last executing test programs: 1m22.832739054s ago: executing program 4 (id=27): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newroute={0x30, 0x18, 0x1ef, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x2}}]}, 0x30}, 0x1, 0x11}, 0x0) 1m22.766653948s ago: executing program 4 (id=28): lgetxattr(0x0, 0x0, 0x0, 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x1021, 0x0) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000005e80)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}, {{&(0x7f0000000180)={0xa, 0x100, 0x9, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x7}, 0x1c, &(0x7f0000000940)=[{&(0x7f00000026c0)='+', 0x1}], 0x1}}], 0x2, 0x0) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000240)={0x0, 0xf}, 0x8) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) mincore(&(0x7f0000ff4000/0xc000)=nil, 0xc000, &(0x7f00000002c0)=""/42) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) write$P9_RCLUNK(r1, &(0x7f0000000280)={0x7, 0x79, 0x2}, 0x7) sendmsg$NL80211_CMD_GET_POWER_SAVE(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x1c, 0x0, 0x1, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000001}, 0x1) preadv(r1, &(0x7f0000001300)=[{&(0x7f0000002240)=""/4115, 0x1013}], 0x1, 0x142, 0xfffffffc) 1m22.653437364s ago: executing program 4 (id=29): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10) sendmmsg$inet(r0, &(0x7f0000003100)=[{{&(0x7f0000000080)={0x2, 0x4e1e, @multicast1}, 0x10, 0x0}}], 0x1, 0xc044) r1 = syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@nojournal_checksum}]}, 0x1, 0x5bc, &(0x7f0000001440)="$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") preadv(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x6, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, r2) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x77f, &(0x7f0000000600)="$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") r3 = open(&(0x7f0000000440)='./bus\x00', 0x2660c0, 0x0) socket$kcm(0xa, 0x2, 0x73) pwritev2(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f0000000e40)="85", 0x1}], 0x1, 0x80000, 0x2, 0x11) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'dummy0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000140)=ANY=[@ANYRESHEX=r3], 0x64}}, 0x4000811) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4c00000000010300000000000000000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000000c000480050001"], 0x4c}}, 0x20048004) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001300)={0x6, 0x13, &(0x7f0000000400)=ANY=[@ANYRESDEC=0x0, @ANYRES32, @ANYRESHEX, @ANYRES32, @ANYRES64], &(0x7f00000001c0)='syzkaller\x00', 0x10000, 0x52, &(0x7f00000004c0)=""/82, 0x41000, 0x9, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000540)={0x1, 0x10, 0x7, 0x3}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000580)=[{0x2, 0x4, 0x10}, {0x3, 0x5, 0x1, 0x2}, {0x5, 0x1, 0x7, 0x6}], 0x10, 0x309b}, 0x94) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb807e0"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r6, 0x35, 0x0, 0x6, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000000180)=[0x0, 0x0], 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYBLOB="30000000eb4b1e9991d601000000", @ANYRES32, @ANYRES32, @ANYRES64=r8], 0x20) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0xffff, 0x4, 0x5, 0x1000, 0x1, 0xffff2d79, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x24, 0x2, 0x3}, 0x50) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000f00)=ANY=[@ANYRES32=r9, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES64=r8], 0x20) sendmsg$DEVLINK_CMD_PORT_SET(r7, &(0x7f00000011c0)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001180)={&(0x7f0000000f80)=ANY=[@ANYBLOB='\x00=\x00\x00', @ANYRES16=0x0, @ANYBLOB="000825bd7000fddbdf2506000000080001007063690011000200303030303a30303a31302e3000000000080003000000000006000400000000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000300030000000600040000000000080001007063690011000200303030303a30303a31302e3000000000080003000000000006000400000000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000300020000000600040000000000080001007063690011000200303030303a30303a31302e3000000000080003000300000006000400010000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000300000006000400020000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000300030000000600040001000000080001007063690011000200303030303a30303a31302e300000000008000300030000000600040001000000080001007063690011000200303030303a30303a31302e3000000000080003000300000006000400010000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000300000000000600040003000000"], 0x1e0}, 0x1, 0x0, 0x0, 0x50}, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x9, 0xfffffffd, 0x83, 0xd44, 0x20, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x1ff}, 0x50) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000740)={@map=r10, 0xffffffffffffffff, 0x33, 0x0, 0x0, @void, @value, @void, @void, r8}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001200)={0xffffffffffffffff, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000006c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6, &(0x7f00000012c0)=[0x0, 0x0, 0x0], &(0x7f0000001280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x61, &(0x7f0000000780)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000001240), &(0x7f0000000800), 0x8, 0x9f, 0x8, 0x8, &(0x7f0000000840)}}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000ec0)=ANY=[@ANYRES32=r4, @ANYRES16=r1, @ANYRESHEX=r5, @ANYRES32=r11, @ANYRESHEX=r11], 0x20) 1m22.35972315s ago: executing program 4 (id=31): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000180)='ramfs\x00', 0x2014050, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="d4010000200000001800000000000000000000000000000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) 1m22.262405956s ago: executing program 4 (id=32): r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010029bd7000fbdbdf25ff010000060000800000000000000001fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000fdffffffffffffff000000000000000000000000000000000500000000000000000000000020000000000000000000000000000000000000010002000000000044000500fe800000000000000000000000000044000004d42b0000000a000000e00000010000000000000000000000000000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x24008040}, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000)=0x1, 0x4) connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r1, &(0x7f0000004d00), 0x7fffffffffffd33, 0x20000890) modify_ldt$write2(0x11, &(0x7f0000000400)={0x13, 0x20001000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10) r3 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x6, 0x441e, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x6, 0x2, 0xb, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) sendfile(r4, r4, 0x0, 0x1) write$P9_RFLUSH(r4, &(0x7f0000000080)={0x7, 0x6d, 0x1}, 0x7) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x40, 0x38, 0x9}]}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000080)) syz_clone(0x20260000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_io_uring_setup(0x20039, &(0x7f0000000300)={0x0, 0x1d30, 0x800, 0x0, 0x801, 0x0, r0}, &(0x7f0000000240), &(0x7f0000000180)) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r6, &(0x7f0000000440)="a6e2", 0x2, 0x850, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, 0xc00, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff78, 0x0, 0x0}, &(0x7f0000000340)=0x40) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r5, 0x21, &(0x7f0000000440), 0x1) pread64(r5, &(0x7f00000005c0)=""/196, 0xc4, 0x7) r7 = memfd_secret(0x80000) io_uring_register$IORING_REGISTER_EVENTFD(r7, 0x4, &(0x7f0000000140), 0x1) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r8) socket$inet_udp(0x2, 0x2, 0x0) 1m22.058303098s ago: executing program 4 (id=34): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x880) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x800) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000140)={0x244, 0x0, 0x600, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x160, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x1, @loopback, 0x10}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x24d, @remote, 0x4}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x46}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x7ff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e22, @empty}}}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x10000, @private1, 0x9}}, {0x14, 0x2, @in={0x2, 0x4e21, @rand_addr=0x64010100}}}}]}, @TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2449}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x549}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x52713da3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x75d9}]}]}, @TIPC_NLA_NET={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}]}, @TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1d}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xf2e9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xea2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffffb}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}]}]}, 0x244}, 0x1, 0x0, 0x0, 0x40080c0}, 0x2004c000) r2 = creat(&(0x7f0000000340)='./file0\x00', 0x28) close(r2) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r4 = syz_pidfd_open(r3, 0x0) wait4(0x0, 0x0, 0x80000000, 0x0) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) r7 = pidfd_getfd(r6, r4, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r7}}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x900}, [{0x8, 0x1, 0x2}]}, 0x20}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000f, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 1m22.057561758s ago: executing program 32 (id=34): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x880) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x800) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000140)={0x244, 0x0, 0x600, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x160, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x1, @loopback, 0x10}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x24d, @remote, 0x4}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x46}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x7ff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e22, @empty}}}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x10000, @private1, 0x9}}, {0x14, 0x2, @in={0x2, 0x4e21, @rand_addr=0x64010100}}}}]}, @TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2449}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x549}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x52713da3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x75d9}]}]}, @TIPC_NLA_NET={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}]}, @TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1d}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xf2e9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xea2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffffb}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}]}]}, 0x244}, 0x1, 0x0, 0x0, 0x40080c0}, 0x2004c000) r2 = creat(&(0x7f0000000340)='./file0\x00', 0x28) close(r2) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r4 = syz_pidfd_open(r3, 0x0) wait4(0x0, 0x0, 0x80000000, 0x0) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) r7 = pidfd_getfd(r6, r4, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r7}}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x900}, [{0x8, 0x1, 0x2}]}, 0x20}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000f, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 58.878134109s ago: executing program 1 (id=343): setuid(0xee00) (async) r0 = semget$private(0x0, 0x20000000102, 0x0) semctl$SETALL(r0, 0x0, 0x11, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'macvtap0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071041f000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) (async) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000001000ffff2abd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15010420000000001c00128009000100766c616e000000000c00028006000100040500b4ac1c6f20c870ca7b1640def3b0834f4bf53b17995830ab9f7740f142fce471a3c4027ed5be775597f28490f2c28fc7c9dc317f61c377a5fecd2425f160d76cc310d95bd779e59c870eacdeb493ad70d6aa4cad7f2cef519f000000", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00v'], 0x58}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) (async) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r3, 0x4b47, &(0x7f0000002040)={0x80, 0xf8, 0x1fd}) 58.832175041s ago: executing program 1 (id=345): fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0x0, [0x200000000140, 0x0, 0x0, 0x20000000016b, 0x2000000001a0, 0xfffffffffffffffd], 0x0, 0x0, 0x0}, 0x138) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, 0x0, &(0x7f00000001c0)}, 0x20) r0 = syz_io_uring_setup(0x4de1, &(0x7f0000000480)={0x0, 0x28ad, 0x800, 0x9, 0x70}, &(0x7f0000000680)=0x0, &(0x7f0000000440)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) connect$qrtr(0xffffffffffffffff, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) perf_event_open(&(0x7f0000000140)={0x7, 0x80, 0x29, 0x2, 0x0, 0x0, 0x0, 0xb, 0x5330c, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000340), 0x8}, 0x130a28, 0x100000000006, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x9, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x23456}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') socket$inet6(0xa, 0x80002, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000000c0)=0x9) io_setup(0x6, &(0x7f0000001780)) pipe2(&(0x7f0000001cc0), 0x800) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@getqdisc={0x48, 0x26, 0x400, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xb, 0xa}, {0xf, 0xfff2}, {0xfff3, 0x7}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x24008c80}, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x3, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000018000000000000002000000850000002000750000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r7, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.freeze\x00', 0x275a, 0x0) write$UHID_CREATE2(r8, &(0x7f0000000080)=ANY=[@ANYRES32=r4], 0x118) 58.805859643s ago: executing program 1 (id=348): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000025000a20000000000a01030000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000003740000001e0a01020000000000000000010000000900020073797a32000000003400038030000080090006400000000024000b802000018007000100637400001400028008000160ee00000000000040000000000900010073797a30"], 0xe4}}, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8}, 0x4e05}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xf, {"a2e3ad21e08eeb661b5e060987f70e06d038e7ff7fc6e5539b0d650e8b089b3f373b68090890e0878f0e1ac6e7049b3646959b429a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d07440936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc9d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6089ae6899d8f5c554336909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec2c0911e893d0a8c4f6777478bc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15ffffffffffffffff1243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8de7f4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5dc29a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f6435f7590000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9a53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f423500c7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02da93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d0300000000000000b378dd4dd891e937c2ea5410e0513005000000000000003911fab964c2715500b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d678746383074c6bc1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b3c7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017eef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f48451ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0da42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9cc8036cbd65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f90000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000400", 0x1000}}, 0x1006) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="8000000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002007f0000010c0002800500010000000000080007400000000008000340"], 0x80}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f00000000c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x10000010000000, 0x8}, 0xc012, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}) 58.6703488s ago: executing program 1 (id=351): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20081e, &(0x7f0000000840)={[{@grpjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xa30}}, {@grpquota}]}, 0x1, 0x52a, &(0x7f0000001440)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) openat$cgroup_ro(r0, &(0x7f0000000100)='blkio.throttle.io_serviced\x00', 0x0, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r1 = open(&(0x7f0000000000)='./file1\x00', 0x4a142, 0x36d) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x2}, 0xe) sendfile(r1, r1, 0x0, 0x1000000201005) socket(0x10, 0x3, 0x0) r4 = openat2(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)={0x210800, 0x106, 0x8}, 0x18) ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f0000000200)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010", @ANYRES8=0x0, @ANYBLOB="fe88"], 0x48}}, 0x0) r5 = socket(0xa, 0x3, 0xff) ioctl$sock_SIOCGIFBR(r5, 0x8940, &(0x7f0000000000)=@add_del={0x2, &(0x7f0000000080)='pim6reg1\x00'}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 58.296189472s ago: executing program 1 (id=354): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x652c0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x9}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001580), 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/70, 0x46, 0x2b) shmctl$IPC_RMID(0x0, 0x13) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x24000000) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="20000000070a01016566bde921dfb1dbabc03ac10000000000000000020000090900010073797a310004250041e7d0bb0da0c0608d42d8a1d4c358624e898790872e2c5e669e584294e2c0a3bff9410722ef5bd5d77a5e9c91aa5fbc06b2976361877f63e78e1864b480453a9cb7c3609b434ea6edf8b9d838e0907ddf0fd751a77939a3d5c443bce0ab8b"], 0x20}, 0x1, 0x0, 0x0, 0x2000015}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000b40)=@newqdisc={0x58, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x20}}, @TCA_RATE={0x6, 0x5, {0x7, 0x9}}]}, 0xfcf1}}, 0xc014) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r7 = socket$inet6(0xa, 0x1, 0x84) setsockopt$sock_linger(r7, 0x1, 0xd, &(0x7f0000000040)={0x1, 0xffffffff}, 0x8) close(r7) r8 = io_uring_setup(0x68af, &(0x7f0000000480)={0x0, 0x0, 0x1880, 0x1}) socket$qrtr(0x2a, 0x2, 0x0) close_range(r8, 0xffffffffffffffff, 0x0) 58.242345044s ago: executing program 1 (id=355): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00'}) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000000)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYRESDEC=r0, @ANYRES16, @ANYBLOB="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"], 0x54}}, 0x4000080) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 58.174451869s ago: executing program 33 (id=355): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00'}) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000000)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYRESDEC=r0, @ANYRES16, @ANYBLOB="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"], 0x54}}, 0x4000080) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 42.282547628s ago: executing program 3 (id=609): r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000080)={0x0, 0xfdfd, 0x8, 0x1b, 0x100, &(0x7f00000000c0)="387ed7626d850509a2d6c1aa38f15cd00f85c263cb226db671261fff7ce9c555f189afa63530db6dd493f28fd98872219ae21b3e3b4523ae2594f47d8f62b480c4160b1f90ac9c41fae6ab12ac4c113fef588684ef495689092883b902a41cd75387ef6f7bc7d460d5e665f398ff95596dc94ec97003a3db08e500c2fb07e11aa4031a61c51caf7a65a2b613bda33f3eaeae635d7cd81761e74c38a7695800a15516eb337056e02335f9a7d10aa2eaf7beb7e1f7a1e850ecb3421143c5c4ded0f083a0c524dcf320827266819b6a952db5bc96141b26c54db857edbcbbc81c7af7aadf50bc549974b6401a19cdb130282b955592efa94242065a4c8d695a2cdd9ada350defd58c775b92d348305774d3a256c7520b285d8da0db0a0000004413ed2ddf9bcbf881caf811852806175d63892a15234fbcd7a88a2a0aea45d19148f0e7dada7d6d0d77881387fdeaa02863be90b88dfff412bff40c31c6415c54ae3335e54a49d315851feffe30d999c36def4df7df747695ef060000001bbe1b649f42f310859122c0d2c1e558dc6586958a28374f386ecf369274e43003a09b5159ea515eb44521901ef0d00baa91c10a8e44a76aac3468a15bd3d45ad389977467f306f9bcde071b30769795eed2f1580414d168f557cd90040c4bd2a3d6bc509254a12cece59181fcb5bad8c24bd9f8f78d17ab01831325501e80d899e9252f99d3a2666343392fda115048e4f4dd9f45657f8224fc78eb1168fe0527fac33466ffffffff0000000047778566e0f3945b2bf36b6eecc7fa18914beb66ac9e519bd3330000000000000009a3237aebbe3bed781e39d5a0fb0cdc60e196f2261305feb596b5b66ab89d2d6333f699b16db68986ab3eee7b199fefb5f79ffb2d1050e46982af1c56a8404755c73e74bb90e64bab9647c70ed5afca1c3d87907d14df8aa9df6f40a80ace2bb8a2aad3b0c66915927db4173181943d88c0c76d5969e2043db5bd77fd60ba0f012139929ccfec965c1f769785a4d23332d71f0875e3146afef5b20cc306d3ecee65944fe9829e0ad0c3f6bb2fdc1bc31152538db50f47dc38ba908a0d808687e478a609fe0daa0000000000000000e7f2e98597e27f3e1dba9c3c16e9fab3bda6ed33cb1c75513e2264b69d4794ded98eff9aa53d22eb77c9d93169c04ab2490bf28106f770e07eb7a9e8fdc4cbfcb11a90139264a9ee807c973167f493760278df0cc34be9e8f86f948d9a62e63ad6ca9d174d2465380b1a00ddc42915e4f3a5db640600000095a3d63904c9ecd1c313c08e29b814bd8fed1ab6d2846c73345962895d289ac77152cac2e04c93a5470774975b42091f218dd1e68a15f8226577bf9481ae0555db64a717eb23a811356d00000000ddffffff00"}) 41.944839006s ago: executing program 3 (id=613): r0 = syz_io_uring_setup(0x71e8, &(0x7f0000000000)={0x0, 0x45dd, 0x4000, 0x2, 0x23b}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_FILE_ALLOC_RANGE(r0, 0x19, &(0x7f0000000100)={0x58000000, 0x8, 0x1}, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(0xffffffffffffffff, 0x40184810, &(0x7f0000000140)={0x2, 0x1, 0x5, 0x7, 0xffffffff, 0x9}) rmdir(&(0x7f0000000180)='./file0\x00') r2 = syz_io_uring_complete(r1) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) fstat(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_GETQUOTA(0xffffffff80000701, &(0x7f00000001c0)=@nullb, r3, &(0x7f0000000280)) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000340), r2) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x58, r4, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @handle=@pci={{0x8}, {0x11}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40010}, 