last executing test programs: 1.964694236s ago: executing program 4 (id=968): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)="e21e7ef90ede0b91df67c0aee3c17999185c591a96011ce93d009cc4d1f17f087e850d25f8964a3541ae79803e91a3ab91785542590784186a9ea2a35e5f579067a607ad702003437a9d559e7b1e4cd28c18b40f5f3c41db94ef8c7b3d5b230d8e4ae80d9ed8468f9b8ff14562339efd73a5f23ea845cded968225530e14153ede9ce52bd52bcdd5652d2f79e092ac16a5dbdaf30e8db492353827e76c10809a7baffcc4e7a150c05472cfba55862a548c601ebee2a011ca1deaa277176ee4d27bc3d71a238c8cb5e23d2221797a8e4b632345a7cbd6339160159b94301655749377ff", 0xe3}, {&(0x7f0000000500)="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", 0x1000}], 0x2, &(0x7f0000000240)=[@ip_ttl={{0x14, 0x0, 0x2, 0x101}}], 0x18}, 0xc000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) timer_gettime(0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071114200000000008510000002000000850000000500000095000d00000000009500a50000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) rt_sigprocmask(0x2, &(0x7f00000002c0)={[0x8]}, &(0x7f0000000300), 0x8) r1 = getpid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0xfd, 0x0, 0x7fff0000}]}) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x4e21, @private=0xa010102}], 0x10) readv(r2, &(0x7f0000000600)=[{&(0x7f0000000180)=""/135, 0x87}], 0x1) setsockopt(r2, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r0, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001b40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) io_setup(0x2278, &(0x7f0000000180)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000000)='I', 0x1}], 0x1) io_submit(r3, 0x2, &(0x7f0000000140)=[&(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0x0, r5, 0x0, 0x2d, 0x0, 0x0, 0x2}, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x5, 0x0, r5, 0x0}]) ioctl$BTRFS_IOC_FS_INFO(r0, 0x8400941f, &(0x7f0000001500)) 1.354167475s ago: executing program 2 (id=977): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0xffffffffffffffef, 0x0, 0x240008c4}, 0x4054) socket(0x10, 0x3, 0x0) 1.197822655s ago: executing program 2 (id=979): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x12, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.142809512s ago: executing program 2 (id=982): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}]}], {0x14, 0x10, 0x1, 0x11000000, 0x0, {0x0, 0x84}}}, 0x6c}}, 0x0) 1.142141242s ago: executing program 4 (id=983): timer_create(0x3, 0x0, &(0x7f00000001c0)=0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = fsopen(&(0x7f00000004c0)='mqueue\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000040)='\x00', &(0x7f00000001c0)='dE\x00', 0x0) readv(r1, &(0x7f00000027c0)=[{&(0x7f0000000500)=""/4088, 0xff8}], 0x1) timer_delete(r0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'vlan0\x00'}) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x4800) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x105042, 0x0) splice(r3, 0x0, r4, 0x0, 0x1fffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)={0x0, 0x0, 0xd, 0x3}) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000001580)={[{@i_version}, {@nogrpid}, {@bh}, {@block_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x100}}, {@dax_never}]}, 0x1, 0x51d, &(0x7f0000000200)="$eJzs3c9vHFcdAPDvTLK2k7h1WnoABG1oCwFFWceb1qp6gHJCCFVC9AhSauyNZXnXa3nXpTaRcM9ckajECY78AZx74s4FwY1LOSDxwwLVSBwGzezY2di79uaHvZb385FG89688X7fizPvzbxd7wtgbN2IiJ2ImIiI9yNipjyelFu8093y8z7bfbC4t/tgMYkse++fSVGeH4uen8ldK19zKiJ+8J2IHydH47a3tlcXGo36Rpmf7TTXZ9tb27dXmgvL9eX6Wq02Pzd/5627b9YeozVTx5a+0pwoU1/+9A873/hpXq3p8khvO56lbtMrB3FylyPie6cRbAQule2ZGHVFeCJpRLwYEa8W1/9MXCp+mwDARZZlM5HN9OYBgIsuLebAkrRazgVMR5pWq905vJfiatpotTu37rc215a6c2XXo5LeX2nU75RzhdejkuT5uSL9MF87lL8bES9ExC8mrxT56mKrsTTKGx8AGGPXDo3//5nsjv8AwAV3/MdmAICLyPgPAOPH+A8A48f4DwDjpzv+X3ncH8uy7GenUR0A4Ax4/geA8WP8B4Cx8v133823bK/8/uulD7Y2V1sf3F6qt1erzc3F6mJrY7263GotF9/Z0zzp9Rqt1vrcG7H54fVvrrc7s+2t7XvN1uZa517xvd736pXirJ0zaBkAMMgLr3zy5yQfkd++UmzRs5ZDZaQ1A05bOuoKACNzadQVAEbGal8wvh4+4z/2hwBMD8AF0WeJ3kdM9fsDoSzLstOrEnDKbn7B/D+Mq575f58ChjFz0vx/sTawNwnhQjL/D+Mry5Jh1/yPYU8EAM63Y+b4r5/lfQgwOgPe/3+x3P+2fHPgR0uHz/j4NGsFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA59v++r/Vcpnf6UjTajXiuWIBoEpyf6VRvxMRz0fEnyYrk3l+bsR1BgCeVvq3pFz/6+bM69OPFL187SA5ERE/+dV7v/xwodPZ+GPERPKvyf3jnY/L47UTg02dRgsAgOPtj9PFvudB/rPdB4v721nW5+/f7t4V5HH3didi7yD+5bhc7KeiEhFX/52U+a6kZ+7iaex8FBGf79f+JKaLOZDuLcvh+Hns5840fvpI/LRcoDkt/y0+9wzqAuPmk7z/eaff9ZfGjWLf//qfKnqop1f2f/lLLe4VfeDD+Pv936UB/d+NYWO88fvvdlNXjpZ9FPHFyxH7sfd6+p/9+MmA+K8PGf8vX3r51UFl2a8jbkb/+L2xZjvN9dn21vbtlebCcn25vlarzc/N33nr7pu12WKOenbwaPCPt289P6gsb//VAfGnTmj/V4ds/2/+9/4Pv3JM/K+/1i9+Gi8dEz8fE782ZPyFq78b+Nydx1862v5kmN//rSHjf/rX7SPLhgMAo9Pe2l5daDTqGxIS5z+R/5c9B9Xom/jWWcWaiP5FP3+te00fKsqyJ4o1qMd4FrNuwHlwcNFHxH9HXRkAAAAAAAAAAAAAAKCvs/iLpVG3EQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIvr/wEAAP//Rb3T2A==") r6 = open(&(0x7f0000000100)='./file1\x00', 0x34f2fe, 0x68) fallocate(r6, 0x0, 0x0, 0x1001ed) fallocate(r6, 0x3, 0xf00, 0x10000) open$dir(0x0, 0x0, 0x18) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101142, 0x0) lseek(r7, 0x1, 0x4) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000001500)=ANY=[@ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="000000000000000000000000006b17851ffc4b", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) pipe2(&(0x7f0000001040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r8, &(0x7f00000000c0)=ANY=[], 0xffffff6a) pipe2(&(0x7f0000000240), 0x0) 1.064965772s ago: executing program 2 (id=984): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x1c161, 0x10000, 0x0, 0x6, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r2, 0x0, 0x0) r3 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff, 0x2b, 0x0, @val=@netkit}, 0x1c) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001880)=@newtfilter={0x24, 0x2c, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0x9, 0x3}, {0x9, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x8890}, 0x40) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="380000005400e50100000000fdffffff07000000", @ANYRES32=r4, @ANYBLOB="20000186", @ANYRES32=r7, @ANYBLOB="010101007f"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(0x0, r0) r8 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r8, &(0x7f0000001540), 0x0, 0x28048005) writev(r8, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) io_setup(0x8, &(0x7f0000000600)) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) truncate(&(0x7f00000000c0)='./file1\x00', 0x8008) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000480)={0x53, 0xfffffffffffffffc, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f00000001c0)="a881d675ab3d", 0x0, 0x7, 0x10000, 0x2, 0x0}) 1.033899786s ago: executing program 4 (id=986): io_setup(0x6, &(0x7f00000000c0)=0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/pm_print_times', 0x60883, 0x0) dup(r1) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x20000023892) io_submit(r0, 0x3, &(0x7f0000000080)=[&(0x7f0000001500)={0x0, 0x0, 0x0, 0x3, 0x800d, r1, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0x101, r1, 0x0, 0x0, 0x245, 0x0, 0x2, r1}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2, 0x1, r3, &(0x7f0000000100)="c103f3d1d9c212b5290629e083bacb8472abb89a20248fc02d8f593e0627b960604b06f4ebaffbd11b388b39c6981489d4507fb05d1c5990e98789c561552ceaa8c2f2dc91f00564f98f3b118f70219e41bd2bd5c76705923c889955f2eab4253b194bd780fef77f5c386d17fff9e5d90bcdd0f3039fac0eee27c61c4b058e47111844873628e9b962ec01270b23cf68a39d7db980b8c6e01ef75f43218121e3c5a882dad96e5c73eb1392e820fd1727566ba091aa39f5dcfa1c286017f678c9496d7bd156", 0xc5, 0x0, 0x0, 0x2, r1}]) io_setup(0x6, &(0x7f00000000c0)) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/pm_print_times', 0x60883, 0x0) (async) dup(r1) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) (async) sendfile(r2, r3, 0x0, 0x20000023892) (async) io_submit(r0, 0x3, &(0x7f0000000080)=[&(0x7f0000001500)={0x0, 0x0, 0x0, 0x3, 0x800d, r1, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0x101, r1, 0x0, 0x0, 0x245, 0x0, 0x2, r1}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2, 0x1, r3, &(0x7f0000000100)="c103f3d1d9c212b5290629e083bacb8472abb89a20248fc02d8f593e0627b960604b06f4ebaffbd11b388b39c6981489d4507fb05d1c5990e98789c561552ceaa8c2f2dc91f00564f98f3b118f70219e41bd2bd5c76705923c889955f2eab4253b194bd780fef77f5c386d17fff9e5d90bcdd0f3039fac0eee27c61c4b058e47111844873628e9b962ec01270b23cf68a39d7db980b8c6e01ef75f43218121e3c5a882dad96e5c73eb1392e820fd1727566ba091aa39f5dcfa1c286017f678c9496d7bd156", 0xc5, 0x0, 0x0, 0x2, r1}]) (async) 925.00703ms ago: executing program 2 (id=988): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./bus\x00', 0x280008a, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x1, 0x2a8, &(0x7f0000000500)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x40) sync() syz_mount_image$vfat(&(0x7f0000000200), &(0x7f00000000c0)='./file0\x00', 0x204888, &(0x7f00000004c0)=ANY=[], 0x1, 0x343, &(0x7f0000000bc0)="$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") r1 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) write(r0, &(0x7f0000000340)="db0b53bf96e256d475809b9604493fbca5e782406f026f62dbfb7fbf4e73840fcf3bae635f4f7512f9fa6af0660acb1b959a5bdaaa0948cffb2d03da8aa0c82842ed6d85978ee246fb39b62a05ff6cfead5b65b662b4f423efcb34b97b9c03fbdb219beea166f6e9628ca1ee96c218c73142aa9a496f64d23073e4c70befe2e634c59f869e5851388c3bb0cc22a0a250b60f7d8b9fc4f56864baef3a0b083996943c4331dbf7c45e483bbac1f36a099bb1b120d8683249820ab822b92430c9650ce9032e6ef4462771b58b5ad0fb7db26ebf3ff577327c5e65169bc3375c22b9cec966b2f1bb8ad8bc8c9996", 0xec) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x31, 0xffffffffffffffff, 0x0) r2 = fsmount(r1, 0x1, 0x1) fchdir(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r3, &(0x7f0000000240)=""/58, 0x3a) getsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000440), &(0x7f00000004c0)=0x4) getdents64(r3, &(0x7f0000002fc0)=""/4108, 0x100c) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x141042, 0x51) pwritev2(r4, &(0x7f00000006c0)=[{&(0x7f0000000480)='\x00', 0x1}], 0x1, 0x41a, 0x8, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x5) 735.733115ms ago: executing program 2 (id=994): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)="e21e7ef90ede0b91df67c0aee3c17999185c591a96011ce93d009cc4d1f17f087e850d25f8964a3541ae79803e91a3ab91785542590784186a9ea2a35e5f579067a607ad702003437a9d559e7b1e4cd28c18b40f5f3c41db94ef8c7b3d5b230d8e4ae80d9ed8468f9b8ff14562339efd73a5f23ea845cded968225530e14153ede9ce52bd52bcdd5652d2f79e092ac16a5dbdaf30e8db492353827e76c10809a7baffcc4e7a150c05472cfba55862a548c601ebee2a011ca1deaa277176ee4d27bc3d71a238c8cb5e23d2221797a8e4b632345a7cbd6339160159b94301655749377ff", 0xe3}, {&(0x7f0000000500)="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", 0x1000}], 0x2, &(0x7f0000000240)=[@ip_ttl={{0x14, 0x0, 0x2, 0x101}}], 0x18}, 0xc000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) timer_gettime(0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071114200000000008510000002000000850000000500000095000d00000000009500a50000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) rt_sigprocmask(0x2, &(0x7f00000002c0)={[0x8]}, &(0x7f0000000300), 0x8) r1 = getpid() pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x4e21, @private=0xa010102}], 0x10) readv(r2, &(0x7f0000000600)=[{&(0x7f0000000180)=""/135, 0x87}], 0x1) setsockopt(r2, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r0, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001b40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) io_setup(0x2278, &(0x7f0000000180)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000000)='I', 0x1}], 0x1) io_submit(r3, 0x2, &(0x7f0000000140)=[&(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0x0, r5, 0x0, 0x2d, 0x0, 0x0, 0x2}, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x5, 0x0, r5, 0x0}]) ioctl$BTRFS_IOC_FS_INFO(r0, 0x8400941f, &(0x7f0000001500)) 647.181626ms ago: executing program 1 (id=996): ptrace(0x4206, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) r0 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000340)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000240)='asymmetric\x00', &(0x7f00000000c0)=@chain) r1 = gettid() wait4(r1, 0x0, 0x40000000, &(0x7f0000000380)) 592.336543ms ago: executing program 0 (id=998): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x1c161, 0x10000, 0x0, 0x6, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r2, 0x0, 0x0) r3 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff, 0x2b, 0x0, @val=@netkit}, 0x1c) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001880)=@newtfilter={0x24, 0x2c, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0x9, 0x3}, {0x9, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x8890}, 0x40) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="380000005400e50100000000fdffffff07000000", @ANYRES32=r4, @ANYBLOB="20000100", @ANYRES32=r7, @ANYBLOB="0101fe0f7f"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(0x0, r0) r8 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r8, &(0x7f0000001540), 0x0, 0x28048005) writev(r8, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) io_setup(0x8, &(0x7f0000000600)) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) truncate(&(0x7f00000000c0)='./file1\x00', 0x8008) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000480)={0x53, 0xfffffffffffffffc, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f00000001c0)="a881d675ab3d", 0x0, 0x7, 0x10000, 0x2, 0x0}) 591.290113ms ago: executing program 1 (id=999): r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="200300000000090300000000000000000a00000000000004000b000000000000"], 0x20}}, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x248}}, 0x0) dup3(r0, r1, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x5) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@ipv6_deladdrlabel={0x38, 0x49, 0x117, 0x70bd27, 0x25dfdbfd, {0xa, 0x0, 0x0, 0x0, 0x0, 0x8}, [@IFAL_LABEL={0x8, 0x2, 0x1}, @IFAL_ADDRESS={0x14, 0x1, @loopback}]}, 0x38}}, 0x240088c0) (async) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='timerslack_ns\x00') pread64(r4, &(0x7f0000000140)=""/67, 0x43, 0xc9) (async) ioctl$SIOCGSKNS(r4, 0x894c, &(0x7f0000000080)={'vlan1\x00', 0x200}) 571.938426ms ago: executing program 4 (id=1000): syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x4011, &(0x7f0000000240)={[{@jqfmt_vfsold}, {@bsdgroups}, {@nobh}]}, 0x9, 0x678, &(0x7f00000007c0)="$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") r0 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffb, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newtfilter={0x48, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x1, 0x5}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000000c0)={r3, 0x1, 0x6}, 0x10) 490.076476ms ago: executing program 4 (id=1001): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x300, 0x240008c4}, 0x4054) socket(0x10, 0x3, 0x0) 433.050674ms ago: executing program 1 (id=1002): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) (async) open(&(0x7f0000000140)='./bus\x00', 0x42b42, 0x1c0) (async) r0 = syz_io_uring_setup(0x235, &(0x7f0000001240)={0x0, 0x10008cc8, 0x10100, 0x2, 0x75}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x3b, 0x2, 0x1}) (async) io_uring_enter(r0, 0x7a98, 0x0, 0x0, 0x0, 0xfffffffffffffc76) (async) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) (async) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000240)="58b00aff170454d96e84c06e151077ac", 0x10) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) munmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000) (async) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x840, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000483000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/217, 0xd9, 0x0, &(0x7f0000000140)=""/114, 0x72}, &(0x7f0000000200)=0x40) 432.559364ms ago: executing program 3 (id=1003): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000340)={0x3, {{0xa, 0x4e21, 0x7fffffff, @mcast1={0xff, 0x7}, 0x10000}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}}}, 0x108) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) (async) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) preadv(r1, &(0x7f0000000380)=[{&(0x7f0000000580)=""/128, 0x80}], 0x1, 0xaf, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) (async) r5 = socket(0x10, 0x803, 0x0) bind$netlink(r5, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) r7 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf94b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_bp={0x0}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x200003, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x7fffffff, &(0x7f00000001c0)={[0x3]}, 0x8) (async) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x7fffffff, &(0x7f00000001c0)={[0x3]}, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, 0xffffffffffffffff) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) (async) r8 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_aout(r8, &(0x7f0000000340)={{0x108, 0xa8, 0x4, 0xc3, 0x4c, 0x401, 0x248, 0x401}, "69fd9a19e9d16eaf102a5c58b38430eff55988166596f61cad24562fc87cb2a1ca22c9b469f4b85089529776561d1ad9ce9f3157edf15b7bef76fb6473f1df590bec07667ef3e081875c991ebce0c59272e49c87f68575ef25eee982d90156ce4c927eb0d4daaaa64f71a5693c8fca817f596661922d01c50b26e2ce8cfecf1297658e007425b6864e0d2c429af10e0994", ['\x00']}, 0x1b1) socket$rxrpc(0x21, 0x2, 0x2) (async) r9 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEYRING(r9, 0x110, 0x2, &(0x7f0000000280)=']-#,\x00', 0x5) (async) setsockopt$RXRPC_SECURITY_KEYRING(r9, 0x110, 0x2, &(0x7f0000000280)=']-#,\x00', 0x5) sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r6, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c084}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r11 = socket(0x1, 0x803, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) (async) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x74, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x34, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}, @IFLA_VLAN_EGRESS_QOS={0x1c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xc5, 0x8}}]}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x74}, 0x1, 0x0, 0x0, 0x600}, 0x0) 360.132563ms ago: executing program 4 (id=1004): socket$nl_route(0x10, 0x3, 