last executing test programs: 19.966165994s ago: executing program 4 (id=5): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x41, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xfff, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 1) 19.558383823s ago: executing program 4 (id=6): r0 = syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000040)='./file0\x00', 0x2000800, &(0x7f00000001c0)=ANY=[@ANYRES64=0x0, @ANYRES64, @ANYBLOB="69692bb4065b9daba03afb5b38a81b62972e117c746e91681cc81656444c067f1dc91c6f8d"], 0x1, 0x2a8, &(0x7f0000000640)="$eJzs3c9qE0EcB/Bf07SpvaSgJ+lhwYsXQ9s3CFJBDAiVHOqpwbYgTSmkENCD7c138eQ7+AZ9DF/AHAqRdKNJmrX4p+nG5POBMD8y+yUzOWT2MJPdWz8+2j85Pdy9/zVWVpIoRpx/voyIKMRipJ58SduliFiI5Rh2HgDA/2Znp1Edf7eQx1CYkFar2ujdu5XGeuqfchkQAAAAAAAAAAAA/2xvvTS2/z86EWtD+/8X+m3B/n8AmAnZ+/+ZJa1WtbGaearD/n8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgP51ut9y94ZX3+ACA22f9B4D5Y/0HgPnTGVnrF8L6DwCz79Xu6xfVWm17J0lWIo4/tuvtetqm/dXDeBvNOIiNKMdl9O4P+tL62fPa9kZyZS32js/6+bN2fXE0vxnlWMvOb6b5ZDS/FKvD+a0ox4Ps/FZmfjkeP4oo/JhoJcpx8SZOohn70csO8h82k+Tpy9q1fOnqOgAAAAAAAAAAAAAAAAAAALgLleSnzPP7lcqv+tP8H/w/wLXz9cV4WMx37gAAAAAAAAAAAAAAAAAAADAtTt+9P2o0mwetzOJb/yz/TddMoriIiLv6rNss7v3Wt/p3RTEicp/gNBal6RjGrBU5/zABAAAAAAAAAAAAAAAAAMAcGhz6zXskAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJCfwfP/J1fkPUcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgPnwPAAD//2kl6Ss=") r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r1, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) r2 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000440)=@mangle={'mangle\x00', 0x44, 0x6, 0x428, 0x200, 0x200, 0x0, 0x98, 0x0, 0x390, 0x390, 0x390, 0x390, 0x390, 0x6, 0x0, {[{{@ip={@empty, @multicast2, 0xff, 0x0, 'veth0_virt_wifi\x00', 'syzkaller1\x00', {}, {0xff}, 0x6, 0x2, 0x40}, 0x7a00, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x20, 0x1, 0x1}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0x0, 0xff, 'lo\x00', 'nicvf0\x00', {}, {}, 0x8}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@ah={{0x30}, {[0x3ff, 0x2]}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty, 0x4e22}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @empty, 0x0, 0xffffffff, 'syzkaller0\x00', 'wg0\x00', {}, {}, 0x89, 0x0, 0x75}, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@ttl={{0x28}, {0x1, 0x4}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3, [0x0, 0x4, 0x2, 0x1, 0x6, 0x5], 0x5}, {0xffffffffffffffff, [0x1, 0x3, 0x6, 0x4, 0x6, 0x3], 0x1, 0x2}}}}, {{@ip={@empty, @empty, 0xffffffff, 0x0, 'vlan1\x00', 'batadv_slave_1\x00', {}, {}, 0x4, 0x0, 0x18}, 0x0, 0x70, 0x98}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x4, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x488) ioctl$sock_netdev_private(r1, 0x89f1, &(0x7f0000000000)) close_range(r0, r1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x2, @perf_config_ext={0x2cb, 0x1}, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x0, 0x2, 0xffffffffffffffff, 0x1) syz_usb_connect$uac3(0x0, 0x0, 0x0, 0x0) timer_create(0xfffffffc, 0x0, &(0x7f0000000040)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x1200408, &(0x7f0000000180), 0x1, 0x7a5, &(0x7f00000007c0)="$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") mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ffa000/0x3000)=nil) timer_settime(r3, 0x0, &(0x7f0000000000), &(0x7f0000000100)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000000200)={{0x2, 0x0, @rand_addr=0x64010100}, {0x300, @remote}, 0xfdfdffff, {0x2, 0x0, @empty}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f0000000280)="39000000140081ae0000dc676f97daf01effffff0521018701546fabca1b4e8a06a6580e88370200c5090000009c40ebb3734b49bbc51245e7", 0x39}], 0x1}, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/ipv4/ping_group_range\x00', 0x2, 0x0) write(r7, &(0x7f00000010c0)="302032313437d2", 0x7) r8 = socket$inet(0x2, 0x801, 0x0) r9 = socket$inet_icmp(0x2, 0x2, 0x1) bind$inet(r9, &(0x7f0000000000)={0x2, 0x4e1f, @local}, 0xfffffffffffffe18) shutdown(r8, 0x1) 18.640254695s ago: executing program 4 (id=12): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r1 = fsopen(&(0x7f0000000100)='hugetlbfs\x00', 0x0) unshare(0x20000400) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3, 0x24000000000}, 0x100600, 0x2, 0xfffffffc, 0x1, 0x0, 0x8000, 0x3, 0x0, 0x0, 0x0, 0x1000000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) quotactl_fd$Q_GETINFO(r2, 0xffffffff80000501, 0xffffffffffffffff, &(0x7f0000000140)) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000002c0), 0x3, 0x45c, &(0x7f0000000940)="$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") perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x4f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SCSI_IOCTL_GET_PCI(r3, 0x2284, &(0x7f00000003c0)) 17.270133577s ago: executing program 4 (id=29): syz_open_procfs(0x0, &(0x7f0000000ec0)='net/vlan/config\x00') r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) socket$kcm(0x10, 0x2, 0x4) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x2) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7, 0x2, @perf_bp={0x0}, 0x3cad, 0x0, 0x0, 0x2, 0x8000000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e23, 0x2003, @mcast1, 0x2}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000040), 0x4) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc811}, 0x40801) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x90}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x44004) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r3, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c0001800500020000000000080004000500000008000100020000002400"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 17.244020177s ago: executing program 32 (id=29): syz_open_procfs(0x0, &(0x7f0000000ec0)='net/vlan/config\x00') r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) socket$kcm(0x10, 0x2, 0x4) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x2) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7, 0x2, @perf_bp={0x0}, 0x3cad, 0x0, 0x0, 0x2, 0x8000000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e23, 0x2003, @mcast1, 0x2}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000040), 0x4) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc811}, 0x40801) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x90}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x44004) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r3, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c0001800500020000000000080004000500000008000100020000002400"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 12.115550087s ago: executing program 1 (id=103): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, 0x0, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x74, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0xfd48d5c30bda4df3, @val={0x0, 0x6, @default_ibss_ssid}, @void, @void, @void, @void, @void, @void, @val={0x2a, 0x1, {0x0, 0x1}}, @val={0x3c, 0x4, {0x0, 0x0, 0xb6, 0xa9}}, @val={0x2d, 0x1a, {0x1000, 0x0, 0x4, 0x0, {0x7, 0x1f81, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, 0x1, 0x40, 0x5}}, @void, @void, @void}}]]}, 0x74}}, 0x0) 12.067949379s ago: executing program 1 (id=106): getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1a, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000001740)) r0 = syz_usb_connect$uac2(0x3, 0x0, 0x0, &(0x7f00000006c0)={0xa, &(0x7f0000000400)={0xa, 0x6, 0x300, 0x10, 0x89, 0x7f, 0x20, 0x4}, 0x3a, &(0x7f0000000440)={0x5, 0xf, 0x3a, 0x4, [@wireless={0xb, 0x10, 0x1, 0xc, 0x5, 0x8, 0x4, 0x7, 0xc}, @ptm_cap={0x3}, @ssp_cap={0x20, 0x10, 0xa, 0xa6, 0x5, 0xb2c7, 0xf000, 0x3, [0xff3f00, 0xffc000, 0xff0000, 0x3f00, 0x30]}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x2, 0x7, 0xce9}]}, 0x2, [{0x70, &(0x7f00000004c0)=@string={0x70, 0x3, "145bd16adca532088abf6bcd9c6496b8b915c750af8a46ed2bd1e28e5c404e6f86d10344a2a4dfac46a5c89924a320a815baf7e9a92a3591e186ab4a05beea07d7c8bd310bd4d0032a06192043f647fe06bd809850c5fb4f81a135989d91528370c7af8de0611e0ef100a1d894c9"}}, {0xbe, &(0x7f0000000600)=@string={0xbe, 0x3, "a08e24fa6964245324ecf25645d7d333b94359af52d943cdb01d5b8e9203f286c86539436713225c1821344fd0456095d765b2ca95af6628c3a40b84c4cccc73ec635390fb3679ea4af237081f6fb380c334a8ffe78beb63415880c536250f35770241c93bc0958ddfc97abd568aeb2b897e132dc791c24fe513d5aa1e3d8313fdfe3896a472034c7f846542b2e44e2bf3d92e96367c41ac94b32da3c4b7f8d9e5317a35665587d1ba743ecf951e3bc12c197b257c5ab98f6e77634b"}}]}) syz_usb_control_io(r0, &(0x7f0000000880)={0x2c, &(0x7f0000000700)={0x0, 0x4, 0x26, {0x26, 0x3, "cb5aa46335d5fcea5df92f5b0ca9b680bbf22fe4673ebe4eae9c3cf0ceaf5912ffd73515"}}, &(0x7f0000000740)={0x0, 0x3, 0x78, @string={0x78, 0x3, "b3eb99286f183f91ec3b454f6fd80f688375f5e200fc6dca0a2aa1b5755af1d38165ee42285057e39657a01b8a6ce8c6eb1c0450c2bfb5c739ca02af658ee14bb1faed0632a08ab97d856efaaaa68c402f0ef5ae075d74dc93d33084c7562a942fe7e97ce2e855b9b943e72c2812840c949c124877be"}}, &(0x7f00000007c0)={0x0, 0xf, 0x10, {0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x2, 0xa0, 0x1, 0x88, 0x6, 0x5}]}}, &(0x7f0000000800)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x8, 0x7, 0x0, "4e3be61b", "b89a4266"}}, &(0x7f0000000840)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x0, 0x3, 0x4, 0xa4, 0xfffb, 0x4}}}, &(0x7f0000000d80)={0x84, &(0x7f00000008c0)={0x40, 0x10, 0x9a, "378538e58e9a6ba56df9cadc8c5d0c8a9a46490e196ad85565681327c728e4a0de7c8787844248d976df9f119431ddea2e1c1fb5311d999803a91127c2f3d4cbeb073c777ecc6bac2d302720a1c86374eb8e96efdf0b5ffa97c0c67347d11bc8aab40f828049987f59b61051690b65d019b9988ce107a3bfa77757b07c22f82aee2c7b7db81cda3fc1babb8873fd9d967e015551bdb2f8a0da7b"}, &(0x7f0000000980)={0x0, 0xa, 0x1, 0x4d}, &(0x7f00000009c0)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000a00)={0x20, 0x0, 0x4, {0x0, 0x2}}, &(0x7f0000000a40)={0x20, 0x0, 0x8, {0x8, 0x0, [0xf0]}}, &(0x7f0000000a80)={0x40, 0x7, 0x2}, &(0x7f0000000ac0)={0x40, 0x9, 0x1, 0xa}, &(0x7f0000000b00)={0x40, 0xb, 0x2, 'o\r'}, &(0x7f0000000b40)={0x40, 0xf, 0x2, 0xffff}, &(0x7f0000000b80)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000bc0)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}}, &(0x7f0000000c00)={0x40, 0x19, 0x2, "5512"}, &(0x7f0000000c80)={0x40, 0x1a, 0x2, 0x9}, &(0x7f0000000cc0)={0x40, 0x1c, 0x1, 0x2}, &(0x7f0000000d00)={0x40, 0x1e, 0x1, 0x7d}, &(0x7f0000000d40)={0x40, 0x21, 0x1, 0x80}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001800ffff00000000000000000a000000fd00c8090000000014000500fe8000000000000000000000000000aa0c00090008"], 0x3c}, 0x1, 0x0, 0x0, 0x2048800}, 0x0) 11.543470271s ago: executing program 1 (id=113): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'veth1_macvtap\x00'}) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioprio_set$uid(0x3, 0x0, 0x0) socket(0xa, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') pread64(r1, &(0x7f0000001240)=""/102400, 0x19000, 0x9e66) 11.492401502s ago: executing program 1 (id=115): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r1 = fsopen(&(0x7f0000000100)='hugetlbfs\x00', 0x0) unshare(0x20000400) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3, 0x24000000000}, 0x100600, 0x2, 0xfffffffc, 0x1, 0x0, 0x8000, 0x3, 0x0, 0x0, 0x0, 0x1000000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) quotactl_fd$Q_GETINFO(r2, 0xffffffff80000501, 0xffffffffffffffff, &(0x7f0000000140)) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f0000000440)="c5878b672b5c1fd2cf271a41bb20d101379074eb3c925171467d58cfc11fdc242deb88f0a518f16ce10b5a1d722fc7103919652bc5528f078f19fbb6cde24c36b0c2cedb2cb1cc2d32ede46313a05fc282500dafe0ef9d532303e0848af6c66607613fcb939b559e2e63dadcb0f531ffc6c82f56004a08205a09c24b480452d7d8cd8a660b269ef39942f5a7697cd94d1c5cbff49e9f345c2f2e35969f6211452939f13b6e3124ac18babfed2721653f1c8369a02966f0d95ff54359487a93a2872238e9d4143a142eee2b982e28084f2fdaa6531382c4df04eb402ed3b33074bdc8aa395a287a654dc1cdf51902f9711f659309e5bb2147c21c45fcdcc54135") ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x2284, &(0x7f00000003c0)) 11.355306195s ago: executing program 1 (id=118): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000140), 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000080)={0x0, 0x1ff}, 0x8) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc90}, 0x8000) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r2 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0xf, 0x400d4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x100600, 0x1, 0x0, 0x6, 0x4, 0x8e, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl(0xffffffffffffffff, 0x6, 0x0) lsm_get_self_attr(0x64, &(0x7f00000022c0)={0x0, 0x0, 0x1020, 0x1000, ""/4096}, &(0x7f0000003300)=0x1020, 0x0) fcntl$notify(r2, 0x402, 0x20) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'bridge0\x00'}) sendmsg$nl_route(r3, 0x0, 0x8000) 11.286793597s ago: executing program 1 (id=119): r0 = socket$inet(0x2, 0x2000000000003, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x1000, @broadcast}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000150097f87059ae08060c040002ff0f020000000000000187ac1414aaa69d35a2cca84708f7abca1bac1414aabd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000280)={'wg2\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@dellink={0x28, 0x11, 0x400, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r3, 0x880, 0x10020}, [@IFLA_NET_NS_PID={0x8, 0x13, 0xffffffffffffffff}]}, 0x28}, 0x1, 0x0, 0x0, 0x40800}, 0x80) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000000c0601080000000000000000010002070900020073797a30000000000500010007000000"], 0x28}}, 0x800) statx(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x4000, 0x10, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1, 0x4e22, 0x7ff, 0x4e24, 0x2, 0xa, 0x80, 0xc0, 0x32, r3, r4}, {0x6, 0x1, 0x10, 0x2, 0xa9, 0x80, 0x0, 0xffffffffffffab21}, {0xa89, 0x6, 0x7, 0x9}, 0x6, 0x0, 0x1, 0x0, 0x2, 0x2}, {{@in=@rand_addr=0x64010101, 0x4d3, 0xff}, 0x2, @in=@empty, 0x3501, 0x3, 0x3, 0x5, 0x300, 0x6, 0x7fff}}, 0xe8) 3.773074292s ago: executing program 2 (id=210): ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x117, 0x5, 0x101, 0x200}}) 3.590323007s ago: executing program 2 (id=211): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$IOC_PR_PREEMPT_ABORT(0xffffffffffffffff, 0x401870cc, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1e00000000000400d004000000060000004c0100", @ANYRES32=0x1, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r2, 0x0, 0x4040001) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f0000000000)={0x2, 0x800, 0xb, 0x6}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x80000009, 0x3}, 0x10) bind$tipc(r1, 