0x4000) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000480)='firstname\x00', 0x0, r2) syz_io_uring_setup(0x46ef, &(0x7f00000004c0)={0x0, 0x7ff1, 0x0, 0x3, 0x2ae}, &(0x7f0000000540), &(0x7f0000000580)) r5 = socket$tipc(0x1e, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r5, {0x2}}, './file0\x00'}) rmdir(&(0x7f0000000600)='./file0\x00') ioctl$BLKTRACESTOP(r6, 0x1275, 0x0) gettid() r7 = io_uring_setup(0x1ab0, &(0x7f0000000640)={0x0, 0xaac8, 0x4, 0x1, 0xde, 0x0, r6}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000008, 0x40050, r7, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x440c00, 0x14) setns(0xffffffffffffffff, 0x20000) r8 = socket$unix(0x1, 0x2, 0x0) connect$unix(r8, &(0x7f0000000700)=@abs={0x0, 0x0, 0x4e24}, 0x6e) setsockopt$RDS_CONG_MONITOR(r6, 0x114, 0x6, &(0x7f0000000780)=0x1, 0x4) setsockopt$SO_TIMESTAMP(r8, 0x1, 0x3f, &(0x7f00000007c0)=0x2, 0x4) mkdir(&(0x7f0000000800)='./file0\x00', 0x70) connect$unix(r6, &(0x7f0000000840)=@abs={0x30d6b091ed0e2ecd, 0x0, 0x4e24}, 0x6e) setxattr$incfs_size(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000900), &(0x7f0000000940)=0x9, 0x8, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000009c0)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f00000020c0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0xb3ff90f7f3280f27}, 0xc, &(0x7f0000002080)={&(0x7f0000000a00)={0x166c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0xd0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xc4, 0x5, "059a384c2e8c4b2f00c75f3f2d9bc7fa661176617a21ff8fdf81e0c0aeb3e321a4dce79bbba77dfc2bfdd9978b80ea94c7c79c8c8536c45c522d549b1e3bb29b7a054f411904460fb511ce54d21dab66e2b916819c92d8900f5527de5cfc4fe3dab6049e9bb5acfc6e653e5800814d6d211dc957cee31bd6507bbc3f9eb96bd407bb2d83c0e721d041d624c655f59628f8d969914f4b4323303b747440c19d0c229cb04a5428c78bf402cbfc77221bac8597d72acf19f4017f78d7cd9cffda80"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x14, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}]}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x11e8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xa1}, @ETHTOOL_A_BITSET_BITS={0x168, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, '/dev/nullb0\x00'}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '(\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, 'user.incfs.size\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffff00}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5f6b}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '^\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffff81}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, 'secondname\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '-%,\x00'}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'firstname\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x35e}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'devlink\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '/\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '0000:00:10.0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'devlink\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '[\'\'@\xfe\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}, @ETHTOOL_A_BITSET_MASK={0x6b, 0x5, "24142eca90516b02ff85a35239979cd0dbe369e2a9f9bafb57d2971c4e2172694ac92a783a611adaa28a657e58bc68a7c42d141ccebc225c5cd7023a6d71d639cd0c254a8d15e7b7d4c3c76ca7cd60a4430d0273dd3f643bb0e4cfccd452069033cce15a0d09b7"}, @ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "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"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x118, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xfa, 0x5, "dc4570ef9b99d21df6de03d5f06a6934d6116f38ff00182461f8f4c08d6d93174559302f6678d8f33997797026aaeab69b51432532509e75cb96073cf4f9508e871e07236942634cbd2c66dbbb4000ee3e59a2db3610e15e378e87d1ae8eec3073644888bf6c87ef83b804a876be34dee2534b8a8818e010561fa960959732bb83661a8982660954dddb935b0df2c27a511792add51e888f7b8841d05e4ad0801cfd7418fcb8acea342b51812e905200be6c01250feaa56d6e205affde647755348f7778d5c4c7e658b6395effe04820e04482fcfe89ad64cecc3185a49a102cd99d938f5128163a8198e634dbad79e0ab4b27f604f9"}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x2}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x80000000}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x198, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x32, 0x5, "d0f4296d518d371c4e9653813d2587c82d38dae531dded2721763f4db64d38e63a2525be005b3c1c8d591e894051"}, @ETHTOOL_A_BITSET_MASK={0x10, 0x5, "d92c1ef209acdc62a6ea9ed6"}, @ETHTOOL_A_BITSET_BITS={0x144, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xff}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '.\'-)\\\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffd}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'firstname\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1000}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '@@$\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\\'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '0000:00:10.0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '[,\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '0000:00:10.0\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x101}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '[/\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9e2}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '}$*%\x00'}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, 'user.incfs.size\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}]}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x166c}, 0x1, 0x0, 0x0, 0x20000008}, 0x0) 41.8801531s ago: executing program 3 (id=615): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x1, @perf_bp={0x0, 0x8}, 0x880, 0x34, 0x43a1bd76, 0x7, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001100)=ANY=[@ANYBLOB="b0010000100001000000000000000040fc010000000000000000000000000000000000000000000000000000000000000000ecdf00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000032000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000fcfffffffffffffffdffffffffffffff00000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000cd00000000000000580002006362632861657329000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000e0fad3f10cd3a506627800000000074f1c001700000000002abd7000000000000000000000000000000000004c001400686d61632873686132353629800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000"], 0x1b0}}, 0x4050) r1 = gettid() perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690ba, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, r1, 0x0, 0xffffffffffffffff, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) syslog(0x3, &(0x7f0000001980)=""/4096, 0x1000) 41.519763161s ago: executing program 3 (id=622): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x4c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x20000, 0x380}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STATS_ENABLED={0x5, 0x2a, 0x1}, @IFLA_BR_MCAST_HASH_ELASTICITY={0x8}, @IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0xf}]}}}]}, 0x4c}}, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000500)=ANY=[@ANYBLOB="000000001000000008"]) ioctl$SCSI_IOCTL_START_UNIT(r0, 0x5) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x14, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1, 0x5, 0x0, 0x1, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0xfffffffffffffffd, 0xffffffffffffffff, 0xa) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20081e, &(0x7f0000000840)={[{@grpjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xa30}}, {@grpquota}]}, 0x1, 0x52a, &(0x7f0000001440)="$eJzs3c9vHFcdAPDvjL22k7h1WnoABG1oCwFFWcebNqp6gHJCCFVC9AhSauyNFWXXa3nXpTaRcM9ckajECY78AZx74s4FwY1LOSDxwwLVSBwGzezY2di7tpPYXmv385FG+9688XzfizPvzbxd7wtgbF2LiO2ImIqI9yNirtyflFu8093y4z7bebi0u/NwKYkse++fSVGe74uen8ldKc85ExE/+E7Ej5PDcdubWw8WG436epmf7zTX5tubWzfvNxdX6iv11VrtzsKdW2/dfrP2BK2ZObL0leZUmfryp3/Y/sZP82rNlnt623Gauk2v7MfJTUbE984i2BBMlO2ZGnZFeCppRLwYEa8W1/9cTBS/TQBglGXZXGRzvXkAYNSlxRxYklbLuYDZSNNqtTuH91JcThutdufGvdbG6nJ3ruxqVNJ79xv1W+Vc4dWoJHl+oUg/ytcO5G9HxAsR8YvpS0W+utRqLA/zxgcAxtiVA+P/f6a74z8AMOKO/tgMADCKjP8AMH6M/wAwfoz/ADB+uuP/pSf9sSzLfnYW1QEAzoHnfwAYP8Z/ABgr33/33XzLdsvvv17+YHPjQeuDm8v19oNqc2OputRaX6uutForxXf2NI87X6PVWlt4IzY+vPrNtXZnvr25dbfZ2ljt3C2+1/tuvVIctX0OLQMABnnhlU/+nOQj8tuXii161nKoDLVmwFlLh10BYGgmhl0BYGi6q331WaAPGHmPnvGf+EMApgdgRBx3BzDT7w+EsizLzq5KwBm7/gXz/zCuyvn/SZ8ChvFz3Px/sTawNwlhJE0OuwLA0GRZctI1/+OkBwIAF9sRc/xXz/M+BBieAe//v1i+/rZ8c+BHyweP+PgsawUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAX2976v9Vymd/ZSNNqNeK5YgGgSnLvfqN+KyKej4g/TVem8/zCkOsMADyr9G9Juf7X9bnXZx8revnKfnIqIn7yq/d++eFip7P+x4ip5F/Te/s7H5f7a8cGmzmLFgAAR9sbp4vXngf5z3YeLu1t51mfv3+7e1eQx93dmYrd/fiTMVm8zkQlIi7/OynzXUnP3MWz2P4oIj7fr/1JzBZzIN1bloPx89jPnVL8iRPFTx+Ln5YLNKflv8XnTqEuMG4+yfufd/pdf2lcK177X/8zRQ/17Mr+Lz/V0m7RBz6Kv9f/TQzo/66dNMYbv/9uN3XpcNlHEV+cjNiLvdvT/+zFTwbEf/2E8f/ypZdfHVSW/TrievSP3xtrvtNcm29vbt2831xcqa/UV2u1Owt3br11+83afDFHPT94NPjH2zeeH1SWt//ygPgzx7T/q4NOeuAp9zf/e/+HXzki/tdf6xc/jZeOiJ+PiV8b2OLHLV7+3cDn7jz+8uH2Jyf5/d84YfxP/7p1aNlwAGB42ptbDxYbjfq6hMTFT+T/ZS9ANfomvnVesaaif9HPX+te0weKsuypYg3qMU5j1g24CPYv+oj477ArAwAAAAAAAAAAAAAA9HUef7E07DYCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwuv4fAAD//9VG0+g=") syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280), 0xff, 0x25e, &(0x7f0000000e80)="$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") r2 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r2, 0x0, 0x0) getdents(r2, 0x0, 0x0) r3 = syz_clone(0x2000, 0x0, 0x3, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$pokeuser(0x6, r3, 0x388, 0xfffffffffffbfffd) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r4, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r5 = open(&(0x7f00000001c0)='./mnt\x00', 0x0, 0x36d) sendfile(r5, r5, 0x0, 0x1000000201005) ftruncate(r5, 0x6) lchown(0x0, 0xee01, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000140)={[{@test_dummy_encryption_v1}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0x1, 0x241, &(0x7f0000000540)="$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") write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x4010, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2040d0, &(0x7f00000000c0), 0xfb, 0x4b6, &(0x7f0000000700)="$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") creat(&(0x7f00000000c0)='./bus\x00', 0x1a2) 40.776495333s ago: executing program 3 (id=626): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000330001072cbd7000fedbdf2506"], 0x14}}, 0x24044094) 40.567286785s ago: executing program 3 (id=631): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x21c91c, &(0x7f00000002c0)={[{@init_itable_val={'init_itable', 0x3d, 0x8000}}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@jqfmt_vfsold}, {@noinit_itable}, {@jqfmt_vfsv0}, {@noauto_da_alloc}, {@sysvgroups}, {@grpjquota, 0x32}, {@mblk_io_submit}]}, 0x1, 0x4e0, &(0x7f0000001a40)="$eJzs3c9rG1ceAPDvyFY2P5y1w+4hG9hs2GSxw24kO94kZg/ZXVi2p0Db9J66tmyMZctYchKb0Dr0DyiU0hZ66qmXQv+AQsmfUAqB9l7a0lLapD0U2kZFIzlxHCl2iGwZ6/OBJ715mtH3PQ16mjfzGAXQtU5ExMmIuFetVk9HRH+jPNNIsVpPtfXu3rkxUUtJVKuXv0siknpZbbWhde95qLHZ/oh4/pmIl5JH45aXV2bHi8XCYmM5X5lbyJeXV87MzI1PF6YL86OjI+fHLoydGxtuSzv7IuLi/75687X3/n/xo39c+/zKN0MvJ43yiAftaLd607MPlfVGxOJ2BOuQ3kdaCADAbrV2nP/XiDgd/dGTHs0BAAAAe0n1333xSxJRBQAAAPasTDoHNsnkGvMA+iKTyeXqc3j/GAczxVK58vep0tL8ZH2u7EBkM1MzxcJwY67wQGST2vJImn+wfHbD8mhEHImIN/oPpMu5iVJxstMnPwAAAKBLHNow/v+xvz7+X+fnjlUOAAAAaJ+BTlcAAAAA2HbG/wAAALD3Gf8DAADAnvbspUu1VF37/+vJq8tLs6WrZyYL5dnc3NJEbqK0uJCbLpWm03v2zW32fsVSaeGfMb90PV8plCv58vLKlbnS0nzlykz6d+AAAABABxz5y63PkohY/deBNNXs63SlgB3R+yQrf7l99QB2Xk+nKwB0zBP9/gN7SrbTFQA6Ltnk9ZaTdz5uf10AAIDtMfin5tf/ezY9N7Ca2aEqAtvE+T/oXq7/Q/dy/R+6VzZ6wkAeuttmtwB9+uv/1eoTVQgAAGi7vjQlmVxEeh6gLzKZXC7icDomyCZTM8XCcET8PiI+7c/+rrY8km6ZbDpnGAAAAAAAAAAAAAAAAAAAAAAAAACoq1aTqAIAAAB7WkTm6yS9m3/EYP+pvo3nB/YlP/WnzxFx7Z3Lb10fr1QWR2rl398vr7zdKD/biTMYAAAAwEZr4/S1cTwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAtNPdOzcm1tJOxv32vxEx0Cx+b+xPn/dHNiIO/pBE77rtkojoaUP81ZsRcbRZ/KRWrRho1KJZ/AMdjn+oDfGhm92q9T//afb9y8SJ9Ln59+982kM9vdb9X+Z+/9fTJH6t7PAWYxy7/UG+ZfybEcd6m/c/a/GTFv3PyS3Gf/GFlZVWr1XfjRhs+vuTPBQrX5lbyJeXV87MzI1PF6YL86OjI+fHLoydGxvOT80UC43HpjFe//OH9x7X/oMt4g9s0v5TW2z/r7ev3/lDPZu9v3nyIP7Qyeb7/2iL+JnG/v9bI197fXAtv1rPr3f8/U+OP679ky3av9n+H9pi+08/9+oXW1wVANgB5eWV2fFisbDY1Zmn+jRqh0W7ohW7M1P7XHdBNZpmXtmGd64dmXe6Xe3IdLRbAgAAtsGjY2AAAAAAAAAAAAAAAAAAAABgp+3E7cSyG2Kupo/tuHs+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAED7/BYAAP//I+vSRQ==") r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x3c, r3, 0x731, 0x0, 0x0, {0x38}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73}}}]}, 0x3c}, 0x1, 0x2, 0x0, 0x1bb5818a0d1752a}, 0x40) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r2, 0x8982, &(0x7f00000000c0)={0x7, 'pim6reg\x00', {0x2}, 0x4}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x87f}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8080}, 0x40020) ioctl$SIOCPNADDRESOURCE(r0, 0x89e0, &(0x7f0000000000)=0x66) 40.489490789s ago: executing program 34 (id=631): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x21c91c, &(0x7f00000002c0)={[{@init_itable_val={'init_itable', 0x3d, 0x8000}}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@jqfmt_vfsold}, {@noinit_itable}, {@jqfmt_vfsv0}, {@noauto_da_alloc}, {@sysvgroups}, {@grpjquota, 0x32}, {@mblk_io_submit}]}, 0x1, 0x4e0, &(0x7f0000001a40)="$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") r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x3c, r3, 0x731, 0x0, 0x0, {0x38}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73}}}]}, 0x3c}, 0x1, 0x2, 0x0, 0x1bb5818a0d1752a}, 0x40) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r2, 0x8982, &(0x7f00000000c0)={0x7, 'pim6reg\x00', {0x2}, 0x4}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x87f}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8080}, 0x40020) ioctl$SIOCPNADDRESOURCE(r0, 0x89e0, &(0x7f0000000000)=0x66) 32.845962731s ago: executing program 6 (id=700): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000300)={0xd, {"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", 0x1000}}, 0x1006) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140070001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802cf5038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073"], 0x84}, 0x1, 0x0, 0x0, 0x54}, 0x20008000) 32.799290314s ago: executing program 6 (id=701): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20081e, &(0x7f0000000840)={[{@grpjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xa30}}, {@grpquota}]}, 0x1, 0x52a, &(0x7f0000001440)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000100)='blkio.throttle.io_serviced\x00', 0x0, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r2 = open(&(0x7f0000000000)='./file1\x00', 0x4a142, 0x36d) syz_emit_ethernet(0x86, &(0x7f0000000300)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x50, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x3, 0x2, 0x0, 0x0, {0x0, 0x6, "000810", 0x0, 0x11, 0x0, @private1, @empty, [@dstopts={0xbb, 0x0, '\x00', [@ra={0x5, 0x2f}]}], "fb36eeca6fad50b375a22a584d16ca55"}}}}}}}, 0x0) fremovexattr(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="6f4e8b12b7be36"]) sendfile(r2, r2, 0x0, 0x1000000201005) socket(0x10, 0x3, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x62c40, 0x0) r4 = eventfd2(0x800, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000200)=0x20) io_setup(0x81, &(0x7f0000000400)=0x0) io_submit(r6, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x20, 0x7, 0xb, r3, 0x0, 0x0, 0x2000000000, 0x0, 0x1, r4}]) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010", @ANYRES8=0x0, @ANYBLOB="fe88"], 0x48}}, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f0000000100)={@remote, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2, 0x9, 0x50, 0x500, 0x6, 0x120}) r8 = socket(0xa, 0x3, 0xff) ioctl$sock_SIOCGIFBR(r8, 0x8940, &(0x7f0000000000)=@add_del={0x2, &(0x7f0000000080)='pim6reg1\x00'}) syz_clone(0x203a91, 0x0, 0x0, 0x0, 0x0, 0x0) 32.315377491s ago: executing program 6 (id=712): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x13bb03, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x7}, 0x94) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r3, &(0x7f000000be00)=[{{0x0, 0x0, &(0x7f0000002c80)=[{0x0}, {&(0x7f0000001980)=""/233, 0xe9}], 0x2}, 0x10001}], 0x1, 0x40000000, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x8}, 0x10c01, 0x32, 0x43a1bd76, 0x1, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioctl$TIOCSBRK(r2, 0x5427) r5 = getpid() r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0xf, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0xfca804a0, 0xe, 0x0, &(0x7f0000000200)="b8914b3f677210a5befd00000500", 0x0, 0x10012000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, 0x0, 0x0) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto(r8, 0x0, 0x0, 0x4004014, &(0x7f00000008c0)=@nfc_llcp={0x27, 0x0, 0xffffffffffffffff, 0x6, 0x8, 0x4, "e47edaa914d6b2b391679683499f41ed0c6460aeed82e4b9315c8671efd73571427520db3ce02c3f4d7bab262f88452450a5f9a75eda8defcaab3833f770db", 0x37}, 0x80) 30.952630139s ago: executing program 6 (id=713): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb87, &(0x7f00000017c0)="$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") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_CSUM_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0xf}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_CSUM_TYPE={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0x9c}}, 0x0) r1 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) dup3(r1, r1, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x5000) fallocate(r1, 0x0, 0x0, 0x8800000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) 30.687205624s ago: executing program 6 (id=716): socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000001435010026bd0c333c84df250a4022fe", @ANYRES32, @ANYBLOB="140006"], 0x40}, 0x1, 0x0, 0x0, 0x811}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r1) r2 = timerfd_create(0x1, 0x80000) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x8c, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000280), &(0x7f0000000240)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 30.447022157s ago: executing program 6 (id=724): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@ipv4_delroute={0x1c, 0x19, 0x1, 0x70bd2d, 0x25dfdbfe, {0x2, 0x20, 0x20, 0x0, 0xff, 0x2, 0xff, 0x2, 0x1a00}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x28, 0x10}}, @RTA_DST={0x8, 0x1, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x448d0}, 0x1000) 30.432693808s ago: executing program 35 (id=724): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@ipv4_delroute={0x1c, 0x19, 0x1, 0x70bd2d, 0x25dfdbfe, {0x2, 0x20, 0x20, 0x0, 0xff, 0x2, 0xff, 0x2, 0x1a00}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x28, 0x10}}, @RTA_DST={0x8, 0x1, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x448d0}, 0x1000) 6.199428829s ago: executing program 7 (id=1029): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3000046, &(0x7f0000000bc0)={[{@dioread_nolock}, {@data_err_abort}, {@inlinecrypt}, {@noauto_da_alloc}, {@data_err_ignore}, {@nojournal_checksum}, {@errors_remount}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@nombcache}, {@errors_remount}]}, 0x11, 0x565, &(0x7f0000000440)="$eJzs3d9rW+UbAPDnJM1+dd/vOhhDRaSwCydz6dr6Y4IX81J0OND7GdqsjKbLaNKx1oHbhbvxRoYg4kC813svh/+Af8VAB0NG0QtvIic96bI1adMuW7rl84FT3jfnJO958p7n7XtyTkgAQ2s8/ZOLeDkivkkiDkVEkq0biWzl+Np2qw+uzaRLEo3Gp38lze3Seuu1Ws8bzSovRcRvX0WcyG1st7a8Ml+qVMqLWX2ivnB5ora8cvLiQmmuPFe+NDU9ffrt6an33n2nb7G+ce6f7z+58+Hpr4+tfvfLvcO3kjgTB7N17XF0caeHJq63V8ZjPHtPCnHmsQ0nt7Pjz4Fk0DvAjuSzPC9EOgYcinyW9cCL78uIaABDKmnP/4LhAIZHax7QOrfv4Tz4hXL/g7UToI3xj6x9NhL7mudGB1aTR86M0vPdsT60n7bx65+3b6VL9PY5BEBfXL8REadGRjaOf0k2/u3cqR62ebwN4x88O3fS+c+bneY/ufX5T3SY/4x2yN2d2Dr/c/f60ExX6fzv/Y7z3/WLVmP5rPa/5pyvkFy4WCmnY9v/I+J4FPam9c2u55xevdvotq59/pcuafutuWC2H/dG9j76nNlSvfQkMbe7fyPilY7z32S9/5MO/Z++H+d6bONo+fZr3dZtHf/T1fgp4vWO/f/wilay+fXJiebxMNE6Kjb6++bR37u1P+j40/4/sHn8Y0n79dra9tv4cd+/5W7rHok/ej/+9ySfNct7sseulur1xcmIPcnHGx+fevjcVr21fRr/8WObj3+djv/9EfF5j/HfPPLzq1vGPzq4/p/t0v+NfKvU3v/bL9z96Isftox/0/HvrWbpePZIL+Nfrzv4ZO8eAAAAAAAA7C65iDgYSa64Xs7lisW1+zuOxIFcpVqrn7hQXbo0G83vyo5FIde60n2o7X6Iyex+2FZ96rH6dEQcjohv8/ub9eJMtTI76OABAAAAAAAAAAAAAAAAAABglxi93vn7/6k/8oPeO+Cp85PfMLy2zP9+/NITsCv5/w/DS/7D8JL/MLzkPwwv+Q/DS/7D8JL/MLzkPwAAAAAAAAAAAAAAAAAAAAAAAAAAAPTVubNn06Wx+uDaTFqfvbK8NF+9cnK2XJsvLizNFGeqi5eLc9XqXKVcnKkubPV6lXz18uRULF2dqJdr9Yna8sr5herSpfr5iwulufL5cuGZRAUAAAAAAAAAAAAAAAAAAADPl9ryynypUikvKijsqDCyO3ZDoc+FQY9MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDQfwEAAP//IHw0og==") socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3fc, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0x2, 0xc82}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00", @ANYRES16=r0, @ANYRES32=r2], 0x44}}, 0x0) 6.111127693s ago: executing program 7 (id=1031): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x61, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x3, 0x2, 0xa0000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x94eb2000) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x10) mlock(&(0x7f00005f7000/0x4000)=nil, 0x4000) fsetxattr(r0, &(0x7f0000000100)=@random={'os2.', '@)\'+\\*%-\x00'}, &(0x7f0000000140)='syz1\x00', 0x5, 0x2) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r0, r1, 0x1f, 0x0, @void}, 0x10) 5.407547473s ago: executing program 7 (id=1039): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, 0x0, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x6000, 0x1) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x1}, 0x80) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'macvtap0\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYRES32=r2, @ANYRES16=r3, @ANYRESHEX, @ANYRES32=r3, @ANYRESHEX=r1, @ANYRES32=r2, @ANYBLOB="050005fffffffff8"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) sync_file_range(r4, 0x8004, 0xf8537dd, 0x2) (async) r5 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2a40, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r6, &(0x7f0000000240)=ANY=[@ANYRESHEX=r2, @ANYRES64=r6], 0x32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa7bc318"], 0x0, 0xb, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) (async) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @local}, 0xfe9b) (async) listen(r8, 