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40)=ANY=[@ANYBLOB="0200000002000000000000000400000000000000100000000000010020"], 0x24, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xc4080}, 0x0) unshare(0x400) r1 = syz_open_procfs(0x0, &(0x7f00000005c0)='net/rt_cache\x00') readv(r1, &(0x7f00000003c0)=[{&(0x7f0000000140)=""/189, 0xbd}], 0x1) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000980)={[{@noblock_validity}, {}, {@auto_da_alloc}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@barrier}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x573, &(0x7f0000000a40)="$eJzs3V1rHNUbAPBnNknf//+mUIp6IYFeWKndNIkvFQTrpWixoPd1SaahZNMt2U1pYqHthb3xRoogYkH8AN57WfwCfoqCFoqUoBfeRGYy226TbF63SXR+P5j2nJnJPnP2zDn7zM4uG0BpDWX/VCJejoivk4ijHdv6o9g4tLTfwpOb4wv5usXFT/9IIinWtfdPiv8PF5WXIuKXLyNOV1bGbc7NT9Xq9XSmqA+3pq8NN+fmz1yZrk2mk+nV0bGxc2+Njb77zts9a+vrF//67pMHH5776uTCtz89OnYvifNxpNjW2Y5tuN1ZGYqh4jkZiPPLdhzpQbC9JNntA2BL+opxPhDZHHA0+opRD/z33cpfzYFySox/KKl2HpBf2xfL7mYkO+vxB0sXQCvb37/03kgcyK+NDi0kz10ZZde7gz2In8X4+ff797Il1nkf4lYP4gG03b4TEWf7+1fOf0kx/23d2fzN47Utj1G21x/YTQ+y/OeN1fKfytP8J1bJfw6vMna3Yv3xX3nUgzBdZfnfe6vmv0+nrsG+ova/POcbSC5fqadnI+L/EXEqBvZn9c77OfuWxTi38HCxW/zO/C9bsvjtXLA4jkf9+5//m4laq7bddrc9vhPxyrP8N4kV8/+BPNdd3v/Z83FxgzFOpPdf7bZt/fZ36n0GvPhjxGur9v+zO1rJ2vcnh/PzYbh9Vqz0590Tv3aLv7n2917W/4fWbv9g0nm/trn5GD8c+Dvttm2r5/++5LO83B5rN2qt1sxIxL7k45XrR5/9bbve3j9r/6mTa89/q53/ByPi8w22/+7xu1133Qv9P7Gp/t984eFHX3zfLf7G+v/NvHSqWLOR+W+jB7id5w4AAAAAAAD2mkpEHImkUn1arlSq1aXPdxyPQ5V6o9k6fbkxe3Ui8u/KDsZApX2n+2jH5yFGis/Dtuujy+pjEXEsIr7pO5jXq+ON+sRuNx4AAAAAAAAAAAAAAAAAAAD2iMNdvv+f+a1vt48OeOH85DeU17rjvxe/9ATsSV7/obyMfygv4x/Ky/iH8jL+obyMfygv4x/Ky/gHAAAAAAAAAAAAAAAAAAAAAAAAAACAnrp44UK2LC48uTme1Seuz81ONa6fmUibU9Xp2fHqeGPmWnWy0Zisp9XxxvR6j1dvNK6NjMbsjeFW2mwNN+fmL003Zq+2Ll2Zrk2ml9KBHWkVAAAAAAAAAAAAAAAAAAAA/NvMT9Xq9XSmOafQpfB+vJhHjh1qRRLrNnDJlkL075VuUthm4eBzJ8AuT0sAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0OGfAAAA//9pxC+s") r2 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x31, &(0x7f0000000040)=0x6, 0x4) sendto$inet6(r2, &(0x7f0000000000)="800037bbfa9ba1ce", 0x8, 0x4000, &(0x7f0000001100)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvmmsg(r2, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}, 0x3422a61a}], 0x1, 0x10102, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x64042, 0x12e) write$cgroup_subtree(r3, 0x0, 0x32600) timerfd_gettime(0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x5c}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) r4 = socket$can_bcm(0x1d, 0x2, 0x2) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') openat2(r6, &(0x7f0000000380)='./mnt\x00', &(0x7f0000000400)={0x8340, 0x8, 0x14}, 0x18) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) r8 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') pread64(r8, &(0x7f00000015c0)=""/4111, 0x100f, 0xd33) r9 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) r10 = fsmount(r9, 0x1, 0x0) fchdir(r10) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1e00000002000000020000000200000090e40200", @ANYRES32=r6, @ANYBLOB='\a\x00'/20, @ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="0400000003000000050000000900000000000000", @ANYRES32=r10, @ANYBLOB="df2d0cb4"], 0x50) sendmsg$netlink(r5, &(0x7f0000000000)={0x0, 0xfe0d, &(0x7f0000000580)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="780000004200040025bd700000000000660001000000029af797f656c1871af7cc2f3186e58d3061110d7fafe6f8ba6503eb38250c40927016941a12931dc5a2af4296b2b60829c9bdfa0e371684993e2abe7d37db9c01046f3db440d3b8667ce6c3540e9a055c5e4702fd8e4885493044c116bb8b9eb645"], 0x78}], 0x1}, 0x800) connect$can_bcm(r4, &(0x7f0000000080), 0x10) 359.366353ms ago: executing program 0 (id=1005): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@deltclass={0x484, 0x29, 0x10, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x7, 0x9}, {0x10, 0x7}, {0x0, 0xa}}, [@TCA_RATE={0x6, 0x5, {0x67, 0x5}}, @tclass_kind_options=@c_htb={{0x8}, {0x450, 0x2, [@TCA_HTB_PARMS={0x30, 0x1, {{0x3, 0x1, 0x3, 0x2, 0x1, 0x9}, {0x1, 0x2, 0x4, 0xe, 0x7fff, 0x9}, 0x4, 0x10000, 0x4, 0xfff, 0x1000}}, @TCA_HTB_RTAB={0x404, 0x4, [0x7, 0x8, 0x9, 0x3, 0xc4e, 0xfc4, 0x315f, 0xffff8000, 0x1, 0x8ca, 0xd, 0xb, 0x3, 0x6, 0x3, 0xbed, 0x400, 0x80000000, 0x7, 0x7, 0xfffffff7, 0x9, 0x1, 0x7f, 0x80000001, 0x7bf, 0x8000, 0xbbd, 0x1, 0x3, 0x2, 0xffffff80, 0x80000001, 0x7057, 0xff, 0x0, 0x6, 0x4, 0x8, 0xffffffff, 0x3, 0xf, 0xa, 0x7fffffff, 0x40, 0x3, 0x8, 0x7, 0x51f, 0x6, 0x7, 0x8000, 0x3ff, 0x7, 0x100, 0x6569, 0x1, 0x81, 0xf326, 0xa, 0x2, 0x7, 0x81, 0x7, 0x4, 0x5ff, 0x3, 0x2, 0x1ff, 0xff, 0x7, 0x5, 0xd, 0x5, 0x9, 0x9, 0x4, 0x4d9f, 0x9, 0x0, 0x81, 0x81, 0x1ff, 0x0, 0x8, 0x7, 0x800, 0x10, 0x0, 0x3ff, 0x5, 0xfffffff8, 0x5, 0x2, 0xfffffffe, 0x7, 0x0, 0x9, 0x3, 0x5, 0x5, 0xc7e, 0x2, 0x0, 0x0, 0x3, 0x2, 0x77, 0x0, 0x4, 0x200, 0xb, 0xf, 0xe03, 0x6, 0x6e, 0x7, 0x1, 0x7, 0x1, 0xffff, 0x10001, 0x7, 0xaa2, 0xb73f, 0x2, 0x9, 0x77b, 0x8, 0x200, 0x2, 0x0, 0x40, 0x3, 0x800, 0x6, 0x4, 0x1, 0x5, 0x6, 0x2, 0x3e, 0x2, 0x2, 0x2, 0x9, 0xfffffffb, 0x3, 0x9, 0x4, 0x4, 0x1, 0x2, 0x6, 0x1a99, 0x80000000, 0xfffffff0, 0x10, 0xd2a, 0x2, 0xffffffff, 0xb0, 0x0, 0x8, 0xe999, 0x233, 0x7, 0x58d, 0x3, 0x631, 0x7f, 0x0, 0x200, 0x5, 0x7, 0x3ff, 0x3, 0x7, 0x800, 0x10001, 0x8, 0x4, 0xa, 0x8, 0xc, 0x3, 0x5, 0xfffffffc, 0x5, 0x9b0, 0x4, 0x2, 0x3ff, 0x1, 0x83e, 0xb1ea, 0x4, 0x2, 0x10001, 0x400, 0xffffffff, 0x7fff, 0x3, 0xd3, 0x1, 0x10000, 0x1, 0xb2, 0x8, 0xffffff56, 0x4, 0x3, 0x3, 0x871a, 0x10000, 0x6, 0x7d2, 0x5, 0x400, 0x5, 0x9, 0xffff, 0x4, 0x6, 0x3, 0xfffffff8, 0x10001, 0x7fffffff, 0x0, 0xffffffef, 0x8, 0x5, 0x5, 0x7, 0x3, 0x8, 0x8, 0x3, 0xd8, 0x80, 0x5c15, 0x1, 0x1, 0x5, 0x7, 0x8000, 0x2, 0x4, 0x10, 0xd305, 0x3, 0xab1, 0x7, 0x0, 0x1, 0x2]}, @TCA_HTB_RATE64={0xc, 0x6, 0x4}, @TCA_HTB_CEIL64={0xc, 0x7, 0xd}]}}]}, 0x484}, 0x1, 0x0, 0x0, 0x1}, 0x24040054) 295.893582ms ago: executing program 1 (id=1006): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x0, &(0x7f0000000000)=[{0x5, 0xf, 0x3, 0x1ff}, {0x6, 0x2, 0x6, 0x4}, {0x100, 0x6, 0x22, 0x95}, {0x8000, 0x0, 0xc7, 0x9}, {0x7f, 0x70, 0x9, 0xffffff9a}, {0x40, 0x4, 0x7, 0x8}]}, 0x5c) 232.909279ms ago: executing program 3 (id=1007): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}]}], {0x14, 0x10, 0x1, 0x60000000, 0x0, {0x0, 0x84}}}, 0x6c}}, 0x0) 231.38757ms ago: executing program 0 (id=1008): r0 = syz_open_procfs(0x0, &(0x7f0000000400)='net/udp6\x00') syz_emit_ethernet(0x86, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffffffbbbbbb05000000000000007800000000000190780a010102ac1414aa03049078010000004700000000000000002e0000000000000000773beb5a3400000000538f79628a9d0021e0b07ff195bf266ba768fdec8f00002300000000ffffffff00000000e48855a57fb5b812f377e6557f7900000000000000000000002e35e1e4f4c17d40cb77bec6657500000000000000000000000000ac1e0001"], 0x0) preadv(r0, &(0x7f0000000700)=[{&(0x7f0000000640)=""/165, 0xa5}], 0x1, 0x180, 0x9) (async) preadv(r0, &(0x7f0000000700)=[{&(0x7f0000000640)=""/165, 0xa5}], 0x1, 0x180, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f00000003c0)='freezer.parent_freezing\x00', 0x0, 0x0) (async) r2 = openat$cgroup_ro(r1, &(0x7f00000003c0)='freezer.parent_freezing\x00', 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="3000000013000100000000000000b700080000000900000008000000ffffffff08001300", @ANYRES32, @ANYBLOB='\b\x001'], 0x30}], 0x1}, 0x0) (async) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="3000000013000100000000000000b700080000000900000008000000ffffffff08001300", @ANYRES32, @ANYBLOB='\b\x001'], 0x30}], 0x1}, 0x0) preadv2(r2, &(0x7f0000000280)=[{&(0x7f00000008c0)=""/211, 0xd3}], 0x1, 0x0, 0x0, 0x0) (async) preadv2(r2, &(0x7f0000000280)=[{&(0x7f00000008c0)=""/211, 0xd3}], 0x1, 0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="9800000013000100"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006772653000000000000000000000000034001a80100002800c00018008001b000000000020"], 0x98}}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1018, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x40000008, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000440)=ANY=[@ANYRES8=r5, @ANYBLOB="29ed5648644f785d2e2dec4bde62e87d5533d6c20e2a9741ab66363607f3f5ccbdfe5437d081011b4ec934d5cae598a0dd4a118cb873569564680189c0ed6c63e1a95c007039b47ca54b71e7589e880896321046de69f6e4328b513b95fa3dc2c8d6c0616fcb26b0a071219866c6a1866cb5b456ed203d130699749368dc4025a5dcf0bf4b15c019d86954e990cfdaff8a7f2633d84cb12a669d54055c85559e231af81d222a2969672bc6fff0f105c85c93e1a5749cafebebd4367260fc058eedff9d9dbb5fe00660aa88f52769e5d9b2aced1ed0fef00abb406b6cc7490094e00e7bc5", @ANYRES64], 0x48}}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000440)=ANY=[@ANYRES8=r5, @ANYBLOB="29ed5648644f785d2e2dec4bde62e87d5533d6c20e2a9741ab66363607f3f5ccbdfe5437d081011b4ec934d5cae598a0dd4a118cb873569564680189c0ed6c63e1a95c007039b47ca54b71e7589e880896321046de69f6e4328b513b95fa3dc2c8d6c0616fcb26b0a071219866c6a1866cb5b456ed203d130699749368dc4025a5dcf0bf4b15c019d86954e990cfdaff8a7f2633d84cb12a669d54055c85559e231af81d222a2969672bc6fff0f105c85c93e1a5749cafebebd4367260fc058eedff9d9dbb5fe00660aa88f52769e5d9b2aced1ed0fef00abb406b6cc7490094e00e7bc5", @ANYRES64], 0x48}}, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000740)="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", 0x1000}, {&(0x7f0000000000)="9746bc6ab33609b2551a956bef103080640f1299cae244c7000ebd5477159b770897ae70f321b0ac28b18da9e597d64aefe35622ae2309d6a5ddcf50bd9fad9ec4844eea042c207de01b92b185f2784d0e5afc5cd1823295ba9f85cfd8ae18006e6e8ba38d7079a03721e156f36ad72f65698295916dc0ecfb6fbf7b85099abcc79e6475cca77a7c9a6fdba59f87ce8ef4e875d3e258e8e18a627d2a9333c253e801d7c932cb1bf5e63bc3adfbe239f8a4", 0xb1}], 0x2) 230.85485ms ago: executing program 1 (id=1009): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f00000000c0)={0x41, 0x12}, 0x10) (async) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) (async) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x3}, 0x10) (async) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x41}, 0x1be) (async) bind$tipc(r3, 0x0, 0x0) (async) sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x18}}, 0x10, 0x0}, 0x0) (async) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x38, r5, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x80}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x38}}, 0x0) 230.50612ms ago: executing program 3 (id=1010): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000600)="63e4ed8e46080000003389f7f986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r3 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xb) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) 210.973902ms ago: executing program 1 (id=1011): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) r1 = gettid() r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001880), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={&(0x7f00000018c0)={0x18, r3, 0x705, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000841}, 0x8004) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x100000000000009, 0x3c033, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x8312, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x400000000, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r7, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002"], 0x110) setsockopt$inet_group_source_req(r7, 0x0, 0x2c, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x4e20, @empty}}}, 0x108) setsockopt$inet_group_source_req(r7, 0x0, 0x2b, &(0x7f0000000000)={0x2, {{0x2, 0x4e26, @multicast2}}, {{0x2, 0x2, @empty}}}, 0x108) perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x1, 0x0, 0x2, 0xff, 0x0, 0xb92a, 0x9, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_bp={&(0x7f00000000c0), 0x3}, 0x0, 0x3, 0x40, 0x4, 0x7, 0x4dc, 0x3, 0x0, 0x8, 0x0, 0x25d33d02}, r1, 0x1, 0xffffffffffffffff, 0xd) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x200000a, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f9cf02e, 0x2, @perf_config_ext={0x5, 0x6}, 0x0, 0x5bd20d9e, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x10001, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) recvmmsg$unix(r9, &(0x7f0000001a80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20, 0x0) sendmmsg$unix(r8, &(0x7f0000006c40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="11", 0x1}], 0x1, 0x0, 0x0, 0x20000011}}], 0x1, 0x4040011) r10 = gettid() timer_delete(r4) process_vm_writev(r10, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 194.096225ms ago: executing program 3 (id=1012): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0xf, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0xb}, {{0x18, 0x1, 0x1, 0x0, r0, 0x0, 0x0, 0x0, 0x20}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x3}, 0x94) 128.878173ms ago: executing program 3 (id=1013): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0x47f) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x8001, 0xfffe, 0x5, 0x1}, 0xfee9) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xbecd6000) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x8000, &(0x7f0000000740)=ANY=[], 0x1, 0x2a4, &(0x7f0000000480)="$eJzs3T9rc2UUAPBzkzSNOqSIiyJ4QQen0rq6NEoFsZMSQR002BYkCYUWAlYwduoncPR7+BFcXPwGgqvg1g6VKzf33ia16R/65k3h7e83nd7nnvOc3KckU06+eXPY3z1I4uTsz2i1kqhtxVacJ7EWtaj8FI0AAF4c51kW/2QPyWzUFt8NALAMxed/4bF7AQCW47Mvvvyks7Oz/WmatuL19umom0TE8HTULdY7+/FdDGIvNqIdFxHZpSL+6OOd7WikubV4ZzgedfPM4de/l/U7f0dM8jejHWvz8zfTwmX+y1V3aXT2V6o/2vHa/Pz3/p8fw3F0m/Hu2zP9r0c7/vg2DmIQu5HnTvN/3EzTD7Ofz374Kt8mz09q0V2d3DeV1Zd0JAAAAAAAAAAAAAAAAAAAAAAAPAHraZoU43sm83vyS5P5OaNu/WKyvp5WZuf7jKv5QElVqJgPlEU5omecxS/VfJ2NNE2z8sZpfiPeaPhhAQAAAAAAAAAAAAAAAAAAAMgdfX/c7w0Ge4cLCappANXX+h9aZ2vmyltx3O/Vby64ev+9ZqcN5L3eenM0GrGgx3JX8FLez8Irr04P9/MogupgFrrXqx8URY/7vbRcqh5yv5fctVerOrhfZ5ea8ayNZZN/iYvs6pm2Llu9mtVc0NNovjJ36d8sy+5X5/2/ijMqrySTERv3232lDOa+wDxoXT+L324ueONbRn0hbzwAAAAAAAAAAAAAAAAAAMA10y/9zlk8uTW19tyaAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAlm/7+fxW0IuLqlWvBuEy+7Z4yaMbh0SO/RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ6A/wIAAP//4ipOSw==") r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0xc4142, 0x12) writev(r3, &(0x7f0000001000)=[{&(0x7f00000009c0)="76b0d8e7b4fbe83b9a3a82e0bbf91c1680d1f0b00633f12efc58b563dbdcfe39385fa5f25b4f44f77855053cd2c70c4b2f93a03ac5065ae95772c490638e6f2609cd625dcb26a8342315a054d59e843d7acd6cf3c414d1cee5b36208364ca1fd503e7f9f9e7c8b9ab7985616d5283e56db010e1021e45a2452e8ddd7966b3c4232e6015e47ed174b11e6c81d085fc43b5c85fb84ae756ad048a44c6c84414d1e045a67447a237ff927f9ef158987745861cf8b330f7c234aff1499be56651be1c7a1221477ae394445e5014caad4442312bca4e1a985351d4d02c64c53f617a08a415575046ffd74bf9f6af6653a442b4728c46a084d2e7cb4395afe46c77ed4ec78d92d2f23ca", 0x107}, {&(0x7f0000000080)="f720545dd3b03efebdc5e0fccd4ef36b1286c4a1a8a1d527bd5a12deb78fb2c5b13465656b6d7bbd6359c662bc2d12228e8af99d9f1012e0d43912955b0b184747fe59b2702f00624d29fe9d579754a11db59c6ccc2e724e9e6c2d064ff735a794b84b70c7eeb76eaccc42fc897986c24d070a414b9367cdd6a1ea8121a08d90b4581cafac8aa279c4538ecd8c6f8e3778c668444b3f8704f4a169b80fbe5e38d91c920dbec7130fb9535897bdcac32f44720dff3286627fea38d6", 0xbb}, {&(0x7f0000001040)="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", 0x23e}], 0x3) sendfile(r3, r2, 0x0, 0x7fffeff9) close(0x3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x20, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x20}}, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) ioctl$VT_RESIZE(r7, 0x560f, 0x0) connect$inet6(r6, &(0x7f0000000300)={0xa, 0x4e22, 0x1, @private1, 0x5}, 0x1c) r8 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r8, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}}, 0x1c) connect$inet6(r8, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @private1, 0x5}, 0x1c) 128.617583ms ago: executing program 0 (id=1014): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0xefff, 0x240008c4}, 0x4054) socket(0x10, 0x3, 0x0) 128.234493ms ago: executing program 0 (id=1015): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x1c161, 0x10000, 0x0, 0x6, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r2, 0x0, 0x0) r3 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff, 0x2b, 0x0, @val=@netkit}, 0x1c) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001880)=@newtfilter={0x24, 0x2c, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0x9, 0x3}, {0x9, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x8890}, 0x40) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="380000005400e50100000000fdffffff07000000", @ANYRES32=r4, @ANYBLOB="20000100", @ANYRES32=r7, @ANYBLOB="010101007f"], 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(0x0, r0) r8 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r8, &(0x7f0000001540), 0x0, 0x28048005) writev(r8, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) io_setup(0x8, &(0x7f0000000600)) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) truncate(&(0x7f00000000c0)='./file1\x00', 0x8008) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000480)={0x53, 0xfffffffffffffffc, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f00000001c0)="a881d675ab3d", 0x0, 0x7, 0x10000, 0x2, 0x0}) 15.701868ms ago: executing program 3 (id=1016): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0xe0, &(0x7f0000000240)={0x3, 0x0, 0xfffa, 0x4360}, 0x8, 0x6, 0x7d, 0x0, 0x1, 0x101, 0x0}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x5, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000080)=0xffffffad, 0x4) sendto$inet6(r1, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f00000004c0)="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", 0xfc, 0x20000000, &(0x7f0000000440)={0xa, 0x4e20, 0x0, @local, 0x5}, 0x1c) r2 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r3 = epoll_create1(0x80000) r4 = dup3(r2, r3, 0x80000) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r5, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x178, 0x2, 0x2, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@CTA_EXPECT_ZONE={0x6}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x1}, @CTA_EXPECT_FLAGS={0x8}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x3c0}, @CTA_EXPECT_NAT={0x108, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x14, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x50, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x9f}}]}, @CTA_EXPECT_NAT_TUPLE={0x5c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_NAT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x20}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_TUPLE={0x34, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010101}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x7fffffff}]}, 