last executing test programs: 2m2.462245716s ago: executing program 2 (id=867): sendmmsg(0xffffffffffffffff, &(0x7f0000000c00)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000c80)="568ac573f1b2ec10ccf9f6c54f920de8d4faeeef09efcb2c69fad742f993f751acb9564de66fbfcf7093d50ec44d62e009934c936900e6f01e58ee1959071bbccf90db49861b11e4661bd095b8bd2086c33560add2140b12a849e2a859a2852e13104ff5f0860e57a818090eef0f497287a84489b65d729c645f1ac8b8fa019862c49ef80000000000385fb79638e1b9b0", 0x91}], 0x1}}], 0x1, 0x24000000) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x0, 0x200000000300, 0x200000000330, 0x200000000330], 0x0, 0x0, &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0x108) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_misc(r1, &(0x7f0000000240), 0xfffffecc) 2m1.561411848s ago: executing program 2 (id=879): r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m1.541142519s ago: executing program 2 (id=880): syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000280)={[{@nodots}, {@fat=@dos1xfloppy}, {@fat=@fmask={'fmask', 0x3d, 0x10000}}, {@fat=@nfs_nostale_ro}, {@fat=@fmask={'fmask', 0x3d, 0x2}}, {@fat=@flush}, {@fat=@dos1xfloppy}, {@fat=@dmask={'dmask', 0x3d, 0x4}}, {@nodots}]}, 0x1, 0x159, &(0x7f00000004c0)="$eJzs27GKE0EcBvB/TKJRm9RisWBjFdQnUCSCuKAoKbRSiDaJBEyz2phH8QUFSZVuRPdI7nLJkRzs7ZH8fk0++GZgpsgOs7Af738dDSfTL5M38+g0GtF6GlksGtGNG9GM0iwAgEOySCn+pJTSrVnc/hUppXNDftayMACgMjuc/wDAgXH+A8Dxcf4DwPF59/7Dq2d53n+bZZ2I37NiUAzK37J/8TLvP8r+665mzYti0Fz2j8s+O9u3485J/2RjfzMePij7f93z1/lafzeG1W8fAAAAjkIvW9p4v+/1tvVlOvV+YO3+3op7rSvbBgCwh+n3H6NP4/Hnb3uFiMvMOojQjohrsAxBqDbU/WQCqrb609e9EgAAAAAAAAAAAAAAYJudvwfqXDx4kbZPr3uPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsO5vAAAA//9XS09N") name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000010c0)=ANY=[@ANYBLOB="14000000522d1ea7bb09219b783a5300000669ea01697cc6b7e00a00000001000100090000002a44d77203f9324c48bef3753f90bb8f8231bee6dd568c141692dc9da6d616b60dda0b15f0ffc7df0400000000000000368f6782c436d4b388ffffffffffffffff6c553dbb262fc69c30462b2c5ca4339af1123c11c8950cc7c5546c2c65e2b9490ce7f9581a5416a873d4a11e584e099e4861c16bd6f5d800"/168], &(0x7f0000000000), 0x0) socket$rds(0x15, 0x5, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 2m1.473988073s ago: executing program 2 (id=883): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") r0 = open(0x0, 0x4400, 0x179) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000003, 0xc3072, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000400)='coredump_filter\x00') (async) r1 = syz_open_procfs(0x0, &(0x7f0000000400)='coredump_filter\x00') pread64(r1, &(0x7f000001a240)=""/102398, 0x18ffe, 0x1000000300) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = socket$netlink(0x10, 0x3, 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x4, &(0x7f0000000400)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x4, &(0x7f0000000400)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18}, 0x94) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file2\x00', &(0x7f00000001c0), 0x80, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYRESHEX=r0]) mmap(&(0x7f0000443000/0x4000)=nil, 0x4000, 0xb635773f06ebbeee, 0x8031, r1, 0x0) ioctl$NS_GET_PARENT(r1, 0xb702, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000700)) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000700)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f00000002c0)=r5) (async) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f00000002c0)=r5) r6 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r8) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xfe8e) (async) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xfe8e) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=ANY=[@ANYRES16, @ANYRES16=r6, @ANYRESOCT=r4], 0x9c}, 0x1, 0x0, 0x0, 0x4004895}, 0x40848c0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400000000fedbdf2500000000", @ANYRES32=r9, @ANYBLOB="1b2e010001a001001c0012800900010069706970000000000c00028008000300dfffffee"], 0x3c}}, 0x20004000) (async) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400000000fedbdf2500000000", @ANYRES32=r9, @ANYBLOB="1b2e010001a001001c0012800900010069706970000000000c00028008000300dfffffee"], 0x3c}}, 0x20004000) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100)={[], [{@flag='dirsync'}, {@subj_user={'subj_user', 0x3d, '\x00'}}]}, 0x2, 0x50d, &(0x7f0000000900)="$eJzs3c9vI1cdAPDvTH44m6ZNCj0AKmUphQWt1k68bVT1QjlVCFVC9MhhGxInitaJo9gpTdhD9sgdiUqc4MQ/ABIHpJ64I3GAG5dyQOLHCtQgcXA143Hq/La2ib0bfz7SyG/e2PN9b0czb/SdzbwARtbNiNiPiMmIeDciZov6pFjizc6Sfe/jRw+WDx49WE6i3X7nX0m+PauLnt9knin2ORURP3gr4kfJsaB/imju7t1fqtdr20VVpbWxVWnu7t1Z31haq63VNqvVxYXF+dfvvla9pJ7+5rD0+999+aM/7n/rJ1mzZoq63n58Zjc+LXa6PnEYJzMeEd+7tGDDNVb0Z/JxfvxYP+IypRHxuYh4OT//Z2MsP5pHHT1M347i1AYAnlLt9my0Z3vXAYDrLs1zYElaLnIBM5Gm5XInh/dCTKf1RrN1e7Wxs7nSyZXNxUS6ul6vzRe5wrmYSFbXx2sLebm7Xq9Vj63fjYjnI+JnpRv5enm5UV8Z5o0PAIywZ46N//8tdcZ/AOCa63maXxpmOwCAwfG/+QBg9Bj/AWD0GP8BYPQY/wFg9Bj/AWD0nD3+pwNtBwAwEN9/++1saR8U779eeW93537jvTsrteZsbOwsl5cb21vltUZjLX9nz8ZF+6s3GlsLr8bO+5VWrdmqNHf37m00djZb9/L3et+rTQykVwDAeZ7/yod/SSJi/40b+RI97/u/cKx+8apbB1wlCT4YXWPDbgAwNCdn+wJGhXw80DNF78Oe6qkTheM+6Gv3aTFvKPAEufXFc/P/Lw21ccCVkv+H0fV4+X/38nAdyP/D6Gq3E3P+A8CI8fwfSC7Y3vv8f77ds9Lf838AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4lmbyJUnLxVzgM5Gm5XLEsxExFxPJ6nq9Nh8Rz0XEn0sTpWx9ISLMGwQAT7P070kx/9et2Vdmjm+dLP2vlH9GxI9/8c7P319qtbYXIiaTfx/Wtz4o6qvDaD8AcJHuON0dx7s+fvRgubsMsj3/+E5nctEs7kGxdLaMx3j+OXVqriG7Xxm7hPj7DyPiC6f1P8lzI3PFzKfT/0mK9nRksZ8daPz0SPw039b5zP4tPn8JbYFR82F2/XnztPMvjZv55+nn/1R+hfrsute/gxPXv/Tw+jd2SvzsnL/Zb4xX//DdE5Xt2c62hxFfGo846O685/rTjZ+cEf+VPuP/9cWXXj5RmRbN+GXErTit/8mRWJXWxlalubt3Z31jaa22VtusVhcXFudfv/tatZLnqCvdTPVJ/3zj9nNntS3r//QZ8acu6P/X++z/r/7/7g+/ek78b37t9OP/wjnxszHxG33GX5r+7dRZ27L4K2f0/6Ljf7vP+B/9bW+lz68CAAPQ3N27v1Sv17avupBefYi8kETsD6A7nULp1z99a1CxrrAQx2qye/MnomEKwysM+8oEXLVPT/phtwQAAAAAAAAAAAAAADjLIP6caNh9BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Pr6JAAA///nYc/z") creat(&(0x7f00000000c0)='./bus\x00', 0x182) (async) creat(&(0x7f00000000c0)='./bus\x00', 0x182) r10 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x1812c2, 0x148) pwrite64(r10, &(0x7f0000000140)='2', 0xfdef, 0xfecc) 2m1.217606828s ago: executing program 2 (id=890): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x7, 0x40, 0x7, 0x10100, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x0, 0xe}, 0x50) syz_emit_ethernet(0x36, &(0x7f0000000280)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0xb}}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x8) readv(r0, &(0x7f0000000400), 0x100000000000001c) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040), 0x2200, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x4}, {0xffff, 0xffff}, {0x0, 0x4}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x42b8e4e1, 0xfffffffa, 0x6}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x2008000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000001800dd8d000000000000000002000000000000060000000006001500010000001800168014000100"], 0x3c}}, 0x8000) r2 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m0.880916518s ago: executing program 2 (id=900): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0xa0, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x5c, 0x12, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x1000}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x8b}]}}}, {0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0xd236}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x7}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x5, 0x84}}}, 0xe8}, 0x1, 0x0, 0x0, 0x4011}, 0x20050800) 2m0.84692752s ago: executing program 32 (id=900): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0xa0, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x5c, 0x12, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x1000}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x8b}]}}}, {0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0xd236}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x7}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x5, 0x84}}}, 0xe8}, 0x1, 0x0, 0x0, 0x4011}, 0x20050800) 1m53.542019545s ago: executing program 3 (id=1055): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000500)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x806, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="140000000000000029f50000080000000700000000000000880000000000000029000000370000003a0d000000000000c20480000001c910ff020000000000000000000000000001000100c910fe8000000080ae0fc5000000000000bb0401f7000100c20400000005011950ac1d5fdc5811eb32cced4fd45ec81f7768e1182f0561101801050000000000c910fe80000000000000000000000000003c0000001400000000000000290000000b000000000000ff000000001400000000000000290000000b0000000000009d0000000014"], 0xe8}}], 0x1, 0xc894) 1m53.526835076s ago: executing program 3 (id=1057): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @remote}}, 0x80, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e21, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x20000000) sendmsg$kcm(r1, &(0x7f0000000180)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e22, @remote}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="1800000000000000100100000100000051d833483cc75d51900000000000000004000005040500002b24ec10064b6f2f0000f299a032ef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319e2e66d0998a61d7da0c86d70000001010"], 0x10b8}, 0x4000000) ioctl$SNAPSHOT_S2RAM(r0, 0x330b) r2 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) fremovexattr(r0, &(0x7f0000000300)=@random={'user.', '\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f00000001c0)={&(0x7f0000000140), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000011}, 0x30) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x0, 0x5}, 0x9092, 0x0, 0x43a1bd76, 0x9, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_usb_disconnect(0xffffffffffffffff) ioprio_set$pid(0x3, 0x0, 0x4007) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r2, 0xc0096616, &(0x7f0000000040)={0x4, [0x0, 0x0, 0x0, 0x0]}) 1m52.4284574s ago: executing program 3 (id=1071): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, 0x0, 0x8000) 1m52.304655217s ago: executing program 3 (id=1076): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x10000, &(0x7f0000000380)={[{@noauto_da_alloc}]}, 0x1, 0x4bc, &(0x7f0000000a40)="$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") creat(&(0x7f00000000c0)='./bus\x00', 0x182) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030003110000002cbd7000fcdbdd2503000900800000001cdc0dca1d9f68846960e56de42944af05000600002000000a000000000000000000000000000000000000000000000102000000000000000200010000000000000007"], 0x88}, 0x1, 0x7}, 0x0) mount(&(0x7f0000000280)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0xec040, 0x0) r0 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f0000005cc0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x50, 0x3, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x2}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x11d}]}, @CTA_TUPLE_ORIG={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0x4000) preadv2(r0, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1013}], 0x2, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x794bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0xc}, 0x100, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xd, &(0x7f00000003c0)=ANY=[@ANYRES32, @ANYBLOB="17fa00000000090000000400000000001c110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001", @ANYRES32=r1, @ANYRES32, @ANYRESDEC=r2, @ANYRESHEX=r1], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$kcm(0x10, 0x400000002, 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r2, 0x4008941a, &(0x7f0000000180)=0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) write$cgroup_subtree(r0, &(0x7f00000001c0)={[{0x2b, 'rlimit'}, {0x2d, 'freezer'}, {0x2d, 'memory'}, {0x2b, 'io'}, {0x2d, 'io'}, {0x2b, 'memory'}, {0x2b, 'net'}]}, 0x2e) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="28000000010405000000000000000000070000000a0002"], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x2048004) fsopen(&(0x7f0000000000)='coda\x00', 0x0) write$cgroup_subtree(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="180000007800911fdabcf8b3077fa54a07"], 0xfe33) 1m52.053707341s ago: executing program 3 (id=1083): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000001980)={0x8, {"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", 0xd35}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x0, 0x0, 0x130, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00001100"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 1m51.066069389s ago: executing program 3 (id=1114): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 1m51.065722289s ago: executing program 33 (id=1114): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 1m42.590165473s ago: executing program 5 (id=1255): bind$unix(0xffffffffffffffff, 0x0, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB], 0x84}}, 0x1) openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0x5) writev(r0, &(0x7f00000007c0)=[{&(0x7f00000004c0)="bf4b044828ba5fd90ec9b7896dc441450eba7c4e43d20f87d3b9b3fafcfbfad0d19d4b6aa1f78642cd995269ad5ce1c54a4082884e8eaf39a34d820339f3d6ed595b3d6e9ab40a7e7309ca7709ff0dab8736523be88fadbd75be47ade222da08b9f5b0194ff6491166e5ad0024289364c0706d212887ff128a4b592a38298177c68bbb161204aa9a96d7651b12b61d051cb1ae9e0626f58dd7bd0226a138f48a1f1969840e48e595c6aa9063e21d7b1f07bb4799b564ff10abdbbb1e5d81ef6d94a2590c69645548b36510b3ef5387f1ba5b879eb8", 0xd5}, {&(0x7f0000000280)="588adb640460a7e8cf82485048bc1ddf1efa013dea0dda64a2219e8d01f8e043250eda8fefc2f84f6b22ccf961f7d9f72d7548c3de2ad2e55451b6e99ad433d1f5da837d", 0x44}, {&(0x7f0000000200)="e4b5389e69ab767a6fba4fbeb360969727cc198d246136e1ca3b97f708e76cad9387f23020b63d", 0x27}, {&(0x7f0000000300)="c5356eb013885ae979690c9e758b1a6a62074b", 0x13}, {&(0x7f0000000640)}, {&(0x7f0000000740)="80155813f51357505141e6f79a596a4a483cfae86011cecc5dc51940162543a28fdd90dfdab32e2da664645675deaec0a5c8013c96352417c41da97b3bccaacc2615693339ce2dbaa321e1ec6bd202aed7af0f01e0cf50a9565c5f75dfe31ea06786fc702dadd23b17", 0x69}], 0x6) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000340), 0x80000, 0x0) ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000180)={0x2, 0x2, 0x6, 0x9755, 0x6, "00aa00001000"}) ioctl$TIOCMSET(r3, 0x5418, &(0x7f0000000000)=0x8001) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x42080, 0x0) 1m42.486542079s ago: executing program 5 (id=1259): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180200000100000000000000008500000029e40000950000000000000033dbe3339573fa4d251cc7f6c225993dfebf5e000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x20004880) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x7, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000069000004000001000000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x3, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000850000004f00000018110000", @ANYRES32=r3], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r5 = socket$packet(0x11, 0x2, 0x300) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='gid_map\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000600)={@cgroup, 0x6, 0x0, 0x3ff, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000640)={@ifindex, r6, 0x7, 0x202c, 0x0, @void, @void, @value, @void, r7}, 0x20) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c03080006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r8], 0xb4}}, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r10, 0x0, 0xa20, 0x8000c65) read$ptp(r10, &(0x7f0000000180)=""/168, 0xa8) ioctl$MON_IOCX_GET(r10, 0x40189206, &(0x7f0000000200)={&(0x7f00000001c0), &(0x7f0000000340)=""/136, 0x88}) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@deltaction={0x54, 0x18, 0x1, 0x1070bd2a, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x8f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb6}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4085}, 0x20040844) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000006c0)={@fallback=r11, r4, 0x7, 0x20, 0x0, @void, @void, @void, @value, r7}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000240)="d2ff03066003008cb89e08d988a8", 0x0, 0xd5b4, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="31032abd7000fbdbdf250b00000008000300181c633f83e4abbfaa65"], 0x1c}, 0x1, 0x0, 0x0, 0x400c080}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000140)=r4, 0x4) 1m40.665536805s ago: executing program 5 (id=1283): r0 = socket$packet(0x11, 0x2, 0x300) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000060000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0x20, &(0x7f0000000200)={&(0x7f0000000140)=""/21, 0x15, 0x0, &(0x7f00000001c0)=""/29, 0x1d}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f00000003c0)={0x0, r1}, 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r5, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffffb]}, 0x8, 0x0) r6 = socket(0x10, 0x803, 0x0) sendto(r6, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) 1m40.615212248s ago: executing program 5 (id=1284): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x2125099, 0x0) mount$bind(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2205806, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='devpts\x00', 0x1010401, 0x0) 1m40.514598884s ago: executing program 5 (id=1285): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x98, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x6c, 0x3, 0x0, 0x1, [{0x68, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "1e1c"}]}, @NFTA_SET_ELEM_KEY_END={0x58, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}]}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 1m40.344333914s ago: executing program 5 (id=1289): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x22, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1f0519, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x9, 0x7}, 0xec25, 0x4085, 0xb, 0x4, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000040000000000000000000300000a20000000000a05000000000000000000070000000900010073797a300000000044000000090a010400000000000084000700ffff08000a40000000030900020073797a31000000000900010073797a3000000000080005400000002105000d40930000005c0000000c0a01020000000000000000070000000900020073797a31000000000900010073797a3000000000300003802c0000800400018024000b80100001800c000100636f756e746572"], 0xe8}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1m40.303647486s ago: executing program 34 (id=1289): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x22, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1f0519, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x9, 0x7}, 0xec25, 0x4085, 0xb, 0x4, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000040000000000000000000300000a20000000000a05000000000000000000070000000900010073797a300000000044000000090a010400000000000084000700ffff08000a40000000030900020073797a31000000000900010073797a3000000000080005400000002105000d40930000005c0000000c0a01020000000000000000070000000900020073797a31000000000900010073797a3000000000300003802c0000800400018024000b80100001800c000100636f756e746572"], 0xe8}, 0x1, 0x0, 0x0, 0x10}, 0x0) 3.492374026s ago: executing program 7 (id=3404): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6c, 0x6c, 0x7, [@func_proto={0x0, 0x9, 0x0, 0xd, 0x0, [{0x0, 0x3}, {0x8, 0x4}, {0x10, 0x1}, {0xb}, {0xe, 0x3}, {0xa}, {0x9, 0x4}, {0x5, 0x3}, {0xa, 0x2}]}, @ptr={0x2, 0x0, 0x0, 0x2, 0x1}, @volatile={0x7, 0x0, 0x0, 0x9, 0x3}]}, {0x0, [0x61, 0x5f, 0x30, 0x2e, 0x0]}}, &(0x7f0000000500)=""/76, 0x8b, 0x4c, 0x0, 0x100}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x20, 0x4, 0x900, 0x5, 0x28, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x50) syz_emit_ethernet(0xbe, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x0) r0 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) close(0xffffffffffffffff) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000140)={0x0, 0x4, 0x0, 0x6, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x3c}, @rand_addr=0x64010102}, 0x10) setsockopt$inet_int(r1, 0x0, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc, 0xffffffffffffffff}, 0x102802, 0x0, 0x80000, 0x3, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x8d5a}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) syz_create_resource$binfmt(&(0x7f0000000300)='./file0\x00') lsm_get_self_attr(0x64, 0x0, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, 0x0, 0x400000, 0x0) getdents(r2, &(0x7f00000001c0)=""/46, 0x2e) getdents(r2, 0xfffffffffffffffd, 0x58) r3 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000440)='./file0\x00', 0x1000000, &(0x7f0000000600)=ANY=[@ANYBLOB='\x00'], 0x1, 0x25f, &(0x7f0000000140)="$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") syz_mount_image$msdos(&(0x7f00000003c0), &(0x7f0000000080)='./bus\x00', 0x126a4b5, &(0x7f0000001b80)=ANY=[@ANYRES16, @ANYRES64, @ANYRES16, @ANYRES64, @ANYRESDEC=r3, @ANYRES16, @ANYRES16, @ANYBLOB="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", @ANYRESHEX, @ANYRES32], 