ffdb659ce98 [ 105.345574][ T5039] [ 105.584893][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.634232][ T5045] loop0: detected capacity change from 0 to 512 [ 105.636431][ T5046] random: crng reseeded on system resumption [ 105.640580][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 105.640595][ T28] audit: type=1400 audit(1782397129.431:504): avc: denied { setopt } for pid=5043 comm="syz.3.402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 105.687470][ T5045] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 105.704842][ T5045] EXT4-fs (loop0): 1 truncate cleaned up [ 105.716818][ T5053] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 105.716818][ T5053] The task syz.4.399 (5053) triggered the difference, watch for misbehavior. [ 105.723609][ T5045] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.738512][ T5046] loop5: detected capacity change from 0 to 512 [ 105.756247][ T28] audit: type=1400 audit(1782397129.553:505): avc: denied { read } for pid=5040 comm="syz.4.399" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 105.761327][ T5046] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 105.790951][ T28] audit: type=1400 audit(1782397129.553:506): avc: denied { map } for pid=5040 comm="syz.4.399" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 105.815527][ T28] audit: type=1400 audit(1782397129.553:507): avc: denied { execute } for pid=5040 comm="syz.4.399" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 105.840509][ T28] audit: type=1400 audit(1782397129.553:508): avc: denied { write } for pid=5044 comm="syz.0.400" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 105.897364][ T46] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.962836][ T5051] loop3: detected capacity change from 0 to 512 [ 105.984562][ T5051] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 106.029825][ T5051] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.403: invalid indirect mapped block 4294967295 (level 0) [ 106.054108][ T46] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.061565][ T5051] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 106.070666][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 106.087534][ C0] EXT4-fs (loop3): initial error at time 1782397129: ext4_free_branches:1023: inode 16 [ 106.094791][ T5071] loop4: detected capacity change from 0 to 512 [ 106.097618][ C0] EXT4-fs (loop3): last error at time 1782397129: ext4_free_branches:1023: inode 16 [ 106.114375][ T5051] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.403: invalid indirect mapped block 4294967295 (level 1) [ 106.129332][ T5051] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 106.132506][ T5051] EXT4-fs (loop3): 1 orphan inode deleted [ 106.161224][ T5051] EXT4-fs (loop3): 1 truncate cleaned up [ 106.174268][ T5051] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.185295][ T5071] ext4: Unknown parameter 'noacl' [ 106.195365][ T46] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.209242][ T28] audit: type=1400 audit(1782397129.965:509): avc: denied { create } for pid=5050 comm="syz.3.403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 106.218627][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.241395][ T5051] EXT4-fs error (device loop3): ext4_find_dest_de:2050: inode #2: block 13: comm syz.3.403: bad entry in directory: rec_len is too small for name_len - offset=12, inode=2, rec_len=12, size=1024 fake=0 [ 106.255113][ T28] audit: type=1400 audit(1782397130.002:510): avc: denied { write } for pid=5050 comm="syz.3.403" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 106.369050][ T46] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.414475][ T5079] loop0: detected capacity change from 0 to 128 [ 106.513303][ T5082] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 106.522785][ T5082] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 106.530253][ T5082] vhci_hcd vhci_hcd.0: default hub control req: 9a08 v0009 i0007 l0 [ 106.539647][ T5082] xt_hashlimit: max too large, truncated to 1048576 [ 106.734617][ T46] bridge_slave_1: left allmulticast mode [ 106.741161][ T46] bridge_slave_1: left promiscuous mode [ 106.751348][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.817470][ T46] bridge_slave_0: left allmulticast mode [ 106.834893][ T46] bridge_slave_0: left promiscuous mode [ 106.898793][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.071424][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 107.105060][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 107.126711][ T46] bond0 (unregistering): Released all slaves [ 107.136880][ T28] audit: type=1400 audit(1782397130.835:511): avc: denied { write } for pid=5084 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 107.197475][ T3018] 8021q: adding VLAN 0 to HW filter on device eth7 [ 107.208381][ T28] audit: type=1400 audit(1782397130.881:512): avc: denied { write } for pid=5099 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 107.313795][ T28] audit: type=1400 audit(1782397131.003:513): avc: denied { write } for pid=5103 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 107.384849][ T3018] 8021q: adding VLAN 0 to HW filter on device eth6 [ 107.432439][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.471326][ T46] tipc: Disabling bearer [ 107.477313][ T46] tipc: Left network mode [ 107.491846][ T46] hsr_slave_0: left promiscuous mode [ 107.509933][ T46] hsr_slave_1: left promiscuous mode [ 107.545734][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.573171][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 107.587480][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.597650][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 107.617392][ T46] veth1_macvtap: left promiscuous mode [ 107.625402][ T46] veth0_macvtap: left promiscuous mode [ 107.640624][ T46] veth1_vlan: left promiscuous mode [ 107.651511][ T46] veth0_vlan: left promiscuous mode [ 108.161406][ T46] team0 (unregistering): Port device team_slave_1 removed [ 108.275969][ T46] team0 (unregistering): Port device team_slave_0 removed [ 108.408836][ T5157] loop4: detected capacity change from 0 to 8192 [ 108.609432][ T3018] 8021q: adding VLAN 0 to HW filter on device eth5 [ 108.935384][ T5169] loop4: detected capacity change from 0 to 512 [ 109.084867][ T5169] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.419: bg 0: block 169: padding at end of block bitmap is not set [ 109.128458][ T5169] loop4: lost filesystem error report for type 5 error -117 [ 109.128743][ T5169] EXT4-fs error (device loop4): ext4_acquire_dquot:7041: comm syz.4.419: Failed to acquire dquot type 0 [ 109.147510][ T5169] loop4: lost filesystem error report for type 5 error -117 [ 109.148058][ T5169] EXT4-fs (loop4): 1 truncate cleaned up [ 109.161752][ T5169] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.174380][ T5169] ext4 filesystem being mounted at /96/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.302411][ T3018] 8021q: adding VLAN 0 to HW filter on device eth8 [ 109.336101][ T5069] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.362096][ T5069] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.401777][ T5069] bridge_slave_0: entered allmulticast mode [ 109.518436][ T5069] bridge_slave_0: entered promiscuous mode [ 109.537650][ T5069] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.556988][ T5069] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.630717][ T5069] bridge_slave_1: entered allmulticast mode [ 109.637466][ T5069] bridge_slave_1: entered promiscuous mode [ 109.677658][ T5069] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.689907][ T5069] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.710756][ T5169] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.735786][ T5169] ================================================================== [ 109.744192][ T5169] BUG: KCSAN: data-race in __lru_add_drain_all / folio_add_lru [ 109.754112][ T5169] [ 109.757473][ T5169] read-write to 0xffff888237c26528 of 1 bytes by task 5207 on cpu 0: [ 109.766899][ T5169] folio_add_lru+0xa4/0x250 [ 109.771446][ T5169] shmem_get_folio_gfp+0x7cc/0xd90 [ 109.778012][ T5169] shmem_write_begin+0xfc/0x1f0 [ 109.783100][ T5169] generic_perform_write+0x186/0x490 [ 109.788496][ T5169] shmem_file_write_iter+0xc5/0xf0 [ 109.793993][ T5169] vfs_write+0x57d/0x990 [ 109.798429][ T5169] ksys_write+0xdc/0x1a0 [ 109.802831][ T5169] __x64_sys_write+0x40/0x50 [ 109.807507][ T5169] x64_sys_call+0x27e1/0x3020 [ 109.812495][ T5169] do_syscall_64+0x136/0x3c0 [ 109.817107][ T5169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.823445][ T5169] [ 109.825760][ T5169] read to 0xffff888237c26528 of 1 bytes by task 5169 on cpu 1: [ 109.833566][ T5169] __lru_add_drain_all+0x17e/0x450 [ 109.839030][ T5169] lru_add_drain_all+0x10/0x20 [ 109.843789][ T5169] invalidate_bdev+0x47/0x70 [ 109.848426][ T5169] ext4_put_super+0x614/0x7c0 [ 109.853202][ T5169] generic_shutdown_super+0xee/0x220 [ 109.858592][ T5169] kill_block_super+0x2a/0x70 [ 109.863431][ T5169] ext4_kill_sb+0x42/0x80 [ 109.867931][ T5169] deactivate_locked_super+0x75/0x1c0 [ 109.873926][ T5169] deactivate_super+0x97/0xa0 [ 109.878628][ T5169] cleanup_mnt+0x2c3/0x340 [ 109.883320][ T5169] __cleanup_mnt+0x19/0x20 [ 109.888177][ T5169] task_work_run+0x130/0x1a0 [ 109.892946][ T5169] exit_to_user_mode_loop+0x1e4/0x8c0 [ 109.898379][ T5169] do_syscall_64+0x23c/0x3c0 [ 109.903072][ T5169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.909409][ T5169] [ 109.911734][ T5169] value changed: 0x16 -> 0x18 [ 109.916481][ T5169] [ 109.918877][ T5169] Reported by Kernel Concurrency Sanitizer on: [ 109.925375][ T5169] CPU: 1 UID: 0 PID: 5169 Comm: syz.4.419 Not tainted syzkaller #0 PREEMPT(lazy) SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 109.934668][ T5169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 109.944718][ T5169] ================================================================== [ 109.985184][ T5069] team0: Port device team_slave_0 added [ 109.992119][ T5069] team0: Port device team_slave_1 added [ 110.019282][ T5069] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.026585][ T5069] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 110.096910][ T5207] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.112268][ T5069] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.119881][ T5207] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.165231][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 110.189231][ T5069] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.196467][ T5069] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 110.223032][ T5069] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.492059][ T46] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.541451][ T46] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.594674][ T46] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.658850][ T46] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.816267][ T3018] 8021q: adding VLAN 0 to HW filter on device eth9 [ 110.914953][ T3018] 8021q: adding VLAN 0 to HW filter on device eth10 [ 110.948821][ T46] bridge_slave_1: left allmulticast mode [ 110.954643][ T46] bridge_slave_1: left promiscuous mode [ 110.960758][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.969141][ T46] bridge_slave_0: left allmulticast mode [ 110.974885][ T46] bridge_slave_0: left promiscuous mode [ 110.981122][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.017800][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 111.017818][ T28] audit: type=1400 audit(1782397134.464:525): avc: denied { write } for pid=5240 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 111.050716][ T28] audit: type=1400 audit(1782397134.483:526): avc: denied { write } for pid=5251 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 111.094193][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 111.104312][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 111.114259][ T46] bond0 (unregistering): Released all slaves [ 111.122731][ T46] bond1 (unregistering): Released all slaves [ 111.145973][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 111.155480][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 111.165019][ T46] bond0 (unregistering): Released all slaves [ 111.172618][ T46] bond1 (unregistering): Released all slaves [ 111.181280][ T3018] 8021q: adding VLAN 0 to HW filter on device eth11 [ 111.216713][ T46] tipc: Left network mode [ 111.223992][ T46] hsr_slave_0: left promiscuous mode [ 111.229877][ T46] hsr_slave_1: left promiscuous mode [ 111.235902][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.243369][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 111.251692][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.259881][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 111.268499][ T46] hsr_slave_0: left promiscuous mode [ 111.274497][ T46] hsr_slave_1: left promiscuous mode [ 111.278735][ T28] audit: type=1400 audit(1782397134.707:527): avc: denied { write } for pid=5254 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 111.281279][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 111.314685][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 111.325789][ T46] veth1_macvtap: left promiscuous mode [ 111.325777][ T28] audit: type=1400 audit(1782397134.754:528): avc: denied { write } for pid=5265 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 111.331591][ T46] veth0_macvtap: left promiscuous mode [ 111.359185][ T46] veth1_vlan: left promiscuous mode [ 111.365018][ T46] veth0_vlan: left promiscuous mode [ 111.420064][ T46] team0 (unregistering): Port device team_slave_1 removed [ 111.429501][ T46] team0 (unregistering): Port device team_slave_0 removed [ 111.477278][ T46] team0 (unregistering): Port device team_slave_1 removed [ 111.486719][ T46] team0 (unregistering): Port device team_slave_0 removed [ 111.519426][ T3018] 8021q: adding VLAN 0 to HW filter on device eth12 [ 111.591946][ T28] audit: type=1400 audit(1782397135.006:529): avc: denied { write } for pid=5269 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 111.615778][ T28] audit: type=1400 audit(1782397135.006:530): avc: denied { write } for pid=5280 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 111.625176][ T3018] 8021q: adding VLAN 0 to HW filter on device eth14 [ 111.706788][ T28] audit: type=1400 audit(1782397135.119:531): avc: denied { write } for pid=5284 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 111.743758][ T28] audit: type=1400 audit(1782397135.147:532): avc: denied { write } for pid=5295 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 111.775530][ T3018] 8021q: adding VLAN 0 to HW filter on device eth13 [ 111.856074][ T28] audit: type=1400 audit(1782397135.259:533): avc: denied { write } for pid=5299 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 111.880701][ T28] audit: type=1400 audit(1782397135.259:534): avc: denied { write } for pid=5310 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 111.892999][ T3018] 8021q: adding VLAN 0 to HW filter on device eth15 [ 111.995314][ T3018] 8021q: adding VLAN 0 to HW filter on device eth16 [ 112.009348][ T46] IPVS: stop unused estimator thread 0... [ 112.072078][ T46] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 112.083057][ T46] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.135592][ T46] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 112.146404][ T46] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.210024][ T46] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 112.220595][ T46] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.274645][ T46] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 112.285449][ T46] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.360667][ T46] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 112.371764][ T46] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.423953][ T46] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 112.434736][ T46] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.477855][ T46] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 112.488694][ T46] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.501922][ T3018] 8021q: adding VLAN 0 to HW filter on device eth17 [ 112.552626][ T46] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 112.563434][ T46] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.627905][ T3018] 8021q: adding VLAN 0 to HW filter on device eth18 [ 112.636100][ T46] bridge_slave_1: left allmulticast mode [ 112.642034][ T46] bridge_slave_1: left promiscuous mode [ 112.648139][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.656483][ T46] bridge_slave_0: left allmulticast mode [ 112.662681][ T46] bridge_slave_0: left promiscuous mode [ 112.668965][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.678176][ T46] bridge_slave_1: left allmulticast mode [ 112.684204][ T46] bridge_slave_1: left promiscuous mode [ 112.690001][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.697922][ T46] bridge_slave_0: left allmulticast mode [ 112.703725][ T46] bridge_slave_0: left promiscuous mode [ 112.709977][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.719049][ T46] bridge_slave_1: left allmulticast mode [ 112.726291][ T46] bridge_slave_1: left promiscuous mode [ 112.732782][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.741086][ T46] bridge_slave_0: left allmulticast mode [ 112.747497][ T46] bridge_slave_0: left promiscuous mode [ 112.753745][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.819615][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 112.831595][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 112.841796][ T46] bond0 (unregistering): Released all slaves [ 112.860079][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 112.870292][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 112.879559][ T46] bond0 (unregistering): Released all slaves [ 112.906346][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 112.916489][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 112.927745][ T46] bond0 (unregistering): Released all slaves [ 112.985671][ T46] hsr_slave_0: left promiscuous mode [ 112.992488][ T46] hsr_slave_1: left promiscuous mode [ 112.998635][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.006771][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 113.014503][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.023058][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 113.030875][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 113.038866][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 113.047870][ T46] hsr_slave_0: left promiscuous mode [ 113.053680][ T46] hsr_slave_1: left promiscuous mode [ 113.059353][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.066809][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 113.074735][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.082376][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 113.093571][ T46] batadv0: left promiscuous mode [ 113.099154][ T46] veth1_macvtap: left promiscuous mode [ 113.105126][ T46] veth0_macvtap: left promiscuous mode [ 113.111042][ T46] veth1_vlan: left promiscuous mode [ 113.116797][ T46] veth0_vlan: left promiscuous mode [ 113.122571][ T46] veth1_macvtap: left promiscuous mode [ 113.128152][ T46] veth0_macvtap: left promiscuous mode [ 113.133809][ T46] veth1_vlan: left promiscuous mode [ 113.139131][ T46] veth0_vlan: left promiscuous mode [ 113.222269][ T46] team0 (unregistering): Port device team_slave_1 removed [ 113.233922][ T46] team0 (unregistering): Port device team_slave_0 removed [ 113.268904][ T46] team0 (unregistering): Port device team_slave_1 removed [ 113.278311][ T46] team0 (unregistering): Port device team_slave_0 removed [ 113.333115][ T46] team0 (unregistering): Port device team_slave_1 removed [ 113.343079][ T46] team0 (unregistering): Port device team_slave_0 removed [ 113.372803][ T3018] 8021q: adding VLAN 0 to HW filter on device eth19 [ 113.498749][ T3018] 8021q: adding VLAN 0 to HW filter on device eth20 [ 113.610320][ T3018] 8021q: adding VLAN 0 to HW filter on device eth21 [ 113.710348][ T3018] 8021q: adding VLAN 0 to HW filter on device eth22 [ 113.808006][ T3018] 8021q: adding VLAN 0 to HW filter on device eth23 [ 113.900965][ T3018] 8021q: adding VLAN 0 to HW filter on device eth24 [ 114.125861][ T46] IPVS: stop unused estimator thread 0...