0x178}, 0x1, 0x0, 0x0, 0x4}, 0x40081) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4008550d, 0x0) 0s ago: executing program 0 (id=1017): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x80800, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000001c0)=0x0) ptrace$ARCH_GET_MAX_TAG_BITS(0x1e, r1, &(0x7f0000000280), 0x4003) fcntl$setsig(r0, 0xa, 0x3) fcntl$notify(r0, 0x402, 0x16) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x99, 0x0, 0x0, 0x0, 0xffffffff}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x100000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x50, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r5, r3, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbfe0900"}}}}}}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x14, r7, 0x1, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4040000}, 0x4904) r8 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r9) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)={0x3c, r10, 0x1, 0x3, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x2}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x86}, 0x4e040) getdents64(r8, &(0x7f0000000040)=""/74, 0x4a) setresuid(0x0, 0xee00, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) unshare(0x4e030e80) dup2(r8, r8) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x46, 0x1, 0x4, 0x0, 0x0, 0x8000, 0x2004, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0x1}, 0x68a5, 0x4006, 0x4, 0x0, 0x3, 0x20, 0x6, 0x0, 0x0, 0x0, 0x40000000000002}, 0x0, 0x0, 0xffffffffffffffff, 0x8) io_setup(0x4, &(0x7f0000000600)) kernel console output (not intermixed with test programs): tmap:432: comm syz.1.303: bg 0: block 18: invalid block bitmap [ 55.125210][ T4442] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.303: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 55.134141][ T4431] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.303: Failed to acquire dquot type 1 [ 55.168574][ T4440] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 55.181051][ T4442] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 55.191293][ T4440] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.303: Failed to acquire dquot type 1 [ 55.204000][ T4442] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.303: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 55.222661][ T4442] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 55.231980][ T3310] loop3: p1 p2 p4[DM] [ 55.240489][ T3310] loop3: p1 size 835329 extends beyond EOD, truncated [ 55.255597][ T3310] loop3: p2 size 8388608 extends beyond EOD, truncated [ 55.265393][ T4419] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 55.276484][ T4419] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 55.282842][ T3324] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.284826][ T4419] EXT4-fs (loop4): orphan cleanup on readonly fs [ 55.297659][ T3310] loop3: p4 size 262144 extends beyond EOD, truncated [ 55.300270][ T4419] EXT4-fs error (device loop4): ext4_free_blocks:6728: comm syz.4.300: Freeing blocks not in datazone - block = 0, count = 4096 [ 55.320845][ T4419] EXT4-fs (loop4): 1 orphan inode deleted [ 55.326644][ T4439] loop3: p1 p2 p4[DM] [ 55.327725][ T4419] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 55.331680][ T4439] loop3: p1 size 835329 extends beyond EOD, truncated [ 55.369161][ T4439] loop3: p2 size 8388608 extends beyond EOD, truncated [ 55.411763][ T4439] loop3: p4 size 262144 extends beyond EOD, truncated [ 55.454340][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.474905][ T4449] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 55.518551][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.528156][ T4449] EXT4-fs (loop0): orphan cleanup on readonly fs [ 55.564014][ T4449] EXT4-fs warning (device loop0): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 55.578753][ T4449] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 55.585479][ T4449] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.307: bad orphan inode 768 [ 55.630805][ T4449] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 55.661857][ T4457] process 'syz.3.309' launched '/dev/fd/4' with NULL argv: empty string added [ 55.677053][ T3310] udevd[3310]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 55.688752][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 55.700237][ T4450] udevd[4450]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 55.899203][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.936299][ T4471] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 55.949475][ T4471] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 55.971971][ T4471] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2002c018, mo2=0002] [ 55.980455][ T4471] System zones: 1-12 [ 55.985943][ T4477] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.999054][ T4471] EXT4-fs (loop3): 1 truncate cleaned up [ 56.007011][ T4471] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.025155][ T4477] EXT4-fs error (device loop0): ext4_get_first_dir_block:3527: inode #12: comm syz.0.316: Attempting to read directory block (0) that is past i_size (3) [ 56.042102][ T4477] EXT4-fs (loop0): Remounting filesystem read-only [ 56.087604][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.109944][ T3823] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 56.124883][ T4482] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 56.152356][ T4482] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 56.178014][ T4488] netlink: 'syz.0.318': attribute type 1 has an invalid length. [ 56.197217][ T4482] EXT4-fs (loop1): orphan cleanup on readonly fs [ 56.203901][ T4491] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4491 comm=syz.3.314 [ 56.214821][ T4482] EXT4-fs warning (device loop1): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 56.271562][ T4482] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 56.284006][ T4482] EXT4-fs error (device loop1): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 56.299374][ T4482] EXT4-fs (loop1): Remounting filesystem read-only [ 56.306871][ T4482] EXT4-fs (loop1): 1 truncate cleaned up [ 56.360993][ T4497] 9p: Unknown Cache mode or invalid value {eadahead [ 56.378081][ T4499] EXT4-fs: Ignoring removed orlov option [ 56.383914][ T4499] EXT4-fs: Ignoring removed mblk_io_submit option [ 56.405020][ T4499] EXT4-fs error (device loop4): ext4_iget_extra_inode:5073: inode #15: comm syz.4.323: corrupted in-inode xattr: e_value size too large [ 56.443766][ T4499] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.323: couldn't read orphan inode 15 (err -117) [ 56.445323][ T29] kauditd_printk_skb: 83 callbacks suppressed [ 56.445372][ T29] audit: type=1400 audit(56.413:790): avc: denied { load_policy } for pid=4496 comm="syz.2.322" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 56.517801][ T4506] rdma_op ffff88812487e180 conn xmit_rdma 0000000000000000 [ 56.605198][ T4497] SELinux: failed to load policy [ 56.665836][ T4512] EXT4-fs: Ignoring removed oldalloc option [ 56.671901][ T4512] EXT4-fs: Ignoring removed bh option [ 56.758489][ T4512] EXT4-fs error (device loop2): mb_free_blocks:2037: group 0, inode 15: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 56.779742][ T4519] xt_hashlimit: invalid interval [ 56.793582][ T29] audit: type=1400 audit(56.753:791): avc: denied { create } for pid=4518 comm="syz.3.330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 56.812481][ T29] audit: type=1400 audit(56.753:792): avc: denied { setopt } for pid=4518 comm="syz.3.330" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 56.858416][ T4521] No source specified [ 56.871291][ T4523] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.878632][ T4523] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.878912][ T29] audit: type=1400 audit(56.853:793): avc: denied { block_suspend } for pid=4520 comm="syz.3.333" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 56.931410][ T29] audit: type=1326 audit(56.893:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4525 comm="syz.2.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a137cacb9 code=0x7ffc0000 [ 56.954072][ T29] audit: type=1326 audit(56.903:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4525 comm="syz.2.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a137cacb9 code=0x7ffc0000 [ 56.976653][ T29] audit: type=1326 audit(56.903:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4525 comm="syz.2.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f0a137cacb9 code=0x7ffc0000 [ 57.016729][ T29] audit: type=1326 audit(56.993:797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4525 comm="syz.2.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a137cacb9 code=0x7ffc0000 [ 57.040802][ T29] audit: type=1326 audit(57.023:798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4529 comm="syz.2.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0a1378b58e code=0x7ffc0000 [ 57.063687][ T29] audit: type=1326 audit(57.023:799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4525 comm="syz.2.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a137cacb9 code=0x7ffc0000 [ 57.177754][ T4538] veth4: entered promiscuous mode [ 57.182859][ T4538] veth4: entered allmulticast mode [ 57.222318][ T37] tipc: Subscription rejected, illegal request [ 57.261396][ T4540] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.274622][ T4545] netlink: 'syz.2.339': attribute type 1 has an invalid length. [ 57.296602][ T4545] bond1: entered promiscuous mode [ 57.301953][ T4545] 8021q: adding VLAN 0 to HW filter on device bond1 [ 57.320344][ T4545] bond1: (slave bridge1): making interface the new active one [ 57.328029][ T4545] bridge1: entered promiscuous mode [ 57.336837][ T4545] bridge1: left promiscuous mode [ 57.336944][ T4538] set_capacity_and_notify: 10 callbacks suppressed [ 57.337000][ T4538] loop3: detected capacity change from 0 to 8192 [ 57.414331][ T4538] loop3: p1 p2 p4[DM] [ 57.418892][ T4538] loop3: p1 size 835329 extends beyond EOD, truncated [ 57.427030][ T4538] loop3: p2 size 8388608 extends beyond EOD, truncated [ 57.437284][ T4538] loop3: p4 size 262144 extends beyond EOD, truncated [ 57.453371][ T4540] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.477154][ T4557] loop4: detected capacity change from 0 to 512 [ 57.485371][ T4557] EXT4-fs: Ignoring removed orlov option [ 57.491135][ T4557] EXT4-fs: Ignoring removed mblk_io_submit option [ 57.509256][ T4557] EXT4-fs error (device loop4): ext4_iget_extra_inode:5073: inode #15: comm syz.4.342: corrupted in-inode xattr: e_value size too large [ 57.549117][ T4557] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.342: couldn't read orphan inode 15 (err -117) [ 57.574833][ T4563] loop2: detected capacity change from 0 to 512 [ 57.582791][ T4563] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 57.614712][ T4540] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.636624][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 57.648481][ T3310] udevd[3310]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 57.659972][ T4450] udevd[4450]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 57.678473][ T4563] EXT4-fs (loop2): 1 truncate cleaned up [ 57.700832][ T4563] __nla_validate_parse: 6 callbacks suppressed [ 57.700847][ T4563] netlink: 28 bytes leftover after parsing attributes in process `syz.2.345'. [ 57.720504][ T4540] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.739665][ T4570] netlink: 12 bytes leftover after parsing attributes in process `syz.3.347'. [ 57.775437][ T4573] netlink: 'syz.3.348': attribute type 1 has an invalid length. [ 57.783163][ T4573] netlink: 224 bytes leftover after parsing attributes in process `syz.3.348'. [ 57.833631][ T37] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.842078][ T37] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.850728][ T37] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.866045][ T37] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.881348][ T4577] SELinux: syz.1.349 (4577) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 58.015495][ T4579] loop3: detected capacity change from 0 to 8192 [ 58.047504][ T4579] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 58.173415][ T4597] loop4: detected capacity change from 0 to 4096 [ 58.199711][ T4600] netlink: 40 bytes leftover after parsing attributes in process `syz.0.358'. [ 58.214250][ T4600] netlink: 64 bytes leftover after parsing attributes in process `syz.0.358'. [ 58.243398][ T3423] IPVS: starting estimator thread 0... [ 58.251436][ T4605] netlink: 52 bytes leftover after parsing attributes in process `syz.2.359'. [ 58.260439][ T4605] netlink: 52 bytes leftover after parsing attributes in process `syz.2.359'. [ 58.269423][ T4605] netlink: 52 bytes leftover after parsing attributes in process `syz.2.359'. [ 58.333873][ T4606] IPVS: using max 2208 ests per chain, 110400 per kthread [ 58.358336][ T4620] loop4: detected capacity change from 0 to 128 [ 58.394523][ T4625] netlink: 20 bytes leftover after parsing attributes in process `syz.2.363'. [ 58.540352][ T4630] loop2: detected capacity change from 0 to 512 [ 58.649021][ T4635] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.656370][ T4635] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.682744][ T4637] netlink: 132 bytes leftover after parsing attributes in process `syz.4.369'. [ 58.731259][ T4643] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001158 ! [ 58.895407][ T4658] loop3: detected capacity change from 0 to 8192 [ 58.904180][ T4658] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 59.037251][ T4671] loop2: detected capacity change from 0 to 512 [ 59.057405][ T4671] EXT4-fs: journaled quota format not specified [ 59.162134][ T4678] netlink: 'syz.3.380': attribute type 3 has an invalid length. [ 59.338906][ T4693] loop0: detected capacity change from 0 to 256 [ 59.468853][ T4700] netlink: 'syz.2.388': attribute type 1 has an invalid length. [ 59.512435][ T4700] syzkaller0: entered promiscuous mode [ 59.518075][ T4700] syzkaller0: entered allmulticast mode [ 59.869118][ T4725] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 59.880898][ T4725] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 59.891203][ T4725] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.398: Corrupt directory, running e2fsck is recommended [ 59.905991][ T4725] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 59.914621][ T4725] EXT4-fs error (device loop4): ext4_iget_extra_inode:5073: inode #15: comm syz.4.398: corrupted in-inode xattr: e_name out of bounds [ 59.928644][ T4725] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.398: couldn't read orphan inode 15 (err -117) [ 60.574833][ T4737] batman_adv: batadv0: Adding interface: ipvlan3 [ 60.581338][ T4737] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 60.607290][ T4737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.614418][ T4735] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.617943][ T4737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.636250][ T4737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan2 [ 60.646397][ T4737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.648192][ T4735] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.658444][ T4737] batman_adv: batadv0: Interface activated: ipvlan3 [ 60.685558][ T4735] netlink: 'syz.0.400': attribute type 3 has an invalid length. [ 60.705742][ T4735] tipc: Enabling of bearer rejected, failed to enable media [ 60.980140][ T3823] bio_check_eod: 1684 callbacks suppressed [ 60.980192][ T3823] kworker/u8:12: attempt to access beyond end of device [ 60.980192][ T3823] loop2: rw=1, sector=137, nr_sectors = 8 limit=128 [ 60.999931][ T3823] kworker/u8:12: attempt to access beyond end of device [ 60.999931][ T3823] loop2: rw=1, sector=153, nr_sectors = 8 limit=128 [ 61.013627][ T3823] kworker/u8:12: attempt to access beyond end of device [ 61.013627][ T3823] loop2: rw=1, sector=169, nr_sectors = 8 limit=128 [ 61.027324][ T3823] kworker/u8:12: attempt to access beyond end of device [ 61.027324][ T3823] loop2: rw=1, sector=185, nr_sectors = 8 limit=128 [ 61.040931][ T3823] kworker/u8:12: attempt to access beyond end of device [ 61.040931][ T3823] loop2: rw=1, sector=201, nr_sectors = 16 limit=128 [ 61.054783][ T3823] kworker/u8:12: attempt to access beyond end of device [ 61.054783][ T3823] loop2: rw=1, sector=225, nr_sectors = 8 limit=128 [ 61.068372][ T3823] kworker/u8:12: attempt to access beyond end of device [ 61.068372][ T3823] loop2: rw=1, sector=241, nr_sectors = 8 limit=128 [ 61.082006][ T3823] kworker/u8:12: attempt to access beyond end of device [ 61.082006][ T3823] loop2: rw=1, sector=257, nr_sectors = 8 limit=128 [ 61.095603][ T3823] kworker/u8:12: attempt to access beyond end of device [ 61.095603][ T3823] loop2: rw=1, sector=273, nr_sectors = 8 limit=128 [ 61.109260][ T3823] kworker/u8:12: attempt to access beyond end of device [ 61.109260][ T3823] loop2: rw=1, sector=289, nr_sectors = 8 limit=128 [ 61.322597][ T4792] netlink: 'syz.0.421': attribute type 1 has an invalid length. [ 61.331302][ T4792] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 61.578536][ T29] kauditd_printk_skb: 278 callbacks suppressed [ 61.578551][ T29] audit: type=1400 audit(61.553:1078): avc: denied { relabelfrom } for pid=4801 comm="syz.0.423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 61.612512][ T29] audit: type=1400 audit(61.553:1079): avc: denied { relabelto } for pid=4801 comm="syz.0.423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 61.785728][ T4809] delete_channel: no stack [ 61.790257][ T4809] delete_channel: no stack [ 61.874318][ T4812] EXT4-fs: Ignoring removed orlov option [ 61.880065][ T4812] EXT4-fs: Ignoring removed mblk_io_submit option [ 61.888647][ T4812] EXT4-fs error (device loop4): ext4_iget_extra_inode:5073: inode #15: comm syz.4.427: corrupted in-inode xattr: e_value size too large [ 61.903055][ T4812] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.427: couldn't read orphan inode 15 (err -117) [ 62.050718][ T4819] batman_adv: batadv0: Adding interface: ipvlan4 [ 62.057330][ T4819] batman_adv: batadv0: The MTU of interface ipvlan4 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.083116][ T4819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.093812][ T4819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.103845][ T4819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan2 [ 62.113765][ T4819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.123648][ T4819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan3 [ 62.133742][ T4819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.144176][ T4819] batman_adv: batadv0: Interface activated: ipvlan4 [ 62.239528][ T4825] veth4: entered promiscuous mode [ 62.244710][ T4825] veth4: entered allmulticast mode [ 62.284091][ T4828] pimreg3: entered allmulticast mode [ 62.291057][ T29] audit: type=1400 audit(62.263:1080): avc: denied { ioctl } for pid=4827 comm="syz.2.433" path="socket:[9456]" dev="sockfs" ino=9456 ioctlcmd=0x7436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 62.320475][ T4828] 9p: Bad value for 'wfdno' [ 62.344404][ T4834] 9p: Bad value for 'rfdno' [ 62.350972][ T4824] set_capacity_and_notify: 5 callbacks suppressed [ 62.350990][ T4824] loop4: detected capacity change from 0 to 8192 [ 62.354265][ T4834] loop2: detected capacity change from 0 to 512 [ 62.359594][ T29] audit: type=1400 audit(62.293:1081): avc: denied { mounton } for pid=4827 comm="syz.2.433" path="/115/file0" dev="tmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 62.366064][ T4834] msdos: Unknown parameter '9p' [ 62.370338][ T29] audit: type=1400 audit(62.323:1082): avc: denied { append } for pid=4833 comm="syz.2.435" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 62.435759][ T3310] loop4: p1 p2 p4[DM] [ 62.439960][ T3310] loop4: p1 size 835329 extends beyond EOD, truncated [ 62.463137][ T3310] loop4: p2 size 8388608 extends beyond EOD, truncated [ 62.474193][ T29] audit: type=1400 audit(62.443:1083): avc: denied { create } for pid=4836 comm="syz.2.436" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 62.500630][ T4840] loop3: detected capacity change from 0 to 512 [ 62.508639][ T3310] loop4: p4 size 262144 extends beyond EOD, truncated [ 62.520213][ T4824] loop4: p1 p2 p4[DM] [ 62.524838][ T4824] loop4: p1 size 835329 extends beyond EOD, truncated [ 62.535047][ T29] audit: type=1400 audit(62.503:1084): avc: denied { setattr } for pid=4841 comm="syz.0.438" name="NETLINK" dev="sockfs" ino=9503 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 62.558469][ T29] audit: type=1400 audit(62.503:1085): avc: denied { execute } for pid=4841 comm="syz.0.438" dev="tmpfs" ino=1097 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 62.566885][ T4824] loop4: p2 size 8388608 extends beyond EOD, [ 62.578991][ T29] audit: type=1400 audit(62.503:1086): avc: denied { execute_no_trans } for pid=4841 comm="syz.0.438" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1097 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 62.585186][ T4824] truncated [ 62.614007][ T4824] loop4: p4 size 262144 extends beyond EOD, truncated [ 62.625871][ T4840] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 62.632886][ T29] audit: type=1400 audit(62.513:1087): avc: denied { unlink } for pid=3323 comm="syz-executor" name="file0" dev="tmpfs" ino=640 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 62.659266][ T4840] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 62.669642][ T4840] EXT4-fs (loop3): orphan cleanup on readonly fs [ 62.676633][ T4840] EXT4-fs warning (device loop3): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 62.691839][ T4840] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 62.699836][ T4840] EXT4-fs error (device loop3): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 62.715093][ T4840] EXT4-fs (loop3): Remounting filesystem read-only [ 62.721807][ T4840] EXT4-fs (loop3): 1 truncate cleaned up [ 62.758524][ T4850] loop0: detected capacity change from 0 to 512 [ 62.766669][ T4852] __nla_validate_parse: 15 callbacks suppressed [ 62.766689][ T4852] netlink: 52 bytes leftover after parsing attributes in process `syz.2.442'. [ 62.782134][ T4852] netlink: 52 bytes leftover after parsing attributes in process `syz.2.442'. [ 62.784815][ T4850] EXT4-fs: Ignoring removed orlov option [ 62.791466][ T4852] netlink: 52 bytes leftover after parsing attributes in process `syz.2.442'. [ 62.797377][ T4850] EXT4-fs: Ignoring removed mblk_io_submit option [ 62.823158][ T4850] EXT4-fs error (device loop0): ext4_iget_extra_inode:5073: inode #15: comm syz.0.441: corrupted in-inode xattr: e_value size too large [ 62.840115][ T4850] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.441: couldn't read orphan inode 15 (err -117) [ 62.931023][ T4859] netlink: 8 bytes leftover after parsing attributes in process `syz.2.443'. [ 63.013303][ T4867] netlink: 8 bytes leftover after parsing attributes in process `syz.1.446'. [ 63.064136][ T4450] udevd[4450]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 63.077472][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 63.090288][ T4868] netlink: 16 bytes leftover after parsing attributes in process `syz.4.444'. [ 63.099317][ T4868] netlink: 20 bytes leftover after parsing attributes in process `syz.4.444'. [ 63.100579][ T3310] udevd[3310]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 63.163629][ T4450] udevd[4450]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 63.175163][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 63.186679][ T3310] udevd[3310]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 63.407920][ T4892] loop0: detected capacity change from 0 to 2048 [ 63.448629][ T4903] netlink: 320 bytes leftover after parsing attributes in process `syz.3.451'. [ 63.475037][ T3310] loop0: p1 < > p4 [ 63.482770][ T3310] loop0: p4 size 722688 extends beyond EOD, truncated [ 63.513063][ T4892] loop0: p1 < > p4 [ 63.518236][ T4892] loop0: p4 size 722688 extends beyond EOD, truncated [ 63.527922][ T4892] netlink: 52 bytes leftover after parsing attributes in process `syz.0.450'. [ 63.536900][ T4892] netlink: 52 bytes leftover after parsing attributes in process `syz.0.450'. [ 63.629994][ T3491] kernel read not supported for file /225/net/ip_tables_names (pid: 3491 comm: kworker/1:6) [ 63.653437][ T3310] udevd[3310]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 63.671004][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 64.138460][ T4986] FAULT_INJECTION: forcing a failure. [ 64.138460][ T4986] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 64.151717][ T4986] CPU: 1 UID: 0 PID: 4986 Comm: syz.4.462 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 64.151809][ T4986] Tainted: [W]=WARN [ 64.151818][ T4986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 64.151833][ T4986] Call Trace: [ 64.151841][ T4986] [ 64.151851][ T4986] __dump_stack+0x1d/0x30 [ 64.151888][ T4986] dump_stack_lvl+0x95/0xd0 [ 64.151912][ T4986] dump_stack+0x15/0x1b [ 64.152048][ T4986] should_fail_ex+0x263/0x280 [ 64.152078][ T4986] should_fail+0xb/0x20 [ 64.152098][ T4986] should_fail_usercopy+0x1a/0x20 [ 64.152123][ T4986] _copy_from_iter+0xcf/0xea0 [ 64.152173][ T4986] ? alloc_pages_mpol+0x217/0x260 [ 64.152205][ T4986] copy_page_from_iter+0x178/0x2a0 [ 64.152239][ T4986] tun_get_user+0xbbd/0x27c0 [ 64.152296][ T4986] ? ref_tracker_alloc+0x1f2/0x2f0 [ 64.152325][ T4986] tun_chr_write_iter+0x15e/0x210 [ 64.152356][ T4986] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 64.152465][ T4986] vfs_write+0x5a6/0x9f0 [ 64.152493][ T4986] ksys_write+0xdc/0x1a0 [ 64.152517][ T4986] __x64_sys_write+0x40/0x50 [ 64.152600][ T4986] x64_sys_call+0x2847/0x3000 [ 64.152632][ T4986] do_syscall_64+0xc0/0x2a0 [ 64.152735][ T4986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.152762][ T4986] RIP: 0033:0x7f6b2aa9b58e [ 64.152782][ T4986] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 64.152866][ T4986] RSP: 002b:00007f6b29536fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 64.152885][ T4986] RAX: ffffffffffffffda RBX: 00007f6b295376c0 RCX: 00007f6b2aa9b58e [ 64.152924][ T4986] RDX: 000000000000004a RSI: 00002000000003c0 RDI: 00000000000000c8 [ 64.152939][ T4986] RBP: 00007f6b29537090 R08: 0000000000000000 R09: 0000000000000000 [ 64.152955][ T4986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 64.152970][ T4986] R13: 00007f6b2ad56038 R14: 00007f6b2ad55fa0 R15: 00007fff46c55978 [ 64.153030][ T4986] [ 64.236704][ T4991] ipip0: entered promiscuous mode [ 64.919880][ T5014] loop4: detected capacity change from 0 to 512 [ 64.950933][ T5024] loop0: detected capacity change from 0 to 512 [ 64.969204][ T5014] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 64.983287][ T5026] netlink: 'syz.2.477': attribute type 6 has an invalid length. [ 65.019953][ T5026] loop2: detected capacity change from 0 to 512 [ 65.029322][ T5026] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 65.061438][ T5037] batman_adv: batadv0: Adding interface: ipvlan2 [ 65.067926][ T5037] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.093630][ T5037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.104296][ T5037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.114248][ T5037] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active [ 65.224202][ T5043] tipc: Started in network mode [ 65.229163][ T5043] tipc: Node identity , cluster identity 4711 [ 65.235384][ T5043] tipc: Failed to obtain node identity [ 65.240859][ T5043] tipc: Enabling of bearer rejected, failed to enable media [ 65.264331][ T5045] veth2: entered promiscuous mode [ 65.269438][ T5045] veth2: entered allmulticast mode [ 65.289566][ T5049] netlink: 'syz.4.483': attribute type 1 has an invalid length. [ 65.306186][ T5049] random: crng reseeded on system resumption [ 65.352427][ T5051] loop0: detected capacity change from 0 to 8192 [ 65.424021][ T3310] loop0: p1 p2 p4[DM] [ 65.428251][ T3310] loop0: p1 size 835329 extends beyond EOD, truncated [ 65.435990][ T5043] sctp: [Deprecated]: syz.2.480 (pid 5043) Use of int in max_burst socket option deprecated. [ 65.435990][ T5043] Use struct sctp_assoc_value instead [ 65.452952][ T3310] loop0: p2 size 8388608 extends beyond EOD, truncated [ 65.475766][ T3310] loop0: p4 size 262144 extends beyond EOD, truncated [ 65.488220][ T5051] loop0: p1 p2 p4[DM] [ 65.492476][ T5051] loop0: p1 size 835329 extends beyond EOD, truncated [ 65.506988][ T5051] loop0: p2 size 8388608 extends beyond EOD, truncated [ 65.515183][ T5051] loop0: p4 size 262144 extends beyond EOD, truncated [ 65.625670][ T5069] loop4: detected capacity change from 0 to 512 [ 65.646005][ T5069] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 65.674010][ T5069] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 65.688046][ T5069] EXT4-fs (loop4): orphan cleanup on readonly fs [ 65.707642][ T5069] EXT4-fs warning (device loop4): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 65.717521][ T3310] udevd[3310]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 65.734068][ T4450] udevd[4450]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 65.746200][ T5069] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 65.777551][ T5069] EXT4-fs error (device loop4): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 65.792407][ T5069] EXT4-fs (loop4): Remounting filesystem read-only [ 65.799123][ T5069] EXT4-fs (loop4): 1 truncate cleaned up [ 65.904182][ T5082] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 65.934636][ T5076] EXT4-fs: Ignoring removed nomblk_io_submit option [ 65.957884][ T5076] ext2: Unknown parameter 'appraise_type' [ 66.045915][ T5096] batman_adv: batadv0: Adding interface: ipvlan3 [ 66.052324][ T5096] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.078122][ T5096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.088608][ T5096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.098496][ T5096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan2 [ 66.108601][ T5096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.118954][ T5096] batman_adv: batadv0: Not using interface ipvlan3 (retrying later): interface not active [ 66.191998][ T5102] 8021q: adding VLAN 0 to HW filter on device ipvlan5 [ 66.202060][ T5102] bond0: (slave ipvlan5): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 66.212764][ T5103] FAT-fs (loop0): Directory bread(block 64) failed [ 66.224165][ T5103] FAT-fs (loop0): Directory bread(block 65) failed [ 66.233583][ T5103] FAT-fs (loop0): Directory bread(block 66) failed [ 66.241393][ T5103] FAT-fs (loop0): Directory bread(block 67) failed [ 66.248652][ T5103] FAT-fs (loop0): Directory bread(block 68) failed [ 66.255531][ T5103] FAT-fs (loop0): Directory bread(block 69) failed [ 66.272423][ T5103] FAT-fs (loop0): Directory bread(block 70) failed [ 66.279118][ T5103] FAT-fs (loop0): Directory bread(block 71) failed [ 66.285836][ T5103] FAT-fs (loop0): Directory bread(block 72) failed [ 66.292455][ T5103] FAT-fs (loop0): Directory bread(block 73) failed [ 66.307929][ T5103] bio_check_eod: 84 callbacks suppressed [ 66.307945][ T5103] syz.0.500: attempt to access beyond end of device [ 66.307945][ T5103] loop0: rw=8388608, sector=1736, nr_sectors = 8 limit=256 [ 66.315952][ T5103] syz.0.500: attempt to access beyond end of device [ 66.315952][ T5103] loop0: rw=8388608, sector=1736, nr_sectors = 8 limit=256 [ 66.342449][ T5103] syz.0.500: attempt to access beyond end of device [ 66.342449][ T5103] loop0: rw=8388608, sector=1736, nr_sectors = 8 limit=256 [ 66.356614][ T5103] syz.0.500: attempt to access beyond end of device [ 66.356614][ T5103] loop0: rw=8388608, sector=1736, nr_sectors = 8 limit=256 [ 66.371597][ T5103] syz.0.500: attempt to access beyond end of device [ 66.371597][ T5103] loop0: rw=8388608, sector=1736, nr_sectors = 8 limit=256 [ 66.387140][ T5103] syz.0.500: attempt to access beyond end of device [ 66.387140][ T5103] loop0: rw=8388608, sector=1736, nr_sectors = 8 limit=256 [ 66.401275][ T5103] syz.0.500: attempt to access beyond end of device [ 66.401275][ T5103] loop0: rw=8388608, sector=1736, nr_sectors = 8 limit=256 [ 66.423807][ T5103] syz.0.500: attempt to access beyond end of device [ 66.423807][ T5103] loop0: rw=8388608, sector=1736, nr_sectors = 8 limit=256 [ 66.438626][ T5103] syz.0.500: attempt to access beyond end of device [ 66.438626][ T5103] loop0: rw=8388608, sector=1736, nr_sectors = 8 limit=256 [ 66.453112][ T5110] syz.0.500: attempt to access beyond end of device [ 66.453112][ T5110] loop0: rw=8388608, sector=1736, nr_sectors = 8 limit=256 [ 66.549333][ T5112] netlink: 'syz.1.503': attribute type 1 has an invalid length. [ 66.612763][ T29] kauditd_printk_skb: 199 callbacks suppressed [ 66.612781][ T29] audit: type=1400 audit(322.580:1285): avc: denied { write } for pid=5121 comm="syz.3.508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 66.644952][ T5127] ext4: Unknown parameter 'uid<00000000000000000000' [ 66.669039][ T5112] syzkaller0: entered promiscuous mode [ 66.674727][ T5112] syzkaller0: entered allmulticast mode [ 66.699528][ T5125] xt_CT: No such helper "netbios-ns" [ 66.719043][ T5125] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 66.737254][ T5124] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 66.737795][ T29] audit: type=1400 audit(322.710:1286): avc: denied { unmount } for pid=3322 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 67.194924][ T5174] veth4: entered promiscuous mode [ 67.200177][ T5174] veth4: entered allmulticast mode [ 67.348016][ T29] audit: type=1326 audit(323.320:1287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5180 comm="syz.4.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b2aadacb9 code=0x7ffc0000 [ 67.393309][ T29] audit: type=1326 audit(323.350:1288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5180 comm="syz.4.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f6b2aadacb9 code=0x7ffc0000 [ 67.397484][ T3310] loop0: p1 p2 p4[DM] [ 67.416607][ T29] audit: type=1326 audit(323.350:1289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5180 comm="syz.4.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b2aadacb9 code=0x7ffc0000 [ 67.443569][ T29] audit: type=1326 audit(323.350:1290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5180 comm="syz.4.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b2aadacb9 code=0x7ffc0000 [ 67.466839][ T29] audit: type=1326 audit(323.350:1291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5180 comm="syz.4.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6b2aadacb9 code=0x7ffc0000 [ 67.476280][ T3310] loop0: p1 size 835329 extends beyond EOD, [ 67.489701][ T29] audit: type=1326 audit(323.350:1292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5180 comm="syz.4.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b2aadacb9 code=0x7ffc0000 [ 67.489732][ T29] audit: type=1326 audit(323.350:1293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5180 comm="syz.4.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b2aadacb9 code=0x7ffc0000 [ 67.495903][ T3310] truncated [ 67.544631][ T29] audit: type=1326 audit(323.350:1294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5180 comm="syz.4.