last executing test programs: 36.414101561s ago: executing program 1 (id=172): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0xffffff9a, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRESHEX=r0, @ANYRESHEX=r0], 0x5c}, 0x1, 0x0, 0x0, 0xc058}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x4c, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}, @action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x202}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000008) r1 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000500)="580000001400192340834b80043f679a10ff3d425f85b4141691c148c61bcdf1e4220000000001008048244a48fb6cfbe939ca28f23457e792945f64009400050028925aaa000000c600480000000000feff2c707f8f00ff", 0x58}], 0x1) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000000c0)='cdg', 0x3) shutdown(r3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="9a09000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000d40)={0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f0000000200)="3f8c", 0x2}, {0x0}], 0x2}, 0x20001) socket$netlink(0x10, 0x3, 0x14) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r6 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r8, 0x29, 0x3, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r8, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @local, 0x6}, 0x5) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f0000000040)=0x40, 0x4) connect$inet6(r8, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) sendmmsg$inet6(r7, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000900)="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", 0x241}], 0x1}}], 0x1, 0x4048008) fchdir(r7) 36.132886186s ago: executing program 1 (id=177): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x8000) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000004680)={&(0x7f0000003600)=ANY=[@ANYBLOB="9feb01001814000000140000000700000084000000010000060400000003000000000000000000003661300000000000000000"], &(0x7f0000003680)=""/4096, 0x33, 0x1000, 0x1}, 0x28) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRESDEC=r1, @ANYBLOB="c30c424700000000280012800a00010076786c616e000000180002"], 0x48}, 0x1, 0x0, 0x0, 0x400d1}, 0x800) r2 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x1, 0x100) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000180)) sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)={0x14, r4, 0x1, 0x2, 0x0, {0x7}}, 0x14}}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) cachestat(r2, &(0x7f0000000040)={0x8, 0x12decca3}, &(0x7f0000000080), 0x0) recvmmsg$unix(r0, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x26022, 0x0) 35.186213585s ago: executing program 1 (id=185): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="02000000040000000800400001"], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x7fffffff, r0}, 0x38) socket(0x200000000000011, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000150000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x57) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000780)={0x0, 0x4, 0x0, [0x806f, 0x0, 0x2d5, 0x2, 0x6], [0x6, 0x7, 0x1, 0x9, 0x8002, 0x7fffffff, 0x5, 0x2, 0x0, 0x802, 0xa, 0x200000100, 0x3, 0xfffffffffffffff4, 0x4a, 0x5, 0x100000100, 0xd, 0xdd, 0xd, 0x1, 0x2a9, 0x3, 0xc, 0x3, 0x401, 0x100000000, 0x2, 0xa51, 0x8, 0x401, 0x800000000000003, 0x7, 0xfffffffffffffffa, 0x81, 0x100, 0x5, 0x931, 0x101, 0x3, 0x8001, 0x8000000000000000, 0x7, 0x1, 0x8, 0x1, 0x4, 0x102, 0x1, 0x83, 0x538a, 0x9, 0xfffffffffffffffa, 0x4, 0x0, 0x4, 0x1, 0x9, 0x80008000, 0x8000000000000000, 0x4, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x5bc, 0x1, 0x7fffffff, 0x4, 0x8000, 0xc9, 0x7, 0x6, 0x9, 0x82c, 0x8000, 0xe000000000000, 0xe4, 0x11, 0x0, 0x8, 0x22, 0xffffffffffffffff, 0x7, 0xfffffffffffffffd, 0x8000000000000000, 0x2000000009, 0x8, 0x0, 0x6, 0x6, 0x7, 0x100000005, 0x4, 0x4, 0x7, 0x7, 0x7, 0x9, 0x1, 0x16d, 0x6, 0x68d, 0xffffffffffff43b0, 0x8, 0x50000000000000, 0xe, 0x0, 0x0, 0x100000003, 0x4, 0x7, 0x8, 0x3, 0x6, 0x5, 0x0, 0x3, 0x40, 0x7fffffff, 0x7, 0xf9, 0x7]}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80), 0x0, 0x40000c0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x58, &(0x7f0000000980)={[{@errors_remount}, {@grpquota}, {@nomblk_io_submit}, {@stripe={'stripe', 0x3d, 0x4ffff}}, {@norecovery}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x186b}}]}, 0xfe, 0x799, &(0x7f00000001c0)="$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") sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x42) r3 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r3, &(0x7f0000019140)='@', 0x1) sendfile(r3, r2, 0x0, 0x7fffffff) 33.55489948s ago: executing program 1 (id=199): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000000, &(0x7f0000000240), 0x21, 0x4a6, &(0x7f0000000a40)="$eJzs3cFPG9kZAPBvBgiEkEDaHNqqbdI0bVpFscFJUJRTemlVRZGqRj31kFBwEMLGCJs00BzI/1CpkXpq/4QeKvVQKae97233tpfsYaXsbrSrsNIevJqxIYRgYDcES/j3k55m3jzj7z2sec98gF8APetcRKxFxLGIuBcRo+3rSbvEzVbJHvfyxaPp9RePppNoNu98luTt2bXY8jWZE+3nHIqIP/4u4i/Jm3HrK6vzU5VKealdLzaqi8X6yurluerUbHm2vFAqTU5Mjl+/cq10YGM9W/3P89/O3frT///3k2fvr/36b1m3RtptW8dxkFpDH9iMk+mPiFvvIlgX9LXHc6zbHeE7SSPiexFxPr//R6MvfzUBgKOs2RyN5ujWOgBw1KV5DixJC+1cwEikaaHQyuGdieG0Uqs3Lt2vLS/MtHJlYzGQ3p+rlMfbucKxGEiy+kR+/qpe2la/EhGnI+Lvg8fzemG6Vpnp5hsfAOhhJ7at/18OttZ/AOCIG+p2BwCAQ2f9B4DeY/0HgN5j/QeA3mP9B4DeY/0HgN5j/QeAnvKH27ez0lxvf/71zIOV5fnag8sz5fp8obo8XZiuLS0WZmu12fwze6p7PV+lVlucuBrLD4uNcr1RrK+s3q3Wlhcad/PP9b5bHjiUUQEAuzl99umHSUSs3Tiel9iyl4O1Go62tNsdALqmr9sdALrGbl/Qu/yMD+ywRe9rOv6J0JOD7wtwOC7+UP4fepX8P/Qu+X/oXfL/0LuazcSe/wDQY+T4Ab//BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgG9vJC9JWmjvBT4SaVooRJyMiLEYSO7PVcrjEXEqIj4YHBjM6hPd7jQA8JbST5L2/l8XRy+MbG89lnw1mB8j4q//vPOPh1ONxtJEdv3zzeuNJ+3rpW70HwDYy8Y6vbGOb3j54tH0RjnM/jz/TWtz0Szueru0WvqjPz8OxUBEDH+RtOst2fuVvgOIv/Y4In6w0/iTPDcy1t75dHv8LPbJQ42fvhY/zdtax+x78f0D6Av0mqfZ/HNzp/svjXP5cef7fyifod7exvy3/sb8l27Of30d5r9z+41x9b3fd2x7HPGj/p3iJ5vxkw7xL+wz/kc//un5Tm3Nf0VcjJ3jb41VbFQXi/WV1ctz1anZ8mx5oVSanJgcv37lWqmY56iLG5nqN31649Kp3cY/3CH+0B7j/8U+x//vr+/9+We7xP/Vz3d+/c/sEj9bE3+5z/hTw//tuH13Fn+mw/j3ev0v7TP+s49XZ/b5UADgENRXVuenKpXykhMnTpxsnnR7ZgLetVc3fbd7AgAAAAAAAAAAAAAAdHIY/07U7TECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwdH0TAAD//yyP2UE=") r1 = socket(0x1e, 0x5, 0x0) listen(r1, 0x8) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x0, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x1b}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r3, 0x1, &(0x7f0000000280)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r2, 0x0}]) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0xc, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_bp={0x0, 0x1}, 0xc9c4, 0x6, 0x11000, 0x2, 0x2009484, 0x2001, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdffffffffffffffe, 0xffffffffffffffff, 0x9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000080)={0x0, 0x8000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8992, &(0x7f0000000040)={'veth1_to_bridge\x00', @random="1400"}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f0000000000)={0x9}) 33.244773707s ago: executing program 1 (id=204): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="c4000000190001050000000000000000fc000000000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="0000000000000000fcffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c", @ANYRES32=r1, @ANYBLOB="04"], 0xc4}}, 0x20004804) 33.081650615s ago: executing program 1 (id=209): bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x11, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000090000000400000003000093010000000700000001000000ffffff7f0100662629fa81b1eeb40000050000000e0000000000008000615f302e5f5f61"], &(0x7f0000000f40)=""/4087, 0x51, 0xff7, 0x9}, 0x28) r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x80000001, 0x200000) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x2adc0, 0x1c1, 0x6}, 0x18) r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x5, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0x0, 0x10001, 0xda, 0x5, 0xc31bc7e, 0x20005, 0xc, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r2, 0x5609, &(0x7f0000000040)={0x400, 0x8, 0x2000}) socket$nl_route(0x10, 0x3, 0x0) ioctl$VT_RESIZEX(r2, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0xfdfd, 0x0, 0x132, 0x401}) epoll_create1(0x0) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) ioctl$TCSETS2(r2, 0x402c542b, &(0x7f0000000080)={0xd, 0x7ff, 0x7, 0x6, 0x4b, "381b4e49cffceed97492d7675fd790bfa07e1a", 0x100, 0x8f9}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, 0x0, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040)) write$binfmt_register(r1, &(0x7f0000000100)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0xfffffffffffffff7, 0x3a, '\xe2\xbf\xd9\xafk\xd3~a3\xd0\x94', 0x3a, 'u', 0x3a, './file0', 0x3a, [0x46, 0x43]}, 0x35) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000050000"], 0x50) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x34, 0xd, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4001}, 0x4040000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000400)={0x58, 0x2, 0x6, 0x0, 0x0, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60002}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) ioctl$MON_IOCG_STATS(r0, 0x80089203, &(0x7f0000000040)) syz_emit_ethernet(0x6a, &(0x7f0000000480)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "4fec3fb9afc6b1613cab717e9475f3abbd67511395c1adff", "cfd7f941a224ed5a568868b9072b53fd44f272b4c1f31bfe47d268db10e122a5"}}}}}}, 0x0) 33.013834069s ago: executing program 32 (id=209): bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x11, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000090000000400000003000093010000000700000001000000ffffff7f0100662629fa81b1eeb40000050000000e0000000000008000615f302e5f5f61"], &(0x7f0000000f40)=""/4087, 0x51, 0xff7, 0x9}, 0x28) r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x80000001, 0x200000) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x2adc0, 0x1c1, 0x6}, 0x18) r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x5, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0x0, 0x10001, 0xda, 0x5, 0xc31bc7e, 0x20005, 0xc, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r2, 0x5609, &(0x7f0000000040)={0x400, 0x8, 0x2000}) socket$nl_route(0x10, 0x3, 0x0) ioctl$VT_RESIZEX(r2, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0xfdfd, 0x0, 0x132, 0x401}) epoll_create1(0x0) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) ioctl$TCSETS2(r2, 0x402c542b, &(0x7f0000000080)={0xd, 0x7ff, 0x7, 0x6, 0x4b, "381b4e49cffceed97492d7675fd790bfa07e1a", 0x100, 0x8f9}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, 0x0, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040)) write$binfmt_register(r1, &(0x7f0000000100)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0xfffffffffffffff7, 0x3a, '\xe2\xbf\xd9\xafk\xd3~a3\xd0\x94', 0x3a, 'u', 0x3a, './file0', 0x3a, [0x46, 0x43]}, 0x35) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000050000"], 0x50) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x34, 0xd, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4001}, 0x4040000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000400)={0x58, 0x2, 0x6, 0x0, 0x0, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60002}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) ioctl$MON_IOCG_STATS(r0, 0x80089203, &(0x7f0000000040)) syz_emit_ethernet(0x6a, &(0x7f0000000480)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "4fec3fb9afc6b1613cab717e9475f3abbd67511395c1adff", "cfd7f941a224ed5a568868b9072b53fd44f272b4c1f31bfe47d268db10e122a5"}}}}}}, 0x0) 16.041834203s ago: executing program 4 (id=350): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) timer_create(0x8, 0x0, &(0x7f0000000000)) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) (async) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYRES16=r0], 0x0, 0x54, 0x0, 0x400000}, 0x28) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) (async) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x1, 0x10, &(0x7f000005ffe4)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r8, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xfffffffffffffffa) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r9, @ANYRES16=r0], 0x48}}, 0x48000) (async) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=@delqdisc={0x84, 0x25, 0x200, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x8, 0xe}, {0x8, 0xf}, {0xffff, 0x8}}, [@TCA_STAB={0x4}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x9}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}, @TCA_STAB={0x4c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x40, 0x2, 0x5, 0x7394, 0x2, 0xffff, 0x0, 0x1}}, {0x6, 0x2, [0x40]}}, {{0x1c, 0x1, {0x6, 0xb9, 0x3, 0x100, 0x1, 0x8e25, 0x10, 0x1}}, {0x6, 0x2, [0x4]}}]}]}, 0x84}, 0x1, 0xfffc, 0x0, 0x40004}, 0x4000800) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003080)=@delchain={0x2c, 0x64, 0xf31, 0xfffffffb, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x0, 0xfff2}, {0xfff3, 0xffff}, {0xfff2, 0x1b}}, [@TCA_CHAIN={0x8, 0xb, 0x1000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x20008010) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r9, {}, {}, {0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x40000) (async) recvmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x5, 0x0, 0x0, 0x0, 0x40000}, 0x4}], 0xf905db2d12e721d0, 0x10100, 0x0) 15.977210277s ago: executing program 4 (id=352): sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000003640)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[], 0x20, 0x4c004}], 0x1, 0x8010) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x80840) syz_usb_disconnect(r0) syz_usb_connect(0x4, 0x24, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0x5501, &(0x7f0000000080)=0x1d) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x1, 0x3, 0x1, 0xfe, "0062ba92600000f73809630400"}) r2 = syz_open_pts(r1, 0x900) ioctl$XFS_IOC_GETPARENTS(0xffffffffffffffff, 0xc028583e, &(0x7f00000003c0)={{[0x3, 0x6, 0x8, 0x100]}, 0x0, 0x2, 0x0, 0x0, 0x0}) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100, 0x400020, 0x4, 0x0, 0x0, 0xffff, 0x4, 0x0, 0x0, 0x0, 0x800000000fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000005c0)) fsetxattr$security_selinux(r3, &(0x7f00000000c0), &(0x7f0000000100)='system_u:object_r:pam_console_exec_t:s0\x00', 0x28, 0x1) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) r4 = dup3(r2, r1, 0x80000) ioctl$OCFS2_IOC_UNRESVSP(r3, 0x40305829, &(0x7f0000000140)={0x1, 0x1, 0x3, 0x1, 0x7}) read(r4, 0x0, 0x0) read$watch_queue(r4, &(0x7f00000046c0)=""/4101, 0x1005) r5 = socket$netlink(0x10, 0x3, 0xc) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r4) sendmsg$ETHTOOL_MSG_WOL_SET(r5, &(0x7f0000000980)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10002000}, 0xc, &(0x7f0000000940)={&(0x7f0000000780)={0x1bc, r6, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_WOL_MODES={0xf0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7fffffff}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xdf, 0x5, "953a611e093988269d9eed5117b56505b6bbd89d99e1761cd161b84893491436438ccc2ee6c4f701075992b4b1cced94349581e2752f4db53e9bde5dbeb8524d178a9c943ca6e2128afa96dfc910ae2ee595bac6ec0905c725d6c7f2a1c893ff2519c03ac57015a852dc4c273a36028d9e4c8f9a804774974c1033d94fa37186e1e49e8f342f30ac9baac8377962d257201690405fb0e4cee326f3e86aa770e40cb73626b7a604b3fa14f3b818831d35ab111a5339217f428e92679157c3d01b08aa22fa38c2a78fe1c0677e9d9b8c10fd1c9c4aa29b071634e67f"}]}, @ETHTOOL_A_WOL_MODES={0x60, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x5c, 0x3, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x40}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x16, 0x2, '/dev/input/event#\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1e}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '&{\x00'}]}]}]}, @ETHTOOL_A_WOL_SOPASS={0x56, 0x3, "9af91ff566d8a289a2b8b881a517f9dd813ca4bb2cd98883e27dd0df6defdb66c61b1e584a3cd074f87f75992c5ac19471d462c2fd150be94c11b39fd79bc192a217fa582b50978ded5961e615f31c1cbdf8"}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x50040}, 0x8000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000480)={'batadv_slave_0\x00', 0x0}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000540)={{0x1, 0x1, 0x18, r2, {r1}}, './file0\x00'}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_ext={0x1c, 0x21, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80000001}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@jmp={0x5, 0x1, 0xc, 0x4, 0xe, 0xffffffffffffffc0, 0x10}, @alu={0x7, 0x1, 0x8, 0xb, 0x6, 0x19, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xb}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x3}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0xaf7}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000380)='GPL\x00', 0x100, 0x6d, &(0x7f0000000400)=""/109, 0x41000, 0x0, '\x00', r7, 0x0, r4, 0x8, &(0x7f00000004c0)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000500)={0x1, 0x4, 0x0, 0x163}, 0x10, 0x19eb7, r4, 0x0, &(0x7f0000000580)=[r4, r4, r4, r4, r4, r4, r8, r4]}, 0x94) 12.701663418s ago: executing program 4 (id=395): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xff, 0x7fff0000}]}) pivot_root(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x685ca62548e6c7, &(0x7f0000000440)=ANY=[@ANYRES8=0x0], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3d, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000004200050b2dbd7011fedbdf2402"], 0x14}}, 0x10) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, 0x0, 0x0) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, 0x0, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa08009b00000000000000002f90780010000000000000248065580000070010000800260086dd080088be08000000100000000100000000000000080022eb00000000200000000200"], 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x4000, &(0x7f0000000240)={[{@noinit_itable}]}, 0x1, 0x535, &(0x7f0000000cc0)="$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") ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) socket$inet_sctp(0x2, 0x5, 0x84) socket$kcm(0x10, 0x2, 0x0) 10.653746084s ago: executing program 4 (id=405): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x3}, 0x108010, 0x200, 0x0, 0x1, 0x0, 0x4, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) r1 = getpid() r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) r3 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r3, 0x84, 0x6d, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) setsockopt$inet_udp_encap(r3, 0x11, 0x64, &(0x7f0000000340)=0x1, 0x4) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYRES16=r0], 0x7c}, 0x1, 0x0, 0x0, 0x24000844}, 0x24044000) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c044}, 0x40000) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@ipv6_newroute={0x1c, 0x18, 0xffffffffffffffff, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0xfe, 0x0, 0xfd, 0x9}}, 0x1c}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001440)=ANY=[@ANYBLOB="5c000000003904bbc4ad53c4a038b96e2600"/29, @ANYRES32=0x0, @ANYBLOB="10000000001000003c0012800b000100697036746e6c00002c000280140003002001000000000000000000000000000214000200fc0200000000000000000000000000ff"], 0x5c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc045}, 0x20004) sendmmsg$inet(r5, &(0x7f0000002780)=[{{&(0x7f0000000000)={0x2, 0x4e23, @remote}, 0x10, 0x0}}], 0x1, 0xc0) r9 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GSUBSCRIP(r9, 0x89e0, 0x0) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r10, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000014c0)=@assoc_value={r11, 0xfffffff5}, &(0x7f0000000080)=0x8) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1018e58, &(0x7f00000005c0)={[{@noblock_validity}, {@noblock_validity}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@nodiscard}, {@stripe={'stripe', 0x3d, 0x4}}, {@jqfmt_vfsold}]}, 0x6, 0x623, &(0x7f0000000e00)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) 9.683418805s ago: executing program 4 (id=418): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) unshare(0x22020600) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e000000000000000400"], 0x48) pselect6(0x900, 0x0, 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 9.495743935s ago: executing program 4 (id=426): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x420040, 0x48) socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @rand_addr=' \x01\x00'}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x74, &(0x7f0000000280)={0x0, 0x2009, 0x20, 0xaf9}, &(0x7f00000000c0)=0x18) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000240)=""/137, 0x89}, {&(0x7f0000000300)=""/187, 0xbb}, {&(0x7f00000003c0)=""/160, 0xa0}, {&(0x7f0000000480)=""/195, 0xc3}, {&(0x7f0000000580)=""/211, 0xd3}, {&(0x7f0000000680)=""/63, 0x3f}], 0x6) write$cgroup_devices(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB='c *:* rwr'], 0xa) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$X25_QBITINCL(r4, 0x106, 0x1, &(0x7f0000000000)=0x1, 0x4) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x0, 0x0, &(0x7f0000000440)='syzkaller\x00', 