0x0, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r3, 0x6, 0x10, &(0x7f0000000040)=0x9, 0x4) sendmsg$tipc(r0, &(0x7f00000000c0)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x804}, 0x20000005) socket$nl_route(0x10, 0x3, 0x0) sigaltstack(&(0x7f0000002180)={0x0, 0x80000002}, 0x0) sigaltstack(&(0x7f00000022c0)={&(0x7f0000002240)=""/111, 0x2, 0x6f}, &(0x7f0000002400)={0x0}) r4 = getpgid(0x0) r5 = syz_pidfd_open(r4, 0x0) syz_clone(0x288100, &(0x7f00000001c0)="5460cbb9ce5e870702b3e3572ef21058cfbcf87e1f18a3edbb734d1dff63d7b50e49bf492e500fcfc16e786b982852605a06068e1f54d71e66b98db27e802ef95e54cd755f7a409fd3fcb9a2", 0x4c, &(0x7f0000000240), 0x0, &(0x7f00000002c0)="5ccbd19c456403a3d3c06fee2441cb07b629812fadb2d522a127c315f1b69ccf1625715700efd5e7997a4dc1fe5ef289") process_madvise(r5, 0x0, 0x0, 0x14, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000100)={[{@errors_remount}, {@noload}, {@bh}, {@noquota}, {@noblock_validity}, {}, {@mblk_io_submit}, {@acl}, {@resgid}], [], 0x3d}, 0x1, 0x522, &(0x7f00000007c0)="$eJzs3UFsI1cZAOB/HHt3s5s2KXCASpRCi7IrWDtpaBv1UIqE4FQJKPclJE4UxYmj2Gk3UQVZceCIhBAgcSoXLkicOCGhSlw4IqRKcAYBAiHYwgEJ6FS2x+luMk6yjWNn4++TJvPmeeb97zma8byZp5kARtaTEfFSRLyTpumNiJjM8gvZFHudqbXe23dfX2xNSaTpK/9IIsnyumWlbZfjWrbZlYj4yhcjvp4cjtvY2V1bqNWqW9lypbm+WWns7N5cXV9Yqa5UN+bmZp+bf37+2fmZvrRzIiJe/Pxfvv+dn3zhxV9++rU/3vrb9W8kWX4caMcDKh71YafppfZ3ce8GW+8z2HlUbLcwM563xtihnDtnXCcAAHr7QER8IiJuxGSMHX06CwAAADyE0s9OxP+S7r27Qy71yAcAAAAeIoX2GNikUM7G+05EoVAuR3sM74fiaqFWbzQ/tVzf3ljqjJWdilJhebVWncnGCk9FKWktz7bT7y0/c2B5LiIei4jvTY63l8uL9drSsC9+AAAAwIi4dqD//+/JTv8fAAAAuGCmhl0BAAAA4Mzp/wMAAMDFp/8PAAAAF9qXXn65NaXd918vvbqzvVZ/9eZStbFWXt9eLC/WtzbLK/X6SvuZfevHlVer1zc/ExvbtyvNaqNZaezs3lqvb280b63e9wpsAAAAYIAe+9ibv08iYu+F8fbUculkm55wNeC8Ku6nkmyes1v/4dHO/M8DqhQwEGPDrgAwNMVhVwAYmtKwKwAMXXLM5z0H7/wmm3+8v/UBAAD6b/ojPe//Xz56y73CAKoHnCE7MYwu9/9hdLXv/590JK+TBbhQSs4AYOSd+v7/sdL0gSoEAAD03UR7Sgrl7PLeRBQK5XLEI+3XApSS5dVadSYiHo2I302WLreWZ9tbJsf2GQAAAAAAAAAAAAAAAAAAAAAAAACAjjRNIgUAAAAutIjCX5NfdZ7lPz359MTB6wOXkv9MRvaK0Nd+9MoPbi80m1uzrfx/7uc3f5jlPzOMKxgAAAAwEooPsnK3n97txwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAP7199/XF7jTIuH//XERM5cUvxpX2/EqUIuLqv5Io3rNdEhFjfYg/3vrz4bz4Sata+yHz4o+/cfr4e3eOjB9T2beQF//a6cPDSHuzdfx5KW//K8ST7Xn+/leMuG/5/ep9/Iv9499Yj/3/kRPGePytn1V6xr8T8Xgx//jTjZ/0iP9UXoE///ahrK99dXe3V/z0jYjp3N+f5L5Yleb6ZqWxs3tzdX1hpbpS3Zibm31u/vn5Z+dnKsurtWr2NzfGdz/6i3eOav/VHvGnjmn/0znlXcrJ+/9bt+9+sJMs5cW//lRO/F//OFvjcPxC9tv3ySzd+ny6m97rpO/1xE9/+8RR7V/q0f7j/v/XexV6wI0vf+tPJ1wVABiAxs7u2kKtVt06H4kXou8lt3r4Q2/Xw5f4b3ouqnG2iW/2tcA0TdPWPnWKcpIY3JeQHF3VYR+ZAACAfnvvpH/YNQEAAAAAAAAAAAAAAAAAAIDRNYgnjR2MubefSvrxCG0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgL54NwAA//+9V+AI") r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x804000, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x9, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x4}, 0x10ecc8, 0x1224, 0xffffffff, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) unshare(0x28000600) 2.882520543s ago: executing program 3 (id=220): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x205, 0x2) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getrandom(&(0x7f0000000580)=""/265, 0xffffff3f, 0x3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000340)=0x1) ioctl$TCGETA(r1, 0x89f0, &(0x7f00000029c0)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="d80000001c0081064e81f782db44b9040a1d080420000000ff0002a11800ff000607002603600e12080b0f0000810401a8001605200001400200000803604e0cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee422fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef5d2defd5ccae8d3fb7c27a1059ae31c60e2234d732", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 2.386893825s ago: executing program 5 (id=222): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x205, 0x2) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getrandom(&(0x7f0000000580)=""/265, 0xffffff3f, 0x3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000340)=0x1) ioctl$TCGETA(r1, 0x89f0, 0x0) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x1000000830d}, 0x100300, 0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffe, 0x1, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="d80000001c0081064e81f782db44b9040a1d080420000000ff0002a11800ff000607002603600e12080b0f0000810401a8001605200001400200000803604e0cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee422fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef5d2defd5ccae8d3fb7c27a1059ae31c60e2234d732", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 2.228058479s ago: executing program 2 (id=226): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x7, 0x120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7c, 0x4, @perf_bp={0x0, 0x8}, 0x10fec8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x5, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_clone3(&(0x7f0000000900)={0x23800000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) futex(&(0x7f000000cffc)=0x4, 0xb, 0x4, 0x0, &(0x7f0000048000), 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) 1.830773317s ago: executing program 0 (id=228): syz_open_dev$tty20(0xc, 0x4, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe(&(0x7f0000000080)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0xffffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x3000408, &(0x7f0000000440)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000019080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 1.703856451s ago: executing program 3 (id=229): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xb2a5, 0x3ff}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000300000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100f3ff000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001f80)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000a0000010900020073797a31000000000900010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x48084}, 0x8000) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0x0, 0xffffffff, 0xffffffff, 0x158, 0xffffffff, 0x228, 0xffffff7a, 0xffffffff, 0x228, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@empty, @multicast1, 0xff000000, 0xffffff00, 'dvmrp1\x00', 'ip6gretap0\x00', {}, {}, 0x4, 0x1, 0x10}, 0x6, 0x130, 0x158, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x6, 'bm\x00', "00000100cbd047da9ca965f96ad5801f0514d363ee84bb895919d9490f6785fba3c4a44f1e25ecefef2a2d6054f5260ece5ce1a56a5ef73be11d65bfe8c37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9e000000007f00000000ffffff7f00", 0x80, 0x0, {0x4}}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local, 0x2, 0x7, [0x36, 0x3d, 0x20, 0x22, 0x31, 0x1d, 0x37, 0x2c, 0x14, 0x7, 0x7, 0x34, 0x13, 0x1a, 0x15, 0xa], 0x0, 0x7fff, 0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x320) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000540)=""/55, 0x37, 0x100, &(0x7f0000000bc0)) listen(r0, 0x5) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000003a40)=ANY=[@ANYBLOB="1800000000000000100100000100000012000000000000001000000000000000100100000e"], 0x28}, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x0, 0x0, 0x1, 0x0, 0x100}, 0x1c) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x13, &(0x7f0000000000)=0x7fc, 0x4) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x202082, 0x0) listen(r0, 0x10000000) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) 1.687071521s ago: executing program 0 (id=230): r0 = fsopen(&(0x7f00000000c0)='nfs4\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffa, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x8, 0x0, 0x0, 0x0, 0x40043, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x14084, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xfdef) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x7}, 0x10ecc8, 0x1224, 0x0, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x601, 0xd) write(r3, &(0x7f00000001c0)='p:s/p ./file0:0\f-', 0x11) r4 = openat(0xffffffffffffff9c, &(0x7f0000004100)='./sys/bus/serio/devices/serio1/protocol\x00', 0x1, 0x0) write(r4, &(0x7f0000005000)='synap', 0x5) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x73, &(0x7f0000000080)={r7, 0x9, 0x20, 0x7fff, 0x8000000000000001}, &(0x7f0000000040)=0x18) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000040)={r7, 0x6}, 0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000180)=@assoc_value={r7, 0xfffff000}, 0x8) sendmsg$nl_netfilter(r1, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x108, 0x0, 0x4, 0x201, 0x70bd27, 0x25dfdbfe, {0x1}, [@nested={0xea, 0xb2, 0x0, 0x1, [@nested={0x4, 0x101}, @generic="bc1a673bf6a1c57a4fa781a50aa6d82a42f19cb11d60aa797746d91981d83838959f2e55", @typed={0x8, 0x133, 0x0, 0x0, @uid=r2}, @nested={0x4, 0x15a}, @generic="5ebc7f09f75d81de3986a52fdf2006b5b002f106ce67071f446760b8307a5441802bf4e63fe7e5cbbeb3ea62865a47a8b20659c01fe40997731890d0d31c29ec55b88a7e62b0777f6c0e117dc26a37c21b15931fa9865b1631881330a491f189918fcdd42484b953bea03ef4ee2ea9747aea025b37d0ec059d9ef4e3208e565b92dfa75287e439b8f2abcc22f2ca38e723b83b2bdc397a0f3da603090731a70a99f46b11e910677db4f4f224187b", @nested={0x4, 0x165}]}, @typed={0x8, 0x93, 0x0, 0x0, @u32=0x6}]}, 0x108}, 0x1, 0x0, 0x0, 0x4000080}, 0x8000) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='source', &(0x7f0000000240)='ceph\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000001a40)='./file2\x00', 0x14045, &(0x7f0000001b80)={[{@dioread_lock}, {@errors_remount}, {@data_journal}, {@noload}, {@grpjquota}]}, 0x1, 0x43c, &(0x7f0000000200)="$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") 1.423100147s ago: executing program 3 (id=231): prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r0 = syz_clone(0x20011, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x13) wait4(r0, 0x0, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r2}, 0xc) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x8001, 0x0, 0x1, 0x7fff0000}]}) ioctl$BTRFS_IOC_BALANCE(r2, 0x5000940c, 0x0) fstatfs(r3, &(0x7f0000000340)=""/168) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) perf_event_open(&(0x7f00000004c0)={0x4, 0x80, 0x22, 0x0, 0x9, 0xc, 0x0, 0x5, 0x216ae, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x4}, 0x8084, 0xa2, 0xffffffff, 0x5, 0x7f, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x6, 0x4, 0xc, 0xb, 0x0, 0x1}, 0x50) close(r4) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="020000000400000004000000010000001410"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r5}, 0xc) r6 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb901b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x1, 0x200000000000f60e}, 0xb093, 0x800000, 0x2, 0x2, 0x9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) setpgid(0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x7, 0x120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7c, 0x4, @perf_bp={0x0, 0x8}, 0x10fec8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x5, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_clone3(&(0x7f0000000900)={0x23800000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) futex(&(0x7f000000cffc)=0x4, 0xb, 0x4, 0x0, &(0x7f0000048000), 0x0) r8 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000080)) sync_file_range(r8, 0x5a, 0x1, 0x7) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) 1.259162001s ago: executing program 0 (id=232): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="160000000000000004000000"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000380)=r5) write$cgroup_devices(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 1.247726451s ago: executing program 2 (id=233): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x31}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x2a}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x805}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'sit0\x00', 0x0}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$sock(0xffffffffffffffff, 0x0, 0x20048840) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e6574000000000c00078008000640"], 0x5c}}, 0x20084884) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x300, 0x0, 0x10040003}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000002c0)={[{@bh}, {@noblock_validity}, {@user_xattr}, {@resuid}, {@inlinecrypt}, {@dioread_nolock}], [{@euid_eq}, {@smackfsroot={'smackfsroot', 0x3d, 'bh'}}, {@uid_gt}, {@dont_hash}, {@smackfstransmute={'smackfstransmute', 0x3d, 'noblock_validity'}}, {@fsname={'fsname', 0x3d, 'noblock_validity'}}, {@context={'context', 0x3d, 'user_u'}}, {@fsuuid={'fsuuid', 0x3d, {[0x66, 0x62, 0x39, 0x62, 0x31, 0x38, 0x63, 0x66], 0x2d, [0x39, 0x65, 0x39, 0x33], 0x2d, [0x37, 0x31, 0x30, 0x64], 0x2d, [0x0, 0x37, 0x31, 0x65], 0x2d, [0x37, 0x3, 0x38, 0x63, 0x64, 0xf, 0x33, 0x31]}}}]}, 0x7, 0x60b, &(0x7f00000027c0)="$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") syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x2000200, &(0x7f0000000240), 0x7, 0x504, &(0x7f0000001180)="$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") unlink(&(0x7f0000000280)='./file1\x00') 1.191061483s ago: executing program 5 (id=234): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000001600)={0x1, 0x6}, 0x4) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x1c, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 1.147653524s ago: executing program 5 (id=235): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = mq_open(0x0, 0x40, 0x16, &(0x7f0000000400)={0x8, 0x3, 0x1, 0x7fff}) mq_timedreceive(r1, &(0x7f0000000540)=""/55, 0x37, 0x100, &(0x7f0000000bc0)) 1.046487636s ago: executing program 5 (id=236): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c0000003000050400000000000000000000000048000180440001800900010067"], 0x5c}}, 0x0) 970.615808ms ago: executing program 0 (id=237): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xb2a5, 0x3ff}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000300000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100f3ff000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001f80)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000a0000010900020073797a31000000000900010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x48084}, 0x8000) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0x0, 0xffffffff, 0xffffffff, 0x158, 0xffffffff, 0x228, 0xffffff7a, 0xffffffff, 0x228, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@empty, @multicast1, 0xff000000, 0xffffff00, 'dvmrp1\x00', 'ip6gretap0\x00', {}, {}, 0x4, 0x1, 0x10}, 0x6, 0x130, 0x158, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x6, 