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7f6b2aadacb9 code=0x7ffc0000 [ 67.555596][ T3310] loop0: p2 size 8388608 extends beyond EOD, truncated [ 67.580626][ T3310] loop0: p4 size 262144 extends beyond EOD, truncated [ 67.590651][ T5174] loop0: p1 p2 p4[DM] [ 67.595063][ T5174] loop0: p1 size 835329 extends beyond EOD, truncated [ 67.604916][ T5174] loop0: p2 size 8388608 extends beyond EOD, truncated [ 67.614122][ T5183] program syz.4.528 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 67.634738][ T5183] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 67.649655][ T5183] ip6erspan0: entered promiscuous mode [ 67.659839][ T5174] loop0: p4 size 262144 extends beyond EOD, truncated [ 67.782711][ T5199] batman_adv: batadv0: Adding interface: ipvlan4 [ 67.789330][ T5199] batman_adv: batadv0: The MTU of interface ipvlan4 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.814718][ T5199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.825298][ T5199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.835229][ T5199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan2 [ 67.845246][ T5199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.855204][ T5199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan3 [ 67.865088][ T5199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.890308][ T5199] batman_adv: batadv0: Interface activated: ipvlan4 [ 67.905922][ T5203] __nla_validate_parse: 10 callbacks suppressed [ 67.905939][ T5203] netlink: 52 bytes leftover after parsing attributes in process `syz.2.535'. [ 67.921159][ T5203] netlink: 52 bytes leftover after parsing attributes in process `syz.2.535'. [ 67.930576][ T5203] netlink: 52 bytes leftover after parsing attributes in process `syz.2.535'. [ 68.102745][ T5219] set_capacity_and_notify: 8 callbacks suppressed [ 68.102763][ T5219] loop2: detected capacity change from 0 to 1024 [ 68.107224][ T5222] netlink: 20 bytes leftover after parsing attributes in process `syz.3.543'. [ 68.129256][ T5216] loop4: detected capacity change from 0 to 512 [ 68.163592][ T5216] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 68.231884][ T5222] bond1: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 68.234849][ T5230] netlink: 52 bytes leftover after parsing attributes in process `syz.3.543'. [ 68.251219][ T5230] netlink: 52 bytes leftover after parsing attributes in process `syz.3.543'. [ 68.260235][ T5230] netlink: 52 bytes leftover after parsing attributes in process `syz.3.543'. [ 68.271133][ T5216] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 68.283207][ T5233] loop1: detected capacity change from 0 to 128 [ 68.303845][ T5222] bond1 (unregistering): Released all slaves [ 68.311308][ T5216] EXT4-fs (loop4): orphan cleanup on readonly fs [ 68.350967][ T5216] EXT4-fs warning (device loop4): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 68.366418][ T5216] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 68.415350][ T5216] EXT4-fs error (device loop4): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 68.430325][ T5216] EXT4-fs (loop4): Remounting filesystem read-only [ 68.437466][ T5216] EXT4-fs (loop4): 1 truncate cleaned up [ 68.461268][ T5245] netlink: 'syz.3.548': attribute type 1 has an invalid length. [ 68.473121][ T5244] batman_adv: batadv0: Adding interface: ipvlan5 [ 68.479560][ T5244] batman_adv: batadv0: The MTU of interface ipvlan5 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.504945][ T5244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.515438][ T5244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.526095][ T5244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan2 [ 68.536016][ T5244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.545910][ T5244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan3 [ 68.556055][ T5244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.565931][ T5244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan4 [ 68.575874][ T5244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.599303][ T5248] Invalid ELF header magic: != ELF [ 68.629194][ T5244] batman_adv: batadv0: Interface activated: ipvlan5 [ 68.637225][ T5253] netlink: 52 bytes leftover after parsing attributes in process `syz.2.552'. [ 68.646339][ T5253] netlink: 52 bytes leftover after parsing attributes in process `syz.2.552'. [ 68.655960][ T5253] netlink: 52 bytes leftover after parsing attributes in process `syz.2.552'. [ 68.676392][ T5245] bond1: entered promiscuous mode [ 68.681798][ T5245] 8021q: adding VLAN 0 to HW filter on device bond1 [ 68.718071][ T5255] 8021q: adding VLAN 0 to HW filter on device bond1 [ 68.745665][ T5255] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 68.756320][ T5255] bond1: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 68.769647][ T5255] bond1: (slave wireguard0): making interface the new active one [ 68.777509][ T5255] wireguard0: entered promiscuous mode [ 68.785783][ T5255] bond1: (slave wireguard0): Enslaving as an active interface with an up link [ 68.876288][ T5270] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 68.883638][ T5270] IPv6: NLM_F_CREATE should be set when creating new route [ 68.890905][ T5270] IPv6: NLM_F_CREATE should be set when creating new route [ 68.898218][ T5270] IPv6: NLM_F_CREATE should be set when creating new route [ 68.914874][ T5272] syzkaller1: entered promiscuous mode [ 68.921188][ T5272] syzkaller1: entered allmulticast mode [ 68.940322][ T5270] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 68.982136][ T5277] veth6: entered promiscuous mode [ 68.987460][ T5277] veth6: entered allmulticast mode [ 69.145228][ T5277] loop3: detected capacity change from 0 to 8192 [ 69.276426][ T5290] batman_adv: batadv0: Adding interface: ipvlan2 [ 69.282825][ T5290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.293405][ T5290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.304391][ T5277] loop3: p1 p2 p4[DM] [ 69.308877][ T5277] loop3: p1 size 835329 extends beyond EOD, truncated [ 69.320679][ T5277] loop3: p2 size 8388608 extends beyond EOD, truncated [ 69.339909][ T5277] loop3: p4 size 262144 extends beyond EOD, truncated [ 69.347617][ T5290] batman_adv: batadv0: Interface activated: ipvlan2 [ 69.469480][ T3311] udevd[3311]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 69.481140][ T4450] udevd[4450]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 69.495352][ T3310] udevd[3310]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 69.624536][ T5313] loop4: detected capacity change from 0 to 8192 [ 69.650365][ T5311] netlink: 'syz.4.574': attribute type 2 has an invalid length. [ 69.795546][ T5329] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=184 sclass=netlink_route_socket pid=5329 comm=syz.1.581 [ 69.838400][ T5329] netlink: 'syz.1.581': attribute type 5 has an invalid length. [ 69.847184][ T5335] loop4: detected capacity change from 0 to 128 [ 69.862140][ T5335] EXT4-fs: Ignoring removed nobh option [ 69.895977][ T5335] ext4: Unknown parameter 'dont_measure' [ 69.959603][ T5349] netlink: 'syz.1.589': attribute type 10 has an invalid length. [ 69.999602][ T5355] 8021q: VLANs not supported on sit0 [ 70.041049][ T5361] netlink: 'syz.1.589': attribute type 1 has an invalid length. [ 70.080870][ T5361] 8021q: adding VLAN 0 to HW filter on device bond1 [ 70.083028][ T5362] loop3: detected capacity change from 0 to 512 [ 70.104579][ T5362] ext4: Unknown parameter 'nouser_xattr' [ 70.131613][ T5365] veth3: entered promiscuous mode [ 70.142699][ T5362] loop3: detected capacity change from 0 to 512 [ 70.149475][ T5362] ext4: Unknown parameter 'nouser_xattr' [ 70.159659][ T5362] loop3: detected capacity change from 0 to 512 [ 70.168210][ T5362] ext4: Unknown parameter 'nouser_xattr' [ 70.205458][ T5362] loop3: detected capacity change from 0 to 512 [ 70.219127][ T5362] ext4: Unknown parameter 'nouser_xattr' [ 70.247655][ T5362] ext4: Unknown parameter 'nouser_xattr' [ 70.286303][ T5349] veth5: entered promiscuous mode [ 70.292036][ T5362] ext4: Unknown parameter 'nouser_xattr' [ 70.376142][ T5365] vfat: Unknown parameter 'syzkaller1' [ 70.405277][ T5362] ext4: Unknown parameter 'nouser_xattr' [ 70.491882][ T5362] ext4: Unknown parameter 'nouser_xattr' [ 70.519153][ T55] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 70.532879][ T55] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 70.548493][ T5362] ext4: Unknown parameter 'nouser_xattr' [ 70.566493][ T55] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 70.600676][ T5405] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 70.612919][ T55] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 70.622056][ T5405] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 70.632179][ T5362] ext4: Unknown parameter 'nouser_xattr' [ 70.640783][ T5405] EXT4-fs (loop1): orphan cleanup on readonly fs [ 70.662178][ T5362] ext4: Unknown parameter 'nouser_xattr' [ 70.678802][ T5405] EXT4-fs warning (device loop1): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 70.710461][ T5362] ext4: Unknown parameter 'nouser_xattr' [ 70.722739][ T5405] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 70.737684][ T5362] ext4: Unknown parameter 'nouser_xattr' [ 70.751549][ T5405] EXT4-fs error (device loop1): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 70.860024][ T5405] EXT4-fs (loop1): Remounting filesystem read-only [ 70.872872][ T5405] EXT4-fs (loop1): 1 truncate cleaned up [ 70.890857][ T5405] EXT4-fs mount: 37 callbacks suppressed [ 70.890872][ T5405] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 70.989660][ T3324] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.417579][ T5434] netlink: 'syz.1.615': attribute type 21 has an invalid length. [ 71.780420][ T5449] EXT4-fs (loop2): orphan cleanup on readonly fs [ 71.799315][ T5449] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.622: bg 0: block 248: padding at end of block bitmap is not set [ 71.813270][ T5418] syz.3.611 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 71.824772][ T5418] CPU: 1 UID: 0 PID: 5418 Comm: syz.3.611 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 71.824857][ T5418] Tainted: [W]=WARN [ 71.824866][ T5418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 71.824883][ T5418] Call Trace: [ 71.824892][ T5418] [ 71.824903][ T5418] __dump_stack+0x1d/0x30 [ 71.824958][ T5418] dump_stack_lvl+0x95/0xd0 [ 71.824980][ T5418] dump_stack+0x15/0x1b [ 71.825000][ T5418] dump_header+0x80/0x240 [ 71.825021][ T5418] oom_kill_process+0x295/0x350 [ 71.825044][ T5418] out_of_memory+0x97d/0xb80 [ 71.825137][ T5418] try_charge_memcg+0x62e/0xa10 [ 71.825180][ T5418] charge_memcg+0x51/0xc0 [ 71.825294][ T5418] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 71.825335][ T5418] __read_swap_cache_async+0x17b/0x2d0 [ 71.825426][ T5418] swap_cluster_readahead+0x362/0x3c0 [ 71.825463][ T5418] swapin_readahead+0xde/0x840 [ 71.825494][ T5418] ? __rcu_read_unlock+0x33/0x70 [ 71.825540][ T5418] ? __rcu_read_unlock+0x4e/0x70 [ 71.825559][ T5418] ? swap_cache_get_folio+0x26f/0x280 [ 71.825590][ T5418] do_swap_page+0x2f4/0x2140 [ 71.825730][ T5418] ? css_rstat_updated+0xbb/0x280 [ 71.825766][ T5418] ? __pfx_default_wake_function+0x10/0x10 [ 71.825902][ T5418] handle_mm_fault+0xb40/0x3030 [ 71.825942][ T5418] ? vma_start_read+0x1c7/0x2c0 [ 71.825972][ T5418] do_user_addr_fault+0x62f/0x1050 [ 71.826032][ T5418] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 71.826056][ T5418] ? irqentry_exit+0x3c/0x510 [ 71.826101][ T5418] exc_page_fault+0x62/0xa0 [ 71.826132][ T5418] asm_exc_page_fault+0x26/0x30 [ 71.826154][ T5418] RIP: 0033:0x7f5524bbf4c8 [ 71.826213][ T5418] Code: 00 be 08 00 00 00 4c 89 ff 83 c5 01 e8 11 95 fe ff 49 8b 47 40 41 83 47 30 08 48 8d 48 f8 49 89 4f 40 48 89 58 f8 49 83 c5 01 <45> 3b 6c 24 04 0f 82 fd fe ff ff 41 80 7f 60 00 0f 84 4a 02 00 00 [ 71.826232][ T5418] RSP: 002b:00007ffc234adaa0 EFLAGS: 00010202 [ 71.826249][ T5418] RAX: 000000110c240000 RBX: ffffffff8198edb4 RCX: 0000000000000006 [ 71.826319][ T5418] RDX: 0000000000000db4 RSI: 00000000000023b6 RDI: 0000000000000040 [ 71.826332][ T5418] RBP: 0000000000000000 R08: 00007f5524f50000 R09: 00007f5524f52000 [ 71.826345][ T5418] R10: 000000008198edb8 R11: 000000000000000f R12: 00007f5524f66038 [ 71.826359][ T5418] R13: 0000000000000004 R14: ffffffff8198e3af R15: 00007f5525a95720 [ 71.826373][ T5418] ? __fget_files+0x17f/0x1c0 [ 71.826397][ T5418] ? __pfx_get_close_on_exec+0x4/0x10 [ 71.826433][ T5418] [ 71.826442][ T5418] memory: usage 307200kB, limit 307200kB, failcnt 798 [ 71.884907][ T3310] loop0: p1 p2 p4[DM] [ 71.885750][ T5418] memory+swap: usage 307940kB, limit 9007199254740988kB, failcnt 0 [ 71.891105][ T3310] loop0: p1 size 835329 extends beyond EOD, [ 71.895000][ T5418] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 71.895021][ T5418] Memory cgroup stats for /syz3: [ 71.896022][ T5418] cache 0 [ 71.901084][ T3310] truncated [ 71.979737][ T5449] __quota_error: 63 callbacks suppressed [ 71.979792][ T5449] Quota error (device loop2): write_blk: dquota write failed [ 71.984226][ T5418] rss 0 [ 71.988709][ T5449] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 72.008365][ T5418] shmem 0 [ 72.008378][ T5418] mapped_file 0 [ 72.008386][ T5418] dirty 0 [ 72.008395][ T5418] writeback 0 [ 72.014500][ T5449] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.622: Failed to acquire dquot type 1 [ 72.019819][ T29] audit: type=1400 audit(327.990:1356): avc: denied { write } for pid=5431 comm="syz.1.615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 72.022568][ T5418] workingset_refault_anon 50 [ 72.032161][ T5449] EXT4-fs (loop2): 1 truncate cleaned up [ 72.039283][ T5418] workingset_refault_file 312 [ 72.039297][ T5418] swap 757760 [ 72.039305][ T5418] swapcached 0 [ 72.039314][ T5418] pgpgin 70849 [ 72.049766][ T5449] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 72.055391][ T5418] pgpgout 70849 [ 72.065577][ T3310] loop0: p2 size 8388608 extends beyond EOD, truncated [ 72.067311][ T3310] loop0: p4 size 262144 extends beyond EOD, [ 72.068952][ T5418] pgfault 35170 [ 72.068965][ T5418] pgmajfault 40 [ 72.068975][ T5418] inactive_anon 0 [ 72.076251][ T3310] truncated [ 72.196311][ T5442] loop0: p1 p2 p4[DM] [ 72.197318][ T5418] active_anon 0 [ 72.208641][ T5442] loop0: p1 size 835329 extends beyond EOD, [ 72.220008][ T5418] inactive_file 0 [ 72.220022][ T5418] active_file 0 [ 72.220031][ T5418] unevictable 0 [ 72.220040][ T5418] hierarchical_memory_limit 314572800 [ 72.220051][ T5418] hierarchical_memsw_limit 9223372036854771712 [ 72.223568][ T5442] truncated [ 72.289587][ T5418] total_cache 0 [ 72.293072][ T5418] total_rss 0 [ 72.296518][ T5418] total_shmem 0 [ 72.300096][ T5418] total_mapped_file 0 [ 72.304167][ T5418] total_dirty 0 [ 72.307674][ T5418] total_writeback 0 [ 72.311510][ T5418] total_workingset_refault_anon 50 [ 72.316823][ T5418] total_workingset_refault_file 312 [ 72.322102][ T5418] total_swap 757760 [ 72.326120][ T5418] total_swapcached 0 [ 72.330177][ T5418] total_pgpgin 70849 [ 72.334213][ T5418] total_pgpgout 70849 [ 72.338488][ T5418] total_pgfault 35170 [ 72.342493][ T5418] total_pgmajfault 40 [ 72.346522][ T5418] total_inactive_anon 0 [ 72.350786][ T5418] total_active_anon 0 [ 72.354907][ T5418] total_inactive_file 0 [ 72.359262][ T5418] total_active_file 0 [ 72.363307][ T5418] total_unevictable 0 [ 72.367523][ T5418] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.611,pid=5418,uid=0 [ 72.382515][ T5418] Memory cgroup out of memory: Killed process 5418 (syz.3.611) total-vm:94132kB, anon-rss:1208kB, file-rss:22436kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 72.410175][ T5442] loop0: p2 size 8388608 extends beyond EOD, truncated [ 72.418190][ T5442] loop0: p4 size 262144 extends beyond EOD, truncated [ 72.450303][ T3007] loop0: p1 p2 p4[DM] [ 72.518093][ T3007] loop0: p1 size 835329 extends beyond EOD, truncated [ 72.538774][ T5420] syz.3.611 (5420) used greatest stack depth: 8824 bytes left [ 72.553834][ T29] audit: type=1400 audit(328.530:1357): avc: denied { validate_trans } for pid=5452 comm="syz.1.623" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 72.576247][ T5455] netlink: 'syz.4.624': attribute type 5 has an invalid length. [ 72.594503][ T5456] EXT4-fs (loop2): shut down requested (0) [ 72.613089][ T3007] loop0: p2 size 8388608 extends beyond EOD, truncated [ 72.628729][ T29] audit: type=1400 audit(328.600:1358): avc: denied { read } for pid=2989 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 72.650521][ T29] audit: type=1400 audit(328.600:1359): avc: denied { search } for pid=2989 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 72.671798][ T29] audit: type=1400 audit(328.600:1360): avc: denied { search } for pid=2989 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 72.693130][ T29] audit: type=1400 audit(328.600:1361): avc: denied { add_name } for pid=2989 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 72.713603][ T29] audit: type=1400 audit(328.600:1362): avc: denied { create } for pid=2989 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 72.733754][ T29] audit: type=1400 audit(328.600:1363): avc: denied { append open } for pid=2989 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 72.754580][ T3007] loop0: p4 size 262144 extends beyond EOD, truncated [ 72.773872][ T5419] syz.3.611 (5419) used greatest stack depth: 6248 bytes left [ 72.905379][ T3310] udevd[3310]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 72.906338][ T4450] udevd[4450]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 72.918624][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 73.005426][ T4450] udevd[4450]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 73.005794][ T3310] udevd[3310]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 73.078639][ T5472] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 73.090648][ T5472] syzkaller0: left promiscuous mode [ 73.096118][ T5472] syzkaller0: left allmulticast mode [ 73.107372][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 73.162323][ T5476] set_capacity_and_notify: 14 callbacks suppressed [ 73.162341][ T5476] loop4: detected capacity change from 0 to 2048 [ 73.195124][ T3311] udevd[3311]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 73.243167][ T5474] loop0: detected capacity change from 0 to 8192 [ 73.255993][ T5476] Alternate GPT is invalid, using primary GPT. [ 73.262364][ T5476] loop4: p1 p2 p3 [ 73.266262][ T5476] loop4: partition table partially beyond EOD, truncated [ 73.274473][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.345184][ T5474] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 73.354403][ T5474] FAT-fs (loop0): Filesystem has been set read-only [ 73.584466][ T5500] __nla_validate_parse: 17 callbacks suppressed [ 73.584500][ T5500] netlink: 52 bytes leftover after parsing attributes in process `syz.4.638'. [ 73.599864][ T5500] netlink: 52 bytes leftover after parsing attributes in process `syz.4.638'. [ 73.608880][ T5500] netlink: 52 bytes leftover after parsing attributes in process `syz.4.638'. [ 73.616922][ T5496] loop0: detected capacity change from 0 to 8192 [ 73.654091][ T5504] loop3: detected capacity change from 0 to 256 [ 73.664101][ T3310] loop0: p1 p2 p4[DM] [ 73.664721][ T5504] /dev/loop3: Can't open blockdev [ 73.668356][ T3310] loop0: p1 size 835329 extends beyond EOD, truncated [ 73.707835][ T3310] loop0: p2 size 8388608 extends beyond EOD, truncated [ 73.725740][ T3310] loop0: p4 size 262144 extends beyond EOD, truncated [ 73.739928][ T5496] loop0: p1 p2 p4[DM] [ 73.763732][ T5496] loop0: p1 size 835329 extends beyond EOD, truncated [ 73.771385][ T5496] loop0: p2 size 8388608 extends beyond EOD, truncated [ 73.779428][ T5496] loop0: p4 size 262144 extends beyond EOD, truncated [ 73.848924][ T5511] netlink: 96 bytes leftover after parsing attributes in process `syz.3.643'. [ 73.879908][ T5515] netlink: 'syz.0.645': attribute type 2 has an invalid length. [ 73.888615][ T5515] netlink: 16 bytes leftover after parsing attributes in process `syz.0.645'. [ 73.900988][ T5515] bond0: entered promiscuous mode [ 73.906229][ T5515] bond_slave_0: entered promiscuous mode [ 73.912108][ T5515] bond_slave_1: entered promiscuous mode [ 73.921347][ T5515] ipvlan1: entered promiscuous mode [ 73.927308][ T5515] ipvlan1: left promiscuous mode [ 73.932674][ T5515] bond0: left promiscuous mode [ 73.937595][ T5515] bond_slave_0: left promiscuous mode [ 73.943179][ T5515] bond_slave_1: left promiscuous mode [ 73.971217][ T5517] loop3: detected capacity change from 0 to 512 [ 74.010048][ T5517] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.029040][ T5517] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 74.044473][ T5517] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 22 with error 28 [ 74.057055][ T5517] EXT4-fs (loop3): This should not happen!! Data will be lost [ 74.057055][ T5517] [ 74.066834][ T5517] EXT4-fs (loop3): Total free blocks count 0 [ 74.072940][ T5517] EXT4-fs (loop3): Free/Dirty block details [ 74.078997][ T5517] EXT4-fs (loop3): free_blocks=65280 [ 74.084341][ T5517] EXT4-fs (loop3): dirty_blocks=31 [ 74.089491][ T5517] EXT4-fs (loop3): Block reservation details [ 74.095974][ T5517] EXT4-fs (loop3): i_reserved_data_blocks=31 [ 74.103050][ T5517] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28 [ 74.148052][ T5533] loop3: detected capacity change from 0 to 512 [ 74.155535][ T5533] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 74.167780][ T5531] loop0: detected capacity change from 0 to 1024 [ 74.168540][ T5533] EXT4-fs (loop3): 1 truncate cleaned up [ 74.184266][ T5531] EXT4-fs: Ignoring removed orlov option [ 74.188490][ T5533] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.216049][ T5531] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.231319][ T5538] netlink: 52 bytes leftover after parsing attributes in process `syz.1.651'. [ 74.240514][ T5538] netlink: 52 bytes leftover after parsing attributes in process `syz.1.651'. [ 74.249467][ T5538] netlink: 52 bytes leftover after parsing attributes in process `syz.1.651'. [ 74.300371][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.375667][ T5553] netlink: 80 bytes leftover after parsing attributes in process `syz.3.658'. [ 74.387227][ T5553] netlink: 40 bytes leftover after parsing attributes in process `syz.3.658'. [ 74.416972][ T5557] netlink: 'syz.2.660': attribute type 21 has an invalid length. [ 74.442852][ T5565] sctp: [Deprecated]: syz.3.659 (pid 5565) Use of int in max_burst socket option. [ 74.442852][ T5565] Use struct sctp_assoc_value instead [ 74.461129][ T5565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.475340][ T5565] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.491865][ T5567] loop1: detected capacity change from 0 to 512 [ 74.501238][ T5567] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 74.516897][ T5567] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 74.529611][ T5567] EXT4-fs (loop1): orphan cleanup on readonly fs [ 74.540062][ T5567] EXT4-fs warning (device loop1): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 74.555037][ T5567] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 74.562256][ T5567] EXT4-fs error (device loop1): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 74.577516][ T5567] EXT4-fs (loop1): Remounting filesystem read-only [ 74.584582][ T5567] EXT4-fs (loop1): 1 truncate cleaned up [ 74.597165][ T5567] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 74.631494][ T3324] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.714751][ T5577] loop2: detected capacity change from 0 to 128 [ 74.729682][ T5577] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 74.742911][ T5577] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:375: inode #2: comm syz.2.665: No space for directory leaf checksum. Please run e2fsck -D. [ 74.758402][ T5577] EXT4-fs error (device loop2): htree_dirblock_to_tree:1051: inode #2: comm syz.2.665: Directory block failed checksum [ 74.772190][ T5577] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:375: inode #2: comm syz.2.665: No space for directory leaf checksum. Please run e2fsck -D. [ 74.787540][ T5577] EXT4-fs error (device loop2): __ext4_find_entry:1626: inode #2: comm syz.2.665: checksumming directory block 0 [ 74.819675][ T3323] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 74.866984][ T5584] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5584 comm=syz.2.667 [ 74.881280][ T5584] netlink: 'syz.2.667': attribute type 1 has an invalid length. [ 74.900370][ T5584] 8021q: adding VLAN 0 to HW filter on device bond2 [ 74.924949][ T5589] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 74.935436][ T5589] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.972814][ T5594] veth1_to_bond: entered promiscuous mode [ 74.982488][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.031503][ T5589] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 75.032780][ T5597] loop3: detected capacity change from 0 to 512 [ 75.041904][ T5589] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.060743][ T5597] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 75.075291][ T5598] dummy0: entered allmulticast mode [ 75.081508][ T5598] dummy0: left allmulticast mode [ 75.084085][ T5597] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 75.098998][ T5597] EXT4-fs (loop3): orphan cleanup on readonly fs [ 75.109592][ T5589] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 75.120094][ T5589] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.137930][ T5597] EXT4-fs warning (device loop3): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 75.187756][ T5597] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 75.196544][ T5597] EXT4-fs error (device loop3): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 75.217112][ T5589] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 75.227477][ T5589] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.238229][ T5597] EXT4-fs (loop3): Remounting filesystem read-only [ 75.249584][ T5605] program syz.0.674 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 75.269919][ T5597] EXT4-fs (loop3): 1 truncate cleaned up [ 75.276076][ T5593] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 75.286959][ T5593] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 75.299979][ T5593] rock: directory entry would overflow storage [ 75.306223][ T5593] rock: sig=0x4f50, size=4, remaining=3 [ 75.311822][ T5593] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 75.319641][ T5597] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 75.338086][ T37] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 75.339823][ T5593] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 75.346783][ T37] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.355562][ T5593] Symlink component flag not implemented [ 75.368720][ T5593] Symlink component flag not implemented [ 75.384963][ T37] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 75.393320][ T37] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.416956][ T37] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 75.425430][ T37] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.439192][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.448952][ T37] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 75.457264][ T37] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.480358][ T5614] netlink: 'syz.3.676': attribute type 1 has an invalid length. [ 75.484466][ T5588] veth1_to_bond: left promiscuous mode [ 75.519612][ T5614] 8021q: adding VLAN 0 to HW filter on device bond2 [ 75.543148][ T5614] gretap1: entered promiscuous mode [ 75.562663][ T5614] bond2: (slave gretap1): making interface the new active one [ 75.571874][ T5614] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 75.611550][ T5619] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 75.700670][ T5631] EXT4-fs: Ignoring removed nobh option [ 75.724085][ T5631] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.811578][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.969458][ T5653] EXT4-fs (loop1): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 75.985193][ T5653] EXT4-fs warning (device loop1): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 76.016444][ T5658] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 76.034653][ T5658] EXT4-fs warning (device loop1): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 76.047515][ T5656] EXT4-fs (loop4): 1 orphan inode deleted [ 76.049907][ T1631] EXT4-fs error (device loop4): ext4_release_dquot:7022: comm kworker/u8:8: Failed to release dquot type 1 [ 76.056986][ T5656] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.111896][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.170384][ T5667] bond1: option miimon: invalid value (18446744073709551615) [ 76.178036][ T5667] bond1: option miimon: allowed values 0 - 2147483647 [ 76.225996][ T5667] bond1 (unregistering): Released all slaves [ 76.237795][ T3324] EXT4-fs (loop1): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 76.269911][ T5674] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 76.299163][ T5674] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 76.352711][ T5674] EXT4-fs (loop0): orphan cleanup on readonly fs [ 76.407418][ T5674] EXT4-fs warning (device loop0): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 76.422711][ T5674] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 76.429892][ T5674] EXT4-fs error (device loop0): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 76.445237][ T5674] EXT4-fs (loop0): Remounting filesystem read-only [ 76.451920][ T5674] EXT4-fs (loop0): 1 truncate cleaned up [ 76.488739][ T5674] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 76.605899][ T5699] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 76.681120][ T5703] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 76.691734][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.702452][ T5699] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 76.718769][ T5699] EXT4-fs (loop2): orphan cleanup on readonly fs [ 76.726537][ T5699] EXT4-fs warning (device loop2): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 76.741951][ T5699] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 76.749235][ T5699] EXT4-fs error (device loop2): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 76.775555][ T5703] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 76.814005][ T5703] EXT4-fs (loop4): orphan cleanup on readonly fs [ 76.826051][ T5699] EXT4-fs (loop2): Remounting filesystem read-only [ 76.834503][ T5695] loop3: p1 p2 p4[DM] [ 76.847445][ T5695] loop3: p1 size 835329 extends beyond EOD, truncated [ 76.855500][ T5703] EXT4-fs warning (device loop4): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 76.874059][ T5699] EXT4-fs (loop2): 1 truncate cleaned up [ 76.881073][ T5695] loop3: p2 size 8388608 extends beyond EOD, truncated [ 76.890053][ T5699] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 76.904512][ T5695] loop3: p4 size 262144 extends beyond EOD, truncated [ 76.916978][ T5703] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 76.987154][ T5703] EXT4-fs error (device loop4): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 77.051561][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.124169][ T5703] EXT4-fs (loop4): Remounting filesystem read-only [ 77.142174][ T5703] EXT4-fs (loop4): 1 truncate cleaned up [ 77.162109][ T5703] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 77.180379][ T5709] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=5709 comm=syz.3.708 [ 77.224647][ T5709] batman_adv: batadv0: Adding interface: ipvlan5 [ 77.231065][ T5709] batman_adv: batadv0: The MTU of interface ipvlan5 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.256745][ T5709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.267299][ T5709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.277165][ T5709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan2 [ 77.287085][ T5709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.296923][ T5709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan3 [ 77.306794][ T5709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.316690][ T5709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan4 [ 77.322168][ T3311] udevd[3311]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 77.326680][ T5709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.365017][ T5709] batman_adv: batadv0: Interface activated: ipvlan5 [ 77.368489][ T5715] EXT4-fs: Ignoring removed nobh option [ 77.380119][ T318] tipc: Subscription rejected, illegal request [ 77.398223][ T29] kauditd_printk_skb: 66 callbacks suppressed [ 77.398240][ T29] audit: type=1326 audit(334.376:1422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5707 comm="syz.0.705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa77e7facb9 code=0x7ffc0000 [ 77.405205][ T5715] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 77.429880][ T29] audit: type=1326 audit(334.376:1423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5707 comm="syz.0.705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa77e7facb9 code=0x7ffc0000 [ 77.460621][ T29] audit: type=1326 audit(334.376:1424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5707 comm="syz.0.705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fa77e7facb9 code=0x7ffc0000 [ 77.483539][ T29] audit: type=1326 audit(334.376:1425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5707 comm="syz.0.705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa77e7facb9 code=0x7ffc0000 [ 77.506338][ T29] audit: type=1326 audit(334.376:1426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5707 comm="syz.0.705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa77e7facb9 code=0x7ffc0000 [ 77.529275][ T29] audit: type=1326 audit(334.376:1427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5707 comm="syz.0.705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fa77e7facb9 code=0x7ffc0000 [ 77.552084][ T29] audit: type=1326 audit(334.376:1428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5707 comm="syz.0.705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa77e7facb9 code=0x7ffc0000 [ 77.575253][ T29] audit: type=1326 audit(334.376:1429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5707 comm="syz.0.705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fa77e7facb9 code=0x7ffc0000 [ 77.575474][ T5715] EXT4-fs error (device loop1): ext4_ext_check_inode:523: inode #11: comm syz.1.709: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 77.598628][ T29] audit: type=1326 audit(334.376:1430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5707 comm="syz.0.705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa77e7faa22 code=0x7ffc0000 [ 77.598717][ T29] audit: type=1326 audit(334.376:1431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5707 comm="syz.0.705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fa77e7faae7 code=0x7ffc0000 [ 77.663336][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.672816][ T5715] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.709: couldn't read orphan inode 11 (err -117) [ 77.686341][ T5715] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.748954][ T3324] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.803526][ T5731] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5731 comm=syz.3.713 [ 77.823402][ T5735] gtp0: entered promiscuous mode [ 77.914707][ T5741] tap0: tun_chr_ioctl cmd 1074025673 [ 77.924223][ T5742] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 77.933925][ T5738] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=5738 comm=syz.1.716 [ 77.967358][ T5741] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=5741 comm=syz.1.716 [ 78.017175][ T5738] tap0: tun_chr_ioctl cmd 1074025677 [ 78.022701][ T5738] tap0: linktype set to 1 [ 78.043934][ T5741] tap0: tun_chr_ioctl cmd 1074025677 [ 78.059583][ T5741] tap0: linktype set to 1 [ 78.078938][ T5742] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 78.101171][ T5742] EXT4-fs (loop2): orphan cleanup on readonly fs [ 78.155823][ T5742] EXT4-fs warning (device loop2): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 78.301344][ T5742] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 78.357150][ T5742] EXT4-fs error (device loop2): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 78.450129][ T5742] EXT4-fs (loop2): Remounting filesystem read-only [ 78.521182][ T5742] EXT4-fs (loop2): 1 truncate cleaned up [ 78.581138][ T5742] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 78.633420][ T5765] __nla_validate_parse: 10 callbacks suppressed [ 78.633436][ T5765] netlink: 52 bytes leftover after parsing attributes in process `syz.3.722'. [ 78.649072][ T5765] netlink: 52 bytes leftover after parsing attributes in process `syz.3.722'. [ 78.657985][ T5765] netlink: 52 bytes leftover after parsing attributes in process `syz.3.722'. [ 78.674115][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.740264][ T5771] set_capacity_and_notify: 11 callbacks suppressed [ 78.740285][ T5771] loop2: detected capacity change from 0 to 512 [ 78.846886][ T5771] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.937560][ T5784] pim6reg: entered allmulticast mode [ 78.981417][ T5784] pim6reg: left allmulticast mode [ 79.055044][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.097723][ T5788] netlink: 'syz.2.728': attribute type 10 has an invalid length. [ 79.151372][ T5788] loop2: detected capacity change from 0 to 2048 [ 79.158489][ T5788] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 79.256526][ T5796] netlink: 9 bytes leftover after parsing attributes in process `syz.2.731'. [ 79.283875][ T5796] netlink: 9 bytes leftover after parsing attributes in process `syz.2.731'. [ 79.305570][ T5797] tipc: New replicast peer: 255.255.255.255 [ 79.311669][ T5797] tipc: Enabled bearer , priority 10 [ 79.410777][ T5802] loop0: detected capacity change from 0 to 1024 [ 79.442448][ T5802] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.490118][ T5806] ------------[ cut here ]------------ [ 79.495743][ T5806] verifier bug: REG INVARIANTS VIOLATION (true_reg1): range bounds violation u64=[0xffffdfcd, 