0x5, 0x0, &(0x7f0000000000)) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f0000000180)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000003c0)=0x11) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x18, 0x7, &(0x7f0000000ac0)=ANY=[@ANYBLOB="180000ffffff90000000000000000000e50003000000000085100000fcffffff250000001000000007000000faffffff95"], &(0x7f0000000640)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x9}, 0x94) 2.366020992s ago: executing program 6 (id=3425): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000440)=0x7) setreuid(0x0, 0xee00) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000002100000008"], 0x48) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000085000000a000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioprio_set$pid(0x2, 0x0, 0x0) r3 = shmget$private(0x0, 0xa000, 0x1000, &(0x7f0000ff6000/0xa000)=nil) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x8, 0x794bb, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x8000000000000001, 0xbc7}, 0x0, 0x32, 0x43a1bd76, 0x1, 0x4, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000400)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000008000800180001801400020073797a5f74756e00000000000000000018000280140003800c000180080001000000000004000180"], 0x44}}, 0x4000080) setresuid(r4, r4, 0x0) r7 = getegid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) fstat(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = getpid() r12 = getpid() shmctl$IPC_SET(r3, 0x1, &(0x7f00000002c0)={{0x3, r4, r7, r9, r10, 0x0, 0x6}, 0x6, 0x2238, 0x4, 0x6, r11, r12, 0x6}) setrlimit(0x9, &(0x7f0000000180)={0x7, 0x101}) getsockopt$sock_timeval(r8, 0x1, 0x43, &(0x7f0000000340), &(0x7f0000000380)=0x10) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) preadv2(r13, &(0x7f00000001c0)=[{&(0x7f0000000800)=""/268, 0x10c}], 0x1, 0xff, 0xfffffffd, 0x30) bind$802154_dgram(r0, 0x0, 0x0) r14 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) io_uring_enter(r14, 0x2219, 0x7721, 0x16, 0x0, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000003c0), 0x8001, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 2.364911192s ago: executing program 6 (id=3426): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0xa0835c, &(0x7f0000000340)={[{@noquota}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@sb={'sb', 0x3d, 0x4}}, {@usrjquota}, {@data_err_ignore}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x9fb}}], [{@fowner_gt}, {@euid_eq}, {@dont_measure}]}, 0x2, 0x462, &(0x7f0000000d00)="$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") socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[], &(0x7f0000000f40)=""/4089, 0x3a, 0xff9, 0xa}, 0x28) connect$inet(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x52, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaaaaaaaaaafffffff7ffff08004c0000440000000000069078ac1414aa0a070504414344140601ac1e0001000003ffe000000100000100"/66, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c0000009078"], 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e00000000000000050000"], 0x48) r2 = socket(0x2a, 0x2, 0x933) getsockname$packet(r2, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x24004000) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x318, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000080)={0x1, [0x1ff]}, 0x6) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000100)={[{@dioread_nolock}, {@norecovery}, {@resgid}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@grpid}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@grpid}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}], [{@subj_user={'subj_user', 0x3d, '('}}, {@measure}, {@smackfsfloor}, {@appraise_type}]}, 0xfd, 0x588, &(0x7f0000000680)="$eJzs3d9rW1UcAPDvTZP96rQdjKE+yGAPTsbStfXHBGHzUXQ40PcZ2qyMpsto0rHWgduDe/FFhiDiQPwDfN/j8B/wrxi4wZBR9EGFyk1vuq7Nj7bLTF0+H8h2Ts5Nzv3m3u/NOfcmTQAD62j6Ty7i1Yj4JokYWdeWj6zx6Opyy4+vT6W3JFZWPv09iTMbnivJ/h/OKq9ExC9fRZzIbe63trg0W6pUyvNZfaw+d2Wstrh08tJcaaY8U748MTl5+u3Jiffefadnsb55/s/vP7n34emvjy1/9/PDQ7eTOBsHs7Y0rh50cWN95Wjpn6xUiLMbFhzvQWe7SdLvFWBHhrI8L0R6DBiJoSzrgRfflxGxAgyoRP7DgGqOA5pz+x7Ng/83Hn2wOgHaHH9+9dxI7GvMjQ4sJ0/NjNL57mgP+k/7GH1w5/bdB3duR+fzEPu71AG25cbNiDiVz28+/iXZ8W/nTjVOHne2sY9Be/+BfrqXjn+SGxGb8j+3Nv6JFuOf4Ra5uxPd8z/3sAfdtJWO/95vOf5dO3SNDmW1lxpjvkJy8VKlfCoiXo6I41HYm9Y7Xc85vXx/pV1bGv/dbPyX3tL+m2PBbD0e5vc+/ZjpUr30LDGv9+hmxGstx7/J2vZPWmz/9PU4v8U+jpTvvN6urXv8z9fKTxFvtNz+T65oJZ2vT4419oex5l6x2R+3jvzarv9+x59u/wOd4x9N1l+vrW2/jx/3/VVu17bT/X9P8lmjvCe771qpXp8fj9iTfJwf3nj/xJPHNuvN5dP4jx9rnf+d9v908vX5FuO/dfhW20W7xv/3ukn6U25usffO0vint7X9t1+4/9EXP+w4/sb2f6tROp7ds5Xj31ZX8FleOwAAAAAAANhtchFxMJJcca2cyxWLhUbb4TiQq1Rr9RMXqwuXp6PxXdnRKOSaV7pH1n0eYjz7PGyzPrGhPhkRhyLi26H9jXpxqlqZ7nfwAAAAAAAAAAAAAAAAAAAAsEsMt/z+/2rbb0P9XjvguWv8sMHefq8F0A9df/K/F7/0BOxKXfMfeGFtP/+dGYAXhfd/GFzyHwaX/IfBtdX8L4w85xUB/nPe/2FwyX8AAAAAAAAAAAAAAAAAAAAAAAAAAADoqfPnzqW3leXH16fS+vTVxYXZ6tWT0+XabHFuYao4VZ2/UpypVmcq5eJUda7b81Wq1SvjE7FwbaxertXHaotLF+aqC5frFy7NlWbKF8oFf2wYAAAAAAAAAAAAAAAAAAAANqktLs2WKpXyvELbwpno5RMmu++VP5Ot0o4ent8tUSj0tNDHgxIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAbPBvAAAA///YBDOu") mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file3\x00', 0x1d0) listxattr(&(0x7f00000000c0)='./file0/file3\x00', 0x0, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x2) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x14, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}}, 0x14}}, 0x0) 2.193220852s ago: executing program 1 (id=3430): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r3, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0xfe, &(0x7f0000000300)={&(0x7f0000000900)=@delchain={0x3c, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r6, {0x0, 0x2}, {0xfff2, 0xffff}, {0xc, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xa, 0xffff}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008844}, 0x4010) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000000)={0x0, @aes128, 0x0, @desc3}) 2.166812984s ago: executing program 1 (id=3432): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x1004, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000000210a018800000000000000000a0000010900020073797a31000000000900010073797a31000000001400038010000080"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="02000000080004000000000004000500a9930000100000000000000020"], 0x24, 0x0) r2 = socket(0x200000000000011, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) clock_nanosleep(0x4, 0x0, &(0x7f0000000340)={r3, r4+10000000}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r6 = socket(0x200000000000011, 0x2, 0x0) bind$packet(r6, &(0x7f0000000080)={0x11, 0x800, r5, 0x1, 0x0, 0x6, @random="933c547ecfa7"}, 0x14) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r7, 0x10e, 0x1, 0x0, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff08004508001c00000000fb02907800f2fcb507781d51000000e000030000009078006400d2561b6ad26f5b679373be9ec823e32be528a7f46df9f3edb375b57127b5d063f11008f428a52d1ae95923153aa1a36756174287ddac679d528306d77c62b89e040000"], 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r8, 0x1, 0x53, &(0x7f00000000c0)={0x6, 0x7, 'syz2\x00'}, &(0x7f00000001c0)=0x28) 2.106271698s ago: executing program 7 (id=3433): setreuid(0x0, 0xee00) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) 2.06659183s ago: executing program 7 (id=3436): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000141200006c07010033d43afffb800000000000000000000008000010ff02000000000000000000000000000189"], 0x340a) 1.667366213s ago: executing program 7 (id=3440): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xa}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r3 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r1, r2, 0x26, 0x0, @void}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000013c0)={r3, 0x0, 0x0}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000014c0)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xff, 0x20000000, 0x6, 0x6}, 0x4, r4}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x2000a804) 1.473341674s ago: executing program 7 (id=3444): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000006000000000000000f00000d"], 0x0, 0x36, 0x0, 0x8, 0x0, 0x0, @void, @value=0x1e}, 0x28) 1.37811645s ago: executing program 6 (id=3446): r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0xec, 0xbb, 0x40, 0x3, 0x0, 0x4000000000, 0xd4, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xffffffff, 0x2, @perf_bp={0x0, 0x8}, 0x100c22, 0x7ff, 0x6, 0x3, 0xfffffffffffffff7, 0x9, 0x8, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xfffffffffffffff7, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000000, 0x12011, r0, 0x3000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0x8000f28, 0x0) splice(r3, 0x0, r2, 0x0, 0x7f, 0xe) write(r1, 0x0, 0x0) mmap(&(0x7f0000f0b000/0x9000)=nil, 0x9000, 0x1000002, 0x4012831, r3, 0x81362000) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x30, 0xffffffffffffffff, 0x7c528000) futex(&(0x7f0000000000), 0x8c, 0x1, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000017c0), 0x4) r6 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000001dc0)={0x14, 0xda, &(0x7f0000001cc0)="88f1b6550e240f958907b242edeecf7875542760410f5105df17e39d432c555f5d810d517ebddb3adfef029ab19fd40d277b15e9a4b6e365a8699888207277973e0b696e65ab5cd64dd272a0c1e9276bccc0d57c49d4918da7a11d02d3540c9b4ac2231877cd29004cc821718114b8211cc088fcdc06f2c5d4955783f2d77eeb363e1a7c3a530715e3a92075a22ca28d449dac34fe72c61f1cdab91056866fc8f4fbcf334241242588d5c3e65efe6349db7593ac9c10e717aa1734d1ae8b2a8de89c7cde8b1dba47bbf66568d31f718fbd17b9bd58de71e8c141"}) r8 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xed, 0x6, 0x40, 0x3, 0x0, 0x4000000000, 0xd4, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x100882, 0x7ff, 0x6, 0x3, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x6, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12011, r8, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) lstat(&(0x7f0000001800)='./file0\x00', &(0x7f0000001840)) r9 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) fsopen(&(0x7f0000000040)='devpts\x00', 0x0) write$binfmt_script(r9, &(0x7f0000001e00)={'#! ', './file0', [{0x20, 'syzkaller\x00'}, {0x20, '\x00'}, {0x20, '\x00'}, {0x20, 'R\x10rust\xe3cusg\x91\xdeeH\xe5+\xf0'}, {0x20, 'syzkaller\x00'}], 0xa, "68fa59750b8ce8d8262d18cee305fa07b59ea3af5ec17bd7836840f8577dfa894a05a1a99306f025ebd16ad856739fb0f8a73548794628e8b37b3c8a629aab9f756fcf766315f90739f2841c76ccaf249f13b5347a800e5f1e2fe5ef735b6bfe"}, 0x98) lstat(&(0x7f00000018c0)='./file0\x00', &(0x7f0000001900)) 1.36697251s ago: executing program 0 (id=3447): syz_emit_ethernet(0x2a, &(0x7f00000003c0)=ANY=[@ANYBLOB="0180c200000324478466a8f008060001080006040002aaaaaaaaaa257f000001aaaaaaaaaa157f000001"], 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x5, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f00000e1000/0x800000)=nil, 0x800000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x40000000) r2 = syz_pidfd_open(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e00"], 0x48) ioctl$FS_IOC_GETVERSION(r2, 0xc040ff0b, &(0x7f0000000180)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="580000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800e00010069703665727370616e0000001c00028014000700fe8000000000001800000000000000420400120008000a"], 0x58}}, 0x8000) 1.359392761s ago: executing program 7 (id=3448): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB="d47fe9e3"], 0x18, 0x40000}}], 0x1, 0x20000000) process_vm_writev(0x0, &(0x7f0000000240)=[{0x0}, {0x0}, {&(0x7f0000000400)=""/150, 0x96}], 0x3, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x20000, 0x0) quotactl_fd$Q_SETINFO(r3, 0xffffffff80000601, 0xee01, &(0x7f0000000000)={0x401, 0x20000, 0x1, 0x5}) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) recvmmsg(r4, &(0x7f0000001840)=[{{0x0, 0x0, 0x0}, 0x1ff}], 0x1, 0x40002000, 0x0) setsockopt$sock_int(r4, 0x1, 0x23, &(0x7f0000000200)=0x1, 0x4) write$binfmt_misc(r4, &(0x7f0000000300), 0x6) io_uring_setup(0x1562, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xec}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 1.127445384s ago: executing program 0 (id=3453): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={0x0, 0x0, 0x5a, 0x0, 0x1, 0x5, 0x10000}, 0x28) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x0) r1 = socket(0x2d, 0x2, 0x0) bind$xdp(r1, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0x9}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, 0x0, 0x0) socket(0x2d, 0x2, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) quotactl_fd$Q_SYNC(r0, 0xffffffff80000101, 0x0, 0x0) close_range(r3, r3, 0x2) r4 = open(&(0x7f0000000000)='./bus\x00', 0x40, 0x171) fgetxattr(r4, &(0x7f00000003c0)=@known='security.selinux\x00', 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x20000000dd4, 0x642b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x20000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x4a598f8f568d4678, 0xa, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, 0xffffffffffffffff) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x900}, 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 1.102994136s ago: executing program 1 (id=3455): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000000), 0x4, 0x4f2, &(0x7f0000000a40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) renameat2(r0, &(0x7f0000000240)='./bus/file0\x00', r0, 0x0, 0x2) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008fc0e00800000000800", @ANYRES32=r3, @ANYRES64=r2], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) 958.995395ms ago: executing program 1 (id=3456): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x300, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="001400000000000008001b000000000004001a80180002"], 0x44}}, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000bc0)=ANY=[@ANYBLOB="aaaaaaaaaaaafffffff7ffff08004c2700440000000000069078ac1414aa0a070504414344140601ac1e0001000003ffe00000010000010000000000009dbed9c09565c803f5bc752a7c444cc5794e996babbc3b52acabbce9ca531798535e9af8e5bb5c5a8ff657f5da99022caf6884d1ad5369e00c0955d881fae37d515b555e4b362cd7608a139b9bbc2e837228b4a5ed978da1c1879288", @ANYRES32=0x41424344, @ANYRESOCT=r0], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000004000000000000000000a28000000000a01010000000000000000010000030900010073797a3100000000080002400000000240000000030a01040000000000000000070000000900030073797a310000000014000480080002400000000008000140000000010900010073797a310000000014001b001100010000000000000000000500000a625957d27ddac89d37b53ee68a9ae5c8cfb8cbf6fe826a61b0cbd31c0eec066c71"], 0x90}, 0x1, 0x0, 0x0, 0x2000c091}, 0x800) syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x21881e, &(0x7f00000000c0)={[{@user_xattr}, {@dioread_nolock}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x1, 0x50f, &(0x7f0000000680)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x501801, 0x59) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r2 = fsopen(&(0x7f0000000100)='zonefs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x8, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="64000000020605000a0000000000000000000000100003006269746d61703a706f72740005000400000000000900020073797a3000000000050005000000000005000100060000001c00078006000400000000000600054000000000080008"], 0x64}}, 0x0) r4 = socket(0x1e, 0x4, 0xfffffffc) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f00000001c0)=@req3={0x8, 0x10, 0x3, 0x9, 0x7, 0x1, 0x3}, 0x1c) sendmmsg(r4, 0x0, 0x0, 0x40080) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r6) sendmsg$DEVLINK_CMD_RATE_GET(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c0000001b5d497693b369540bb41acddf5995dd0835cf754f4e615fe01162f1279a038b842b14218b92102506ef67da", @ANYRES16=r7, @ANYBLOB="01002dbd7000000000003600000008007300000000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x3c}, 0x1, 0x0, 0x0, 0x4040811}, 0x20042840) r8 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r9 = dup3(r5, r4, 0x0) recvmmsg$unix(r9, &(0x7f0000001280)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000005140)=""/4111, 0x100f}], 0x1}}], 0x1, 0x58ca2280, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRESDEC=r7], 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) 958.691464ms ago: executing program 6 (id=3457): syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x80c406, &(0x7f0000000540)=ANY=[@ANYBLOB='dots,dots,dmask=000000000200000,nodots,discard,nfs=nostale_ro,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c646f733178666c6f70707900000000000000003030ffffffff303030303031373737373737373756c0f39fdb37372c004c0f1208ec0c34b7df4ba1c1e6b76697434db8574db9bcaef6a61a12c3f260bebc7ac5b1b11361119b83f1cf9f686b715b8e58fd37cea6623dc422c2ddbcefe94e5c255b5e8c90613e6b598b3b7a2c05de53dab7"], 0x0, 0x291, &(0x7f0000000280)="$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") mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2200020, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x80c406, &(0x7f0000000540)=ANY=[@ANYBLOB='dots,dots,dmask=000000000200000,nodots,discard,nfs=nostale_ro,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c646f733178666c6f70707900000000000000003030ffffffff303030303031373737373737373756c0f39fdb37372c004c0f1208ec0c34b7df4ba1c1e6b76697434db8574db9bcaef6a61a12c3f260bebc7ac5b1b11361119b83f1cf9f686b715b8e58fd37cea6623dc422c2ddbcefe94e5c255b5e8c90613e6b598b3b7a2c05de53dab7"], 0x0, 0x291, &(0x7f0000000280)="$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") (async) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2200020, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) 903.340138ms ago: executing program 4 (id=3459): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r1, @ANYBLOB="00000000000002001c0012800b00010067656e65766500000c0002"], 0x44}, 0x1, 0x2}, 0x40000) 856.02416ms ago: executing program 0 (id=3460): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0x0, 0xfe, 0x2, 0x0, 0x9, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xe) shutdown(r1, 0x1) getsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, 0x0, &(0x7f0000000500)) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000100)=0x6, 0x4) read(r1, &(0x7f0000000200)=""/233, 0xe9) r2 = openat$cgroup_int(r0, &(0x7f00000005c0)='cpu.idle\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000540)=0xb24, 0x12) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, &(0x7f00000000c0)=0x8, 0x37e, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8912, &(0x7f00000008c0)='\xea\xc1x&GQ\xcc\a\xad9\x0f\\\x93\xb6\x02\xf9\xfaK\xc4$\xa7\x91\x89e\xfc\x9aK\xed}\xb3&\xed\xa2\b?\x93\xff\n\x91\xe8\xa4L\a\x93#\xd0\x9de\x13\xd3\xfa\x10\x15\xc42\xf7T\x17\xc7Oj\xd7\x8f\xd8\xde\x01\x00\x00\x00\xd3\x81\xd8\x1a\xa8\x035Y]\a\x15\xc0\x97\xd9\xc2\x92\x02,\xf9X\x04\x99wlq\xad\x88-f6\xb5+[x\xa3\"\xc7\xa2FQw~\xd1\xd8\xca\x1b\x1d\xbd\xae\x1d\x80\t\xa7\xad\x8f\xc8W\xa6\xc6\xd9H\xaa\x7f\xff\x01\xef\xee\x9a\x9d\x19\x86\xd0\x05\xef#5\xed\xf99\xcfEf\xb7\x01|\x98Z\x8a\xe5\x04\xbe\x06\"A\xfb\x9c\xc3\xcc\x00\x00\x00\x00\x00\x00\x00\xff\x03\x00\x00\x00\x00\x00\x00\xca\x1a\x86\xd4&V\x95W\"\x01r\x11\xf2bO*\xfe\xa5sNdU\xd0R\x9dp\xc9\xd6\xbfI\xe0\xb9\xcf\x8d\v\n\x1df\x12\x1e\x94\xc7A2\xf1\x01\x02\x95\xb1\x19\xdd6]An\xebP\xc7,/\xab\x01*/~\a- \b\x8eA\xca\xbe\x9e\xe2\x82h@\xb7\x13\xd7\xdag\n\xff\x10\x1b\xde\x8eP={\xe1\xdbW\xb5e\x8e\xbe\x8b\xce\xe8\xc9X^\xd0\xcd|\x8e\xb27<2&w\xe9\v\xdf\fm\x19\xe1\x7f9\x9a\xdb\xad\xa8\xd2.@\xe5\xcd(7\b\xd6\xf5\x83\x95\x1b1#\xdd\xaa\xf0s\xcb%\xbd@\xa3C\x9b\x9d\xba?