'bm\x00', "00000100cbd047da9ca965f96ad5801f0514d363ee84bb895919d9490f6785fba3c4a44f1e25ecefef2a2d6054f5260ece5ce1a56a5ef73be11d65bfe8c37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9e000000007f00000000ffffff7f00", 0x80, 0x0, {0x4}}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local, 0x2, 0x7, [0x36, 0x3d, 0x20, 0x22, 0x31, 0x1d, 0x37, 0x2c, 0x14, 0x7, 0x7, 0x34, 0x13, 0x1a, 0x15, 0xa], 0x0, 0x7fff, 0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x320) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000540)=""/55, 0x37, 0x100, &(0x7f0000000bc0)) listen(r0, 0x5) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000003a40)=ANY=[@ANYBLOB="1800000000000000100100000100000012000000000000001000000000000000100100000e"], 0x28}, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) listen(r0, 0x10000000) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) 948.360068ms ago: executing program 5 (id=238): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) fsopen(&(0x7f0000000100)='hugetlbfs\x00', 0x0) unshare(0x20000400) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3, 0x24000000000}, 0x100600, 0x2, 0xfffffffc, 0x1, 0x0, 0x8000, 0x3, 0x0, 0x0, 0x0, 0x1000000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) quotactl_fd$Q_GETINFO(r1, 0xffffffff80000501, 0xffffffffffffffff, &(0x7f0000000140)) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f0000000440)="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") ioctl$SCSI_IOCTL_GET_PCI(r2, 0x2284, &(0x7f00000003c0)) 816.609161ms ago: executing program 5 (id=239): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x205, 0x2) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getrandom(&(0x7f0000000580)=""/265, 0xffffff3f, 0x3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000340)=0x1) ioctl$TCGETA(r1, 0x89f0, &(0x7f00000029c0)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="d80000001c0081064e81f782db44b9040a1d080420000000ff0002a11800ff000607002603600e12080b0f0000810401a8001605200001400200000803604e0cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee422fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef5d2defd5ccae8d3fb7c27a1059ae31c60e2234d732", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 687.854624ms ago: executing program 0 (id=240): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') preadv(r1, 0x0, 0x0, 0x2000000, 0x0) write$cgroup_int(r1, &(0x7f0000000000)=0xf6e2, 0x12) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180)={0xffffffffffffffff}, 0x4) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000900)="474242c42268cc680d585425d2ed5672f866b71c88626efee761b9bf1dd0f40c7c57fb9d6aae9874fa442ddb56ba1a606fb5f1bb6b0a25f6b87057575657493e1a513f8de75f8c203842447b7bcde84be03df9fd", 0x54) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc55a, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet(0x2, 0x3, 0x8d) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x5}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xc, 0x7, 0xb8b3, 0x4, 0x0, 0x3c100, 0x3}}, {0x4}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x240480c0}, 0x4044080) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10040, &(0x7f0000000100)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@quota}]}, 0xfd, 0x269, &(0x7f0000000a00)="$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") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380c07b, 0x0, 0x1, 0x0, &(0x7f0000000140)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000300)={0x0, 0x0}) fcntl$setownex(r0, 0xf, &(0x7f0000000380)={0x1, r3}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{}], 0x1) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x800, 0x0, 0x0) r5 = creat(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r5, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000140)=0x4) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000780)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x70820a2, 0x0, 0x1, 0x0, &(0x7f0000000000)) rename(&(0x7f0000000f00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mkdir(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mkdir(&(0x7f0000000540)='./trace\x00', 0x1ff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x8}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) 465.873269ms ago: executing program 2 (id=241): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3, 0x24000000000}, 0x100600, 0x2, 0xfffffffc, 0x1, 0x0, 0x8000, 0x3, 0x0, 0x0, 0x0, 0x1000000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f0000000440)="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") ioctl$SCSI_IOCTL_GET_PCI(r1, 0x2284, &(0x7f00000003c0)) 410.521011ms ago: executing program 3 (id=242): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r1 = fsopen(&(0x7f0000000100)='hugetlbfs\x00', 0x0) unshare(0x20000400) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3, 0x24000000000}, 0x100600, 0x2, 0xfffffffc, 0x1, 0x0, 0x8000, 0x3, 0x0, 0x0, 0x0, 0x1000000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) quotactl_fd$Q_GETINFO(r2, 0xffffffff80000501, 0xffffffffffffffff, &(0x7f0000000140)) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000002c0), 0x3, 0x45c, &(0x7f0000000940)="$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") open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) ioctl$SCSI_IOCTL_GET_PCI(r3, 0x2284, &(0x7f00000003c0)) 235.506425ms ago: executing program 2 (id=243): r0 = fsopen(&(0x7f00000000c0)='nfs4\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffa, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x8, 0x0, 0x0, 0x0, 0x40043, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x14084, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52"], 0xfdef) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x7}, 0x10ecc8, 0x1224, 0x0, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x601, 0xd) write(r3, &(0x7f00000001c0)='p:s/p ./file0:0\f-', 0x11) r4 = openat(0xffffffffffffff9c, &(0x7f0000004100)='./sys/bus/serio/devices/serio1/protocol\x00', 0x1, 0x0) write(r4, &(0x7f0000005000)='synap', 0x5) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x73, &(0x7f0000000080)={r7, 0x9, 0x20, 0x7fff, 0x8000000000000001}, &(0x7f0000000040)=0x18) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000040)={r7, 0x6}, 0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000180)=@assoc_value={r7, 0xfffff000}, 0x8) sendmsg$nl_netfilter(r1, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x108, 0x0, 0x4, 0x201, 0x70bd27, 0x25dfdbfe, {0x1}, [@nested={0xea, 0xb2, 0x0, 0x1, [@nested={0x4, 0x101}, @generic="bc1a673bf6a1c57a4fa781a50aa6d82a42f19cb11d60aa797746d91981d83838959f2e55", @typed={0x8, 0x133, 0x0, 0x0, @uid=r2}, @nested={0x4, 0x15a}, @generic="5ebc7f09f75d81de3986a52fdf2006b5b002f106ce67071f446760b8307a5441802bf4e63fe7e5cbbeb3ea62865a47a8b20659c01fe40997731890d0d31c29ec55b88a7e62b0777f6c0e117dc26a37c21b15931fa9865b1631881330a491f189918fcdd42484b953bea03ef4ee2ea9747aea025b37d0ec059d9ef4e3208e565b92dfa75287e439b8f2abcc22f2ca38e723b83b2bdc397a0f3da603090731a70a99f46b11e910677db4f4f224187b", @nested={0x4, 0x165}]}, @typed={0x8, 0x93, 0x0, 0x0, @u32=0x6}]}, 0x108}, 0x1, 0x0, 0x0, 0x4000080}, 0x8000) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='source', &(0x7f0000000240)='ceph\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000001a40)='./file2\x00', 0x14045, &(0x7f0000001b80)={[{@dioread_lock}, {@errors_remount}, {@data_journal}, {@noload}, {@grpjquota}]}, 0x1, 0x43c, &(0x7f0000000200)="$eJzs3MtrXFUYAPDv3knS1rZmLPXRhxqtYvCRNGmtBd0oCi4UBF3UZUzSEjttpIlgS9AoUpdScC8uBf8CV7oRdSW41b0UimTT2tXInbmTTKYzk2SaZKLz+8FNzrkPzvnm3DNzzj2ZBNCzhrIfScS+iPgjIgar2dUnDFV/3VpamPxnaWEyiXL57b+Tynk3lxYma6fWrttbyxQj0s+TONKk3LnLV85PlErTl/L86PyFD0bnLl95bubCxLnpc9MXx0+fPnli7IVT489vSpxZXDcPfzx79NDr7157c/LMtfd++S6pxd8Qx4akLY8MtbvsyXK5o+J2qv116aRvJbnGZeXWLx/boRARWXP1V/r/YBRipfEG47XPulo5YEsNtD+8WAb+x7LRPNCLah/02fy3tm3DsGPHuPFydQKUxX0r36pH+pan9v0N89vNNBQRZxZvf51tcTfPIQAA1umHbPzzbLPxXxoP1J13b76GUoyI+yLiQEScioiDEXF/ROXcByPioQ2W37hIcuf4J73eUWDrlI3/XsrXtlaP/5ZXJoqFPLe/En9/cnamNH08f02Go39Xlh9rU8aPr/7+Zatj9eO/bMvKr40F83pc79u1+pqpifmJu4m53o1PIw73NYs/WV4JSCLiUEQc7rCMmae/Pdrq2Nrxb63yNxFPVdt/MRrir0nar0+O7o7S9PHR2l1xp19/u/pWq/K7HX/W/hG7m7Z/rpjUr9fObbyMq39+0XJO0+n9P5C8s2rfRxPz85fGIgaSN6qVrt8/3nDe+Mr5WfzDx5r3/wOx8kociYjsJn44Ih6JiEfzuj8WEY9HxLE28f/8yhPvdx7/1srin4qI2/nzgLXbfyUxEI17micK53/6flWhxY3En7X/yUpqON+znve/Nev1Ytrh3QwAAAD/PWlE7IskHVlOp+nISPVv+A/GPWlpdm7+mbOzH16cqn5HoBj9ae1J12Dd89CxfFpfy4835E/kz42/Kuyp5EcmZ0tT3Q4eetzeFv0/81eh27UDtlxftysAdI3+D71L/4fepf9D72rS//d0ox7A9qv0/4Z/1fRJl+oCbK+Gz3/LftBDzP+hd+n/0Lv0f+hJc3ui/Zf3JSSaJiLdEdWQ2KJEt9+ZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANse/AQAA///EqOWp") 212.368475ms ago: executing program 0 (id=244): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xb2a5, 0x3ff}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000300000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100f3ff000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001f80)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000a0000010900020073797a31000000000900010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x48084}, 0x8000) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0x0, 0xffffffff, 0xffffffff, 0x158, 0xffffffff, 0x228, 0xffffff7a, 0xffffffff, 0x228, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@empty, @multicast1, 0xff000000, 0xffffff00, 'dvmrp1\x00', 'ip6gretap0\x00', {}, {}, 0x4, 0x1, 0x10}, 0x6, 0x130, 0x158, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x6, 'bm\x00', "00000100cbd047da9ca965f96ad5801f0514d363ee84bb895919d9490f6785fba3c4a44f1e25ecefef2a2d6054f5260ece5ce1a56a5ef73be11d65bfe8c37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9e000000007f00000000ffffff7f00", 0x80, 0x0, {0x4}}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local, 0x2, 0x7, [0x36, 0x3d, 0x20, 0x22, 0x31, 0x1d, 0x37, 0x2c, 0x14, 0x7, 0x7, 0x34, 0x13, 0x1a, 0x15, 0xa], 0x0, 0x7fff, 0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x320) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000540)=""/55, 0x37, 0x100, &(0x7f0000000bc0)) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x0, 0x0, 0x1, 0x0, 0x100}, 0x1c) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) 152.428887ms ago: executing program 3 (id=245): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000000)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x27, 0x5, 0x46d, 0xb012, 0x0, 0x0, "0600ff0901a1018510150026ff00750895068100910085119513810091008512953f81009100c0"}}, 0x13f) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x200000000000000) 0s ago: executing program 3 (id=246): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xb2a5, 0x3ff}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000300000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100f3ff000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000540)=""/55, 0x37, 0x100, &(0x7f0000000bc0)) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x0, 0x0, 0x1, 0x0, 0x100}, 0x1c) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x13, &(0x7f0000000000)=0x7fc, 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): =1 [ 18.538699][ T28] audit: type=1400 audit(1786864451.115:99): avc: denied { write } for pid=3176 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 18.773755][ T28] audit: type=1400 audit(1786864451.355:100): avc: denied { write } for pid=3179 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 18.796960][ T28] audit: type=1400 audit(1786864451.365:101): avc: denied { write } for pid=3190 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 19.686451][ T28] audit: type=1400 audit(1786864452.265:102): avc: denied { write } for pid=3193 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 19.709391][ T28] audit: type=1400 audit(1786864452.265:103): avc: denied { write } for pid=3205 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 20.161702][ T28] audit: type=1400 audit(1786864452.745:104): avc: denied { write } for pid=3208 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.1.82' (ED25519) to the list of known hosts. [ 28.457309][ T28] kauditd_printk_skb: 21 callbacks suppressed [ 28.457324][ T28] audit: type=1400 audit(1786864461.035:126): avc: denied { mounton } for pid=3285 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 28.486739][ T28] audit: type=1400 audit(1786864461.065:127): avc: denied { mount } for pid=3285 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.487582][ T3285] cgroup: Unknown subsys name 'net' [ 28.514658][ T28] audit: type=1400 audit(1786864461.095:128): avc: denied { unmount } for pid=3285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.688281][ T3285] cgroup: Unknown subsys name 'cpuset' [ 28.694485][ T3285] cgroup: Unknown subsys name 'rlimit' [ 28.804145][ T28] audit: type=1400 audit(1786864461.385:129): avc: denied { setattr } for pid=3285 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 28.830092][ T28] audit: type=1400 audit(1786864461.385:130): avc: denied { create } for pid=3285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.850795][ T28] audit: type=1400 audit(1786864461.385:131): avc: denied { write } for pid=3285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.871426][ T28] audit: type=1400 audit(1786864461.385:132): avc: denied { read } for pid=3285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.878177][ T3288] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 28.892055][ T28] audit: type=1400 audit(1786864461.395:133): avc: denied { mounton } for pid=3285 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 28.925381][ T28] audit: type=1400 audit(1786864461.395:134): avc: denied { mount } for pid=3285 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 28.949557][ T28] audit: type=1400 audit(1786864461.415:135): avc: denied { read } for pid=3019 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 28.949846][ T3285] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 29.880724][ T3313] modprobe (3313) used greatest stack depth: 10840 bytes left [ 30.258169][ T3296] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.265278][ T3296] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.272462][ T3296] bridge_slave_0: entered allmulticast mode [ 30.278778][ T3296] bridge_slave_0: entered promiscuous mode [ 30.303170][ T3296] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.310283][ T3296] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.317365][ T3296] bridge_slave_1: entered allmulticast mode [ 30.323866][ T3296] bridge_slave_1: entered promiscuous mode [ 30.341295][ T3301] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.348381][ T3301] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.355588][ T3301] bridge_slave_0: entered allmulticast mode [ 30.362006][ T3301] bridge_slave_0: entered promiscuous mode [ 30.375615][ T3297] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.382803][ T3297] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.390643][ T3297] bridge_slave_0: entered allmulticast mode [ 30.397057][ T3297] bridge_slave_0: entered promiscuous mode [ 30.405783][ T3301] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.412891][ T3301] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.420096][ T3301] bridge_slave_1: entered allmulticast mode [ 30.426465][ T3301] bridge_slave_1: entered promiscuous mode [ 30.445071][ T3297] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.452200][ T3297] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.459304][ T3297] bridge_slave_1: entered allmulticast mode [ 30.465809][ T3297] bridge_slave_1: entered promiscuous mode [ 30.478988][ T3296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.488357][ T3303] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.495406][ T3303] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.502561][ T3303] bridge_slave_0: entered allmulticast mode [ 30.508938][ T3303] bridge_slave_0: entered promiscuous mode [ 30.526065][ T3296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.543164][ T3303] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.550527][ T3303] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.557590][ T3303] bridge_slave_1: entered allmulticast mode [ 30.564042][ T3303] bridge_slave_1: entered promiscuous mode [ 30.579080][ T3301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.588945][ T3296] team0: Port device team_slave_0 added [ 30.595324][ T3296] team0: Port device team_slave_1 added [ 30.606249][ T3297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.620452][ T3301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.642638][ T3297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.651859][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.658965][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.666065][ T3304] bridge_slave_0: entered allmulticast mode [ 30.672471][ T3304] bridge_slave_0: entered promiscuous mode [ 30.688158][ T3303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.701504][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.708722][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.715851][ T3304] bridge_slave_1: entered allmulticast mode [ 30.722387][ T3304] bridge_slave_1: entered promiscuous mode [ 30.729536][ T3301] team0: Port device team_slave_0 added [ 30.735454][ T3296] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.742582][ T3296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.768494][ T3296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.780132][ T3303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.802653][ T3301] team0: Port device team_slave_1 added [ 30.808572][ T3296] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.815590][ T3296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.841678][ T3296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.857338][ T3297] team0: Port device team_slave_0 added [ 30.875029][ T3303] team0: Port device team_slave_0 added [ 30.881378][ T3297] team0: Port device team_slave_1 added [ 30.888205][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.901847][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.909076][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.935182][ T3301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.950607][ T3303] team0: Port device team_slave_1 added [ 30.965150][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.983771][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.991041][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.017428][ T3301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.049174][ T3296] hsr_slave_0: entered promiscuous mode [ 31.055280][ T3296] hsr_slave_1: entered promiscuous mode [ 31.065788][ T3297] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.072771][ T3297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.098718][ T3297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.110184][ T3304] team0: Port device team_slave_0 added [ 31.117109][ T3304] team0: Port device team_slave_1 added [ 31.131705][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.138694][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.164748][ T3303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.175838][ T3297] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.182863][ T3297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.208778][ T3297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.227462][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.234458][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.260851][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.271885][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.279104][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.305049][ T3303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.333250][ T3301] hsr_slave_0: entered promiscuous mode [ 31.339197][ T3301] hsr_slave_1: entered promiscuous mode [ 31.344882][ T3301] debugfs: 'hsr0' already exists in 'hsr' [ 31.350634][ T3301] Cannot create hsr debugfs directory [ 31.360567][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.368033][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.394116][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.431369][ T3297] hsr_slave_0: entered promiscuous mode [ 31.437286][ T3297] hsr_slave_1: entered promiscuous mode [ 31.443290][ T3297] debugfs: 'hsr0' already exists in 'hsr' [ 31.449253][ T3297] Cannot create hsr debugfs directory [ 31.475708][ T3304] hsr_slave_0: entered promiscuous mode [ 31.481695][ T3304] hsr_slave_1: entered promiscuous mode [ 31.487507][ T3304] debugfs: 'hsr0' already exists in 'hsr' [ 31.493335][ T3304] Cannot create hsr debugfs directory [ 31.526309][ T3303] hsr_slave_0: entered promiscuous mode [ 31.532284][ T3303] hsr_slave_1: entered promiscuous mode [ 31.538165][ T3303] debugfs: 'hsr0' already exists in 'hsr' [ 31.543900][ T3303] Cannot create hsr debugfs directory [ 31.698249][ T3296] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 31.706850][ T3296] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.714459][ T3296] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 31.722944][ T3296] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.734700][ T3296] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 31.743367][ T3296] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.753177][ T3296] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 31.761538][ T3296] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.783478][ T3301] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 31.791780][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.799692][ T3301] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 31.808238][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.815971][ T3301] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 31.824496][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.834436][ T3301] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 31.842809][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.866361][ T3297] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.875121][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.886727][ T3297] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.895546][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.907526][ T3297] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.916120][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.923884][ T3297] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.932043][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.958562][ T3304] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 31.966809][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.974759][ T3304] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 31.983363][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.991458][ T3304] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 32.000013][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 32.007527][ T3304] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 32.015983][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 32.049279][ T3303] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 32.057968][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 32.065794][ T3303] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 32.074569][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 32.082501][ T3303] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 32.091179][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 32.099373][ T3303] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 32.108002][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 32.126450][ T3296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.151708][ T3296] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.171677][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.178757][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.194900][ T3297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.204710][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.211821][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.235436][ T3297] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.247900][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.256602][ T310] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.263711][ T310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.276405][ T3301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.291894][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.298963][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.310379][ T3301] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.324972][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.332066][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.340903][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.348087][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.364409][ T3304] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.377182][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.384256][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.403381][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.410528][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.425729][ T3297] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.439129][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.466518][ T3303] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.476133][ T3301] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.493347][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.500547][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.514270][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.521438][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.635467][ T3296] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.683933][ T3297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.783507][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.796893][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.805636][ T3301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.876565][ T3297] veth0_vlan: entered promiscuous mode [ 32.899561][ T3297] veth1_vlan: entered promiscuous mode [ 32.924986][ T3296] veth0_vlan: entered promiscuous mode [ 32.944598][ T3297] veth0_macvtap: entered promiscuous mode [ 32.961526][ T3296] veth1_vlan: entered promiscuous mode [ 32.975270][ T3297] veth1_macvtap: entered promiscuous mode [ 32.986445][ T3301] veth0_vlan: entered promiscuous mode [ 33.002104][ T3304] veth0_vlan: entered promiscuous mode [ 33.008068][ T3301] veth1_vlan: entered promiscuous mode [ 33.014437][ T3303] veth0_vlan: entered promiscuous mode [ 33.021227][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.030165][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.047161][ T3304] veth1_vlan: entered promiscuous mode [ 33.057600][ T3303] veth1_vlan: entered promiscuous mode [ 33.068295][ T3296] veth0_macvtap: entered promiscuous mode [ 33.079881][ T3301] veth0_macvtap: entered promiscuous mode [ 33.087498][ T3296] veth1_macvtap: entered promiscuous mode [ 33.100170][ T3296] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.110217][ T3296] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.122884][ T3301] veth1_macvtap: entered promiscuous mode [ 33.144394][ T3303] veth0_macvtap: entered promiscuous mode [ 33.158404][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.167620][ T3304] veth0_macvtap: entered promiscuous mode [ 33.174908][ T3303] veth1_macvtap: entered promiscuous mode [ 33.182027][ T3297] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 33.202473][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.213430][ T3304] veth1_macvtap: entered promiscuous mode [ 33.246819][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.264892][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.277077][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.288103][ T3502] loop1: detected capacity change from 0 to 512 [ 33.297499][ T3502] ======================================================= [ 33.297499][ T3502] WARNING: The mand mount option has been deprecated and [ 33.297499][ T3502] and is ignored by this kernel. Remove the mand [ 33.297499][ T3502] option from the mount to silence this warning. [ 33.297499][ T3502] ======================================================= [ 33.338764][ T3505] FAULT_INJECTION: forcing a failure. [ 33.338764][ T3505] name failslab, interval 1, probability 0, space 0, times 1 [ 33.354542][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.366973][ T3505] CPU: 0 UID: 0 PID: 3505 Comm: syz.4.5 Not tainted syzkaller #0 PREEMPT(lazy) [ 33.367012][ T3505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 33.367077][ T3505] Call Trace: [ 33.367084][ T3505] [ 33.367092][ T3505] __dump_stack+0x1d/0x30 [ 33.367119][ T3505] dump_stack_lvl+0x95/0xd0 [ 33.367209][ T3505] dump_stack+0x15/0x1b [ 33.367272][ T3505] should_fail_ex+0x25e/0x270 [ 33.367301][ T3505] should_failslab+0x8c/0xb0 [ 33.367328][ T3505] kmem_cache_alloc_node_noprof+0x85/0x3d0 [ 33.367355][ T3505] ? dup_task_struct+0x5a/0x6a0 [ 33.367376][ T3505] ? dup_task_struct+0x5a/0x6a0 [ 33.367397][ T3505] dup_task_struct+0x5a/0x6a0 [ 33.367491][ T3505] copy_process+0x5a0/0x2310 [ 33.367512][ T3505] ? kstrtoull+0x111/0x140 [ 33.367576][ T3505] ? kstrtouint_from_user+0xa8/0xf0 [ 33.367608][ T3505] ? __rcu_read_unlock+0x4e/0x70 [ 33.367635][ T3505] kernel_clone+0x1c0/0x5f0 [ 33.367669][ T3505] __x64_sys_clone+0x143/0x180 [ 33.367714][ T3505] x64_sys_call+0x1222/0x3020 [ 33.367741][ T3505] do_syscall_64+0x136/0x3c0 [ 33.367806][ T3505] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 33.367939][ T3505] RIP: 0033:0x7f44e4f7e0d9 [ 33.367957][ T3505] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 33.368046][ T3505] RSP: 002b:00007f44e39d6fd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 33.368112][ T3505] RAX: ffffffffffffffda RBX: 00007f44e5205fa0 RCX: 00007f44e4f7e0d9 [ 33.368126][ T3505] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 33.368138][ T3505] RBP: 00007f44e39d7090 R08: 0000000000000000 R09: 0000000000000000 [ 33.368150][ T3505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 33.368163][ T3505] R13: 00007f44e5206038 R14: 00007f44e5205fa0 R15: 00007ffe72b02288 [ 33.368183][ T3505] [ 33.369514][ T3502] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 33.568767][ T3502] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 33.581937][ T3502] EXT4-fs error (device loop1): ext4_init_orphan_info:618: comm syz.1.2: orphan file block 0: bad magic [ 33.597384][ T3502] loop1: lost filesystem error report for type 5 error -117 [ 33.597651][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 33.601799][ T3502] EXT4-fs (loop1): Remounting filesystem read-only [ 33.604978][ C0] EXT4-fs (loop1): initial error at time 1786864466: ext4_init_orphan_info:618 [ 33.611782][ T3502] EXT4-fs (loop1): mount failed [ 33.617909][ C0] [ 33.617917][ C0] EXT4-fs (loop1): last error at time 1786864466: ext4_init_orphan_info:618 [ 33.647741][ T3459] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.671394][ T3511] loop4: detected capacity change from 0 to 512 [ 33.676518][ T3459] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.688781][ T3511] FAT-fs (loop4): data area starts beyond volume (199892 > 45184) [ 33.696817][ T310] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.706099][ T3511] FAT-fs (loop4): Can't find a valid FAT filesystem [ 33.719157][ T28] kauditd_printk_skb: 38 callbacks suppressed [ 33.719171][ T28] audit: type=1400 audit(1786864466.305:174): avc: denied { create } for pid=3510 comm="syz.4.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 33.719175][ T3511] ipt_ECN: cannot use operation on non-tcp rule [ 33.719271][ T28] audit: type=1400 audit(1786864466.305:175): avc: denied { ioctl } for pid=3510 comm="syz.4.6" path="socket:[5253]" dev="sockfs" ino=5253 ioctlcmd=0x8910 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 33.777939][ T3459] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.786680][ T28] audit: type=1400 audit(1786864466.345:176): avc: denied { create } for pid=3508 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 33.814755][ T3512] loop4: detected capacity change from 0 to 2048 [ 33.825337][ T3509] netlink: 6 bytes leftover after parsing attributes in process `syz.0.1'. [ 33.837251][ T3512] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.850655][ T3509] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 33.870760][ T28] audit: type=1400 audit(1786864466.435:177): avc: denied { mount } for pid=3510 comm="syz.4.6" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 33.877710][ T40] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.892502][ T28] audit: type=1400 audit(1786864466.455:178): avc: denied { unmount } for pid=3297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 33.924047][ T28] audit: type=1400 audit(1786864466.515:179): avc: denied { create } for pid=3517 comm="syz.1.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 33.928528][ T48] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.954484][ T28] audit: type=1400 audit(1786864466.535:180): avc: denied { write } for pid=3510 comm="syz.4.6" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 33.976429][ T28] audit: type=1400 audit(1786864466.535:181): avc: denied { add_name } for pid=3510 comm="syz.4.6" name="proc" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 33.997436][ T48] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.002647][ T28] audit: type=1400 audit(1786864466.535:182): avc: denied { create } for pid=3510 comm="syz.4.6" name="proc" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 34.027882][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.036990][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.068746][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.087934][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.103191][ T28] audit: type=1400 audit(1786864466.535:183): avc: denied { mounton } for pid=3510 comm="syz.4.6" path="/1/file1/proc" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 34.188018][ T40] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.218972][ T40] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.258018][ T48] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.269134][ T3523] loop2: detected capacity change from 0 to 1164 [ 34.290378][ T48] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.302750][ T3523] ISOFS: primary root directory is empty. Disabling Rock Ridge and switching to Joliet. [ 34.310342][ T3532] loop1: detected capacity change from 0 to 128 [ 34.408240][ T3523] syz.2.3 (3523) used greatest stack depth: 10624 bytes left [ 34.427975][ T40] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.439829][ T40] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.455537][ T3540] FAULT_INJECTION: forcing a failure. [ 34.455537][ T3540] name failslab, interval 1, probability 0, space 0, times 0 [ 34.474933][ T3540] CPU: 1 UID: 0 PID: 3540 Comm: syz.1.10 Not tainted syzkaller #0 PREEMPT(lazy) [ 34.475030][ T3540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 34.475099][ T3540] Call Trace: [ 34.475106][ T3540] [ 34.475115][ T3540] __dump_stack+0x1d/0x30 [ 34.475203][ T3540] dump_stack_lvl+0x95/0xd0 [ 34.475227][ T3540] dump_stack+0x15/0x1b [ 34.475248][ T3540] should_fail_ex+0x25e/0x270 [ 34.475281][ T3540] should_failslab+0x8c/0xb0 [ 34.475365][ T3540] kmem_cache_alloc_noprof+0x7f/0x3c0 [ 34.475391][ T3540] ? audit_log_start+0x34c/0x730 [ 34.475424][ T3540] ? audit_log_start+0x34c/0x730 [ 34.475458][ T3540] audit_log_start+0x34c/0x730 [ 34.475548][ T3540] audit_seccomp+0x49/0x110 [ 34.475579][ T3540] __seccomp_filter+0x905/0x1370 [ 34.475604][ T3540] ? __fget_files+0x184/0x1c0 [ 34.475708][ T3540] __secure_computing+0x7d/0x150 [ 34.475732][ T3540] do_syscall_64+0xd4/0x3c0 [ 34.475796][ T3540] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 34.475821][ T3540] RIP: 0033:0x7f3f1ce7e0d9 [ 34.475839][ T3540] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 34.475862][ T3540] RSP: 002b:00007f3f1b8b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000106 [ 34.475887][ T3540] RAX: ffffffffffffffda RBX: 00007f3f1d106090 RCX: 00007f3f1ce7e0d9 [ 34.475903][ T3540] RDX: 0000200000000100 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 34.475923][ T3540] RBP: 00007f3f1b8b6090 R08: 0000000000000000 R09: 0000000000000000 [ 34.475938][ T3540] R10: 0000000000004000 R11: 0000000000000246 R12: 0000000000000001 [ 34.476016][ T3540] R13: 00007f3f1d106128 R14: 00007f3f1d106090 R15: 00007fffdf7b6008 [ 34.476036][ T3540] [ 34.479833][ T3541] IPVS: sync thread started: state = MASTER, mcast_ifn = macsec0, syncid = 3, id = 0 [ 34.505750][ T3539] loop2: detected capacity change from 0 to 256 [ 34.512782][ T3459] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.644468][ T3296] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, [ 34.649106][ T3459] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.650981][ T3296] block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 34.660596][ T3459] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.008322][ T3556] loop0: detected capacity change from 0 to 512 [ 35.039404][ T3556] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 35.047522][ T3556] EXT4-fs error (device loop0): ext4_iget_extra_inode:5180: inode #15: comm syz.0.15: corrupted in-inode xattr: e_value size too large [ 35.061953][ T3556] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 35.063880][ T3556] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.15: couldn't read orphan inode 15 (err -117) [ 35.073104][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 35.073126][ C1] EXT4-fs (loop0): initial error at time 1786864467: ext4_iget_extra_inode:5180: inode 15 [ 35.073172][ C1] EXT4-fs (loop0): last error at time 1786864467: ext4_iget_extra_inode:5180: inode 15 [ 35.082558][ T3559] netlink: 6 bytes leftover after parsing attributes in process `syz.3.17'. [ 35.085131][ T3556] loop0: lost filesystem error report for type 5 error -117 [ 35.124545][ T3556] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.140256][ T3559] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 35.211894][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.266130][ T3559] syz.3.17 (3559) used greatest stack depth: 10048 bytes left [ 35.359184][ T3557] loop2: detected capacity change from 0 to 1164 [ 35.401235][ T3557] ISOFS: primary root directory is empty. Disabling Rock Ridge and switching to Joliet. [ 35.516539][ T3576] IPVS: sync thread started: state = MASTER, mcast_ifn = macsec0, syncid = 3, id = 0 [ 35.532512][ T3578] loop3: detected capacity change from 0 to 512 [ 35.546720][ T3578] EXT4-fs: Ignoring removed bh option [ 35.552331][ T3578] EXT4-fs: Ignoring removed mblk_io_submit option [ 35.582027][ T3578] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 35.594238][ T3578] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 35.602641][ T3578] EXT4-fs (loop3): orphan cleanup on readonly fs [ 35.609641][ T3578] EXT4-fs warning (device loop3): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 35.624602][ T3578] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 35.631954][ T3578] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.21: Invalid block bitmap block 0 in block_group 0 [ 35.645595][ T3578] loop3: lost filesystem error report for type 5 error -117 [ 35.645708][ T3578] EXT4-fs (loop3): Remounting filesystem read-only [ 35.653009][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 35.653030][ C0] EXT4-fs (loop3): last error at time 1786864468: ext4_read_block_bitmap_nowait:483 [ 35.677368][ T3578] EXT4-fs (loop3): 1 orphan inode deleted [ 35.684444][ T3578] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 35.708620][ T3580] loop0: detected capacity change from 0 to 128 [ 35.749854][ T3570] 9p: Bad value for 'rfdno' [ 35.773174][ T3583] sd 0:0:1:0: device reset [ 35.777485][ T3580] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 35.812085][ T3580] ext4 filesystem being mounted at /5/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 35.862109][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.880698][ T3586] sd 0:0:1:0: device reset [ 35.941364][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.959944][ T40] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.134255][ T3599] netlink: 6 bytes leftover after parsing attributes in process `syz.2.32'. [ 36.161868][ T3301] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 36.185733][ T3599] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 36.209198][ T3605] netlink: 132 bytes leftover after parsing attributes in process `syz.3.33'. [ 36.335618][ T40] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.431702][ T3613] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 36.458075][ T3613] EXT4-fs (loop0): 1 truncate cleaned up [ 36.472798][ T3631] sd 0:0:1:0: device reset [ 36.480411][ T3613] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.511990][ T40] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.563171][ T3635] netlink: 'syz.3.39': attribute type 3 has an invalid length. [ 36.601393][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.613347][ T40] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.690564][ T3635] netlink: 8 bytes leftover after parsing attributes in process `syz.3.39'. [ 36.702097][ T3635] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.721589][ T3602] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.729540][ T3602] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.737026][ T3602] bridge_slave_0: entered allmulticast mode [ 36.746539][ T3602] bridge_slave_0: entered promiscuous mode [ 36.748548][ T3602] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.748580][ T3602] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.748699][ T3602] bridge_slave_1: entered allmulticast mode [ 36.749363][ T3602] bridge_slave_1: entered promiscuous mode [ 36.811104][ T3602] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.816475][ T3602] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.869501][ T3602] team0: Port device team_slave_0 added [ 36.870422][ T40] bridge_slave_1: left allmulticast mode [ 36.870487][ T40] bridge_slave_1: left promiscuous mode [ 36.870564][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.871485][ T40] bridge_slave_0: left allmulticast mode [ 36.871502][ T40] bridge_slave_0: left promiscuous mode [ 36.871693][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.882369][ T3656] EXT4-fs: Invalid want_extra_isize 4 [ 37.010112][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 37.050243][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 37.052770][ T40] bond0 (unregistering): Released all slaves [ 37.060151][ T3602] team0: Port device team_slave_1 added [ 37.081286][ T3671] netlink: 132 bytes leftover after parsing attributes in process `syz.3.46'. [ 37.113191][ T3019] 8021q: adding VLAN 0 to HW filter on device eth1 [ 37.130491][ T40] hsr_slave_0: left promiscuous mode [ 37.144684][ T40] hsr_slave_1: left promiscuous mode [ 37.145197][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 37.219927][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 37.238215][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 37.245711][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 37.263759][ T40] veth1_macvtap: left promiscuous mode [ 37.269790][ T40] veth0_macvtap: left promiscuous mode [ 37.275528][ T40] veth1_vlan: left promiscuous mode [ 37.282645][ T40] veth0_vlan: left promiscuous mode [ 37.441807][ T40] team0 (unregistering): Port device team_slave_1 removed [ 37.462142][ T40] team0 (unregistering): Port device team_slave_0 removed [ 37.529466][ T3602] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.536463][ T3602] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.579425][ T3602] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.601574][ T3602] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.619297][ T3602] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.668093][ T3602] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.814573][ T3602] hsr_slave_0: entered promiscuous mode [ 37.829741][ T3602] hsr_slave_1: entered promiscuous mode [ 37.909930][ T3722] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3722 comm=syz.1.57 [ 38.017425][ T3019] 8021q: adding VLAN 0 to HW filter on device eth2 [ 38.153753][ T3714] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 38.171973][ T3602] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 38.182633][ T3602] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 38.222764][ T3714] EXT4-fs (loop0): 1 truncate cleaned up [ 38.231010][ T3602] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 38.241084][ T3602] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 38.242041][ T3714] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.263943][ T3602] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 38.274366][ T3602] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 38.290039][ T3602] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 38.300022][ T3602] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 38.339941][ T3714] sd 0:0:1:0: device reset [ 38.373837][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.422309][ T3768] netlink: 132 bytes leftover after parsing attributes in process `syz.3.64'. [ 38.466055][ T3602] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.478050][ T3602] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.494347][ T310] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.501450][ T310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.542041][ T310] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.549173][ T310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.595371][ T3019] 8021q: adding VLAN 0 to HW filter on device eth3 [ 38.646765][ T3787] set_capacity_and_notify: 4 callbacks suppressed [ 38.646782][ T3787] loop3: detected capacity change from 0 to 1024 [ 38.675472][ T3794] netlink: 52 bytes leftover after parsing attributes in process `syz.2.68'. [ 38.690259][ T3787] EXT4-fs: Ignoring removed bh option [ 38.732830][ T3787] EXT4-fs: inline encryption not supported [ 38.745266][ T3799] loop0: detected capacity change from 0 to 512 [ 38.749716][ T3787] ext4: Unknown parameter 'euid' [ 38.788545][ T3799] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 38.821416][ T3799] EXT4-fs error (device loop0): ext4_init_orphan_info:618: comm syz.0.69: orphan file block 0: bad magic [ 38.839235][ T3799] loop0: lost filesystem error report for type 5 error -117 [ 38.842735][ T3799] EXT4-fs (loop0): Remounting filesystem read-only [ 38.850127][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 38.850161][ C0] EXT4-fs (loop0): initial error at time 1786864471: ext4_init_orphan_info:618 [ 38.850203][ C0] EXT4-fs (loop0): last error at time 1786864471: ext4_init_orphan_info:618 [ 38.891366][ T3787] loop3: detected capacity change from 0 to 512 [ 38.929920][ T3799] EXT4-fs (loop0): mount failed [ 38.961810][ T3602] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.964960][ T3787] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.66: bg 0: block 5: invalid block bitmap [ 38.995359][ T28] kauditd_printk_skb: 666 callbacks suppressed [ 38.995372][ T28] audit: type=1400 audit(1786864471.575:847): avc: denied { write } for pid=3792 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 39.076371][ T3019] 8021q: adding VLAN 0 to HW filter on device eth4 [ 39.117362][ T28] audit: type=1400 audit(1786864471.645:848): avc: denied { write } for pid=3827 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 39.187464][ T3787] loop3: lost filesystem error report for type 5 error -117 [ 39.188291][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 39.202167][ C0] EXT4-fs (loop3): initial error at time 1786864471: ext4_validate_block_bitmap:432 [ 39.211697][ C0] EXT4-fs (loop3): last error at time 1786864471: ext4_validate_block_bitmap:432 [ 39.231302][ T3602] veth0_vlan: entered promiscuous mode [ 39.239828][ T28] audit: type=1400 audit(1786864471.685:849): avc: denied { ioctl } for pid=3830 comm="syz.0.73" path="socket:[5867]" dev="sockfs" ino=5867 ioctlcmd=0x9434 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 39.262065][ T3602] veth1_vlan: entered promiscuous mode [ 39.284216][ T3820] loop2: detected capacity change from 0 to 512 [ 39.287808][ T3787] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 39.310329][ T3602] veth0_macvtap: entered promiscuous mode [ 39.320505][ T3787] loop3: lost filesystem error report for type 5 error -117 [ 39.327208][ T28] audit: type=1400 audit(1786864471.745:850): avc: denied { create } for pid=3830 comm="syz.0.73" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 39.328105][ T3787] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.66: invalid indirect mapped block 3 (level 2) [ 39.336383][ T28] audit: type=1400 audit(1786864471.745:851): avc: denied { write } for pid=3830 comm="syz.0.73" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 39.356655][ T3602] veth1_macvtap: entered promiscuous mode [ 39.378426][ T28] audit: type=1400 audit(1786864471.755:852): avc: denied { getopt } for pid=3830 comm="syz.0.73" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 39.399305][ T3602] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.419777][ T3820] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 39.436230][ T3787] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 39.438186][ T3787] EXT4-fs (loop3): 1 orphan inode deleted [ 39.442349][ T28] audit: type=1400 audit(1786864471.755:853): avc: denied { ioctl } for pid=3830 comm="syz.0.73" path="socket:[5872]" dev="sockfs" ino=5872 ioctlcmd=0x9402 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 39.461326][ T3787] EXT4-fs (loop3): 1 truncate cleaned up [ 39.491793][ T3602] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.509669][ T3820] EXT4-fs (loop2): 1 truncate cleaned up [ 39.510619][ T3787] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.519553][ T40] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.529093][ T28] audit: type=1400 audit(1786864471.825:854): avc: denied { read write } for pid=3843 comm="syz.0.74" name="rdma_cm" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 39.556746][ T3820] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.561849][ T28] audit: type=1400 audit(1786864471.825:855): avc: denied { open } for pid=3843 comm="syz.0.74" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 39.591332][ T40] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.606998][ T28] audit: type=1400 audit(1786864472.045:856): avc: denied { write } for pid=3843 comm="syz.0.74" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 39.615342][ T3844] sctp: [Deprecated]: syz.0.74 (pid 3844) Use of struct sctp_assoc_value in delayed_ack socket option. [ 39.615342][ T3844] Use struct sctp_sack_info instead [ 39.639108][ T3820] sd 0:0:1:0: device reset [ 39.666181][ T3851] netlink: 132 bytes leftover after parsing attributes in process `syz.1.75'. [ 39.689026][ T3459] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.698253][ T3459] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.745326][ T3856] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3856 comm=syz.1.77 [ 39.760978][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.791155][ T3858] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.808151][ T3858] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.836497][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.866504][ T3860] loop5: detected capacity change from 0 to 512 [ 39.877346][ T3860] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 39.895216][ T3860] EXT4-fs (loop5): 1 truncate cleaned up [ 39.897852][ T3866] syzkaller1: entered promiscuous mode [ 39.906835][ T3866] syzkaller1: entered allmulticast mode [ 39.906878][ T3860] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.934126][ T3866] netlink: 64 bytes leftover after parsing attributes in process `syz.2.76'. [ 39.937192][ T3860] sd 0:0:1:0: device reset [ 39.963921][ T3602] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.979408][ T3865] loop3: detected capacity change from 0 to 8192 [ 40.042613][ T3877] loop5: detected capacity change from 0 to 512 [ 40.058180][ T3877] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 40.075063][ T3877] EXT4-fs error (device loop5): ext4_init_orphan_info:618: comm syz.5.82: orphan file block 0: bad magic [ 40.099333][ T3877] loop5: lost filesystem error report for type 5 error -117 [ 40.100237][ T3877] EXT4-fs (loop5): Remounting filesystem read-only [ 40.107721][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 40.107757][ C1] EXT4-fs (loop5): initial error at time 1786864472: ext4_init_orphan_info:618 [ 40.107819][ C1] EXT4-fs (loop5): last error at time 1786864472: ext4_init_orphan_info:618 [ 40.143132][ T3879] sd 0:0:1:0: device reset [ 40.161871][ T3877] EXT4-fs (loop5): mount failed [ 40.256779][ T3887] sd 0:0:1:0: device reset [ 40.297032][ T3889] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3889 comm=syz.5.87 [ 40.432457][ T3898] loop1: detected capacity change from 0 to 1024 [ 40.444821][ T3898] EXT4-fs: Ignoring removed bh option [ 40.459484][ T3898] EXT4-fs: inline encryption not supported [ 40.472663][ T3898] ext4: Unknown parameter 'euid' [ 40.492678][ T3898] loop1: detected capacity change from 0 to 512 [ 40.523072][ T3898] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.89: bg 0: block 5: invalid block bitmap [ 40.590743][ T3898] loop1: lost filesystem error report for type 5 error -117 [ 40.596221][ T3898] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 40.603585][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 40.603606][ C1] EXT4-fs (loop1): initial error at time 1786864473: ext4_validate_block_bitmap:432 [ 40.603633][ C1] EXT4-fs (loop1): last error at time 1786864473: ext4_validate_block_bitmap:432 [ 40.637858][ T3898] loop1: lost filesystem error report for type 5 error -117 [ 40.644669][ T3898] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.89: invalid indirect mapped block 3 (level 2) [ 40.679246][ T3898] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 40.679618][ T3898] EXT4-fs (loop1): 1 orphan inode deleted [ 40.694926][ T3898] EXT4-fs (loop1): 1 truncate cleaned up [ 40.700958][ T3898] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.785697][ T3917] loop2: detected capacity change from 0 to 512 [ 40.831978][ T3914] netlink: 132 bytes leftover after parsing attributes in process `syz.3.95'. [ 40.851350][ T3917] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 40.890458][ T3917] EXT4-fs error (device loop2): ext4_init_orphan_info:618: comm syz.2.96: orphan file block 0: bad magic [ 40.903855][ T3917] loop2: lost filesystem error report for type 5 error -117 [ 40.904160][ T3917] EXT4-fs (loop2): Remounting filesystem read-only [ 40.911552][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 40.911581][ C0] EXT4-fs (loop2): initial error at time 1786864473: ext4_init_orphan_info:618 [ 40.911628][ C0] EXT4-fs (loop2): last error at time 1786864473: ext4_init_orphan_info:618 [ 40.943404][ T3917] EXT4-fs (loop2): mount failed [ 41.032823][ T3935] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3935 comm=syz.3.98 [ 41.050305][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.075348][ T3940] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.087031][ T3940] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.313500][ T3959] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 41.350327][ T3959] EXT4-fs (loop3): 1 truncate cleaned up [ 41.362748][ T3959] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.419631][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.670013][ T3993] netlink: 52 bytes leftover after parsing attributes in process `syz.0.112'. [ 41.675090][ T3992] EXT4-fs: Ignoring removed bh option [ 41.693629][ T3993] netlink: 52 bytes leftover after parsing attributes in process `syz.0.112'. [ 41.701490][ T3992] EXT4-fs: inline encryption not supported [ 41.719481][ T3992] ext4: Unknown parameter 'euid' [ 41.809078][ T3992] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.111: bg 0: block 5: invalid block bitmap [ 41.908091][ T3992] loop2: lost filesystem error report for type 5 error -117 [ 41.908250][ T3992] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 41.924279][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 41.924302][ C0] EXT4-fs (loop2): initial error at time 1786864474: ext4_validate_block_bitmap:432 [ 41.924330][ C0] EXT4-fs (loop2): last error at time 1786864474: ext4_validate_block_bitmap:432 [ 41.976724][ T4007] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.017136][ T4007] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=22548 sclass=netlink_xfrm_socket pid=4007 comm=syz.0.116 [ 42.053239][ T3992] loop2: lost filesystem error report for type 5 error -117 [ 42.054822][ T3992] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.111: invalid indirect mapped block 3 (level 2) [ 42.077493][ T4007] netlink: 277 bytes leftover after parsing attributes in process `syz.0.116'. [ 42.099238][ T3992] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 42.100898][ T3992] EXT4-fs (loop2): 1 orphan inode deleted [ 42.140245][ T3992] EXT4-fs (loop2): 1 truncate cleaned up [ 42.156609][ T3992] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.226147][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.405607][ T4020] sd 0:0:1:0: device reset [ 42.515835][ T4029] netlink: 'syz.2.124': attribute type 4 has an invalid length. [ 42.539424][ T4029] netlink: 17 bytes leftover after parsing attributes in process `syz.2.124'. [ 42.584523][ T4034] netlink: 52 bytes leftover after parsing attributes in process `syz.5.126'. [ 42.608083][ T4034] netlink: 52 bytes leftover after parsing attributes in process `syz.5.126'. [ 42.628781][ T4029] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.654435][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.670424][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.830758][ T4046] EXT4-fs: Ignoring removed bh option [ 42.852280][ T4050] sd 0:0:1:0: device reset [ 42.862596][ T4046] EXT4-fs: inline encryption not supported [ 42.891067][ T4046] ext4: Unknown parameter 'euid' [ 42.924543][ T4046] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.130: bg 0: block 5: invalid block bitmap [ 42.940274][ T4053] EXT4-fs: Invalid