0xffffffffffffdfcc] s64=[0x80000000ffffdfcd, 0x7fffffffffffdfcc] u32=[0xffffdfcd, 0xffffdfcc] s32=[0xffffdfcd, 0xffffdfcc] var_off=(0xffffdfcc, 0xffffffff00000000) [ 79.520599][ T5806] WARNING: kernel/bpf/verifier.c:2748 at reg_bounds_sanity_check+0x15b/0x660, CPU#0: syz.3.734/5806 [ 79.531565][ T5806] Modules linked in: [ 79.535694][ T5806] CPU: 0 UID: 0 PID: 5806 Comm: syz.3.734 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 79.547451][ T5806] Tainted: [W]=WARN [ 79.551334][ T5806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 79.561467][ T5806] RIP: 0010:reg_bounds_sanity_check+0x27d/0x660 [ 79.567832][ T5806] Code: 24 78 4c 8b 44 24 70 4c 8b 4c 24 60 41 ff 74 24 20 41 55 53 ff 74 24 68 ff 74 24 78 ff b4 24 90 00 00 00 ff b4 24 b0 00 00 00 <67> 48 0f b9 3a 48 83 c4 38 4c 8b ac 24 98 00 00 00 49 8d 85 80 08 [ 79.587529][ T5806] RSP: 0018:ffffc90001e0b3a0 EFLAGS: 00010246 [ 79.593675][ T5806] RAX: ffff888119d1ed90 RBX: 00000000ffffdfcc RCX: 00000000ffffdfcd [ 79.601773][ T5806] RDX: ffffffff867fcb34 RSI: ffffffff866c6dc8 RDI: ffffffff86fb6f20 [ 79.609902][ T5806] RBP: ffff888104275270 R08: ffffffffffffdfcc R09: 80000000ffffdfcd [ 79.617977][ T5806] R10: 00000000000000d0 R11: 0000000000000002 R12: ffff888104275230 [ 79.626074][ T5806] R13: 00000000ffffdfcc R14: ffff88810427527c R15: ffff888104275268 [ 79.634104][ T5806] FS: 00007f55237476c0(0000) GS:ffff8882aeb79000(0000) knlGS:0000000000000000 [ 79.643078][ T5806] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 79.649746][ T5806] CR2: 0000200000001000 CR3: 0000000105402000 CR4: 00000000003506f0 [ 79.657985][ T5806] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 79.666046][ T5806] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 79.674120][ T5806] Call Trace: [ 79.677344][ T5808] loop1: detected capacity change from 0 to 1024 [ 79.677453][ T5806] [ 79.686796][ T5806] reg_set_min_max+0x1c8/0x260 [ 79.691618][ T5806] check_cond_jmp_op+0x13bd/0x1a80 [ 79.696829][ T5806] do_check+0x3356/0x8250 [ 79.701334][ T5806] do_check_common+0xccf/0x1300 [ 79.706550][ T5806] bpf_check+0x2f85/0xc890 [ 79.711075][ T5806] ? __alloc_frozen_pages_noprof+0x18a/0x350 [ 79.717270][ T5806] ? __vmap_pages_range_noflush+0xb9c/0xcc0 [ 79.723336][ T5806] ? try_charge_memcg+0x215/0xa10 [ 79.728538][ T5806] ? pcpu_block_update+0x232/0x3b0 [ 79.733927][ T5806] ? pcpu_block_refresh_hint+0x157/0x170 [ 79.739654][ T5806] ? pcpu_block_update_hint_alloc+0x640/0x660 [ 79.745844][ T5806] ? css_rstat_updated+0xbb/0x280 [ 79.751075][ T5806] ? mod_memcg_state+0x182/0x260 [ 79.756492][ T5806] ? __rcu_read_unlock+0x4e/0x70 [ 79.761466][ T5806] ? pcpu_memcg_post_alloc_hook+0xec/0x170 [ 79.767378][ T5806] ? pcpu_alloc_noprof+0xd18/0x1210 [ 79.772756][ T5806] ? should_fail_ex+0x30/0x280 [ 79.778088][ T5806] ? __kmalloc_noprof+0x2a3/0x580 [ 79.783165][ T5806] ? security_bpf_prog_load+0x60/0x140 [ 79.788695][ T5806] ? selinux_bpf_prog_load+0xac/0xd0 [ 79.794431][ T5806] ? security_bpf_prog_load+0x9e/0x140 [ 79.800016][ T5806] bpf_prog_load+0xf76/0x1140 [ 79.804954][ T5806] ? security_bpf+0x2b/0x90 [ 79.809549][ T5806] __sys_bpf+0x469/0x7b0 [ 79.813883][ T5806] __x64_sys_bpf+0x41/0x50 [ 79.818359][ T5806] x64_sys_call+0x28e1/0x3000 [ 79.823145][ T5806] do_syscall_64+0xc0/0x2a0 [ 79.827745][ T5806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.828988][ T5808] ext4: Unknown parameter 'noacl' [ 79.833706][ T5806] RIP: 0033:0x7f5524ceacb9 [ 79.843273][ T5806] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 79.862996][ T5806] RSP: 002b:00007f5523747028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 79.871698][ T5806] RAX: ffffffffffffffda RBX: 00007f5524f65fa0 RCX: 00007f5524ceacb9 [ 79.879734][ T5806] RDX: 0000000000000049 RSI: 0000200000000140 RDI: 0000000000000005 [ 79.887767][ T5806] RBP: 00007f5524d58bf7 R08: 0000000000000000 R09: 0000000000000000 [ 79.895828][ T5806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 79.903995][ T5806] R13: 00007f5524f66038 R14: 00007f5524f65fa0 R15: 00007ffc234ada08 [ 79.912016][ T5806] [ 79.915099][ T5806] ---[ end trace 0000000000000000 ]--- [ 80.070142][ T5796] loop2: detected capacity change from 0 to 512 [ 80.085700][ T5796] EXT4-fs: test_dummy_encryption option not supported [ 80.141350][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.407925][ T5825] xt_hashlimit: size too large, truncated to 1048576 [ 80.794700][ T5842] loop2: detected capacity change from 0 to 8192 [ 80.928586][ T5842] loop2: p1 p2 p4[DM] [ 80.932870][ T5842] loop2: p1 size 835329 extends beyond EOD, truncated [ 80.969405][ T5856] loop1: detected capacity change from 0 to 512 [ 80.984391][ T5842] loop2: p2 size 8388608 extends beyond EOD, truncated [ 81.003006][ T5842] loop2: p4 size 262144 extends beyond EOD, truncated [ 81.024394][ T5856] EXT4-fs error (device loop1): ext4_iget_extra_inode:5073: inode #15: comm syz.1.747: corrupted in-inode xattr: invalid ea_ino [ 81.091864][ T5864] loop4: detected capacity change from 0 to 2048 [ 81.098679][ T5856] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.747: couldn't read orphan inode 15 (err -117) [ 81.111686][ T5856] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.126614][ T5867] netlink: 72 bytes leftover after parsing attributes in process `syz.3.753'. [ 81.136525][ T5867] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5867 comm=syz.3.753 [ 81.165317][ T5864] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: writeback. [ 81.205786][ T4450] udevd[4450]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 81.217819][ T3311] udevd[3311]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 81.226710][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 81.237413][ T5863] netlink: 32 bytes leftover after parsing attributes in process `syz.4.751'. [ 81.237436][ T5863] netlink: 4 bytes leftover after parsing attributes in process `syz.4.751'. [ 81.276397][ T5868] netlink: 'syz.0.752': attribute type 1 has an invalid length. [ 81.284342][ T5868] netlink: 'syz.0.752': attribute type 1 has an invalid length. [ 81.292014][ T5868] netlink: 'syz.0.752': attribute type 2 has an invalid length. [ 81.299812][ T5868] netlink: 16 bytes leftover after parsing attributes in process `syz.0.752'. [ 81.317498][ T3324] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.318517][ T5880] loop2: detected capacity change from 0 to 512 [ 81.358643][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 81.368120][ T5880] EXT4-fs (loop2): can't mount with journal_checksum, fs mounted w/o journal [ 81.408686][ T5880] netlink: 'syz.2.755': attribute type 1 has an invalid length. [ 81.416527][ T5880] netlink: 4 bytes leftover after parsing attributes in process `syz.2.755'. [ 81.558592][ T5909] loop2: detected capacity change from 0 to 128 [ 81.746199][ T3310] loop4: p1 p2 p4[DM] [ 81.752877][ T5924] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 81.754024][ T3310] loop4: p1 size 835329 extends beyond EOD, truncated [ 81.760404][ T5924] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 81.778100][ T3310] loop4: p2 size 8388608 extends beyond EOD, truncated [ 81.778224][ T5924] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 81.792541][ T5924] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 81.793406][ T3310] loop4: p4 size 262144 extends beyond EOD, truncated [ 81.822366][ T5913] loop4: p1 p2 p4[DM] [ 81.827169][ T5913] loop4: p1 size 835329 extends beyond EOD, truncated [ 81.836183][ T5924] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 81.843133][ T5924] batman_adv: batadv0: Removing interface: ipvlan2 [ 81.850286][ T5913] loop4: p2 size 8388608 extends beyond EOD, truncated [ 81.863664][ T5913] loop4: p4 size 262144 extends beyond EOD, truncated [ 81.881722][ T5924] batman_adv: batadv0: Interface deactivated: ipvlan3 [ 81.889131][ T5924] batman_adv: batadv0: Removing interface: ipvlan3 [ 81.929864][ T5924] batman_adv: batadv0: Interface deactivated: ipvlan4 [ 81.936769][ T5924] batman_adv: batadv0: Removing interface: ipvlan4 [ 81.951880][ T5924] batman_adv: batadv0: Interface deactivated: ipvlan5 [ 81.958940][ T5924] batman_adv: batadv0: Removing interface: ipvlan5 [ 81.967483][ T5932] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #16: comm syz.1.766: corrupted inode contents [ 81.980217][ T5932] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #16: comm syz.1.766: mark_inode_dirty error [ 82.012168][ T5932] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #16: comm syz.1.766: corrupted inode contents [ 82.025924][ T5932] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.766: mark_inode_dirty error [ 82.042509][ T4450] udevd[4450]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 82.052381][ T5932] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #16: comm syz.1.766: corrupted inode contents [ 82.065689][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 82.075736][ T5932] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 82.079744][ T3310] udevd[3310]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 82.098258][ T5932] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #16: comm syz.1.766: corrupted inode contents [ 82.111108][ T5932] EXT4-fs error (device loop1): ext4_truncate:4635: inode #16: comm syz.1.766: mark_inode_dirty error [ 82.125451][ T5932] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 82.135169][ T5932] EXT4-fs (loop1): 1 truncate cleaned up [ 82.141192][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 82.143213][ T3310] udevd[3310]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 82.161897][ T31] EXT4-fs error (device loop1): ext4_release_dquot:7022: comm kworker/u8:1: Failed to release dquot type 1 [ 82.175621][ T4450] udevd[4450]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 82.187835][ T5932] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.296706][ T5955] netlink: 'syz.4.778': attribute type 29 has an invalid length. [ 82.333874][ T3324] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.499360][ T5969] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 82.697233][ T5976] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 82.728195][ T5944] bond3: Removing last ns target with arp_interval on [ 82.744481][ T5976] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 82.758525][ T5976] EXT4-fs (loop0): orphan cleanup on readonly fs [ 82.772289][ T5976] __quota_error: 61 callbacks suppressed [ 82.772310][ T5976] Quota error (device loop0): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 82.793684][ T5976] EXT4-fs warning (device loop0): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 82.847163][ T5976] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 82.873967][ T5976] EXT4-fs error (device loop0): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 82.938641][ T5976] EXT4-fs (loop0): Remounting filesystem read-only [ 82.954222][ T5981] batman_adv: batadv0: Adding interface: ipvlan6 [ 82.960620][ T5981] batman_adv: batadv0: The MTU of interface ipvlan6 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.985992][ T5981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.996679][ T5981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.006685][ T5981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan2 [ 83.016646][ T5981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.026662][ T5981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan3 [ 83.037181][ T5981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.047293][ T5981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan4 [ 83.057217][ T5981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.067528][ T5981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan5 [ 83.077435][ T5981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.083660][ T5976] EXT4-fs (loop0): 1 truncate cleaned up [ 83.094195][ T5976] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 83.107123][ T5981] batman_adv: batadv0: Interface activated: ipvlan6 [ 83.165770][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.209285][ T29] audit: type=1326 audit(340.186:1491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5990 comm="syz.0.791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa77e7facb9 code=0x7ffc0000 [ 83.295569][ T29] audit: type=1326 audit(340.226:1492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5990 comm="syz.0.791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7fa77e7facb9 code=0x7ffc0000 [ 83.318531][ T29] audit: type=1326 audit(340.226:1493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5990 comm="syz.0.791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa77e7facb9 code=0x7ffc0000 [ 83.341719][ T29] audit: type=1326 audit(340.226:1494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5990 comm="syz.0.791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa77e7facb9 code=0x7ffc0000 [ 83.364475][ T29] audit: type=1326 audit(340.236:1495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5990 comm="syz.0.791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fa77e7facb9 code=0x7ffc0000 [ 83.387339][ T29] audit: type=1326 audit(340.266:1496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5990 comm="syz.0.791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa77e7facb9 code=0x7ffc0000 [ 83.410454][ T29] audit: type=1326 audit(340.276:1497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5990 comm="syz.0.791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa77e7facb9 code=0x7ffc0000 [ 83.568818][ T6010] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 83.585897][ T6015] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2064 sclass=netlink_route_socket pid=6015 comm=syz.0.800 [ 83.728056][ T6021] batman_adv: batadv0: Adding interface: ipvlan3 [ 83.734548][ T6021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.745485][ T6021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.755334][ T6021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan2 [ 83.765690][ T6021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.828282][ T6021] batman_adv: batadv0: Interface activated: ipvlan3 [ 83.879835][ T6014] bridge0: entered promiscuous mode [ 83.894561][ T6014] bridge0: port 3(macvtap1) entered blocking state [ 83.901265][ T6014] bridge0: port 3(macvtap1) entered disabled state [ 83.923743][ T6014] macvtap1: entered allmulticast mode [ 83.929197][ T6014] bridge0: entered allmulticast mode [ 83.954016][ T6014] macvtap1: left allmulticast mode [ 83.959206][ T6014] bridge0: left allmulticast mode [ 83.980972][ T6014] bridge0: left promiscuous mode [ 84.035794][ T29] audit: type=1326 audit(341.016:1498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6030 comm="syz.2.804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a137cacb9 code=0x7ffc0000 [ 84.103639][ T29] audit: type=1326 audit(341.036:1499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6030 comm="syz.2.804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7f0a137cacb9 code=0x7ffc0000 [ 84.152392][ T6033] set_capacity_and_notify: 4 callbacks suppressed [ 84.152412][ T6033] loop2: detected capacity change from 0 to 4096 [ 84.197532][ T6033] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.315817][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.365137][ T6044] __nla_validate_parse: 9 callbacks suppressed [ 84.365154][ T6044] netlink: 8 bytes leftover after parsing attributes in process `syz.2.808'. [ 84.383128][ T6044] loop2: detected capacity change from 0 to 512 [ 84.403856][ T6044] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.452421][ T6044] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #12: comm syz.2.808: corrupted xattr block 6: invalid header [ 84.492244][ T6044] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=12 [ 84.551067][ T6044] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #12: comm syz.2.808: corrupted xattr block 6: invalid header [ 84.593567][ T6044] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=12 [ 84.633533][ T6044] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #12: comm syz.2.808: corrupted xattr block 6: invalid header [ 84.672044][ T6044] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=12 [ 84.897022][ T6061] netlink: 8 bytes leftover after parsing attributes in process `syz.3.813'. [ 84.905932][ T6061] netlink: 20 bytes leftover after parsing attributes in process `syz.3.813'. [ 84.934815][ T6061] geneve2: entered promiscuous mode [ 84.940105][ T6061] geneve2: entered allmulticast mode [ 85.209965][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.389020][ T6081] loop0: detected capacity change from 0 to 1024 [ 85.397794][ T6081] EXT4-fs: Ignoring removed nomblk_io_submit option [ 85.425524][ T6081] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.529055][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.571636][ T6089] netlink: 164 bytes leftover after parsing attributes in process `syz.3.821'. [ 85.582285][ T6087] netlink: 52 bytes leftover after parsing attributes in process `syz.2.822'. [ 85.591375][ T6087] netlink: 52 bytes leftover after parsing attributes in process `syz.2.822'. [ 85.600361][ T6087] netlink: 52 bytes leftover after parsing attributes in process `syz.2.822'. [ 85.734901][ T6104] netlink: 6 bytes leftover after parsing attributes in process `syz.0.823'. [ 85.746624][ T6104] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 85.764750][ T6104] loop0: detected capacity change from 0 to 164 [ 85.844479][ T6109] x_tables: duplicate underflow at hook 2 [ 86.025969][ T6115] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 86.038590][ T6115] tipc: Started in network mode [ 86.043587][ T6115] tipc: Node identity , cluster identity 4711 [ 86.049946][ T6115] tipc: Failed to obtain node identity [ 86.055565][ T6115] tipc: Enabling of bearer rejected, failed to enable media [ 86.087797][ T6117] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6117 comm=syz.4.831 [ 86.199452][ T6127] netlink: 4 bytes leftover after parsing attributes in process `syz.4.835'. [ 86.208347][ T6127] netlink: 'syz.4.835': attribute type 8 has an invalid length. [ 86.401437][ T6154] loop4: detected capacity change from 0 to 512 [ 86.413376][ T6154] EXT4-fs: Ignoring removed orlov option [ 86.421487][ T6154] EXT4-fs error (device loop4): ext4_iget_extra_inode:5073: inode #15: comm syz.4.838: corrupted in-inode xattr: bad e_name length [ 86.440584][ T6154] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.838: couldn't read orphan inode 15 (err -117) [ 86.454250][ T6154] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.497358][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.575019][ T6166] loop4: detected capacity change from 0 to 512 [ 86.602844][ T6166] EXT4-fs: dax option not supported [ 86.702262][ T6189] loop4: detected capacity change from 0 to 128 [ 86.715236][ T6181] netlink: 20 bytes leftover after parsing attributes in process `syz.0.844'. [ 86.831745][ T6199] loop4: detected capacity change from 0 to 164 [ 86.849271][ T6201] ipvlan7: entered promiscuous mode [ 87.227508][ T6216] loop0: detected capacity change from 0 to 256 [ 87.350498][ T6221] nfs: Unknown parameter '{' [ 87.363989][ T6221] SELinux: Context system_u:object_r:sshd_exec_t:s0 is not valid (left unmapped). [ 87.493243][ T6221] 9pnet_virtio: no channels available for device syz [ 87.533553][ T6224] loop2: detected capacity change from 0 to 1024 [ 87.541673][ T6224] EXT4-fs: Ignoring removed orlov option [ 87.575364][ T6224] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.744657][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.877942][ T6239] tipc: Enabled bearer , priority 0 [ 87.897297][ T29] kauditd_printk_skb: 271 callbacks suppressed [ 87.897314][ T29] audit: type=1400 audit(344.876:1771): avc: denied { create } for pid=6233 comm="syz.2.862" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_route_socket permissive=1 [ 87.963918][ T6239] syzkaller0: entered promiscuous mode [ 87.969446][ T6239] syzkaller0: entered allmulticast mode [ 88.010504][ T29] audit: type=1400 audit(344.906:1772): avc: denied { create } for pid=6233 comm="syz.2.862" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_stream_socket permissive=1 [ 88.030716][ T29] audit: type=1400 audit(344.906:1773): avc: denied { create } for pid=6233 comm="syz.2.862" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=tipc_socket permissive=1 [ 88.050273][ T29] audit: type=1400 audit(344.916:1774): avc: denied { ioctl } for pid=6233 comm="syz.2.862" path="socket:[14010]" dev="sockfs" ino=14010 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_stream_socket permissive=1 [ 88.075854][ T29] audit: type=1400 audit(344.916:1775): avc: denied { write } for pid=6233 comm="syz.2.862" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_route_socket permissive=1 [ 88.096140][ T29] audit: type=1400 audit(344.916:1776): avc: denied { nlmsg_write } for pid=6233 comm="syz.2.862" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_route_socket permissive=1 [ 88.116844][ T29] audit: type=1400 audit(344.916:1777): avc: denied { create } for pid=6233 comm="syz.2.862" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=udp_socket permissive=1 [ 88.340607][ T29] audit: type=1400 audit(345.316:1778): avc: denied { connect } for pid=6267 comm="syz.3.872" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 88.444537][ T29] audit: type=1326 audit(345.426:1779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6272 comm="syz.2.874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a137cacb9 code=0x7ffc0000 [ 88.493797][ T29] audit: type=1326 audit(345.446:1780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6272 comm="syz.2.874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7f0a137cacb9 code=0x7ffc0000 [ 88.637444][ T6279] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.705731][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.893773][ T6321] netlink: 'syz.0.887': attribute type 32 has an invalid length. [ 88.957103][ T6333] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 89.005384][ T6333] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.023049][ T6338] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6338 comm=syz.3.893 [ 89.364712][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.397569][ T6363] set_capacity_and_notify: 5 callbacks suppressed [ 89.397589][ T6363] loop1: detected capacity change from 0 to 256 [ 89.415619][ T6363] msdos: Bad value for 'nfs' [ 89.438694][ T6365] loop0: detected capacity change from 0 to 1024 [ 89.531736][ T6365] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.901: Failed to acquire dquot type 0 [ 89.580880][ T6365] EXT4-fs error (device loop0): mb_free_blocks:2037: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 89.624993][ T6376] __nla_validate_parse: 8 callbacks suppressed [ 89.625009][ T6376] netlink: 8 bytes leftover after parsing attributes in process `syz.1.900'. [ 89.652573][ T6365] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #13: comm syz.0.901: corrupted inode contents [ 89.676263][ T6365] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #13: comm syz.0.901: mark_inode_dirty error [ 89.707978][ T6365] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #13: comm syz.0.901: corrupted inode contents [ 89.727913][ T6382] netlink: 'syz.1.906': attribute type 13 has an invalid length. [ 89.765249][ T6365] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #13: comm syz.0.901: mark_inode_dirty error [ 89.803275][ T6365] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #13: comm syz.0.901: corrupted inode contents [ 89.844127][ T6365] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 90.049354][ T6365] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #13: comm syz.0.901: corrupted inode contents [ 90.080626][ T6365] EXT4-fs error (device loop0): ext4_truncate:4635: inode #13: comm syz.0.901: mark_inode_dirty error [ 90.138760][ T6365] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 90.145817][ T6382] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.155060][ T6382] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.171395][ T6365] EXT4-fs (loop0): 1 truncate cleaned up [ 90.177900][ T6386] loop4: detected capacity change from 0 to 1024 [ 90.193075][ T6386] EXT4-fs: Ignoring removed nobh option [ 90.198962][ T6386] EXT4-fs: inline encryption not supported [ 90.205965][ T6365] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.257893][ T6386] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.293949][ T6386] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4215: comm syz.4.907: Allocating blocks 385-513 which overlap fs metadata [ 90.352705][ T6396] netlink: 56 bytes leftover after parsing attributes in process `syz.2.909'. [ 90.370901][ T6386] EXT4-fs (loop4): pa ffff888107628700: logic 16, phys. 129, len 24 [ 90.379083][ T6386] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 90.391490][ T6396] netlink: 32 bytes leftover after parsing attributes in process `syz.2.909'. [ 90.400531][ T6396] netlink: 32 bytes leftover after parsing attributes in process `syz.2.909'. [ 90.428162][ T6385] Process accounting resumed [ 90.446032][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.462015][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.482603][ T5435] IPVS: starting estimator thread 0... [ 90.503870][ T6402] program syz.4.912 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 90.573648][ T6399] IPVS: using max 2256 ests per chain, 112800 per kthread [ 90.604650][ T6410] netlink: 320 bytes leftover after parsing attributes in process `syz.2.915'. [ 90.629304][ T6406] loop0: detected capacity change from 0 to 8192 [ 90.641481][ T6410] netlink: 24 bytes leftover after parsing attributes in process `syz.2.915'. [ 90.734748][ T6406] loop0: p1 p2 p4[DM] [ 90.739025][ T6406] loop0: p1 size 835329 extends beyond EOD, truncated [ 90.749254][ T6406] loop0: p2 size 8388608 extends beyond EOD, truncated [ 90.759321][ T6406] loop0: p4 size 262144 extends beyond EOD, truncated [ 90.896848][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 90.910265][ T3310] udevd[3310]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 90.921818][ T4450] udevd[4450]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 90.938971][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 90.960719][ T4450] udevd[4450]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 90.972212][ T3310] udevd[3310]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 91.434715][ T2199] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.454962][ T6443] IPVS: Error connecting to the multicast addr [ 91.461543][ T2199] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.528953][ T2199] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.540870][ T2199] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.565035][ T6451] netlink: 4 bytes leftover after parsing attributes in process `syz.4.927'. [ 91.648898][ T6465] netlink: 4 bytes leftover after parsing attributes in process `syz.4.932'. [ 91.665044][ T6465] netlink: 4 bytes leftover after parsing attributes in process `syz.4.932'. [ 91.716537][ T6472] delete_channel: no stack [ 91.721210][ T6472] delete_channel: no stack [ 91.831153][ T6484] netlink: 'syz.4.937': attribute type 1 has an invalid length. [ 91.838961][ T6484] netlink: 'syz.4.937': attribute type 2 has an invalid length. [ 91.920036][ T6492] netlink: 'syz.3.940': attribute type 1 has an invalid length. [ 91.959596][ T6503] geneve0: entered promiscuous mode [ 91.965058][ T6503] geneve0: entered allmulticast mode [ 92.006538][ T6510] batman_adv: batadv0: Adding interface: ipvlan8 [ 92.012992][ T6510] batman_adv: batadv0: The MTU of interface ipvlan8 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.038463][ T6510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.049019][ T6510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.058927][ T6510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan2 [ 92.068856][ T6510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.078735][ T6510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan3 [ 92.088728][ T6510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.098608][ T6510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan4 [ 92.108561][ T6510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.118512][ T6510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan5 [ 92.128394][ T6510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.138342][ T6510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan6 [ 92.148287][ T6510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.158905][ T6510] batman_adv: batadv0: Interface activated: ipvlan8 [ 92.348423][ T6537] loop0: detected capacity change from 0 to 512 [ 92.357539][ T6537] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 92.368411][ T6538] SELinux: policydb table sizes (8,0) do not match mine (8,7) [ 92.376953][ T6538] SELinux: failed to load policy [ 92.386231][ T6537] EXT4-fs (loop0): 1 truncate cleaned up [ 92.399042][ T6537] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.417575][ T6536] delete_channel: no stack [ 92.439128][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.583724][ T6559] batman_adv: batadv0: Adding interface: ipvlan4 [ 92.590664][ T6559] batman_adv: batadv0: The MTU of interface ipvlan4 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.604285][ T6543] netlink: 12 bytes leftover after parsing attributes in process `syz.2.958'. [ 92.616340][ T6559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.635677][ T6559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.645668][ T6559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan2 [ 92.655596][ T6559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.665529][ T6559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan3 [ 92.675403][ T6559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.687172][ T6559] batman_adv: batadv0: Interface activated: ipvlan4 [ 92.777593][ T6543] loop2: detected capacity change from 0 to 2048 [ 92.846526][ T3310] loop2: p2 < > p3 < p5 > p4 [ 92.851303][ T3310] loop2: partition table partially beyond EOD, truncated [ 92.861100][ T3310] loop2: p2 start 4278190080 is beyond EOD, truncated [ 92.879323][ T3310] loop2: p4 size 8192 extends beyond EOD, truncated [ 92.894253][ T3310] loop2: p5 size 8192 extends beyond EOD, truncated [ 92.908851][ T29] kauditd_printk_skb: 114 callbacks suppressed [ 92.908928][ T29] audit: type=1326 audit(349.886:1893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6575 comm="syz.4.968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b2aadacb9 code=0x7ffc0000 [ 92.945412][ T6543] loop2: p2 < > p3 < p5 > p4 [ 92.950252][ T6543] loop2: partition table partially beyond EOD, truncated [ 92.956311][ T29] audit: type=1326 audit(349.886:1894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6575 comm="syz.4.968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b2aadacb9 code=0x7ffc0000 [ 92.961568][ T6543] loop2: p2 start 4278190080 is beyond EOD, truncated [ 92.982295][ T29] audit: type=1326 audit(349.916:1895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6575 comm="syz.4.968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7f6b2aadacb9 code=0x7ffc0000 [ 92.989611][ T6543] loop2: p4 size 8192 extends beyond EOD, truncated [ 93.011615][ T29] audit: type=1326 audit(349.916:1896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6575 comm="syz.4.968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b2aadacb9 code=0x7ffc0000 [ 93.039987][ T29] audit: type=1326 audit(349.916:1897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6575 comm="syz.4.968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6b2aadacb9 code=0x7ffc0000 [ 93.041420][ T6543] loop2: p5 size 8192 extends beyond EOD, truncated [ 93.063118][ T29] audit: type=1326 audit(349.916:1898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6575 comm="syz.4.968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b2aadacb9 code=0x7ffc0000 [ 93.092477][ T29] audit: type=1326 audit(349.916:1899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6575 comm="syz.4.968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f6b2aadacb9 code=0x7ffc0000 [ 93.115957][ T29] audit: type=1326 audit(349.916:1900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6575 comm="syz.4.968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b2aadacb9 code=0x7ffc0000 [ 93.141222][ T29] audit: type=1326 audit(349.916:1901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6575 comm="syz.4.968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b2aadacb9 code=0x7ffc0000 [ 93.164212][ T29] audit: type=1326 audit(349.916:1902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6575 comm="syz.4.968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f6b2aadacb9 code=0x7ffc0000 [ 93.433307][ T6601] loop0: detected capacity change from 0 to 1764 [ 93.467783][ T3007] loop2: p2 < > p3 < p5 > p4 [ 93.472578][ T3007] loop2: partition table partially beyond EOD, truncated [ 93.479907][ T3007] loop2: p2 start 4278190080 is beyond EOD, truncated [ 93.487255][ T3007] loop2: p4 size 8192 extends beyond EOD, truncated [ 93.494697][ T3007] loop2: p5 size 8192 extends beyond EOD, truncated [ 93.517995][ T6605] IPVS: set_ctl: invalid protocol: 44 127.0.0.1:20001 [ 93.548384][ T5879] udevd[5879]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory [ 93.559715][ T4450] udevd[4450]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 93.574162][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 93.607270][ T6608] batman_adv: batadv0: Adding interface: ipvlan2 [ 93.613801][ T6608] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.639359][ T6608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.649891][ T6608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.661618][ T6608] batman_adv: batadv0: Interface activated: ipvlan2 [ 93.777383][ T6619] loop4: detected capacity change from 0 to 512 [ 93.794424][ T6619] EXT4-fs: Ignoring removed i_version option [ 93.801113][ T6619] EXT4-fs: Ignoring removed bh option [ 93.818621][ T6619] EXT4-fs: dax option not supported [ 93.937570][ T6638] loop2: detected capacity change from 0 to 256 [ 94.137161][ T6650] loop0: detected capacity change from 0 to 164 [ 94.182759][ T6650] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 94.336249][ T6667] EXT4-fs: Ignoring removed nobh option [ 94.353739][ T6667] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 94.363128][ T6667] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 94.373242][ T6667] EXT4-fs (loop4): filesystem has both journal inode and journal device! [ 94.497271][ T6679] 8021q: adding VLAN 0 to HW filter on device bond4 [ 94.513422][ T6680] vlan2: entered allmulticast mode [ 94.518751][ T6680] bond4: entered allmulticast mode [ 94.548024][ T6684] set_capacity_and_notify: 1 callbacks suppressed [ 94.548046][ T6684] loop4: detected capacity change from 0 to 1024 [ 94.561530][ T6684] EXT4-fs: Ignoring removed nomblk_io_submit option [ 94.637046][ T6695] __nla_validate_parse: 2 callbacks suppressed [ 94.637073][ T6695] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1008'. [ 94.660326][ T6703] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1004'. [ 94.901709][ T3007] ================================================================== [ 94.909889][ T3007] BUG: KCSAN: data-race in dont_mount / step_into_slowpath [ 94.917130][ T3007] [ 94.919473][ T3007] read-write to 0xffff88810060f300 of 4 bytes by task 3310 on cpu 1: [ 94.927554][ T3007] dont_mount+0x2a/0x40 [ 94.931735][ T3007] vfs_unlink+0x2ae/0x440 [ 94.936086][ T3007] do_unlinkat+0x1e2/0x4b0 [ 94.940532][ T3007] __x64_sys_unlink+0x2e/0x40 [ 94.945228][ T3007] x64_sys_call+0x2f48/0x3000 [ 94.949936][ T3007] do_syscall_64+0xc0/0x2a0 [ 94.954461][ T3007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.960376][ T3007] [ 94.962717][ T3007] read to 0xffff88810060f300 of 4 bytes by task 3007 on cpu 0: [ 94.970271][ T3007] step_into_slowpath+0xea/0x4c0 [ 94.975234][ T3007] path_lookupat+0x330/0x500 [ 94.979854][ T3007] filename_lookup+0x190/0x390 [ 94.984646][ T3007] do_readlinkat+0x7d/0x340 [ 94.989197][ T3007] __x64_sys_readlink+0x47/0x60 [ 94.994082][ T3007] x64_sys_call+0x2af1/0x3000 [ 94.998785][ T3007] do_syscall_64+0xc0/0x2a0 [ 95.003306][ T3007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.009223][ T3007] [ 95.011565][ T3007] value changed: 0x00300080 -> 0x00004080 [ 95.017524][ T3007] [ 95.019861][ T3007] Reported by Kernel Concurrency Sanitizer on: [ 95.026037][ T3007] CPU: 0 UID: 0 PID: 3007 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 95.036907][ T3007] Tainted: [W]=WARN [ 95.040736][ T3007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 95.050808][ T3007] ==================================================================