0xabff, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)=ANY=[@ANYBLOB="fc010000190001000000000010000000e0000001000000000000000000000000200100000000000000000000000000014e22000bffff00000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000001000000000000000900000000000000800000000000000000000000000000000000000000000000000000000000000044010500fc000000000000000000000000000000000000006c00000000000000ac1e0101000000000000000000000000ff340000000200000000000000000000fdffffffac1414aa000000000000000000000000000000003c"], 0x1fc}}, 0x0) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="3c0200001900010000040000fedbdf25fe8000000000000000000000000000bbe000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000084010500ac1414aa000000000000000000000000000004d53200000000000000fe8000000000000000000000000000aa00000000010000000000000000000000feffffffffffffff000000000000000000000000000000003c"], 0x23c}}, 0x0) r7 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r7, &(0x7f0000000040)={0x2a, 0x1, 0xfffffffe}, 0xc) r8 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r8, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) readv(r7, &(0x7f0000000280)=[{&(0x7f0000000b00)=""/4096, 0x1000}], 0x1) ioctl$XFS_IOC_START_COMMIT(r7, 0x8916, 0x0) writev(r8, &(0x7f0000000340)=[{&(0x7f0000000080)="fb", 0x1}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_buf(r9, 0x1, 0x19, 0x0, &(0x7f0000000280)) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="d8000000180081054e81f783db4cb9040a1d080006007c09e8fc55a10a0015000600142603600e1208000f00fff00401a80008000800114004080000055c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe144ecc447c65e206d25b4084121d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300fc0d15", 0xd8}], 0x1}, 0x4000000) 9.495195805s ago: executing program 33 (id=426): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x420040, 0x48) socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @rand_addr=' \x01\x00'}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x74, &(0x7f0000000280)={0x0, 0x2009, 0x20, 0xaf9}, &(0x7f00000000c0)=0x18) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000240)=""/137, 0x89}, {&(0x7f0000000300)=""/187, 0xbb}, {&(0x7f00000003c0)=""/160, 0xa0}, {&(0x7f0000000480)=""/195, 0xc3}, {&(0x7f0000000580)=""/211, 0xd3}, {&(0x7f0000000680)=""/63, 0x3f}], 0x6) write$cgroup_devices(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB='c *:* rwr'], 0xa) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$X25_QBITINCL(r4, 0x106, 0x1, &(0x7f0000000000)=0x1, 0x4) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x0, 0x0, &(0x7f0000000440)='syzkaller\x00', 0xabff, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)=ANY=[@ANYBLOB="fc010000190001000000000010000000e0000001000000000000000000000000200100000000000000000000000000014e22000bffff00000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000001000000000000000900000000000000800000000000000000000000000000000000000000000000000000000000000044010500fc000000000000000000000000000000000000006c00000000000000ac1e0101000000000000000000000000ff340000000200000000000000000000fdffffffac1414aa000000000000000000000000000000003c"], 0x1fc}}, 0x0) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="3c0200001900010000040000fedbdf25fe8000000000000000000000000000bbe000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000084010500ac1414aa000000000000000000000000000004d53200000000000000fe8000000000000000000000000000aa00000000010000000000000000000000feffffffffffffff000000000000000000000000000000003c"], 0x23c}}, 0x0) r7 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r7, &(0x7f0000000040)={0x2a, 0x1, 0xfffffffe}, 0xc) r8 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r8, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) readv(r7, &(0x7f0000000280)=[{&(0x7f0000000b00)=""/4096, 0x1000}], 0x1) ioctl$XFS_IOC_START_COMMIT(r7, 0x8916, 0x0) writev(r8, &(0x7f0000000340)=[{&(0x7f0000000080)="fb", 0x1}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_buf(r9, 0x1, 0x19, 0x0, &(0x7f0000000280)) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="d8000000180081054e81f783db4cb9040a1d080006007c09e8fc55a10a0015000600142603600e1208000f00fff00401a80008000800114004080000055c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe144ecc447c65e206d25b4084121d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300fc0d15", 0xd8}], 0x1}, 0x4000000) 6.072393093s ago: executing program 0 (id=446): r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x2, 0xfffffffe, 0xf, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)={0x20, 0x5e, 0x1, 0x4, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64=0x8000000000000001}, @nested={0x4, 0x1}]}, 0x20}], 0x1}, 0x8000) bind$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x1, 0x0) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r4, &(0x7f0000000380)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r4, &(0x7f0000000840)={&(0x7f00000003c0), 0xc, &(0x7f0000000800)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000140)={0x4, 0x10, '\x00', 0x0, &(0x7f0000000100)=[0x0, 0x0]}) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000001040)={0x9, {"a2e3ad084fc752f91b2909094bf70e0dd038e7ff7fc6e5539b324c078b089b32313b6d1a0890e0878f0e1ac6e7049b076d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31300d326d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14aec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6057080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df0784c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b4bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f498707000000000000cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d618e462071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd9432086c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5e3236dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af44863c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f136174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7c85d94ffb07d9be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000510b00", 0x1000}}, 0x1006) socket$caif_seqpacket(0x25, 0x5, 0xa) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r9) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 6.071784643s ago: executing program 5 (id=447): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a90a000008000b000000000006000100070000000c000f000500000000000000"], 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x20) socket$pppl2tp(0x18, 0x1, 0x1) r4 = syz_io_uring_setup(0x48ba, &(0x7f0000000000)={0x0, 0xfffffffc, 0x10000, 0x0, 0x333}, &(0x7f0000000080), 0x0, &(0x7f0000000000)) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000140001000abd7800fedbdf25010000000800010040"], 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r8 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a0, 0xc000, 0x8, 0x23, 0x0, r4}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r8, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000000000000010000001c000180060001000200000008000300ac1414aa0800060006"], 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x4000050) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r9) bind$inet6(r9, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r10, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="0100000000000000000007000000140001800500020001000000080006001a"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8) 6.071491443s ago: executing program 2 (id=448): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r2, 0x0, 0x4000040) sendmsg$inet(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000180)="84", 0x1}], 0x1}, 0x8040) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x2004c840) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) 6.071251783s ago: executing program 3 (id=449): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x21c91c, &(0x7f0000000180)={[{@nodioread_nolock}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@resgid}, {@norecovery}, {@quota}, {@resuid}, {@sysvgroups}, {@resgid, 0x32}]}, 0x1, 0x512, &(0x7f0000001100)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000001000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40800, &(0x7f00000002c0)={[{@grpjquota}, {@nobarrier}, {@nogrpid}, {@user_xattr}], [{@func={'func', 0x3d, 'PATH_CHECK'}}]}, 0xf9, 0x299, &(0x7f0000000940)="$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") prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) recvmsg$unix(r3, 0x0, 0x40) close(0x3) socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f0000001740)=0x7ffffffd, 0xfffffffffffffe8b) write$binfmt_script(0xffffffffffffffff, 0x0, 0x6f4000) fallocate(r3, 0x21, 0x2000000000004, 0x1) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000140), 0x4}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) close(r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a310000000070000000060a010400000000000000000100000008000b400000000048000480440001800b000100657874686472000034000280080001400000000c080003400000000008000440000000220500020007000000080006400000000308000540000000000900010073797a300000000020000000030a010300000000000000000a00"], 0x248}}, 0x0) ioctl$XFS_IOC_FSGEOMETRY(r0, 0x8100587e, &(0x7f0000000380)) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000000100), 0x4) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r6, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) 5.010354119s ago: executing program 0 (id=450): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x30}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) listen(r0, 0x5) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000280)='./file0\x00') sendmmsg$inet_sctp(r0, &(0x7f0000008080)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)=ANY=[@ANYBLOB="1200000000000000840000000600"], 0x18, 0x40440c0}], 0x1, 0x80) syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x42003) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000080)={@dev={0xfe, 0x80, '\x00', 0x29}, @rand_addr=0x64010100, 0xc, 0x16}}) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x21}, 0x94) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x801a01, 0x0) ioctl$EVIOCGPROP(r3, 0x40047438, &(0x7f0000000180)=""/246) writev(r3, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) 5.009926239s ago: executing program 5 (id=451): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x80000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="4b935306112a374b66af44d97520a6b5b40dd232dba2fb823993e58c6d5a4243bc91c7cabcbf49f80925b357e5d7629d3144a8b50062c8f0a0d8be8f9d61b8d78815aac757d7fcd46352c11895ac0a1b6b067b998500214e9c385e5f7154af586540c3ebd53625aa13356850cf7ebd55c9c56e0a96a96d588985dec7d177b8afd7830cb52367f95faa85caa60bf415c83f90f8f3d5e75a7ead8938fe6a061a8befcf79fd5b4d4f833b727d092535aa5d524849df2d72211a1826fb7c5d2c0dd06670e07c8f2a395abec1b9e4e8c83ee498b7", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES16=r0], 0xf0}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x164}, 0x1, 0x0, 0x0, 0x4000819}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x1, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0x66b7, 0x0, 0xfffffffffffeffff, 0x7, 0x0, 0xfffffffffffffffd, 0x77, 0x0, 0x0, 0x0, 0x8, 0x248e, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81, 0x6, 0x5, 0x7ff, 0xf439}) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) bpf$PROG_LOAD(0x5, 0x0, 0x0) ptrace$getregset(0x4204, r5, 0x2, &(0x7f0000000740)={0x0}) r6 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x410, 0x2d8, 0x98, 0x2d8, 0x98, 0x138, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@multicast1, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0x100, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x28, 0x0, 0x0, 0x0, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private2, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x1fb, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETSW(r7, 0x5403, &(0x7f0000000080)={0x6, 0x5, 0x6, 0x0, 0x14, "1b10b9ad00"}) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) 5.009663319s ago: executing program 2 (id=452): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000a0006000000000000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000700008500000086000000bf0900000000000055090100048000009500000000000000cd0a0100000000002500000001000480180000000200048000000000f4ffffffae90f8ff00000000bf91000000000000b702000003000000850000002a000000b70000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x9, 0xff2, &(0x7f0000001cc0)=""/4082, 0x40f00, 0x61}, 0x94) 5.009002359s ago: executing program 3 (id=453): r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) msgrcv(0x0, 0x0, 0x0, 0x969edffe39095fd4, 0x3800) r1 = socket$inet6(0xa, 0x2, 0x3a) r2 = dup(0xffffffffffffffff) write$UHID_INPUT(r2, &(0x7f0000000000)={0xb, {"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", 0x1000}}, 0x1045) sendmmsg$inet6(r1, 0x0, 0x0, 0x40000000) r3 = msgget$private(0x0, 0x400) msgctl$MSG_STAT(r3, 0xb, &(0x7f0000000080)=""/94) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x16, &(0x7f0000000140)={[{@resuid}, {@noauto_da_alloc}, {@auto_da_alloc_val}, {@stripe={'stripe', 0x3d, 0x4}}, {@bsdgroups}, {@noblock_validity}, {@minixdf}, {@nouid32}, {@dioread_lock}, {@nolazytime}, {@oldalloc}, {@usrquota}]}, 0x0, 0x515, &(0x7f0000000c40)="$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") prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ddc000/0x1000)=nil, &(0x7f0000055000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ba3000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r4 = io_uring_setup(0x3893, &(0x7f0000000040)={0x0, 0x1000c89b, 0xc000, 0x800007, 0x41}) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4db, 0x20081, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x8000, 0x8}, 0x12499, 0x4000, 0x8010ffe, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000000)='/', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) r5 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETDEVINFO(r5, 0x80044944, &(0x7f0000000000)={0x2}) syncfs(0xffffffffffffffff) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001", @ANYRESHEX=r0], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a30000000000800034000000002", @ANYRESDEC=r6], 0x98}, 0x1, 0x0, 0x0, 0x40015}, 0x0) 3.937997684s ago: executing program 0 (id=454): perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0xfffffffe, 0xdd5}, 0x0, 0x0, 0xfffc, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x60442, 0x0) r1 = dup(r0) ioctl$PTP_PEROUT_REQUEST(r1, 0x40383d03, &(0x7f0000000140)={{0xe, 0x90bb}, {0x10, 0x9}, 0x3, 0x1}) openat(0xffffffffffffffff, 0x0, 0x421647, 0x160) r2 = socket(0x2b, 0x80801, 0x1) listen(r2, 0x8) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x33) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000001c0)=0x20000088) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2) syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000000)={[{@max_batch_time={'max_batch_time', 0x3d, 0x800000101}}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x7}}]}, 0x1, 0x605, &(0x7f0000001340)="$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") socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) socket$kcm(0x11, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0xffff, 0xb}, {0x3, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x1}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 3.937322264s ago: executing program 5 (id=455): r0 = syz_open_pts(0xffffffffffffffff, 0x2) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x5) r1 = socket$inet_tcp(0x2, 0x1, 0x0) pwritev(r1, 0x0, 0x0, 0xd, 0x1) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000240)={@private0, 0x0}, &(0x7f0000000280)=0x14) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000003c0)={'erspan0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x40, 0x8000, 0xf35, 0xfffffffd, {{0x2b, 0x4, 0x2, 0x3b, 0xac, 0x65, 0x0, 0x3, 0x29, 0x0, @broadcast, @private=0xa010101, {[@ssrr={0x89, 0x13, 0x75, [@broadcast, @empty, @empty, @local]}, @timestamp={0x44, 0x10, 0xea, 0x0, 0x5, [0x9, 0x4, 0x8]}, @timestamp_addr={0x44, 0x14, 0xe1, 0x1, 0x1, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@empty, 0xffffffff}]}, @ra={0x94, 0x4}, @end, @timestamp_prespec={0x44, 0x2c, 0x27, 0x3, 0x5, [{@rand_addr=0x64010101, 0x5308}, {@rand_addr=0x64010100, 0xfff}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x4}, {@multicast1, 0x2}, {@multicast1, 0x9}]}, @lsrr={0x83, 0x7, 0x17, [@multicast1]}, @rr={0x7, 0x1f, 0x31, [@broadcast, @multicast1, @remote, @private=0xa010100, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x23}, @multicast1]}, @generic={0x82, 0x9, "9e0c1498d9df31"}, @noop]}}}}}) sendmsg$ETHTOOL_MSG_FEATURES_GET(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000480)={0x128, r3, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x40}, 0x4000004) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000640)={0xb2, 0x1000, 0x7, 0x0, 0x12, "31a46439eb29140568831e4683178c66547674"}) syz_genetlink_get_family_id$ethtool(&(0x7f00000006c0), r2) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000700)={0x0, @broadcast, @multicast2}, &(0x7f0000000740)=0xc) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000780)={0x0, @private, @empty}, &(0x7f00000007c0)=0xc) sync() r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x50, 0x3, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}}, 0x3032333131b01380) sync() write$char_usb(0xffffffffffffffff, &(0x7f0000000b00)="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", 0x1000) io_uring_setup(0x1504, &(0x7f0000001b00)={0x0, 0x4521, 0x8, 0x1, 0x17d}) getsockopt$IP_VS_SO_GET_INFO(r7, 0x0, 0x481, &(0x7f0000001b80), &(0x7f0000001bc0)=0xc) socket$kcm(0x29, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000001c00)={0x0, 0x7ff}, 0x8) 3.936808504s ago: executing program 2 (id=456): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) recvfrom$inet6(r1, &(0x7f0000000000)=""/42, 0x2a, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f00000001c0)="48250000db07e8", 0x7}], 0x1) r2 = socket$inet6(0x10, 0xa, 0x0) sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'rose0\x00', 0x1012}) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x100000000000009, 0x3c033, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x8312, 0x32, 0x7, 0x6, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x400000000, 0xffffffffffffffff, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) r5 = socket(0x18, 0x0, 0x1) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000080)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0xffffffff, 0x0, 0x0, 0x40004, 0x2, 0x1}}) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0xff, 0x0, 0x0, 0x0, 0x3}}) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x100}) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/29], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000100)={0x2, [0x0, 0x0]}, &(0x7f0000000140)=0xc) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r6) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000006f40), 0x2002, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r7) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0xa82, 0x0) write$cgroup_int(r9, &(0x7f0000000000)=0x922, 0x12) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x34, 0x68, 0x309, 0x0, 0xfffffffc, {0xa, 0x0, 0x0, 0x0, 0x4}, [@NHA_ID={0x8, 0x1, 0x2}, @NHA_FDB={0x4}, @NHA_ENCAP={0x10, 0x8, 0x0, 0x1, @SEG6_LOCAL_SRH={0xc, 0x2, {0x1, 0x0, 0x4, 0x0, 0xc, 0x80, 0x9}}}]}, 0x34}}, 0x4040) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000000c0)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r8, {}, {}, {0x6}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x40d5}, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000740)={'pim6reg1\x00', 0x400}) close(0x3) socket$nl_netfilter(0x10, 0x3, 0xc) 3.936159574s ago: executing program 3 (id=457): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 2.728347227s ago: executing program 0 (id=458): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x30}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) listen(r0, 0x5) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000280)='./file0\x00') sendmmsg$inet_sctp(r0, &(0x7f0000008080)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)=ANY=[@ANYBLOB="1200000000000000840000000600"], 0x18, 0x40440c0}], 0x1, 0x80) syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x42003) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000080)={@dev={0xfe, 0x80, '\x00', 0x29}, @rand_addr=0x64010100, 0xc, 0x16}}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x21}, 0x94) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x801a01, 0x0) ioctl$EVIOCGPROP(r3, 0x40047438, &(0x7f0000000180)=""/246) writev(r3, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) 2.727598877s ago: executing program 5 (id=459): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2022, 0x36, 0x100, 0x5, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) timer_create(0x0, &(0x7f0000000100)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d1, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r3 = inotify_init() r4 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) inotify_add_watch(r3, &(0x7f0000000200)='.