\x80-S,\xf0V\x84\xa0\xacD\xa9}u\x8da\xa9)\xc9\x82Y[\xfai\xec\x7f\xc8S\xc9\xe1\x00\xb1N\xcf\xb2\xe1\x92') munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x1}, &(0x7f0000000340)=0x8) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000300)) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r3) syz_io_uring_setup(0x2e45, &(0x7f0000000480)={0x0, 0x3166, 0x40, 0x3, 0x100}, &(0x7f0000000080), &(0x7f0000000440)) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000ac0)=ANY=[@ANYBLOB="070000000000000002004e21e00000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcff00000000000000000000000000000000000100000000000000"], 0x90) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100fe0f00000c000200367da1650e000000280003800c00fe0001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r5], 0xb4}}, 0x0) 855.675681ms ago: executing program 6 (id=3461): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000540)={0x3, 0x0, 0x0, 'queue1\x00'}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8080, 0x0) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000000)) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) r3 = open(&(0x7f0000000100)='./file1\x00', 0x147842, 0x88) preadv2(r3, 0x0, 0x0, 0x0, 0x0, 0x7) faccessat2(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup\x00', 0x7, 0x1100) write$UHID_INPUT(r2, &(0x7f0000000000)={0xa, {"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", 0x1000}}, 0x1006) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r4, &(0x7f0000001500)=[{{&(0x7f0000001040)={0xa, 0x4e22, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7}, 0x1c, &(0x7f0000001300)=[{&(0x7f0000001080)="200b39ecf04625f4b662e2087ff8092b55ac37c1639b82f46db34cbc03533c552bd2a8481a0c7fd7ba6ef181d4213222164c5a89c4c460866fd6b05c2ea4c1619c3b0cc26cd1f219515b06736a5d8a412eeaf3d7e8abe43583a85af411dab21b334450291935d8e0ada08e7294749d9bb5bc635edf928f1ceee0b6ecf9b8adcbd60be332ef18933b998fc6a9d135b16590062c19b7639deba3fb9cacf1323bb47762f17f2e447a33e3fd9e9e", 0xac}, {&(0x7f0000001180)="1d929f1c5eee1facbec811082e65081276f445331deeb27799901f7f61ac1cf9c66ce0eaa5e9b40929a8aa12cb9f92ae734e6efd881ef8c34fab08eaa44583f8e2e7b096cd78f8f1b0fc7754e6e7b98c9b0cbbaaa4fdce79b430cbc127d25fea605f5ebb226a4bbda4ac95eb64f99d0d29b0dd223839d9b44059f5", 0x7b}, {&(0x7f0000001200)="eb749b1a84c13619e9de8ef35c89b1c8299e780407b5091265cf68383cb0a851d9ee4e6722f4291c3d6ad3cac4c9745b152eba01789872c1d376676195a882cf65c3d10bc9efe1db44bb8f8b066d539b28a75f76d57c355de5e9bac43a090702425c05619518e6bb48bc47c280660b915f93dc982a0293c81f", 0x79}, {&(0x7f0000001280)="2ad9634af8e75f8f127b65f17a8d67e8531242c7eb38b37c22675eff7080f868a525b30dd1c64f7d1f92e3577ee8f6df1a6d171b743a07f71e0cd3b1aa790a29a2ed8d7238703f089c7fb16ebbec650a3417a02b0bdfb91d361128253030963172375f9dbc19da4600027d09970b58e82cf8b0", 0x73}], 0x4, &(0x7f0000001680)=ANY=[@ANYBLOB="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"], 0x140}}], 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x50) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e12090021", 0x2b}], 0x1}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="0003230c1100"}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="36400000250091"], 0xfe33) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="d800000010", 0x5}], 0x1}, 0x20000880) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0xfe33) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000009180)=@newtaction={0x70, 0x30, 0x519, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0xfffffffe, 0x0, 0x20000000, 0x40000008, 0x4}}, @TCA_SAMPLE_RATE={0x8}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x70}}, 0x0) sendmsg$kcm(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x24000000) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TCGETA(r8, 0x5405, &(0x7f0000000440)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) 755.222076ms ago: executing program 4 (id=3462): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000540)=@filter={'filter\x00', 0x42, 0x4, 0x410, 0xffffffff, 0x2a8, 0x210, 0x2a8, 0xffffffff, 0xffffffff, 0x378, 0x378, 0x378, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {0xff}, 0x84, 0x2, 0x2}, 0x0, 0x1e8, 0x210, 0x0, {0x100000000000000}, [@common=@inet=@sctp={{0x148}, {[0x4e20, 0x4e20], [0x4e21, 0x4e24], [0x4, 0x8, 0x7f, 0x7, 0x1, 0x7, 0x1ff, 0x9, 0xab2, 0x2, 0x300000, 0x5, 0x9, 0x1, 0x9, 0xcd4, 0x7, 0xc5a, 0x4, 0x7, 0xffffffff, 0xb87d, 0x5b000000, 0x6, 0x1, 0x6c7f, 0x9, 0x0, 0x9, 0x9, 0x8, 0x0, 0x80000001, 0x9, 0x200, 0x71e5e785, 0xfffffbff, 0x19, 0xf6b, 0xab19, 0x81, 0x9, 0xf4, 0x9, 0x2, 0x2, 0x3, 0x1, 0x7, 0x5, 0xcd, 0x6, 0x8f, 0x9, 0x5, 0x4b7d, 0x9, 0x1, 0x7, 0x6, 0x4, 0x6, 0x2, 0xfaa0], 0x6, [{0x5, 0x2, 0xf8}, {0x9, 0x7f, 0x1}, {0x4, 0x9, 0x10}, {0xf, 0x5, 0x1}], 0x0, 0x1, 0x1}}, @common=@unspec=@connmark={{0x30}}]}, @REJECT={0x28}}, {{@ip={@loopback, @rand_addr=0x64010101, 0xffffff00, 0xff000000, 'geneve0\x00', 'macvlan0\x00', {0xff}, {}, 0x2e, 0x0, 0x4}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x10, 0x9, 0x2}}}, {{@ip={@private=0xa010101, @loopback, 0xff, 0xff000000, 'bond0\x00', 'dvmrp0\x00', {}, {}, 0x2f, 0x0, 0x21}, 0x0, 0x70, 0xd0, 0x700}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xd, 0x8, [0x8, 0x27, 0x3d, 0x16, 0x13, 0xe, 0x2d, 0x21, 0x2d, 0x32, 0x3f, 0x20, 0x28, 0x18, 0x22, 0x12], 0x0, 0x0, 0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) 683.124631ms ago: executing program 0 (id=3463): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x34, r1, 0x1, 0x2, 0x0, {{}, {0x0, 0x4101, 0x20}, {0x18, 0x17, {0x0, 0xbc, @l2={'ib', 0x3a, 'caif0\x00'}}}}}, 0x34}}, 0x0) 629.338583ms ago: executing program 4 (id=3464): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') openat2(r0, &(0x7f0000000380)='./mnt\x00', &(0x7f0000000400)={0x8340, 0x8, 0x14}, 0x18) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005ff00000008000000000000004a", @ANYRES32=0x0, @ANYBLOB="7f15000000000000140012800b0001006261746164760000040002801400030077"], 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000840) 625.634643ms ago: executing program 6 (id=3465): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x1004, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000000210a018800000000000000000a0000010900020073797a31000000000900010073797a31000000001400038010000080"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="02000000080004000000000004000500a9930000100000000000000020"], 0x24, 0x0) r2 = socket(0x200000000000011, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) clock_nanosleep(0x4, 0x0, &(0x7f0000000340)={r3, r4+10000000}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r6 = socket(0x200000000000011, 0x2, 0x0) bind$packet(r6, &(0x7f0000000080)={0x11, 0x800, r5, 0x1, 0x0, 0x6, @random="933c547ecfa7"}, 0x14) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r7, 0x10e, 0x1, 0x0, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff08004508001c00000000fb02907800f2fcb507781d51000000e000030000009078006400d2561b6ad26f5b679373be9ec823e32be528a7f46df9f3edb375b57127b5d063f11008f428a52d1ae95923153aa1a36756174287ddac679d528306d77c62b89e040000"], 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r8, 0x1, 0x53, &(0x7f00000000c0)={0x6, 0x7, 'syz2\x00'}, &(0x7f00000001c0)=0x28) 441.123695ms ago: executing program 4 (id=3466): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x2, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000880)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32, @ANYBLOB="ac1414bb008000000000000338000000000000000000000007000000070e43aa5889c23ef593ae6bcd1844187c8073b5c9e00000000600000003000000080000000900001400000000000000000000000100000005000000000000001400000000000000000000000700000001000000000000001400000000000000000000000100000003000000000000001c000000000000000000000008"], 0xc0}, 0x54) memfd_secret(0x80000) 386.264407ms ago: executing program 0 (id=3467): syz_mount_image$ext4(&(0x7f0000000580)='ext3\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000600), 0x1, 0x556, &(0x7f0000000640)="$eJzs3U9oHNUfAPDvzDb59U9+JhURWxQDHipIt9lYrHpqezGHggU9iHhoaDY1ZNOEJAUTemjBi1BB1KuHXgTP3iV3byKoN48iVJGIJyEyu7NJTHaTELJOmvl8YHbfn03e++7wMu/t7CMBlNZw9pBGnImIG0nE4Ka6Y5FXDrdet/rH3ZvZkcTa2lu/J5HkZe3XJ/nzqTxzPCK+uxrxZGV7uwtLy9PjjUZ9Ps9fWJyZu7CwtHx+amb8Vv1W/XZt9NWLl0Zeq12sHVisD7767Jexa28++/GH778y+X3jfBKXYyCv2xzHQRmO4fX3ZLPsfb100I0VpJLH0ylODr/2+euLiKdjMCr5qM8MxtSDQjsH9NRaJWINKKnE+IeSas8D2mv7XqyDD7NHV1oLoO3xH2t9NhLHm2ujk6vJppVRa707dADtZ238fffsF9kRPfocYif37kfEM53iT5p9G2p+ipPFn/4r/jQiRvL+Z+Wj+2x/eEv+cYr/cv6clV/dZ/tFxw9AOa1caV3It1//0vX5T3SY/wx0uHbtR9HXv+7zv434K13mf9f32MbPH4192q1u8/wvO7L223PB/8Kj+xFnO8afrMefdIg/m/fc2GMbb/zw21i3uqLjX3sYca7j+mfjjlay8/3JC5NTjfpI67FjG998+96X3dovOv7s/J/sEv9O5z8rm9tjG19ffzjTrW73+NNf+5O3m6n+vOSD8cXF+VpEf3Jte/kuC5H2a9q/I4v/xRd2Hv+d4j+RrR32GP/cO9Or+4+/t7L4J/Z5/j/ZYxt/vXvnuW51RccPAAAAAAAAR0na/C5HklbX02larbb28D4VJ9PG7MLiS5Ozd25PtL7zMRR9aftO92Arn2T5Wv592HZ+dEv+5Yg4HRGfV04089Wbs42JooMHAAAAAAAAAAAAAAAAAACAQ+LUlv3/f1Za+/+BkjhWdAeAwhj/UF7GP5SX8Q/lZfxDeRn/UF7GP5SX8Q/lZfxDeRn/UF7GPwAAAAAcSaefX/kpiYh7r59oHpn+vK6v0J4BvZYW3QGgMJWiOwAUxq1/KC9rfCDZpf54t4qV3X4SAAAAAAAAAAAAADgo587Y/w9lZf8/lJf9/1Be9v9DeVnjA/b/AwAAAAAAAAAAAMDhN9A8krSa7wUeiDStViP+HxFD0ZdMTjXqIxHxRET8WOn7X5avFd1pAAAAAAAAAAAAAAAAAAAAOGIWlpanxxuN+ryEhITEeqLov0wAAAAAAAAAAAAAAAAAAFA+G5t+i+4JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABRn4///9y5RdIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwOPpnwAAAP//bKsggw==") r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0x4e, 0x0, &(0x7f0000000440)=0xfffffffffffffc2a) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x129a42, 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f00000005c0)='\"', 0x1, 0x4fed0) sendfile(r1, r1, 0x0, 0xe3aa6ea) 266.154064ms ago: executing program 4 (id=3468): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0), 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x4616, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x3, 0xb, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000efffffff0a0000040900010073797a310000000008000540000000020900020073797a310000000008000a808682b7fc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c0000800800034000000002"], 0xdc}, 0x1, 0x0, 0x0, 0x48051}, 0x40) 247.212215ms ago: executing program 0 (id=3469): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180200000100000000000000008500000029e40000950000000000000033dbe3339573fa4d251cc7f6c225993dfebf5e000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x20004880) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x7, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000069000004000001000000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x3, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000850000004f000000181100", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000009800000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r5 = socket$packet(0x11, 0x2, 0x300) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='gid_map\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000600)={@cgroup, 0x6, 0x0, 0x3ff, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000640)={@ifindex, r6, 0x7, 0x202c, 0x0, @void, @void, @value, @void, r7}, 0x20) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c03080006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r8], 0xb4}}, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r10, 0x0, 0xa20, 0x8000c65) read$ptp(r10, &(0x7f0000000180)=""/168, 0xa8) ioctl$MON_IOCX_GET(r10, 0x40189206, &(0x7f0000000200)={&(0x7f00000001c0), &(0x7f0000000340)=""/136, 0x88}) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@deltaction={0x54, 0x18, 0x1, 0x1070bd2a, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x8f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb6}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4085}, 0x20040844) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000006c0)={@fallback=r11, r4, 0x7, 0x20, 0x0, @void, @void, @void, @value, r7}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000240)="d2ff03066003008cb89e08d988a8", 0x0, 0xd5b4, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="31032abd7000fbdbdf250b00000008000300181c633f83e4abbfaa65"], 0x1c}, 0x1, 0x0, 0x0, 0x400c080}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000140)=r4, 0x4) 130.505152ms ago: executing program 1 (id=3470): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x56f, &(0x7f0000000140)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x200000ea, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c25}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 129.859723ms ago: executing program 4 (id=3471): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0xfc}}, 0xa) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x9, 0x7, 0x0, 0x0, 0x0, 0x40008, 0x590, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x14c58, 0x1, 0x0, 0x4, 0x8, 0x4ac, 0xb, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x13, r3, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000003a80)={0x0, 0x1c, &(0x7f0000003980)=[@in6={0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x8}}]}, &(0x7f0000003ac0)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x6d, &(0x7f0000000080), &(0x7f00000000c0)=0x3930) unshare(0x2020400) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e21, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xa}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x84, &(0x7f00000001c0)={r5, @in={{0xa, 0x9004, @rand_addr=0x64010102}}, 0x3, 0xc}, 0x90) r6 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48) r7 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r6, &(0x7f0000000280), &(0x7f0000000a80)=@udp6=r7}, 0x20) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=@newlink={0x58, 0x10, 0x1, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x12381, 0x40020}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x5, 0x24beedc}}]}]}, @IFLA_TXQLEN={0x8, 0xd, 0x6}]}, 0x58}}, 0x4040000) setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f00000002c0), 0x8) sendmmsg$sock(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="74b17a07", 0x4}], 0x1, &(0x7f0000000200)=[@txtime={{0x18, 0x1, 0x3d, 0x3}}], 0x18}}], 0x1, 0x20004000) 0s ago: executing program 1 (id=3472): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x4}, {0xffff, 0xffff}, {0x0, 0x4}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x42b8e4e1, 0xfffffffa, 0x6}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x2008000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000001800dd8d000000000000000002"], 0x3c}}, 0x8000) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt(r0, 0x2, 0x6, &(0x7f0000000000)=""/135, &(0x7f00000000c0)=0x87) r1 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) kernel console output (not intermixed with test programs): ilesystem 00000000-0000-0000-0000-000000000000. [ 161.047267][T11529] FAULT_INJECTION: forcing a failure. [ 161.047267][T11529] name failslab, interval 1, probability 0, space 0, times 0 [ 161.065246][T11529] CPU: 1 UID: 0 PID: 11529 Comm: syz.6.2705 Not tainted syzkaller #0 PREEMPT(voluntary) [ 161.065278][T11529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 161.065358][T11529] Call Trace: [ 161.065366][T11529] [ 161.065375][T11529] __dump_stack+0x1d/0x30 [ 161.065400][T11529] dump_stack_lvl+0x95/0xd0 [ 161.065420][T11529] dump_stack+0x15/0x1b [ 161.065439][T11529] should_fail_ex+0x263/0x280 [ 161.065491][T11529] should_failslab+0x8c/0xb0 [ 161.065561][T11529] kmem_cache_alloc_node_noprof+0x6a/0x4a0 [ 161.065583][T11529] ? set_task_ioprio+0x173/0x270 [ 161.065615][T11529] set_task_ioprio+0x173/0x270 [ 161.065677][T11529] __se_sys_ioprio_set+0x462/0x5a0 [ 161.065709][T11529] __x64_sys_ioprio_set+0x43/0x50 [ 161.065744][T11529] x64_sys_call+0x2781/0x3000 [ 161.065770][T11529] do_syscall_64+0xc0/0x2a0 [ 161.065803][T11529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.065833][T11529] RIP: 0033:0x7fc67e49acb9 [ 161.065850][T11529] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 161.065872][T11529] RSP: 002b:00007fc67cef7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fb [ 161.065897][T11529] RAX: ffffffffffffffda RBX: 00007fc67e715fa0 RCX: 00007fc67e49acb9 [ 161.065913][T11529] RDX: 0000000000006000 RSI: 0000000000000000 RDI: 0000000000000002 [ 161.065996][T11529] RBP: 00007fc67cef7090 R08: 0000000000000000 R09: 0000000000000000 [ 161.066010][T11529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 161.066024][T11529] R13: 00007fc67e716038 R14: 00007fc67e715fa0 R15: 00007ffc0fe32d58 [ 161.066043][T11529] [ 161.262097][T11527] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2703'. [ 161.443535][T11547] loop7: detected capacity change from 0 to 512 [ 161.475812][T11547] EXT4-fs: Ignoring removed bh option [ 161.496602][T11550] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2566 sclass=netlink_route_socket pid=11550 comm=syz.6.2713 [ 161.498246][T11547] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 161.524389][T11547] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:483: comm syz.7.2712: Invalid block bitmap block 0 in block_group 0 [ 161.538506][T11547] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 161.559176][T11547] EXT4-fs error (device loop7): ext4_clear_blocks:876: inode #11: comm syz.7.2712: attempt to clear invalid blocks 983261 len 1 [ 161.574599][T11547] EXT4-fs error (device loop7): __ext4_get_inode_loc:4830: comm syz.7.2712: Invalid inode table block 0 in block_group 0 [ 161.588468][T11547] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 161.598291][T11547] EXT4-fs error (device loop7) in ext4_orphan_del:303: Corrupt filesystem [ 161.607413][T11547] EXT4-fs error (device loop7): __ext4_get_inode_loc:4830: comm syz.7.2712: Invalid inode table block 0 in block_group 0 [ 161.620988][T11547] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 161.631088][T11547] EXT4-fs error (device loop7): ext4_truncate:4635: inode #11: comm syz.7.2712: mark_inode_dirty error [ 161.642910][T11547] EXT4-fs error (device loop7) in ext4_process_orphan:345: Corrupt filesystem [ 161.736359][T11547] EXT4-fs error (device loop7): __ext4_get_inode_loc:4830: comm syz.7.2712: Invalid inode table block 0 in block_group 0 [ 161.751651][T11547] EXT4-fs (loop7): 1 truncate cleaned up [ 161.759103][T11547] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.810505][ T7388] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.824298][T11570] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11570 comm=syz.1.2721 [ 161.900095][T11581] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2726'. [ 161.900734][T11570] syzkaller0: entered promiscuous mode [ 161.909716][T11581] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2726'. [ 161.915340][T11570] syzkaller0: entered allmulticast mode [ 161.926938][T11581] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2726'. [ 161.940221][T11581] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2726'. [ 162.064022][T11595] netlink: 72 bytes leftover after parsing attributes in process `syz.7.2732'. [ 162.265234][T11611] xt_hashlimit: max too large, truncated to 1048576 [ 162.275169][T11611] xt_CT: You must specify a L4 protocol and not use inversions on it [ 162.401418][T11623] loop7: detected capacity change from 0 to 128 [ 162.410732][T11623] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 162.423726][T11623] ext4 filesystem being mounted at /233/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 162.435500][T11623] EXT4-fs warning (device loop7): ext4_dirblock_csum_verify:375: inode #2: comm syz.7.2745: No space for directory leaf checksum. Please run e2fsck -D. [ 162.451663][T11623] EXT4-fs error (device loop7): __ext4_find_entry:1626: inode #2: comm syz.7.2745: checksumming directory block 0 [ 162.477158][ T7388] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 162.605223][T11650] loop7: detected capacity change from 0 to 128 [ 162.650029][T11653] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 162.773496][T11669] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 162.865146][T11685] loop1: detected capacity change from 0 to 512 [ 162.910212][T11685] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.919794][T11673] hsr0 speed is unknown, defaulting to 1000 [ 162.933983][T11685] ext4 filesystem being mounted at /540/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 163.022833][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.058305][T11673] chnl_net:caif_netlink_parms(): no params data found [ 163.122193][T11714] set match dimension is over the limit! [ 163.152593][T11718] loop1: detected capacity change from 0 to 1024 [ 163.156019][T11673] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.166212][T11673] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.190031][T11673] bridge_slave_0: entered allmulticast mode [ 163.199676][T11673] bridge_slave_0: entered promiscuous mode [ 163.208097][T11718] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.221490][T11673] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.229003][T11673] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.252795][T11673] bridge_slave_1: entered allmulticast mode [ 163.259606][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.270658][T11673] bridge_slave_1: entered promiscuous mode [ 163.327879][T11728] loop1: detected capacity change from 0 to 256 [ 163.367193][ T29] kauditd_printk_skb: 221 callbacks suppressed [ 163.367211][ T29] audit: type=1400 audit(2000000122.055:2334): avc: denied { mount } for pid=11727 comm="syz.1.2781" name="/" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 163.404400][T11728] lo speed is unknown, defaulting to 1000 [ 163.410775][T11673] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 163.424110][T11673] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 163.434575][ T29] audit: type=1400 audit(2000000122.055:2335): avc: denied { write } for pid=11727 comm="syz.1.2781" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 163.472349][T11673] team0: Port device team_slave_0 added [ 163.479456][T11673] team0: Port device team_slave_1 added [ 163.506115][T11728] lo speed is unknown, defaulting to 1000 [ 163.512260][T11728] lo speed is unknown, defaulting to 1000 [ 163.526695][T11728] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 163.534264][T11673] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 163.541885][T11673] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 163.568238][T11673] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 163.586452][T11728] lo