want_extra_isize 4 [ 42.942097][ T4046] loop5: lost filesystem error report for type 5 error -117 [ 42.955799][ T4046] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 42.963182][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 42.963216][ C0] EXT4-fs (loop5): initial error at time 1786864475: ext4_validate_block_bitmap:432 [ 42.963241][ C0] EXT4-fs (loop5): last error at time 1786864475: ext4_validate_block_bitmap:432 [ 43.000414][ T4046] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.130: invalid indirect mapped block 3 (level 2) [ 43.020247][ T4046] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 43.025288][ T4046] EXT4-fs (loop5): 1 orphan inode deleted [ 43.104577][ T4046] EXT4-fs (loop5): 1 truncate cleaned up [ 43.122431][ T4046] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.318748][ T3602] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.367045][ T4066] netlink: 'syz.3.139': attribute type 4 has an invalid length. [ 43.390360][ T4066] netlink: 17 bytes leftover after parsing attributes in process `syz.3.139'. [ 43.401788][ T4068] sd 0:0:1:0: device reset [ 43.523335][ T4073] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.652954][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.799414][ T4089] syzkaller0: entered promiscuous mode [ 43.800732][ T4087] set_capacity_and_notify: 13 callbacks suppressed [ 43.800797][ T4087] loop0: detected capacity change from 0 to 512 [ 43.811697][ T4089] syzkaller0: entered allmulticast mode [ 43.826340][ T4087] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 43.855936][ T4087] EXT4-fs (loop0): 1 truncate cleaned up [ 43.882063][ T4087] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.901976][ T4087] sd 0:0:1:0: device reset [ 43.935083][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.071141][ T4105] loop0: detected capacity change from 0 to 1024 [ 44.085672][ T4105] EXT4-fs: Ignoring removed bh option [ 44.097612][ T4105] EXT4-fs: inline encryption not supported [ 44.127608][ T4109] sd 0:0:1:0: device reset [ 44.132710][ T4105] ext4: Unknown parameter 'euid' [ 44.167755][ T4105] loop0: detected capacity change from 0 to 512 [ 44.207347][ T4105] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.148: bg 0: block 5: invalid block bitmap [ 44.266705][ T4105] fserror_report: 1 callbacks suppressed [ 44.266723][ T4105] loop0: lost filesystem error report for type 5 error -117 [ 44.277585][ T4114] loop5: detected capacity change from 0 to 128 [ 44.297672][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 44.304187][ C1] EXT4-fs (loop0): initial error at time 1786864476: ext4_validate_block_bitmap:432 [ 44.313669][ C1] EXT4-fs (loop0): last error at time 1786864476: ext4_validate_block_bitmap:432 [ 44.322745][ T4105] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 44.343040][ T4114] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 44.344658][ T4105] loop0: lost filesystem error report for type 5 error -117 [ 44.360640][ T4114] ext4 filesystem being mounted at /24/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 44.392575][ T4105] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.148: invalid indirect mapped block 3 (level 2) [ 44.421983][ T28] kauditd_printk_skb: 423 callbacks suppressed [ 44.421998][ T28] audit: type=1400 audit(1786864477.005:1280): avc: denied { write } for pid=4113 comm="syz.5.153" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 44.450908][ T28] audit: type=1400 audit(1786864477.015:1281): avc: denied { write } for pid=4113 comm="syz.5.153" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 44.472810][ T28] audit: type=1400 audit(1786864477.015:1282): avc: denied { write } for pid=4113 comm="syz.5.153" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 44.494793][ T4105] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 44.496207][ T4105] EXT4-fs (loop0): 1 orphan inode deleted [ 44.512077][ T4105] EXT4-fs (loop0): 1 truncate cleaned up [ 44.522644][ T28] audit: type=1400 audit(1786864477.105:1283): avc: denied { write } for pid=4113 comm="syz.5.153" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 44.548482][ T4105] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.554278][ T28] audit: type=1400 audit(1786864477.105:1284): avc: denied { write } for pid=4113 comm="syz.5.153" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 44.594315][ T28] audit: type=1400 audit(1786864477.135:1285): avc: denied { write } for pid=4113 comm="syz.5.153" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 44.622023][ T28] audit: type=1400 audit(1786864477.175:1286): avc: denied { write } for pid=4113 comm="syz.5.153" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 44.650805][ T28] audit: type=1400 audit(1786864477.205:1287): avc: denied { write } for pid=4099 comm="syz.0.148" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 44.674076][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.685565][ T3602] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 44.721891][ T4125] __nla_validate_parse: 1 callbacks suppressed [ 44.721916][ T4125] netlink: 132 bytes leftover after parsing attributes in process `syz.5.157'. [ 44.998544][ T4132] netlink: 132 bytes leftover after parsing attributes in process `syz.5.158'. [ 45.040941][ T4130] loop2: detected capacity change from 0 to 512 [ 45.116740][ T4130] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 45.141014][ T28] audit: type=1400 audit(1786864477.715:1288): avc: denied { write } for pid=4139 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 45.203522][ T4130] EXT4-fs (loop2): 1 truncate cleaned up [ 45.231413][ T28] audit: type=1400 audit(1786864477.755:1289): avc: denied { execute } for pid=4152 comm="syz.0.161" path="/26/blkio.bfq.empty_time" dev="tmpfs" ino=161 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 45.256175][ T4130] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.337416][ T4130] sd 0:0:1:0: device reset [ 45.414958][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.476524][ T4174] loop0: detected capacity change from 0 to 512 [ 45.495774][ T4179] sd 0:0:1:0: device reset [ 45.523530][ T4174] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 45.536526][ T4174] EXT4-fs error (device loop0): ext4_init_orphan_info:618: comm syz.0.163: orphan file block 0: bad magic [ 45.548403][ T4174] loop0: lost filesystem error report for type 5 error -117 [ 45.549237][ T4174] EXT4-fs (loop0): Remounting filesystem read-only [ 45.563265][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 45.563304][ C0] EXT4-fs (loop0): initial error at time 1786864478: ext4_init_orphan_info:618 [ 45.563341][ C0] EXT4-fs (loop0): last error at time 1786864478: ext4_init_orphan_info:618 [ 45.588073][ T4174] EXT4-fs (loop0): mount failed [ 45.705796][ T4195] loop0: detected capacity change from 0 to 1024 [ 45.738431][ T4195] EXT4-fs: Ignoring removed bh option [ 45.774223][ T4195] EXT4-fs: inline encryption not supported [ 45.792776][ T4206] netlink: 132 bytes leftover after parsing attributes in process `syz.3.168'. [ 45.818404][ T4195] ext4: Unknown parameter 'euid' [ 45.841506][ T4210] syz_tun: entered allmulticast mode [ 45.868857][ T4195] loop0: detected capacity change from 0 to 512 [ 45.905723][ T4195] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.166: bg 0: block 5: invalid block bitmap [ 45.926344][ T4210] loop5: detected capacity change from 0 to 1024 [ 45.935984][ T4195] loop0: lost filesystem error report for type 5 error -117 [ 45.936410][ T4195] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 45.943800][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 45.943840][ C0] EXT4-fs (loop0): initial error at time 1786864478: ext4_validate_block_bitmap:432 [ 45.943897][ C0] EXT4-fs (loop0): last error at time 1786864478: ext4_validate_block_bitmap:432 [ 45.995038][ T4210] EXT4-fs: Ignoring removed orlov option [ 46.047448][ T4210] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.070374][ T4195] loop0: lost filesystem error report for type 5 error -117 [ 46.070659][ T4195] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.166: invalid indirect mapped block 3 (level 2) [ 46.098950][ T4209] syz_tun: left allmulticast mode [ 46.104357][ T4195] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 46.106800][ T4195] EXT4-fs (loop0): 1 orphan inode deleted [ 46.130623][ T4195] EXT4-fs (loop0): 1 truncate cleaned up [ 46.137178][ T4195] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.151850][ T3602] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.177464][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.186522][ T4200] netlink: 4 bytes leftover after parsing attributes in process `syz.2.167'. [ 46.210159][ T4200] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 46.284149][ T4232] loop2: detected capacity change from 0 to 512 [ 46.314545][ T4200] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 46.337159][ T4232] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.167: iget: bad i_size value: 38620345925642 [ 46.351696][ T4232] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 46.356245][ T4232] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.167: couldn't read orphan inode 15 (err -117) [ 46.365437][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 46.365455][ C1] EXT4-fs (loop2): initial error at time 1786864478: ext4_orphan_get:1399: inode 15 [ 46.365481][ C1] EXT4-fs (loop2): last error at time 1786864478: ext4_orphan_get:1399: inode 15 [ 46.403758][ T4232] loop2: lost filesystem error report for type 5 error -117 [ 46.406255][ T4232] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.460649][ T4259] sd 0:0:1:0: device reset [ 46.502187][ T4252] syzkaller0: entered promiscuous mode [ 46.518295][ T4252] syzkaller0: entered allmulticast mode [ 46.563450][ T4261] sd 0:0:1:0: device reset [ 46.619876][ T4265] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 46.632213][ T4265] EXT4-fs error (device loop5): ext4_init_orphan_info:618: comm syz.5.176: orphan file block 0: bad magic [ 46.643908][ T4265] loop5: lost filesystem error report for type 5 error -117 [ 46.647106][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.647657][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 46.655310][ T4265] EXT4-fs (loop5): Remounting filesystem read-only [ 46.663420][ C1] EXT4-fs (loop5): initial error at time 1786864479: ext4_init_orphan_info:618 [ 46.663448][ C1] EXT4-fs (loop5): last error at time 1786864479: ext4_init_orphan_info:618 [ 46.708579][ T4265] EXT4-fs (loop5): mount failed [ 46.829800][ T4277] netlink: 8 bytes leftover after parsing attributes in process `syz.5.181'. [ 46.948971][ T4275] netlink: 132 bytes leftover after parsing attributes in process `syz.0.179'. [ 47.031862][ T4295] netlink: 92 bytes leftover after parsing attributes in process `syz.2.182'. [ 47.115777][ T4277] EXT4-fs warning (device loop5): ext4_xattr_inode_get:560: inode #11: comm syz.5.181: EA inode hash validation failed [ 47.175981][ T4277] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 47.240239][ T4277] EXT4-fs error (device loop5): ext4_do_update_inode:5742: inode #15: comm syz.5.181: corrupted inode contents [ 47.289244][ T4277] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 47.289821][ T4277] EXT4-fs (loop5): Remounting filesystem read-only [ 47.299272][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 47.299303][ C0] EXT4-fs (loop5): initial error at time 1786864479: ext4_do_update_inode:5742: inode 15 [ 47.299432][ C0] EXT4-fs (loop5): last error at time 1786864479: ext4_do_update_inode:5742: inode 15 [ 47.301261][ T4317] sd 0:0:1:0: device reset [ 47.351914][ T4277] EXT4-fs warning (device loop5): ext4_evict_inode:287: xattr delete (err -30) [ 47.361993][ T4277] EXT4-fs (loop5): 1 orphan inode deleted [ 47.394477][ T4277] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.520695][ T3602] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.585011][ T4329] EXT4-fs: Ignoring removed bh option [ 47.594576][ T4327] netlink: 140 bytes leftover after parsing attributes in process `syz.5.187'. [ 47.617888][ T4323] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 47.628428][ T4329] EXT4-fs: Ignoring removed mblk_io_submit option [ 47.647394][ T4327] vfat: Unknown parameter 'ioKharset' [ 47.660553][ T4323] EXT4-fs (loop3): 1 truncate cleaned up [ 47.678044][ T4327] netlink: 20 bytes leftover after parsing attributes in process `syz.5.187'. [ 47.691870][ T4323] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.710616][ T4323] sd 0:0:1:0: device reset [ 47.711362][ T4329] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 47.791859][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.805420][ T4329] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 47.834047][ T4347] syz_tun: entered allmulticast mode [ 47.898955][ T4329] EXT4-fs (loop2): orphan cleanup on readonly fs [ 47.964752][ T4329] EXT4-fs warning (device loop2): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 47.990320][ T4347] EXT4-fs: Ignoring removed orlov option [ 47.991277][ T4329] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 48.011629][ T4362] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 48.027007][ T4347] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.053594][ T4362] EXT4-fs error (device loop3): ext4_init_orphan_info:618: comm syz.3.191: orphan file block 0: bad magic [ 48.079273][ T4362] loop3: lost filesystem error report for type 5 error -117 [ 48.081011][ T4362] EXT4-fs (loop3): Remounting filesystem read-only [ 48.088422][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 48.088455][ C0] EXT4-fs (loop3): initial error at time 1786864480: ext4_init_orphan_info:618 [ 48.088499][ C0] EXT4-fs (loop3): last error at time 1786864480: ext4_init_orphan_info:618 [ 48.139128][ T4346] syz_tun: left allmulticast mode [ 48.155441][ T4329] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.186: Invalid block bitmap block 0 in block_group 0 [ 48.169313][ T4362] EXT4-fs (loop3): mount failed [ 48.197042][ T3602] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.217807][ T4329] loop2: lost filesystem error report for type 5 error -117 [ 48.219488][ T4329] EXT4-fs (loop2): Remounting filesystem read-only [ 48.233645][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 48.233669][ C0] EXT4-fs (loop2): last error at time 1786864480: ext4_read_block_bitmap_nowait:483 [ 48.292350][ T4329] EXT4-fs (loop2): 1 orphan inode deleted [ 48.301856][ T4329] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 48.495139][ T4325] 9p: Bad value for 'rfdno' [ 48.526341][ T4388] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 48.540663][ T4388] ext4 filesystem being mounted at /36/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 48.676910][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.774324][ T3602] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 48.857858][ T4415] Zero length message leads to an empty skb [ 48.858792][ T4413] set_capacity_and_notify: 8 callbacks suppressed [ 48.858817][ T4413] loop3: detected capacity change from 0 to 1024 [ 48.919714][ T4413] EXT4-fs: Ignoring removed bh option [ 48.926799][ T4413] EXT4-fs: inline encryption not supported [ 48.952418][ T4413] ext4: Unknown parameter 'euid' [ 49.007363][ T4413] loop3: detected capacity change from 0 to 512 [ 49.040588][ T4413] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.200: bg 0: block 5: invalid block bitmap [ 49.058027][ T4413] loop3: lost filesystem error report for type 5 error -117 [ 49.058541][ T4413] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 49.074709][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 49.074753][ C0] EXT4-fs (loop3): initial error at time 1786864481: ext4_validate_block_bitmap:432 [ 49.074804][ C0] EXT4-fs (loop3): last error at time 1786864481: ext4_validate_block_bitmap:432 [ 49.168035][ T4413] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.200: invalid indirect mapped block 3 (level 2) [ 49.212378][ T4434] syzkaller0: entered promiscuous mode [ 49.218611][ T4434] syzkaller0: entered allmulticast mode [ 49.222289][ T4413] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 49.245092][ T4413] EXT4-fs (loop3): 1 orphan inode deleted [ 49.286357][ T4439] netlink: 52 bytes leftover after parsing attributes in process `syz.5.206'. [ 49.305623][ T4413] EXT4-fs (loop3): 1 truncate cleaned up [ 49.323613][ T4413] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.452517][ T4444] loop0: detected capacity change from 0 to 128 [ 49.465869][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.552511][ T4444] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 49.644575][ T4444] ext4 filesystem being mounted at /37/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 49.685475][ T4446] loop5: detected capacity change from 0 to 8192 [ 49.770806][ T28] kauditd_printk_skb: 39 callbacks suppressed [ 49.770822][ T28] audit: type=1400 audit(1786864482.355:1328): avc: denied { write } for pid=4443 comm="syz.0.207" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 49.853613][ T28] audit: type=1400 audit(1786864482.435:1329): avc: denied { write } for pid=4452 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 49.888125][ T28] audit: type=1400 audit(1786864482.465:1330): avc: denied { write } for pid=4443 comm="syz.0.207" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 49.957868][ T28] audit: type=1400 audit(1786864482.505:1331): avc: denied { write } for pid=4477 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 50.018166][ T28] audit: type=1400 audit(1786864482.505:1332): avc: denied { write } for pid=4443 comm="syz.0.207" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 50.061203][ T4487] loop2: detected capacity change from 0 to 512 [ 50.090856][ T28] audit: type=1400 audit(1786864482.525:1333): avc: denied { write } for pid=4443 comm="syz.0.207" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 50.123514][ T4487] EXT4-fs: Ignoring removed bh option [ 50.137565][ T28] audit: type=1400 audit(1786864482.525:1334): avc: denied { write } for pid=4443 comm="syz.0.207" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 50.168213][ T4491] loop5: detected capacity change from 0 to 1024 [ 50.179234][ T4487] EXT4-fs: Ignoring removed mblk_io_submit option [ 50.186362][ T4491] EXT4-fs: Ignoring removed bh option [ 50.205611][ T4491] EXT4-fs: inline encryption not supported [ 50.218403][ T4491] ext4: Unknown parameter 'euid' [ 50.224891][ T28] audit: type=1400 audit(1786864482.545:1335): avc: denied { write } for pid=4443 comm="syz.0.207" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 50.249002][ T3301] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 50.267278][ T4491] loop5: detected capacity change from 0 to 512 [ 50.289023][ T28] audit: type=1400 audit(1786864482.585:1336): avc: denied { read } for pid=4484 comm="syz.5.215" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 50.323220][ T4487] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 50.339214][ T28] audit: type=1400 audit(1786864482.585:1337): avc: denied { open } for pid=4484 comm="syz.5.215" path="/dev/input/event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 50.418061][ T4487] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 50.423492][ T4505] syzkaller0: entered promiscuous mode [ 50.443651][ T4491] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.217: bg 0: block 5: invalid block bitmap [ 50.456014][ T4491] fserror_report: 1 callbacks suppressed [ 50.456036][ T4491] loop5: lost filesystem error report for type 5 error -117 [ 50.463594][ T4487] EXT4-fs (loop2): orphan cleanup on readonly fs [ 50.478301][ T4505] syzkaller0: entered allmulticast mode [ 50.480070][ T4491] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 50.492703][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 50.492740][ C0] EXT4-fs (loop5): initial error at time 1786864483: ext4_validate_block_bitmap:432 [ 50.492787][ C0] EXT4-fs (loop5): last error at time 1786864483: ext4_validate_block_bitmap:432 [ 50.528377][ T4487] EXT4-fs warning (device loop2): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 50.573694][ T4487] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 50.608705][ T4512] netlink: 132 bytes leftover after parsing attributes in process `syz.3.220'. [ 50.609160][ T4491] loop5: lost filesystem error report for type 5 error -117 [ 50.618395][ T4487] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.211: Invalid block bitmap block 0 in block_group 0 [ 50.640699][ T4491] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.217: invalid indirect mapped block 3 (level 2) [ 50.667358][ T4487] loop2: lost filesystem error report for type 5 error -117 [ 50.667697][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 50.668164][ T4491] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 50.675046][ C1] EXT4-fs (loop2): last error at time 1786864483: ext4_read_block_bitmap_nowait:483 [ 50.701743][ T4487] EXT4-fs (loop2): Remounting filesystem read-only [ 50.712735][ T4487] EXT4-fs (loop2): 1 orphan inode deleted [ 50.724360][ T4491] EXT4-fs (loop5): 1 orphan inode deleted [ 50.732130][ T4491] EXT4-fs (loop5): 1 truncate cleaned up [ 50.734900][ T4487] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 50.751887][ T4491] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.811917][ T4531] netlink: 52 bytes leftover after parsing attributes in process `syz.0.221'. [ 50.880745][ T3602] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.910775][ T4459] 9p: Bad value for 'rfdno' [ 51.038229][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.135451][ T4555] FAULT_INJECTION: forcing a failure. [ 51.135451][ T4555] name fail_futex, interval 1, probability 0, space 0, times 1 [ 51.150891][ T4544] netlink: 132 bytes leftover after parsing attributes in process `syz.5.222'. [ 51.202714][ T4555] CPU: 0 UID: 0 PID: 4555 Comm: syz.0.227 Not tainted syzkaller #0 PREEMPT(lazy) [ 51.202747][ T4555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 51.202758][ T4555] Call Trace: [ 51.202785][ T4555] [ 51.202794][ T4555] __dump_stack+0x1d/0x30 [ 51.202919][ T4555] dump_stack_lvl+0x95/0xd0 [ 51.202943][ T4555] dump_stack+0x15/0x1b [ 51.202965][ T4555] should_fail_ex+0x25e/0x270 [ 51.203077][ T4555] should_fail+0xb/0x20 [ 51.203103][ T4555] get_futex_key+0x12f/0xb10 [ 51.203123][ T4555] futex_wait_requeue_pi+0x160/0x6e0 [ 51.203155][ T4555] ? __pfx_futex_wake_mark+0x10/0x10 [ 51.203300][ T4555] do_futex+0x146/0x460 [ 51.203324][ T4555] __se_sys_futex+0x2f6/0x370 [ 51.203348][ T4555] ? mutex_unlock+0x4e/0x90 [ 51.203383][ T4555] __x64_sys_futex+0x78/0x90 [ 51.203477][ T4555] x64_sys_call+0x24ab/0x3020 [ 51.203504][ T4555] do_syscall_64+0x136/0x3c0 [ 51.203534][ T4555] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.203559][ T4555] RIP: 0033:0x7f44b08ce0d9 [ 51.203594][ T4555] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 51.203614][ T4555] RSP: 002b:00007f44af327028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 51.203637][ T4555] RAX: ffffffffffffffda RBX: 00007f44b0b55fa0 RCX: 00007f44b08ce0d9 [ 51.203653][ T4555] RDX: 0000000000000004 RSI: 000000000000000b RDI: 000020000000cffc [ 51.203668][ T4555] RBP: 00007f44af327090 R08: 0000200000048000 R09: 0000000000000000 [ 51.203761][ T4555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 51.203775][ T4555] R13: 00007f44b0b56038 R14: 00007f44b0b55fa0 R15: 00007ffff820b378 [ 51.203795][ T4555] [ 51.463250][ T4572] loop0: detected capacity change from 0 to 512 [ 51.513351][ T4572] EXT4-fs: Invalid want_extra_isize 4 [ 51.648351][ T4586] loop0: detected capacity change from 0 to 512 [ 51.662187][ T4586] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 51.682113][ T4586] EXT4-fs error (device loop0): ext4_init_orphan_info:618: comm syz.0.230: orphan file block 0: bad magic [ 51.702243][ T4586] loop0: lost filesystem error report for type 5 error -117 [ 51.702551][ T4586] EXT4-fs (loop0): Remounting filesystem read-only [ 51.709939][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 51.709974][ C1] EXT4-fs (loop0): initial error at time 1786864484: ext4_init_orphan_info:618 [ 51.710014][ C1] EXT4-fs (loop0): last error at time 1786864484: ext4_init_orphan_info:618 [ 51.868167][ T4586] EXT4-fs (loop0): mount failed [ 52.060426][ T4614] loop2: detected capacity change from 0 to 1024 [ 52.096923][ T4613] syzkaller0: entered promiscuous mode [ 52.102657][ T4613] syzkaller0: entered allmulticast mode [ 52.125205][ T4614] EXT4-fs: Ignoring removed bh option [ 52.150987][ T4614] EXT4-fs: inline encryption not supported [ 52.157270][ T4614] ext4: Unknown parameter 'euid' [ 52.214808][ T4630] netlink: 52 bytes leftover after parsing attributes in process `syz.5.236'. [ 52.265828][ T4614] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.233: bg 0: block 5: invalid block bitmap [ 52.351807][ T4641] sd 0:0:1:0: device reset [ 52.354629][ T4614] loop2: lost filesystem error report for type 5 error -117 [ 52.357656][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 52.366075][ T4614] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 52.371440][ C1] EXT4-fs (loop2): initial error at time 1786864484: ext4_validate_block_bitmap:432 [ 52.389782][ C1] EXT4-fs (loop2): last error at time 1786864484: ext4_validate_block_bitmap:432 [ 52.415580][ T4614] loop2: lost filesystem error report for type 5 error -117 [ 52.415862][ T4614] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.233: invalid indirect mapped block 3 (level 2) [ 52.492962][ T4614] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 52.501104][ T4614] EXT4-fs (loop2): 1 orphan inode deleted [ 52.562173][ T4657] netlink: 132 bytes leftover after parsing attributes in process `syz.5.239'. [ 52.579960][ T4614] EXT4-fs (loop2): 1 truncate cleaned up [ 52.615002][ T4614] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.689282][ T4662] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 52.734996][ T4662] ext4 filesystem being mounted at /48/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 52.827366][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.954236][ T4681] sd 0:0:1:0: device reset [ 53.026490][ T4672] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 53.051495][ T4672] EXT4-fs (loop3): 1 truncate cleaned up [ 53.060603][ T3301] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 53.076967][ T4672] sd 0:0:1:0: device reset [ 53.105586][ T4688] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 53.191329][ T3384] logitech-hidpp-device 0005:046D:B012.0001: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 53.205283][ T4688] EXT4-fs error (device loop2): ext4_init_orphan_info:618: comm syz.2.243: orphan file block 0: bad magic [ 53.229771][ T4688] loop2: lost filesystem error report for type 5 error -117 [ 53.230172][ T4688] EXT4-fs (loop2): Remounting filesystem read-only [ 53.244136][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 53.244179][ C1] EXT4-fs (loop2): initial error at time 1786864485: ext4_init_orphan_info:618 [ 53.244217][ C1] EXT4-fs (loop2): last error at time 1786864485: ext4_init_orphan_info:618 [ 53.269449][ T4688] EXT4-fs (loop2): mount failed [ 53.274936][ T4688] ================================================================== [ 53.283035][ T4688] BUG: KCSAN: data-race in __lru_add_drain_all / folio_add_lru [ 53.290599][ T4688] [ 53.292941][ T4688] read-write to 0xffff888237c26528 of 1 bytes by task 4705 on cpu 0: [ 53.301012][ T4688] folio_add_lru+0xa4/0x250 [ 53.305537][ T4688] folio_add_lru_vma+0x49/0x70 [ 53.310313][ T4688] set_pte_range+0x235/0x4f0 [ 53.312296][ T4705] fido_id[4705]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 53.315095][ T4688] finish_fault+0x87f/0xa10 [ 53.333043][ T4688] handle_mm_fault+0x2086/0x2da0 [ 53.338007][ T4688] do_user_addr_fault+0x634/0x1060 [ 53.343143][ T4688] exc_page_fault+0x62/0xa0 [ 53.347658][ T4688] asm_exc_page_fault+0x26/0x30 [ 53.352510][ T4688] [ 53.354833][ T4688] read to 0xffff888237c26528 of 1 bytes by task 4688 on cpu 1: [ 53.362398][ T4688] __lru_add_drain_all+0x17e/0x450 [ 53.367562][ T4688] lru_add_drain_all+0x10/0x20 [ 53.372337][ T4688] invalidate_bdev+0x47/0x70 [ 53.376942][ T4688] ext4_fill_super+0x2c8c/0x3760 [ 53.381912][ T4688] get_tree_bdev_flags+0x291/0x300 [ 53.387103][ T4688] get_tree_bdev+0x1f/0x30 [ 53.391525][ T4688] ext4_get_tree+0x1c/0x30 [ 53.395971][ T4688] vfs_get_tree+0x57/0x1d0 [ 53.400399][ T4688] do_new_mount+0x288/0x8d0 [ 53.404916][ T4688] path_mount+0x4ad/0xb90 [ 53.409271][ T4688] __se_sys_mount+0x28c/0x2e0 [ 53.414055][ T4688] __x64_sys_mount+0x67/0x80 [ 53.418668][ T4688] x64_sys_call+0x2d61/0x3020 [ 53.423449][ T4688] do_syscall_64+0x136/0x3c0 [ 53.428058][ T4688] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.434042][ T4688] [ 53.436360][ T4688] value changed: 0x1b -> 0x1e [ 53.441032][ T4688] [ 53.443363][ T4688] Reported by Kernel Concurrency Sanitizer on: [ 53.449510][ T4688] CPU: 1 UID: 0 PID: 4688 Comm: syz.2.243 Not tainted syzkaller #0 PREEMPT(lazy) [ 53.458955][ T4688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 53.469029][ T4688] ==================================================================