0x0) (async) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) (async) r9 = socket$netlink(0x10, 0x3, 0x4) writev(r9, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a98000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) (async) set_mempolicy(0x8000, &(0x7f00000001c0)=0xc, 0x100000001) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) (async) socket$inet6_icmp(0xa, 0x2, 0x3a) 5.29303682s ago: executing program 7 (id=1041): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3000046, &(0x7f0000000bc0)={[{@dioread_nolock}, {@data_err_abort}, {@inlinecrypt}, {@noauto_da_alloc}, {@data_err_ignore}, {@nojournal_checksum}, {@errors_remount}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@nombcache}, {@errors_remount}]}, 0x11, 0x565, &(0x7f0000000440)="$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") socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3fc, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0x2, 0xc82}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00ff0008", @ANYRES16=r0, @ANYRES32=r2], 0x44}}, 0x0) 5.182831297s ago: executing program 7 (id=1044): syz_genetlink_get_family_id$smc(&(0x7f0000000340), 0xffffffffffffffff) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x94cc3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x80000001, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'wrr\x00', 0xe, 0x400eeb4, 0x13}, 0x2c) r2 = syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$setsig(0x4203, r2, 0x5, &(0x7f00000000c0)={0x4, 0xb, 0x6}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0x48) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(r4, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$bpf(0x0, &(0x7f0000000140)='./file1/file3\x00', &(0x7f0000000200), 0x1081000, &(0x7f0000000700)={[{}, {@mode={'mode', 0x3d, 0x2}}, {}, {}, {@gid={'gid', 0x3d, r4}}, {@gid={'gid', 0x3d, r5}}], [{@subj_user={'subj_user', 0x3d, 'wrr\x00'}}, {@obj_role={'obj_role', 0x3d, 'ramfs\x00'}}, {@subj_role={'subj_role', 0x3d, 'wrr\x00'}}]}) write$cgroup_devices(r3, &(0x7f0000000040)=ANY=[@ANYBLOB='b *:2 m'], 0x9) r6 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x1, 0x4) fchdir(r7) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x11e) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x45, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xff, 0x30000000000}, 0x12122, 0x10000, 0xfffffffe, 0x5, 0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x16) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r8, 0x0, 0x40000100) 2.657158399s ago: executing program 7 (id=1096): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc}, 0x0, 0x4, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, 0x0) semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x1}], 0x1, 0x0) 1.76341845s ago: executing program 5 (id=1109): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000002c0)={@loopback={0x0, 0x7ffffffff000}, 0x800, 0x0, 0xff, 0xb, 0x2, 0x407}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r0, &(0x7f0000000140), &(0x7f0000000000)=""/48}, 0x20) syz_emit_ethernet(0x4e, &(0x7f0000000240)={@local, @random="000200", @void, {@ipv4={0x800, @tcp={{0xb, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x11}, {[@ssrr={0x89, 0xf, 0xa2, [@broadcast, @broadcast, @loopback]}, @cipso={0x86, 0x6, 0x1}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x1}}}}}}, 0x0) 1.652307016s ago: executing program 5 (id=1112): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20081e, &(0x7f0000000840)={[{@grpjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xa30}}, {@grpquota}]}, 0x1, 0x52a, &(0x7f0000001440)="$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") openat(0xffffffffffffff9c, 0x0, 0x62c40, 0x0) 1.58313066s ago: executing program 0 (id=1114): socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000001435010026bd0c333c84df250a4022fe", @ANYRES32, @ANYBLOB="140006"], 0x40}, 0x1, 0x0, 0x0, 0x811}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r0) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r3}, &(0x7f0000000280), &(0x7f0000000240)=r2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.536289882s ago: executing program 5 (id=1115): bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0), 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x80005, 0x0, 0x0, 0x0, 0x1}, 0x94) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0xfffffff9, 0x7fff, 0x16, "0062007d82000000000000002240f7ffffff00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) mount$9p_tcp(&(0x7f00000002c0), 0x0, 0x0, 0x20404c2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) close_range(r4, r5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f00000004c0)={0x9, 0x7ff, 0x5, 0x7f, 0x12, "13d0c20ce5e3afdb"}) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) r8 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r8, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0xfc00) close(r8) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x17) 1.526376003s ago: executing program 0 (id=1116): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xae}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) 1.442840088s ago: executing program 0 (id=1118): getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000180)={@private1, 0x0}, &(0x7f00000001c0)=0x14) getpeername$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000002c0)=0x14) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000040)={0x0, 0x1, 0x0, @link_local}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f0000000080)={0x0, 0x1, 0x0, @multicast}, 0x10) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x14, 0x2, {{0x7, 0xd, 0x0, 0x9, 0x8}, 0x6, 0x1, 0x1, 0x4, 0x8, 0xe, 0x7, 0x1d, 0x3, 0x9, {0xa2d6, 0x200, 0xb, 0x40, 0x2, 0x1ff}}}}]}, 0x78}}, 0x0) r5 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'vlan0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001800010000000000000200001d01080008000a00", @ANYRES32=r8, @ANYBLOB='\b\x00\t\x00', @ANYRES32], 0x24}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000680)={&(0x7f0000000500)={0x178, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x1}, 0x50) 1.359794542s ago: executing program 8 (id=1119): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x8}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0xc, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x45}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.322847414s ago: executing program 8 (id=1120): r0 = open(&(0x7f00000001c0)='./bus\x00', 0x4c27e, 0x2) lsetxattr$security_ima(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0), &(0x7f0000000100)=@v1={0x2, "e5617330f1fc291727a37aff8893"}, 0xf, 0x3) setxattr$security_evm(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040), &(0x7f0000000080)=ANY=[], 0x3, 0x1) flock(0xffffffffffffffff, 0x8) fallocate(r0, 0x0, 0x0, 0x9) 1.272657817s ago: executing program 8 (id=1121): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20) 1.240772729s ago: executing program 8 (id=1122): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000600)) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000002880), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000003c0)={'batadv0\x00', 0x0}) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$setregs(0x19, r6, 0xc, &(0x7f0000000500)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000004c0)=0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000540)='./cgroup.net/syz0\x00', 0x200002, 0x0) syz_clone3(&(0x7f0000000640)={0x100040000, &(0x7f0000000200), &(0x7f00000002c0), &(0x7f0000000300), {0x7}, &(0x7f0000000400)=""/184, 0xb8, &(0x7f0000000340)=""/3, &(0x7f0000000500)=[r6, r7], 0x2, {r8}}, 0x58) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r3, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c000}, 0x4040000) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x50, r3, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x81}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="9f3c23474d5d"}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7e}]}, 0x50}, 0x1, 0x0, 0x0, 0x28000000}, 0x880) setsockopt$sock_int(r0, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r9, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) r10 = syz_open_procfs(0x0, &(0x7f0000000200)='net/packet\x00') read$msr(r10, &(0x7f00000000c0)=""/104, 0x11) bind$inet6(r9, &(0x7f0000000240)={0xa, 0x4e22, 0x101007e, @loopback, 0x1}, 0x1c) listen(r0, 0x0) listen(r9, 0x2) 1.100261097s ago: executing program 8 (id=1123): ioctl$PPPIOCSCOMPRESS(0xffffffffffffffff, 0x4010744d) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x4000, &(0x7f00000004c0)=ANY=[], 0x3, 0x58f, &(0x7f0000000800)="$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") r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x80023, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0x9}, 0x4140}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) open(&(0x7f0000000000)='./file0\x00', 0x500, 0x14) (fail_nth: 7) 750.643027ms ago: executing program 0 (id=1125): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20081e, &(0x7f0000000840)={[{@grpjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xa30}}, {@grpquota}]}, 0x1, 0x52a, &(0x7f0000001440)="$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") openat(0xffffffffffffff9c, 0x0, 0x62c40, 0x0) 676.711531ms ago: executing program 8 (id=1126): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2040d0, &(0x7f00000000c0), 0xfb, 0x4b6, &(0x7f0000000700)="$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") socket$nl_audit(0x10, 0x3, 0x9) syz_open_procfs(0x0, &(0x7f0000000040)='attr\x00') r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r1, 0x29, 0x46, &(0x7f0000000100)=0x3, 0x4) sendmsg$inet6(r1, &(0x7f0000000580)={&(0x7f0000000040)={0xa, 0x4e22, 0x2000000, @local, 0x3}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000200)="be24", 0x2}], 0x1}, 0x20000010) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000100000000000000000000001cb90000000000009500000000"], &(0x7f0000000000)='GPL\x00', 0x1, 0x24, &(0x7f0000000480)=""/36, 0xd455d0f2adb9ba32, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) mremap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffa000/0x2000)=nil) r2 = memfd_secret(0x0) ftruncate(r2, 0x5) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x11, r2, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10001, &(0x7f00000000c0), 0x1, 0x256, &(0x7f0000000280)="$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") ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000040)={0x19, 0x5, 0x6, 0x9, 0xfffffff0, 0x9}) 619.329784ms ago: executing program 5 (id=1128): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xae}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) 555.194438ms ago: executing program 0 (id=1129): getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000180)={@private1}, &(0x7f00000001c0)=0x14) getpeername$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000002c0)=0x14) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r1, 0x1, 0x0, @link_local}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r1, 0x1, 0x6, @broadcast}, 0x10) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x14, 0x2, {{0x7, 0xd, 0x0, 0x9, 0x8}, 0x6, 0x1, 0x1, 0x4, 0x8, 0xe, 0x7, 0x1d, 0x3, 0x9, {0xa2d6, 0x200, 0xb, 0x40, 0x2, 0x1ff}}}}]}, 0x78}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vlan0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) 547.165278ms ago: executing program 5 (id=1131): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x3e790000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="18080000000000000000000000000000180000000000000000"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r2) r3 = socket$unix(0x1, 0x5, 0x0) connect$unix(r3, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 382.843108ms ago: executing program 5 (id=1133): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x181243, 0x1bd) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) pipe(&(0x7f0000000080)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socket(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x6040, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="3c34000000000000040100c910fc02000000000000000000000000000107", @ANYRES32=r0], 0x1b0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, 0x0, 0x0) r2 = semget$private(0x0, 0x6, 0x3b1) semtimedop(r2, &(0x7f0000000040)=[{0x0, 0x1}], 0x1, 0x0) semop(r2, &(0x7f00000000c0)=[{}], 0x1) semtimedop(r2, &(0x7f0000000000)=[{0x4, 0xfff7, 0x1800}, {0x1, 0x2, 0x1000}, {0x2, 0x5, 0x800}], 0x3d, 0x0) 348.7121ms ago: executing program 0 (id=1134): syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaababbbbbbb168a995929fb52479ab886387db30339194c800000002001190780000000000000a4a7035a31f45682e2c6f437ff3cf7feb784947d83bc6fe5381aae3cf53c7afe237ee3565eb"], 0x0) syz_emit_ethernet(0x37, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffe414cc42531e81003000086b4f0000250000e00004039078000000000000000000e57e00"/55], 0x0) r0 = socket(0x1e, 0x4, 0x0) sendmmsg(r0, &(0x7f0000005ac0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001940)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e23, 0x400000, @mcast2, 0x1}}, 0x80, 0x0}}], 0x2, 0x9200000000000000) recvfrom$l2tp6(r0, &(0x7f0000000080)=""/242, 0xf2, 0x40010023, &(0x7f0000000180)={0xa, 0x0, 0x0, @dev}, 0x20) 326.947041ms ago: executing program 2 (id=1135): getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000180)={@private1, 0x0}, &(0x7f00000001c0)=0x14) getpeername$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000002c0)=0x14) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000040)={0x0, 0x1, 0x0, @link_local}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f0000000080)={0x0, 0x1, 0x0, @multicast}, 0x10) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x14, 0x2, {{0x7, 0xd, 0x0, 0x9, 0x8}, 0x6, 0x1, 0x1, 0x4, 0x8, 0xe, 0x7, 0x1d, 0x3, 0x9, {0xa2d6, 0x200, 0xb, 0x40, 0x2, 0x1ff}}}}]}, 0x78}}, 0x0) r5 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'vlan0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001800010000000000000200001d01080008000a00", @ANYRES32=r8, @ANYBLOB='\b\x00\t\x00', @ANYRES32], 0x24}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000680)={&(0x7f0000000500)={0x178, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x1}, 0x50) 241.461836ms ago: executing program 2 (id=1136): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0x10, 0x800, 0x5) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x401, 0x1000004, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503, 0x20008}, [@IFLA_LINK_NETNSID={0x8, 0x25, 0x1}, @IFLA_LINK={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004800}, 0x4048004) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/crypto\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/key-users\x00', 0x0, 0x0) preadv2(r3, &(0x7f0000000280)=[{&(0x7f0000001680)=""/244, 0xf4}], 0x1, 0x2, 0x6, 0x2) read$msr(r2, &(0x7f0000000740)=""/4096, 0x1000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac141400340008"], 0x2c}}, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r5) close(r5) r6 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000000c0), 0x240000) read$qrtrtun(r6, &(0x7f00000002c0)=""/117, 0x75) mount(0x0, &(0x7f0000000040)='.\x00', 0x0, 0x80000, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$SIOCGETSGCNT_IN6(r4, 0x89e1, &(0x7f0000000040)={@private0, @rand_addr=' \x01\x00'}) r7 = open(&(0x7f0000000240)='./file1\x00', 0x105342, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x80, 0x0, 0x7ffc1ffb}]}) r8 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9) sendfile(r7, r7, 0x0, 0x800000009) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r10, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x5, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000003}, [@map_fd={0x18, 0x0, 0x1, 0x0, r11}]}, &(0x7f0000000040)='GPL\x00', 0x2, 0xb7, &(0x7f0000000080)=""/183}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newlink={0x54, 0x10, 0xffffffffffffffff, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4b3b5}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ipoib={{0xa}, {0x24, 0x2, 0x0, 0x1, [@IFLA_IPOIB_MODE={0x6}, @IFLA_IPOIB_UMCAST={0x6, 0x3, 0x1}, @IFLA_IPOIB_PKEY={0x6, 0x1, 0x400}, @IFLA_IPOIB_MODE={0x6}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x24004804}, 0x8000002) 116.413983ms ago: executing program 2 (id=1137): r0 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000180)=@filter={'filter\x00', 0xe, 0x0, 0xc0, [0x0, 0x2000000000c0, 0x2000000000f0, 0x200000000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff000000000000000000000000000000000000000000060000000000000000000000a52f0a6f89fe433b000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff00000000"]}, 0x138) 116.156273ms ago: executing program 2 (id=1138): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000000), 0x2, 0x0) tee(r0, r1, 0xbe4, 0xa) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000040)="9becfe928d178fb2dd7d09d471de0d48c1a641b307aee7392dce5b1b8f8a9108c3c3", 0x22}, {&(0x7f0000000280)="269c877c82c1b901187992d996f80760443ac872460eb6bdaad9d4", 0x1b}, {&(0x7f00000000c0)="4a22202dd91c33e07e70fd872641103ffa4226c59f5869b026700f50d1cc034b632d228ddfdd38c64ff08b2a09f60ddaa0709b1d9e3d48b6c6098472a0", 0x3d}, {&(0x7f0000000100)="38a0b350c1b4bb531dbcc30c54e8f669be6ce8de1cd640390cc48d1a7ec67cffe105384f7167dd6e71c8a257e73350a5ec3358b7f6c4719606c1d0b1aebdd471e10b7a3e9ad2aef421584b60b6f4e696147f1a7fc78c43732b93704d1a009ba3531b20d50a25b11968a4c5f0022723f569fc23812ecc388fd4ceedfb5389e869a8e99dcd00d2829bec367c94314fe767ab7dde0144bf456152f71c8bc208c60f32", 0xa1}], 0x4) 86.209194ms ago: executing program 2 (id=1139): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20081e, &(0x7f0000000840)={[{@grpjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xa30}}, {@grpquota}]}, 0x1, 0x52a, &(0x7f0000001440)="$eJzs3c9vHFcdAPDvjL22k7h1WnoABG1oCwFFWcebNqp6gHJCCFVC9AhSauyNFWXXa3nXpTaRcM9ckajECY78AZx74s4FwY1LOSDxwwLVSBwGzezY2di7tpPYXmv385FG+9688XzfizPvzbxd7wtgbF2LiO2ImIqI9yNirtyflFu8093y4z7bebi0u/NwKYkse++fSVGe74uen8ldKc85ExE/+E7Ej5PDcdubWw8WG436epmf7zTX5tubWzfvNxdX6iv11VrtzsKdW2/dfrP2BK2ZObL0leZUmfryp3/Y/sZP82rNlnt623Gauk2v7MfJTUbE984i2BBMlO2ZGnZFeCppRLwYEa8W1/9cTBS/TQBglGXZXGRzvXkAYNSlxRxYklbLuYDZSNNqtTuH91JcThutdufGvdbG6nJ3ruxqVNJ79xv1W+Vc4dWoJHl+oUg/ytcO5G9HxAsR8YvpS0W+utRqLA/zxgcAxtiVA+P/f6a74z8AMOKO/tgMADCKjP8AMH6M/wAwfoz/ADB+uuP/pSf9sSzLfnYW1QEAzoHnfwAYP8Z/ABgr33/33XzLdsvvv17+YHPjQeuDm8v19oNqc2OputRaX6uutForxXf2NI87X6PVWlt4IzY+vPrNtXZnvr25dbfZ2ljt3C2+1/tuvVIctX0OLQMABnnhlU/+nOQj8tuXii161nKoDLVmwFlLh10BYGgmhl0BYGi6q331WaAPGHmPnvGf+EMApgdgRBx3BzDT7w+EsizLzq5KwBm7/gXz/zCuyvn/SZ8ChvFz3Px/sTawNwlhJE0OuwLA0GRZctI1/+OkBwIAF9sRc/xXz/M+BBieAe//v1i+/rZ8c+BHyweP+PgsawUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAX2976v9Vymd/ZSNNqNeK5YgGgSnLvfqN+KyKej4g/TVem8/zCkOsMADyr9G9Juf7X9bnXZx8revnKfnIqIn7yq/d++eFip7P+x4ip5F/Te/s7H5f7a8cGmzmLFgAAR9sbp4vXngf5z3YeLu1t51mfv3+7e1eQx93dmYrd/fiTMVm8zkQlIi7/OynzXUnP3MWz2P4oIj7fr/1JzBZzIN1bloPx89jPnVL8iRPFTx+Ln5YLNKflv8XnTqEuMG4+yfufd/pdf2lcK177X/8zRQ/17Mr+Lz/V0m7RBz6Kv9f/TQzo/66dNMYbv/9uN3XpcNlHEV+cjNiLvdvT/+zFTwbEf/2E8f/ypZdfHVSW/TrievSP3xtrvtNcm29vbt2831xcqa/UV2u1Owt3br11+83afDFHPT94NPjH2zeeH1SWt//ygPgzx7T/q4NOeuAp9zf/e/+HXzki/tdf6xc/jZeOiJ+PiV8b2OLHLV7+3cDn7jz+8uH2Jyf5/d84YfxP/7p1aNlwAGB42ptbDxYbjfq6hMTFT+T/ZS9ANfomvnVesaaif9HPX+te0weKsuypYg3qMU5j1g24CPYv+oj477ArAwAAAAAAAAAAAAAA9HUef7E07DYCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwuv4fAAD//9VG0+g=") openat(0xffffffffffffff9c, 0x0, 0x62c40, 0x0) 0s ago: executing program 2 (id=1140): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x13bb03, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x7}, 0x94) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r3, &(0x7f000000be00)=[{{0x0, 0x0, &(0x7f0000002c80)=[{0x0}, {&(0x7f0000001980)=""/233, 0xe9}], 0x2}, 0x10001}], 0x1, 0x40000000, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x8}, 0x10c01, 0x32, 0x43a1bd76, 0x1, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioctl$TIOCSBRK(r2, 0x5427) r6 = getpid() r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0xf, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0xfca804a0, 0xe, 0x0, &(0x7f0000000200)="b8914b3f677210a5befd00000500", 0x0, 0x10012000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, 0x0, 0x0) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto(r9, 0x0, 0x0, 0x4004014, &(0x7f00000008c0)=@nfc_llcp={0x27, 0x0, 0xffffffffffffffff, 0x6, 0x8, 0x4, "e47edaa914d6b2b391679683499f41ed0c6460aeed82e4b9315c8671efd73571427520db3ce02c3f4d7bab262f88452450a5f9a75eda8defcaab3833f770db", 0x37}, 0x80) r10 = eventfd2(0xffffffff, 0x1) read$eventfd(r10, &(0x7f0000000040), 0x8) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@getneightbl={0x14, 0x42, 0x400, 0x70bd29, 0x25dfdbff, {}, ["", ""]}, 0x14}}, 0x0) kernel console output (not intermixed with test programs): T5747] loop5: detected capacity change from 0 to 1024 [ 82.883865][ T5753] loop2: detected capacity change from 0 to 1024 [ 82.948768][ T37] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 82.981410][ T5747] delete_channel: no stack [ 83.004818][ T5753] ext4 filesystem being mounted at /109/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.326240][ T5802] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 83.361695][ T5808] program syz.3.622 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 83.413115][ T5812] program syz.3.622 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 83.441901][ T5812] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 83.461848][ T5812] loop3: detected capacity change from 0 to 512 [ 83.474171][ T5812] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 83.498974][ T5812] ext4 filesystem being mounted at /125/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 83.618611][ T5772] FAULT_INJECTION: forcing a failure. [ 83.618611][ T5772] name failslab, interval 1, probability 0, space 0, times 0 [ 83.631304][ T5772] CPU: 1 UID: 0 PID: 5772 Comm: syz.5.617 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 83.631353][ T5772] Tainted: [W]=WARN [ 83.631361][ T5772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 83.631376][ T5772] Call Trace: [ 83.631383][ T5772] [ 83.631393][ T5772] __dump_stack+0x1d/0x30 [ 83.631431][ T5772] dump_stack_lvl+0x95/0xd0 [ 83.631459][ T5772] dump_stack+0x15/0x1b [ 83.631485][ T5772] should_fail_ex+0x263/0x280 [ 83.631522][ T5772] should_failslab+0x8c/0xb0 [ 83.631550][ T5772] kmem_cache_alloc_noprof+0x68/0x490 [ 83.631577][ T5772] ? vm_area_dup+0x33/0x2c0 [ 83.631609][ T5772] vm_area_dup+0x33/0x2c0 [ 83.631640][ T5772] __split_vma+0xe9/0x660 [ 83.631665][ T5772] ? visit_groups_merge+0xf7e/0xfd0 [ 83.631695][ T5772] ? event_sched_out+0x896/0x8f0 [ 83.631728][ T5772] vma_modify+0xbcb/0xd30 [ 83.631752][ T5772] ? __rcu_read_unlock+0x4e/0x70 [ 83.631804][ T5772] vma_modify_flags+0x182/0x210 [ 83.631835][ T5772] madvise_vma_behavior+0xfa7/0x2080 [ 83.631881][ T5772] madvise_do_behavior+0x5e5/0xa10 [ 83.631921][ T5772] do_madvise+0x10e/0x190 [ 83.631961][ T5772] __x64_sys_madvise+0x63/0x80 [ 83.631992][ T5772] x64_sys_call+0x1c6b/0x3000 [ 83.632021][ T5772] do_syscall_64+0xc0/0x2a0 [ 83.632057][ T5772] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.632084][ T5772] RIP: 0033:0x7f4aa202aeb9 [ 83.632103][ T5772] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 83.632126][ T5772] RSP: 002b:00007f4aa0a87028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 83.632150][ T5772] RAX: ffffffffffffffda RBX: 00007f4aa22a5fa0 RCX: 00007f4aa202aeb9 [ 83.632168][ T5772] RDX: 0000000000000010 RSI: 0000000000600000 RDI: 0000200000000000 [ 83.632184][ T5772] RBP: 00007f4aa0a87090 R08: 0000000000000000 R09: 0000000000000000 [ 83.632200][ T5772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 83.632216][ T5772] R13: 00007f4aa22a6038 R14: 00007f4aa22a5fa0 R15: 00007ffd463ab328 [ 83.632241][ T5772] [ 83.911143][ T5832] __nla_validate_parse: 6 callbacks suppressed [ 83.911159][ T5832] netlink: 4 bytes leftover after parsing attributes in process `syz.6.625'. [ 83.927023][ T5831] loop0: detected capacity change from 0 to 512 [ 83.939424][ T5831] EXT4-fs: inline encryption not supported [ 83.952867][ T5831] journal_path: Non-blockdev passed as './bus' [ 83.959156][ T5831] EXT4-fs: error: could not find journal device path [ 84.003506][ T3311] EXT4-fs error (device loop3): ext4_lookup:1785: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 84.018394][ T3311] EXT4-fs error (device loop3): ext4_lookup:1785: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 84.055460][ T5839] netlink: 12 bytes leftover after parsing attributes in process `syz.5.628'. [ 84.068319][ T5831] loop0: detected capacity change from 0 to 256 [ 84.083324][ T5831] FAT-fs (loop0): Directory bread(block 64) failed [ 84.090942][ T5831] FAT-fs (loop0): Directory bread(block 65) failed [ 84.097684][ T5831] FAT-fs (loop0): Directory bread(block 66) failed [ 84.104317][ T5831] FAT-fs (loop0): Directory bread(block 67) failed [ 84.111127][ T5831] FAT-fs (loop0): Directory bread(block 68) failed [ 84.117863][ T5831] FAT-fs (loop0): Directory bread(block 69) failed [ 84.124443][ T5831] FAT-fs (loop0): Directory bread(block 70) failed [ 84.131297][ T5831] FAT-fs (loop0): Directory bread(block 71) failed [ 84.137977][ T5831] FAT-fs (loop0): Directory bread(block 72) failed [ 84.144576][ T5831] FAT-fs (loop0): Directory bread(block 73) failed [ 84.170233][ T5837] loop6: detected capacity change from 0 to 128 [ 84.179723][ T5831] syz.0.624: attempt to access beyond end of device [ 84.179723][ T5831] loop0: rw=0, sector=1800, nr_sectors = 8 limit=256 [ 84.201811][ T5837] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 84.216311][ T5837] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 84.235401][ T5844] loop2: detected capacity change from 0 to 1024 [ 84.256959][ T5844] ext4 filesystem being mounted at /111/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.283893][ T3326] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.285208][ T5846] loop5: detected capacity change from 0 to 4096 [ 84.369858][ T3326] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.449874][ T12] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 84.460763][ T3326] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.528023][ T3326] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.575722][ T5873] loop2: detected capacity change from 0 to 764 [ 84.598453][ T5873] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 84.629875][ T1034] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 84.643245][ T12] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 7 with max blocks 1 with error 28 [ 84.652381][ T1034] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 84.655671][ T12] EXT4-fs (loop5): This should not happen!! Data will be lost [ 84.655671][ T12] [ 84.675745][ T12] EXT4-fs (loop5): Total free blocks count 0 [ 84.681856][ T12] EXT4-fs (loop5): Free/Dirty block details [ 84.687782][ T12] EXT4-fs (loop5): free_blocks=0 [ 84.692739][ T12] EXT4-fs (loop5): dirty_blocks=0 [ 84.698589][ T12] EXT4-fs (loop5): Block reservation details [ 84.704587][ T12] EXT4-fs (loop5): i_reserved_data_blocks=0 [ 84.752308][ T5857] loop0: detected capacity change from 0 to 2048 [ 84.767278][ T5857] ext4: Unknown parameter 'fowner>00000000000000000000' [ 84.823722][ T5857] netlink: 8 bytes leftover after parsing attributes in process `syz.0.634'. [ 84.849213][ T5879] delete_channel: no stack [ 84.930990][ T3326] bridge_slave_1: left allmulticast mode [ 84.937441][ T3326] bridge_slave_1: left promiscuous mode [ 84.943152][ T3326] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.967775][ T5886] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.978792][ T3326] bridge_slave_0: left allmulticast mode [ 84.984551][ T3326] bridge_slave_0: left promiscuous mode [ 84.990345][ T3326] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.002381][ T5892] FAULT_INJECTION: forcing a failure. [ 85.002381][ T5892] name failslab, interval 1, probability 0, space 0, times 0 [ 85.015066][ T5892] CPU: 0 UID: 0 PID: 5892 Comm: syz.2.637 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 85.015107][ T5892] Tainted: [W]=WARN [ 85.015116][ T5892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 85.015132][ T5892] Call Trace: [ 85.015138][ T5892] [ 85.015146][ T5892] __dump_stack+0x1d/0x30 [ 85.015211][ T5892] dump_stack_lvl+0x95/0xd0 [ 85.015234][ T5892] dump_stack+0x15/0x1b [ 85.015254][ T5892] should_fail_ex+0x263/0x280 [ 85.015340][ T5892] should_failslab+0x8c/0xb0 [ 85.015370][ T5892] kmem_cache_alloc_node_noprof+0x6a/0x4a0 [ 85.015407][ T5892] ? __alloc_skb+0x2f0/0x4b0 [ 85.015448][ T5892] __alloc_skb+0x2f0/0x4b0 [ 85.015544][ T5892] ? __alloc_skb+0x219/0x4b0 [ 85.015584][ T5892] audit_log_start+0x3aa/0x730 [ 85.015686][ T5892] ? kstrtouint+0x76/0xc0 [ 85.015772][ T5892] audit_seccomp+0x47/0x100 [ 85.015804][ T5892] ? __seccomp_filter+0x8db/0x1350 [ 85.015831][ T5892] __seccomp_filter+0x8ec/0x1350 [ 85.015877][ T5892] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 85.015913][ T5892] ? vfs_write+0x86e/0x9f0 [ 85.015961][ T5892] ? __rcu_read_unlock+0x4e/0x70 [ 85.016001][ T5892] ? __fget_files+0x184/0x1c0 [ 85.016066][ T5892] __secure_computing+0x81/0x150 [ 85.016096][ T5892] syscall_trace_enter+0xce/0x1e0 [ 85.016127][ T5892] do_syscall_64+0x9a/0x2a0 [ 85.016181][ T5892] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.016230][ T5892] RIP: 0033:0x7fd23c02aeb9 [ 85.016245][ T5892] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 85.016278][ T5892] RSP: 002b:00007fd23aa66028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 85.016337][ T5892] RAX: ffffffffffffffda RBX: 00007fd23c2a6090 RCX: 00007fd23c02aeb9 [ 85.016353][ T5892] RDX: 0000200000000200 RSI: 0000000080044801 RDI: 0000000000000006 [ 85.016367][ T5892] RBP: 00007fd23aa66090 R08: 0000000000000000 R09: 0000000000000000 [ 85.016381][ T5892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 85.016461][ T5892] R13: 00007fd23c2a6128 R14: 00007fd23c2a6090 R15: 00007fff2b844eb8 [ 85.016483][ T5892] [ 85.229463][ T5892] audit_log_lost: 236 callbacks suppressed [ 85.229481][ T5892] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 85.240433][ T29] audit: type=1326 audit(1770287749.431:3867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5870 comm="syz.2.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd23bfeb78e code=0x7ffc0000 [ 85.243069][ T5892] audit: out of memory in audit_log_start [ 85.281793][ T29] audit: type=1326 audit(1770287749.451:3868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5870 comm="syz.2.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fd23bfeb78e code=0x7ffc0000 [ 85.305742][ T29] audit: type=1326 audit(1770287749.451:3869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5870 comm="syz.2.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fd23bfeb78e code=0x7ffc0000 [ 85.329631][ T29] audit: type=1326 audit(1770287749.451:3870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5870 comm="syz.2.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fd23bfeb78e code=0x7ffc0000 [ 85.352805][ T29] audit: type=1326 audit(1770287749.451:3871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5870 comm="syz.2.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd23c02aeb9 code=0x7ffc0000 [ 85.376840][ T29] audit: type=1326 audit(1770287749.451:3872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5870 comm="syz.2.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd23c02aeb9 code=0x7ffc0000 [ 85.400289][ T29] audit: type=1326 audit(1770287749.451:3873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5870 comm="syz.2.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fd23c02aeb9 code=0x7ffc0000 [ 85.456557][ T29] audit: type=1326 audit(1770287749.651:3874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5870 comm="syz.2.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fd23c02aeb9 code=0x7ffc0000 [ 85.571395][ T3326] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 85.599007][ T3326] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 85.619724][ T3326] bond0 (unregistering): Released all slaves [ 85.649013][ T5851] chnl_net:caif_netlink_parms(): no params data found [ 85.718017][ T5906] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5906 comm=syz.5.647 [ 85.830523][ T3326] hsr_slave_0: left promiscuous mode [ 85.838515][ T3326] hsr_slave_1: left promiscuous mode [ 85.849702][ T3326] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 85.857195][ T3326] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 85.885986][ T3326] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 85.893514][ T3326] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 85.913965][ T5909] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 7 with max blocks 1 with error 28 [ 85.926326][ T5909] EXT4-fs (loop0): This should not happen!! Data will be lost [ 85.926326][ T5909] [ 85.936113][ T5909] EXT4-fs (loop0): Total free blocks count 0 [ 85.942301][ T5909] EXT4-fs (loop0): Free/Dirty block details [ 85.948353][ T5909] EXT4-fs (loop0): free_blocks=0 [ 85.953366][ T5909] EXT4-fs (loop0): dirty_blocks=0 [ 85.953383][ T5909] EXT4-fs (loop0): Block reservation details [ 85.953395][ T5909] EXT4-fs (loop0): i_reserved_data_blocks=0 [ 85.958827][ T3326] veth1_macvtap: left promiscuous mode [ 85.958852][ T3326] veth0_macvtap: left promiscuous mode [ 85.958895][ T3326] veth1_vlan: left promiscuous mode [ 85.958987][ T3326] veth0_vlan: left promiscuous mode [ 86.001771][ T5928] netlink: 16 bytes leftover after parsing attributes in process `syz.6.649'. [ 86.052153][ T3326] team0 (unregistering): Port device vlan2 removed [ 86.067575][ T5930] FAULT_INJECTION: forcing a failure. [ 86.067575][ T5930] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 86.080791][ T5930] CPU: 1 UID: 0 PID: 5930 Comm: syz.6.650 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 86.080832][ T5930] Tainted: [W]=WARN [ 86.080841][ T5930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 86.080858][ T5930] Call Trace: [ 86.080866][ T5930] [ 86.080875][ T5930] __dump_stack+0x1d/0x30 [ 86.080906][ T5930] dump_stack_lvl+0x95/0xd0 [ 86.080982][ T5930] dump_stack+0x15/0x1b [ 86.081007][ T5930] should_fail_ex+0x263/0x280 [ 86.081092][ T5930] should_fail+0xb/0x20 [ 86.081126][ T5930] should_fail_usercopy+0x1a/0x20 [ 86.081212][ T5930] _copy_from_user+0x1c/0xb0 [ 86.081239][ T5930] ___sys_sendmsg+0xc1/0x1e0 [ 86.081289][ T5930] __x64_sys_sendmsg+0xd4/0x160 [ 86.081318][ T5930] x64_sys_call+0x17ba/0x3000 [ 86.081348][ T5930] do_syscall_64+0xc0/0x2a0 [ 86.081400][ T5930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.081498][ T5930] RIP: 0033:0x7fb2d9cbaeb9 [ 86.081587][ T5930] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 86.081610][ T5930] RSP: 002b:00007fb2d8717028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 86.081633][ T5930] RAX: ffffffffffffffda RBX: 00007fb2d9f35fa0 RCX: 00007fb2d9cbaeb9 [ 86.081687][ T5930] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 86.081703][ T5930] RBP: 00007fb2d8717090 R08: 0000000000000000 R09: 0000000000000000 [ 86.081718][ T5930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 86.081733][ T5930] R13: 00007fb2d9f36038 R14: 00007fb2d9f35fa0 R15: 00007ffea1e37a18 [ 86.081757][ T5930] [ 86.357223][ T3326] team0 (unregistering): Port device team_slave_1 removed [ 86.389556][ T3326] team0 (unregistering): Port device team_slave_0 removed [ 86.877167][ T5939] ext4: block size(65536) > page size(4096) is only supported with CONFIG_TRANSPARENT_HUGEPAGE [ 86.893527][ T5939] EXT4-fs (loop0): bad block size 65536 [ 87.507708][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.514818][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.522244][ T5851] bridge_slave_0: entered allmulticast mode [ 87.529368][ T5851] bridge_slave_0: entered promiscuous mode [ 87.547618][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.554804][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.568601][ T5851] bridge_slave_1: entered allmulticast mode [ 87.575418][ T5851] bridge_slave_1: entered promiscuous mode [ 87.591742][ T5971] EXT4-fs: inline encryption not supported [ 87.609663][ T5971] journal_path: Non-blockdev passed as './bus' [ 87.615897][ T5971] EXT4-fs: error: could not find journal device path [ 87.646723][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.698688][ T5976] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.736842][ T5971] FAT-fs (loop2): Directory bread(block 64) failed [ 87.745243][ T5971] FAT-fs (loop2): Directory bread(block 65) failed [ 87.754236][ T5992] netlink: 'syz.5.659': attribute type 16 has an invalid length. [ 87.756340][ T5976] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.762339][ T5992] netlink: 'syz.5.659': attribute type 17 has an invalid length. [ 87.772589][ T5971] FAT-fs (loop2): Directory bread(block 66) failed [ 87.787898][ T5971] FAT-fs (loop2): Directory bread(block 67) failed [ 87.794682][ T5971] FAT-fs (loop2): Directory bread(block 68) failed [ 87.801932][ T5971] FAT-fs (loop2): Directory bread(block 69) failed [ 87.808737][ T5971] FAT-fs (loop2): Directory bread(block 70) failed [ 87.815463][ T5971] FAT-fs (loop2): Directory bread(block 71) failed [ 87.822176][ T5971] FAT-fs (loop2): Directory bread(block 72) failed [ 87.831156][ T5971] FAT-fs (loop2): Directory bread(block 73) failed [ 87.867823][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.897084][ T5971] syz.2.658: attempt to access beyond end of device [ 87.897084][ T5971] loop2: rw=0, sector=1800, nr_sectors = 8 limit=256 [ 87.938748][ T5992] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 87.981899][ T5999] usb usb7: usbfs: interface 0 claimed by hub while 'syz.2.661' resets device [ 88.007920][ T5851] team0: Port device team_slave_0 added [ 88.015020][ T5851] team0: Port device team_slave_1 added [ 88.030860][ T6002] set_capacity_and_notify: 7 callbacks suppressed [ 88.030878][ T6002] loop0: detected capacity change from 0 to 512 [ 88.060005][ T6002] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 88.071973][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.079097][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.108707][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.133395][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.141100][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.167850][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.191967][ T6002] ext4 filesystem being mounted at /147/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 88.221971][ T5851] hsr_slave_0: entered promiscuous mode [ 88.231637][ T5851] hsr_slave_1: entered promiscuous mode [ 88.354360][ T5851] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 88.371740][ T5851] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 88.382549][ T5851] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 88.394461][ T5851] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 88.404710][ T6028] loop2: detected capacity change from 0 to 164 [ 88.440222][ T6028] Unsupported NM flag settings (240) [ 88.554405][ T6047] loop2: detected capacity change from 0 to 512 [ 88.568228][ T6047] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 88.572953][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.704676][ T5851] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.707132][ T6047] EXT4-fs (loop2): orphan cleanup on readonly fs [ 88.719566][ T3326] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.726656][ T3326] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.743580][ T6047] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:517: comm syz.2.670: Block bitmap for bg 0 marked uninitialized [ 88.757793][ T3326] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.764903][ T3326] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.789650][ T6047] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 88.824414][ T6047] EXT4-fs (loop2): 1 orphan inode deleted [ 88.895065][ T5851] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 88.906237][ T5851] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 88.985882][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.007714][ T31] Bluetooth: hci0: Frame reassembly failed (-84) [ 89.146533][ T6047] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 89.166100][ T5851] veth0_vlan: entered promiscuous mode [ 89.176232][ T5851] veth1_vlan: entered promiscuous mode [ 89.194803][ T5851] veth0_macvtap: entered promiscuous mode [ 89.203110][ T5851] veth1_macvtap: entered promiscuous mode [ 89.215613][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.228911][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.240296][ T12] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.263823][ T6047] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 89.417645][ T12] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.713952][ T12] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.736370][ T12] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.852221][ T6095] IPv6: addrconf: prefix option has invalid lifetime [ 90.173830][ T6122] loop5: detected capacity change from 0 to 1024 [ 90.182588][ T6122] EXT4-fs: inline encryption not supported [ 90.247224][ T29] kauditd_printk_skb: 179 callbacks suppressed [ 90.247242][ T29] audit: type=1326 audit(1770287754.451:4054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6092 comm="syz.7.632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fb9f71eaeb9 code=0x7ffc0000 [ 90.346237][ T6132] loop2: detected capacity change from 0 to 1024 [ 90.372064][ T6132] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 90.384772][ T6132] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 90.405927][ T6132] EXT4-fs error (device loop2): ext4_get_journal_inode:5849: inode #32: comm syz.2.680: iget: special inode unallocated [ 90.419346][ T6132] EXT4-fs (loop2): Remounting filesystem read-only [ 90.425965][ T6132] EXT4-fs (loop2): no journal found [ 90.431970][ T6132] EXT4-fs (loop2): can't get journal size [ 90.442325][ T6132] EXT4-fs (loop2): filesystem is read-only [ 90.451848][ T6136] loop7: detected capacity change from 0 to 128 [ 90.491978][ T6136] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 90.519569][ T6136] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 90.565394][ T29] audit: type=1326 audit(1770287754.761:4055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6135 comm="syz.7.682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9f71eaeb9 code=0x7ffc0000 [ 90.617179][ T29] audit: type=1326 audit(1770287754.791:4056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6135 comm="syz.7.682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9f71eaeb9 code=0x7ffc0000 [ 90.640859][ T29] audit: type=1326 audit(1770287754.791:4057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6135 comm="syz.7.682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb9f71eaeb9 code=0x7ffc0000 [ 90.665018][ T29] audit: type=1326 audit(1770287754.791:4058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6135 comm="syz.7.682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9f71eaeb9 code=0x7ffc0000 [ 90.688370][ T29] audit: type=1326 audit(1770287754.791:4059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6135 comm="syz.7.682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9f71eaeb9 code=0x7ffc0000 [ 90.712477][ T29] audit: type=1326 audit(1770287754.791:4060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6135 comm="syz.7.682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb9f71eaeb9 code=0x7ffc0000 [ 90.735756][ T29] audit: type=1326 audit(1770287754.791:4061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6135 comm="syz.7.682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9f71eaeb9 code=0x7ffc0000 [ 90.759898][ T29] audit: type=1326 audit(1770287754.801:4062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6135 comm="syz.7.682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9f71eaeb9 code=0x7ffc0000 [ 90.825099][ T31] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 90.880286][ T6143] loop7: detected capacity change from 0 to 512 [ 90.900596][ T6143] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 90.934671][ T6132] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1015 sclass=netlink_route_socket pid=6132 comm=syz.2.680 [ 90.949705][ T6143] EXT4-fs (loop7): orphan cleanup on readonly fs [ 90.956160][ T6143] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:517: comm syz.7.683: Block bitmap for bg 0 marked uninitialized [ 90.988345][ T6143] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 90.998113][ T6143] EXT4-fs (loop7): 1 orphan inode deleted [ 91.010664][ T6143] EXT4-fs (loop7): warning: mounting fs with errors, running e2fsck is recommended [ 91.020322][ T6143] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 91.029807][ T3523] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 91.035175][ T6143] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:517: comm syz.7.683: Block bitmap for bg 0 marked uninitialized [ 91.086787][ T6154] netlink: 