speed is unknown, defaulting to 1000 [ 163.587217][T11673] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 163.599460][T11673] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 163.618198][T11739] netlink: 'syz.6.2787': attribute type 39 has an invalid length. [ 163.626867][T11673] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 163.652160][T11728] lo speed is unknown, defaulting to 1000 [ 163.663020][T11728] lo speed is unknown, defaulting to 1000 [ 163.678772][T11728] lo speed is unknown, defaulting to 1000 [ 163.693426][T11673] hsr_slave_0: entered promiscuous mode [ 163.706743][T11673] hsr_slave_1: entered promiscuous mode [ 163.723318][T11673] debugfs: 'hsr0' already exists in 'hsr' [ 163.729437][T11673] Cannot create hsr debugfs directory [ 163.741922][T11728] lo speed is unknown, defaulting to 1000 [ 163.766423][T11728] lo speed is unknown, defaulting to 1000 [ 163.824166][ T29] audit: type=1400 audit(2000000122.505:2336): avc: denied { unmount } for pid=3316 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 163.872261][T11752] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1025 sclass=netlink_route_socket pid=11752 comm=syz.6.2792 [ 163.928557][T11759] FAULT_INJECTION: forcing a failure. [ 163.928557][T11759] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 163.941866][T11759] CPU: 1 UID: 0 PID: 11759 Comm: syz.1.2795 Not tainted syzkaller #0 PREEMPT(voluntary) [ 163.941894][T11759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 163.941950][T11759] Call Trace: [ 163.941958][T11759] [ 163.941967][T11759] __dump_stack+0x1d/0x30 [ 163.941994][T11759] dump_stack_lvl+0x95/0xd0 [ 163.942018][T11759] dump_stack+0x15/0x1b [ 163.942039][T11759] should_fail_ex+0x263/0x280 [ 163.942059][T11759] should_fail+0xb/0x20 [ 163.942131][T11759] should_fail_usercopy+0x1a/0x20 [ 163.942152][T11759] _copy_from_user+0x1c/0xb0 [ 163.942189][T11759] __sys_bpf+0x183/0x7b0 [ 163.942213][T11759] __x64_sys_bpf+0x41/0x50 [ 163.942260][T11759] x64_sys_call+0x28e1/0x3000 [ 163.942283][T11759] do_syscall_64+0xc0/0x2a0 [ 163.942309][T11759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.942336][T11759] RIP: 0033:0x7f41aba9acb9 [ 163.942393][T11759] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 163.942411][T11759] RSP: 002b:00007f41aa4f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 163.942511][T11759] RAX: ffffffffffffffda RBX: 00007f41abd15fa0 RCX: 00007f41aba9acb9 [ 163.942523][T11759] RDX: 0000000000000038 RSI: 00002000000003c0 RDI: 0000000000000018 [ 163.942535][T11759] RBP: 00007f41aa4f7090 R08: 0000000000000000 R09: 0000000000000000 [ 163.942547][T11759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 163.942559][T11759] R13: 00007f41abd16038 R14: 00007f41abd15fa0 R15: 00007fffe5fb5998 [ 163.942577][T11759] [ 164.221225][T11765] veth6: entered promiscuous mode [ 164.226494][T11765] veth6: entered allmulticast mode [ 164.246398][T11766] hsr0: entered promiscuous mode [ 164.254917][T11767] hsr_slave_0: left promiscuous mode [ 164.265875][T11767] hsr_slave_1: left promiscuous mode [ 164.283097][T11767] hsr0 (unregistering): left promiscuous mode [ 164.324868][T11774] bond0 (unregistering): left promiscuous mode [ 164.337599][T11774] bond_slave_0: left promiscuous mode [ 164.348184][T11774] bond_slave_1: left promiscuous mode [ 164.453113][T11774] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 164.475814][T11774] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 164.520525][T11774] bond0 (unregistering): Released all slaves [ 164.528172][ T29] audit: type=1326 audit(2000000123.205:2337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11788 comm="syz.6.2808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc67e49acb9 code=0x7ffc0000 [ 164.556476][T11791] loop6: detected capacity change from 0 to 128 [ 164.565345][ T29] audit: type=1326 audit(2000000123.235:2338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11788 comm="syz.6.2808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7fc67e49acb9 code=0x7ffc0000 [ 164.589710][ T29] audit: type=1326 audit(2000000123.235:2339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11788 comm="syz.6.2808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc67e49acb9 code=0x7ffc0000 [ 164.598162][T11791] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 164.613673][ T29] audit: type=1326 audit(2000000123.235:2340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11788 comm="syz.6.2808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fc67e49acb9 code=0x7ffc0000 [ 164.626687][T11791] ext4 filesystem being mounted at /311/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 164.649629][ T29] audit: type=1326 audit(2000000123.235:2341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11788 comm="syz.6.2808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc67e49acb9 code=0x7ffc0000 [ 164.677225][T11791] EXT4-fs warning (device loop6): ext4_dirblock_csum_verify:375: inode #2: comm syz.6.2808: No space for directory leaf checksum. Please run e2fsck -D. [ 164.684250][ T29] audit: type=1326 audit(2000000123.235:2342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11788 comm="syz.6.2808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fc67e49acb9 code=0x7ffc0000 [ 164.700268][T11791] EXT4-fs error (device loop6): __ext4_find_entry:1626: inode #2: comm syz.6.2808: checksumming directory block 0 [ 164.723812][ T29] audit: type=1326 audit(2000000123.235:2343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11788 comm="syz.6.2808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc67e49acb9 code=0x7ffc0000 [ 164.781404][ T6725] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 164.855927][ T52] batadv1: left promiscuous mode [ 164.888380][T11673] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 164.910722][T11673] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 164.928373][T11673] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 164.946263][T11673] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 165.021197][T11673] 8021q: adding VLAN 0 to HW filter on device bond0 [ 165.032285][T11673] 8021q: adding VLAN 0 to HW filter on device team0 [ 165.051415][ T9747] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.058550][ T9747] bridge0: port 1(bridge_slave_0) entered forwarding state [ 165.068866][ T9747] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.076378][ T9747] bridge0: port 2(bridge_slave_1) entered forwarding state [ 165.102987][T11673] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 165.114045][T11673] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 165.247548][T11821] SELinux: ebitmap: empty map [ 165.253569][T11821] SELinux: failed to load policy [ 165.262121][T11821] random: crng reseeded on system resumption [ 165.284458][T11834] Cannot find del_set index 2 as target [ 165.305787][T11673] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 165.357596][T11836] loop6: detected capacity change from 0 to 1024 [ 165.371571][T11836] EXT4-fs: Ignoring removed nobh option [ 165.377474][T11836] EXT4-fs: Ignoring removed bh option [ 165.410579][T11836] EXT4-fs (loop6): stripe (8) is not aligned with cluster size (16), stripe is disabled [ 165.428020][T11836] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.437884][T11673] veth0_vlan: entered promiscuous mode [ 165.449753][T11673] veth1_vlan: entered promiscuous mode [ 165.469467][T11673] veth0_macvtap: entered promiscuous mode [ 165.477378][T11836] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4215: comm syz.6.2820: Allocating blocks 385-513 which overlap fs metadata [ 165.493109][T11673] veth1_macvtap: entered promiscuous mode [ 165.517238][T11860] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 165.541438][T11673] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 165.549381][T11859] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=11859 comm=syz.4.2825 [ 165.632708][T11673] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 165.642500][T11835] EXT4-fs (loop6): pa ffff88810055b460: logic 16, phys. 129, len 24 [ 165.650985][T11835] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 165.667736][ T9747] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.686332][ T6725] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.715642][ T9747] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.742704][ T9747] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.749954][T11863] __nla_validate_parse: 16 callbacks suppressed [ 165.749973][T11863] netlink: 388 bytes leftover after parsing attributes in process `syz.4.2827'. [ 165.765810][ T9747] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.801724][T11870] loop7: detected capacity change from 0 to 2048 [ 165.830571][T11870] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.843443][T11870] ext4 filesystem being mounted at /247/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 165.857177][T11878] loop0: detected capacity change from 0 to 256 [ 165.868673][T11878] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 165.906679][ T7388] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.917725][T11880] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2831'. [ 165.972720][T11883] loop7: detected capacity change from 0 to 1024 [ 165.997786][T11883] EXT4-fs: Ignoring removed nomblk_io_submit option [ 166.024700][T11883] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a041c01c, mo2=0002] [ 166.035460][T11883] System zones: 0-1, 3-36 [ 166.049723][T11883] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.153409][T11898] netlink: 'syz.0.2834': attribute type 29 has an invalid length. [ 166.169367][ T7388] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.196793][T11898] netlink: 'syz.0.2834': attribute type 29 has an invalid length. [ 166.232998][T11898] netlink: 500 bytes leftover after parsing attributes in process `syz.0.2834'. [ 166.283603][T11905] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2836'. [ 166.292705][T11905] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2836'. [ 166.301935][ T52] bridge_slave_1: left allmulticast mode [ 166.307788][ T52] bridge_slave_1: left promiscuous mode [ 166.313581][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.333330][ T52] bridge_slave_0: left allmulticast mode [ 166.339348][ T52] bridge_slave_0: left promiscuous mode [ 166.345345][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.418840][T11918] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2841'. [ 166.455947][T11921] IPv6: NLM_F_CREATE should be specified when creating new route [ 166.643126][T11944] ieee802154 phy0 wpan0: encryption failed: -22 [ 166.661916][T11937] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.2845: bad orphan inode 15 [ 166.715636][T11937] ext4_test_bit(bit=14, block=18) = 1 [ 166.721205][T11937] is_bad_inode(inode)=0 [ 166.725516][T11937] NEXT_ORPHAN(inode)=1023 [ 166.729982][T11937] max_ino=32 [ 166.733480][T11937] i_nlink=0 [ 166.782470][T11937] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2972: inode #15: comm syz.1.2845: corrupted xattr block 19: invalid header [ 166.815507][T11937] EXT4-fs warning (device loop1): ext4_evict_inode:273: xattr delete (err -117) [ 166.819655][T11952] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2848'. [ 166.904528][T11937] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none. [ 166.939306][T11937] ext4 filesystem being mounted at /557/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 167.047448][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 167.061665][ T52] bond_slave_0: left promiscuous mode [ 167.068475][T11954] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2845'. [ 167.077966][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 167.092684][ T52] bond_slave_1: left promiscuous mode [ 167.098609][ T52] bond0 (unregistering): Released all slaves [ 167.112917][ T52] bond1 (unregistering): Released all slaves [ 167.131738][ T52] bond2 (unregistering): Released all slaves [ 167.164368][T11905] vlan3: entered allmulticast mode [ 167.185766][T11884] hsr0 speed is unknown, defaulting to 1000 [ 167.216758][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0009-000000000000. [ 167.227718][ T52] IPVS: stopping backup sync thread 11860 ... [ 167.278591][T11884] lo speed is unknown, defaulting to 1000 [ 167.345213][T11957] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 167.361134][T11957] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 167.422349][ T52] hsr_slave_0: left promiscuous mode [ 167.422627][T11972] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2852'. [ 167.436975][ T52] hsr_slave_1: left promiscuous mode [ 167.442781][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 167.455379][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 167.601013][ T52] team0 (unregistering): Port device team_slave_1 removed [ 167.628355][ T52] team0 (unregistering): Port device team_slave_0 removed [ 167.735382][T11984] 9p: Bad value for 'rfdno' [ 167.749904][T11985] netlink: 'syz.7.2853': attribute type 1 has an invalid length. [ 167.755829][T11982] hsr0 speed is unknown, defaulting to 1000 [ 167.821224][T11980] set_capacity_and_notify: 2 callbacks suppressed [ 167.821254][T11980] loop1: detected capacity change from 0 to 164 [ 167.829683][T11884] chnl_net:caif_netlink_parms(): no params data found [ 167.925585][T11984] loop6: detected capacity change from 0 to 512 [ 167.932451][T11984] EXT4-fs: Ignoring removed i_version option [ 167.949004][T11980] ISOFS: unable to read i-node block [ 167.965811][T11980] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 167.983610][T11984] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 168.024849][T11984] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 168.033364][T11984] EXT4-fs (loop6): orphan cleanup on readonly fs [ 168.040943][T11982] lo speed is unknown, defaulting to 1000 [ 168.040994][T12006] pimreg: tun_chr_ioctl cmd 1074025677 [ 168.052793][T12006] pimreg: linktype set to 780 [ 168.054801][T11984] EXT4-fs error (device loop6): ext4_acquire_dquot:6986: comm syz.6.2854: Failed to acquire dquot type 1 [ 168.063087][T11884] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.072090][T11997] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2857'. [ 168.076113][T11884] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.097288][T11884] bridge_slave_0: entered allmulticast mode [ 168.104311][T11884] bridge_slave_0: entered promiscuous mode [ 168.112204][T11884] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.119479][T11884] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.127331][T11884] bridge_slave_1: entered allmulticast mode [ 168.133777][T11984] EXT4-fs error (device loop6): ext4_acquire_dquot:6986: comm syz.6.2854: Failed to acquire dquot type 1 [ 168.156918][T11984] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.2854: Invalid block bitmap block 0 in block_group 0 [ 168.157782][T11884] bridge_slave_1: entered promiscuous mode [ 168.174188][T12014] loop1: detected capacity change from 0 to 512 [ 168.198860][T11984] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 168.212213][T11984] EXT4-fs error (device loop6): ext4_acquire_dquot:6986: comm syz.6.2854: Failed to acquire dquot type 1 [ 168.213445][T11997] vlan2: entered allmulticast mode [ 168.230486][T11997] dummy0: entered allmulticast mode [ 168.232872][T11984] EXT4-fs (loop6): 1 orphan inode deleted [ 168.236459][T11997] batman_adv: batadv0: Adding interface: vlan2 [ 168.248205][T11997] batman_adv: batadv0: The MTU of interface vlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 168.273756][T11997] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 168.274168][T12014] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x05417272 (sector = 1) [ 168.292860][T12014] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 168.295849][T11984] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 168.341238][T11884] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 168.362276][T12014] FAT-fs (loop1): FAT read failed (blocknr 128) [ 168.363475][ T52] IPVS: stop unused estimator thread 0... [ 168.385966][T11884] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 168.429409][T12014] netlink: 'syz.1.2858': attribute type 4 has an invalid length. [ 168.443878][T12022] loop0: detected capacity change from 0 to 512 [ 168.446238][T11884] team0: Port device team_slave_0 added [ 168.456482][ T29] kauditd_printk_skb: 85 callbacks suppressed [ 168.456499][ T29] audit: type=1400 audit(2000000127.145:2423): avc: denied { read write } for pid=12013 comm="syz.1.2858" name="usbmon6" dev="devtmpfs" ino=160 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 168.467863][T12022] : renamed from bond_slave_0 (while UP) [ 168.487845][ T29] audit: type=1400 audit(2000000127.145:2424): avc: denied { open } for pid=12013 comm="syz.1.2858" path="/dev/usbmon6" dev="devtmpfs" ino=160 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 168.505222][ T29] audit: type=1400 audit(2000000127.145:2425): avc: denied { ioctl } for pid=12013 comm="syz.1.2858" path="/dev/usbmon6" dev="devtmpfs" ino=160 ioctlcmd=0x662b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 168.545666][ T29] audit: type=1400 audit(2000000127.145:2426): avc: denied { ioctl } for pid=12013 comm="syz.1.2858" path="socket:[79631]" dev="sockfs" ino=79631 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 168.632691][ T29] audit: type=1400 audit(2000000127.315:2427): avc: denied { append } for pid=12028 comm="syz.7.2861" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 168.663527][T11884] team0: Port device team_slave_1 added [ 168.687082][ T6725] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.688077][T12027] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 168.704947][T12027] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 168.750341][T11884] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 168.757378][T11884] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 168.784470][T11884] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 168.833203][T12034] vlan3: entered allmulticast mode [ 168.855881][T11884] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 168.863048][T11884] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 168.889318][T11884] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 168.905921][T12044] IPv6: NLM_F_CREATE should be specified when creating new route [ 168.926564][T12043] loop1: detected capacity change from 0 to 256 [ 168.947053][T11884] hsr_slave_0: entered promiscuous mode [ 168.953305][T11884] hsr_slave_1: entered promiscuous mode [ 168.966153][T11884] debugfs: 'hsr0' already exists in 'hsr' [ 168.972096][T11884] Cannot create hsr debugfs directory [ 168.986087][T12043] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 169.048915][T12043] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 169.129831][T12048] loop1: detected capacity change from 0 to 512 [ 169.155414][T12048] EXT4-fs: Ignoring removed nomblk_io_submit option [ 169.172422][T12048] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 169.199544][T12048] EXT4-fs (loop1): 1 truncate cleaned up [ 169.261788][T12048] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.294145][T12048] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.476833][T11884] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 169.511307][T11884] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 169.523595][T11884] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 169.533857][T11884] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 169.624177][T11884] 8021q: adding VLAN 0 to HW filter on device bond0 [ 169.698844][T11884] 8021q: adding VLAN 0 to HW filter on device team0 [ 169.726467][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.733819][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 169.762349][ T9745] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.769674][ T9745] bridge0: port 2(bridge_slave_1) entered forwarding state [ 169.798012][ T29] audit: type=1400 audit(2000000128.475:2428): avc: denied { accept } for pid=12089 comm="syz.1.2874" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 170.004813][T11884] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 170.151241][T12136] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 170.176186][T12136] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 170.386795][T11884] veth0_vlan: entered promiscuous mode [ 170.421942][T11884] veth1_vlan: entered promiscuous mode [ 170.468479][T11884] veth0_macvtap: entered promiscuous mode [ 170.497183][ T29] audit: type=1326 audit(2000000129.185:2429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12163 comm="syz.1.2889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41aba9acb9 code=0x7ffc0000 [ 170.521504][ T29] audit: type=1326 audit(2000000129.185:2430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12163 comm="syz.1.2889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41aba9acb9 code=0x7ffc0000 [ 170.521697][T12165] loop1: detected capacity change from 0 to 128 [ 170.545615][ T29] audit: type=1326 audit(2000000129.185:2431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12163 comm="syz.1.2889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7f41aba9acb9 code=0x7ffc0000 [ 170.575853][ T29] audit: type=1326 audit(2000000129.185:2432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12163 comm="syz.1.2889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41aba9acb9 code=0x7ffc0000 [ 170.579928][T11884] veth1_macvtap: entered promiscuous mode [ 170.617977][T12165] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 170.630717][T12165] ext4 filesystem being mounted at /575/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 170.644315][T12165] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:375: inode #2: comm syz.1.2889: No space for directory leaf checksum. Please run e2fsck -D. [ 170.660371][T12165] EXT4-fs error (device loop1): __ext4_find_entry:1626: inode #2: comm syz.1.2889: checksumming directory block 0 [ 170.692115][T12173] loop0: detected capacity change from 0 to 1024 [ 170.712278][T11884] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 170.722054][ T3316] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 170.741694][T11884] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 170.750712][T12173] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.798101][ T31] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.809683][ T7738] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.843585][ T7738] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.854433][T12182] FAULT_INJECTION: forcing a failure. [ 170.854433][T12182] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 170.873146][T12182] CPU: 0 UID: 0 PID: 12182 Comm: syz.1.2892 Not tainted syzkaller #0 PREEMPT(voluntary) [ 170.873181][T12182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 170.873277][T12182] Call Trace: [ 170.873285][T12182] [ 170.873293][T12182] __dump_stack+0x1d/0x30 [ 170.873324][T12182] dump_stack_lvl+0x95/0xd0 [ 170.873361][T12182] dump_stack+0x15/0x1b [ 170.873382][T12182] should_fail_ex+0x263/0x280 [ 170.873403][T12182] should_fail+0xb/0x20 [ 170.873471][T12182] should_fail_usercopy+0x1a/0x20 [ 170.873497][T12182] _copy_to_user+0x20/0xa0 [ 170.873598][T12182] simple_read_from_buffer+0xb5/0x130 [ 170.873639][T12182] proc_fail_nth_read+0x10e/0x150 [ 170.873747][T12182] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 170.873777][T12182] vfs_read+0x1ab/0x7f0 [ 170.873828][T12182] ? __rcu_read_unlock+0x4e/0x70 [ 170.873908][T12182] ? __fget_files+0x184/0x1c0 [ 170.873931][T12182] ? mutex_lock+0x57/0x90 [ 170.874013][T12182] ksys_read+0xdc/0x1a0 [ 170.874043][T12182] __x64_sys_read+0x40/0x50 [ 170.874281][T12182] x64_sys_call+0x2889/0x3000 [ 170.874308][T12182] do_syscall_64+0xc0/0x2a0 [ 170.874334][T12182] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.874411][T12182] RIP: 0033:0x7f41aba5b58e [ 170.874428][T12182] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 170.874446][T12182] RSP: 002b:00007f41aa4f6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 170.874478][T12182] RAX: ffffffffffffffda RBX: 00007f41aa4f76c0 RCX: 00007f41aba5b58e [ 170.874493][T12182] RDX: 000000000000000f RSI: 00007f41aa4f70a0 RDI: 0000000000000004 [ 170.874509][T12182] RBP: 00007f41aa4f7090 R08: 0000000000000000 R09: 0000000000000000 [ 170.874524][T12182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 170.874540][T12182] R13: 00007f41abd16038 R14: 00007f41abd15fa0 R15: 00007fffe5fb5998 [ 170.874563][T12182] [ 171.072316][ T7738] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.075811][T11673] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.133918][T12204] __nla_validate_parse: 12 callbacks suppressed [ 171.133936][T12204] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2895'. [ 171.155594][ T9747] bridge_slave_1: left allmulticast mode [ 171.161472][ T9747] bridge_slave_1: left promiscuous mode [ 171.167344][ T9747] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.200785][ T9747] bridge_slave_0: left allmulticast mode [ 171.206622][ T9747] bridge_slave_0: left promiscuous mode [ 171.212355][ T9747] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.236283][T12210] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2893'. [ 171.262501][T12216] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2898'. [ 171.452258][ T9747] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 171.469992][ T9747] bond_slave_0: left promiscuous mode [ 171.477240][ T9747] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 171.487104][ T9747] bond_slave_1: left promiscuous mode [ 171.493326][ T9747] bond0 (unregistering): Released all slaves [ 171.501896][ T9747] bond1 (unregistering): Released all slaves [ 171.511695][ T9747] bond2 (unregistering): Released all slaves [ 171.520390][ T9747] bond3 (unregistering): Released all slaves [ 171.529206][ T9747] bond4 (unregistering): Released all slaves [ 171.545891][T12247] netlink: 'syz.7.2907': attribute type 27 has an invalid length. [ 171.547032][T12236] vlan0: entered promiscuous mode [ 171.559492][T12236] bridge0: entered promiscuous mode [ 171.584123][T12251] loop0: detected capacity change from 0 to 512 [ 171.591590][T12247] vlan3: left allmulticast mode [ 171.607226][T12246] 8021q: adding VLAN 0 to HW filter on device team0 [ 171.617605][T12246] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 171.634730][ T9747] IPVS: stopping backup sync thread 7144 ... [ 171.639246][T12246] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 171.648101][T12246] IPv6: NLM_F_CREATE should be set when creating new route [ 171.655556][T12246] IPv6: NLM_F_CREATE should be set when creating new route [ 171.662970][T12246] IPv6: NLM_F_CREATE should be set when creating new route [ 171.664398][T12253] loop4: detected capacity change from 0 to 128 [ 171.674231][T12246] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12246 comm=syz.7.2907 [ 171.692257][T12253] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 171.713280][T12253] ext4 filesystem being mounted at /2/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 171.745238][T12253] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:375: inode #2: comm syz.4.2909: No space for directory leaf checksum. Please run e2fsck -D. [ 171.761190][T12253] EXT4-fs error (device loop4): __ext4_find_entry:1626: inode #2: comm syz.4.2909: checksumming directory block 0 [ 171.811302][T11884] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 171.862003][ T9747] hsr_slave_0: left promiscuous mode [ 171.884442][ T9747] hsr_slave_1: left promiscuous mode [ 171.890314][ T9747] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 171.898970][ T9747] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 171.940940][T12279] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2918'. [ 171.984338][T12282] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 171.988123][ T52] smc: removing ib device !yz! [ 172.005994][T12282] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 172.041090][T12266] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2913'. [ 172.088556][T12291] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2922'. [ 172.104717][T12279] vlan2: entered allmulticast mode [ 172.241716][T12302] pimreg: entered allmulticast mode [ 172.251410][T12302] pimreg: left allmulticast mode [ 172.286436][T12309] Symlink component flag not implemented [ 172.301268][T12309] Symlink component flag not implemented (7) [ 172.395372][T12319] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2931'. [ 172.404754][T12319] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2931'. [ 172.430948][ T9747] IPVS: stop unused estimator thread 0... [ 172.513013][T12325] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 172.515076][T12327] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 172.559224][T12327] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 172.564445][T12325] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 172.633014][T12336] FAULT_INJECTION: forcing a failure. [ 172.633014][T12336] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 172.646554][T12336] CPU: 0 UID: 0 PID: 12336 Comm: syz.7.2937 Not tainted syzkaller #0 PREEMPT(voluntary) [ 172.646635][T12336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 172.646649][T12336] Call Trace: [ 172.646656][T12336] [ 172.646664][T12336] __dump_stack+0x1d/0x30 [ 172.646692][T12336] dump_stack_lvl+0x95/0xd0 [ 172.646716][T12336] dump_stack+0x15/0x1b [ 172.646764][T12336] should_fail_ex+0x263/0x280 [ 172.646787][T12336] should_fail+0xb/0x20 [ 172.646806][T12336] should_fail_usercopy+0x1a/0x20 [ 172.646878][T12336] _copy_from_user+0x1c/0xb0 [ 172.646914][T12336] ___sys_recvmsg+0xaa/0x3b0 [ 172.646941][T12336] ? 0xffffffff81000000 [ 172.646957][T12336] ? __rcu_read_unlock+0x4e/0x70 [ 172.646986][T12336] __x64_sys_recvmsg+0xd1/0x160 [ 172.647201][T12336] x64_sys_call+0x2cbf/0x3000 [ 172.647231][T12336] do_syscall_64+0xc0/0x2a0 [ 172.647261][T12336] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.647319][T12336] RIP: 0033:0x7fca0c38acb9 [ 172.647337][T12336] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 172.647430][T12336] RSP: 002b:00007fca0ade7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 172.647454][T12336] RAX: ffffffffffffffda RBX: 00007fca0c605fa0 RCX: 00007fca0c38acb9 [ 172.647472][T12336] RDX: 00000000000040ff RSI: 00002000000000c0 RDI: 0000000000000003 [ 172.647550][T12336] RBP: 00007fca0ade7090 R08: 0000000000000000 R09: 0000000000000000 [ 172.647633][T12336] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 172.647648][T12336] R13: 00007fca0c606038 R14: 00007fca0c605fa0 R15: 00007fff85f7dd48 [ 172.647670][T12336] [ 172.858525][T12339] netlink: 56 bytes leftover after parsing attributes in process `syz.7.2939'. [ 172.867913][T12339] netlink: 56 bytes leftover after parsing attributes in process `syz.7.2939'. [ 172.896517][T12327] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2934: bg 0: block 112: padding at end of block bitmap is not set [ 172.986450][T12346] EXT4-fs error (device loop0): ext4_map_blocks:825: inode #15: block 3: comm syz.0.2934: lblock 3 mapped to illegal pblock 3 (length 1) [ 173.008768][T12313] set_capacity_and_notify: 4 callbacks suppressed [ 173.008799][T12313] loop6: detected capacity change from 0 to 512 [ 173.025437][T12346] EXT4-fs error (device loop0): ext4_ext_remove_space:2955: inode #15: comm syz.0.2934: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 173.095149][T12348] EXT4-fs error (device loop0): ext4_ext_remove_space:2955: inode #15: comm syz.0.2934: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 173.115172][T12348] EXT4-fs error (device loop0) in ext4_setattr:6035: Corrupt filesystem [ 173.504550][T12377] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 173.527389][T12377] SELinux: failed to load policy [ 173.537650][ T29] kauditd_printk_skb: 37 callbacks suppressed [ 173.537668][ T29] audit: type=1400 audit(2000000132.226:2470): avc: denied { mount } for pid=12379 comm="syz.4.2952" name="/" dev="hugetlbfs" ino=82317 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 173.538507][T12380] netlink: 'syz.4.2952': attribute type 2 has an invalid length. [ 173.577310][T12369] random: crng reseeded on system resumption [ 173.608049][T11673] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 173.721682][T12390] lo speed is unknown, defaulting to 1000 [ 173.806595][T12391] lo speed is unknown, defaulting to 1000 [ 173.885659][T12408] xt_hashlimit: size too large, truncated to 1048576 [ 174.026121][T12414] A link change request failed with some changes committed already. Interface vlan4 may have been left with an inconsistent configuration, please check. [ 174.091977][T12402] lo speed is unknown, defaulting to 1000 [ 174.137521][ T52] bridge_slave_1: left allmulticast mode [ 174.144185][ T52] bridge_slave_1: left promiscuous mode [ 174.150349][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.171048][ T52] bridge_slave_0: left promiscuous mode [ 174.176992][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.288032][ T29] audit: type=1400 audit(2000000132.976:2471): avc: denied { bind } for pid=12433 comm="syz.0.2969" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 174.308490][ T29] audit: type=1400 audit(2000000132.976:2472): avc: denied { listen } for pid=12433 comm="syz.0.2969" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 174.328542][ T29] audit: type=1400 audit(2000000132.976:2473): avc: denied { accept } for pid=12433 comm="syz.0.2969" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 174.351089][ T52] bond1 (unregistering): (slave bridge1): Releasing active interface [ 174.373260][T12442] netlink: 'syz.7.2971': attribute type 4 has an invalid length. [ 174.381446][T12441] loop0: detected capacity change from 0 to 1764 [ 174.390118][T12441] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 174.446939][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 174.458891][ T29] audit: type=1400 audit(2000000133.146:2474): avc: denied { read } for pid=12433 comm="syz.0.2969" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 174.483437][ T29] audit: type=1400 audit(2000000133.146:2475): avc: denied { open } for pid=12433 comm="syz.0.2969" path="/dev/input/event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 174.509248][ T29] audit: type=1400 audit(2000000133.176:2476): avc: denied { ioctl } for pid=12434 comm="syz.6.2970" path="/dev/sg0" dev="devtmpfs" ino=137 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 174.537569][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 174.547547][ T52] bond0 (unregistering): Released all slaves [ 174.555735][ T52] bond1 (unregistering): Released all slaves [ 174.565015][ T52] bond2 (unregistering): Released all slaves [ 174.581576][T12432] IPVS: Error connecting to the multicast addr [ 174.633460][ T52] hsr_slave_0: left promiscuous mode [ 174.644804][ T52] hsr_slave_1: left promiscuous mode [ 174.651036][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 174.659663][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 174.862230][T12465] loop6: detected capacity change from 0 to 1024 [ 174.879498][T12465] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.991846][ T6725] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.070082][T12402] chnl_net:caif_netlink_parms(): no params data found [ 175.111603][ T52] IPVS: stop unused estimator thread 0... [ 175.118659][T12483] xt_connbytes: Forcing CT accounting to be enabled [ 175.141888][T12483] set match dimension is over the limit! [ 175.164943][T12491] xt_CONNSECMARK: invalid mode: 0 [ 175.301181][T12402] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.308891][T12402] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.333017][T12402] bridge_slave_0: entered allmulticast mode [ 175.339798][T12402] bridge_slave_0: entered promiscuous mode [ 175.356629][T12402] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.364117][T12402] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.409627][T12402] bridge_slave_1: entered allmulticast mode [ 175.418150][T12402] bridge_slave_1: entered promiscuous mode [ 175.522353][ T29] audit: type=1326 audit(2000000134.206:2477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12524 comm="syz.6.2991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc67e49acb9 code=0x7ffc0000 [ 175.525809][T12402] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 175.547044][ T29] audit: type=1326 audit(2000000134.206:2478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12524 comm="syz.6.2991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc67e49acb9 code=0x7ffc0000 [ 175.580369][ T29] audit: type=1326 audit(2000000134.206:2479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12524 comm="syz.6.2991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fc67e49acb9 code=0x7ffc0000 [ 175.622259][T12402] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 175.667426][T12532] loop4: detected capacity change from 0 to 128 [ 175.698129][T12532] msdos: Bad value for 'fmask' [ 175.752674][T12402] team0: Port device team_slave_0 added [ 175.755630][T12538] SELinux: ebitmap: empty map [ 175.763495][T12538] SELinux: failed to load policy [ 175.763935][T12402] team0: Port device team_slave_1 added [ 175.823498][T12538] random: crng reseeded on system resumption [ 175.915883][T12402] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 175.923237][T12402] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 175.949600][T12402] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 175.971741][T12402] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 175.979025][T12402] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 176.005935][T12402] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 176.057392][T12402] hsr_slave_0: entered promiscuous mode [ 176.063797][T12402] hsr_slave_1: entered promiscuous mode [ 176.317030][T12600] __nla_validate_parse: 16 callbacks suppressed [ 176.317048][T12600] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3005'. [ 176.409194][T12614] SELinux: ebitmap: empty map [ 176.417394][T12614] SELinux: failed to load policy [ 176.434676][T12614] random: crng reseeded on system resumption [ 176.507941][T12625] loop7: detected capacity change from 0 to 128 [ 176.517496][T12402] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 176.527204][T12625] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 176.540424][T12625] ext4 filesystem being mounted at /290/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 176.552332][T12402] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 176.567093][T12625] EXT4-fs warning (device loop7): ext4_dirblock_csum_verify:375: inode #2: comm syz.7.3009: No space for directory leaf checksum. Please run e2fsck -D. [ 176.583679][T12625] EXT4-fs error (device loop7): __ext4_find_entry:1626: inode #2: comm syz.7.3009: checksumming directory block 0 [ 176.600588][T12402] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 176.617177][T12402] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 176.617640][T12638] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3010'. [ 176.650203][ T7388] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 176.752277][T12658] xt_policy: output policy not valid in PREROUTING and INPUT [ 176.766668][T12654] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3011'. [ 176.777288][T12402] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.818341][T12402] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.846586][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.853767][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.893449][ T7738] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.900962][ T7738] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.027710][T12685] netlink: 'syz.4.3017': attribute type 4 has an invalid length. [ 177.045711][T12688] SELinux: ebitmap: empty map [ 177.050495][T12402] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 177.050869][T12688] SELinux: failed to load policy [ 177.102466][T12688] random: crng reseeded on system resumption [ 177.115507][T12695] loop4: detected capacity change from 0 to 128 [ 177.125871][T12695] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 177.139604][T12695] ext4 filesystem being mounted at /27/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 177.152144][T12695] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:375: inode #2: comm syz.4.3020: No space for directory leaf checksum. Please run e2fsck -D. [ 177.167937][T12695] EXT4-fs error (device loop4): __ext4_find_entry:1626: inode #2: comm syz.4.3020: checksumming directory block 0 [ 177.210542][T12701] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3019'. [ 177.245754][T11884] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 177.269893][T12706] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3022'. [ 177.303108][T12402] veth0_vlan: entered promiscuous mode [ 177.321402][T12402] veth1_vlan: entered promiscuous mode [ 177.370727][T12714] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3025'. [ 177.371096][T12402] veth0_macvtap: entered promiscuous mode [ 177.395215][T12402] veth1_macvtap: entered promiscuous mode [ 177.417868][T12402] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 177.439141][T12402] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 177.474123][ T9745] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.497591][ T9745] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.507516][ T9745] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.559580][ T9745] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.580219][T12731] SELinux: ebitmap: empty map [ 177.583144][T12729] syzkaller1: entered promiscuous mode [ 177.589315][T12731] SELinux: failed to load policy [ 177.590662][T12729] syzkaller1: entered allmulticast mode [ 177.632532][T12737] random: crng reseeded on system resumption [ 177.662199][T12738] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3033'. [ 177.671343][T12738] netlink: 48 bytes leftover after parsing attributes in process `syz.7.3033'. [ 177.676179][T12740] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3034'. [ 177.717273][T12742] xt_hashlimit: size too large, truncated to 1048576 [ 177.820459][T12745] loop0: detected capacity change from 0 to 512 [ 177.846551][T12740] vlan2: entered allmulticast mode [ 177.877089][T12745] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.889954][T12745] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 177.905217][T12745] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3036'. [ 177.947001][T12752] loop4: detected capacity change from 0 to 1024 [ 177.993865][T12752] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 178.047545][T11673] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.099038][T12764] xt_limit: Overflow, try lower: 0/0 [ 178.115500][T12752] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 178.135089][T12752] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 178.147376][T12752] EXT4-fs (loop4): This should not happen!! Data will be lost [ 178.147376][T12752] [ 178.157367][T12752] EXT4-fs (loop4): Total free blocks count 0 [ 178.163722][T12752] EXT4-fs (loop4): Free/Dirty block details [ 178.169892][T12752] EXT4-fs (loop4): free_blocks=68451041280 [ 178.175849][T12752] EXT4-fs (loop4): dirty_blocks=80 [ 178.181034][T12752] EXT4-fs (loop4): Block reservation details [ 178.187243][T12752] EXT4-fs (loop4): i_reserved_data_blocks=5 [ 178.238917][T12773] loop0: detected capacity change from 0 to 1024 [ 178.241527][T12771] SELinux: ebitmap: empty map [ 178.255444][ T7738] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 64 with error 28 [ 178.257692][T12771] SELinux: failed to load policy [ 178.276329][T12773] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.3046: Failed to acquire dquot type 0 [ 178.297006][T12771] random: crng reseeded on system resumption [ 178.304234][T12773] EXT4-fs error (device loop0): mb_free_blocks:2037: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 178.319497][T12773] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #13: comm syz.0.3046: corrupted inode contents [ 178.336466][T12773] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #13: comm syz.0.3046: mark_inode_dirty error [ 178.353388][T12773] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #13: comm syz.0.3046: corrupted inode contents [ 178.366711][T12773] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #13: comm syz.0.3046: mark_inode_dirty error [ 178.380353][T12773] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #13: comm syz.0.3046: corrupted inode contents [ 178.395269][T12773] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 178.427001][T12773] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #13: comm syz.0.3046: corrupted inode contents [ 178.440718][T12773] EXT4-fs error (device loop0): ext4_truncate:4635: inode #13: comm syz.0.3046: mark_inode_dirty error [ 178.467388][T12773] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 178.468568][T12784] loop1: detected capacity change from 0 to 512 [ 178.484003][T12773] EXT4-fs (loop0): 1 truncate cleaned up [ 178.491187][T12773] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.519429][T12784] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.537694][T12784] ext4 filesystem being mounted at /7/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 178.572179][T12784] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.3050: corrupted xattr block 33: invalid ea_ino [ 178.585936][T12789] loop4: detected capacity change from 0 to 764 [ 178.609231][T12784] EXT4-fs (loop1): Remounting filesystem read-only [ 178.610296][T12789] iso9660: Unknown parameter '18446744073709551615' [ 178.615921][T12784] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 178.622347][T12784] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 178.642874][T11673] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.662576][ T29] kauditd_printk_skb: 177 callbacks suppressed [ 178.662595][ T29] audit: type=1400 audit(2000000137.346:2655): avc: denied { setattr } for pid=12782 comm="syz.1.3050" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 178.696657][T12793] team0: Device gtp0 is of different type [ 178.743375][T12402] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.764841][ T29] audit: type=1326 audit(2000000137.446:2656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12797 comm="syz.4.3056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9d0e8acb9 code=0x7ffc0000 [ 178.789072][ T29] audit: type=1326 audit(2000000137.446:2657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12797 comm="syz.4.3056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9d0e8acb9 code=0x7ffc0000 [ 178.813084][ T29] audit: type=1326 audit(2000000137.446:2658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12797 comm="syz.4.3056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb9d0e8acb9 code=0x7ffc0000 [ 178.837491][ T29] audit: type=1326 audit(2000000137.446:2659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12797 comm="syz.4.3056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9d0e8acb9 code=0x7ffc0000 [ 178.861492][ T29] audit: type=1326 audit(2000000137.446:2660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12797 comm="syz.4.3056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fb9d0e8acb9 code=0x7ffc0000 [ 178.885777][ T29] audit: type=1400 audit(2000000137.446:2661): avc: denied { read } for pid=12797 comm="syz.4.3056" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 178.905920][ T29] audit: type=1326 audit(2000000137.446:2662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12797 comm="syz.4.3056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9d0e8acb9 code=0x7ffc0000 [ 178.938887][ T29] audit: type=1326 audit(2000000137.616:2663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12797 comm="syz.4.3056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fb9d0e8acb9 code=0x7ffc0000 [ 178.973627][ T29] audit: type=1400 audit(2000000137.656:2664): avc: denied { create } for pid=12800 comm="syz.1.3055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 179.063261][T12812] SELinux: ebitmap: empty map [ 179.068474][T12812] SELinux: failed to load policy [ 179.076476][T12812] random: crng reseeded on system resumption [ 179.156998][T12818] loop1: detected capacity change from 0 to 512 [ 179.163743][T12816] loop4: detected capacity change from 0 to 4096 [ 179.243181][T12816] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 179.280576][T12832] vlan5: entered promiscuous mode [ 179.285899][T12832] team0: entered promiscuous mode [ 179.290943][T12832] team_slave_0: entered promiscuous mode [ 179.296957][T12832] team_slave_1: entered promiscuous mode [ 179.314089][T12833] usb usb5: usbfs: process 12833 (syz.6.3063) did not claim interface 0 before use [ 179.330604][T11884] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.538460][T12856] loop6: detected capacity change from 0 to 128 [ 179.551432][T12856] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 179.564638][T12856] ext4 filesystem being mounted at /366/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 179.576092][T12856] EXT4-fs warning (device loop6): ext4_dirblock_csum_verify:375: inode #2: comm syz.6.3069: No space for directory leaf checksum. Please run e2fsck -D. [ 179.592020][T12856] EXT4-fs error (device loop6): __ext4_find_entry:1626: inode #2: comm syz.6.3069: checksumming directory block 0 [ 179.624470][ T6725] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 179.653367][T12861] loop4: detected capacity change from 0 to 2048 [ 179.678792][T12861] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (45086!=38373) [ 179.688723][T12861] EXT4-fs (loop4): group descriptors corrupted! [ 179.769099][T12867] loop4: detected capacity change from 0 to 512 [ 179.791040][T12866] SELinux: ebitmap: empty map [ 179.821533][T12866] SELinux: failed to load policy [ 179.835289][T12866] random: crng reseeded on system resumption [ 179.961137][T12887] loop0: detected capacity change from 0 to 128 [ 179.972008][T12887] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 179.996467][T12887] ext4 filesystem being mounted at /39/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 180.031702][T12887] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:375: inode #2: comm syz.0.3082: No space for directory leaf checksum. Please run e2fsck -D. [ 180.047160][T12887] EXT4-fs error (device loop0): __ext4_find_entry:1626: inode #2: comm syz.0.3082: checksumming directory block 0 [ 180.105324][T11673] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 180.162133][T12904] FAULT_INJECTION: forcing a failure. [ 180.162133][T12904] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 180.176158][T12904] CPU: 0 UID: 0 PID: 12904 Comm: syz.0.3087 Not tainted syzkaller #0 PREEMPT(voluntary) [ 180.176262][T12904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 180.176286][T12904] Call Trace: [ 180.176293][T12904] [ 180.176303][T12904] __dump_stack+0x1d/0x30 [ 180.176328][T12904] dump_stack_lvl+0x95/0xd0 [ 180.176348][T12904] dump_stack+0x15/0x1b [ 180.176409][T12904] should_fail_ex+0x263/0x280 [ 180.176471][T12904] should_fail+0xb/0x20 [ 180.176493][T12904] should_fail_usercopy+0x1a/0x20 [ 180.176538][T12904] _copy_to_user+0x20/0xa0 [ 180.176565][T12904] simple_read_from_buffer+0xb5/0x130 [ 180.176598][T12904] proc_fail_nth_read+0x10e/0x150 [ 180.176692][T12904] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 180.176830][T12904] vfs_read+0x1ab/0x7f0 [ 180.176864][T12904] ? __rcu_read_unlock+0x4e/0x70 [ 180.176886][T12904] ? __fget_files+0x184/0x1c0 [ 180.176911][T12904] ? mutex_lock+0x57/0x90 [ 180.176935][T12904] ksys_read+0xdc/0x1a0 [ 180.177029][T12904] __x64_sys_read+0x40/0x50 [ 180.177064][T12904] x64_sys_call+0x2889/0x3000 [ 180.177116][T12904] do_syscall_64+0xc0/0x2a0 [ 180.177222][T12904] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.177363][T12904] RIP: 0033:0x7f7081f8b58e [ 180.177380][T12904] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 180.177399][T12904] RSP: 002b:00007f7080a26fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 180.177420][T12904] RAX: ffffffffffffffda RBX: 00007f7080a276c0 RCX: 00007f7081f8b58e [ 180.177437][T12904] RDX: 000000000000000f RSI: 00007f7080a270a0 RDI: 0000000000000006 [ 180.177452][T12904] RBP: 00007f7080a27090 R08: 0000000000000000 R09: 0000000000000000 [ 180.177467][T12904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 180.177542][T12904] R13: 00007f7082246038 R14: 00007f7082245fa0 R15: 00007fff0ff1fb28 [ 180.177602][T12904] [ 180.478497][T12926] pimreg: tun_chr_ioctl cmd 1074025677 [ 180.485633][T12926] pimreg: linktype set to 780 [ 180.510093][T12926] vlan0: entered allmulticast mode [ 180.517132][T12926] dummy0: entered allmulticast mode [ 180.523850][T12926] batman_adv: batadv0: Adding interface: vlan0 [ 180.530442][T12926] batman_adv: batadv0: The MTU of interface vlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 180.556482][T12926] batman_adv: batadv0: Not using interface vlan0 (retrying later): interface not active [ 180.582332][T12934] xt_HMARK: proto mask must be zero with L3 mode [ 180.620548][T12939] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 180.657533][T12939] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.664780][T12939] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.701591][T12939] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 180.712883][T12939] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 180.773432][T12939] vlan2: left allmulticast mode [ 180.779876][T12945] loop7: detected capacity change from 0 to 128 [ 180.786340][ T37] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.802242][ T37] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.821211][ T37] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.834382][T12945] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 180.847953][ T37] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.859862][T12945] ext4 filesystem being mounted at /304/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 180.911811][T12956] EXT4-fs: Ignoring removed nobh option [ 180.917839][T12956] EXT4-fs: Ignoring removed bh option [ 180.925397][T12956] EXT4-fs warning (device loop6): ext4_multi_mount_protect:394: Unable to create kmmpd thread for loop6. [ 180.927007][ T7388] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 181.034052][T12969] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 181.072716][T12969] ext4 filesystem being mounted at /306/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 181.098492][T12975] msdos: Unknown parameter 'fmaXðyܳ`Êcsk' [ 181.119853][T12969] EXT4-fs warning (device loop7): ext4_dirblock_csum_verify:375: inode #2: comm syz.7.3112: No space for directory leaf checksum. Please run e2fsck -D. [ 181.135542][T12969] EXT4-fs error (device loop7): __ext4_find_entry:1626: inode #2: comm syz.7.3112: checksumming directory block 0 [ 181.205160][ T7388] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 181.346977][T12986] siw: device registration error -23 [ 181.426706][T12997] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.459682][T12997] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 181.483051][T12993] lo speed is unknown, defaulting to 1000 [ 181.495880][T12993] lo speed is unknown, defaulting to 1000 [ 181.508531][T12993] lo speed is unknown, defaulting to 1000 [ 181.528066][T12993] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 181.576104][T12993] lo speed is unknown, defaulting to 1000 [ 181.619717][T12993] lo speed is unknown, defaulting to 1000 [ 181.647357][T13008] SELinux: ebitmap: empty map [ 181.655922][T12993] lo speed is unknown, defaulting to 1000 [ 181.664197][T13008] SELinux: failed to load policy [ 181.683637][T13008] random: crng reseeded on system resumption [ 181.694813][T12993] lo speed is unknown, defaulting to 1000 [ 181.708374][T12993] lo speed is unknown, defaulting to 1000 [ 181.771085][T11673] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.861555][T13024] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 181.869504][T13025] Cannot find add_set index 0 as target [ 181.882219][T13006] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 181.897680][T13024] SELinux: failed to load policy [ 181.913954][T13018] random: crng reseeded on system resumption [ 181.923468][T13006] EXT4-fs (loop6): orphan cleanup on readonly fs [ 181.969272][T13006] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4215: comm syz.6.3122: Allocating blocks 41-42 which overlap fs metadata [ 182.010986][T13006] EXT4-fs error (device loop6): ext4_acquire_dquot:6986: comm syz.6.3122: Failed to acquire dquot type 1 [ 182.049391][T13006] EXT4-fs error (device loop6): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 182.071833][T13006] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #12: comm syz.6.3122: corrupted inode contents [ 182.099718][T13039] __nla_validate_parse: 12 callbacks suppressed [ 182.099735][T13039] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3133'. [ 182.102282][T13006] EXT4-fs error (device loop6): ext4_dirty_inode:6502: inode #12: comm syz.6.3122: mark_inode_dirty error [ 182.145838][T13006] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #12: comm syz.6.3122: corrupted inode contents [ 182.175940][T13006] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #12: comm syz.6.3122: mark_inode_dirty error [ 182.192835][T13006] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #12: comm syz.6.3122: corrupted inode contents [ 182.201904][T13037] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 182.225931][T13037] ext4 filesystem being mounted at /313/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 182.266940][T13048] SELinux: ebitmap: empty map [ 182.272122][T13048] SELinux: failed to load policy [ 182.280188][T13006] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem [ 182.295703][T13048] random: crng reseeded on system resumption [ 182.326324][T13006] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #12: comm syz.6.3122: corrupted inode contents [ 182.376357][T13053] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3136'. [ 182.379642][T13056] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 182.385784][T13053] unsupported nlmsg_type 40 [ 182.407980][T13006] EXT4-fs error (device loop6): ext4_truncate:4635: inode #12: comm syz.6.3122: mark_inode_dirty error [ 182.440332][T13056] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 182.445728][T13006] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem [ 182.464313][T13060] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 182.509404][T13065] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3139'. [ 182.518725][T13065] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3139'. [ 182.533339][T13006] EXT4-fs (loop6): 1 truncate cleaned up [ 182.545277][T13060] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 182.566040][T13006] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 182.600625][T12402] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.660180][T13069] autofs4:pid:13069:validate_dev_ioctl: invalid path supplied for cmd(0xc018937a) [ 182.673388][T13006] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.807090][T13082] xt_connbytes: Forcing CT accounting to be enabled [ 182.814868][T13082] Cannot find set identified by id 0 to match [ 182.821399][T13086] xt_hashlimit: max too large, truncated to 1048576 [ 182.836058][T13086] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 182.871802][ T7388] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 182.882655][T13084] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (43234!=38373) [ 182.892694][T13084] EXT4-fs (loop4): group descriptors corrupted! [ 183.089423][T13106] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 183.124440][T13106] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.3156: bg 0: block 255: padding at end of block bitmap is not set [ 183.160024][T13112] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3157'. [ 183.183220][T13106] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 183.221929][T13106] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.3156: invalid indirect mapped block 1 (level 1) [ 183.223654][T13112] vlan4: entered promiscuous mode [ 183.240928][T13112] team0: entered promiscuous mode [ 183.246118][T13112] team_slave_0: entered promiscuous mode [ 183.252236][T13112] team_slave_1: entered promiscuous mode [ 183.253974][T13106] EXT4-fs (loop7): 1 truncate cleaned up [ 183.271232][T13106] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 183.320292][T13106] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 183.361930][ T7388] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.398272][T13118] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3161'. [ 183.419681][T13090] syz.1.3149 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 183.434122][T13090] CPU: 1 UID: 0 PID: 13090 Comm: syz.1.3149 Not tainted syzkaller #0 PREEMPT(voluntary) [ 183.434198][T13090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 183.434210][T13090] Call Trace: [ 183.434218][T13090] [ 183.434226][T13090] __dump_stack+0x1d/0x30 [ 183.434272][T13090] dump_stack_lvl+0x95/0xd0 [ 183.434298][T13090] dump_stack+0x15/0x1b [ 183.434321][T13090] dump_header+0x80/0x240 [ 183.434402][T13090] oom_kill_process+0x295/0x350 [ 183.434428][T13090] out_of_memory+0x97d/0xb80 [ 183.434451][T13090] try_charge_memcg+0x62e/0xa10 [ 183.434571][T13090] obj_cgroup_charge_pages+0xa6/0x150 [ 183.434674][T13090] __memcg_kmem_charge_page+0x9e/0x170 [ 183.434719][T13090] __alloc_frozen_pages_noprof+0x18a/0x350 [ 183.434784][T13090] alloc_pages_mpol+0xb3/0x260 [ 183.434819][T13090] alloc_pages_noprof+0x8f/0x130 [ 183.434851][T13090] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 183.434959][T13090] __kvmalloc_node_noprof+0x471/0x680 [ 183.434990][T13090] ? ip_set_alloc+0x24/0x30 [ 183.435022][T13090] ? ip_set_alloc+0x24/0x30 [ 183.435049][T13090] ip_set_alloc+0x24/0x30 [ 183.435072][T13090] hash_netiface_create+0x282/0x740 [ 183.435105][T13090] ? __pfx_hash_netiface_create+0x10/0x10 [ 183.435131][T13090] ip_set_create+0x3cf/0x970 [ 183.435167][T13090] ? __nla_parse+0x40/0x60 [ 183.435208][T13090] nfnetlink_rcv_msg+0x509/0x5d0 [ 183.435285][T13090] netlink_rcv_skb+0x123/0x220 [ 183.435313][T13090] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 183.435340][T13090] nfnetlink_rcv+0x167/0x1720 [ 183.435411][T13090] ? __list_del_entry_valid_or_report+0x65/0x130 [ 183.435446][T13090] ? __rmqueue_pcplist+0x9b6/0xb80 [ 183.435476][T13090] ? _raw_spin_lock_bh+0x56/0xb0 [ 183.435512][T13090] ? should_fail_ex+0x30/0x280 [ 183.435567][T13090] ? selinux_nlmsg_lookup+0x99/0x890 [ 183.435595][T13090] ? __rcu_read_unlock+0x33/0x70 [ 183.435618][T13090] ? __netlink_lookup+0x276/0x2b0 [ 183.435658][T13090] netlink_unicast+0x5c0/0x690 [ 183.435681][T13090] netlink_sendmsg+0x5c8/0x6f0 [ 183.435770][T13090] ? __pfx_netlink_sendmsg+0x10/0x10 [ 183.435813][T13090] __sock_sendmsg+0x145/0x170 [ 183.435842][T13090] ____sys_sendmsg+0x31e/0x4a0 [ 183.435873][T13090] ___sys_sendmsg+0x195/0x1e0 [ 183.435921][T13090] __x64_sys_sendmsg+0xd4/0x160 [ 183.436017][T13090] x64_sys_call+0x17ba/0x3000 [ 183.436041][T13090] do_syscall_64+0xc0/0x2a0 [ 183.436072][T13090] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.436133][T13090] RIP: 0033:0x7f20052dacb9 [ 183.436194][T13090] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 183.436217][T13090] RSP: 002b:00007f2003d37028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 183.436244][T13090] RAX: ffffffffffffffda RBX: 00007f2005555fa0 RCX: 00007f20052dacb9 [ 183.436292][T13090] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003 [ 183.436307][T13090] RBP: 00007f2005348bf7 R08: 0000000000000000 R09: 0000000000000000 [ 183.436325][T13090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 183.436337][T13090] R13: 00007f2005556038 R14: 00007f2005555fa0 R15: 00007ffcac8d6558 [ 183.436359][T13090] [ 183.756413][T13090] memory: usage 307200kB, limit 307200kB, failcnt 232 [ 183.763196][T13090] memory+swap: usage 307384kB, limit 9007199254740988kB, failcnt 0 [ 183.770856][T13123] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3160'. [ 183.772038][T13090] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 183.788174][T13090] Memory cgroup stats for /syz1: [ 183.788937][T13090] cache 0 [ 183.797155][T13090] rss 0 [ 183.799938][T13090] shmem 0 [ 183.802894][T13090] mapped_file 0 [ 183.806638][T13090] dirty 0 [ 183.809708][T13090] writeback 0 [ 183.813027][T13090] workingset_refault_anon 74 [ 183.817670][T13090] workingset_refault_file 2753 [ 183.822445][T13090] swap 188416 [ 183.825802][T13090] swapcached 0 [ 183.829365][T13090] pgpgin 274875 [ 183.832934][T13090] pgpgout 274875 [ 183.836836][T13090] pgfault 140908 [ 183.840492][T13090] pgmajfault 48 [ 183.844140][T13090] inactive_anon 0 [ 183.847902][T13090] active_anon 0 [ 183.851685][T13090] inactive_file 0 [ 183.855374][T13090] active_file 0 [ 183.858911][T13090] unevictable 0 [ 183.862624][T13090] hierarchical_memory_limit 314572800 [ 183.868219][T13090] hierarchical_memsw_limit 9223372036854771712 [ 183.874837][T13090] total_cache 0 [ 183.878356][T13090] total_rss 0 [ 183.881721][T13090] total_shmem 0 [ 183.885896][T13090] total_mapped_file 0 [ 183.890055][T13090] total_dirty 0 [ 183.893765][T13090] total_writeback 0 [ 183.897617][T13090] total_workingset_refault_anon 74 [ 183.902918][T13090] total_workingset_refault_file 2753 [ 183.908597][T13090] total_swap 188416 [ 183.912601][T13090] total_swapcached 0 [ 183.916561][T13090] total_pgpgin 274875 [ 183.920709][T13090] total_pgpgout 274875 [ 183.925057][T13090] total_pgfault 140908 [ 183.929466][T13090] total_pgmajfault 48 [ 183.933866][T13090] total_inactive_anon 0 [ 183.935023][T13130] set_capacity_and_notify: 10 callbacks suppressed [ 183.935039][T13130] loop4: detected capacity change from 0 to 128 [ 183.938583][T13090] total_active_anon 0 [ 183.956088][T13090] total_inactive_file 0 [ 183.960727][T13090] total_active_file 0 [ 183.961649][T13130] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 183.965385][T13090] total_unevictable 0 [ 183.978067][T13130] ext4 filesystem being mounted at /66/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 183.982203][T13090] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.3149,pid=13089,uid=0 [ 184.008473][T13090] Memory cgroup out of memory: Killed process 13089 (syz.1.3149) total-vm:94000kB, anon-rss:1204kB, file-rss:22024kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 184.160181][T11884] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 184.213911][T13141] loop0: detected capacity change from 0 to 1024 [ 184.256805][T13141] SELinux: security_context_str_to_sid () failed with errno=-22 [ 184.333589][T13155] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3174'. [ 184.405395][T13163] netlink: 68 bytes leftover after parsing attributes in process `syz.6.3177'. [ 184.433363][T13160] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3176'. [ 184.655757][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 184.655775][ T29] audit: type=1400 audit(2000000143.346:2671): avc: denied { ioctl } for pid=13178 comm="syz.1.3184" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=84784 ioctlcmd=0xb704 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 184.736874][T13189] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 184.805370][T13191] syzkaller0: entered promiscuous mode [ 184.810877][T13191] syzkaller0: entered allmulticast mode [ 184.840111][T13196] loop4: detected capacity change from 0 to 128 [ 184.861335][T13196] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 184.879445][T13196] ext4 filesystem being mounted at /74/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 184.915145][T11884] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 184.986523][ T3426] lo speed is unknown, defaulting to 1000 [ 184.997259][T13208] loop7: detected capacity change from 0 to 512 [ 185.038836][T13208] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 185.052012][T13217] syzkaller0: entered promiscuous mode [ 185.057899][T13217] syzkaller0: entered allmulticast mode [ 185.057967][T13218] loop4: detected capacity change from 0 to 1024 [ 185.070364][T13208] ext4 filesystem being mounted at /319/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 185.091929][T13224] loop1: detected capacity change from 0 to 256 [ 185.111376][T13224] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 185.140190][T13224] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 185.277695][T13243] veth1_to_bond: entered promiscuous mode [ 185.291270][T13246] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 185.312526][T13247] pimreg: entered allmulticast mode [ 185.325965][T13247] pimreg: left allmulticast mode [ 185.355841][T13252] 8021q: adding VLAN 0 to HW filter on device bond1 [ 185.372814][T13252] 8021q: adding VLAN 0 to HW filter on device bond1 [ 185.389794][T13252] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 185.417240][T13252] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 185.514509][T13232] veth1_to_bond: left promiscuous mode [ 185.599597][T13260] loop7: detected capacity change from 0 to 512 [ 185.620220][T13260] EXT4-fs: test_dummy_encryption option not supported [ 185.857676][ T29] audit: type=1326 audit(2000000144.546:2672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13215 comm="syz.0.3200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7081fcacb9 code=0x7fc00000 [ 185.920185][ T29] audit: type=1326 audit(2000000144.546:2673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13215 comm="syz.0.3200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7081fcacb9 code=0x7fc00000 [ 185.937589][T13255] loop1: detected capacity change from 0 to 512 [ 185.944671][ T29] audit: type=1326 audit(2000000144.546:2674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13215 comm="syz.0.3200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7081fcacb9 code=0x7fc00000 [ 185.944801][ T29] audit: type=1326 audit(2000000144.546:2675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13215 comm="syz.0.3200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7081fcacb9 code=0x7fc00000 [ 185.944834][ T29] audit: type=1326 audit(2000000144.546:2676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13215 comm="syz.0.3200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7081fcacb9 code=0x7fc00000 [ 185.944906][ T29] audit: type=1326 audit(2000000144.546:2677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13215 comm="syz.0.3200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7081fcacb9 code=0x7fc00000 [ 185.944929][ T29] audit: type=1326 audit(2000000144.546:2678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13215 comm="syz.0.3200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7081fcacb9 code=0x7fc00000 [ 185.944955][ T29] audit: type=1326 audit(2000000144.546:2679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13215 comm="syz.0.3200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7081fcacb9 code=0x7fc00000 [ 185.945049][ T29] audit: type=1326 audit(2000000144.546:2680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13215 comm="syz.0.3200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7081fcacb9 code=0x7fc00000 [ 186.471440][T13287] xt_hashlimit: max too large, truncated to 1048576 [ 186.479412][T13287] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 186.565962][T13289] loop1: detected capacity change from 0 to 512 [ 186.598338][T13289] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 186.628731][T13289] EXT4-fs error (device loop1): ext4_init_orphan_info:620: comm syz.1.3227: orphan file block 0: bad magic [ 186.655101][T13289] EXT4-fs (loop1): mount failed [ 186.658591][T13300] SELinux: failed to load policy [ 186.677425][T13306] geneve2: entered promiscuous mode [ 186.683219][T13306] geneve2: entered allmulticast mode [ 186.793422][T13317] tipc: Failed to obtain node identity [ 186.799272][T13317] tipc: Enabling of bearer rejected, failed to enable media [ 186.816071][T13321] loop0: detected capacity change from 0 to 512 [ 186.849843][T13321] EXT4-fs error (device loop0): ext4_ext_check_inode:523: inode #4: comm syz.0.3239: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 3, max 516(4), depth 0(0) [ 186.880760][T13321] EXT4-fs error (device loop0): ext4_quota_enable:7180: comm syz.0.3239: Bad quota inode: 4, type: 1 [ 186.896651][T13321] EXT4-fs warning (device loop0): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 186.930595][T13321] EXT4-fs (loop0): mount failed [ 186.990415][T13339] vlan4: entered allmulticast mode [ 187.062317][T13345] xt_policy: output policy not valid in PREROUTING and INPUT [ 187.109959][T13353] Cannot find del_set index 0 as target [ 187.116687][T13349] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 187.136511][T13349] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 187.163185][T13349] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 187.171782][T13349] EXT4-fs (loop6): orphan cleanup on readonly fs [ 187.179682][T13349] EXT4-fs error (device loop6): ext4_read_inode_bitmap:167: comm syz.6.3249: Inode bitmap for bg 0 marked uninitialized [ 187.203070][T13355] EXT4-fs (loop0): blocks per group (8192) and clusters per group (2304) inconsistent [ 187.208268][ T9] kernel read not supported for file /newroot/412 (pid: 9 comm: kworker/0:0) [ 187.241268][T13358] __nla_validate_parse: 13 callbacks suppressed [ 187.241288][T13358] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3254'. [ 187.391671][T13364] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 187.401733][T13364] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 187.410096][T13364] EXT4-fs (loop6): SIPHASH is not a valid default hash value [ 187.432449][T13368] FAULT_INJECTION: forcing a failure. [ 187.432449][T13368] name failslab, interval 1, probability 0, space 0, times 0 [ 187.445378][T13368] CPU: 0 UID: 0 PID: 13368 Comm: syz.1.3259 Not tainted syzkaller #0 PREEMPT(voluntary) [ 187.445487][T13368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 187.445500][T13368] Call Trace: [ 187.445508][T13368] [ 187.445517][T13368] __dump_stack+0x1d/0x30 [ 187.445549][T13368] dump_stack_lvl+0x95/0xd0 [ 187.445573][T13368] dump_stack+0x15/0x1b [ 187.445594][T13368] should_fail_ex+0x263/0x280 [ 187.445627][T13368] should_failslab+0x8c/0xb0 [ 187.445649][T13368] kmem_cache_alloc_node_noprof+0x6a/0x4a0 [ 187.445673][T13368] ? __alloc_skb+0x2f0/0x4b0 [ 187.445741][T13368] ? xa_load+0xb1/0xe0 [ 187.445768][T13368] __alloc_skb+0x2f0/0x4b0 [ 187.445799][T13368] ? __alloc_skb+0x219/0x4b0 [ 187.445820][T13368] netlink_dump+0x10d/0x8a0 [ 187.445871][T13368] ? obj_cgroup_charge_account+0x122/0x1a0 [ 187.445903][T13368] ? should_fail_ex+0x30/0x280 [ 187.445929][T13368] __netlink_dump_start+0x43e/0x520 [ 187.445955][T13368] ? __pfx_rtnl_dump_ifinfo+0x10/0x10 [ 187.446059][T13368] rtnetlink_rcv_msg+0x59f/0x720 [ 187.446089][T13368] ? __pfx_rtnl_dump_ifinfo+0x10/0x10 [ 187.446191][T13368] ? __pfx_rtnl_dumpit+0x10/0x10 [ 187.446288][T13368] ? __pfx_rtnl_dump_ifinfo+0x10/0x10 [ 187.446322][T13368] netlink_rcv_skb+0x123/0x220 [ 187.446349][T13368] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 187.446446][T13368] rtnetlink_rcv+0x1c/0x30 [ 187.446471][T13368] netlink_unicast+0x5c0/0x690 [ 187.446502][T13368] netlink_sendmsg+0x5c8/0x6f0 [ 187.446528][T13368] ? __pfx_netlink_sendmsg+0x10/0x10 [ 187.446557][T13368] __sock_sendmsg+0x145/0x170 [ 187.446602][T13368] __sys_sendto+0x2b2/0x380 [ 187.446629][T13368] __x64_sys_sendto+0x76/0x90 [ 187.446648][T13368] x64_sys_call+0x29a7/0x3000 [ 187.446707][T13368] do_syscall_64+0xc0/0x2a0 [ 187.446740][T13368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.446765][T13368] RIP: 0033:0x7f20052dacb9 [ 187.446825][T13368] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 187.446860][T13368] RSP: 002b:00007f2003d37028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 187.446881][T13368] RAX: ffffffffffffffda RBX: 00007f2005555fa0 RCX: 00007f20052dacb9 [ 187.446895][T13368] RDX: 0000000000000012 RSI: 0000200000000740 RDI: 0000000000000008 [ 187.446907][T13368] RBP: 00007f2003d37090 R08: 0000000000000000 R09: 0000000000000000 [ 187.446920][T13368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 187.446934][T13368] R13: 00007f2005556038 R14: 00007f2005555fa0 R15: 00007ffcac8d6558 [ 187.446953][T13368] [ 187.456102][T13370] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3260'. [ 187.733288][T13370] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3260'. [ 187.870069][T13376] EXT4-fs (loop4): 1 truncate cleaned up [ 187.939392][T13376] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.3262: bg 0: block 465: padding at end of block bitmap is not set [ 188.004359][T13376] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 131075 with max blocks 1 with error 28 [ 188.017295][T13376] EXT4-fs (loop4): This should not happen!! Data will be lost [ 188.017295][T13376] [ 188.027299][T13376] EXT4-fs (loop4): Total free blocks count 0 [ 188.027974][T13386] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 188.033508][T13376] EXT4-fs (loop4): Free/Dirty block details [ 188.046744][T13386] EXT4-fs (loop4): This should not happen!! Data will be lost [ 188.046744][T13386] [ 188.052209][T13376] EXT4-fs (loop4): free_blocks=0 [ 188.062268][T13386] EXT4-fs (loop4): Total free blocks count 0 [ 188.067612][T13376] EXT4-fs (loop4): dirty_blocks=2 [ 188.067634][T13376] EXT4-fs (loop4): Block reservation details [ 188.118208][T13388] netlink: 15 bytes leftover after parsing attributes in process `syz.1.3267'. [ 188.127489][T13388] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3267'. [ 188.366310][T13402] ext4: Unknown parameter 'subj_user' [ 188.405422][T13406] FAULT_INJECTION: forcing a failure. [ 188.405422][T13406] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 188.418828][T13406] CPU: 0 UID: 0 PID: 13406 Comm: syz.6.3276 Not tainted syzkaller #0 PREEMPT(voluntary) [ 188.418878][T13406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 188.418893][T13406] Call Trace: [ 188.418901][T13406] [ 188.418910][T13406] __dump_stack+0x1d/0x30 [ 188.418940][T13406] dump_stack_lvl+0x95/0xd0 [ 188.418966][T13406] dump_stack+0x15/0x1b [ 188.418984][T13406] should_fail_ex+0x263/0x280 [ 188.419083][T13406] should_fail+0xb/0x20 [ 188.419104][T13406] should_fail_usercopy+0x1a/0x20 [ 188.419128][T13406] strncpy_from_user+0x27/0x250 [ 188.419195][T13406] path_getxattrat+0xab/0x2a0 [ 188.419236][T13406] __x64_sys_fgetxattr+0x59/0x70 [ 188.419312][T13406] x64_sys_call+0x1592/0x3000 [ 188.419342][T13406] do_syscall_64+0xc0/0x2a0 [ 188.419372][T13406] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.419394][T13406] RIP: 0033:0x7fc67e49acb9 [ 188.419439][T13406] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 188.419457][T13406] RSP: 002b:00007fc67cef7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000c1 [ 188.419477][T13406] RAX: ffffffffffffffda RBX: 00007fc67e715fa0 RCX: 00007fc67e49acb9 [ 188.419493][T13406] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffffff [ 188.419507][T13406] RBP: 00007fc67cef7090 R08: 0000000000000000 R09: 0000000000000000 [ 188.419585][T13406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 188.419600][T13406] R13: 00007fc67e716038 R14: 00007fc67e715fa0 R15: 00007ffc0fe32d58 [ 188.419623][T13406] [ 188.609018][T13405] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 188.635307][T13405] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 188.695913][T13412] netlink: 'syz.4.3280': attribute type 29 has an invalid length. [ 188.706776][T13414] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3281'. [ 188.708471][T13412] netlink: 'syz.4.3280': attribute type 29 has an invalid length. [ 188.782508][T13412] netlink: 500 bytes leftover after parsing attributes in process `syz.4.3280'. [ 188.794662][T13422] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3284'. [ 188.817807][T13427] netlink: 104 bytes leftover after parsing attributes in process `syz.7.3286'. [ 188.839414][T13429] bond3: entered allmulticast mode [ 188.850013][T13429] ip6gretap1: entered allmulticast mode [ 188.856091][T13429] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 188.936750][T13442] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3293'. [ 189.086659][T13450] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 189.153688][T13453] set_capacity_and_notify: 6 callbacks suppressed [ 189.153738][T13453] loop6: detected capacity change from 0 to 256 [ 189.255616][T13459] loop4: detected capacity change from 0 to 512 [ 189.323812][T13459] ext4 filesystem being mounted at /90/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 189.469177][T13482] Cannot find add_set index 0 as target [ 189.481878][T13485] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 189.492585][T13485] SELinux: failed to load policy [ 189.498566][T13485] random: crng reseeded on system resumption [ 189.707837][ T29] kauditd_printk_skb: 2017 callbacks suppressed [ 189.707865][ T29] audit: type=1400 audit(4147483796.394:4698): avc: denied { name_bind } for pid=13494 comm="syz.6.3312" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 189.761158][T13503] loop7: detected capacity change from 0 to 512 [ 189.795323][T13503] ext4 filesystem being mounted at /336/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 189.851235][ T29] audit: type=1400 audit(4147483796.534:4699): avc: denied { map } for pid=13512 comm="syz.4.3316" path="socket:[86014]" dev="sockfs" ino=86014 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 189.876240][ T29] audit: type=1400 audit(4147483796.534:4700): avc: denied { read accept } for pid=13512 comm="syz.4.3316" path="socket:[86014]" dev="sockfs" ino=86014 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 189.958885][T13518] netlink: 'syz.0.3318': attribute type 4 has an invalid length. [ 190.010218][T13518] .`: renamed from bond0 (while UP) [ 190.047619][T13523] random: crng reseeded on system resumption [ 190.136033][T13530] loop4: detected capacity change from 0 to 2048 [ 190.156767][T13530] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (30438!=38373) [ 190.166604][T13530] EXT4-fs (loop4): group descriptors corrupted! [ 190.459067][T13542] loop0: detected capacity change from 0 to 128 [ 190.516438][T13542] msdos filesystem being mounted at /83/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 190.709400][T13552] xt_hashlimit: max too large, truncated to 1048576 [ 190.745985][T13555] loop0: detected capacity change from 0 to 1024 [ 190.755007][T13552] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 190.796474][T13556] random: crng reseeded on system resumption [ 190.860879][T13566] geneve2: entered promiscuous mode [ 190.866496][T13566] geneve2: entered allmulticast mode [ 190.886013][T13563] loop6: detected capacity change from 0 to 2048 [ 190.920092][T13572] wireguard0: entered promiscuous mode [ 190.946290][T13563] loop6: p1 p2 p3 [ 191.085225][ T3739] udevd[3739]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 191.085990][ T3298] udevd[3298]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 191.110140][ T3742] udevd[3742]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 191.239007][T13603] SELinux: policydb version 423013213 does not match my version range 15-35 [ 191.248981][T13592] random: crng reseeded on system resumption [ 191.264676][T13599] usb usb8: usbfs: process 13599 (syz.4.3345) did not claim interface 0 before use [ 191.280183][T13603] SELinux: failed to load policy [ 191.316551][ T29] audit: type=1400 audit(4147483797.994:4701): avc: denied { append } for pid=13601 comm="syz.6.3347" name="pfkey" dev="proc" ino=4026533265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 191.345836][T13605] team_slave_0: left promiscuous mode [ 191.367606][T13605] team0 (unregistering): Port device team_slave_0 removed [ 191.379030][T13605] team_slave_1: left promiscuous mode [ 191.389705][T13605] team0 (unregistering): Port device team_slave_1 removed [ 191.410971][T13599] 8021q: adding VLAN 0 to HW filter on device bond1 [ 191.438166][ T29] audit: type=1400 audit(4147483798.124:4702): avc: denied { ioctl } for pid=13609 comm="syz.1.3351" path="socket:[87179]" dev="sockfs" ino=87179 ioctlcmd=0x89a0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 191.464555][ T29] audit: type=1400 audit(4147483798.124:4703): avc: denied { listen } for pid=13609 comm="syz.1.3351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 191.544023][T13616] 8021q: adding VLAN 0 to HW filter on device bond0 [ 191.612411][T13623] FAULT_INJECTION: forcing a failure. [ 191.612411][T13623] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 191.626260][T13623] CPU: 1 UID: 0 PID: 13623 Comm: syz.1.3355 Not tainted syzkaller #0 PREEMPT(voluntary) [ 191.626333][T13623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 191.626348][T13623] Call Trace: [ 191.626357][T13623] [ 191.626439][T13623] __dump_stack+0x1d/0x30 [ 191.626470][T13623] dump_stack_lvl+0x95/0xd0 [ 191.626492][T13623] dump_stack+0x15/0x1b [ 191.626511][T13623] should_fail_ex+0x263/0x280 [ 191.626534][T13623] should_fail+0xb/0x20 [ 191.626556][T13623] should_fail_usercopy+0x1a/0x20 [ 191.626605][T13623] _copy_from_user+0x1c/0xb0 [ 191.626684][T13623] kstrtouint_from_user+0x69/0xf0 [ 191.626707][T13623] ? 0xffffffff81000000 [ 191.626724][T13623] ? selinux_file_permission+0x1e1/0x320 [ 191.626825][T13623] proc_fail_nth_write+0x50/0x160 [ 191.626858][T13623] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 191.626939][T13623] vfs_write+0x269/0x9f0 [ 191.626973][T13623] ? __rcu_read_unlock+0x4e/0x70 [ 191.626994][T13623] ? __fget_files+0x184/0x1c0 [ 191.627017][T13623] ? mutex_lock+0x57/0x90 [ 191.627041][T13623] ksys_write+0xdc/0x1a0 [ 191.627145][T13623] __x64_sys_write+0x40/0x50 [ 191.627168][T13623] x64_sys_call+0x2847/0x3000 [ 191.627221][T13623] do_syscall_64+0xc0/0x2a0 [ 191.627275][T13623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.627299][T13623] RIP: 0033:0x7f200529b58e [ 191.627317][T13623] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 191.627334][T13623] RSP: 002b:00007f2003d36fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 191.627399][T13623] RAX: ffffffffffffffda RBX: 00007f2003d376c0 RCX: 00007f200529b58e [ 191.627416][T13623] RDX: 0000000000000001 RSI: 00007f2003d370a0 RDI: 0000000000000009 [ 191.627438][T13623] RBP: 00007f2003d37090 R08: 0000000000000000 R09: 0000000000000000 [ 191.627453][T13623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 191.627465][T13623] R13: 00007f2005556038 R14: 00007f2005555fa0 R15: 00007ffcac8d6558 [ 191.627484][T13623] [ 191.673520][T13628] random: crng reseeded on system resumption [ 191.755641][ T29] audit: type=1326 audit(4147483798.434:4704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13625 comm="syz.4.3356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9d0e8acb9 code=0x7ffc0000 [ 191.841022][T13632] netlink: 'syz.0.3357': attribute type 1 has an invalid length. [ 191.842721][ T29] audit: type=1326 audit(4147483798.434:4705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13625 comm="syz.4.3356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9d0e8acb9 code=0x7ffc0000 [ 191.907213][ T29] audit: type=1326 audit(4147483798.434:4706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13625 comm="syz.4.3356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fb9d0e8acb9 code=0x7ffc0000 [ 191.931992][ T29] audit: type=1400 audit(4147483798.434:4707): avc: denied { getopt } for pid=13625 comm="syz.4.3356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 191.934647][T13629] wg1: entered allmulticast mode [ 192.013318][T13635] loop7: detected capacity change from 0 to 512 [ 192.024256][T13639] hsr_slave_0: left promiscuous mode [ 192.033435][T13639] hsr_slave_1: left promiscuous mode [ 192.067114][T13635] loop7: detected capacity change from 0 to 128 [ 192.302439][T13671] loop4: detected capacity change from 0 to 1024 [ 192.311482][T13671] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 192.344121][T13671] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 192.352567][T13671] EXT4-fs (loop4): orphan cleanup on readonly fs [ 192.360176][T13671] EXT4-fs error (device loop4): ext4_map_blocks:825: inode #3: block 3: comm syz.4.3371: lblock 3 mapped to illegal pblock 3 (length 1) [ 192.525628][T13671] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.3371: Failed to acquire dquot type 0 [ 192.630396][T13671] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #3: block 3: comm syz.4.3371: lblock 3 mapped to illegal pblock 3 (length 1) [ 192.659390][T13671] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.3371: Failed to acquire dquot type 0 [ 192.671612][T13671] EXT4-fs error (device loop4): ext4_free_blocks:6728: comm syz.4.3371: Freeing blocks not in datazone - block = 0, count = 4096 [ 192.685670][T13671] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #3: block 3: comm syz.4.3371: lblock 3 mapped to illegal pblock 3 (length 1) [ 192.700398][T13671] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.3371: Failed to acquire dquot type 0 [ 192.711982][T13671] EXT4-fs (loop4): 1 orphan inode deleted [ 192.714593][T13679] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 192.758256][T13679] EXT4-fs (loop1): 1 truncate cleaned up [ 192.833546][T13686] __nla_validate_parse: 15 callbacks suppressed [ 192.833567][T13686] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3375'. [ 192.868135][T13688] random: crng reseeded on system resumption [ 193.145428][T11884] EXT4-fs unmount: 18 callbacks suppressed [ 193.145449][T11884] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.338538][T13704] lo speed is unknown, defaulting to 1000 [ 193.352062][T13708] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3386'. [ 193.461881][T13708] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 193.639804][T13718] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 193.664090][T13718] SELinux: failed to load policy [ 193.672035][T13718] random: crng reseeded on system resumption [ 193.719177][T13721] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 193.912814][T13735] netlink: 'syz.1.3397': attribute type 1 has an invalid length. [ 193.921209][T13735] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3397'. [ 193.943493][T13733] IPVS: stopping backup sync thread 13737 ... [ 193.943444][T13737] IPVS: sync thread started: state = BACKUP, mcast_ifn = dummy0, syncid = 0, id = 0 [ 194.051182][T13747] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3401'. [ 194.091770][T13752] pimreg: entered allmulticast mode [ 194.093266][T13750] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3400'. [ 194.182976][T13760] geneve2: entered promiscuous mode [ 194.188509][T13760] geneve2: entered allmulticast mode [ 194.210781][T13708] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 194.226469][T13708] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 194.239114][T13708] EXT4-fs (loop4): This should not happen!! Data will be lost [ 194.239114][T13708] [ 194.249051][T13708] EXT4-fs (loop4): Total free blocks count 0 [ 194.255237][T13708] EXT4-fs (loop4): Free/Dirty block details [ 194.261148][T13708] EXT4-fs (loop4): free_blocks=2415919104 [ 194.267012][T13708] EXT4-fs (loop4): dirty_blocks=7424 [ 194.272553][T13708] EXT4-fs (loop4): Block reservation details [ 194.278595][T13708] EXT4-fs (loop4): i_reserved_data_blocks=464 [ 194.293239][T13752] pimreg: left allmulticast mode [ 194.355083][ T7738] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 194.377254][T13765] set_capacity_and_notify: 2 callbacks suppressed [ 194.377277][T13765] loop0: detected capacity change from 0 to 256 [ 194.390997][T13765] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 194.437574][T13765] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 194.464615][T13767] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3409'. [ 194.473910][T13765] vfat filesystem being mounted at /100/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 194.474565][T13767] netlink: 'syz.1.3409': attribute type 5 has an invalid length. [ 194.492856][T13767] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3409'. [ 194.568558][T13767] geneve2: entered promiscuous mode [ 194.574606][T13767] geneve2: entered allmulticast mode [ 194.595731][T13773] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 194.605886][T13773] SELinux: failed to load policy [ 194.614864][T13773] random: crng reseeded on system resumption [ 194.651757][ T37] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 65535 - 0 [ 194.689905][T13763] loop7: detected capacity change from 0 to 512 [ 194.707727][ T37] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 65535 - 0 [ 194.736222][ T37] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 65535 - 0 [ 194.745306][T13784] loop1: detected capacity change from 0 to 512 [ 194.752800][T13784] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 194.760160][T13786] loop4: detected capacity change from 0 to 512 [ 194.764551][T13784] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 194.780417][T13784] EXT4-fs (loop1): group descriptors corrupted! [ 194.780546][ T37] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 65535 - 0 [ 194.846682][T13790] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3417'. [ 194.858080][T13786] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 194.907756][T13792] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3419'. [ 194.933806][T13792] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3419'. [ 194.990631][T13763] msdos filesystem being mounted at /353/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 195.017480][T13797] loop0: detected capacity change from 0 to 256 [ 195.019593][T13797] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 195.066810][T13797] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 195.126307][T13797] vfat filesystem being mounted at /106/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 195.145602][ T29] kauditd_printk_skb: 51 callbacks suppressed [ 195.145618][ T29] audit: type=1326 audit(4147483801.835:4754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13751 comm="syz.7.3404" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fca0c38acb9 code=0x0 [ 195.179409][T13810] loop6: detected capacity change from 0 to 512 [ 195.186939][ T29] audit: type=1400 audit(4147483801.845:4755): avc: denied { ioctl } for pid=13807 comm="syz.6.3425" path="socket:[87498]" dev="sockfs" ino=87498 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 195.214554][T13810] EXT4-fs: Invalid journal IO priority (must be 0-7) [ 195.274845][ T29] audit: type=1400 audit(4147483801.945:4756): avc: denied { setopt } for pid=13809 comm="syz.6.3426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 195.348094][T13818] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13818 comm=syz.1.3430 [ 195.473346][T13833] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=13833 comm=syz.4.3435 [ 195.560828][T13809] syz.6.3426 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 195.572467][T13809] CPU: 1 UID: 0 PID: 13809 Comm: syz.6.3426 Not tainted syzkaller #0 PREEMPT(voluntary) [ 195.572524][T13809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 195.572572][T13809] Call Trace: [ 195.572578][T13809] [ 195.572586][T13809] __dump_stack+0x1d/0x30 [ 195.572612][T13809] dump_stack_lvl+0x95/0xd0 [ 195.572636][T13809] dump_stack+0x15/0x1b [ 195.572714][T13809] dump_header+0x80/0x240 [ 195.572734][T13809] oom_kill_process+0x295/0x350 [ 195.572757][T13809] out_of_memory+0x97d/0xb80 [ 195.572780][T13809] try_charge_memcg+0x62e/0xa10 [ 195.572882][T13809] charge_memcg+0x51/0xc0 [ 195.572964][T13809] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 195.573005][T13809] __read_swap_cache_async+0x17b/0x2d0 [ 195.573082][T13809] swap_cluster_readahead+0x262/0x3c0 [ 195.573164][T13809] swapin_readahead+0xde/0x840 [ 195.573260][T13809] ? mod_memcg_lruvec_state+0x1a1/0x280 [ 195.573284][T13809] ? lruvec_stat_mod_folio+0xd2/0x110 [ 195.573318][T13809] ? __rcu_read_unlock+0x4e/0x70 [ 195.573342][T13809] ? swap_cache_get_folio+0x26f/0x280 [ 195.573375][T13809] do_swap_page+0x2f4/0x2140 [ 195.573402][T13809] ? css_rstat_updated+0xbb/0x280 [ 195.573440][T13809] ? __pfx_default_wake_function+0x10/0x10 [ 195.573536][T13809] handle_mm_fault+0xb40/0x3030 [ 195.573647][T13809] ? vma_start_read+0x1c7/0x2c0 [ 195.573765][T13809] do_user_addr_fault+0x62f/0x1050 [ 195.573795][T13809] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 195.573821][T13809] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 195.573848][T13809] ? irqentry_exit+0x3c/0x510 [ 195.573939][T13809] exc_page_fault+0x62/0xa0 [ 195.573963][T13809] asm_exc_page_fault+0x26/0x30 [ 195.573995][T13809] RIP: 0033:0x7fc67e368170 [ 195.574054][T13809] Code: 00 00 48 8d 1d 51 fc 3a 00 4c 89 c5 eb 1c 66 66 2e 0f 1f 84 00 00 00 00 00 90 48 81 c5 f0 00 00 00 48 39 dd 0f 84 f4 fb ff ff <80> 7d 20 00 74 ea 8b 45 0c 85 c0 74 e3 48 89 ef e8 cb be ff ff eb [ 195.574073][T13809] RSP: 002b:00007ffc0fe32ec0 EFLAGS: 00010283 [ 195.574140][T13809] RAX: 0000000000000000 RBX: 00007fc67e717da0 RCX: 000000000002f9b8 [ 195.574157][T13809] RDX: 000000000000003c RSI: 00007ffc0fe32fe0 RDI: 0000000000000001 [ 195.574173][T13809] RBP: 00007fc67e717080 R08: 00007fc67e715fa0 R09: 7fffffffffffffff [ 195.574207][T13809] R10: 3fffffffffffffff R11: 0000000000000246 R12: 00007ffc0fe32fe0 [ 195.574220][T13809] R13: 00007fc67e71609c R14: 000000000002fb65 R15: 00007ffc0fe32fc0 [ 195.574238][T13809] [ 195.814127][T13809] memory: usage 280940kB, limit 307200kB, failcnt 238 [ 195.821124][T13809] memory+swap: usage 264336kB, limit 9007199254740988kB, failcnt 0 [ 195.829635][T13809] kmem: usage 245980kB, limit 9007199254740988kB, failcnt 0 [ 195.836988][T13809] Memory cgroup stats for /syz6: [ 195.900966][T13809] cache 0 [ 195.909084][T13809] rss 4096 [ 195.912297][T13809] shmem 0 [ 195.915387][T13809] mapped_file 0 [ 195.918860][T13809] dirty 0 [ 195.921812][T13809] writeback 12288 [ 195.925715][T13809] workingset_refault_anon 14 [ 195.930533][T13809] workingset_refault_file 0 [ 195.935332][T13809] swap 569344 [ 195.938643][T13809] swapcached 12288 [ 195.942373][T13809] pgpgin 190045 [ 195.945974][T13809] pgpgout 190038 [ 195.946430][T13851] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 195.949700][T13809] pgfault 102092 [ 195.949711][T13809] pgmajfault 9 [ 195.949720][T13809] inactive_anon 12288 [ 195.968512][T13809] active_anon 0 [ 195.972007][T13809] inactive_file 16384 [ 195.976216][T13809] active_file 0 [ 195.979773][T13809] unevictable 0 [ 195.983248][T13809] hierarchical_memory_limit 314572800 [ 195.988785][T13809] hierarchical_memsw_limit 9223372036854771712 [ 195.995490][T13809] total_cache 0 [ 195.999053][T13809] total_rss 4096 [ 196.002763][T13809] total_shmem 0 [ 196.006353][T13809] total_mapped_file 0 [ 196.010379][T13809] total_dirty 0 [ 196.014017][T13809] total_writeback 12288 [ 196.018181][T13809] total_workingset_refault_anon 14 [ 196.023388][T13809] total_workingset_refault_file 0 [ 196.029133][T13809] total_swap 569344 [ 196.032991][T13809] total_swapcached 12288 [ 196.037267][T13809] total_pgpgin 190045 [ 196.041362][T13809] total_pgpgout 190038 [ 196.045604][T13809] total_pgfault 102092 [ 196.049778][T13809] total_pgmajfault 9 [ 196.053797][T13809] total_inactive_anon 12288 [ 196.058399][T13809] total_active_anon 0 [ 196.062516][T13809] total_inactive_file 16384 [ 196.067242][T13809] total_active_file 0 [ 196.071327][T13809] total_unevictable 0 [ 196.075377][T13809] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.3426,pid=13809,uid=0 [ 196.090510][T13809] Memory cgroup out of memory: Killed process 13809 (syz.6.3426) total-vm:94132kB, anon-rss:1204kB, file-rss:22284kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 196.461104][T13893] loop1: detected capacity change from 0 to 512 [ 196.478006][T13893] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.495613][T13893] ext4 filesystem being mounted at /89/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 196.552924][ T29] audit: type=1400 audit(4147483803.235:4757): avc: denied { unmount } for pid=6725 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 196.577683][T12402] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.617521][T13900] loop6: detected capacity change from 0 to 128 [ 196.677938][ T29] audit: type=1400 audit(4147483803.345:4758): avc: denied { remount } for pid=13899 comm="syz.6.3457" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 196.703810][T13911] loop1: detected capacity change from 0 to 512 [ 196.709811][T13904] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 196.721689][T13904] geneve2: left promiscuous mode [ 196.726810][T13904] geneve2: left allmulticast mode [ 196.736424][ T29] audit: type=1400 audit(4147483803.425:4759): avc: denied { execute } for pid=13912 comm="syz.6.3461" name="cgroup" dev="tmpfs" ino=2402 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=lnk_file permissive=1 [ 196.766462][ T31] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 65535 - 0 [ 196.766967][T13911] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.786702][ T31] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 65535 - 0 [ 196.805927][T13916] batman_adv: batadv0: Removing interface: vlan0 [ 196.808299][T13911] ext4 filesystem being mounted at /90/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 196.840599][ T31] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 65535 - 0 [ 196.851510][ T31] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 65535 - 0 [ 196.892760][T13922] w: entered promiscuous mode [ 196.901892][T13922] 8021q: adding VLAN 0 to HW filter on device w [ 196.910967][T13923] tipc: Failed to obtain node identity [ 196.916507][T13923] tipc: Enabling of bearer rejected, failed to enable media [ 197.133080][T13930] loop0: detected capacity change from 0 to 1024 [ 197.166095][T13930] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 197.388142][T12402] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.466808][T13939] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.555287][T12402] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.598244][T12402] ================================================================== [ 197.606628][T12402] BUG: KCSAN: data-race in __lru_add_drain_all / folio_add_lru [ 197.614214][T12402] [ 197.616566][T12402] read-write to 0xffff888237d26468 of 1 bytes by task 13935 on cpu 1: [ 197.624925][T12402] folio_add_lru+0xa4/0x1e0 [ 197.629461][T12402] shmem_get_folio_gfp+0x7b0/0xd60 [ 197.634610][T12402] shmem_fallocate+0x628/0x920 [ 197.639493][T12402] vfs_fallocate+0x3b6/0x400 [ 197.644119][T12402] __x64_sys_fallocate+0x7a/0xd0 [ 197.649173][T12402] x64_sys_call+0x1cd4/0x3000 [ 197.654049][T12402] do_syscall_64+0xc0/0x2a0 [ 197.658576][T12402] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.664530][T12402] [ 197.666884][T12402] read to 0xffff888237d26468 of 1 bytes by task 12402 on cpu 0: [ 197.674875][T12402] __lru_add_drain_all+0x17e/0x450 [ 197.680199][T12402] lru_add_drain_all+0x10/0x20 [ 197.685082][T12402] invalidate_bdev+0x47/0x70 [ 197.689787][T12402] ext4_put_super+0x624/0x7d0 [ 197.694587][T12402] generic_shutdown_super+0xe6/0x210 [ 197.699903][T12402] kill_block_super+0x2a/0x70 [ 197.704613][T12402] ext4_kill_sb+0x42/0x80 [ 197.708997][T12402] deactivate_locked_super+0x75/0x1c0 [ 197.714419][T12402] deactivate_super+0x97/0xa0 [ 197.719230][T12402] cleanup_mnt+0x2bb/0x330 [ 197.723854][T12402] __cleanup_mnt+0x19/0x20 [ 197.728318][T12402] task_work_run+0x130/0x1a0 [ 197.733294][T12402] exit_to_user_mode_loop+0x1f7/0x6f0 [ 197.738788][T12402] do_syscall_64+0x1d3/0x2a0 [ 197.743419][T12402] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.749428][T12402] [ 197.751890][T12402] value changed: 0x05 -> 0x0e [ 197.756585][T12402] [ 197.758917][T12402] Reported by Kernel Concurrency Sanitizer on: [ 197.765266][T12402] CPU: 0 UID: 0 PID: 12402 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) [ 197.776148][T12402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 197.786746][T12402] ================================================================== [ 197.819907][T13945] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 197.870665][ T29] audit: type=1400 audit(4147483804.555:4760): avc: denied { getopt } for pid=13946 comm="syz.1.3472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 197.898631][T13947] __nla_validate_parse: 14 callbacks suppressed [ 197.898694][T13947] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3472'.