\x00', 0x4000423) bind$unix(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) r6 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)=0x0) timer_settime(r7, 0x0, 0x0, 0x0) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x115) getdents64(r8, &(0x7f0000000f80)=""/4096, 0x1000) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="2c0000003f00070dfeffffff00000000017c0000040077000c000380"], 0x2c}, 0x1, 0x0, 0x0, 0x404c001}, 0x22008014) 2.727150637s ago: executing program 2 (id=460): r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x2, 0xfffffffe, 0xf, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)={0x20, 0x5e, 0x1, 0x4, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64=0x8000000000000001}, @nested={0x4, 0x1}]}, 0x20}], 0x1}, 0x8000) bind$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x1, 0x0) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r4, &(0x7f0000000380)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r4, &(0x7f0000000840)={&(0x7f00000003c0), 0xc, &(0x7f0000000800)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000140)={0x4, 0x10, '\x00', 0x0, &(0x7f0000000100)=[0x0, 0x0]}) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000001040)={0x9, {"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", 0x1000}}, 0x1006) socket$caif_seqpacket(0x25, 0x5, 0xa) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r9) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 2.726681708s ago: executing program 3 (id=461): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a90a000008000b000000000006000100070000000c000f000500000000000000"], 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x20) socket$pppl2tp(0x18, 0x1, 0x1) r4 = syz_io_uring_setup(0x48ba, &(0x7f0000000000)={0x0, 0xfffffffc, 0x10000, 0x0, 0x333}, &(0x7f0000000080), 0x0, &(0x7f0000000000)) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000140001000abd7800fedbdf25010000000800010040"], 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r8 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a0, 0xc000, 0x8, 0x23, 0x0, r4}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r8, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000000000000010000001c000180060001000200000008000300ac1414aa0800060006"], 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x4000050) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r9) bind$inet6(r9, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r10, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="0100000000000000000007000000140001800500020001000000080006001a"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8) 1.413929746s ago: executing program 0 (id=462): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r2, 0x0, 0x4000040) sendmsg$inet(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000180)="84", 0x1}], 0x1}, 0x8040) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x2004c840) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.412958096s ago: executing program 5 (id=463): unshare(0x22060600) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x2, 0x0, 0x80000001, 0xd100, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc293, 0x2, @perf_bp={0x0, 0xe}, 0x4, 0x1, 0x3, 0x0, 0x2, 0x80000001, 0x5cc7, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) getsockopt$inet6_mreq(r1, 0x29, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) fchdir(r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000002c0)={'#! ', './file0', [{0x20, 'batadv\x00'}, {0x20, '-[,,[%]\xcd,+(%&&'}, {0x20, 'bridge0\x00'}, {0x20, 'cgroup.controllers\x00'}, {0x20, '\x00'}]}, 0x41) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000e40)=ANY=[@ANYBLOB="4400000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 1.412484406s ago: executing program 2 (id=464): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000dc0)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x600, 0x4000000}, 0x28) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x4, 0x8, 0x0, 0x0, 0x4, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x5, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x3c}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x10, 0x75}, [@ldst={0x4}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r4, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@rights={{0x14, 0x1, 0x1, [r3]}}], 0x18, 0x40008c1}, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r5 = socket$packet(0x11, 0x3, 0x300) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000180)=r6, 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x14, 0x2, 0x8, 0x801, 0x0, 0x0, {0x1, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x60800) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200e3}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) connect$netlink(r1, &(0x7f0000000100)=@kern={0x10, 0x0, 0x0, 0x2}, 0xc) close(0xffffffffffffffff) syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0) 1.365319118s ago: executing program 3 (id=465): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) sendmmsg(r0, &(0x7f0000003dc0)=[{{&(0x7f0000000180)=@can={0x1d, 0x0, 0xf0}, 0x80, &(0x7f0000001600)=[{0x0}, {&(0x7f0000000480)="de672c", 0x3}], 0x2}}], 0x1, 0x48010) 10.073409ms ago: executing program 0 (id=466): syz_emit_ethernet(0x4f, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6c2d01000019840100000000000000000002000000010102fe8000000000000000000000000000aaa5ba94e385673ccfd3fe184ab0643975bcc85fbf438632261b"], 0x0) (async) syz_emit_ethernet(0x4f, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6c2d01000019840100000000000000000002000000010102fe8000000000000000000000000000aaa5ba94e385673ccfd3fe184ab0643975bcc85fbf438632261b"], 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) syz_clone(0x9080400, &(0x7f0000000300)="a04ed7b74680ed49e4f38685e68b500096fdad9792ac393efceaf20da33fdc131e56c72261740f00c7f27f6bea385a900823ea7c80a887de7dac36d9f25c45ca6fe058df1c3ca59229d1df814de1433af7cde784c1fd0ce387ceb0971148b96ccc9c4dfe015e7f64f37c147cb4cdaa3a1326ab360e0b2c6fdca3fb4214abb8b4c831e1e7925bfe07cb6a14fc001d8fae1c9dccf83f3cdf64355b2581b2416b503647d81a1cde865f540a9f0e6ee2ca9c9beac2beeefcd71a625e0ecd70a679c985a6d1716c4db61f1a7cb7b5bd4a8a44d75d4939a677c98f4d3473ff7cdfc51de3c9466b051ca6d0471e0ca8e568095f867dd7a518", 0xf5, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480)="2b2456ca87b2632912dbb7fe569a2042b775e71340d5ea37c16a391f202d191ebed3092451c91c940015ca796d62b29c8fb37e337892699ea9ec5dc83cb462aadb9486f20af6b2fb31d46a2e9290c39999cd0806d3dbc44f688f97d49ac577ae3089faa4b5d8b738e0d50aff22fa7e757de5354af0fcfea61f72647bcadba55f1a626e2b05b6fb847ebe1f46b8bf6b5272706f3f73f17f23444b65d2b834c20e5ee1e823bf332b608284aa341080aa043ee219d01848777bccf5586a370e5c62c21fb806f02577c2699fe71ce9f8d7a81c949b59098ee3fe908030") (async) r1 = syz_clone(0x9080400, &(0x7f0000000300)="a04ed7b74680ed49e4f38685e68b500096fdad9792ac393efceaf20da33fdc131e56c72261740f00c7f27f6bea385a900823ea7c80a887de7dac36d9f25c45ca6fe058df1c3ca59229d1df814de1433af7cde784c1fd0ce387ceb0971148b96ccc9c4dfe015e7f64f37c147cb4cdaa3a1326ab360e0b2c6fdca3fb4214abb8b4c831e1e7925bfe07cb6a14fc001d8fae1c9dccf83f3cdf64355b2581b2416b503647d81a1cde865f540a9f0e6ee2ca9c9beac2beeefcd71a625e0ecd70a679c985a6d1716c4db61f1a7cb7b5bd4a8a44d75d4939a677c98f4d3473ff7cdfc51de3c9466b051ca6d0471e0ca8e568095f867dd7a518", 0xf5, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480)="2b2456ca87b2632912dbb7fe569a2042b775e71340d5ea37c16a391f202d191ebed3092451c91c940015ca796d62b29c8fb37e337892699ea9ec5dc83cb462aadb9486f20af6b2fb31d46a2e9290c39999cd0806d3dbc44f688f97d49ac577ae3089faa4b5d8b738e0d50aff22fa7e757de5354af0fcfea61f72647bcadba55f1a626e2b05b6fb847ebe1f46b8bf6b5272706f3f73f17f23444b65d2b834c20e5ee1e823bf332b608284aa341080aa043ee219d01848777bccf5586a370e5c62c21fb806f02577c2699fe71ce9f8d7a81c949b59098ee3fe908030") bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000007000000050000000100000fce4e0000730d000001000000cf4e000000005f612e2e"], &(0x7f0000005bc0)=""/239, 0x37, 0xef, 0x9, 0xfff}, 0x28) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x101c42, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) (async) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) write$binfmt_aout(r2, &(0x7f00000001c0)=ANY=[@ANYRES64=r1, @ANYRES32=r1, @ANYRESOCT=r0, @ANYRES32=0x0, @ANYRES8=0x0, @ANYRESDEC=r1, @ANYRES64=r4, @ANYRES32=0x0], 0xfffffee2) readv(r3, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/168, 0xa8}], 0x1) splice(r2, 0x0, r4, 0x0, 0x807, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f0000000700)={{0x200, 0xdf}, 0x100, './file0\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x0, &(0x7f0000000000)={@rand_addr, 0x0}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2000000010000d042cbd30000000000000000000", @ANYRES32=r5, @ANYBLOB="ca5ec7f27b41825c"], 0x20}, 0x1, 0x0, 0x0, 0x400c}, 0x0) 9.268729ms ago: executing program 5 (id=467): perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0xfffffffe, 0xdd5}, 0x0, 0x0, 0xfffc, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x60442, 0x0) r1 = dup(r0) ioctl$PTP_PEROUT_REQUEST(r1, 0x40383d03, &(0x7f0000000140)={{0xe, 0x90bb}, {0x10, 0x9}, 0x3, 0x1}) openat(0xffffffffffffffff, 0x0, 0x421647, 0x160) r2 = socket(0x2b, 0x80801, 0x1) listen(r2, 0x8) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x33) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000001c0)=0x20000088) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2) syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000000)={[{@max_batch_time={'max_batch_time', 0x3d, 0x800000101}}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x7}}]}, 0x1, 0x605, &(0x7f0000001340)="$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") socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) socket$kcm(0x11, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0xffff, 0xb}, {0x3, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x1}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 599.17µs ago: executing program 2 (id=468): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000540)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x68, r2, 0x400, 0x70bd2f, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0x80000001, @link='broadcast-link\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x11}, 0x40000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNDEL(r3, 0x400448c9, &(0x7f00000001c0)={@any, 0x40}) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\b\x00\b', 0x18, 0x3a, 0x0, @loopback, @loopback, {[], @mld={0x83, 0x0, 0x0, 0x9, 0xc036, @remote}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0xfffffffffffffd2e, &(0x7f0000000000)='e', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6(0xa, 0x3, 0x7) sendmmsg$inet6(r4, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00'], 0x28}}], 0x1, 0x0) recvfrom$inet6(r4, 0x0, 0x0, 0x10000, 0x0, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendto$inet(r5, &(0x7f0000000200)="ab08713cf700850ff7cfe5cf0ed067e21d31a5114e5c3711faf1088818871e805d2153189f2d8e73c49921ba1f8df71308115169a650901747f852a0e1131a19c3150cbea9ae1b7ac3a1f842b389f7d759635b0da5a7f29d5061fc40e50a9662319ac941246a5090", 0x68, 0x8000, &(0x7f00000000c0)={0x2, 0x4e25, @empty}, 0x10) socket(0x2, 0x80805, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @rand_addr=0x64010102}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000180)={r7, 0x6}, &(0x7f0000000580)=0x8) sendmsg$inet_sctp(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)='\x00', 0x1}], 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="2000000000000000840000000200000004004d000000000000", @ANYRES32=0x0, @ANYBLOB="000000004ebc5bdfcd9105c4"], 0x20, 0x4048800}, 0x0) 0s ago: executing program 3 (id=469): r0 = syz_open_pts(0xffffffffffffffff, 0x2) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x5) r1 = socket$inet_tcp(0x2, 0x1, 0x0) pwritev(r1, 0x0, 0x0, 0xd, 0x1) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000240)={@private0, 0x0}, &(0x7f0000000280)=0x14) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000003c0)={'erspan0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x40, 0x8000, 0xf35, 0xfffffffd, {{0x2b, 0x4, 0x2, 0x3b, 0xac, 0x65, 0x0, 0x3, 0x29, 0x0, @broadcast, @private=0xa010101, {[@ssrr={0x89, 0x13, 0x75, [@broadcast, @empty, @empty, @local]}, @timestamp={0x44, 0x10, 0xea, 0x0, 0x5, [0x9, 0x4, 0x8]}, @timestamp_addr={0x44, 0x14, 0xe1, 0x1, 0x1, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@empty, 0xffffffff}]}, @ra={0x94, 0x4}, @end, @timestamp_prespec={0x44, 0x2c, 0x27, 0x3, 0x5, [{@rand_addr=0x64010101, 0x5308}, {@rand_addr=0x64010100, 0xfff}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x4}, {@multicast1, 0x2}, {@multicast1, 0x9}]}, @lsrr={0x83, 0x7, 0x17, [@multicast1]}, @rr={0x7, 0x1f, 0x31, [@broadcast, @multicast1, @remote, @private=0xa010100, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x23}, @multicast1]}, @generic={0x82, 0x9, "9e0c1498d9df31"}, @noop]}}}}}) sendmsg$ETHTOOL_MSG_FEATURES_GET(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000480)={0x128, r3, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x40}, 0x4000004) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000640)={0xb2, 0x1000, 0x7, 0x0, 0x12, "31a46439eb29140568831e4683178c66547674"}) syz_genetlink_get_family_id$ethtool(&(0x7f00000006c0), r2) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000700)={0x0, @broadcast, @multicast2}, &(0x7f0000000740)=0xc) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000780)={0x0, @private, @empty}, &(0x7f00000007c0)=0xc) sync() r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x50, 0x3, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}}, 0x3032333131b01380) sync() write$char_usb(0xffffffffffffffff, &(0x7f0000000b00)="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", 0x1000) io_uring_setup(0x1504, &(0x7f0000001b00)={0x0, 0x4521, 0x8, 0x1, 0x17d}) getsockopt$IP_VS_SO_GET_INFO(r7, 0x0, 0x481, &(0x7f0000001b80), &(0x7f0000001bc0)=0xc) socket$kcm(0x29, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000001c00)={0x0, 0x7ff}, 0x8) kernel console output (not intermixed with test programs): idge0: entered promiscuous mode [ 40.902942][ T3554] loop4: detected capacity change from 0 to 512 [ 40.918510][ T3554] ======================================================= [ 40.918510][ T3554] WARNING: The mand mount option has been deprecated and [ 40.918510][ T3554] and is ignored by this kernel. Remove the mand [ 40.918510][ T3554] option from the mount to silence this warning. [ 40.918510][ T3554] ======================================================= [ 40.929531][ T3547] bridge0: port 3(macsec1) entered blocking state [ 40.984671][ T3547] bridge0: port 3(macsec1) entered disabled state [ 40.997556][ T3547] macsec1: entered allmulticast mode [ 41.005572][ T3547] bridge0: entered allmulticast mode [ 41.023012][ T3554] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 41.036611][ T3554] EXT4-fs error (device loop4): ext4_get_branch:178: inode #11: block 4294967295: comm syz.4.13: invalid block [ 41.048575][ T3554] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 41.048802][ T3554] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.13: invalid indirect mapped block 4294967295 (level 1) [ 41.051743][ T3547] macsec1: left allmulticast mode [ 41.058031][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 41.058049][ C0] EXT4-fs (loop4): initial error at time 1777009009: ext4_get_branch:178: inode 11: block 4294967295 [ 41.058096][ C0] EXT4-fs (loop4): last error at time 1777009009: ext4_get_branch:178: inode 11: block 4294967295 [ 41.058201][ T3554] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 41.058337][ T3554] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.13: invalid indirect mapped block 4294967295 (level 1) [ 41.058373][ T3554] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 41.058674][ T3554] EXT4-fs (loop4): 2 truncates cleaned up [ 41.059212][ T3554] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.059556][ T28] kauditd_printk_skb: 33 callbacks suppressed [ 41.059567][ T28] audit: type=1400 audit(1777009009.474:151): avc: denied { mount } for pid=3539 comm="syz.4.13" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 41.075790][ T28] audit: type=1400 audit(1777009009.484:152): avc: denied { add_name } for pid=3539 comm="syz.4.13" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 41.084819][ T28] audit: type=1400 audit(1777009009.484:153): avc: denied { create } for pid=3539 comm="syz.4.13" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 41.143481][ T3547] bridge0: left allmulticast mode [ 41.149074][ T28] audit: type=1400 audit(1777009009.514:154): avc: denied { write open } for pid=3539 comm="syz.4.13" path="/6/file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 41.149209][ T28] audit: type=1400 audit(1777009009.534:155): avc: denied { ioctl } for pid=3539 comm="syz.4.13" path="/6/file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=17 ioctlcmd=0x6618 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 41.181567][ T3540] Zero length message leads to an empty skb [ 41.387147][ T3547] bridge0: left promiscuous mode [ 41.420612][ T3332] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.443352][ T3542] batadv_slave_1: entered promiscuous mode [ 41.452791][ T3555] bridge0: entered promiscuous mode [ 41.461906][ T3555] bridge0: port 3(macsec1) entered blocking state [ 41.468719][ T3555] bridge0: port 3(macsec1) entered disabled state [ 41.475453][ T3555] macsec1: entered allmulticast mode [ 41.481010][ T28] audit: type=1400 audit(1777009009.904:156): avc: denied { map } for pid=3564 comm="syz.4.19" path="socket:[4975]" dev="sockfs" ino=4975 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 41.504040][ T3555] bridge0: entered allmulticast mode [ 41.511859][ T28] audit: type=1400 audit(1777009009.904:157): avc: denied { read accept } for pid=3564 comm="syz.4.19" path="socket:[4975]" dev="sockfs" ino=4975 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 41.536087][ T3555] macsec1: left allmulticast mode [ 41.541371][ T3555] bridge0: left allmulticast mode [ 41.546867][ T3555] bridge0: left promiscuous mode [ 41.569332][ T3558] batadv_slave_1: left promiscuous mode [ 41.586033][ T3547] syz.2.16 (3547) used greatest stack depth: 9280 bytes left [ 41.607512][ T28] audit: type=1400 audit(1777009010.014:158): avc: denied { write } for pid=3567 comm="syz.2.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 41.667909][ T3570] loop4: detected capacity change from 0 to 512 [ 41.692592][ T3570] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.705284][ T28] audit: type=1400 audit(1777009010.104:159): avc: denied { connect } for pid=3573 comm="syz.1.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 41.724997][ T3570] ext4 filesystem being mounted at /8/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 41.735229][ T28] audit: type=1400 audit(1777009010.104:160): avc: denied { write } for pid=3573 comm="syz.1.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 41.763324][ T3570] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #2: comm syz.4.22: corrupted inode contents [ 41.779423][ T3570] EXT4-fs error (device loop4): ext4_dirty_inode:6587: inode #2: comm syz.4.22: mark_inode_dirty error [ 41.791035][ T3570] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #2: comm syz.4.22: corrupted inode contents [ 41.802928][ T3570] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #2: comm syz.4.22: mark_inode_dirty error [ 41.916165][ T3585] tipc: Enabling of bearer rejected, failed to enable media [ 41.930258][ T3332] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.069844][ T3595] netlink: 'syz.4.26': attribute type 3 has an invalid length. [ 42.090049][ T3595] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 42.226776][ T3597] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.234261][ T3597] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.297220][ T3597] bridge_slave_0: left allmulticast mode [ 42.319517][ T3597] bridge_slave_0: left promiscuous mode [ 42.330180][ T3597] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.346456][ T3597] bridge_slave_1: left allmulticast mode [ 42.352673][ T3597] bridge_slave_1: left promiscuous mode [ 42.359015][ T3597] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.383175][ T3597] bond0: (slave bond_slave_0): Releasing backup interface [ 42.400426][ T3597] bond0: (slave bond_slave_1): Releasing backup interface [ 42.420462][ T3597] team0: Port device team_slave_0 removed [ 42.433984][ T3597] team0: Port device team_slave_1 removed [ 42.443772][ T3597] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 42.454304][ T3597] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 42.470003][ T3597] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 42.480790][ T3597] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 42.502926][ T3597] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 42.526620][ T3601] bridge0: entered promiscuous mode [ 42.547682][ T3601] bridge0: port 3(macsec1) entered blocking state [ 42.559194][ T3601] bridge0: port 3(macsec1) entered disabled state [ 42.578927][ T3601] macsec1: entered allmulticast mode [ 42.595452][ T3601] bridge0: entered allmulticast mode [ 42.602035][ T3601] macsec1: left allmulticast mode [ 42.611381][ T3601] bridge0: left allmulticast mode [ 42.619919][ T3601] bridge0: left promiscuous mode [ 42.698564][ T3611] bridge0: port 1(macsec1) entered blocking state [ 42.712079][ T3611] bridge0: port 1(macsec1) entered disabled state [ 42.719937][ T3611] macsec1: entered allmulticast mode [ 42.725844][ T3611] bridge0: entered allmulticast mode [ 42.735676][ T3611] macsec1: left allmulticast mode [ 42.741318][ T3611] bridge0: left allmulticast mode [ 42.809078][ T3619] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.816328][ T3619] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.861336][ T3619] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 42.868903][ T3623] loop0: detected capacity change from 0 to 128 [ 42.874426][ T3619] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 42.891192][ T3616] netlink: 8 bytes leftover after parsing attributes in process `syz.4.33'. [ 42.913879][ T3616] netlink: 4 bytes leftover after parsing attributes in process `syz.4.33'. [ 42.933892][ T3615] syzkaller0: entered promiscuous mode [ 42.940178][ T3615] syzkaller0: entered allmulticast mode [ 42.947530][ T3612] veth0_to_team: entered promiscuous mode [ 42.960913][ T3616] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 42.970820][ T3616] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 42.978508][ T3616] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 42.986054][ T3616] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 43.008971][ T2183] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.018466][ T30] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.051032][ T30] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.063145][ T30] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.076780][ T3626] process 'syz.1.39' launched '/dev/fd/8' with NULL argv: empty string added [ 43.260180][ T3635] netlink: 12 bytes leftover after parsing attributes in process `syz.3.43'. [ 43.447960][ T3633] loop0: detected capacity change from 0 to 1024 [ 43.465312][ T3633] ext2: Bad value for 'max_batch_time' [ 43.492226][ T3642] netlink: 8 bytes leftover after parsing attributes in process `syz.3.46'. [ 43.532586][ T3644] loop2: detected capacity change from 0 to 512 [ 43.553025][ T3626] loop1: detected capacity change from 0 to 4096 [ 43.593639][ T3644] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.618578][ T3644] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.624362][ T3649] syzkaller0: entered promiscuous mode [ 43.639927][ T3649] syzkaller0: entered allmulticast mode [ 43.683934][ T3328] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.721371][ T3658] loop2: detected capacity change from 0 to 128 [ 43.742003][ T3626] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.757729][ T3658] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 43.779834][ T3658] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 43.821894][ T3658] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 43.833063][ T3658] FAT-fs (loop2): Filesystem has been set read-only [ 43.854427][ T3655] bridge_slave_0: left allmulticast mode [ 43.864254][ T3655] bridge_slave_0: left promiscuous mode [ 43.870127][ T3426] IPVS: starting estimator thread 0... [ 43.876279][ T3655] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.897375][ T3655] bridge_slave_1: left allmulticast mode [ 43.906399][ T3655] bridge_slave_1: left promiscuous mode [ 43.913363][ T3655] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.932423][ T3331] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.942756][ T3655] bond0: (slave bond_slave_0): Releasing backup interface [ 43.957956][ T3660] IPVS: using max 2208 ests per chain, 110400 per kthread [ 43.979182][ T3655] bond0: (slave bond_slave_1): Releasing backup interface [ 43.990480][ T3655] team0: Port device team_slave_0 removed [ 44.001381][ T3655] team0: Port device team_slave_1 removed [ 44.021579][ T3655] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 44.038585][ T3662] tipc: Enabling of bearer rejected, failed to enable media [ 44.211241][ T3677] bridge_slave_0: left allmulticast mode [ 44.217180][ T3677] bridge_slave_0: left promiscuous mode [ 44.224305][ T3677] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.234341][ T3677] bridge_slave_1: left allmulticast mode [ 44.241383][ T3677] bridge_slave_1: left promiscuous mode [ 44.248897][ T3677] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.259942][ T3677] bond0: (slave bond_slave_0): Releasing backup interface [ 44.273646][ T3677] bond0: (slave bond_slave_1): Releasing backup interface [ 44.306035][ T3677] team0: Port device team_slave_0 removed [ 44.315571][ T3677] team0: Port device team_slave_1 removed [ 44.333490][ T3677] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 44.343320][ T3677] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 44.354322][ T3677] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 44.729120][ T3689] loop4: detected capacity change from 0 to 512 [ 44.860482][ T3689] EXT4-fs warning (device loop4): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 44.877635][ T3689] EXT4-fs (loop4): mount failed [ 45.092269][ T3696] netlink: 132 bytes leftover after parsing attributes in process `syz.3.60'. [ 45.386306][ T3706] loop2: detected capacity change from 0 to 512 [ 45.443558][ T3706] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 45.628636][ T3689] loop4: detected capacity change from 0 to 512 [ 45.752484][ T3706] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 45.992884][ T3706] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.64: bad orphan inode 4 [ 46.034689][ T3706] loop2: lost filesystem error report for type 5 error -117 [ 46.036183][ T3706] EXT4-fs (loop2): 1 orphan inode deleted [ 46.043590][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 46.043612][ C1] EXT4-fs (loop2): initial error at time 1777009014: ext4_orphan_get:1423 [ 46.043641][ C1] EXT4-fs (loop2): last error at time 1777009014: ext4_orphan_get:1423 [ 46.073622][ T3706] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.938068][ T3709] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 47.338976][ T3716] loop0: detected capacity change from 0 to 2048 [ 47.365089][ T28] kauditd_printk_skb: 62 callbacks suppressed [ 47.365119][ T28] audit: type=1400 audit(1777009015.774:223): avc: denied { unmount } for pid=3331 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 47.370109][ T3716] EXT4-fs: Ignoring removed nomblk_io_submit option [ 47.414914][ T3328] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.427185][ T3716] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.444664][ T28] audit: type=1400 audit(1777009015.854:224): avc: denied { read } for pid=3715 comm="syz.0.66" path="/15/file1/bus" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 47.486729][ T3741] loop2: detected capacity change from 0 to 128 [ 47.497720][ T3716] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.66: bg 0: block 2: invalid block bitmap [ 47.514797][ T3716] EXT4-fs (loop0): Remounting filesystem read-only [ 47.524395][ T3741] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 47.556928][ T3738] ext2: Bad value for 'max_batch_time' [ 47.576600][ T3741] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 47.644635][ T3741] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 47.667455][ T3741] FAT-fs (loop2): Filesystem has been set read-only [ 47.690201][ T3739] syzkaller0: entered promiscuous mode [ 47.696216][ T3739] syzkaller0: entered allmulticast mode [ 47.715719][ T3324] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.725628][ T3328] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 47.740066][ T3747] netlink: 8 bytes leftover after parsing attributes in process `syz.4.75'. [ 47.794736][ T3753] netlink: 8 bytes leftover after parsing attributes in process `syz.0.76'. [ 47.805221][ T28] audit: type=1400 audit(1777009016.224:225): avc: denied { create } for pid=3749 comm="syz.2.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 47.812091][ T3747] netlink: 4 bytes leftover after parsing attributes in process `syz.4.75'. [ 47.827058][ T28] audit: type=1400 audit(1777009016.244:226): avc: denied { setopt } for pid=3749 comm="syz.2.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 47.880861][ T28] audit: type=1400 audit(1777009016.264:227): avc: denied { bpf } for pid=3752 comm="syz.0.76" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 47.904834][ T28] audit: type=1400 audit(1777009016.264:228): avc: denied { perfmon } for pid=3752 comm="syz.0.76" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 47.953950][ T28] audit: type=1400 audit(1777009016.364:229): avc: denied { create } for pid=3749 comm="syz.2.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 47.974071][ T28] audit: type=1400 audit(1777009016.394:230): avc: denied { read } for pid=3749 comm="syz.2.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 47.994708][ T28] audit: type=1400 audit(1777009016.394:231): avc: denied { ioctl } for pid=3749 comm="syz.2.77" path="socket:[5397]" dev="sockfs" ino=5397 ioctlcmd=0x7002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 48.199008][ T28] audit: type=1400 audit(1777009016.614:232): avc: denied { listen } for pid=3777 comm="syz.2.81" lport=55735 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 48.277018][ T3784] 9p: Bad value for 'rfdno' [ 48.609048][ T3794] set_capacity_and_notify: 1 callbacks suppressed [ 48.609069][ T3794] loop1: detected capacity change from 0 to 512 [ 48.653309][ T3794] EXT4-fs: Ignoring removed oldalloc option [ 48.665274][ T3794] EXT4-fs (loop1): filesystem is read-only [ 48.679135][ T3794] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 48.719748][ T3799] loop0: detected capacity change from 0 to 512 [ 48.745176][ T3799] EXT4-fs: Ignoring removed nobh option [ 48.844144][ T3801] loop4: detected capacity change from 0 to 512 [ 48.898844][ T3794] EXT4-fs (loop1): filesystem is read-only [ 48.911478][ T3794] EXT4-fs (loop1): orphan cleanup on readonly fs [ 48.968830][ T3801] EXT4-fs warning (device loop4): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 48.986104][ T3801] EXT4-fs (loop4): mount failed [ 49.001757][ T3799] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.021035][ T3794] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.86: bg 0: block 64: padding at end of block bitmap is not set [ 49.084012][ T3799] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.099949][ T3794] loop1: lost filesystem error report for type 5 error -117 [ 49.100445][ T3794] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 49.107903][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 49.107919][ C0] EXT4-fs (loop1): initial error at time 1777009017: ext4_validate_block_bitmap:441 [ 49.107938][ C0] EXT4-fs (loop1): last error at time 1777009017: ext4_validate_block_bitmap:441 [ 49.334420][ T3794] loop1: lost filesystem error report for type 5 error -117 [ 49.336518][ T3794] EXT4-fs (loop1): 1 orphan inode deleted [ 49.435293][ T3794] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 49.615584][ T3799] syz.0.88 (3799) used greatest stack depth: 9152 bytes left [ 49.773435][ T3801] loop4: detected capacity change from 0 to 512 [ 49.893668][ T3324] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.906420][ T3331] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.171942][ T3811] loop3: detected capacity change from 0 to 128 [ 50.181810][ T3818] syzkaller0: entered promiscuous mode [ 50.193117][ T3818] syzkaller0: entered allmulticast mode [ 50.332929][ T3824] loop2: detected capacity change from 0 to 128 [ 50.350989][ T3824] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 50.366066][ T3825] netlink: 8 bytes leftover after parsing attributes in process `syz.3.97'. [ 50.389792][ T3824] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.420451][ T3824] xt_CT: You must specify a L4 protocol and not use inversions on it [ 50.430665][ T3825] netlink: 4 bytes leftover after parsing attributes in process `syz.3.97'. [ 50.445122][ T3824] netlink: 52 bytes leftover after parsing attributes in process `syz.2.98'. [ 50.487263][ T3328] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 50.634000][ T3834] loop0: detected capacity change from 0 to 512 [ 50.652781][ T3834] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.751680][ T3324] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.769027][ T3841] capability: warning: `syz.1.89' uses 32-bit capabilities (legacy support in use) [ 50.889070][ T3850] Cannot find add_set index 2 as target [ 51.030901][ T3859] loop2: detected capacity change from 0 to 512 [ 51.038533][ T3859] EXT4-fs: Ignoring removed oldalloc option [ 51.062737][ T3859] EXT4-fs (loop2): filesystem is read-only [ 51.075128][ T3859] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 51.097271][ T3859] EXT4-fs (loop2): filesystem is read-only [ 51.105983][ T3862] syzkaller0: entered promiscuous mode [ 51.114004][ T3859] EXT4-fs (loop2): orphan cleanup on readonly fs [ 51.123706][ T3862] syzkaller0: entered allmulticast mode [ 51.129751][ T3859] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.107: bg 0: block 64: padding at end of block bitmap is not set [ 51.183582][ T3859] loop2: lost filesystem error report for type 5 error -117 [ 51.183769][ T3859] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 51.191163][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 51.191185][ C1] EXT4-fs (loop2): initial error at time 1777009019: ext4_validate_block_bitmap:441 [ 51.191211][ C1] EXT4-fs (loop2): last error at time 1777009019: ext4_validate_block_bitmap:441 [ 51.274929][ T3859] loop2: lost filesystem error report for type 5 error -117 [ 51.275214][ T3859] EXT4-fs (loop2): 1 orphan inode deleted [ 51.290323][ T3859] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 51.364344][ T3328] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.376158][ T3870] veth0_to_team: entered promiscuous mode [ 51.388502][ T3870] netlink: 8 bytes leftover after parsing attributes in process `syz.0.109'. [ 51.404138][ T3870] netlink: 4 bytes leftover after parsing attributes in process `syz.0.109'. [ 51.603835][ T3878] loop3: detected capacity change from 0 to 512 [ 51.704381][ T3878] EXT4-fs warning (device loop3): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 51.723087][ T3878] EXT4-fs (loop3): mount failed [ 51.980956][ T3884] loop1: detected capacity change from 0 to 512 [ 52.008536][ T3884] EXT4-fs: Ignoring removed nobh option [ 52.082349][ T3884] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 52.154216][ T3884] EXT4-fs (loop1): orphan cleanup on readonly fs [ 52.224910][ T3884] EXT4-fs error (device loop1): mb_free_blocks:2049: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 52.257879][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 52.264413][ C0] EXT4-fs (loop1): initial error at time 1777009020: mb_free_blocks:2049: inode 12: block 14 [ 52.274857][ C0] EXT4-fs (loop1): last error at time 1777009020: mb_free_blocks:2049: inode 12: block 14 [ 52.348967][ T3884] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #12: comm syz.1.114: corrupted inode contents [ 52.434283][ T28] kauditd_printk_skb: 28 callbacks suppressed [ 52.434301][ T28] audit: type=1400 audit(1777009020.844:261): avc: denied { create } for pid=3876 comm="syz.2.112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 52.461782][ T3884] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 52.462058][ T3884] EXT4-fs error (device loop1): ext4_dirty_inode:6587: inode #12: comm syz.1.114: mark_inode_dirty error [ 52.618619][ T3884] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 52.619305][ T3884] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #12: comm syz.1.114: corrupted inode contents [ 52.721488][ T3891] netlink: 12 bytes leftover after parsing attributes in process `syz.4.117'. [ 52.756078][ T3884] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 52.756235][ T3884] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #12: comm syz.1.114: mark_inode_dirty error [ 52.805985][ T3884] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 52.806162][ T3884] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #12: comm syz.1.114: corrupted inode contents [ 52.831108][ T3894] EXT4-fs: inline encryption not supported [ 52.841885][ T3894] EXT4-fs: journaled quota format not specified [ 52.969199][ T3884] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 52.969438][ T3884] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 52.987684][ T3884] loop1: lost filesystem error report for type 5 error -117 [ 52.988006][ T3884] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #12: comm syz.1.114: corrupted inode contents [ 53.007473][ T3884] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 53.390977][ T3897] Cannot find add_set index 0 as target [ 53.433304][ T28] audit: type=1400 audit(1777009021.214:262): avc: denied { watch watch_reads } for pid=3890 comm="syz.4.117" path="/25" dev="tmpfs" ino=146 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 53.465204][ T28] audit: type=1400 audit(1777009021.214:263): avc: denied { setopt } for pid=3893 comm="syz.2.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 53.488675][ T28] audit: type=1400 audit(1777009021.214:264): avc: denied { connect } for pid=3893 comm="syz.2.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 53.529929][ T3884] EXT4-fs error (device loop1): ext4_truncate:4690: inode #12: comm syz.1.114: mark_inode_dirty error [ 53.558302][ T3897] FAT-fs (loop4): Directory bread(block 64) failed [ 53.565088][ T3897] FAT-fs (loop4): Directory bread(block 65) failed [ 53.571767][ T3897] FAT-fs (loop4): Directory bread(block 66) failed [ 53.578540][ T3897] FAT-fs (loop4): Directory bread(block 67) failed [ 53.585174][ T3897] FAT-fs (loop4): Directory bread(block 68) failed [ 53.591867][ T3897] FAT-fs (loop4): Directory bread(block 69) failed [ 53.598465][ T3897] FAT-fs (loop4): Directory bread(block 70) failed [ 53.605078][ T3897] FAT-fs (loop4): Directory bread(block 71) failed [ 53.611830][ T3897] FAT-fs (loop4): Directory bread(block 72) failed [ 53.618437][ T3897] FAT-fs (loop4): Directory bread(block 73) failed [ 53.662025][ T3884] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 53.662342][ T3884] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 53.681505][ T3884] loop1: lost filesystem error report for type 5 error -117 [ 53.682025][ T3884] EXT4-fs (loop1): 1 truncate cleaned up [ 53.708269][ T30] Quota error (device loop1): remove_tree: Cycle in quota tree detected: block 3 index 0 [ 53.708315][ T30] EXT4-fs error (device loop1): ext4_release_dquot:7070: comm kworker/u8:1: Failed to release dquot type 1 [ 53.708427][ T30] loop1: lost filesystem error report for type 5 error -5 [ 53.849022][ T3884] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 53.931738][ T28] audit: type=1400 audit(1777009022.344:265): avc: denied { remount } for pid=3883 comm="syz.1.114" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 53.951969][ T3884] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 53.968195][ T3906] netlink: 8 bytes leftover after parsing attributes in process `syz.3.119'. [ 53.984892][ T3897] netlink: 28 bytes leftover after parsing attributes in process `syz.4.117'. [ 53.993912][ T3897] netlink: 2 bytes leftover after parsing attributes in process `syz.4.117'. [ 54.003142][ T3897] netlink: 28 bytes leftover after parsing attributes in process `syz.4.117'. [ 54.038489][ T3884] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 54.098473][ T28] audit: type=1400 audit(1777009022.504:266): avc: denied { module_request } for pid=3898 comm="syz.3.119" kmod="netdev-batadv0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 54.145108][ T3884] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 3 index 0 [ 54.270032][ T3884] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 54.362016][ T28] audit: type=1400 audit(1777009022.544:267): avc: denied { validate_trans } for pid=3883 comm="syz.1.114" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 54.387999][ T3884] EXT4-fs error (device loop1): ext4_acquire_dquot:7034: comm syz.1.114: Failed to acquire dquot type 1 [ 54.498950][ T3331] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.936575][ T3933] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 55.291421][ T3950] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=3950 comm=syz.2.135 [ 55.425513][ T3964] set_capacity_and_notify: 3 callbacks suppressed [ 55.425531][ T3964] loop2: detected capacity change from 0 to 512 [ 55.479965][ T3964] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.545816][ T3328] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.695011][ T3977] syzkaller0: entered promiscuous mode [ 55.713183][ T3955] loop3: detected capacity change from 0 to 2048 [ 55.723523][ T3977] syzkaller0: entered allmulticast mode [ 55.734666][ T3955] EXT4-fs: Ignoring removed nomblk_io_submit option [ 55.742141][ T3979] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3979 comm=syz.4.143 [ 55.771299][ T3979] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2572 sclass=netlink_tcpdiag_socket pid=3979 comm=syz.4.143 [ 55.784508][ T3955] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.801134][ T3979] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=17 sclass=netlink_tcpdiag_socket pid=3979 comm=syz.4.143 [ 55.858517][ T3955] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.136: bg 0: block 2: invalid block bitmap [ 55.878655][ T3955] EXT4-fs (loop3): Remounting filesystem read-only [ 55.957481][ T3993] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 56.055418][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.455916][ T4008] loop3: detected capacity change from 0 to 512 [ 56.602743][ T4008] EXT4-fs warning (device loop3): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 56.620905][ T4008] EXT4-fs (loop3): mount failed [ 57.290487][ T4023] syzkaller0: entered promiscuous mode [ 57.302938][ T4023] syzkaller0: entered allmulticast mode [ 57.610473][ T4027] loop0: detected capacity change from 0 to 512 [ 57.684338][ T4027] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 57.735541][ T4036] loop2: detected capacity change from 0 to 1024 [ 57.765070][ T4027] EXT4-fs (loop0): 1 truncate cleaned up [ 57.786940][ T4036] EXT4-fs: Ignoring removed bh option [ 57.802421][ T4027] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.852431][ T4036] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.909673][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 57.909767][ T28] audit: type=1400 audit(1777009026.324:286): avc: denied { read write } for pid=4035 comm="syz.2.162" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 57.944734][ T4036] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 57.964093][ T4042] loop4: detected capacity change from 0 to 512 [ 58.054795][ T4042] EXT4-fs: Ignoring removed oldalloc option [ 58.080392][ T28] audit: type=1400 audit(1777009026.354:287): avc: denied { open } for pid=4035 comm="syz.2.162" path="/37/file1/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 58.131329][ T3328] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.143931][ T4042] EXT4-fs (loop4): filesystem is read-only [ 58.151198][ T28] audit: type=1400 audit(1777009026.354:288): avc: denied { map } for pid=4035 comm="syz.2.162" path="/37/file1/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 58.178351][ T28] audit: type=1400 audit(1777009026.394:289): avc: denied { getopt } for pid=4026 comm="syz.0.159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 58.185618][ T4042] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 58.230403][ T28] audit: type=1400 audit(1777009026.644:290): avc: denied { shutdown } for pid=4050 comm="syz.2.164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 58.252230][ T2972] I/O error, dev loop2, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 2 [ 58.263334][ T4042] EXT4-fs (loop4): filesystem is read-only [ 58.276080][ T4042] EXT4-fs (loop4): orphan cleanup on readonly fs [ 58.282660][ T28] audit: type=1400 audit(1777009026.664:291): avc: denied { append } for pid=4050 comm="syz.2.164" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 58.306658][ T28] audit: type=1400 audit(1777009026.664:292): avc: denied { map } for pid=4050 comm="syz.2.164" path="/dev/loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 58.321562][ T4042] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.161: bg 0: block 64: padding at end of block bitmap is not set [ 58.330899][ T28] audit: type=1400 audit(1777009026.664:293): avc: denied { execute } for pid=4050 comm="syz.2.164" path="/dev/loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 58.385698][ T4042] loop4: lost filesystem error report for type 5 error -117 [ 58.387930][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 58.402032][ C0] EXT4-fs (loop4): initial error at time 1777009026: ext4_validate_block_bitmap:441 [ 58.405970][ T4042] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 58.411806][ C0] EXT4-fs (loop4): last error at time 1777009026: ext4_validate_block_bitmap:441 [ 58.437933][ T4042] loop4: lost filesystem error report for type 5 error -117 [ 58.438340][ T4042] EXT4-fs (loop4): 1 orphan inode deleted [ 58.482049][ T4056] loop2: detected capacity change from 0 to 1024 [ 58.500914][ T4055] __nla_validate_parse: 30 callbacks suppressed [ 58.500933][ T4055] netlink: 16 bytes leftover after parsing attributes in process `syz.1.167'. [ 58.509139][ T4042] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 58.537711][ T4056] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 58.550065][ T4055] netlink: 48 bytes leftover after parsing attributes in process `syz.1.167'. [ 58.551658][ T4057] loop3: detected capacity change from 0 to 512 [ 58.562575][ T4056] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.600799][ T3324] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.609668][ T4057] EXT4-fs: Ignoring removed oldalloc option [ 58.619416][ T4055] netlink: 8 bytes leftover after parsing attributes in process `syz.1.167'. [ 58.628348][ T4055] netlink: 8 bytes leftover after parsing attributes in process `syz.1.167'. [ 58.638815][ T4056] EXT4-fs error (device loop2): ext4_map_blocks:833: inode #15: block 3: comm syz.2.166: lblock 3 mapped to illegal pblock 3 (length 1) [ 58.658773][ T4056] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 58.680639][ T4057] EXT4-fs (loop3): filesystem is read-only [ 58.701936][ T4056] EXT4-fs (loop2): This should not happen!! Data will be lost [ 58.701936][ T4056] [ 58.714325][ T4056] EXT4-fs error (device loop2): ext4_map_blocks:833: inode #15: block 3: comm syz.2.166: lblock 3 mapped to illegal pblock 3 (length 1) [ 58.723861][ T4057] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 58.739042][ T4056] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 58.755695][ T4065] netlink: 8 bytes leftover after parsing attributes in process `syz.1.170'. [ 58.765236][ T4056] EXT4-fs (loop2): This should not happen!! Data will be lost [ 58.765236][ T4056] [ 58.769562][ T4065] netlink: 996 bytes leftover after parsing attributes in process `syz.1.170'. [ 58.786502][ T4061] pimreg: entered allmulticast mode [ 58.788365][ T4057] EXT4-fs (loop3): filesystem is read-only [ 58.799761][ T4056] pimreg: left allmulticast mode [ 58.800591][ T4057] EXT4-fs (loop3): orphan cleanup on readonly fs [ 58.846961][ T4057] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.168: bg 0: block 64: padding at end of block bitmap is not set [ 58.856222][ T28] audit: type=1400 audit(1777009027.264:294): avc: denied { create } for pid=4033 comm="syz.4.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 58.880633][ T4061] netlink: 8 bytes leftover after parsing attributes in process `syz.2.166'. [ 58.893791][ T28] audit: type=1400 audit(1777009027.294:295): avc: denied { ioctl } for pid=4033 comm="syz.4.161" path="socket:[6856]" dev="sockfs" ino=6856 ioctlcmd=0x4944 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 58.920770][ T4057] loop3: lost filesystem error report for type 5 error -117 [ 58.926748][ T4069] syzkaller0: entered promiscuous mode [ 58.937913][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 58.946166][ C1] EXT4-fs (loop3): initial error at time 1777009027: ext4_validate_block_bitmap:441 [ 58.947371][ T4069] syzkaller0: entered allmulticast mode [ 58.955611][ C1] EXT4-fs (loop3): last error at time 1777009027: ext4_validate_block_bitmap:441 [ 58.956548][ T4057] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 59.004518][ T4057] loop3: lost filesystem error report for type 5 error -117 [ 59.010192][ T4057] EXT4-fs (loop3): 1 orphan inode deleted [ 59.031270][ T12] EXT4-fs error (device loop2): ext4_map_blocks:833: inode #15: block 8: comm kworker/u8:0: lblock 8 mapped to illegal pblock 8 (length 8) [ 59.057016][ T12] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 59.060726][ T4057] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 59.070127][ T3332] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.092355][ T12] EXT4-fs (loop2): This should not happen!! Data will be lost [ 59.092355][ T12] [ 59.094828][ T4073] syz.1.172 uses obsolete (PF_INET,SOCK_PACKET) [ 59.109179][ T3328] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 59.154616][ T3328] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 59.170791][ T4078] loop7: detected capacity change from 0 to 16384 [ 59.190811][ T4080] netlink: 12 bytes leftover after parsing attributes in process `syz.2.173'. [ 59.211178][ T4082] loop4: detected capacity change from 0 to 128 [ 59.267018][ T4082] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 59.366351][ T4082] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 59.386509][ T4082] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 59.398005][ T4082] FAT-fs (loop4): Filesystem has been set read-only [ 59.512209][ T4089] netlink: 36 bytes leftover after parsing attributes in process `syz.2.173'. [ 59.923691][ C1] I/O error, dev loop7, sector 5376 op 0x0:(READ) flags 0x80700 phys_seg 9 prio class 2 [ 59.949715][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.409919][ T4110] EXT4-fs: Ignoring removed oldalloc option [ 60.420276][ T4113] FAULT_INJECTION: forcing a failure. [ 60.420276][ T4113] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 60.434314][ T4113] CPU: 0 UID: 0 PID: 4113 Comm: syz.0.184 Not tainted syzkaller #0 PREEMPT(full) [ 60.434348][ T4113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 60.434437][ T4113] Call Trace: [ 60.434447][ T4113] [ 60.434457][ T4113] __dump_stack+0x1d/0x30 [ 60.434498][ T4113] dump_stack_lvl+0x95/0xd0 [ 60.434651][ T4113] dump_stack+0x15/0x1b [ 60.434682][ T4113] should_fail_ex+0x263/0x280 [ 60.434795][ T4113] should_fail_alloc_page+0xf2/0x100 [ 60.434900][ T4113] __alloc_frozen_pages_noprof+0x108/0x350 [ 60.434932][ T4113] alloc_pages_mpol+0xb3/0x260 [ 60.434965][ T4113] alloc_migration_target_by_mpol+0x11b/0x2a0 [ 60.435031][ T4113] migrate_pages_batch+0x35b/0x2010 [ 60.435128][ T4113] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 60.435167][ T4113] ? __walk_page_range+0x324/0x340 [ 60.435190][ T4113] ? find_vma+0x6c/0xa0 [ 60.435292][ T4113] migrate_pages+0x102e/0x1860 [ 60.435326][ T4113] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 60.435365][ T4113] ? mbind_range+0xb5/0x430 [ 60.435396][ T4113] __se_sys_mbind+0xc98/0xdd0 [ 60.436072][ T4113] __x64_sys_mbind+0x78/0x90 [ 60.436102][ T4113] x64_sys_call+0x2b72/0x3020 [ 60.436135][ T4113] do_syscall_64+0x12c/0x3b0 [ 60.436163][ T4113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.436192][ T4113] RIP: 0033:0x7fcbc507cdd9 [ 60.436256][ T4113] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 60.436277][ T4113] RSP: 002b:00007fcbc3aae028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 60.436300][ T4113] RAX: ffffffffffffffda RBX: 00007fcbc52f6090 RCX: 00007fcbc507cdd9 [ 60.436379][ T4113] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000001000 [ 60.436396][ T4113] RBP: 00007fcbc3aae090 R08: 0000000000000000 R09: 0000000000000002 [ 60.436411][ T4113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 60.436423][ T4113] R13: 00007fcbc52f6128 R14: 00007fcbc52f6090 R15: 00007ffc369d1d58 [ 60.436463][ T4113] [ 60.519595][ T4110] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 60.671744][ T4118] set_capacity_and_notify: 3 callbacks suppressed [ 60.671764][ T4118] loop4: detected capacity change from 0 to 1764 [ 60.800153][ T4118] FAULT_INJECTION: forcing a failure. [ 60.800153][ T4118] name failslab, interval 1, probability 0, space 0, times 0 [ 60.822470][ T4110] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #15: comm syz.2.187: iget: bad i_size value: 38620345925642 [ 60.837503][ T4118] CPU: 1 UID: 0 PID: 4118 Comm: syz.4.188 Not tainted syzkaller #0 PREEMPT(full) [ 60.837604][ T4118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 60.837621][ T4118] Call Trace: [ 60.837629][ T4118] [ 60.837639][ T4118] __dump_stack+0x1d/0x30 [ 60.837737][ T4118] dump_stack_lvl+0x95/0xd0 [ 60.837766][ T4118] dump_stack+0x15/0x1b [ 60.837789][ T4118] should_fail_ex+0x263/0x280 [ 60.837821][ T4118] should_failslab+0x8c/0xb0 [ 60.837896][ T4118] kmem_cache_alloc_noprof+0x66/0x3f0 [ 60.837925][ T4118] ? do_getname_kernel+0x53/0x190 [ 60.837957][ T4118] do_getname_kernel+0x53/0x190 [ 60.838048][ T4118] kern_path+0x23/0xf0 [ 60.838082][ T4118] create_local_trace_uprobe+0x53/0x2d0 [ 60.838112][ T4118] perf_uprobe_init+0xc0/0x150 [ 60.838166][ T4118] perf_uprobe_event_init+0xc4/0x140 [ 60.838202][ T4118] perf_try_init_event+0x254/0x6e0 [ 60.838262][ T4118] ? kmem_cache_alloc_node_noprof+0x20a/0x450 [ 60.838286][ T4118] perf_event_alloc+0xb2f/0x1a10 [ 60.838374][ T4118] ? __rcu_read_unlock+0x4e/0x70 [ 60.838403][ T4118] __se_sys_perf_event_open+0x63b/0x1270 [ 60.838538][ T4118] __x64_sys_perf_event_open+0x67/0x80 [ 60.838570][ T4118] x64_sys_call+0x2789/0x3020 [ 60.838610][ T4118] do_syscall_64+0x12c/0x3b0 [ 60.838721][ T4118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.838746][ T4118] RIP: 0033:0x7fcd5cc6cdd9 [ 60.838842][ T4118] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 60.838923][ T4118] RSP: 002b:00007fcd5b6c7028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 60.838949][ T4118] RAX: ffffffffffffffda RBX: 00007fcd5cee5fa0 RCX: 00007fcd5cc6cdd9 [ 60.838962][ T4118] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000000 [ 60.838980][ T4118] RBP: 00007fcd5b6c7090 R08: 0000000000000000 R09: 0000000000000000 [ 60.839038][ T4118] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 60.839052][ T4118] R13: 00007fcd5cee6038 R14: 00007fcd5cee5fa0 R15: 00007fff3b4bf388 [ 60.839071][ T4118] [ 60.847413][ T4110] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 60.979692][ T4123] loop0: detected capacity change from 0 to 512 [ 60.997873][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 60.997896][ C0] EXT4-fs (loop2): initial error at time 1777009029: ext4_orphan_get:1397: inode 15 [ 60.997961][ C0] EXT4-fs (loop2): last error at time 1777009029: ext4_orphan_get:1397: inode 15 [ 61.041528][ T4110] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.187: couldn't read orphan inode 15 (err -117) [ 61.100877][ T4123] EXT4-fs: Ignoring removed oldalloc option [ 61.113280][ T4110] loop2: lost filesystem error report for type 5 error -117 [ 61.123051][ T4110] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.151102][ T4130] loop4: detected capacity change from 0 to 164 [ 61.170702][ T4130] Unable to read rock-ridge attributes [ 61.179934][ T4108] loop1: detected capacity change from 0 to 2048 [ 61.189406][ T4130] Unable to read rock-ridge attributes [ 61.199510][ T4108] EXT4-fs: Ignoring removed nomblk_io_submit option [ 61.218098][ T4132] netlink: 12 bytes leftover after parsing attributes in process `syz.3.192'. [ 61.228702][ T4123] EXT4-fs (loop0): filesystem is read-only [ 61.246862][ T4108] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.259916][ T4123] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 61.305372][ T4123] EXT4-fs (loop0): filesystem is read-only [ 61.312986][ T4123] EXT4-fs (loop0): orphan cleanup on readonly fs [ 61.336165][ T4123] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.189: bg 0: block 64: padding at end of block bitmap is not set [ 61.341990][ T4108] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.185: bg 0: block 2: invalid block bitmap [ 61.351794][ T4123] loop0: lost filesystem error report for type 5 error -117 [ 61.367874][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 61.381887][ C0] EXT4-fs (loop0): initial error at time 1777009029: ext4_validate_block_bitmap:441 [ 61.391436][ C0] EXT4-fs (loop0): last error at time 1777009029: ext4_validate_block_bitmap:441 [ 61.401092][ T4123] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 61.405251][ T4108] EXT4-fs (loop1): Remounting filesystem read-only [ 61.410608][ T4123] loop0: lost filesystem error report for type 5 error -117 [ 61.425839][ T4123] EXT4-fs (loop0): 1 orphan inode deleted [ 61.469508][ T4123] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 61.497361][ T12] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm kworker/u8:0: bg 0: block 5: invalid block bitmap [ 61.519075][ T4144] loop4: detected capacity change from 0 to 164 [ 61.520957][ T12] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 572 with error 28 [ 61.539891][ T4144] Unable to read rock-ridge attributes [ 61.546037][ T4144] Unable to read rock-ridge attributes [ 61.566915][ T4144] FAULT_INJECTION: forcing a failure. [ 61.566915][ T4144] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 61.572442][ T12] EXT4-fs (loop2): This should not happen!! Data will be lost [ 61.572442][ T12] [ 61.608063][ T4144] CPU: 0 UID: 0 PID: 4144 Comm: syz.4.197 Not tainted syzkaller #0 PREEMPT(full) [ 61.608097][ T4144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 61.608113][ T4144] Call Trace: [ 61.608121][ T4144] [ 61.608130][ T4144] __dump_stack+0x1d/0x30 [ 61.608188][ T4144] dump_stack_lvl+0x95/0xd0 [ 61.608222][ T4144] dump_stack+0x15/0x1b [ 61.608305][ T4144] should_fail_ex+0x263/0x280 [ 61.608348][ T4144] should_fail+0xb/0x20 [ 61.608387][ T4144] should_fail_usercopy+0x1a/0x20 [ 61.608455][ T4144] _copy_to_user+0x20/0xa0 [ 61.608477][ T4144] simple_read_from_buffer+0xb5/0x130 [ 61.608507][ T4144] proc_fail_nth_read+0x10e/0x150 [ 61.608608][ T4144] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 61.608647][ T4144] vfs_read+0x1ab/0x7f0 [ 61.608726][ T4144] ? __rcu_read_unlock+0x4e/0x70 [ 61.608760][ T4144] ? __fget_files+0x184/0x1c0 [ 61.608805][ T4144] ? mutex_lock+0x57/0x90 [ 61.608855][ T4144] ksys_read+0xdc/0x1a0 [ 61.608901][ T4144] __x64_sys_read+0x40/0x50 [ 61.609000][ T4144] x64_sys_call+0x2886/0x3020 [ 61.609035][ T4144] do_syscall_64+0x12c/0x3b0 [ 61.609132][ T4144] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.609307][ T4144] RIP: 0033:0x7fcd5cc2d60e [ 61.609327][ T4144] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 61.609350][ T4144] RSP: 002b:00007fcd5b6c6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 61.609371][ T4144] RAX: ffffffffffffffda RBX: 00007fcd5b6c76c0 RCX: 00007fcd5cc2d60e [ 61.609389][ T4144] RDX: 000000000000000f RSI: 00007fcd5b6c70a0 RDI: 0000000000000004 [ 61.609406][ T4144] RBP: 00007fcd5b6c7090 R08: 0000000000000000 R09: 0000000000000000 [ 61.609456][ T4144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 61.609473][ T4144] R13: 00007fcd5cee6038 R14: 00007fcd5cee5fa0 R15: 00007fff3b4bf388 [ 61.609498][ T4144] [ 61.615705][ T12] EXT4-fs (loop2): Total free blocks count 0 [ 61.691514][ T4140] loop3: detected capacity change from 0 to 164 [ 61.736075][ T12] EXT4-fs (loop2): Free/Dirty block details [ 61.843593][ T3331] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.860243][ T4140] Unable to read rock-ridge attributes [ 61.904943][ T4149] loop1: detected capacity change from 0 to 512 [ 61.913492][ T3324] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.925357][ T12] EXT4-fs (loop2): free_blocks=0 [ 61.935644][ T12] EXT4-fs (loop2): dirty_blocks=572 [ 61.952802][ T12] EXT4-fs (loop2): Block reservation details [ 61.970250][ T4149] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.991300][ T12] EXT4-fs (loop2): i_reserved_data_blocks=572 [ 61.999903][ T4149] ext4 filesystem being mounted at /34/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.011185][ T3328] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 62.054626][ T3328] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.075674][ T4153] veth1_to_team: entered allmulticast mode [ 62.195778][ T4172] loop0: detected capacity change from 0 to 164 [ 62.203235][ T4172] Unable to read rock-ridge attributes [ 62.216411][ T4172] Unable to read rock-ridge attributes [ 62.229139][ T4172] UHID_CREATE from different security context by process 125 (syz.0.205), this is not allowed. [ 62.229170][ T4158] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.273184][ T4177] loop2: detected capacity change from 0 to 512 [ 62.280818][ T4177] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 62.375997][ T4177] EXT4-fs (loop2): 1 truncate cleaned up [ 62.403570][ T4177] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.525463][ T4185] loop3: detected capacity change from 0 to 512 [ 62.558407][ T4185] EXT4-fs: Ignoring removed orlov option [ 62.575140][ T3328] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.596305][ T4185] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 62.626156][ T4185] EXT4-fs error (device loop3): ext4_ext_check_inode:521: inode #16: comm syz.3.212: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 28(0), depth 0(0) [ 62.647095][ T4185] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 62.647335][ T4185] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.212: couldn't read orphan inode 16 (err -117) [ 62.656594][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 62.656617][ C0] EXT4-fs (loop3): initial error at time 1777009031: ext4_ext_check_inode:521: inode 16 [ 62.656651][ C0] EXT4-fs (loop3): last error at time 1777009031: ext4_ext_check_inode:521: inode 16 [ 62.694460][ T4185] loop3: lost filesystem error report for type 5 error -117 [ 62.694714][ T4185] EXT4-fs (loop3): 1 orphan inode deleted [ 62.782282][ T4185] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.959803][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 63.031824][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.039298][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.046498][ T4184] bridge_slave_0: entered allmulticast mode [ 63.053696][ T4184] bridge_slave_0: entered promiscuous mode [ 63.060770][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.068145][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.075510][ T4184] bridge_slave_1: entered allmulticast mode [ 63.083742][ T4184] bridge_slave_1: entered promiscuous mode [ 63.139812][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.149690][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.160890][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.197196][ T4184] team0: Port device team_slave_0 added [ 63.213452][ T4184] team0: Port device team_slave_1 added [ 63.243681][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.250892][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.284666][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.308201][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.320360][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.350021][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.366229][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 63.366244][ T28] audit: type=1400 audit(1777009031.784:309): avc: denied { ioctl } for pid=4210 comm="syz.2.216" path="socket:[8228]" dev="sockfs" ino=8228 ioctlcmd=0x5868 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 63.468009][ T3426] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 63.485357][ T28] audit: type=1400 audit(1777009031.894:310): avc: denied { getopt } for pid=4226 comm="syz.3.222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 63.512728][ T3426] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 63.637703][ T12] bond0 (unregistering): Released all slaves [ 63.683269][ T4184] hsr_slave_0: entered promiscuous mode [ 63.696554][ T4184] hsr_slave_1: entered promiscuous mode [ 63.705728][ T4233] __nla_validate_parse: 3 callbacks suppressed [ 63.705770][ T4233] netlink: 24 bytes leftover after parsing attributes in process `syz.4.223'. [ 63.723648][ T4184] debugfs: 'hsr0' already exists in 'hsr' [ 63.732645][ T4184] Cannot create hsr debugfs directory [ 63.752652][ T28] audit: type=1400 audit(1777009032.164:311): avc: denied { getopt } for pid=4232 comm="syz.4.223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 63.772787][ T12] hsr_slave_0: left promiscuous mode [ 63.785388][ T28] audit: type=1400 audit(1777009032.194:312): avc: denied { lock } for pid=4238 comm="syz.3.225" path="socket:[7392]" dev="sockfs" ino=7392 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 63.809242][ T12] hsr_slave_1: left promiscuous mode [ 63.972884][ T28] audit: type=1400 audit(1777009032.384:313): avc: denied { read } for pid=3052 comm="dhcpcd" name="n25" dev="tmpfs" ino=2228 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 64.054776][ T28] audit: type=1400 audit(1777009032.384:314): avc: denied { open } for pid=3052 comm="dhcpcd" path="/run/udev/data/n25" dev="tmpfs" ino=2228 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 64.134342][ T28] audit: type=1400 audit(1777009032.384:315): avc: denied { getattr } for pid=3052 comm="dhcpcd" path="/run/udev/data/n25" dev="tmpfs" ino=2228 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 64.164585][ T4251] 9p: Bad value for 'rfdno' [ 64.243545][ T4184] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 64.256251][ T4266] iso9660: Unknown parameter 'Ÿë' [ 64.283516][ T4184] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 64.316471][ T4184] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 64.346956][ T28] audit: type=1400 audit(1777009032.744:316): avc: denied { create } for pid=4255 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 64.374686][ T4184] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 64.404429][ T28] audit: type=1400 audit(1777009032.744:317): avc: denied { write } for pid=4255 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth1.link" dev="tmpfs" ino=2319 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 64.470008][ T28] audit: type=1400 audit(1777009032.744:318): avc: denied { append } for pid=4255 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" dev="tmpfs" ino=2319 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 64.624159][ T4268] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.631692][ T4268] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.695397][ T4268] bridge_slave_0: left allmulticast mode [ 65.707312][ T4268] bridge_slave_0: left promiscuous mode [ 65.721478][ T4268] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.741341][ T4268] bridge_slave_1: left allmulticast mode [ 65.756248][ T4268] bridge_slave_1: left promiscuous mode [ 65.765475][ T4268] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.785691][ T4268] bond0: (slave bond_slave_0): Releasing backup interface [ 65.806031][ T4268] bond0: (slave bond_slave_1): Releasing backup interface [ 65.820284][ T4268] team0: Port device team_slave_0 removed [ 65.833263][ T4268] team0: Port device team_slave_1 removed [ 65.857786][ T4268] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 65.891022][ T4184] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 65.900710][ T4184] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 65.908511][ T4184] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 65.917789][ T4184] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 65.926820][ T3052] 8021q: adding VLAN 0 to HW filter on device eth1 [ 66.086370][ T4291] set_capacity_and_notify: 1 callbacks suppressed [ 66.086387][ T4291] loop3: detected capacity change from 0 to 1024 [ 66.117895][ T4291] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 66.150266][ T4291] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 66.249120][ T4291] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 66.373311][ T4246] loop4: detected capacity change from 0 to 4096 [ 66.389932][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.454694][ T4246] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.501100][ T4297] FAULT_INJECTION: forcing a failure. [ 66.501100][ T4297] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 66.514906][ T4297] CPU: 1 UID: 0 PID: 4297 Comm: syz.0.238 Not tainted syzkaller #0 PREEMPT(full) [ 66.514939][ T4297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 66.514955][ T4297] Call Trace: [ 66.514963][ T4297] [ 66.514973][ T4297] __dump_stack+0x1d/0x30 [ 66.515005][ T4297] dump_stack_lvl+0x95/0xd0 [ 66.515130][ T4297] dump_stack+0x15/0x1b [ 66.515162][ T4297] should_fail_ex+0x263/0x280 [ 66.515203][ T4297] should_fail+0xb/0x20 [ 66.515266][ T4297] should_fail_usercopy+0x1a/0x20 [ 66.515296][ T4297] _copy_from_user+0x1c/0xb0 [ 66.515322][ T4297] ___sys_sendmsg+0xc1/0x1e0 [ 66.515380][ T4297] __x64_sys_sendmsg+0xd4/0x160 [ 66.515422][ T4297] x64_sys_call+0x194c/0x3020 [ 66.515459][ T4297] do_syscall_64+0x12c/0x3b0 [ 66.515528][ T4297] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.515558][ T4297] RIP: 0033:0x7fcbc507cdd9 [ 66.515578][ T4297] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 66.515601][ T4297] RSP: 002b:00007fcbc3acf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 66.515677][ T4297] RAX: ffffffffffffffda RBX: 00007fcbc52f5fa0 RCX: 00007fcbc507cdd9 [ 66.515695][ T4297] RDX: 0000000004008000 RSI: 0000200000000100 RDI: 0000000000000003 [ 66.515712][ T4297] RBP: 00007fcbc3acf090 R08: 0000000000000000 R09: 0000000000000000 [ 66.515800][ T4297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 66.515815][ T4297] R13: 00007fcbc52f6038 R14: 00007fcbc52f5fa0 R15: 00007ffc369d1d58 [ 66.515840][ T4297] [ 66.540458][ T12] IPVS: stop unused estimator thread 0... [ 66.841969][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.847610][ T3332] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.858902][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.881611][ T2183] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.888823][ T2183] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.914356][ T2183] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.921485][ T2183] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.057699][ T4336] netlink: 8 bytes leftover after parsing attributes in process `syz.4.242'. [ 67.092289][ T3052] 8021q: adding VLAN 0 to HW filter on device eth2 [ 67.105356][ T4343] loop3: detected capacity change from 0 to 512 [ 67.113890][ T4336] netlink: 4 bytes leftover after parsing attributes in process `syz.4.242'. [ 67.149678][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.157732][ T4325] loop0: detected capacity change from 0 to 1024 [ 67.170108][ T4343] EXT4-fs: Ignoring removed oldalloc option [ 67.201036][ T4343] EXT4-fs (loop3): filesystem is read-only [ 67.215815][ T4343] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 67.229664][ T4325] ext2: Bad value for 'max_batch_time' [ 67.244367][ T4351] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.246'. [ 67.259402][ T4343] EXT4-fs (loop3): filesystem is read-only [ 67.285647][ T4343] EXT4-fs (loop3): orphan cleanup on readonly fs [ 67.324742][ T4343] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.244: bg 0: block 64: padding at end of block bitmap is not set [ 67.340065][ T4343] loop3: lost filesystem error report for type 5 error -117 [ 67.340501][ T4343] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 67.347889][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 67.347918][ C0] EXT4-fs (loop3): initial error at time 1777009035: ext4_validate_block_bitmap:441 [ 67.347942][ C0] EXT4-fs (loop3): last error at time 1777009035: ext4_validate_block_bitmap:441 [ 67.382034][ T4343] loop3: lost filesystem error report for type 5 error -117 [ 67.382284][ T4362] loop2: detected capacity change from 0 to 128 [ 67.393812][ T4343] EXT4-fs (loop3): 1 orphan inode deleted [ 67.429158][ T4362] syz.2.246: attempt to access beyond end of device [ 67.429158][ T4362] loop2: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 67.452029][ T4343] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 67.483923][ T4354] ------------[ cut here ]------------ [ 67.489441][ T4354] WARNING: kernel/signal.c:2174 at do_notify_parent+0x5c3/0x600, CPU#1: syz.2.246/4354 [ 67.499151][ T4354] Modules linked in: [ 67.503155][ T4354] CPU: 1 UID: 0 PID: 4354 Comm: syz.2.246 Not tainted syzkaller #0 PREEMPT(full) [ 67.512378][ T4354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 67.522464][ T4354] RIP: 0010:do_notify_parent+0x5c3/0x600 [ 67.528125][ T4354] Code: 8b 05 f1 6b 19 08 48 3b 44 24 48 75 41 44 89 f0 48 83 c4 50 5b 41 5c 41 5d 41 5e 41 5f 5d e9 94 e9 64 04 cc e8 7e 11 1e 00 90 <0f> 0b 90 45 31 f6 eb cc e8 70 11 1e 00 90 0f 0b 90 e9 af fa ff ff [ 67.547792][ T4354] RSP: 0018:ffffc90002553dd8 EFLAGS: 00010093 [ 67.553877][ T4354] RAX: ffffffff813b3452 RBX: ffff8881052d6600 RCX: ffff8881052d6600 [ 67.561912][ T4354] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 0000000000000040 [ 67.569898][ T4354] RBP: 0000000000000080 R08: ffff8881052d70f8 R09: 0000000000000000 [ 67.577899][ T4354] R10: ffffc90002553df0 R11: 0001c90002553df0 R12: ffff8881052d6600 [ 67.586002][ T4354] R13: ffff8881052d6e28 R14: ffff888104487610 R15: 0000000000000080 [ 67.593999][ T4354] FS: 0000000000000000(0000) GS:ffff8882ae7ca000(0000) knlGS:0000000000000000 [ 67.602999][ T4354] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 67.609613][ T4354] CR2: 000000110c2acfb4 CR3: 0000000116db2000 CR4: 00000000003506f0 [ 67.617612][ T4354] Call Trace: [ 67.620913][ T4354] [ 67.623862][ T4354] ? _raw_spin_lock_irqsave+0x57/0xb0 [ 67.629296][ T4354] ? __list_add_valid_or_report+0x38/0xe0 [ 67.635140][ T4354] do_exit+0xc13/0x1530 [ 67.639336][ T4354] ? switch_fpu_return+0xe7/0x1b0 [ 67.644452][ T4354] __x64_sys_exit+0x1f/0x20 [ 67.648991][ T4354] x64_sys_call+0x301d/0x3020 [ 67.653704][ T4354] do_syscall_64+0x12c/0x3b0 [ 67.658333][ T4354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.664267][ T4354] RIP: 0033:0x7f3632f1cdd9 [ 67.668784][ T4354] Code: Unable to access opcode bytes at 0x7f3632f1cdaf. [ 67.675817][ T4354] RSP: 002b:00007f363196efd8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c [ 67.684415][ T4354] RAX: ffffffffffffffda RBX: 00007f3633195fa0 RCX: 00007f3632f1cdd9 [ 67.692414][ T4354] RDX: 00007f363196f9c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 67.700413][ T4354] RBP: 00007f3632fb2d69 R08: 0000000000000000 R09: 0000000000000000 [ 67.708452][ T4354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 67.716480][ T4354] R13: 00007f3633196038 R14: 00007f3633195fa0 R15: 00007ffc448a5288 [ 67.724489][ T4354] [ 67.727527][ T4354] ---[ end trace 0000000000000000 ]--- [ 67.831903][ T4345] syz.2.246: attempt to access beyond end of device [ 67.831903][ T4345] loop2: rw=524288, sector=138, nr_sectors = 112 limit=128 [ 67.871846][ T4345] syz.2.246: attempt to access beyond end of device [ 67.871846][ T4345] loop2: rw=0, sector=138, nr_sectors = 8 limit=128 [ 67.897003][ T4345] syz.2.246: attempt to access beyond end of device [ 67.897003][ T4345] loop2: rw=0, sector=138, nr_sectors = 8 limit=128 [ 67.913115][ T4381] netlink: 20 bytes leftover after parsing attributes in process `syz.0.248'. [ 67.954112][ T4184] veth0_vlan: entered promiscuous mode [ 67.958266][ T4345] syz.2.246: attempt to access beyond end of device [ 67.958266][ T4345] loop2: rw=0, sector=138, nr_sectors = 8 limit=128 [ 67.987551][ T3052] 8021q: adding VLAN 0 to HW filter on device eth3 [ 68.002468][ T4184] veth1_vlan: entered promiscuous mode [ 68.026632][ T4345] syz.2.246: attempt to access beyond end of device [ 68.026632][ T4345] loop2: rw=0, sector=138, nr_sectors = 8 limit=128 [ 68.049006][ T4184] veth0_macvtap: entered promiscuous mode [ 68.067728][ T4184] veth1_macvtap: entered promiscuous mode [ 68.077312][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.082852][ T4345] syz.2.246: attempt to access beyond end of device [ 68.082852][ T4345] loop2: rw=0, sector=138, nr_sectors = 8 limit=128 [ 68.108782][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.125140][ T4345] syz.2.246: attempt to access beyond end of device [ 68.125140][ T4345] loop2: rw=0, sector=138, nr_sectors = 8 limit=128 [ 68.142925][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.151823][ T4345] syz.2.246: attempt to access beyond end of device [ 68.151823][ T4345] loop2: rw=0, sector=138, nr_sectors = 8 limit=128 [ 68.165305][ T4345] syz.2.246: attempt to access beyond end of device [ 68.165305][ T4345] loop2: rw=0, sector=138, nr_sectors = 8 limit=128 [ 68.185091][ T877] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.203739][ T877] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.217807][ T877] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.239903][ T877] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.261471][ T4396] netlink: 8 bytes leftover after parsing attributes in process `syz.3.253'. [ 68.279502][ T4396] netlink: 4 bytes leftover after parsing attributes in process `syz.3.253'. [ 68.390197][ T4411] syzkaller0: entered promiscuous mode [ 68.390220][ T4411] syzkaller0: entered allmulticast mode [ 68.420497][ T3052] 8021q: adding VLAN 0 to HW filter on device eth4 [ 68.450122][ T4416] loop2: detected capacity change from 0 to 512 [ 68.463928][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 68.463945][ T28] audit: type=1400 audit(1777009036.874:330): avc: denied { mounton } for pid=4415 comm="syz.2.254" path="/52/file0/file0" dev="loop2" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 68.465420][ T4416] netlink: 8 bytes leftover after parsing attributes in process `syz.2.254'. [ 68.473519][ T28] audit: type=1400 audit(1777009036.874:331): avc: denied { mount } for pid=4415 comm="syz.2.254" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 68.527685][ T28] audit: type=1400 audit(1777009036.874:332): avc: denied { mounton } for pid=4415 comm="syz.2.254" path="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 68.561886][ T28] audit: type=1400 audit(1777009036.974:333): avc: denied { unmount } for pid=3328 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 68.710428][ T4426] FAULT_INJECTION: forcing a failure. [ 68.710428][ T4426] name failslab, interval 1, probability 0, space 0, times 0 [ 68.723268][ T4426] CPU: 0 UID: 0 PID: 4426 Comm: syz.2.257 Tainted: G W syzkaller #0 PREEMPT(full) [ 68.723311][ T4426] Tainted: [W]=WARN [ 68.723318][ T4426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 68.723329][ T4426] Call Trace: [ 68.723334][ T4426] [ 68.723342][ T4426] __dump_stack+0x1d/0x30 [ 68.723368][ T4426] dump_stack_lvl+0x95/0xd0 [ 68.723391][ T4426] dump_stack+0x15/0x1b [ 68.723413][ T4426] should_fail_ex+0x263/0x280 [ 68.723442][ T4426] should_failslab+0x8c/0xb0 [ 68.723460][ T4426] kmem_cache_alloc_noprof+0x66/0x3f0 [ 68.723478][ T4426] ? vm_area_dup+0x33/0x2c0 [ 68.723498][ T4426] vm_area_dup+0x33/0x2c0 [ 68.723517][ T4426] __split_vma+0xe9/0x640 [ 68.723537][ T4426] vms_gather_munmap_vmas+0x2bc/0x850 [ 68.723570][ T4426] mmap_region+0x7cd/0x20d0 [ 68.723599][ T4426] ? avc_has_perm+0x101/0x190 [ 68.723629][ T4426] ? selinux_file_open+0x2e6/0x330 [ 68.723654][ T4426] ? ktime_get+0x212/0x240 [ 68.723703][ T4426] do_mmap+0x9b2/0xbd0 [ 68.723726][ T4426] ? selinux_mmap_file+0x5d/0x70 [ 68.723751][ T4426] vm_mmap_pgoff+0x183/0x2d0 [ 68.723773][ T4426] ksys_mmap_pgoff+0xc1/0x310 [ 68.723794][ T4426] ? __x64_sys_mmap+0x49/0x70 [ 68.723813][ T4426] x64_sys_call+0x14df/0x3020 [ 68.723837][ T4426] do_syscall_64+0x12c/0x3b0 [ 68.723860][ T4426] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.723879][ T4426] RIP: 0033:0x7f3632f1cdd9 [ 68.723893][ T4426] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 68.723908][ T4426] RSP: 002b:00007f363196f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 68.723925][ T4426] RAX: ffffffffffffffda RBX: 00007f3633195fa0 RCX: 00007f3632f1cdd9 [ 68.723937][ T4426] RDX: 000000000000000b RSI: 0000000000b36000 RDI: 0000200000000000 [ 68.723949][ T4426] RBP: 00007f363196f090 R08: ffffffffffffffff R09: 0000000000000000 [ 68.723963][ T4426] R10: 0000000004008032 R11: 0000000000000246 R12: 0000000000000001 [ 68.723982][ T4426] R13: 00007f3633196038 R14: 00007f3633195fa0 R15: 00007ffc448a5288 [ 68.724000][ T4426] [ 69.063700][ T4434] FAULT_INJECTION: forcing a failure. [ 69.063700][ T4434] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 69.086033][ T4434] CPU: 0 UID: 0 PID: 4434 Comm: syz.4.262 Tainted: G W syzkaller #0 PREEMPT(full) [ 69.086079][ T4434] Tainted: [W]=WARN [ 69.086142][ T4434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 69.086159][ T4434] Call Trace: [ 69.086168][ T4434] [ 69.086178][ T4434] __dump_stack+0x1d/0x30 [ 69.086218][ T4434] dump_stack_lvl+0x95/0xd0 [ 69.086323][ T4434] dump_stack+0x15/0x1b [ 69.086355][ T4434] should_fail_ex+0x263/0x280 [ 69.086445][ T4434] should_fail+0xb/0x20 [ 69.086485][ T4434] should_fail_usercopy+0x1a/0x20 [ 69.086571][ T4434] _copy_from_iter+0xcf/0xea0 [ 69.086677][ T4434] ? __tsan_memset+0x1d9/0x1f0 [ 69.086716][ T4434] ? terminate_walk+0x1e6/0x210 [ 69.086830][ T4434] ? path_openat+0x1ab2/0x2050 [ 69.086932][ T4434] tun_get_user+0x15f/0x27e0 [ 69.087038][ T4434] ? ref_tracker_alloc+0x1eb/0x2f0 [ 69.087148][ T4434] ? selinux_file_permission+0x1e1/0x320 [ 69.087186][ T4434] tun_chr_write_iter+0x15e/0x210 [ 69.087212][ T4434] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 69.087278][ T4434] vfs_write+0x5a6/0x9f0 [ 69.087344][ T4434] ksys_write+0xdc/0x1a0 [ 69.087376][ T4434] __x64_sys_write+0x40/0x50 [ 69.087451][ T4434] x64_sys_call+0x27e1/0x3020 [ 69.087488][ T4434] do_syscall_64+0x12c/0x3b0 [ 69.087546][ T4434] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.087574][ T4434] RIP: 0033:0x7fcd5cc6cdd9 [ 69.087590][ T4434] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 69.087656][ T4434] RSP: 002b:00007fcd5b6c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 69.087680][ T4434] RAX: ffffffffffffffda RBX: 00007fcd5cee5fa0 RCX: 00007fcd5cc6cdd9 [ 69.087717][ T4434] RDX: 0000000000000032 RSI: 0000200000000100 RDI: 0000000000000003 [ 69.087733][ T4434] RBP: 00007fcd5b6c7090 R08: 0000000000000000 R09: 0000000000000000 [ 69.087750][ T4434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 69.087765][ T4434] R13: 00007fcd5cee6038 R14: 00007fcd5cee5fa0 R15: 00007fff3b4bf388 [ 69.087786][ T4434] [ 69.366701][ T4447] FAULT_INJECTION: forcing a failure. [ 69.366701][ T4447] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 69.390947][ T4447] CPU: 0 UID: 0 PID: 4447 Comm: syz.2.264 Tainted: G W syzkaller #0 PREEMPT(full) [ 69.390988][ T4447] Tainted: [W]=WARN [ 69.391005][ T4447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 69.391017][ T4447] Call Trace: [ 69.391024][ T4447] [ 69.391033][ T4447] __dump_stack+0x1d/0x30 [ 69.391069][ T4447] dump_stack_lvl+0x95/0xd0 [ 69.391141][ T4447] dump_stack+0x15/0x1b [ 69.391173][ T4447] should_fail_ex+0x263/0x280 [ 69.391214][ T4447] should_fail+0xb/0x20 [ 69.391301][ T4447] should_fail_usercopy+0x1a/0x20 [ 69.391388][ T4447] _copy_to_iter+0xd2/0xea0 [ 69.391428][ T4447] ? avc_has_perm+0x101/0x190 [ 69.391480][ T4447] ? selinux_file_open+0x2e6/0x330 [ 69.391518][ T4447] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 69.391584][ T4447] __skb_datagram_iter+0x2f4/0x680 [ 69.391635][ T4447] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 69.391675][ T4447] skb_copy_datagram_iter+0x3f/0xf0 [ 69.391816][ T4447] mptcp_recvmsg+0x40e/0xfd0 [ 69.391868][ T4447] ? __pfx_mptcp_recvmsg+0x10/0x10 [ 69.391905][ T4447] inet_recvmsg+0xe1/0x210 [ 69.391943][ T4447] ? security_socket_recvmsg+0x2b/0x90 [ 69.392037][ T4447] ? __pfx_inet_recvmsg+0x10/0x10 [ 69.392069][ T4447] sock_recvmsg+0xda/0x120 [ 69.392152][ T4447] __sys_recvfrom+0x122/0x200 [ 69.392194][ T4447] __x64_sys_recvfrom+0x76/0x90 [ 69.392220][ T4447] x64_sys_call+0x2c0c/0x3020 [ 69.392292][ T4447] do_syscall_64+0x12c/0x3b0 [ 69.392324][ T4447] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.392352][ T4447] RIP: 0033:0x7f3632f1cdd9 [ 69.392443][ T4447] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 69.392466][ T4447] RSP: 002b:00007f363194e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 69.392490][ T4447] RAX: ffffffffffffffda RBX: 00007f3633196090 RCX: 00007f3632f1cdd9 [ 69.392508][ T4447] RDX: fffffffffffffc88 RSI: 0000200000000180 RDI: 0000000000000005 [ 69.392525][ T4447] RBP: 00007f363194e090 R08: 0000000000000000 R09: 0000000000000000 [ 69.392541][ T4447] R10: 0000000000000140 R11: 0000000000000246 R12: 0000000000000001 [ 69.392615][ T4447] R13: 00007f3633196128 R14: 00007f3633196090 R15: 00007ffc448a5288 [ 69.392641][ T4447] [ 69.622113][ T4450] FAULT_INJECTION: forcing a failure. [ 69.622113][ T4450] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 69.637383][ T4450] CPU: 1 UID: 0 PID: 4450 Comm: syz.0.266 Tainted: G W syzkaller #0 PREEMPT(full) [ 69.637414][ T4450] Tainted: [W]=WARN [ 69.637424][ T4450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 69.637440][ T4450] Call Trace: [ 69.637448][ T4450] [ 69.637458][ T4450] __dump_stack+0x1d/0x30 [ 69.637494][ T4450] dump_stack_lvl+0x95/0xd0 [ 69.637528][ T4450] dump_stack+0x15/0x1b [ 69.637613][ T4450] should_fail_ex+0x263/0x280 [ 69.637656][ T4450] should_fail+0xb/0x20 [ 69.637686][ T4450] should_fail_usercopy+0x1a/0x20 [ 69.637704][ T4450] _copy_to_user+0x20/0xa0 [ 69.637804][ T4450] simple_read_from_buffer+0xb5/0x130 [ 69.637835][ T4450] proc_fail_nth_read+0x10e/0x150 [ 69.637875][ T4450] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 69.637970][ T4450] vfs_read+0x1ab/0x7f0 [ 69.638003][ T4450] ? __rcu_read_unlock+0x4e/0x70 [ 69.638027][ T4450] ? __fget_files+0x184/0x1c0 [ 69.638126][ T4450] ? mutex_lock+0x57/0x90 [ 69.638163][ T4450] ksys_read+0xdc/0x1a0 [ 69.638260][ T4450] __x64_sys_read+0x40/0x50 [ 69.638296][ T4450] x64_sys_call+0x2886/0x3020 [ 69.638347][ T4450] do_syscall_64+0x12c/0x3b0 [ 69.638382][ T4450] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.638448][ T4450] RIP: 0033:0x7fcbc503d60e [ 69.638463][ T4450] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 69.638482][ T4450] RSP: 002b:00007fcbc3aadfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 69.638503][ T4450] RAX: ffffffffffffffda RBX: 00007fcbc3aae6c0 RCX: 00007fcbc503d60e [ 69.638518][ T4450] RDX: 000000000000000f RSI: 00007fcbc3aae0a0 RDI: 0000000000000003 [ 69.638538][ T4450] RBP: 00007fcbc3aae090 R08: 0000000000000000 R09: 0000000000000000 [ 69.638551][ T4450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 69.638563][ T4450] R13: 00007fcbc52f6128 R14: 00007fcbc52f6090 R15: 00007ffc369d1d58 [ 69.638645][ T4450] [ 69.838080][ T4441] loop3: detected capacity change from 0 to 164 [ 69.882047][ T4441] ISOFS: primary root directory is empty. Disabling Rock Ridge and switching to Joliet. [ 69.896574][ T28] audit: type=1400 audit(1777009038.304:334): avc: denied { bind } for pid=4453 comm="syz.4.269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 69.921346][ T4456] loop0: detected capacity change from 0 to 128 [ 69.934900][ T4456] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 69.948633][ T4456] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 69.973399][ T582] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 70.001651][ T4455] loop4: detected capacity change from 0 to 8192 [ 70.065547][ T4461] netlink: 8 bytes leftover after parsing attributes in process `syz.0.270'. [ 70.084377][ T4461] netlink: 4 bytes leftover after parsing attributes in process `syz.0.270'. [ 70.121621][ T4463] netlink: 12 bytes leftover after parsing attributes in process `syz.3.272'. [ 70.145524][ T4463] bond1: entered promiscuous mode [ 70.150916][ T4463] 8021q: adding VLAN 0 to HW filter on device bond1 [ 70.187757][ T4463] 8021q: adding VLAN 0 to HW filter on device bond1 [ 70.215028][ T4463] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 70.246123][ T4463] bond1: (slave ip6gre1): Error -95 calling set_mac_address [ 70.389178][ T28] audit: type=1400 audit(1777009038.804:335): avc: denied { setopt } for pid=4470 comm="syz.2.274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 70.573655][ T4477] loop2: detected capacity change from 0 to 512 [ 70.591614][ T4477] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 70.617235][ T4477] EXT4-fs error (device loop2): ext4_get_journal_inode:5896: inode #32: comm syz.2.274: iget: special inode unallocated [ 70.649347][ T4477] loop2: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117 [ 70.650600][ T4477] EXT4-fs (loop2): no journal found [ 70.659799][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 70.659819][ C1] EXT4-fs (loop2): initial error at time 1777009039: ext4_get_journal_inode:5896: inode 32 [ 70.659860][ C1] EXT4-fs (loop2): last error at time 1777009039: ext4_get_journal_inode:5896: inode 32 [ 70.699705][ T28] audit: type=1400 audit(1777009039.094:336): avc: denied { accept } for pid=4472 comm="syz.3.275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 70.719666][ T4477] EXT4-fs (loop2): can't get journal size [ 70.745067][ T4477] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 70.763733][ T4477] EXT4-fs error (device loop2): ext4_protect_reserved_inode:160: inode #32: comm syz.2.274: iget: special inode unallocated [ 70.795274][ T4477] loop2: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117 [ 70.795511][ T4477] EXT4-fs (loop2): failed to initialize system zone (-117) [ 70.819070][ T4480] FAULT_INJECTION: forcing a failure. [ 70.819070][ T4480] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 70.834816][ T4480] CPU: 0 UID: 0 PID: 4480 Comm: syz.5.276 Tainted: G W syzkaller #0 PREEMPT(full) [ 70.834908][ T4480] Tainted: [W]=WARN [ 70.834918][ T4480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 70.834934][ T4480] Call Trace: [ 70.834942][ T4480] [ 70.834952][ T4480] __dump_stack+0x1d/0x30 [ 70.834988][ T4480] dump_stack_lvl+0x95/0xd0 [ 70.835017][ T4480] dump_stack+0x15/0x1b [ 70.835083][ T4480] should_fail_ex+0x263/0x280 [ 70.835123][ T4480] should_fail+0xb/0x20 [ 70.835197][ T4480] should_fail_usercopy+0x1a/0x20 [ 70.835216][ T4480] _copy_from_user+0x1c/0xb0 [ 70.835293][ T4480] ___sys_sendmsg+0xc1/0x1e0 [ 70.835346][ T4480] __x64_sys_sendmsg+0xd4/0x160 [ 70.835379][ T4480] x64_sys_call+0x194c/0x3020 [ 70.835409][ T4480] do_syscall_64+0x12c/0x3b0 [ 70.835510][ T4480] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.835533][ T4480] RIP: 0033:0x7f84251acdd9 [ 70.835549][ T4480] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 70.835567][ T4480] RSP: 002b:00007f8423bff028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 70.835587][ T4480] RAX: ffffffffffffffda RBX: 00007f8425425fa0 RCX: 00007f84251acdd9 [ 70.835601][ T4480] RDX: 0000000000004004 RSI: 0000200000000200 RDI: 0000000000000003 [ 70.835649][ T4480] RBP: 00007f8423bff090 R08: 0000000000000000 R09: 0000000000000000 [ 70.835662][ T4480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 70.835674][ T4480] R13: 00007f8425426038 R14: 00007f8425425fa0 R15: 00007ffccfb30eb8 [ 70.835695][ T4480] [ 70.859714][ T4477] EXT4-fs (loop2): mount failed [ 71.033999][ T4477] Cannot find set identified by id 0 to match [ 71.049805][ T28] audit: type=1400 audit(1777009039.464:337): avc: denied { bind } for pid=4470 comm="syz.2.274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 71.090774][ T4473] FAT-fs (loop3): codepage cp852 not found [ 71.103213][ T4482] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.110486][ T4482] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.272899][ T4482] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 71.288206][ T4482] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 71.357460][ T2008] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.379691][ T2008] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.408252][ T582] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.423619][ T582] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.495034][ T28] audit: type=1400 audit(1777009039.904:338): avc: denied { setopt } for pid=4499 comm="syz.2.283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 71.515342][ T28] audit: type=1400 audit(1777009039.934:339): avc: denied { read } for pid=4499 comm="syz.2.283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 71.825602][ T4517] netlink: 8 bytes leftover after parsing attributes in process `syz.3.289'. [ 71.876661][ T4509] set_capacity_and_notify: 1 callbacks suppressed [ 71.876696][ T4509] loop5: detected capacity change from 0 to 512 [ 71.908896][ T4509] EXT4-fs: Ignoring removed oldalloc option [ 71.929952][ T4509] EXT4-fs (loop5): filesystem is read-only [ 71.938992][ T4509] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 71.962057][ T4509] EXT4-fs (loop5): filesystem is read-only [ 71.970115][ T4509] EXT4-fs (loop5): orphan cleanup on readonly fs [ 71.982932][ T4509] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.286: bg 0: block 64: padding at end of block bitmap is not set [ 71.998836][ T4509] loop5: lost filesystem error report for type 5 error -117 [ 72.001808][ T4509] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 72.010018][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 72.010168][ C0] EXT4-fs (loop5): initial error at time 1777009040: ext4_validate_block_bitmap:441 [ 72.010426][ C0] EXT4-fs (loop5): last error at time 1777009040: ext4_validate_block_bitmap:441 [ 72.047479][ T4509] loop5: lost filesystem error report for type 5 error -117 [ 72.051386][ T4509] EXT4-fs (loop5): 1 orphan inode deleted [ 72.083259][ T4509] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 72.156817][ T4524] netlink: 844 bytes leftover after parsing attributes in process `syz.3.292'. [ 72.427743][ T4540] loop2: detected capacity change from 0 to 1764 [ 72.445382][ T4540] iso9660: Unknown parameter '0xffffffffffffffff' [ 72.555567][ T4541] loop4: detected capacity change from 0 to 512 [ 74.425194][ T4541] EXT4-fs warning (device loop4): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 74.440930][ T4541] EXT4-fs (loop4): mount failed [ 74.459822][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 74.459839][ T28] audit: type=1400 audit(1777009042.694:343): avc: denied { create } for pid=4539 comm="syz.2.297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 74.793795][ T4184] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.669608][ T28] audit: type=1400 audit(1777009044.084:344): avc: denied { write } for pid=4560 comm="syz.3.300" name="001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 75.788322][ T4567] netlink: 4 bytes leftover after parsing attributes in process `syz.5.299'. [ 75.956335][ T4578] bridge_slave_0: left allmulticast mode [ 75.971518][ T4578] bridge_slave_0: left promiscuous mode [ 75.985629][ T4578] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.000460][ T4578] bridge_slave_1: left allmulticast mode [ 76.013481][ T4578] bridge_slave_1: left promiscuous mode [ 76.022188][ T4578] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.033414][ T4578] bond0: (slave bond_slave_0): Releasing backup interface [ 76.051608][ T4578] bond0: (slave bond_slave_1): Releasing backup interface [ 76.063123][ T4578] team0: Port device team_slave_0 removed [ 76.074958][ T4578] team0: Port device team_slave_1 removed [ 76.081701][ T4578] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 76.090977][ T4578] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 76.108494][ T4578] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 76.171058][ T4594] loop0: detected capacity change from 0 to 128 [ 76.186261][ T4594] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 76.208679][ T4594] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 76.237353][ T4594] netlink: 'syz.0.310': attribute type 7 has an invalid length. [ 76.264581][ T28] audit: type=1400 audit(1777009044.674:345): avc: denied { read } for pid=4593 comm="syz.0.310" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 76.432916][ T4609] netlink: 4 bytes leftover after parsing attributes in process `syz.2.315'. [ 76.443655][ T28] audit: type=1400 audit(1777009044.844:346): avc: denied { getopt } for pid=4593 comm="syz.0.310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 76.486054][ T28] audit: type=1400 audit(1777009044.844:347): avc: denied { setopt } for pid=4593 comm="syz.0.310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 76.700079][ T582] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 76.745175][ T4618] loop4: detected capacity change from 0 to 512 [ 76.852049][ T4632] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 77.077129][ T4637] loop2: detected capacity change from 0 to 512 [ 77.129134][ T4637] EXT4-fs: Ignoring removed nomblk_io_submit option [ 77.253934][ T28] audit: type=1400 audit(1777009045.664:348): avc: denied { write } for pid=4654 comm="syz.0.325" path="socket:[8108]" dev="sockfs" ino=8108 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 77.306896][ T4664] loop0: detected capacity change from 0 to 512 [ 77.336340][ T4637] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #15: comm syz.2.321: corrupted inode contents [ 77.353393][ T4637] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 77.355199][ T4637] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 77.365089][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 77.365259][ C0] EXT4-fs (loop2): initial error at time 1777009045: ext4_do_update_inode:5690: inode 15 [ 77.365829][ C0] EXT4-fs (loop2): last error at time 1777009045: ext4_do_update_inode:5690: inode 15 [ 77.393315][ T4646] loop5: detected capacity change from 0 to 512 [ 77.414198][ T4637] loop2: lost filesystem error report for type 5 error -117 [ 77.416804][ T4637] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #15: comm syz.2.321: corrupted inode contents [ 77.438437][ T4637] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 77.440398][ T4637] EXT4-fs error (device loop2): ext4_evict_inode:315: inode #15: comm syz.2.321: mark_inode_dirty error [ 77.458405][ T4646] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 77.500531][ T4637] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 77.507731][ T4637] EXT4-fs (loop2): 1 orphan inode deleted [ 77.592415][ T28] audit: type=1400 audit(1777009046.004:349): avc: denied { write } for pid=4670 comm="syz.4.327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 77.628613][ T4646] EXT4-fs (loop5): 1 truncate cleaned up [ 77.715490][ T4664] netlink: 4 bytes leftover after parsing attributes in process `syz.0.326'. [ 77.725975][ T4637] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.737262][ T4646] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.801527][ T28] audit: type=1400 audit(1777009046.214:350): avc: denied { append } for pid=4688 comm="syz.4.329" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 77.934089][ T28] audit: type=1400 audit(1777009046.344:351): avc: denied { read } for pid=4645 comm="syz.5.324" name="mISDNtimer" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 77.968598][ T28] audit: type=1400 audit(1777009046.344:352): avc: denied { open } for pid=4645 comm="syz.5.324" path="/dev/mISDNtimer" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 78.013701][ T3328] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.064215][ T4646] EXT4-fs error (device loop5): ext4_generic_delete_entry:2673: inode #2: block 13: comm syz.5.324: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 78.096035][ T4702] netlink: 24 bytes leftover after parsing attributes in process `syz.0.334'. [ 78.106857][ T4646] EXT4-fs (loop5): Remounting filesystem read-only [ 78.129379][ T4646] EXT4-fs warning (device loop5): ext4_rename_delete:3739: inode #2: comm syz.5.324: Deleting old file: nlink 5, error=-117 [ 78.191809][ T4702] netlink: 4 bytes leftover after parsing attributes in process `syz.0.334'. [ 78.238296][ T4184] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.309307][ T4703] netlink: 104 bytes leftover after parsing attributes in process `syz.0.334'. [ 78.356646][ T4713] xt_TPROXY: Can be used only with -p tcp or -p udp [ 78.622350][ T4719] loop4: detected capacity change from 0 to 1024 [ 78.825195][ T4717] bridge0: entered promiscuous mode [ 78.993047][ T4740] loop0: detected capacity change from 0 to 512 [ 79.007068][ T4740] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #12: comm syz.0.343: missing EA_INODE flag [ 79.020960][ T4740] loop0: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 79.032746][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 79.048388][ C1] EXT4-fs (loop0): initial error at time 1777009047: ext4_xattr_inode_iget:441: inode 12 [ 79.058461][ C1] EXT4-fs (loop0): last error at time 1777009047: ext4_xattr_inode_iget:441: inode 12 [ 79.071309][ T4740] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.343: error while reading EA inode 12 err=-117 [ 79.089021][ T4740] loop0: lost filesystem error report for type 5 error -117 [ 79.089235][ T4740] EXT4-fs (loop0): 1 orphan inode deleted [ 79.113127][ T4740] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.224666][ T3324] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.330969][ T4760] netlink: 12 bytes leftover after parsing attributes in process `syz.0.346'. [ 79.424013][ T4769] loop3: detected capacity change from 0 to 1024 [ 79.445139][ T4769] EXT4-fs: Ignoring removed bh option [ 79.457604][ T4769] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 79.481201][ T4769] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e84ce028, mo2=0000] [ 79.490584][ T4769] System zones: 0-1, 3-12 [ 79.496061][ T4769] EXT4-fs error (device loop3): ext4_map_blocks:833: inode #3: block 1: comm syz.3.348: lblock 1 mapped to illegal pblock 1 (length 1) [ 79.510372][ T4769] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 79.510507][ T4769] EXT4-fs (loop3): Remounting filesystem read-only [ 79.519691][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 79.519730][ C0] EXT4-fs (loop3): initial error at time 1777009047: ext4_map_blocks:833: inode 3: block 1 [ 79.519766][ C0] EXT4-fs (loop3): last error at time 1777009047: ext4_map_blocks:833: inode 3: block 1 [ 79.553243][ T4769] __quota_error: 15 callbacks suppressed [ 79.553283][ T4769] Quota error (device loop3): write_blk: dquota write failed [ 79.558688][ T28] audit: type=1400 audit(1777009047.896:368): avc: denied { mac_admin } for pid=4774 comm="syz.5.353" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 79.559078][ T4769] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 79.567565][ T4776] SELinux: Context system_u:object_r:systemd_logger_exec_t:s0 is not valid (left unmapped). [ 79.587715][ T4769] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 79.616471][ T4769] EXT4-fs (loop3): 1 orphan inode deleted [ 79.622840][ T4769] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.647163][ T4778] loop0: detected capacity change from 0 to 2048 [ 79.654142][ T4769] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.665381][ T28] audit: type=1400 audit(1777009047.999:369): avc: denied { relabelto } for pid=4774 comm="syz.5.353" name="16" dev="tmpfs" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 79.665460][ T4776] netlink: 'syz.5.353': attribute type 4 has an invalid length. [ 79.711724][ T4778] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.720760][ T28] audit: type=1400 audit(1777009047.999:370): avc: denied { associate } for pid=4774 comm="syz.5.353" name="16" dev="tmpfs" ino=96 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 79.752378][ T4782] netlink: 'syz.5.353': attribute type 4 has an invalid length. [ 79.767232][ T4778] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 79.782052][ T4778] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 17 with error 28 [ 79.794652][ T4778] EXT4-fs (loop0): This should not happen!! Data will be lost [ 79.794652][ T4778] [ 79.804753][ T4778] EXT4-fs (loop0): Total free blocks count 0 [ 79.812917][ T4778] EXT4-fs (loop0): Free/Dirty block details [ 79.825008][ T4762] veth3: entered allmulticast mode [ 79.843560][ T4778] EXT4-fs (loop0): free_blocks=4096 [ 79.848969][ T4778] EXT4-fs (loop0): dirty_blocks=32 [ 79.854433][ T4778] EXT4-fs (loop0): Block reservation details [ 79.861116][ T4778] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 79.946887][ T3324] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 79.974060][ T3324] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.048898][ T28] audit: type=1400 audit(1777009048.355:371): avc: denied { bind } for pid=4794 comm="syz.0.358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 80.070400][ T28] audit: type=1400 audit(1777009048.373:372): avc: denied { setopt } for pid=4794 comm="syz.0.358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 80.108725][ T28] audit: type=1400 audit(1777009048.411:373): avc: denied { remove_name } for pid=4184 comm="syz-executor" name="binderfs" dev="tmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 80.190242][ T28] audit: type=1400 audit(1777009048.411:374): avc: denied { rmdir } for pid=4184 comm="syz-executor" name="16" dev="tmpfs" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 80.397928][ T4818] lo speed is unknown, defaulting to 1000 [ 80.419187][ T4818] lo speed is unknown, defaulting to 1000 [ 80.452352][ T4818] lo speed is unknown, defaulting to 1000 [ 80.474157][ T4818] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 80.518408][ T4818] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 80.544320][ T4818] lo speed is unknown, defaulting to 1000 [ 80.554132][ T4818] lo speed is unknown, defaulting to 1000 [ 80.560248][ T4818] lo speed is unknown, defaulting to 1000 [ 80.567135][ T4818] lo speed is unknown, defaulting to 1000 [ 80.573588][ T4818] lo speed is unknown, defaulting to 1000 [ 80.700092][ T4852] netlink: 'syz.0.370': attribute type 1 has an invalid length. [ 80.735827][ T4856] netlink: 'syz.2.372': attribute type 1 has an invalid length. [ 80.750509][ T4852] 8021q: adding VLAN 0 to HW filter on device bond1 [ 80.779444][ T4856] 8021q: adding VLAN 0 to HW filter on device bond1 [ 80.790676][ T4852] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 80.818095][ T4856] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 81.101814][ T4875] netlink: 'syz.2.381': attribute type 1 has an invalid length. [ 81.186719][ T4875] bond2: entered promiscuous mode [ 81.214887][ T4875] 8021q: adding VLAN 0 to HW filter on device bond2 [ 81.309780][ T4870] loop3: detected capacity change from 0 to 512 [ 81.337945][ T4875] 8021q: adding VLAN 0 to HW filter on device bond2 [ 81.379157][ T4875] bond2: (slave vcan1): The slave device specified does not support setting the MAC address [ 81.402399][ T4870] EXT4-fs: Ignoring removed oldalloc option [ 81.422118][ T4875] bond2: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 81.440689][ T4870] EXT4-fs (loop3): filesystem is read-only [ 81.448686][ T4870] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 81.464666][ T4875] bond2: (slave vcan1): making interface the new active one [ 81.479222][ T4875] vcan1: entered promiscuous mode [ 81.486511][ T4875] bond2: (slave vcan1): Enslaving as an active interface with an up link [ 81.492932][ T4870] EXT4-fs (loop3): filesystem is read-only [ 81.526474][ T4870] EXT4-fs (loop3): orphan cleanup on readonly fs [ 81.546324][ T4870] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.378: bg 0: block 64: padding at end of block bitmap is not set [ 81.564199][ T4870] loop3: lost filesystem error report for type 5 error -117 [ 81.567046][ T4870] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 81.576182][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 81.576384][ C1] EXT4-fs (loop3): initial error at time 1777009049: ext4_validate_block_bitmap:441 [ 81.576578][ C1] EXT4-fs (loop3): last error at time 1777009049: ext4_validate_block_bitmap:441 [ 81.616763][ T4870] loop3: lost filesystem error report for type 5 error -117 [ 81.618012][ T4870] EXT4-fs (loop3): 1 orphan inode deleted [ 81.644843][ T4870] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 81.715153][ T4907] veth0_to_team: entered promiscuous mode [ 81.726275][ T4907] netlink: 8 bytes leftover after parsing attributes in process `syz.2.382'. [ 81.860189][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.010515][ T4937] syzkaller0: entered promiscuous mode [ 82.010583][ T4937] syzkaller0: entered allmulticast mode [ 82.038460][ T4939] netlink: 4 bytes leftover after parsing attributes in process `syz.5.387'. [ 82.393950][ T4947] loop3: detected capacity change from 0 to 512 [ 82.455599][ T4947] EXT4-fs (loop3): 1 orphan inode deleted [ 82.490311][ T877] EXT4-fs error (device loop3): ext4_release_dquot:7070: comm kworker/u8:7: Failed to release dquot type 1 [ 82.508624][ T877] loop3: lost filesystem error report for type 5 error -117 [ 82.513676][ T4947] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.565606][ T4947] ext4 filesystem being mounted at /84/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.654131][ T4973] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.661695][ T4973] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.773709][ T4973] bond1: (slave dummy0): Releasing backup interface [ 82.831410][ T4973] bridge_slave_0: left allmulticast mode [ 82.837715][ T4973] bridge_slave_0: left promiscuous mode [ 82.843587][ T4973] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.892603][ T4973] bridge_slave_1: left allmulticast mode [ 83.005975][ T4981] loop4: detected capacity change from 0 to 512 [ 83.042879][ T4973] bridge_slave_1: left promiscuous mode [ 83.080072][ T4973] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.099855][ T4981] EXT4-fs warning (device loop4): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 83.117211][ T4981] EXT4-fs (loop4): mount failed [ 83.307761][ T4973] bond0: (slave bond_slave_0): Releasing backup interface [ 83.411848][ T4973] bond0: (slave bond_slave_1): Releasing backup interface [ 83.544121][ T4973] team0: Port device team_slave_0 removed [ 83.576085][ T4973] team0: Port device team_slave_1 removed [ 83.601488][ T4973] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 83.634860][ T4973] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 83.668845][ T4973] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 83.698970][ T4973] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 83.738429][ T4973] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 83.875271][ T4975] lo speed is unknown, defaulting to 1000 [ 84.072614][ T4986] netlink: 'syz.2.396': attribute type 1 has an invalid length. [ 84.097219][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.110232][ T4986] 8021q: adding VLAN 0 to HW filter on device bond3 [ 84.126406][ T4986] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 84.177293][ T4989] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.205162][ T4989] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.214956][ T4991] netlink: 4 bytes leftover after parsing attributes in process `syz.2.398'. [ 84.231145][ T4991] bond3: (slave dummy0): Releasing backup interface [ 84.335703][ T4993] syzkaller0: entered promiscuous mode [ 84.341543][ T4993] syzkaller0: entered allmulticast mode [ 84.347618][ T4878] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 84.572190][ T5008] netlink: 8 bytes leftover after parsing attributes in process `syz.0.404'. [ 84.601641][ T5008] netlink: 4 bytes leftover after parsing attributes in process `syz.0.404'. [ 84.809923][ T5014] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14592 sclass=netlink_route_socket pid=5014 comm=syz.4.405 [ 84.830317][ T5014] loop4: detected capacity change from 0 to 1024 [ 84.838449][ T5014] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 84.847299][ T5014] EXT4-fs (loop4): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 84.858470][ T5014] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #3: block 2: comm syz.4.405: lblock 2 mapped to illegal pblock 2 (length 1) [ 84.873457][ T5014] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 84.873577][ T5014] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #3: block 48: comm syz.4.405: lblock 0 mapped to illegal pblock 48 (length 1) [ 84.882669][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 84.882713][ C1] EXT4-fs (loop4): initial error at time 1777009052: ext4_map_blocks:791: inode 3: block 2 [ 84.882759][ C1] EXT4-fs (loop4): last error at time 1777009052: ext4_map_blocks:791: inode 3: block 2 [ 84.923027][ T5014] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 84.923305][ T5014] __quota_error: 19 callbacks suppressed [ 84.923405][ T5014] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 84.947237][ T5014] EXT4-fs error (device loop4): ext4_acquire_dquot:7034: comm syz.4.405: Failed to acquire dquot type 0 [ 84.958505][ T5014] loop4: lost filesystem error report for type 5 error -117 [ 84.958649][ T5014] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 84.958673][ T5014] loop4: lost filesystem error report for type 5 error -117 [ 84.959346][ T5014] EXT4-fs error (device loop4): ext4_evict_inode:267: inode #11: comm syz.4.405: mark_inode_dirty error [ 85.001531][ T5014] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 85.004167][ T5014] EXT4-fs warning (device loop4): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 85.024592][ T5014] EXT4-fs (loop4): 1 orphan inode deleted [ 85.031166][ T5014] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.043269][ T877] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 85.059216][ T877] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 85.067864][ T877] EXT4-fs error (device loop4): ext4_release_dquot:7070: comm kworker/u8:7: Failed to release dquot type 0 [ 85.126177][ T28] audit: type=1326 audit(1777009053.109:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5022 comm="syz.3.409" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f11269dcdd9 code=0x0 [ 85.235105][ T5024] netlink: 'syz.3.409': attribute type 1 has an invalid length. [ 85.392712][ T28] audit: type=1400 audit(1777009053.361:393): avc: denied { getopt } for pid=5027 comm="syz.2.410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 85.417156][ T28] audit: type=1404 audit(1777009053.380:394): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 85.432828][ T28] audit: type=1400 audit(1777009053.380:395): avc: denied { open } for pid=5025 comm="syz.5.411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 85.452548][ T28] audit: type=1400 audit(1777009053.380:396): avc: denied { allowed } for pid=5025 comm="syz.5.411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 85.471992][ T28] audit: type=1400 audit(1777009053.417:397): avc: denied { ioctl } for pid=5027 comm="syz.2.410" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=0 [ 85.496877][ T28] audit: type=1400 audit(1777009053.417:398): avc: denied { ioctl } for pid=5027 comm="syz.2.410" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x7435 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=0 [ 85.524985][ T28] audit: type=1400 audit(1777009053.474:399): avc: denied { read write } for pid=4184 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 85.664399][ T5034] syzkaller0: entered promiscuous mode [ 85.670422][ T5034] syzkaller0: entered allmulticast mode [ 85.684667][ T3332] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.698808][ T582] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 85.713332][ T582] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 85.713496][ T582] EXT4-fs error (device loop4): ext4_release_dquot:7070: comm kworker/u8:6: Failed to release dquot type 0 [ 85.738928][ T582] loop4: lost filesystem error report for type 5 error -117 [ 85.739251][ T3332] EXT4-fs error (device loop4): __ext4_get_inode_loc:4885: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 85.759870][ T3332] loop4: lost filesystem error report for type 5 error -117 [ 85.760078][ T3332] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 85.777124][ T3332] loop4: lost filesystem error report for type 5 error -117 [ 85.777228][ T3332] EXT4-fs error (device loop4): ext4_quota_off:7318: inode #3: comm syz-executor: mark_inode_dirty error [ 85.796051][ T3332] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 85.861720][ T877] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.922719][ T5061] netlink: 8 bytes leftover after parsing attributes in process `syz.2.429'. [ 85.943293][ T877] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.001470][ T877] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.037604][ T5059] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5059 comm=syz.2.429 [ 86.055880][ T877] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.216689][ T877] bond0 (unregistering): Released all slaves [ 86.263744][ T877] hsr_slave_0: left promiscuous mode [ 86.269749][ T877] hsr_slave_1: left promiscuous mode [ 86.276730][ T877] veth1_macvtap: left promiscuous mode [ 86.282721][ T877] veth0_macvtap: left promiscuous mode [ 86.288495][ T877] veth1_vlan: left promiscuous mode [ 86.295212][ T877] veth0_vlan: left promiscuous mode [ 86.494227][ T5077] syzkaller0: entered promiscuous mode [ 86.499867][ T5077] syzkaller0: entered allmulticast mode [ 89.400336][ T5113] syzkaller0: entered promiscuous mode [ 89.406161][ T5113] syzkaller0: entered allmulticast mode [ 90.274570][ T28] kauditd_printk_skb: 35829 callbacks suppressed [ 90.274588][ T28] audit: type=1400 audit(1777009057.919:36228): avc: denied { read } for pid=3052 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 90.292927][ T3052] audit: audit_backlog=65 > audit_backlog_limit=64 [ 90.302964][ T28] audit: type=1400 audit(1777009057.928:36229): avc: denied { read } for pid=3052 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 90.309770][ T3052] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 90.331701][ T28] audit: type=1400 audit(1777009057.928:36230): avc: denied { read } for pid=3052 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 90.338132][ T3052] audit: backlog limit exceeded [ 90.363146][ T28] audit: type=1400 audit(1777009057.928:36231): avc: denied { read } for pid=3052 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 90.387277][ T3052] audit: audit_backlog=65 > audit_backlog_limit=64 [ 90.394069][ T3052] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 90.401749][ T3052] audit: backlog limit exceeded [ 90.431949][ T5123] xt_TPROXY: Can be used only with -p tcp or -p udp [ 92.753275][ T5146] syzkaller0: entered promiscuous mode [ 92.760019][ T5146] syzkaller0: entered allmulticast mode [ 94.012682][ T5150] netlink: 20 bytes leftover after parsing attributes in process `syz.5.463'. [ 94.018506][ T5156] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 94.067746][ T5156] lo speed is unknown, defaulting to 1000 [ 95.628311][ T28] kauditd_printk_skb: 46587 callbacks suppressed [ 95.628342][ T28] audit: type=1400 audit(1777009062.934:82465): avc: denied { read } for pid=3052 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 95.646415][ T3052] audit: audit_backlog=65 > audit_backlog_limit=64 [ 95.663085][ T3052] audit: audit_lost=121 audit_rate_limit=0 audit_backlog_limit=64 [ 95.671088][ T3052] audit: backlog limit exceeded [ 95.676157][ T3052] audit: audit_backlog=65 > audit_backlog_limit=64 [ 95.681877][ T28] audit: type=1400 audit(1777009062.934:82466): avc: denied { read } for pid=3052 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 95.683372][ T3052] audit: audit_lost=122 audit_rate_limit=0 audit_backlog_limit=64 [ 95.711875][ T3052] audit: backlog limit exceeded [ 95.717160][ T3052] audit: audit_backlog=65 > audit_backlog_limit=64 [ 95.723877][ T3052] audit: audit_lost=123 audit_rate_limit=0 audit_backlog_limit=64 [ 96.247776][ T3324] ================================================================== [ 96.255931][ T3324] BUG: KCSAN: data-race in shmem_getattr / shmem_recalc_inode [ 96.263428][ T3324] [ 96.265784][ T3324] read-write to 0xffff88811b791da0 of 8 bytes by task 5170 on cpu 1: [ 96.273877][ T3324] shmem_recalc_inode+0x3f/0x1f0 [ 96.278851][ T3324] shmem_get_folio_gfp+0x7a8/0xd60 [ 96.284092][ T3324] shmem_write_begin+0xfc/0x1f0 [ 96.288984][ T3324] generic_perform_write+0x183/0x490 [ 96.294309][ T3324] shmem_file_write_iter+0xc5/0xf0 [ 96.299473][ T3324] __kernel_write_iter+0x319/0x590 [ 96.304628][ T3324] dump_user_range+0xa73/0xd00 [ 96.309435][ T3324] elf_core_dump+0x21a2/0x2330 [ 96.314245][ T3324] coredump_write+0xacc/0xdd0 [ 96.318963][ T3324] vfs_coredump+0x26dd/0x31e0 [ 96.323688][ T3324] get_signal+0xd5c/0xf20 [ 96.328065][ T3324] arch_do_signal_or_restart+0x96/0x450 [ 96.333659][ T3324] irqentry_exit+0x140/0x5b0 [ 96.338280][ T3324] asm_exc_page_fault+0x26/0x30 [ 96.343165][ T3324] [ 96.345516][ T3324] read to 0xffff88811b791da0 of 8 bytes by task 3324 on cpu 0: [ 96.353087][ T3324] shmem_getattr+0x41/0x200 [ 96.357626][ T3324] vfs_getattr_nosec+0x146/0x1e0 [ 96.362600][ T3324] vfs_getattr+0x48/0x60 [ 96.366890][ T3324] vfs_statx_path+0x28/0x140 [ 96.371524][ T3324] vfs_statx+0xc4/0x170 [ 96.375714][ T3324] vfs_fstatat+0x118/0x170 [ 96.380167][ T3324] __se_sys_newfstatat+0x55/0x3e0 [ 96.385241][ T3324] __x64_sys_newfstatat+0x55/0x70 [ 96.390312][ T3324] x64_sys_call+0x2c64/0x3020 [ 96.395049][ T3324] do_syscall_64+0x12c/0x3b0 [ 96.399673][ T3324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.405629][ T3324] [ 96.408064][ T3324] value changed: 0x0000000000001722 -> 0x0000000000001725 [ 96.415210][ T3324] [ 96.417562][ T3324] Reported by Kernel Concurrency Sanitizer on: [ 96.423745][ T3324] CPU: 0 UID: 0 PID: 3324 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(full) [ 96.434829][ T3324] Tainted: [W]=WARN [ 96.438661][ T3324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 96.449190][ T3324] ================================================================== [ 97.185036][ T54] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.255512][ T54] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.329653][ T54] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.373480][ T54] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.596276][ T54] bond0 (unregistering): Released all slaves [ 97.618755][ T54] bond1 (unregistering): Released all slaves [ 97.675229][ T54] hsr_slave_0: left promiscuous mode [ 97.691153][ T54] hsr_slave_1: left promiscuous mode [ 97.704126][ T54] veth1_macvtap: left promiscuous mode [ 97.722783][ T54] veth0_macvtap: left promiscuous mode [ 97.728403][ T54] veth1_vlan: left promiscuous mode [ 97.744096][ T54] veth0_vlan: left promiscuous mode [ 98.175071][ T54] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.248715][ T54] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.312814][ T54] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.377184][ T54] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.750248][ T54] bond0 (unregistering): Released all slaves [ 98.758875][ T54] bond1 (unregistering): (slave dummy0): Releasing backup interface [ 98.768506][ T54] bond1 (unregistering): Released all slaves [ 98.835986][ T54] bond0 (unregistering): Released all slaves [ 98.897839][ T54] hsr_slave_0: left promiscuous mode [ 98.903790][ T54] hsr_slave_1: left promiscuous mode [ 98.912580][ T54] hsr_slave_0: left promiscuous mode [ 98.918281][ T54] hsr_slave_1: left promiscuous mode [ 98.924990][ T54] veth1_macvtap: left promiscuous mode [ 98.930616][ T54] veth0_macvtap: left promiscuous mode [ 98.936241][ T54] veth1_vlan: left promiscuous mode [ 98.942074][ T54] veth0_vlan: left promiscuous mode [ 100.981996][ T28] kauditd_printk_skb: 40791 callbacks suppressed [ 100.982078][ T28] audit: type=1400 audit(1777009067.941:123257): avc: denied { read } for pid=3052 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 100.998597][ T3052] audit: audit_backlog=65 > audit_backlog_limit=64 [ 101.011010][ T28] audit: type=1400 audit(1777009067.950:123258): avc: denied { read } for pid=3052 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 101.016918][ T3052] audit: audit_lost=124 audit_rate_limit=0 audit_backlog_limit=64 [ 101.039707][ T28] audit: type=1400 audit(1777009067.950:123259): avc: denied { read } for pid=3052 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 101.046139][ T3052] audit: backlog limit exceeded [ 101.068876][ T28] audit: type=1400 audit(1777009067.950:123260): avc: denied { read } for pid=3052 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 101.073046][ T3052] audit: audit_backlog=65 > audit_backlog_limit=64 [ 101.093874][ T28] audit: type=1400 audit(1777009067.950:123261): avc: denied { read } for pid=3052 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 101.100430][ T3052] audit: audit_lost=125 audit_rate_limit=0 audit_backlog_limit=64