'syz.6.686': attribute type 14 has an invalid length. [ 91.210582][ T29] audit: type=1326 audit(1770287755.411:4063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6163 comm="syz.5.690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4aa202aeb9 code=0x7ffc0000 [ 91.405670][ T6174] loop2: detected capacity change from 0 to 512 [ 91.419382][ T6174] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 91.427941][ T6174] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 91.438340][ T6174] EXT4-fs warning (device loop2): read_mmp_block:111: Error -117 while reading MMP block 0 [ 91.553980][ T6180] loop6: detected capacity change from 0 to 1024 [ 91.583837][ T6182] loop2: detected capacity change from 0 to 512 [ 91.666579][ T6182] EXT4-fs: inline encryption not supported [ 91.688569][ T6182] journal_path: Non-blockdev passed as './bus' [ 91.694831][ T6182] EXT4-fs: error: could not find journal device path [ 92.039697][ T6206] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 92.070929][ T6206] ext4 filesystem being mounted at /62/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 92.192338][ T6209] EXT4-fs error (device loop6): ext4_lookup:1785: inode #12: comm syz.6.701: iget: bad i_size value: 2533274857506816 [ 92.229135][ T6209] EXT4-fs error (device loop6): ext4_lookup:1785: inode #12: comm syz.6.701: iget: bad i_size value: 2533274857506816 [ 92.505213][ T6211] batadv_slave_1: entered promiscuous mode [ 92.512360][ T6211] netlink: 48 bytes leftover after parsing attributes in process `syz.0.702'. [ 92.525253][ T6211] vlan3: entered allmulticast mode [ 92.541892][ T6213] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(3) [ 92.548487][ T6213] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 92.556167][ T6213] vhci_hcd vhci_hcd.0: Device attached [ 92.563381][ T6214] usbip_core: unknown command [ 92.568149][ T6214] vhci_hcd: unknown pdu 0 [ 92.572529][ T6214] usbip_core: unknown command [ 92.587357][ T3326] vhci_hcd vhci_hcd.7: stop threads [ 92.592628][ T3326] vhci_hcd vhci_hcd.7: release socket [ 92.598070][ T3326] vhci_hcd vhci_hcd.7: disconnect device [ 92.609191][ T6210] batadv_slave_1: left promiscuous mode [ 92.868554][ T6229] EXT4-fs (loop5): cluster size (2048) smaller than block size (4096) [ 93.046384][ T6237] FAULT_INJECTION: forcing a failure. [ 93.046384][ T6237] name failslab, interval 1, probability 0, space 0, times 0 [ 93.059249][ T6237] CPU: 1 UID: 0 PID: 6237 Comm: syz.0.709 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 93.059279][ T6237] Tainted: [W]=WARN [ 93.059292][ T6237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 93.059322][ T6237] Call Trace: [ 93.059329][ T6237] [ 93.059336][ T6237] __dump_stack+0x1d/0x30 [ 93.059360][ T6237] dump_stack_lvl+0x95/0xd0 [ 93.059386][ T6237] dump_stack+0x15/0x1b [ 93.059411][ T6237] should_fail_ex+0x263/0x280 [ 93.059447][ T6237] should_failslab+0x8c/0xb0 [ 93.059546][ T6237] __kmalloc_cache_node_noprof+0x69/0x4a0 [ 93.059610][ T6237] ? __get_vm_area_node+0x106/0x1d0 [ 93.059634][ T6237] __get_vm_area_node+0x106/0x1d0 [ 93.059660][ T6237] __vmalloc_node_range_noprof+0x291/0x12b0 [ 93.059694][ T6237] ? sel_write_load+0x156/0x380 [ 93.059776][ T6237] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 93.059878][ T6237] ? sel_write_load+0x156/0x380 [ 93.059912][ T6237] vmalloc_noprof+0x82/0xb0 [ 93.059939][ T6237] ? sel_write_load+0x156/0x380 [ 93.059982][ T6237] sel_write_load+0x156/0x380 [ 93.060019][ T6237] ? __pfx_sel_write_load+0x10/0x10 [ 93.060131][ T6237] vfs_write+0x269/0x9f0 [ 93.060150][ T6237] ? __rcu_read_unlock+0x4e/0x70 [ 93.060185][ T6237] ? __fget_files+0x184/0x1c0 [ 93.060238][ T6237] ? mutex_lock+0x57/0x90 [ 93.060265][ T6237] ksys_write+0xdc/0x1a0 [ 93.060295][ T6237] __x64_sys_write+0x40/0x50 [ 93.060317][ T6237] x64_sys_call+0x2847/0x3000 [ 93.060391][ T6237] do_syscall_64+0xc0/0x2a0 [ 93.060427][ T6237] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.060448][ T6237] RIP: 0033:0x7f3a4c80aeb9 [ 93.060464][ T6237] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.060526][ T6237] RSP: 002b:00007f3a4b267028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 93.060550][ T6237] RAX: ffffffffffffffda RBX: 00007f3a4ca85fa0 RCX: 00007f3a4c80aeb9 [ 93.060626][ T6237] RDX: 000000000000ffa8 RSI: 0000000000000000 RDI: 0000000000000003 [ 93.060641][ T6237] RBP: 00007f3a4b267090 R08: 0000000000000000 R09: 0000000000000000 [ 93.060656][ T6237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 93.060672][ T6237] R13: 00007f3a4ca86038 R14: 00007f3a4ca85fa0 R15: 00007ffcd2b86878 [ 93.060691][ T6237] [ 93.060698][ T6237] syz.0.709: vmalloc error: size 65448, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0 [ 93.302967][ T6237] CPU: 1 UID: 0 PID: 6237 Comm: syz.0.709 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 93.303002][ T6237] Tainted: [W]=WARN [ 93.303008][ T6237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 93.303019][ T6237] Call Trace: [ 93.303025][ T6237] [ 93.303032][ T6237] __dump_stack+0x1d/0x30 [ 93.303160][ T6237] dump_stack_lvl+0x95/0xd0 [ 93.303186][ T6237] dump_stack+0x15/0x1b [ 93.303279][ T6237] warn_alloc+0x145/0x1c0 [ 93.303317][ T6237] __vmalloc_node_range_noprof+0x2b6/0x12b0 [ 93.303346][ T6237] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 93.303411][ T6237] ? sel_write_load+0x156/0x380 [ 93.303446][ T6237] vmalloc_noprof+0x82/0xb0 [ 93.303475][ T6237] ? sel_write_load+0x156/0x380 [ 93.303520][ T6237] sel_write_load+0x156/0x380 [ 93.303590][ T6237] ? __pfx_sel_write_load+0x10/0x10 [ 93.303620][ T6237] vfs_write+0x269/0x9f0 [ 93.303641][ T6237] ? __rcu_read_unlock+0x4e/0x70 [ 93.303714][ T6237] ? __fget_files+0x184/0x1c0 [ 93.303735][ T6237] ? mutex_lock+0x57/0x90 [ 93.303809][ T6237] ksys_write+0xdc/0x1a0 [ 93.303829][ T6237] __x64_sys_write+0x40/0x50 [ 93.303848][ T6237] x64_sys_call+0x2847/0x3000 [ 93.303893][ T6237] do_syscall_64+0xc0/0x2a0 [ 93.303934][ T6237] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.304017][ T6237] RIP: 0033:0x7f3a4c80aeb9 [ 93.304032][ T6237] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.304048][ T6237] RSP: 002b:00007f3a4b267028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 93.304066][ T6237] RAX: ffffffffffffffda RBX: 00007f3a4ca85fa0 RCX: 00007f3a4c80aeb9 [ 93.304079][ T6237] RDX: 000000000000ffa8 RSI: 0000000000000000 RDI: 0000000000000003 [ 93.304148][ T6237] RBP: 00007f3a4b267090 R08: 0000000000000000 R09: 0000000000000000 [ 93.304160][ T6237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 93.304171][ T6237] R13: 00007f3a4ca86038 R14: 00007f3a4ca85fa0 R15: 00007ffcd2b86878 [ 93.304189][ T6237] [ 93.304195][ T6237] Mem-Info: [ 93.510113][ T6237] active_anon:8808 inactive_anon:1 isolated_anon:0 [ 93.510113][ T6237] active_file:25300 inactive_file:2333 isolated_file:0 [ 93.510113][ T6237] unevictable:0 dirty:362 writeback:0 [ 93.510113][ T6237] slab_reclaimable:3464 slab_unreclaimable:15145 [ 93.510113][ T6237] mapped:30810 shmem:553 pagetables:1484 [ 93.510113][ T6237] sec_pagetables:0 bounce:0 [ 93.510113][ T6237] kernel_misc_reclaimable:0 [ 93.510113][ T6237] free:1875758 free_pcp:10760 free_cma:0 [ 93.554985][ T6237] Node 0 active_anon:35232kB inactive_anon:4kB active_file:101200kB inactive_file:9332kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:123240kB dirty:1448kB writeback:0kB shmem:2212kB kernel_stack:3872kB pagetables:5936kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 93.582324][ T6237] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 93.612217][ T6237] lowmem_reserve[]: 0 2879 7858 7858 [ 93.617599][ T6237] Node 0 DMA32 free:2944744kB boost:0kB min:4128kB low:7056kB high:9984kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2948376kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:3528kB free_cma:0kB [ 93.648968][ T6237] lowmem_reserve[]: 0 0 4978 4978 [ 93.654029][ T6237] Node 0 Normal free:4542928kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:35232kB inactive_anon:4kB active_file:101200kB inactive_file:9332kB unevictable:0kB writepending:1448kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:39408kB local_pcp:7948kB free_cma:0kB [ 93.687092][ T6237] lowmem_reserve[]: 0 0 0 0 [ 93.691688][ T6237] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 93.704476][ T6237] Node 0 DMA32: 2*4kB (M) 2*8kB (M) 3*16kB (M) 1*32kB (M) 2*64kB (M) 4*128kB (M) 4*256kB (M) 2*512kB (M) 3*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2944744kB [ 93.720568][ T6237] Node 0 Normal: 1850*4kB (UME) 1306*8kB (UME) 541*16kB (UM) 346*32kB (UME) 257*64kB (UME) 138*128kB (UME) 114*256kB (UME) 66*512kB (UM) 33*1024kB (UME) 18*2048kB (UM) 1059*4096kB (UM) = 4542984kB [ 93.740131][ T6237] Node 0 hugepages_total=4 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 93.749444][ T6237] 28198 total pagecache pages [ 93.754176][ T6237] 2 pages in swap cache [ 93.758389][ T6237] Free swap = 124988kB [ 93.762560][ T6237] Total swap = 124996kB [ 93.766736][ T6237] 2097051 pages RAM [ 93.770550][ T6237] 0 pages HighMem/MovableOnly [ 93.775236][ T6237] 81557 pages reserved [ 93.844433][ T6242] 9pnet_virtio: no channels available for device 127.0.0.1 [ 93.905552][ T6246] set_capacity_and_notify: 2 callbacks suppressed [ 93.905571][ T6246] loop6: detected capacity change from 0 to 4096 [ 93.992458][ T6261] openvswitch: netlink: Missing key (keys=40, expected=80) [ 94.415091][ T3326] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.455188][ T6308] loop7: detected capacity change from 0 to 1024 [ 94.471063][ T3326] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.487372][ T6308] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 94.497353][ T6308] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 94.507486][ T6308] EXT4-fs (loop7): stripe (9) is not aligned with cluster size (16), stripe is disabled [ 94.517623][ T6308] EXT4-fs error (device loop7): ext4_get_journal_inode:5849: inode #32: comm syz.7.727: iget: special inode unallocated [ 94.553204][ T6308] EXT4-fs (loop7): no journal found [ 94.558534][ T6308] EXT4-fs (loop7): can't get journal size [ 94.568176][ T3326] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.619748][ T3326] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.663449][ T6304] chnl_net:caif_netlink_parms(): no params data found [ 94.765001][ T3326] bridge_slave_1: left allmulticast mode [ 94.770768][ T3326] bridge_slave_1: left promiscuous mode [ 94.776711][ T3326] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.994960][ T3326] bridge_slave_0: left allmulticast mode [ 95.000694][ T3326] bridge_slave_0: left promiscuous mode [ 95.006492][ T3326] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.123043][ T3326] bridge0 (unregistering): left allmulticast mode [ 95.149374][ T6358] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=22830 sclass=netlink_xfrm_socket pid=6358 comm=syz.7.734 [ 95.190777][ T6358] loop7: detected capacity change from 0 to 1024 [ 95.259999][ T3326] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 95.339902][ T29] kauditd_printk_skb: 622 callbacks suppressed [ 95.339917][ T29] audit: type=1326 audit(1770287759.541:4686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6354 comm="syz.7.734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9f71eaeb9 code=0x7ffc0000 [ 95.366708][ T3326] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 95.383748][ T6358] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 95.399481][ T29] audit: type=1326 audit(1770287759.581:4687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6354 comm="syz.7.734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb9f71eac22 code=0x7ffc0000 [ 95.402048][ T3326] bond0 (unregistering): Released all slaves [ 95.422690][ T29] audit: type=1326 audit(1770287759.581:4688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6354 comm="syz.7.734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fb9f71eacb7 code=0x7ffc0000 [ 95.452726][ T29] audit: type=1326 audit(1770287759.581:4689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6354 comm="syz.7.734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fb9f71a7c51 code=0x7ffc0000 [ 95.476764][ T29] audit: type=1326 audit(1770287759.581:4690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6354 comm="syz.7.734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fb9f71ebcc9 code=0x7ffc0000 [ 95.500157][ T29] audit: type=1326 audit(1770287759.581:4691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6354 comm="syz.7.734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fb9f71a7cbb code=0x7ffc0000 [ 95.510195][ T6358] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 95.525040][ T29] audit: type=1326 audit(1770287759.581:4692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6354 comm="syz.7.734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9f71eaeb9 code=0x7ffc0000 [ 95.536293][ T6358] EXT4-fs (loop7): This should not happen!! Data will be lost [ 95.536293][ T6358] [ 95.561238][ T29] audit: type=1326 audit(1770287759.581:4693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6354 comm="syz.7.734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9f71eaeb9 code=0x7ffc0000 [ 95.569598][ T6358] EXT4-fs (loop7): Total free blocks count 0 [ 95.594846][ T29] audit: type=1326 audit(1770287759.581:4694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6354 comm="syz.7.734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7fb9f71a73ac code=0x7ffc0000 [ 95.598993][ T6358] EXT4-fs (loop7): Free/Dirty block details [ 95.599012][ T6358] EXT4-fs (loop7): free_blocks=68451041280 [ 95.599028][ T6358] EXT4-fs (loop7): dirty_blocks=4848 [ 95.624088][ T29] audit: type=1326 audit(1770287759.581:4695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6354 comm="syz.7.734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fb9f71a740e code=0x7ffc0000 [ 95.628263][ T6358] EXT4-fs (loop7): Block reservation details [ 95.628294][ T6358] EXT4-fs (loop7): i_reserved_data_blocks=303 [ 95.684234][ T6304] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.691545][ T6304] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.738988][ T6304] bridge_slave_0: entered allmulticast mode [ 95.752008][ T6304] bridge_slave_0: entered promiscuous mode [ 95.775598][ T3326] hsr_slave_0: left promiscuous mode [ 95.781686][ T3326] hsr_slave_1: left promiscuous mode [ 95.787548][ T3326] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.794984][ T3326] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 95.869112][ T6377] loop5: detected capacity change from 0 to 512 [ 95.882392][ T3326] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 95.886687][ T6377] EXT4-fs: Ignoring removed nobh option [ 95.889922][ T3326] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 95.912122][ T3326] veth1_macvtap: left promiscuous mode [ 95.917964][ T3326] veth0_macvtap: left promiscuous mode [ 95.920109][ T6377] ext4 filesystem being mounted at /148/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.924535][ T3326] veth1_vlan: left promiscuous mode [ 95.943654][ T6377] EXT4-fs warning (device loop5): ext4_group_add:1716: Can't resize non-sparse filesystem further [ 95.960585][ T3326] veth0_vlan: left promiscuous mode [ 95.972060][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 96.135869][ T3345] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 96.149123][ T3345] EXT4-fs (loop7): This should not happen!! Data will be lost [ 96.149123][ T3345] [ 96.197475][ T3326] team0 (unregistering): Port device team_slave_1 removed [ 96.217626][ T3326] team0 (unregistering): Port device team_slave_0 removed [ 96.283765][ T6304] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.290968][ T6304] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.304773][ T6388] loop5: detected capacity change from 0 to 1024 [ 96.316559][ T6304] bridge_slave_1: entered allmulticast mode [ 96.324480][ T6304] bridge_slave_1: entered promiscuous mode [ 96.522694][ T6304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.561429][ T6304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.598051][ T6304] team0: Port device team_slave_0 added [ 96.730673][ T6304] team0: Port device team_slave_1 added [ 96.773289][ T6304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.781315][ T6304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.808564][ T6304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.831158][ T6411] loop5: detected capacity change from 0 to 1024 [ 96.836196][ T6304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.845511][ T6304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.846778][ T6411] EXT4-fs: inline encryption not supported [ 96.873693][ T6304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.964239][ T6304] hsr_slave_0: entered promiscuous mode [ 96.993889][ T6304] hsr_slave_1: entered promiscuous mode [ 97.000240][ T6422] program syz.7.747 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 97.012288][ T6304] debugfs: 'hsr0' already exists in 'hsr' [ 97.018981][ T6304] Cannot create hsr debugfs directory [ 97.063552][ T6426] loop7: detected capacity change from 0 to 512 [ 97.079923][ T6427] lo: Caught tx_queue_len zero misconfig [ 97.100878][ T6426] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 97.122264][ T6426] EXT4-fs (loop7): 1 truncate cleaned up [ 97.304258][ T6304] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 97.318947][ T6304] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 97.366675][ T6304] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 97.444676][ T6304] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 97.554921][ T6304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.592840][ T6304] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.602780][ T3326] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.610009][ T3326] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.678865][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.686054][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.704315][ T3345] Bluetooth: hci1: Frame reassembly failed (-84) [ 97.818833][ T6304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.942357][ T6491] loop5: detected capacity change from 0 to 512 [ 97.956883][ T6491] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 97.965371][ T6491] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 97.986561][ T4096] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 98.028050][ T6491] EXT4-fs warning (device loop5): read_mmp_block:111: Error -117 while reading MMP block 0 [ 98.084865][ T6500] batadv_slave_1: entered promiscuous mode [ 98.094087][ T6500] netlink: 48 bytes leftover after parsing attributes in process `syz.0.753'. [ 98.107190][ T6500] vlan3: entered allmulticast mode [ 98.170546][ T6499] batadv_slave_1: left promiscuous mode [ 98.187717][ T6304] veth0_vlan: entered promiscuous mode [ 98.204869][ T6304] veth1_vlan: entered promiscuous mode [ 98.271326][ T6508] program syz.0.756 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 98.282351][ T6508] FAULT_INJECTION: forcing a failure. [ 98.282351][ T6508] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 98.295588][ T6508] CPU: 1 UID: 0 PID: 6508 Comm: syz.0.756 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 98.295654][ T6508] Tainted: [W]=WARN [ 98.295663][ T6508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 98.295678][ T6508] Call Trace: [ 98.295684][ T6508] [ 98.295695][ T6508] __dump_stack+0x1d/0x30 [ 98.295731][ T6508] dump_stack_lvl+0x95/0xd0 [ 98.295760][ T6508] dump_stack+0x15/0x1b [ 98.295783][ T6508] should_fail_ex+0x263/0x280 [ 98.295815][ T6508] should_fail+0xb/0x20 [ 98.295916][ T6508] should_fail_usercopy+0x1a/0x20 [ 98.295963][ T6508] _copy_from_user+0x1c/0xb0 [ 98.296056][ T6508] scsi_ioctl+0x1402/0x1750 [ 98.296094][ T6508] ? __rcu_read_unlock+0x4e/0x70 [ 98.296221][ T6508] ? avc_has_perm_noaudit+0xab/0x130 [ 98.296270][ T6508] ? avc_has_perm+0x101/0x190 [ 98.296345][ T6508] ? do_vfs_ioctl+0x84f/0xe70 [ 98.296470][ T6508] sg_ioctl+0xebf/0x1350 [ 98.296576][ T6508] ? __pfx_sg_ioctl+0x10/0x10 [ 98.296617][ T6508] __se_sys_ioctl+0xce/0x140 [ 98.296675][ T6508] __x64_sys_ioctl+0x43/0x50 [ 98.296720][ T6508] x64_sys_call+0x14b0/0x3000 [ 98.296749][ T6508] do_syscall_64+0xc0/0x2a0 [ 98.296787][ T6508] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.296871][ T6508] RIP: 0033:0x7f3a4c80aeb9 [ 98.296895][ T6508] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.296981][ T6508] RSP: 002b:00007f3a4b267028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 98.297013][ T6508] RAX: ffffffffffffffda RBX: 00007f3a4ca85fa0 RCX: 00007f3a4c80aeb9 [ 98.297035][ T6508] RDX: 0000200000000180 RSI: 0000000000000001 RDI: 0000000000000003 [ 98.297055][ T6508] RBP: 00007f3a4b267090 R08: 0000000000000000 R09: 0000000000000000 [ 98.297172][ T6508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 98.297191][ T6508] R13: 00007f3a4ca86038 R14: 00007f3a4ca85fa0 R15: 00007ffcd2b86878 [ 98.297216][ T6508] [ 98.459320][ T6304] veth0_macvtap: entered promiscuous mode [ 98.556920][ T6304] veth1_macvtap: entered promiscuous mode [ 98.569809][ T6304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.579447][ T6304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.594481][ T3345] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.605095][ T3345] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.614511][ T3345] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.635804][ T3345] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.703624][ T6519] loop8: detected capacity change from 0 to 512 [ 98.754843][ T6523] FAULT_INJECTION: forcing a failure. [ 98.754843][ T6523] name failslab, interval 1, probability 0, space 0, times 0 [ 98.767588][ T6523] CPU: 1 UID: 0 PID: 6523 Comm: syz.2.761 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 98.767628][ T6523] Tainted: [W]=WARN [ 98.767638][ T6523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 98.767655][ T6523] Call Trace: [ 98.767663][ T6523] [ 98.767672][ T6523] __dump_stack+0x1d/0x30 [ 98.767810][ T6523] dump_stack_lvl+0x95/0xd0 [ 98.767839][ T6523] dump_stack+0x15/0x1b [ 98.767865][ T6523] should_fail_ex+0x263/0x280 [ 98.767986][ T6523] should_failslab+0x8c/0xb0 [ 98.768015][ T6523] ? dev_load+0x61/0xc0 [ 98.768040][ T6523] __kmalloc_cache_noprof+0x64/0x4a0 [ 98.768078][ T6523] ? __request_module+0x1c4/0x3d0 [ 98.768141][ T6523] ? dev_load+0x61/0xc0 [ 98.768162][ T6523] __request_module+0x1c4/0x3d0 [ 98.768204][ T6523] ? capable+0x7b/0xb0 [ 98.768300][ T6523] ? security_capable+0x7b/0x90 [ 98.768336][ T6523] dev_load+0x61/0xc0 [ 98.768361][ T6523] devinet_ioctl+0x91/0xe00 [ 98.768464][ T6523] ? _copy_from_user+0x89/0xb0 [ 98.768493][ T6523] inet_ioctl+0x27c/0x3a0 [ 98.768525][ T6523] sock_do_ioctl+0x73/0x230 [ 98.768558][ T6523] sock_ioctl+0x41b/0x610 [ 98.768644][ T6523] ? mutex_lock+0x57/0x90 [ 98.768672][ T6523] ? __pfx_sock_ioctl+0x10/0x10 [ 98.768695][ T6523] __se_sys_ioctl+0xce/0x140 [ 98.768789][ T6523] __x64_sys_ioctl+0x43/0x50 [ 98.768822][ T6523] x64_sys_call+0x14b0/0x3000 [ 98.768852][ T6523] do_syscall_64+0xc0/0x2a0 [ 98.768888][ T6523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.768971][ T6523] RIP: 0033:0x7fd23c02aeb9 [ 98.768991][ T6523] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.769078][ T6523] RSP: 002b:00007fd23aa87028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 98.769098][ T6523] RAX: ffffffffffffffda RBX: 00007fd23c2a5fa0 RCX: 00007fd23c02aeb9 [ 98.769119][ T6523] RDX: 0000200000000040 RSI: 0000000000008935 RDI: 0000000000000003 [ 98.769132][ T6523] RBP: 00007fd23aa87090 R08: 0000000000000000 R09: 0000000000000000 [ 98.769146][ T6523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 98.769162][ T6523] R13: 00007fd23c2a6038 R14: 00007fd23c2a5fa0 R15: 00007fff2b844eb8 [ 98.769188][ T6523] [ 99.023669][ T6519] EXT4-fs error (device loop8): ext4_orphan_get:1391: inode #15: comm syz.8.725: inode has both inline data and extents flags [ 99.040232][ T6519] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.725: couldn't read orphan inode 15 (err -117) [ 99.089088][ T6531] loop2: detected capacity change from 0 to 512 [ 99.097084][ T6531] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 99.105541][ T6531] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 99.119848][ T6531] EXT4-fs warning (device loop2): read_mmp_block:111: Error -117 while reading MMP block 0 [ 99.193582][ T6537] batadv_slave_1: entered promiscuous mode [ 99.302977][ T6537] netlink: 48 bytes leftover after parsing attributes in process `syz.2.766'. [ 99.315138][ T6534] batadv_slave_1: left promiscuous mode [ 99.379774][ T6562] loop2: detected capacity change from 0 to 512 [ 99.387110][ T6562] EXT4-fs: Ignoring removed orlov option [ 99.393062][ T6562] EXT4-fs: Ignoring removed mblk_io_submit option [ 99.402842][ T6562] EXT4-fs error (device loop2): ext4_iget_extra_inode:5073: inode #15: comm syz.2.775: corrupted in-inode xattr: e_value size too large [ 99.417350][ T6562] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.775: couldn't read orphan inode 15 (err -117) [ 99.461539][ T6565] loop8: detected capacity change from 0 to 512 [ 99.483954][ T6565] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 99.492470][ T6565] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 99.503663][ T6565] EXT4-fs warning (device loop8): read_mmp_block:111: Error -117 while reading MMP block 0 [ 99.746687][ T6473] Bluetooth: hci1: command 0x1003 tx timeout [ 99.746693][ T3523] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 99.803730][ T6584] loop2: detected capacity change from 0 to 4096 [ 99.897503][ T6595] loop7: detected capacity change from 0 to 512 [ 99.905781][ T6595] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 99.915115][ T6595] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 99.935864][ T6595] EXT4-fs warning (device loop7): read_mmp_block:111: Error -117 while reading MMP block 0 [ 99.996210][ T6599] batadv_slave_1: entered promiscuous mode [ 100.018000][ T6602] loop7: detected capacity change from 0 to 1024 [ 100.030240][ T6602] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.055822][ T6599] vlan2: entered allmulticast mode [ 100.158699][ T6598] batadv_slave_1: left promiscuous mode [ 100.284202][ T6626] loop7: detected capacity change from 0 to 512 [ 100.300085][ T6626] ext4: Invalid gid '0x00000000ffffffff' [ 100.363208][ T6635] loop7: detected capacity change from 0 to 128 [ 100.372004][ T6637] loop0: detected capacity change from 0 to 1024 [ 100.435651][ T6637] EXT4-fs mount: 82 callbacks suppressed [ 100.435673][ T6637] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 100.491919][ T6637] ext4 filesystem being mounted at /171/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.540525][ T6654] batadv_slave_1: entered promiscuous mode [ 100.549972][ T6651] netlink: 32 bytes leftover after parsing attributes in process `syz.7.801'. [ 100.604285][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 100.639911][ T6667] vlan2: entered allmulticast mode [ 100.658561][ T6670] loop5: detected capacity change from 0 to 4096 [ 100.678029][ T6670] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.699391][ T6653] batadv_slave_1: left promiscuous mode [ 100.746553][ T29] kauditd_printk_skb: 365 callbacks suppressed [ 100.746645][ T29] audit: type=1326 audit(1770287764.951:5061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6674 comm="syz.0.808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a4c80aeb9 code=0x7ffc0000 [ 100.786919][ T29] audit: type=1326 audit(1770287764.951:5062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6674 comm="syz.0.808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a4c80aeb9 code=0x7ffc0000 [ 100.814745][ T29] audit: type=1326 audit(1770287764.951:5063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6674 comm="syz.0.808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a4c80aeb9 code=0x7ffc0000 [ 100.838929][ T29] audit: type=1326 audit(1770287764.951:5064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6674 comm="syz.0.808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f3a4c80aeb9 code=0x7ffc0000 [ 100.914015][ T6678] netlink: 20 bytes leftover after parsing attributes in process `syz.8.810'. [ 100.934160][ T6681] netlink: 20 bytes leftover after parsing attributes in process `syz.8.810'. [ 100.944746][ T29] audit: type=1326 audit(1770287765.131:5065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6674 comm="syz.0.808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a4c80aeb9 code=0x7ffc0000 [ 100.946497][ T3615] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.970025][ T29] audit: type=1326 audit(1770287765.131:5066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6674 comm="syz.0.808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a4c80aeb9 code=0x7ffc0000 [ 101.013190][ T29] audit: type=1326 audit(1770287765.211:5067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6674 comm="syz.0.808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a4c80aeb9 code=0x7ffc0000 [ 101.093794][ T6687] FAULT_INJECTION: forcing a failure. [ 101.093794][ T6687] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 101.099544][ T29] audit: type=1326 audit(1770287765.241:5068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6674 comm="syz.0.808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f3a4c80aeb9 code=0x7ffc0000 [ 101.106971][ T6687] CPU: 1 UID: 0 PID: 6687 Comm: syz.5.812 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 101.107009][ T6687] Tainted: [W]=WARN [ 101.107106][ T6687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 101.107171][ T6687] Call Trace: [ 101.107192][ T6687] [ 101.107216][ T6687] __dump_stack+0x1d/0x30 [ 101.107306][ T6687] dump_stack_lvl+0x95/0xd0 [ 101.107400][ T6687] dump_stack+0x15/0x1b [ 101.107465][ T6687] should_fail_ex+0x263/0x280 [ 101.107570][ T6687] should_fail+0xb/0x20 [ 101.107673][ T6687] should_fail_usercopy+0x1a/0x20 [ 101.107784][ T6687] _copy_to_user+0x20/0xa0 [ 101.107861][ T6687] simple_read_from_buffer+0xb5/0x130 [ 101.107971][ T6687] proc_fail_nth_read+0x10e/0x150 [ 101.108120][ T6687] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 101.108212][ T6687] vfs_read+0x1ab/0x7f0 [ 101.108273][ T6687] ? __schedule+0x82d/0xc90 [ 101.108336][ T6687] ? __rcu_read_unlock+0x4e/0x70 [ 101.108431][ T6687] ? __fget_files+0x184/0x1c0 [ 101.108570][ T6687] ? mutex_lock+0x57/0x90 [ 101.108720][ T6687] ksys_read+0xdc/0x1a0 [ 101.108785][ T6687] __x64_sys_read+0x40/0x50 [ 101.108848][ T6687] x64_sys_call+0x2889/0x3000 [ 101.108948][ T6687] do_syscall_64+0xc0/0x2a0 [ 101.109063][ T6687] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.109196][ T6687] RIP: 0033:0x7f4aa1feb78e [ 101.109241][ T6687] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 101.109350][ T6687] RSP: 002b:00007f4aa0a86fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 101.109413][ T6687] RAX: ffffffffffffffda RBX: 00007f4aa0a876c0 RCX: 00007f4aa1feb78e [ 101.109474][ T6687] RDX: 000000000000000f RSI: 00007f4aa0a870a0 RDI: 0000000000000003 [ 101.109516][ T6687] RBP: 00007f4aa0a87090 R08: 0000000000000000 R09: 0000000000000000 [ 101.109557][ T6687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 101.109616][ T6687] R13: 00007f4aa22a6038 R14: 00007f4aa22a5fa0 R15: 00007ffd463ab328 [ 101.109696][ T6687] [ 101.451543][ T29] audit: type=1326 audit(1770287765.571:5069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6674 comm="syz.0.808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f3a4c80aeb9 code=0x7ffc0000 [ 101.476055][ T29] audit: type=1326 audit(1770287765.621:5070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6703 comm="syz.0.820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a4c80aeb9 code=0x7ffc0000 [ 101.602847][ T6726] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 101.629594][ T6726] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.651395][ T6726] ext4 filesystem being mounted at /175/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 101.669580][ T6731] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 101.710168][ T6731] EXT4-fs (loop5): 1 truncate cleaned up [ 101.719846][ T6737] xt_nat: multiple ranges no longer supported [ 101.731376][ T6731] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.745380][ T6737] EXT4-fs: inline encryption not supported [ 101.751709][ T6737] ext4: Bad value for 'mb_optimize_scan' [ 101.796097][ T6744] EXT4-fs error (device loop0): ext4_lookup:1785: inode #12: comm syz.0.824: iget: bad i_size value: 2533274857506816 [ 101.903103][ T3615] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.935516][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.988538][ T6766] netlink: 8 bytes leftover after parsing attributes in process `syz.8.829'. [ 102.003254][ T6766] bridge0: entered promiscuous mode [ 102.010214][ T6766] bridge0: port 3(macsec1) entered blocking state [ 102.016825][ T6766] bridge0: port 3(macsec1) entered disabled state [ 102.023736][ T6766] macsec1: entered allmulticast mode [ 102.029157][ T6766] bridge0: entered allmulticast mode [ 102.035505][ T6766] macsec1: left allmulticast mode [ 102.040612][ T6766] bridge0: left allmulticast mode [ 102.069316][ T6766] bridge0: left promiscuous mode [ 102.213832][ T6786] EXT4-fs: inline encryption not supported [ 102.267613][ T6786] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.298387][ T6801] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 102.325854][ T6801] EXT4-fs (loop8): 1 truncate cleaned up [ 102.357115][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.368458][ T6801] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.541828][ T6304] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.838487][ T6882] set_capacity_and_notify: 5 callbacks suppressed [ 107.838502][ T6882] loop0: detected capacity change from 0 to 1024 [ 107.852560][ T6882] EXT4-fs: inline encryption not supported [ 107.870621][ T6882] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.907380][ T6880] 9pnet: p9_errstr2errno: server reported unknown error  [ 107.907408][ T6888] netlink: 'syz.8.850': attribute type 4 has an invalid length. [ 107.941442][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.991722][ T6900] bridge0: port 3(syz_tun) entered blocking state [ 107.998469][ T6900] bridge0: port 3(syz_tun) entered disabled state [ 108.018712][ T6900] syz_tun: entered allmulticast mode [ 108.024908][ T6900] syz_tun: entered promiscuous mode [ 108.030782][ T6900] bridge0: port 3(syz_tun) entered blocking state [ 108.037281][ T6900] bridge0: port 3(syz_tun) entered forwarding state [ 108.093545][ T6905] batadv_slave_1: entered promiscuous mode [ 108.115340][ T6900] netlink: 24 bytes leftover after parsing attributes in process `syz.7.857'. [ 108.126785][ T6913] batadv_slave_1: entered promiscuous mode [ 108.190644][ T6913] vlan2: entered allmulticast mode [ 108.208112][ T6905] vlan2: entered allmulticast mode [ 108.213397][ T6905] vlan0: entered allmulticast mode [ 108.218622][ T6905] veth0_vlan: entered allmulticast mode [ 108.227477][ T6921] loop2: detected capacity change from 0 to 4096 [ 108.258984][ T6921] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.280120][ T6911] batadv_slave_1: left promiscuous mode [ 108.298274][ T6937] batadv_slave_1: entered promiscuous mode [ 108.330704][ T6904] batadv_slave_1: left promiscuous mode [ 108.331710][ T6938] loop7: detected capacity change from 0 to 512 [ 108.348345][ T6942] batadv_slave_1: entered promiscuous mode [ 108.379932][ T6937] vlan3: entered allmulticast mode [ 108.406748][ T6938] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 108.414763][ T6938] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 108.440403][ T6950] vlan2: entered allmulticast mode [ 108.468163][ T6938] System zones: 0-1, 15-15, 18-18, 34-34 [ 108.475875][ T6938] EXT4-fs (loop7): orphan cleanup on readonly fs [ 108.482706][ T6938] __quota_error: 108 callbacks suppressed [ 108.482723][ T6938] Quota error (device loop7): v2_read_header: Failed header read: expected=8 got=0 [ 108.498081][ T6938] EXT4-fs warning (device loop7): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 108.512673][ T6938] EXT4-fs (loop7): Cannot turn on quotas: error -22 [ 108.519877][ T6936] batadv_slave_1: left promiscuous mode [ 108.525770][ T6938] EXT4-fs (loop7): 1 truncate cleaned up [ 108.542401][ T6938] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 108.555026][ T6955] loop8: detected capacity change from 0 to 1024 [ 108.562662][ T6955] EXT4-fs: inline encryption not supported [ 108.573936][ T6941] batadv_slave_1: left promiscuous mode [ 108.583595][ T29] audit: type=1400 audit(1770287772.781:5179): avc: denied { read } for pid=6931 comm="syz.7.862" name="file2" dev="loop7" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 108.630717][ T6955] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.663976][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.674080][ T5851] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.698578][ T29] audit: type=1400 audit(1770287772.891:5180): avc: denied { create } for pid=6962 comm="syz.0.869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 108.734177][ T6304] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.761534][ T29] audit: type=1400 audit(1770287772.921:5181): avc: denied { setopt } for pid=6962 comm="syz.0.869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 108.784819][ T6970] loop2: detected capacity change from 0 to 512 [ 108.829349][ T6970] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.871: bad orphan inode 17 [ 108.840477][ T6970] ext4_test_bit(bit=16, block=4) = 1 [ 108.846061][ T6970] is_bad_inode(inode)=0 [ 108.850316][ T6970] NEXT_ORPHAN(inode)=0 [ 108.854408][ T6970] max_ino=32 [ 108.857668][ T6970] i_nlink=1 [ 108.864310][ T6970] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.883206][ T6970] FAULT_INJECTION: forcing a failure. [ 108.883206][ T6970] name failslab, interval 1, probability 0, space 0, times 0 [ 108.895998][ T6970] CPU: 1 UID: 0 PID: 6970 Comm: syz.2.871 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 108.896030][ T6970] Tainted: [W]=WARN [ 108.896037][ T6970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 108.896050][ T6970] Call Trace: [ 108.896059][ T6970] [ 108.896069][ T6970] __dump_stack+0x1d/0x30 [ 108.896099][ T6970] dump_stack_lvl+0x95/0xd0 [ 108.896170][ T6970] dump_stack+0x15/0x1b [ 108.896191][ T6970] should_fail_ex+0x263/0x280 [ 108.896222][ T6970] ? __pfx_ext4_alloc_inode+0x10/0x10 [ 108.896300][ T6970] should_failslab+0x8c/0xb0 [ 108.896410][ T6970] kmem_cache_alloc_lru_noprof+0x6c/0x490 [ 108.896442][ T6970] ? ext4_alloc_inode+0x38/0x320 [ 108.896513][ T6970] ? ext4_search_dir+0x1cb/0x250 [ 108.896535][ T6970] ? __pfx_ext4_alloc_inode+0x10/0x10 [ 108.896639][ T6970] ext4_alloc_inode+0x38/0x320 [ 108.896666][ T6970] ? __pfx_ext4_alloc_inode+0x10/0x10 [ 108.896694][ T6970] alloc_inode+0x40/0x170 [ 108.896717][ T6970] new_inode+0x1d/0xe0 [ 108.896771][ T6970] __ext4_new_inode+0x15e/0x2330 [ 108.896798][ T6970] ? __dquot_initialize+0x146/0x7c0 [ 108.896920][ T6970] ? _raw_spin_unlock+0x9/0x30 [ 108.896982][ T6970] ext4_create+0x16e/0x2f0 [ 108.897034][ T6970] ? __pfx_ext4_create+0x10/0x10 [ 108.897064][ T6970] path_openat+0x1121/0x23c0 [ 108.897112][ T6970] do_filp_open+0x15d/0x280 [ 108.897170][ T6970] do_sys_openat2+0xa6/0x150 [ 108.897209][ T6970] __x64_sys_creat+0x65/0x90 [ 108.897309][ T6970] x64_sys_call+0x2f1c/0x3000 [ 108.897335][ T6970] do_syscall_64+0xc0/0x2a0 [ 108.897372][ T6970] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.897430][ T6970] RIP: 0033:0x7fd23c02aeb9 [ 108.897449][ T6970] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 108.897622][ T6970] RSP: 002b:00007fd23aa87028 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 108.897655][ T6970] RAX: ffffffffffffffda RBX: 00007fd23c2a5fa0 RCX: 00007fd23c02aeb9 [ 108.897669][ T6970] RDX: 0000000000000000 RSI: 00000000000001a2 RDI: 00002000000000c0 [ 108.897687][ T6970] RBP: 00007fd23aa87090 R08: 0000000000000000 R09: 0000000000000000 [ 108.897704][ T6970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 108.897721][ T6970] R13: 00007fd23c2a6038 R14: 00007fd23c2a5fa0 R15: 00007fff2b844eb8 [ 108.897746][ T6970] [ 108.978007][ T29] audit: type=1326 audit(1770287773.181:5182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6984 comm="syz.0.876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a4c80aeb9 code=0x7ffc0000 [ 109.162311][ T29] audit: type=1326 audit(1770287773.261:5183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6984 comm="syz.0.876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f3a4c80aeb9 code=0x7ffc0000 [ 109.213714][ T29] audit: type=1326 audit(1770287773.391:5184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6988 comm="syz.7.878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9f71eaeb9 code=0x7ffc0000 [ 109.237882][ T29] audit: type=1326 audit(1770287773.391:5185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6988 comm="syz.7.878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9f71eaeb9 code=0x7ffc0000 [ 109.261283][ T29] audit: type=1326 audit(1770287773.401:5186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6988 comm="syz.7.878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb9f71eaeb9 code=0x7ffc0000 [ 109.284733][ T29] audit: type=1326 audit(1770287773.401:5187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6988 comm="syz.7.878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9f71eaeb9 code=0x7ffc0000 [ 109.285100][ T6992] loop8: detected capacity change from 0 to 512 [ 109.326110][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.335423][ T6992] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 109.353308][ T6992] EXT4-fs (loop8): orphan cleanup on readonly fs [ 109.361516][ T6992] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:517: comm syz.8.877: Block bitmap for bg 0 marked uninitialized [ 109.369247][ T6997] netlink: 164 bytes leftover after parsing attributes in process `syz.7.881'. [ 109.408171][ T6992] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 109.453874][ T6992] EXT4-fs (loop8): 1 orphan inode deleted [ 109.458292][ T7001] loop0: detected capacity change from 0 to 512 [ 109.464542][ T6992] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 109.486770][ T7001] EXT4-fs: inline encryption not supported [ 109.506463][ T7001] journal_path: Non-blockdev passed as './bus' [ 109.512666][ T7001] EXT4-fs: error: could not find journal device path [ 109.528648][ T6990] EXT4-fs (loop8): warning: mounting fs with errors, running e2fsck is recommended [ 109.542696][ T6990] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 109.552190][ T7009] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.554857][ T6990] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:517: comm syz.8.877: Block bitmap for bg 0 marked uninitialized [ 109.593588][ T7012] loop7: detected capacity change from 0 to 512 [ 109.641079][ T7006] loop5: detected capacity change from 0 to 512 [ 109.655282][ T6304] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.724213][ T7009] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.724575][ T7006] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 109.742546][ T7006] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 109.750655][ T7006] System zones: 0-1, 15-15, 18-18, 34-34 [ 109.756866][ T7006] EXT4-fs (loop5): orphan cleanup on readonly fs [ 109.763366][ T7006] EXT4-fs warning (device loop5): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 109.778001][ T7006] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 109.785627][ T7006] EXT4-fs (loop5): 1 truncate cleaned up [ 109.794449][ T7023] loop2: detected capacity change from 0 to 512 [ 109.807117][ T7006] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 109.838095][ T7023] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 109.847865][ T7009] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.878305][ T7023] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.905760][ T7029] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 109.920086][ T7009] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.930729][ T7023] ext4 filesystem being mounted at /177/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 109.957643][ T7033] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.971251][ T7029] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.024992][ T3615] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.041428][ T12] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.051694][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.064681][ T12] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.076532][ T12] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.084954][ T12] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.086597][ T7029] ext4 filesystem being mounted at /27/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 110.180179][ T7040] EXT4-fs error (device loop2): ext4_lookup:1785: inode #12: comm syz.2.890: iget: bad i_size value: 2533274857506816 [ 110.197339][ T7041] EXT4-fs error (device loop8): ext4_lookup:1785: inode #12: comm syz.8.891: iget: bad i_size value: 2533274857506816 [ 110.239402][ T7039] netlink: 20 bytes leftover after parsing attributes in process `syz.5.894'. [ 110.317512][ T7048] netlink: 44 bytes leftover after parsing attributes in process `syz.0.896'. [ 110.389105][ T7051] bond1: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 110.425402][ T7051] bond1 (unregistering): Released all slaves [ 110.433301][ T7054] EXT4-fs: inline encryption not supported [ 110.439470][ T7054] journal_path: Non-blockdev passed as './bus' [ 110.445653][ T7054] EXT4-fs: error: could not find journal device path [ 110.454480][ T6304] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.469209][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.547477][ T7062] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 110.585779][ T7062] EXT4-fs (loop8): orphan cleanup on readonly fs [ 110.595342][ T7062] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:517: comm syz.8.900: Block bitmap for bg 0 marked uninitialized [ 110.612605][ T7062] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 110.658292][ T7062] EXT4-fs (loop8): 1 orphan inode deleted [ 110.702082][ T7062] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 110.717492][ T7066] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.766855][ T7062] EXT4-fs (loop8): warning: mounting fs with errors, running e2fsck is recommended [ 110.824884][ T7062] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 110.837610][ T5851] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.851938][ T7075] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.906868][ T7078] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:517: comm syz.8.900: Block bitmap for bg 0 marked uninitialized [ 110.922858][ T7075] ext4 filesystem being mounted at /184/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.975129][ T7089] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 111.010760][ T7075] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #18: comm syz.5.905: corrupted inode contents [ 111.023020][ T7075] EXT4-fs (loop5): Remounting filesystem read-only [ 111.046517][ T6304] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.062321][ T7096] FAT-fs (loop0): Directory bread(block 199916) failed [ 111.069878][ T7096] FAT-fs (loop0): Directory bread(block 199917) failed [ 111.080571][ T7089] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.086626][ T7075] EXT4-fs warning (device loop5): ext4_evict_inode:273: xattr delete (err -30) [ 111.104904][ T7096] FAT-fs (loop0): Directory bread(block 199918) failed [ 111.144903][ T7089] ext4 filesystem being mounted at /44/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 111.150928][ T7096] FAT-fs (loop0): Directory bread(block 199919) failed [ 111.194497][ T3615] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.203898][ T7105] EXT4-fs: inline encryption not supported [ 111.255389][ T7106] EXT4-fs error (device loop7): ext4_lookup:1785: inode #12: comm syz.7.911: iget: bad i_size value: 2533274857506816 [ 111.268566][ T7105] journal_path: Non-blockdev passed as './bus' [ 111.274757][ T7105] EXT4-fs: error: could not find journal device path [ 111.281714][ T7096] FAT-fs (loop0): Directory bread(block 199920) failed [ 111.290297][ T7096] FAT-fs (loop0): Directory bread(block 199921) failed [ 111.298153][ T7096] FAT-fs (loop0): Directory bread(block 199922) failed [ 111.305250][ T7096] FAT-fs (loop0): Directory bread(block 199923) failed [ 111.339784][ T7103] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.358527][ T7105] FAT-fs (loop8): Directory bread(block 64) failed [ 111.365140][ T7105] FAT-fs (loop8): Directory bread(block 65) failed [ 111.424514][ T7103] ext4 filesystem being mounted at /181/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 111.438710][ T7105] FAT-fs (loop8): Directory bread(block 66) failed [ 111.443043][ T5851] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.445939][ T7105] FAT-fs (loop8): Directory bread(block 67) failed [ 111.457542][ T7110] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7110 comm=syz.0.912 [ 111.464638][ T7105] FAT-fs (loop8): Directory bread(block 68) failed [ 111.480573][ T7103] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #2: comm syz.2.914: corrupted inode contents [ 111.492871][ T7105] FAT-fs (loop8): Directory bread(block 69) failed [ 111.502745][ T7105] FAT-fs (loop8): Directory bread(block 70) failed [ 111.508978][ T7103] EXT4-fs (loop2): Remounting filesystem read-only [ 111.511147][ T7110] FAT-fs (loop0): Directory bread(block 199916) failed [ 111.550534][ T7113] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 111.561891][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.576457][ T7105] FAT-fs (loop8): Directory bread(block 71) failed [ 111.583084][ T7105] FAT-fs (loop8): Directory bread(block 72) failed [ 111.590545][ T7113] EXT4-fs (loop5): 1 truncate cleaned up [ 111.596601][ T7110] FAT-fs (loop0): Directory bread(block 199917) failed [ 111.609367][ T7113] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.625267][ T7116] EXT4-fs: inline encryption not supported [ 111.631371][ T7105] FAT-fs (loop8): Directory bread(block 73) failed [ 111.672311][ T7116] journal_path: Non-blockdev passed as './bus' [ 111.678796][ T7116] EXT4-fs: error: could not find journal device path [ 111.717389][ T7105] syz.8.915: attempt to access beyond end of device [ 111.717389][ T7105] loop8: rw=0, sector=1800, nr_sectors = 8 limit=256 [ 111.758591][ T3615] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.828632][ T7116] FAT-fs (loop7): Directory bread(block 64) failed [ 111.835334][ T7116] FAT-fs (loop7): Directory bread(block 65) failed [ 111.865457][ T7135] netlink: 84 bytes leftover after parsing attributes in process `syz.2.918'. [ 111.874654][ T7135] openvswitch: netlink: Key type 30 is not supported [ 111.885300][ T7116] FAT-fs (loop7): Directory bread(block 66) failed [ 111.914396][ T7116] FAT-fs (loop7): Directory bread(block 67) failed [ 111.928721][ T7142] netlink: 8 bytes leftover after parsing attributes in process `syz.2.918'. [ 111.937593][ T7142] netlink: 12 bytes leftover after parsing attributes in process `syz.2.918'. [ 111.954690][ T7116] FAT-fs (loop7): Directory bread(block 68) failed [ 111.961699][ T7116] FAT-fs (loop7): Directory bread(block 69) failed [ 111.968973][ T7116] FAT-fs (loop7): Directory bread(block 70) failed [ 112.004770][ T31] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.013586][ T7116] FAT-fs (loop7): Directory bread(block 71) failed [ 112.014003][ T7142] netlink: 8 bytes leftover after parsing attributes in process `syz.2.918'. [ 112.029692][ T7142] netlink: 12 bytes leftover after parsing attributes in process `syz.2.918'. [ 112.030623][ T7116] FAT-fs (loop7): Directory bread(block 72) failed [ 112.041133][ T7148] batadv_slave_1: entered promiscuous mode [ 112.056759][ T31] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.065530][ T31] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.086448][ T3326] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.108136][ T7116] FAT-fs (loop7): Directory bread(block 73) failed [ 112.129335][ T7148] vlan2: entered allmulticast mode [ 112.176760][ T7116] syz.7.917: attempt to access beyond end of device [ 112.176760][ T7116] loop7: rw=0, sector=1800, nr_sectors = 8 limit=256 [ 112.208958][ T7147] batadv_slave_1: left promiscuous mode [ 112.345949][ T7175] netlink: 36 bytes leftover after parsing attributes in process `syz.0.926'. [ 112.439569][ T7181] FAULT_INJECTION: forcing a failure. [ 112.439569][ T7181] name failslab, interval 1, probability 0, space 0, times 0 [ 112.452241][ T7181] CPU: 0 UID: 0 PID: 7181 Comm: syz.0.929 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 112.452402][ T7181] Tainted: [W]=WARN [ 112.452409][ T7181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 112.452422][ T7181] Call Trace: [ 112.452455][ T7181] [ 112.452465][ T7181] __dump_stack+0x1d/0x30 [ 112.452502][ T7181] dump_stack_lvl+0x95/0xd0 [ 112.452597][ T7181] dump_stack+0x15/0x1b [ 112.452618][ T7181] should_fail_ex+0x263/0x280 [ 112.452650][ T7181] should_failslab+0x8c/0xb0 [ 112.452704][ T7181] __kmalloc_cache_noprof+0x64/0x4a0 [ 112.452732][ T7181] ? quota_mt_check+0x5a/0xd0 [ 112.452852][ T7181] quota_mt_check+0x5a/0xd0 [ 112.452956][ T7181] xt_check_match+0x2ad/0x4f0 [ 112.452998][ T7181] ? xt_find_match+0x1d1/0x210 [ 112.453037][ T7181] ? xt_find_match+0x1b5/0x210 [ 112.453102][ T7181] translate_table+0xb12/0x10d0 [ 112.453151][ T7181] ? _copy_from_user+0x89/0xb0 [ 112.453203][ T7181] do_ipt_set_ctl+0x6d0/0x8e0 [ 112.453238][ T7181] ? _raw_spin_unlock_bh+0x18/0x20 [ 112.453277][ T7181] ? tcp_release_cb+0xf1/0x370 [ 112.453322][ T7181] nf_setsockopt+0x199/0x1b0 [ 112.453381][ T7181] ip_setsockopt+0x102/0x110 [ 112.453414][ T7181] tcp_setsockopt+0x98/0xb0 [ 112.453448][ T7181] sock_common_setsockopt+0x69/0x80 [ 112.453483][ T7181] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 112.453538][ T7181] __sys_setsockopt+0x184/0x200 [ 112.453573][ T7181] __x64_sys_setsockopt+0x64/0x80 [ 112.453615][ T7181] x64_sys_call+0x21d5/0x3000 [ 112.453690][ T7181] do_syscall_64+0xc0/0x2a0 [ 112.453729][ T7181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.453750][ T7181] RIP: 0033:0x7f3a4c80aeb9 [ 112.453765][ T7181] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.453803][ T7181] RSP: 002b:00007f3a4b267028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 112.453829][ T7181] RAX: ffffffffffffffda RBX: 00007f3a4ca85fa0 RCX: 00007f3a4c80aeb9 [ 112.453895][ T7181] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 112.453908][ T7181] RBP: 00007f3a4b267090 R08: 0000000000000b80 R09: 0000000000000000 [ 112.453988][ T7181] R10: 0000200000000980 R11: 0000000000000246 R12: 0000000000000001 [ 112.454004][ T7181] R13: 00007f3a4ca86038 R14: 00007f3a4ca85fa0 R15: 00007ffcd2b86878 [ 112.454102][ T7181] [ 112.705086][ T7177] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 112.750178][ T7183] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 112.765403][ T7177] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.793597][ T7177] ext4 filesystem being mounted at /33/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 112.824936][ T7183] EXT4-fs (loop7): 1 truncate cleaned up [ 112.831061][ T7183] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.870820][ T7189] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 112.879422][ T7189] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 112.898440][ T7193] EXT4-fs error (device loop8): ext4_lookup:1785: inode #12: comm syz.8.927: iget: bad i_size value: 2533274857506816 [ 112.936789][ T7189] EXT4-fs warning (device loop5): read_mmp_block:111: Error -117 while reading MMP block 0 [ 113.106087][ T7203] set_capacity_and_notify: 18 callbacks suppressed [ 113.106108][ T7203] loop5: detected capacity change from 0 to 764 [ 113.108169][ T5851] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.188827][ T6304] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.291939][ T7221] bridge0: entered promiscuous mode [ 113.299193][ T7212] loop5: detected capacity change from 0 to 4096 [ 113.306299][ T7221] macvtap1: entered promiscuous mode [ 113.312105][ T7221] macvtap1: entered allmulticast mode [ 113.318624][ T7221] bridge0: entered allmulticast mode [ 113.331925][ T7212] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.370841][ T7212] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 7 with max blocks 1 with error 28 [ 113.383948][ T7212] EXT4-fs (loop5): This should not happen!! Data will be lost [ 113.383948][ T7212] [ 113.393709][ T7212] EXT4-fs (loop5): Total free blocks count 0 [ 113.399824][ T7212] EXT4-fs (loop5): Free/Dirty block details [ 113.405827][ T7212] EXT4-fs (loop5): free_blocks=0 [ 113.412648][ T7212] EXT4-fs (loop5): dirty_blocks=0 [ 113.417838][ T7212] EXT4-fs (loop5): Block reservation details [ 113.423960][ T7212] EXT4-fs (loop5): i_reserved_data_blocks=0 [ 113.468013][ T7222] loop7: detected capacity change from 0 to 4096 [ 113.491830][ T7222] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.541545][ T3615] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.575674][ T7222] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 7 with max blocks 1 with error 28 [ 113.588085][ T7222] EXT4-fs (loop7): This should not happen!! Data will be lost [ 113.588085][ T7222] [ 113.597844][ T7222] EXT4-fs (loop7): Total free blocks count 0 [ 113.603880][ T7222] EXT4-fs (loop7): Free/Dirty block details [ 113.609860][ T7222] EXT4-fs (loop7): free_blocks=0 [ 113.614827][ T7222] EXT4-fs (loop7): dirty_blocks=0 [ 113.619927][ T7222] EXT4-fs (loop7): Block reservation details [ 113.625972][ T7222] EXT4-fs (loop7): i_reserved_data_blocks=0 [ 113.794350][ T7248] loop0: detected capacity change from 0 to 512 [ 113.795000][ T5851] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.813301][ T7248] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.944: bad orphan inode 17 [ 113.876510][ T7192] syz.2.933 (7192) used greatest stack depth: 6400 bytes left [ 113.897783][ T7248] ext4_test_bit(bit=16, block=4) = 1 [ 113.903135][ T7248] is_bad_inode(inode)=0 [ 113.907429][ T7248] NEXT_ORPHAN(inode)=0 [ 113.911518][ T7248] max_ino=32 [ 113.914741][ T7248] i_nlink=1 [ 113.936187][ T7255] loop5: detected capacity change from 0 to 512 [ 113.947986][ T29] kauditd_printk_skb: 43 callbacks suppressed [ 113.947999][ T29] audit: type=1326 audit(1770287778.151:5229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7256 comm="syz.7.945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9f71eaeb9 code=0x7ffc0000 [ 113.981785][ T7248] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.991940][ T7255] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 114.040507][ T7262] loop2: detected capacity change from 0 to 512 [ 114.047050][ T7255] EXT4-fs (loop5): 1 truncate cleaned up [ 114.060938][ T29] audit: type=1326 audit(1770287778.201:5230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7256 comm="syz.7.945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb9f71eaeb9 code=0x7ffc0000 [ 114.077540][ T7255] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.086291][ T29] audit: type=1326 audit(1770287778.201:5231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7256 comm="syz.7.945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9f71eaeb9 code=0x7ffc0000 [ 114.120481][ T29] audit: type=1326 audit(1770287778.201:5232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7256 comm="syz.7.945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9f71eaeb9 code=0x7ffc0000 [ 114.143857][ T29] audit: type=1326 audit(1770287778.201:5233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7256 comm="syz.7.945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb9f71eaeb9 code=0x7ffc0000 [ 114.168576][ T29] audit: type=1326 audit(1770287778.201:5234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7256 comm="syz.7.945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9f71eaeb9 code=0x7ffc0000 [ 114.192015][ T29] audit: type=1326 audit(1770287778.201:5235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7256 comm="syz.7.945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9f71eaeb9 code=0x7ffc0000 [ 114.215988][ T29] audit: type=1326 audit(1770287778.201:5236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7256 comm="syz.7.945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb9f71eaeb9 code=0x7ffc0000 [ 114.239920][ T29] audit: type=1326 audit(1770287778.201:5237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7256 comm="syz.7.945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9f71eaeb9 code=0x7ffc0000 [ 114.263374][ T29] audit: type=1326 audit(1770287778.201:5238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7256 comm="syz.7.945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fb9f71eaeb9 code=0x7ffc0000 [ 114.330377][ T7262] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 114.339087][ T7269] EXT4-fs warning (device loop0): ext4_resize_begin:72: won't resize using backup superblock at 1 [ 114.370692][ T7269] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.944: bg 0: block 7: invalid block bitmap [ 114.401368][ T3615] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.415659][ T7262] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.444273][ T7282] loop5: detected capacity change from 0 to 128 [ 114.451002][ T7262] ext4 filesystem being mounted at /184/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 114.472952][ T7262] EXT4-fs error (device loop2): ext4_lookup:1785: inode #12: comm syz.2.947: iget: bad i_size value: 2533274857506816 [ 114.553812][ T7287] syz.5.953: attempt to access beyond end of device [ 114.553812][ T7287] loop5: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 114.586462][ T7287] syz.5.953: attempt to access beyond end of device [ 114.586462][ T7287] loop5: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 114.624483][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.633640][ T7287] syz.5.953: attempt to access beyond end of device [ 114.633640][ T7287] loop5: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 114.652154][ T7287] syz.5.953: attempt to access beyond end of device [ 114.652154][ T7287] loop5: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 114.680465][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.717217][ T7287] syz.5.953: attempt to access beyond end of device [ 114.717217][ T7287] loop5: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 114.735197][ T7287] syz.5.953: attempt to access beyond end of device [ 114.735197][ T7287] loop5: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 114.755218][ T7287] syz.5.953: attempt to access beyond end of device [ 114.755218][ T7287] loop5: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 114.770483][ T7287] syz.5.953: attempt to access beyond end of device [ 114.770483][ T7287] loop5: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 114.884379][ T7302] loop0: detected capacity change from 0 to 4096 [ 114.898004][ T7307] loop2: detected capacity change from 0 to 1024 [ 114.904835][ T7307] EXT4-fs: inline encryption not supported [ 114.958048][ T7307] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.958396][ T7302] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.107998][ T7316] loop7: detected capacity change from 0 to 512 [ 115.123563][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.138638][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.147940][ T7316] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 115.188688][ T7316] EXT4-fs (loop7): 1 truncate cleaned up [ 115.223795][ T7316] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.331919][ T7331] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 115.354034][ T7331] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 115.414565][ T5851] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.653262][ T7351] usb usb7: usbfs: process 7351 (syz.0.975) did not claim interface 0 before use [ 115.716011][ T7355] FAULT_INJECTION: forcing a failure. [ 115.716011][ T7355] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 115.729164][ T7355] CPU: 1 UID: 0 PID: 7355 Comm: syz.5.979 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 115.729200][ T7355] Tainted: [W]=WARN [ 115.729210][ T7355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 115.729225][ T7355] Call Trace: [ 115.729232][ T7355] [ 115.729297][ T7355] __dump_stack+0x1d/0x30 [ 115.729328][ T7355] dump_stack_lvl+0x95/0xd0 [ 115.729355][ T7355] dump_stack+0x15/0x1b [ 115.729383][ T7355] should_fail_ex+0x263/0x280 [ 115.729425][ T7355] should_fail+0xb/0x20 [ 115.729519][ T7355] should_fail_usercopy+0x1a/0x20 [ 115.729559][ T7355] _copy_from_user+0x1c/0xb0 [ 115.729669][ T7355] __sys_bind+0x106/0x290 [ 115.729707][ T7355] __x64_sys_bind+0x3f/0x50 [ 115.729733][ T7355] x64_sys_call+0x2ceb/0x3000 [ 115.729804][ T7355] do_syscall_64+0xc0/0x2a0 [ 115.729842][ T7355] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.729879][ T7355] RIP: 0033:0x7f4aa202aeb9 [ 115.729894][ T7355] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.729913][ T7355] RSP: 002b:00007f4aa0a87028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 115.729932][ T7355] RAX: ffffffffffffffda RBX: 00007f4aa22a5fa0 RCX: 00007f4aa202aeb9 [ 115.729946][ T7355] RDX: 000000000000001c RSI: 00002000000190c0 RDI: 0000000000000003 [ 115.729963][ T7355] RBP: 00007f4aa0a87090 R08: 0000000000000000 R09: 0000000000000000 [ 115.729986][ T7355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 115.730001][ T7355] R13: 00007f4aa22a6038 R14: 00007f4aa22a5fa0 R15: 00007ffd463ab328 [ 115.730021][ T7355] [ 115.734387][ T7351] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 115.758453][ T7353] EXT4-fs: inline encryption not supported [ 115.998457][ T7366] random: crng reseeded on system resumption [ 116.066732][ T7117] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.342082][ T7374] EXT4-fs error (device loop0): ext4_ext_check_inode:523: inode #3: comm syz.0.987: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 116.389185][ T7374] EXT4-fs error (device loop0): ext4_quota_enable:7180: comm syz.0.987: Bad quota inode: 3, type: 0 [ 116.422281][ T7374] EXT4-fs warning (device loop0): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 116.485364][ T7374] EXT4-fs (loop0): mount failed [ 116.655495][ T7395] EXT4-fs: inline encryption not supported [ 116.914494][ T3408] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.131911][ T3394] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.140713][ T3408] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.387789][ T7424] netlink: 'syz.0.1000': attribute type 1 has an invalid length. [ 117.421640][ T7424] 8021q: adding VLAN 0 to HW filter on device bond2 [ 117.574164][ T7433] gretap0: entered promiscuous mode [ 117.585655][ T7435] EXT4-fs: inline encryption not supported [ 117.591130][ T7433] vlan2: entered promiscuous mode [ 117.700360][ T7450] netlink: 'syz.5.1007': attribute type 1 has an invalid length. [ 117.709026][ T7440] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.1004: bad orphan inode 17 [ 117.739024][ T7450] usb usb9: usbfs: process 7450 (syz.5.1007) did not claim interface 0 before use [ 117.763360][ T7440] ext4_test_bit(bit=16, block=4) = 1 [ 117.768870][ T7440] is_bad_inode(inode)=0 [ 117.773046][ T7440] NEXT_ORPHAN(inode)=0 [ 117.777236][ T7440] max_ino=32 [ 117.780459][ T7440] i_nlink=1 [ 117.831730][ T7462] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 117.838172][ T7462] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 117.866344][ T7450] bond2: option miimon: invalid value (18446744073709551615) [ 117.873805][ T7450] bond2: option miimon: allowed values 0 - 2147483647 [ 117.893605][ T7471] SELinux: policydb magic number 0x92feec9b does not match expected magic number 0xf97cff8c [ 117.904951][ T7450] bond2 (unregistering): Released all slaves [ 117.929428][ T7474] EXT4-fs warning (device loop2): ext4_resize_begin:72: won't resize using backup superblock at 1 [ 117.940760][ T7471] SELinux: failed to load policy [ 117.947907][ T7474] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.1004: bg 0: block 7: invalid block bitmap [ 118.120338][ T7487] set_capacity_and_notify: 9 callbacks suppressed [ 118.120357][ T7487] loop7: detected capacity change from 0 to 1024 [ 118.141149][ T7487] EXT4-fs: inline encryption not supported [ 118.148775][ T3422] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.160095][ T7117] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.168419][ T3394] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.256049][ T7495] loop0: detected capacity change from 0 to 512 [ 118.270533][ T7495] EXT4-fs: inline encryption not supported [ 118.278938][ T7495] journal_path: Non-blockdev passed as './bus' [ 118.285160][ T7495] EXT4-fs: error: could not find journal device path [ 118.364353][ T7501] loop8: detected capacity change from 0 to 512 [ 118.392481][ T7501] EXT4-fs error (device loop8): ext4_orphan_get:1417: comm syz.8.1023: bad orphan inode 17 [ 118.402830][ T7501] ext4_test_bit(bit=16, block=4) = 1 [ 118.408171][ T7501] is_bad_inode(inode)=0 [ 118.412355][ T7501] NEXT_ORPHAN(inode)=0 [ 118.417246][ T7501] max_ino=32 [ 118.420496][ T7501] i_nlink=1 [ 118.475133][ T7501] EXT4-fs error (device loop8): ext4_validate_block_bitmap:432: comm syz.8.1023: bg 0: block 7: invalid block bitmap [ 118.660003][ T7523] loop7: detected capacity change from 0 to 1024 [ 118.675122][ T7523] EXT4-fs: inline encryption not supported [ 118.707203][ T7527] loop5: detected capacity change from 0 to 512 [ 118.718032][ T7527] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2 [ 118.745892][ T7527] EXT4-fs (loop5): 1 truncate cleaned up [ 118.801170][ T7527] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #2: block 4: comm syz.5.1030: lblock 0 mapped to illegal pblock 4 (length 1) [ 118.857696][ T7536] loop2: detected capacity change from 0 to 512 [ 118.871936][ T7527] EXT4-fs (loop5): Remounting filesystem read-only [ 118.878974][ T7536] EXT4-fs: inline encryption not supported [ 118.884886][ T7536] journal_path: Non-blockdev passed as './bus' [ 118.891114][ T7536] EXT4-fs: error: could not find journal device path [ 118.930439][ T7536] loop2: detected capacity change from 0 to 256 [ 118.947383][ T7536] FAT-fs (loop2): Directory bread(block 64) failed [ 118.956670][ T7536] FAT-fs (loop2): Directory bread(block 65) failed [ 118.963228][ T7536] FAT-fs (loop2): Directory bread(block 66) failed [ 118.994508][ T7544] loop5: detected capacity change from 0 to 512 [ 119.004496][ T7536] FAT-fs (loop2): Directory bread(block 67) failed [ 119.021067][ T7536] FAT-fs (loop2): Directory bread(block 68) failed [ 119.028564][ T7544] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 119.039164][ T7540] __nla_validate_parse: 3 callbacks suppressed [ 119.039195][ T7540] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1035'. [ 119.066470][ T7536] FAT-fs (loop2): Directory bread(block 69) failed [ 119.073214][ T7536] FAT-fs (loop2): Directory bread(block 70) failed [ 119.093296][ T7544] EXT4-fs (loop5): 1 truncate cleaned up [ 119.103024][ T7536] FAT-fs (loop2): Directory bread(block 71) failed [ 119.123210][ T7536] FAT-fs (loop2): Directory bread(block 72) failed [ 119.133357][ T7536] FAT-fs (loop2): Directory bread(block 73) failed [ 119.148764][ T7536] bio_check_eod: 103 callbacks suppressed [ 119.148781][ T7536] syz.2.1033: attempt to access beyond end of device [ 119.148781][ T7536] loop2: rw=0, sector=1800, nr_sectors = 8 limit=256 [ 119.189635][ T7117] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.212683][ T7549] loop8: detected capacity change from 0 to 512 [ 119.242673][ T7549] EXT4-fs error (device loop8): ext4_orphan_get:1417: comm syz.8.1037: bad orphan inode 17 [ 119.286327][ T7553] netlink: 'syz.2.1038': attribute type 16 has an invalid length. [ 119.294618][ T7553] netlink: 'syz.2.1038': attribute type 17 has an invalid length. [ 119.306627][ T7549] ext4_test_bit(bit=16, block=4) = 1 [ 119.311963][ T7549] is_bad_inode(inode)=0 [ 119.316151][ T7549] NEXT_ORPHAN(inode)=0 [ 119.320277][ T7549] max_ino=32 [ 119.323513][ T7549] i_nlink=1 [ 119.399722][ T7555] EXT4-fs warning (device loop8): ext4_resize_begin:72: won't resize using backup superblock at 1 [ 119.421101][ T7553] 8021q: adding VLAN 0 to HW filter on device bond0 [ 119.440037][ T7553] 8021q: adding VLAN 0 to HW filter on device team0 [ 119.458662][ T7553] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 119.546272][ T7562] loop7: detected capacity change from 0 to 1024 [ 119.558479][ T7562] EXT4-fs: inline encryption not supported [ 119.575901][ T7566] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 119.600835][ T7566] EXT4-fs (loop5): 1 truncate cleaned up [ 119.762993][ T29] kauditd_printk_skb: 199 callbacks suppressed [ 119.763007][ T29] audit: type=1326 audit(1770287783.957:5438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7577 comm="syz.2.1046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd23c02aeb9 code=0x7ffc0000 [ 119.801873][ T29] audit: type=1326 audit(1770287783.997:5439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7577 comm="syz.2.1046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd23c02aeb9 code=0x7ffc0000 [ 119.826177][ T29] audit: type=1326 audit(1770287783.997:5440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7577 comm="syz.2.1046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fd23c02aeb9 code=0x7ffc0000 [ 119.882599][ T29] audit: type=1326 audit(1770287784.067:5441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7577 comm="syz.2.1046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd23c02aeb9 code=0x7ffc0000 [ 119.906362][ T29] audit: type=1326 audit(1770287784.067:5442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7577 comm="syz.2.1046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd23c02aeb9 code=0x7ffc0000 [ 119.973284][ T7590] EXT4-fs: Ignoring removed mblk_io_submit option [ 119.980512][ T7590] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 120.007106][ T7591] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1050'. [ 120.031248][ T3326] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 120.039744][ T3326] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 120.056519][ T3422] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 120.168721][ T7595] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.1053: bad orphan inode 134217728 [ 120.203526][ T29] audit: type=1400 audit(1770287784.367:5443): avc: denied { setattr } for pid=7594 comm="syz.0.1053" name=".pending_reads" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 120.232962][ T7595] EXT4-fs error (device loop0): ext4_iget_extra_inode:5073: inode #15: comm syz.0.1053: corrupted in-inode xattr: bad e_name length [ 120.234284][ T7595] EXT4-fs error (device loop0): ext4_iget_extra_inode:5073: inode #15: comm syz.0.1053: corrupted in-inode xattr: bad e_name length [ 120.242483][ T7600] EXT4-fs: inline encryption not supported [ 120.319636][ T29] audit: type=1400 audit(1770287784.517:5444): avc: denied { getopt } for pid=7596 comm="syz.8.1051" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 120.419291][ T7607] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 120.435118][ T7607] EXT4-fs (loop5): 1 truncate cleaned up [ 120.676777][ T3422] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 120.686288][ T7605] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1055'. [ 120.696053][ T7605] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1055'. [ 120.714894][ T7605] geneve0: entered promiscuous mode [ 120.720430][ T7605] geneve0: entered allmulticast mode [ 120.787332][ T3378] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 120.809837][ T29] audit: type=1326 audit(1770287785.007:5445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7620 comm="syz.2.1060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd23c02aeb9 code=0x7ffc0000 [ 120.903825][ T29] audit: type=1326 audit(1770287785.027:5446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7620 comm="syz.2.1060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fd23c02aeb9 code=0x7ffc0000 [ 120.927442][ T29] audit: type=1326 audit(1770287785.027:5447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7620 comm="syz.2.1060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd23c02aeb9 code=0x7ffc0000 [ 120.996479][ T7632] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 121.034743][ T7636] EXT4-fs: inline encryption not supported [ 121.059450][ T7632] EXT4-fs (loop8): 1 truncate cleaned up [ 121.167986][ T7643] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 121.231127][ T7643] EXT4-fs (loop5): 1 truncate cleaned up [ 121.446128][ T7661] xt_cgroup: invalid path, errno=-2 [ 121.703720][ T7677] EXT4-fs: inline encryption not supported [ 121.779287][ T7681] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1083'. [ 121.817924][ T7681] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1083'. [ 121.837463][ T7685] batadv_slave_1: entered promiscuous mode [ 121.884168][ T7684] batadv_slave_1: left promiscuous mode [ 121.894200][ T7692] batadv_slave_1: entered promiscuous mode [ 121.954699][ T7692] vlan2: entered allmulticast mode [ 122.007837][ T7691] batadv_slave_1: left promiscuous mode [ 122.034068][ T7706] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 122.042868][ T7706] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 122.058185][ T7706] EXT4-fs warning (device loop5): read_mmp_block:111: Error -117 while reading MMP block 0 [ 122.122988][ T7708] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 122.172262][ T7708] ext4 filesystem being mounted at /239/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 122.194251][ T7708] EXT4-fs error (device loop0): ext4_lookup:1785: inode #12: comm syz.0.1092: iget: bad i_size value: 2533274857506816 [ 122.253868][ T7722] batadv_slave_1: entered promiscuous mode [ 122.330266][ T7117] net_ratelimit: 3 callbacks suppressed [ 122.330354][ T7117] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.348844][ T7731] EXT4-fs: Ignoring removed i_version option [ 122.381870][ T7731] EXT4-fs (loop2): 1 truncate cleaned up [ 122.391520][ T7721] batadv_slave_1: left promiscuous mode [ 122.415708][ T7734] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.1101: bad orphan inode 17 [ 122.482861][ T7731] EXT4-fs error (device loop2): ext4_find_dest_de:2050: inode #2: block 13: comm syz.2.1102: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 122.510904][ T7734] ext4_test_bit(bit=16, block=4) = 1 [ 122.516253][ T7734] is_bad_inode(inode)=0 [ 122.520451][ T7734] NEXT_ORPHAN(inode)=0 [ 122.524628][ T7734] max_ino=32 [ 122.528670][ T7734] i_nlink=1 [ 122.556021][ T7731] EXT4-fs (loop2): Remounting filesystem read-only [ 122.571206][ T7744] vlan2: entered allmulticast mode [ 122.604646][ T7746] EXT4-fs: Ignoring removed nobh option [ 122.629896][ T7746] ext4 filesystem being mounted at /221/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 122.720569][ T7754] ext4 filesystem being mounted at /230/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.773725][ T7754] FAULT_INJECTION: forcing a failure. [ 122.773725][ T7754] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 122.787003][ T7754] CPU: 0 UID: 0 PID: 7754 Comm: syz.5.1108 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 122.787108][ T7754] Tainted: [W]=WARN [ 122.787117][ T7754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 122.787135][ T7754] Call Trace: [ 122.787145][ T7754] [ 122.787155][ T7754] __dump_stack+0x1d/0x30 [ 122.787196][ T7754] dump_stack_lvl+0x95/0xd0 [ 122.787278][ T7754] dump_stack+0x15/0x1b [ 122.787306][ T7754] should_fail_ex+0x263/0x280 [ 122.787348][ T7754] should_fail+0xb/0x20 [ 122.787384][ T7754] should_fail_usercopy+0x1a/0x20 [ 122.787567][ T7754] _copy_to_user+0x20/0xa0 [ 122.787596][ T7754] simple_read_from_buffer+0xb5/0x130 [ 122.787650][ T7754] proc_fail_nth_read+0x10e/0x150 [ 122.787754][ T7754] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 122.787791][ T7754] vfs_read+0x1ab/0x7f0 [ 122.787921][ T7754] ? __rcu_read_unlock+0x4e/0x70 [ 122.787961][ T7754] ? __fget_files+0x184/0x1c0 [ 122.787991][ T7754] ? mutex_lock+0x57/0x90 [ 122.788022][ T7754] ksys_read+0xdc/0x1a0 [ 122.788105][ T7754] __x64_sys_read+0x40/0x50 [ 122.788164][ T7754] x64_sys_call+0x2889/0x3000 [ 122.788197][ T7754] do_syscall_64+0xc0/0x2a0 [ 122.788262][ T7754] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.788284][ T7754] RIP: 0033:0x7f4aa1feb78e [ 122.788313][ T7754] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 122.788337][ T7754] RSP: 002b:00007f4aa0a86fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 122.788370][ T7754] RAX: ffffffffffffffda RBX: 00007f4aa0a876c0 RCX: 00007f4aa1feb78e [ 122.788389][ T7754] RDX: 000000000000000f RSI: 00007f4aa0a870a0 RDI: 0000000000000005 [ 122.788462][ T7754] RBP: 00007f4aa0a87090 R08: 0000000000000000 R09: 0000000000000000 [ 122.788475][ T7754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 122.788491][ T7754] R13: 00007f4aa22a6038 R14: 00007f4aa22a5fa0 R15: 00007ffd463ab328 [ 122.788516][ T7754] [ 123.064916][ T7760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.147854][ T7766] set_capacity_and_notify: 20 callbacks suppressed [ 123.147869][ T7766] loop5: detected capacity change from 0 to 512 [ 123.161750][ T7766] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 123.186370][ T7766] ext4 filesystem being mounted at /232/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 123.226086][ T7770] batadv_slave_1: entered promiscuous mode [ 123.297421][ T7769] batadv_slave_1: left promiscuous mode [ 123.348500][ T7117] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.396352][ T7781] loop2: detected capacity change from 0 to 736 [ 123.404664][ T7782] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1115'. [ 123.451511][ T7781] rock: directory entry would overflow storage [ 123.457772][ T7781] rock: sig=0x3b10, size=4, remaining=3 [ 123.481444][ T7782] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 123.533191][ T7782] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 123.566764][ T7782] bond0 (unregistering): Released all slaves [ 123.613989][ T7781] batman_adv: batadv0: Adding interface: ipvlan2 [ 123.620476][ T7781] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1532. [ 123.640192][ T7781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.650735][ T7781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.660566][ T7781] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active [ 123.706091][ T7803] loop8: detected capacity change from 0 to 164 [ 123.719567][ T7788] vlan4: entered allmulticast mode [ 123.740920][ T7803] Unsupported NM flag settings (240) [ 123.752777][ T7803] FAULT_INJECTION: forcing a failure. [ 123.752777][ T7803] name failslab, interval 1, probability 0, space 0, times 0 [ 123.767297][ T7803] CPU: 1 UID: 0 PID: 7803 Comm: syz.8.1123 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 123.767338][ T7803] Tainted: [W]=WARN [ 123.767347][ T7803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 123.767364][ T7803] Call Trace: [ 123.767373][ T7803] [ 123.767382][ T7803] __dump_stack+0x1d/0x30 [ 123.767453][ T7803] dump_stack_lvl+0x95/0xd0 [ 123.767529][ T7803] dump_stack+0x15/0x1b [ 123.767557][ T7803] should_fail_ex+0x263/0x280 [ 123.767596][ T7803] ? __pfx_isofs_iget5_test+0x10/0x10 [ 123.767640][ T7803] ? __pfx_isofs_alloc_inode+0x10/0x10 [ 123.767701][ T7803] should_failslab+0x8c/0xb0 [ 123.767731][ T7803] kmem_cache_alloc_lru_noprof+0x6c/0x490 [ 123.767761][ T7803] ? isofs_alloc_inode+0x34/0x50 [ 123.767812][ T7803] ? __pfx_isofs_iget5_test+0x10/0x10 [ 123.767960][ T7803] ? __pfx_isofs_iget5_test+0x10/0x10 [ 123.768003][ T7803] ? __pfx_isofs_alloc_inode+0x10/0x10 [ 123.768024][ T7803] isofs_alloc_inode+0x34/0x50 [ 123.768106][ T7803] alloc_inode+0x40/0x170 [ 123.768128][ T7803] ? __pfx_isofs_iget5_set+0x10/0x10 [ 123.768200][ T7803] iget5_locked+0x4a/0xa0 [ 123.768229][ T7803] __isofs_iget+0xe9/0x1110 [ 123.768405][ T7803] ? sysvec_apic_timer_interrupt+0x44/0x80 [ 123.768430][ T7803] ? __list_add_valid_or_report+0x38/0xe0 [ 123.768526][ T7803] ? free_frozen_page_commit+0x79/0x3b0 [ 123.768628][ T7803] ? _raw_spin_unlock+0x9/0x30 [ 123.768669][ T7803] ? __free_frozen_pages+0x278/0x4f0 [ 123.768698][ T7803] isofs_lookup+0x7fc/0x920 [ 123.768777][ T7803] ? __pfx_isofs_lookup+0x10/0x10 [ 123.768811][ T7803] path_openat+0xee1/0x23c0 [ 123.769005][ T7803] do_filp_open+0x15d/0x280 [ 123.769094][ T7803] do_sys_openat2+0xa6/0x150 [ 123.769152][ T7803] __x64_sys_open+0xe6/0x110 [ 123.769225][ T7803] x64_sys_call+0x166f/0x3000 [ 123.769255][ T7803] do_syscall_64+0xc0/0x2a0 [ 123.769288][ T7803] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.769326][ T7803] RIP: 0033:0x7f292930aeb9 [ 123.769355][ T7803] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.769376][ T7803] RSP: 002b:00007f2927d67028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 123.769400][ T7803] RAX: ffffffffffffffda RBX: 00007f2929585fa0 RCX: 00007f292930aeb9 [ 123.769416][ T7803] RDX: 0000000000000014 RSI: 0000000000000500 RDI: 0000200000000000 [ 123.769478][ T7803] RBP: 00007f2927d67090 R08: 0000000000000000 R09: 0000000000000000 [ 123.769493][ T7803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 123.769569][ T7803] R13: 00007f2929586038 R14: 00007f2929585fa0 R15: 00007ffd1eb05ee8 [ 123.769592][ T7803] [ 124.086275][ T7807] loop0: detected capacity change from 0 to 512 [ 124.111332][ T7807] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 124.179056][ T7812] loop8: detected capacity change from 0 to 512 [ 124.186371][ T7807] ext4 filesystem being mounted at /244/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 124.227929][ T3378] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 124.252656][ T7812] EXT4-fs error (device loop8): ext4_orphan_get:1417: comm syz.8.1126: bad orphan inode 17 [ 124.274439][ T7812] ext4_test_bit(bit=16, block=4) = 1 [ 124.279803][ T7812] is_bad_inode(inode)=0 [ 124.283999][ T7812] NEXT_ORPHAN(inode)=0 [ 124.288200][ T7812] max_ino=32 [ 124.291448][ T7812] i_nlink=1 [ 124.306487][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 124.328027][ T7819] batadv_slave_1: entered promiscuous mode [ 124.400115][ T3394] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 124.422299][ T7818] batadv_slave_1: left promiscuous mode [ 124.522694][ T7836] vlan2: entered allmulticast mode [ 124.702678][ T7845] SELinux: policydb magic number 0x92feec9b does not match expected magic number 0xf97cff8c [ 124.713104][ T7845] SELinux: failed to load policy [ 124.745800][ T7847] loop2: detected capacity change from 0 to 512 [ 124.755674][ T7847] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 124.789339][ T7847] ext4 filesystem being mounted at /234/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 124.919629][ T7852] ================================================================== [ 124.927767][ T7852] BUG: KCSAN: data-race in page_pool_put_unrefed_netmem / page_pool_refill_alloc_cache [ 124.937450][ T7852] [ 124.940235][ T7852] write to 0xffff88811c25a700 of 8 bytes by task 7851 on cpu 1: [ 124.947882][ T7852] page_pool_refill_alloc_cache+0x2a5/0x3c0 [ 124.953804][ T7852] page_pool_alloc_pages+0xd0/0x130 [ 124.959027][ T7852] bpf_test_run_xdp_live+0x66c/0x1360 [ 124.964427][ T7852] bpf_prog_test_run_xdp+0x57b/0xa10 [ 124.969723][ T7852] bpf_prog_test_run+0x204/0x340 [ 124.974782][ T7852] __sys_bpf+0x4c0/0x7b0 [ 124.979042][ T7852] __x64_sys_bpf+0x41/0x50 [ 124.983479][ T7852] x64_sys_call+0x28e1/0x3000 [ 124.988167][ T7852] do_syscall_64+0xc0/0x2a0 [ 124.992692][ T7852] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.998629][ T7852] [ 125.000980][ T7852] read to 0xffff88811c25a700 of 8 bytes by task 7852 on cpu 0: [ 125.008535][ T7852] page_pool_put_unrefed_netmem+0x38b/0x4b0 [ 125.014462][ T7852] napi_pp_put_page+0xe9/0x200 [ 125.019236][ T7852] skb_release_data+0x451/0x490 [ 125.024106][ T7852] __kfree_skb+0x44/0x150 [ 125.028448][ T7852] sk_skb_reason_drop+0xbd/0x260 [ 125.033424][ T7852] udp_recvmsg+0x115/0xa80 [ 125.037860][ T7852] inet_recvmsg+0x143/0x290 [ 125.042380][ T7852] sock_recvmsg+0xf6/0x160 [ 125.046825][ T7852] ____sys_recvmsg+0xf5/0x280 [ 125.051526][ T7852] ___sys_recvmsg+0x11f/0x3b0 [ 125.056235][ T7852] do_recvmmsg+0x1ef/0x560 [ 125.060662][ T7852] __x64_sys_recvmmsg+0xe5/0x170 [ 125.065609][ T7852] x64_sys_call+0x2b75/0x3000 [ 125.070301][ T7852] do_syscall_64+0xc0/0x2a0 [ 125.074829][ T7852] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.080813][ T7852] [ 125.083149][ T7852] value changed: 0xffffea0004bfdf40 -> 0x0000000000000000 [ 125.090263][ T7852] [ 125.092599][ T7852] Reported by Kernel Concurrency Sanitizer on: [ 125.098778][ T7852] CPU: 0 UID: 0 PID: 7852 Comm: syz.2.1140 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 125.110080][ T7852] Tainted: [W]=WARN [ 125.113890][ T7852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 125.123965][ T7852] ================================================================== [ 125.880659][ T3394] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.948914][ T3394] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.266624][ T3378] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.748260][ T3378] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.987307][ T3394] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.029568][ T3419] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.068864][ T3394] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.307182][ T3378] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.107163][ T1034] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.148963][ T1034] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.866496][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 133.187320][ T3419] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.346977][ T3378] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.226823][ T1034] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog