last executing test programs: 4.548476725s ago: executing program 1 (id=183): r0 = io_uring_setup(0x7a77, &(0x7f0000000000)={0x0, 0xb898, 0x4000, 0x2, 0x30}) r1 = syz_io_uring_setup(0xa23, &(0x7f0000000100)={0x0, 0xb84, 0x800, 0x8003, 0x25f, 0x0, r0}, &(0x7f00000000c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x68, 0x3, r1, 0x0, 0x0, 0x0, 0x1, 0x1, {0x2}}) io_uring_enter(r1, 0x6e2, 0x620, 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x18002, &(0x7f0000000080)={[{@block_validity}, {@errors_remount}, {@sysvgroups}, {@norecovery}, {@nombcache}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nobh}]}, 0x3, 0x56d, &(0x7f0000000480)="$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") r7 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r7, &(0x7f0000000000)={0x10, 0x17, 0x5, {0x7, './file0'}}, 0x10) r8 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) syz_open_procfs(0x0, &(0x7f0000000340)='sessionid\x00') r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) write(r9, 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r8, 0x9000) fallocate(r8, 0x0, 0x0, 0x8800000) r10 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x4c142, 0x0) sendfile(r10, r10, 0x0, 0xe3aa6ea) splice(r5, 0x0, r4, 0x0, 0x101, 0x0) close(r6) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, 0x0, 0x4003) 4.23960598s ago: executing program 3 (id=185): r0 = perf_event_open$cgroup(&(0x7f0000000100)={0x5, 0x80, 0x9, 0x9, 0x2, 0x2, 0x0, 0xad, 0x80000, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x7, @perf_config_ext={0x3, 0x2}, 0x8800, 0x8, 0x2, 0x9, 0xea7, 0x6, 0xf000, 0x0, 0x18f, 0x0, 0x2000000000000000}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@bridge_getneigh={0x30, 0x1e, 0x1, 0x70bd28, 0x25dfdbfe, {0x7, 0x0, 0x0, 0x0, 0x0, 0x2000a}, [@IFLA_VFINFO_LIST={0x8, 0x16, 0x0, 0x1, [{0x4}]}, @IFLA_WEIGHT={0x8, 0xf, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008451}, 0x20000040) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x4, @perf_config_ext={0x3fffffffc}, 0x0, 0x4, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b00000000010000fd0000000900000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0xcff5, r2}, 0x38) socket$inet_mptcp(0x2, 0x1, 0x106) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40009, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x3}, 0x0, 0x3a, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10) ioctl$int_in(r3, 0x5452, &(0x7f0000000000)=0x6) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x201, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) epoll_create1(0x80000) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') 4.162654337s ago: executing program 1 (id=187): socket$netlink(0x10, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x400, &(0x7f0000000080)={[{@grpjquota}, {@stripe={'stripe', 0x3d, 0x40}}]}, 0x1, 0x4a6, &(0x7f0000000a40)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x8004587d, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x4, 0x0, 0x85c, 0x7}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x6, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_bp={0x0}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x44, 0x0, 0x8, 0x401, 0x0, 0x0, {0x0, 0x0, 0x5}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x86dd}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_SYN_RECV={0x8, 0x2, 0x1, 0x0, 0x1b}, @CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x7}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}]}, 0x44}}, 0x4c030) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x400, &(0x7f0000000080)={[{@grpjquota}, {@stripe={'stripe', 0x3d, 0xc}}]}, 0x1, 0x4a6, &(0x7f0000000a40)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x441, 0x2) 3.910502562s ago: executing program 4 (id=190): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) r1 = memfd_create(0x0, 0x1) r2 = dup(r1) r3 = memfd_create(0x0, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(r2, 0xc0109428, &(0x7f0000000000)={0x3, 0x5}) ftruncate(r3, 0xdcb) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000080)={0x0, &(0x7f00000000c0)}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000b80)={[{@grpjquota}, {@nobh}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@dioread_lock}]}, 0x3, 0x439, &(0x7f0000002380)="$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") socket$inet6_mptcp(0xa, 0x1, 0x106) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_script(r4, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) r7 = syz_open_dev$evdev(&(0x7f0000000140), 0x2, 0x1) ioctl$EVIOCGREP(r7, 0x80084503, &(0x7f00000002c0)=""/176) 3.287380592s ago: executing program 1 (id=192): socket$isdn_base(0x22, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18020000801000000000000004000100850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r0, r1, 0x5}, 0x10) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r1, r0, 0x26, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x80401, 0x0, 0x1, 0xffffffffffffffff}}, 0x40) r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000000bc0), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x12, r2, 0x0) socket$inet6(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x48, 0x14, 0x509, 0x70bd27, 0x25dfdbfd, {0x2, 0x1f, 0x0, 0xcb, r4}, [@IFA_BROADCAST={0x8, 0x4, @rand_addr=0x64010104}, @IFA_FLAGS={0x8, 0x8, 0x100}, @IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_ADDRESS={0x8, 0x1, @loopback}, @IFA_TARGET_NETNSID={0x8}, @IFA_LOCAL={0x8, 0x2, @multicast1}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000"], 0x18}}, 0x0) syz_clone(0x40200, &(0x7f0000000140), 0x0, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f00000002c0)="d1f9a543e9d018c933684c8c8c929ccae28c9b0f2a0dd325181c452cff1423a2fa522afbadebdec0d421469caf3a29dcde06e5ccb03ab99e713af44432526dc27a7739eda8adf49b57249afba2bb4d49b34fd70a25d159aec57861561e17060bd8c4e480d1a293453e246f6988358b99cb657c4db6c33fb7f20f26f6ca27c70cbc5b") 3.082051815s ago: executing program 1 (id=193): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101a42, 0xa3) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000005c0)) pwritev2(r0, &(0x7f0000000cc0)=[{&(0x7f0000000240)=';', 0xffffffbc}], 0x1, 0xfff, 0xc, 0x4) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) 2.973638526s ago: executing program 3 (id=194): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = getpid() ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000180)=r1) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f00000001c0)=0x2001) fcntl$dupfd(r2, 0x0, r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="6603840a00000000000061116000ffffffff18000000000000000000000000000000950000000000"], &(0x7f0000000200)='syzkaller\x00'}, 0x94) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x40000000000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) syz_emit_ethernet(0x8e, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaa25aaaaaaaaaaaa4305400f008000650000082e90780a01010164010102864e000000030008094ac467ec3f00124c985e7e0b8b33ae35302c1dffcb98594ee96c2b09f6e55ec84c916e05052450b2079b83b20c1ad6a54142b90ce17393606d00a7ab3c13010dcee8f17fabc8f286afabb207106549c337b0e2fdba29f02c960c99891be6ac141425ac1414aa64010100ffffffffe0"], 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r3, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/netlink\x00') r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r4, 0x8000, 0xffffffffffffffff, 0xfffffffffffffffe}) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) 2.806327746s ago: executing program 1 (id=195): syz_mount_image$ext4(&(0x7f00000001c0)='ext2\x00', &(0x7f0000000280)='./file0\x00', 0xc0ed008e, &(0x7f0000000100)={[{@jqfmt_vfsold}, {@nolazytime}, {@debug}, {@lazytime}, {@min_batch_time={'min_batch_time', 0x3d, 0xd23b}}, {@commit={'commit', 0x3d, 0x5}}, {@nogrpid}, {@mblk_io_submit}]}, 0xfe, 0x47d, &(0x7f0000000dc0)="$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") sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20000000) ioperm(0x0, 0x2, 0x7e) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x1ffa, 0x43) acct(&(0x7f0000000140)='./file0\x00') syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x8040480) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYRESHEX], 0x80}, 0x1, 0x0, 0x0, 0x4}, 0x8000) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffe3a}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) close(0x3) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='mpol=interleave,mpol=local']) r2 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x0) getdents64(r2, 0x0, 0x0) 2.737307344s ago: executing program 3 (id=196): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0xa368, 0x0, 0xfe, "0062ba7d82000000160000000000f738096304"}) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000a80)={0x9, 0x100, 0x3, 0x9, 0xb, "5f1a7d1397312302"}) syz_open_pts(r0, 0x900) read(0xffffffffffffffff, &(0x7f00000000c0)=""/226, 0xe2) 2.732443113s ago: executing program 4 (id=197): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x4d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffff4, 0x0, 0x4) r2 = syz_open_dev$sg(&(0x7f0000000280), 0xfa0, 0x40042) ioctl$SG_IO(r2, 0x2285, &(0x7f00000024c0)={0x53, 0xfffffffffffffffc, 0x6, 0x6c, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000240)="edea56458882", &(0x7f0000001480)=""/4096, 0x100000, 0x10002, 0xffffffffffffffff, 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x8, [@ptr={0xa, 0x0, 0x0, 0x2, 0x4}, @typedef={0x3, 0x0, 0x0, 0x8, 0x1}]}, {0x0, [0x2e, 0x0, 0x30, 0x2e, 0x5f, 0x5f]}}, &(0x7f00000003c0)=""/251, 0x38, 0xfb, 0x1, 0x2, 0x10000}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0xb5, '\x00', 0x0, r4, 0x4, 0x1, 0x3}, 0x50) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xe723, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0) 1.835892755s ago: executing program 4 (id=200): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000061108000000000006301380000000000950049439ec3"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r1 = perf_event_open$cgroup(&(0x7f0000000100)={0x5, 0x80, 0x9, 0x9, 0x2, 0x2, 0x0, 0xad, 0x80000, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x7, @perf_config_ext={0x3, 0x2}, 0x8800, 0x8, 0x2, 0x9, 0xea7, 0x6, 0xf000, 0x0, 0x18f, 0x0, 0x2000000000000000}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x3) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@bridge_getneigh={0x30, 0x1e, 0x1, 0x70bd28, 0x25dfdbfe, {0x7, 0x0, 0x0, 0x0, 0x0, 0x2000a}, [@IFLA_VFINFO_LIST={0x8, 0x16, 0x0, 0x1, [{0x4}]}, @IFLA_WEIGHT={0x8, 0xf, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008451}, 0x20000040) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x4, @perf_config_ext={0x3fffffffc}, 0x0, 0x4, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b00000000010000fd0000000900000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0xcff5, r3}, 0x38) socket$inet_mptcp(0x2, 0x1, 0x106) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40009, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x3}, 0x0, 0x3a, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10) ioctl$int_in(r4, 0x5452, &(0x7f0000000000)=0x6) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x201, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) epoll_create1(0x80000) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r5 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') preadv(r5, &(0x7f00000000c0)=[{&(0x7f0000000500)=""/45, 0x2d}], 0x1, 0x80000000, 0xffffff7c) 1.830741094s ago: executing program 3 (id=201): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r1, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, 0x0}, 0x0) sendmsg$tipc(r1, &(0x7f0000000380)={&(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x0, {0x40, 0x0, 0x2}}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000140)="14ec", 0x2}], 0x1, 0x0, 0x0, 0x20010080}, 0x50) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) accept(0xffffffffffffffff, &(0x7f0000000000)=@x25, &(0x7f0000000080)=0x80) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0xfffffe98, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac1414bb08000200ac0314bb0c0002800500010000000000240002801400018008000100ac1414aa08000200ac1414000c0002800500010000000000080007400000000010001700000000000000000000000000100016"], 0x84}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_SNDMTU(r5, 0x112, 0xc, 0x0, 0x0) 1.700806731s ago: executing program 1 (id=202): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r0, &(0x7f0000000100)=ANY=[], 0x200002e6) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x80214, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) fcntl$setpipe(r0, 0x407, 0x7000000) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f00000001c0)) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x16, &(0x7f0000000640)=0x6, 0x4) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x1, 0x3fc, 0x0, 0x32}, 0x9c) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = syz_open_dev$loop(&(0x7f0000000100), 0xfffffffbfffffffd, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x2880, 0x123) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000003c0)={r5, 0x1000, {0x0, 0x0, 0x0, 0x2, 0x4000000000000ffe, 0x0, 0x0, 0xc, 0xc, "faf98317e5a1149989fc8dbe53ea6abad0099cebdc25f5ab60c9e6d680f985881a8a0f3500000000000000000e0000000000000000000000000000000000ffff", "32d8cc26f7061a74df2cfc06c89f3d9a234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675200000000ad4612cc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce6, 0xa]}}) ioctl$LOOP_SET_BLOCK_SIZE(r4, 0x4c09, 0x4) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$pppl2tp(r6, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r7, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000040)='5\r', 0x2}], 0x1) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x5df80000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r10, &(0x7f0000000000), 0x651, 0x0) 1.605940914s ago: executing program 3 (id=204): r0 = socket$inet6(0xa, 0x2, 0x0) shutdown(r0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x5, 0x8, 0x9}, 0x50) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x5, 0x8, 0x9}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r1, &(0x7f0000000240), &(0x7f00000000c0)=@udp6=r0}, 0x20) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000ff1000/0xc000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x51) r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x1, 0x800000c1}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, 0x0, 0x0) (async) getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0xc64}, 0x10014, 0x0, 0x800000, 0x0, 0x4, 0x2, 0x6, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) socket$pptp(0x18, 0x1, 0x2) (async) socket$pptp(0x18, 0x1, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') preadv(r3, &(0x7f00000011c0)=[{&(0x7f00000014c0)=""/4096, 0x1000}], 0x1, 0x200000, 0x9) (async) preadv(r3, &(0x7f00000011c0)=[{&(0x7f00000014c0)=""/4096, 0x1000}], 0x1, 0x200000, 0x9) sendto$inet6(r0, &(0x7f0000000140)="a1652bd1ddb8f05cf74a04719196b4f03c656a18c71cf00cd9777753739866757302ae7929ad8e583a6ca0a15e3b91ea997164df2474321dc29774e84cd26d36f30f1929762dd12e6f6d40d9569fd4b1f025", 0x52, 0x20008918, 0x0, 0x0) poll(0x0, 0x0, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.401392978s ago: executing program 0 (id=206): r0 = syz_clone3(0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f00000005c0)="fd8293603ec84084d47db52c629d29e6c24d87caa48fb2a710c717e3a23bca88604272", 0x87af, 0xffffffffffffffff, 0x4}, 0x38) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x20, &(0x7f0000000000)={&(0x7f0000000180)=""/187, 0xbb, 0x0, &(0x7f0000000240)=""/205, 0xcd}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000071031700000000009500000000000000b7422688bc7a596bd91003000000000000004d49c3b5faa78a76763b797b79176f0594074626733df6599a24d6d474a5533195f5302f73c6f6f692fea5096365ab731b83f999f8766f84f45e8a3244fe24b7cc1901360272b9ca62f8fafa78377c3d6eea6a257efab6c4093914c0"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r1 = io_uring_setup(0xf06, &(0x7f00000003c0)={0x0, 0xfb6e, 0x38c1, 0x4, 0xf0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000002240)='./file0\x00', 0x108000, &(0x7f00000009c0)=ANY=[@ANYRES64=r0, @ANYRESDEC=r2], 0x1, 0x2c2, &(0x7f00000006c0)="$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") r4 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x17f) r5 = open(&(0x7f0000000400)='./file0\x00', 0x143142, 0x43) sendfile(r5, r5, 0x0, 0x1000000201005) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x129c81, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000a80)={&(0x7f0000000a00), 0xc, &(0x7f0000000a40)={&(0x7f0000001d00)={0x324, 0x26, 0x10, 0x70bd2b, 0x25dfdbfd, {0x1f}, [@typed={0x14, 0x79, 0x0, 0x0, @ipv6=@mcast1}, @nested={0x10, 0xf5, 0x0, 0x1, [@typed={0xc, 0x88, 0x0, 0x0, @str='devlink\x00'}]}, @typed={0x8, 0x106, 0x0, 0x0, @ipv4=@empty}, @generic="2423ed150e10669dc640ff8577fc24a015e2edbecf41a47f4585fafd34b9a4586f75cfd0a5a6161db6821b9834a5f58d258581927f2c78d53074cbf7edd6133035806209b4888d00ef8216b914e9545128dcb57e0cb4a698a0f1912e3a16d8c1e68685dd2c9daf1fdd6f2c6d31f04fce43777c35e241f8e9a2a0a6a9f4d3baf0dc163fd527b7823a854758ed385d9f42daf8af92664c54139a8e5de1a056369bff21a7dbf3acba54e785fc0d36890c81826ef81f12e6dca20725cc3ad971097f89338a8132e03ca7bcfde962884ab4e66bab9e22213324aa15770e97fe118d7ec32dcff409b4c540fcefe5ed427e5f87621d9c786471", @nested={0x15f, 0x9a, 0x0, 0x1, [@generic="48df3c282ad43512f953f818b3e53e4ad5c026e99543531a3a99e7423a42980b819ac0e98bf67b7175e0b641c941e6863ecea8a316d2795c1f1265733243c40e57a597527cd76079f218352eab13502614c8751e65659d48686348dfbf3be49dfb91edacbf157b63f3", @generic="42d8cb24e46660e14875a20f4f3f82bbe4273a51e75a73137ce5adf38d9d8735c8c3e2d3e3cd2b339f2a3dc3a2ce6eef2ae7375b295e2037cf59a3f9020f9c45fa24cd7b73fadda2d7782ef8fb284542c68646a7e2934b9ece285a102c7cee1ee87b245fde2fed9a5e86c04836c2859fc20353dd31b93b97f50316984178172567971bdf6122fba67c1c9da857f423f0afbc6fc12951612c26c1f25c0301026bd6f895f94a91de07dc29aacdd900edaedabce8f19e9a8719846b0f567b8059bb9e945152157a1eb593334ed80b4dfd24a5938b5c03de576b857057019a8a", @typed={0x14, 0xca, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x3d}}]}, @generic="022bde48eddb44045f50c78bba602e503f5b015df16c5e829b4840f3b40c07f7652c252be77428b0724cbfd27adaa08b511622bf848a5d49f8f96336ed81b3c1a01abfd95ce258447b0f1410a86ad5de68f9958a3049b31dbb0b530050277a52f6569e25685a359195cabd2318758c97b8cbfbb6d571c1d9d8583a9fb356a41c990b08a0", @typed={0x8, 0x2a, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x25}}]}, 0x324}, 0x1, 0x0, 0x0, 0x4801}, 0x10) ioctl$int_in(r6, 0x5452, &(0x7f0000000000)=0x8) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000040)=0xf7) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000580)={'veth1_to_bond\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="1c000000a4b40aeafce08cd3f027e306b6eb5e7873ba881d861601f18998184f6570a5690c4fe567803e6359ce96e074d836c7e3cc74a313a3493490fc39255f25537ebc", @ANYRES16=r9, @ANYBLOB="010000000000fddbdf25540000000800030000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x8000) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r3, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[@ANYBLOB="18011000", @ANYRES16=r9, @ANYBLOB="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"], 0x118}, 0x1, 0x0, 0x0, 0x1}, 0x10) r10 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r2, r7, 0x25, 0x2, @val=@perf_event={0x11}}, 0x9) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000680)={r10, r11, 0x4, r2}, 0x10) io_uring_register$IORING_REGISTER_FILES(r1, 0x20, &(0x7f0000000000)=[r1], 0x1) r12 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$XFS_IOC_FSCOUNTS(r1, 0x80205871, &(0x7f0000000340)) ioctl$INCFS_IOC_CREATE_FILE(r12, 0x5411, 0x0) 1.30178951s ago: executing program 0 (id=207): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = getpid() ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000180)=r1) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f00000001c0)=0x2001) fcntl$dupfd(r2, 0x0, r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="6603840a00000000000061116000ffffffff18000000000000000000000000000000950000000000"], &(0x7f0000000200)='syzkaller\x00'}, 0x94) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x40000000000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) syz_emit_ethernet(0x8e, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaa25aaaaaaaaaaaa4305400f008000650000082e90780a01010164010102864e000000030008094ac467ec3f00124c985e7e0b8b33ae35302c1dffcb98594ee96c2b09f6e55ec84c916e05052450b2079b83b20c1ad6a54142b90ce17393606d00a7ab3c13010dcee8f17fabc8f286afabb207106549c337b0e2fdba29f02c960c99891be6ac141425ac1414aa64010100ffffffffe0"], 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r3, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/netlink\x00') r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r4, 0x8000, 0xffffffffffffffff, 0xfffffffffffffffe}) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) 1.172462008s ago: executing program 0 (id=208): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000007100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x18, 0x5, 0x0, 0x1, @immediate={{0xe}, @val={0x4}}}, @NFTA_INNER_FLAGS={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa4}}, 0x0) r2 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x3, &(0x7f00000002c0)={0x0, 0x989680}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000bc0)={r0, 0x0, 0x28, 0x0, &(0x7f00000007c0)="0a188e9928e301df42ef860186dd80000000ae92a6c36c6e48fdcfa1955123b943abc9dec08391e1", 0x0, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.070456059s ago: executing program 0 (id=209): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080)={[{@auto_da_alloc}, {@mblk_io_submit}]}, 0x1, 0x57f, &(0x7f00000003c0)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1e, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x3d}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x800, 0x19b) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x10208, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r2, &(0x7f0000000140)={'full'}, 0xfffffdef) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000020940)=ANY=[@ANYBLOB="000000004c900200000000000300000000000000000000000000000000000000000000000000000000000000000000ffffff080080"]) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000080)={0x6c, 0x0, 0x1, 0x3}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000180)=[@in6={0xa, 0x4e23, 0x3, @empty, 0x903}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x44}}, @in6={0xa, 0x4e22, 0x38c, @local, 0x5}], 0x48) ioctl$TIOCMGET(r0, 0x5415, &(0x7f0000000000)) 1.070045429s ago: executing program 3 (id=210): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000061108000000000006301380000000000950049439ec395"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r1 = perf_event_open$cgroup(&(0x7f0000000100)={0x5, 0x80, 0x9, 0x9, 0x2, 0x2, 0x0, 0xad, 0x80000, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x7, @perf_config_ext={0x3, 0x2}, 0x8800, 0x8, 0x2, 0x9, 0xea7, 0x6, 0xf000, 0x0, 0x18f, 0x0, 0x2000000000000000}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x3) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@bridge_getneigh={0x30, 0x1e, 0x1, 0x70bd28, 0x25dfdbfe, {0x7, 0x0, 0x0, 0x0, 0x0, 0x2000a}, [@IFLA_VFINFO_LIST={0x8, 0x16, 0x0, 0x1, [{0x4}]}, @IFLA_WEIGHT={0x8, 0xf, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008451}, 0x20000040) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x4, @perf_config_ext={0x3fffffffc}, 0x0, 0x4, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b00000000010000fd0000000900000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0xcff5, r3}, 0x38) socket$inet_mptcp(0x2, 0x1, 0x106) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40009, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x3}, 0x0, 0x3a, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10) ioctl$int_in(r4, 0x5452, &(0x7f0000000000)=0x6) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x201, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) epoll_create1(0x80000) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r5 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') preadv(r5, &(0x7f00000000c0)=[{&(0x7f0000000500)=""/45, 0x2d}], 0x1, 0x80000000, 0xffffff7c) 814.845244ms ago: executing program 2 (id=213): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x1000) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r2 = socket(0x840000000002, 0x3, 0xff) connect$inet(r2, &(0x7f0000000540)={0x2, 0x4e60, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10) sendmmsg$inet(r2, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0}, 0xfffffdef}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="6c000000000000000000000007000000010703a4441c1161e0"], 0x148}}], 0x2, 0x401eb94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c000380080001400000000008000240000000001000038014"], 0xfc}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000000000ff02000000000000e26ea7250000000100000000000000000a"], 0xb8}, 0x1, 0x0, 0x0, 0x48044}, 0x14) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="b82cdab6910001000000000000000000e00000020000000000000000000000002001000000000000000000000000000100000000000000000a00002087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000ffffffffffffff7f00000000000000002a00000000000000000000000000000000000000000000000000000000000000fbffffffffffffff000000000000000004000000000000000000000000000002000000000000000000000000000000000001030200000000"], 0xb8}}, 0x2c000010) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="760100001b"], 0x188}, 0x1, 0x0, 0x0, 0x40004}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x1c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}]}], {0x14}}, 0x44}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'ip6_vti0\x00', 0x0}) sendto$packet(r1, &(0x7f00000002c0)="1a040500ecff03fc01004788031c09", 0x10025, 0x4000004, &(0x7f0000000300)={0x11, 0x0, r6, 0x1, 0x6, 0x6, @remote}, 0x14) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/hibernate_compression_threads', 0xa0042, 0x11) write$tcp_mem(r7, &(0x7f0000000400)={0x6, 0x2d, 0x2, 0x3a, 0x0, 0x2c}, 0x48) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB="bc0100001900010000000000fddbdf25e0000001000000000000000000000000ac1414bb0000000000000000000000000003000bffff00000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x1bc}}, 0x4000) 583.096983ms ago: executing program 2 (id=214): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x441, 0x2) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) fallocate(r0, 0x8, 0x4000, 0x4000) 532.481635ms ago: executing program 2 (id=215): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=@newqdisc={0x60, 0x24, 0xe0b, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x1ff, 0x6, 0xfffffffd, 0x0, 0xfffffffd, 0x32d}, [@TCA_NETEM_RATE={0x14, 0x6, {0xf4d, 0x1c13, 0x6, 0x80000f}}]}}}]}, 0x60}}, 0x0) sendto$packet(r1, &(0x7f0000000580)="44c394f305916c4516999da20800", 0x36, 0x0, &(0x7f0000000440)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, 0x14) close(0x3) ioctl$XFS_IOC_PATH_TO_HANDLE(r1, 0xc0385869, &(0x7f00000002c0)={r2, &(0x7f0000000080)='\x00', 0x40, &(0x7f00000001c0)={@align=0x5, {0x7, 0x9, 0x3, 0xfe}}, 0x2, &(0x7f0000000240)={@_ha_fsid}, &(0x7f0000000280)=0x8}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="680000001000ffff27bd7000d2dc74286df85dfb", @ANYRES32=0x0, @ANYBLOB="137c0300231a0500480012800e00010069703667726574617000000034000280140007000000000000000000fffffffffffffffe14000600fe80000000000000000000000000006a08000100"], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x40800) 452.3417ms ago: executing program 4 (id=216): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000002f00)="df1700fff9bc0ffaa02585c4ff8484ade6c31b52edc8160399dd60d9b5f365fd3950fa9bd0b2d719b9afcea355b00e6c6382431ed1e89a09dcd5b24b5e2882d6b3fe6d0666aad653fb512eae62beeb3d0de74161b6ee9dd6b0ce2c6333be58388477503eb416e03f052214ae28d874a267a4772ae3e699d4549fe6055a3e878d3f60", 0x82}], 0x1) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) (async) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x635c, 0x1f480, 0x0, 0x399}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) io_uring_enter(r0, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r3, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r4) syz_read_part_table(0x5a7, &(0x7f00000005c0)="$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") (async) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_int(r5, 0x0, 0x13, 0x0, &(0x7f0000000200)) (async) quotactl_fd$Q_GETNEXTQUOTA(r5, 0xffffffff80000900, r4, &(0x7f0000000100)) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_BEACON(r6, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000580)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010004000000fedbdf250e00000008000300", @ANYRES32, @ANYBLOB="0c00990000000000fd77ebff15000e001c"], 0x4c}}, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x550, 0x0, 0xffffff80, 0x178, 0x320, 0x178, 0x480, 0x22b, 0x258, 0x480, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x300, 0x320, 0x340, {0x1e0002a8, 0x7203000000000000}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x1a, 0x64, [{0x0, 0x0, 0xf}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {0x0, 0x2}, {}, {}, {}, {}, {0x4000}, {}, {0x3ff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x20000}, {}, {}, {}, {0x10}]}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@mcast2, @remote, [], [0x0, 0x0, 0x0, 0xff000000], 'team_slave_1\x00', 'dummy0\x00'}, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@icmp6={{0x28}, {0xf, "efc5"}}, @common=@ipv6header={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b0) 372.158566ms ago: executing program 2 (id=217): io_uring_setup(0x650b, &(0x7f0000000180)={0x0, 0x2c3f, 0x0, 0x21, 0xab}) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(0xffffffffffffffff, 0x4) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="00000000f5ff000000000000006dad3157000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r2}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0xb, &(0x7f0000000040)={0x0, 0xc8a1, 0x1f400, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) 316.100996ms ago: executing program 2 (id=218): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = getpid() ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000180)=r1) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f00000001c0)=0x2001) fcntl$dupfd(r2, 0x0, r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="6603840a00000000000061116000ffffffff18000000000000000000000000000000950000000000"], &(0x7f0000000200)='syzkaller\x00'}, 0x94) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x40000000000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) syz_emit_ethernet(0x8e, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaa25aaaaaaaaaaaa4305400f008000650000082e90780a01010164010102864e000000030008094ac467ec3f00124c985e7e0b8b33ae35302c1dffcb98594ee96c2b09f6e55ec84c916e05052450b2079b83b20c1ad6a54142b90ce17393606d00a7ab3c13010dcee8f17fabc8f286afabb207106549c337b0e2fdba29f02c960c99891be6ac141425ac1414aa64010100ffffffffe0"], 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r3, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/netlink\x00') r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r4, 0x8000, 0xffffffffffffffff, 0xfffffffffffffffe}) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) 315.853236ms ago: executing program 4 (id=219): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xa0b41, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r3, {0x1}}, './file0\x00'}) ioctl$XFS_IOC_OPEN_BY_HANDLE(r2, 0xc038586b, &(0x7f0000000200)={r4, &(0x7f0000000100)='/dev/net/tun\x00', 0x381040, &(0x7f0000000140)={@align=0x1, {0x8, 0x7, 0x7, 0x2}}, 0x495, &(0x7f0000000180), &(0x7f00000001c0)=0x5d}) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e486dd6372ce22fdb988"], 0xfdef) 161.074739ms ago: executing program 2 (id=220): r0 = socket(0x18, 0x800, 0x7) r1 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r1) syz_read_part_table(0x5cc, &(0x7f0000000000)="$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") r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xfe, "0062ba7d82000000160000000000f738096304"}) r3 = syz_open_pts(r2, 0x80) r4 = dup3(r3, r2, 0x80000) ioctl$TCSETSW(r2, 0x5403, &(0x7f00000006c0)={0x8001, 0xb, 0x2, 0x3, 0xf, "d2d232d980330e7a8654caeab2fdeab48c21b1"}) read(r4, &(0x7f00000000c0)=""/226, 0xe2) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r6, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x4, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x1080) sendmsg$IPCTNL_MSG_EXP_DELETE(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x40040) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000003c0)={'vxcan0\x00'}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000480)={'syztnl2\x00', &(0x7f0000000400)={'ip6tnl0\x00', 0x0, 0x4, 0xa, 0xcf, 0x0, 0x20, @remote, @private2, 0x8092, 0x1, 0x7, 0x8}}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, 0x0, 0x404c000) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, 0x0, 0x0) write(r1, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="28000000100001f2feff00000000df2510000000", @ANYRES32=0x0, @ANYBLOB="001000000000000008001b"], 0x28}}, 0x8004) 125.913583ms ago: executing program 0 (id=221): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) setitimer(0x2, 0x0, 0x0) getitimer(0x2, 0x0) io_uring_enter(0xffffffffffffffff, 0x847ba, 0x0, 0xe, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) timer_delete(0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0x0, 0x40, &(0x7f0000000000)={0x4b5a9da54893e123, 0x14, 0x8, 0x2}, 0x8, 0x7, 0x80200, 0x0, 0x0, 0x20000, 0x0}) write$selinux_load(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757815"], 0x65) 54.49518ms ago: executing program 4 (id=222): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0xa368, 0x0, 0xfe, "0062ba7d82000000160000000000f738096304"}) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000a80)={0x9, 0x100, 0x3, 0x9, 0xb, "5f1a7d1397312302"}) r1 = dup3(0xffffffffffffffff, r0, 0x80000) read(r1, &(0x7f00000000c0)=""/226, 0xe2) 0s ago: executing program 0 (id=223): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000c80)=[@ip_retopts={{0x10, 0x29000000}}], 0x10}, 0x0) kernel console output (not intermixed with test programs): [ 19.131556][ T28] audit: type=1400 audit(1771983749.023:62): avc: denied { search } for pid=3193 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 19.153507][ T28] audit: type=1400 audit(1771983749.023:63): avc: denied { search } for pid=3193 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=483 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 19.176151][ T28] audit: type=1400 audit(1771983749.023:64): avc: denied { search } for pid=3193 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 19.199221][ T28] audit: type=1400 audit(1771983749.023:65): avc: denied { search } for pid=3193 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 19.222569][ T28] audit: type=1400 audit(1771983749.023:66): avc: denied { read open } for pid=3194 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.1.155' (ED25519) to the list of known hosts. [ 25.491929][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 25.491944][ T28] audit: type=1400 audit(1771983755.383:70): avc: denied { mounton } for pid=3300 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 25.520975][ T28] audit: type=1400 audit(1771983755.413:71): avc: denied { mount } for pid=3300 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.521740][ T3300] cgroup: Unknown subsys name 'net' [ 25.548581][ T28] audit: type=1400 audit(1771983755.443:72): avc: denied { unmount } for pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.681319][ T3300] cgroup: Unknown subsys name 'cpuset' [ 25.687487][ T3300] cgroup: Unknown subsys name 'rlimit' [ 25.796898][ T28] audit: type=1400 audit(1771983755.683:73): avc: denied { setattr } for pid=3300 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 25.820232][ T28] audit: type=1400 audit(1771983755.683:74): avc: denied { create } for pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.848819][ T28] audit: type=1400 audit(1771983755.683:75): avc: denied { write } for pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.869181][ T28] audit: type=1400 audit(1771983755.683:76): avc: denied { read } for pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.889995][ T28] audit: type=1400 audit(1771983755.713:77): avc: denied { mounton } for pid=3300 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 25.914810][ T28] audit: type=1400 audit(1771983755.713:78): avc: denied { mount } for pid=3300 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 25.921798][ T3302] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 25.938116][ T28] audit: type=1400 audit(1771983755.713:79): avc: denied { read } for pid=3040 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 25.989021][ T3300] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 27.066334][ T3311] chnl_net:caif_netlink_parms(): no params data found [ 27.155488][ T3311] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.162703][ T3311] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.170062][ T3311] bridge_slave_0: entered allmulticast mode [ 27.176624][ T3311] bridge_slave_0: entered promiscuous mode [ 27.184992][ T3311] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.192233][ T3311] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.199329][ T3311] bridge_slave_1: entered allmulticast mode [ 27.205833][ T3311] bridge_slave_1: entered promiscuous mode [ 27.218575][ T3316] chnl_net:caif_netlink_parms(): no params data found [ 27.253223][ T3311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.263375][ T3311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.274830][ T3321] chnl_net:caif_netlink_parms(): no params data found [ 27.330956][ T3311] team0: Port device team_slave_0 added [ 27.336932][ T3316] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.344329][ T3316] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.351532][ T3316] bridge_slave_0: entered allmulticast mode [ 27.357889][ T3316] bridge_slave_0: entered promiscuous mode [ 27.369613][ T3316] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.376809][ T3316] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.383963][ T3316] bridge_slave_1: entered allmulticast mode [ 27.390417][ T3316] bridge_slave_1: entered promiscuous mode [ 27.406050][ T3311] team0: Port device team_slave_1 added [ 27.420144][ T3321] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.427436][ T3321] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.434579][ T3321] bridge_slave_0: entered allmulticast mode [ 27.440967][ T3321] bridge_slave_0: entered promiscuous mode [ 27.459429][ T3316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.468661][ T3321] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.475841][ T3321] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.483004][ T3321] bridge_slave_1: entered allmulticast mode [ 27.489562][ T3321] bridge_slave_1: entered promiscuous mode [ 27.508668][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.515706][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.541879][ T3311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.553468][ T3316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.570899][ T3312] chnl_net:caif_netlink_parms(): no params data found [ 27.580051][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.587283][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.613198][ T3311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.631048][ T3321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.652995][ T3321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.666380][ T3317] chnl_net:caif_netlink_parms(): no params data found [ 27.684185][ T3316] team0: Port device team_slave_0 added [ 27.699586][ T3321] team0: Port device team_slave_0 added [ 27.709764][ T3321] team0: Port device team_slave_1 added [ 27.720062][ T3316] team0: Port device team_slave_1 added [ 27.750002][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.757008][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.782985][ T3316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.805071][ T3311] hsr_slave_0: entered promiscuous mode [ 27.811204][ T3311] hsr_slave_1: entered promiscuous mode [ 27.817374][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.824548][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.850574][ T3316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.864006][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.870968][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.896907][ T3321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.910511][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.917494][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.943588][ T3321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.976497][ T3312] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.983649][ T3312] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.991022][ T3312] bridge_slave_0: entered allmulticast mode [ 27.997414][ T3312] bridge_slave_0: entered promiscuous mode [ 28.008830][ T3317] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.016028][ T3317] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.023199][ T3317] bridge_slave_0: entered allmulticast mode [ 28.029612][ T3317] bridge_slave_0: entered promiscuous mode [ 28.036119][ T3312] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.043273][ T3312] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.050350][ T3312] bridge_slave_1: entered allmulticast mode [ 28.056794][ T3312] bridge_slave_1: entered promiscuous mode [ 28.081039][ T3317] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.088149][ T3317] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.095344][ T3317] bridge_slave_1: entered allmulticast mode [ 28.101600][ T3317] bridge_slave_1: entered promiscuous mode [ 28.114648][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.124885][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.144405][ T3316] hsr_slave_0: entered promiscuous mode [ 28.150436][ T3316] hsr_slave_1: entered promiscuous mode [ 28.156277][ T3316] debugfs: 'hsr0' already exists in 'hsr' [ 28.162024][ T3316] Cannot create hsr debugfs directory [ 28.201489][ T3321] hsr_slave_0: entered promiscuous mode [ 28.207468][ T3321] hsr_slave_1: entered promiscuous mode [ 28.213376][ T3321] debugfs: 'hsr0' already exists in 'hsr' [ 28.219110][ T3321] Cannot create hsr debugfs directory [ 28.225371][ T3312] team0: Port device team_slave_0 added [ 28.238659][ T3317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.249057][ T3312] team0: Port device team_slave_1 added [ 28.262606][ T3317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.307962][ T3317] team0: Port device team_slave_0 added [ 28.313853][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.320851][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.346791][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.371287][ T3317] team0: Port device team_slave_1 added [ 28.377132][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.384109][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.410103][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.440876][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.447850][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.473810][ T3317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.492382][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.499392][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.525446][ T3317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.550420][ T3312] hsr_slave_0: entered promiscuous mode [ 28.556581][ T3312] hsr_slave_1: entered promiscuous mode [ 28.562765][ T3312] debugfs: 'hsr0' already exists in 'hsr' [ 28.568705][ T3312] Cannot create hsr debugfs directory [ 28.625379][ T3317] hsr_slave_0: entered promiscuous mode [ 28.631587][ T3317] hsr_slave_1: entered promiscuous mode [ 28.637478][ T3317] debugfs: 'hsr0' already exists in 'hsr' [ 28.643458][ T3317] Cannot create hsr debugfs directory [ 28.662123][ T3311] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 28.671452][ T3311] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 28.689904][ T3311] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 28.712862][ T3311] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 28.746109][ T3321] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 28.767001][ T3321] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 28.784142][ T3321] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 28.794162][ T3321] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 28.824299][ T3316] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 28.832947][ T3316] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 28.842419][ T3316] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 28.851004][ T3316] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 28.895151][ T3312] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 28.904108][ T3312] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 28.929400][ T3312] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 28.938420][ T3312] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 28.959253][ T3317] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 28.968096][ T3317] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 28.981121][ T3317] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 28.994705][ T3317] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 29.007116][ T3311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.015576][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.036629][ T3321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.052213][ T3316] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.061063][ T3311] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.077426][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.084490][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.093801][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.100868][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.112429][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.119470][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.132958][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.140229][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.152273][ T3321] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.176357][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.183428][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.194085][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.201189][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.246820][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.260841][ T3317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.281472][ T3312] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.292152][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.299362][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.312476][ T3317] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.332463][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.339523][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.369626][ T3317] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 29.380463][ T3317] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 29.392505][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.399785][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.408561][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.415713][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.464430][ T3316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.477848][ T3311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.512196][ T3321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.543392][ T3317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.581046][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.659321][ T3316] veth0_vlan: entered promiscuous mode [ 29.690203][ T3321] veth0_vlan: entered promiscuous mode [ 29.699297][ T3321] veth1_vlan: entered promiscuous mode [ 29.721658][ T3316] veth1_vlan: entered promiscuous mode [ 29.727751][ T3311] veth0_vlan: entered promiscuous mode [ 29.741553][ T3312] veth0_vlan: entered promiscuous mode [ 29.757157][ T3311] veth1_vlan: entered promiscuous mode [ 29.765389][ T3312] veth1_vlan: entered promiscuous mode [ 29.776544][ T3316] veth0_macvtap: entered promiscuous mode [ 29.790137][ T3311] veth0_macvtap: entered promiscuous mode [ 29.806749][ T3321] veth0_macvtap: entered promiscuous mode [ 29.813929][ T3316] veth1_macvtap: entered promiscuous mode [ 29.821413][ T3311] veth1_macvtap: entered promiscuous mode [ 29.832917][ T3321] veth1_macvtap: entered promiscuous mode [ 29.846385][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.864965][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.876534][ T40] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.886226][ T3317] veth0_vlan: entered promiscuous mode [ 29.895805][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.904304][ T40] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.913288][ T40] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.923290][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.939002][ T40] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.949352][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.957404][ T3312] veth0_macvtap: entered promiscuous mode [ 29.965338][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.973185][ T3317] veth1_vlan: entered promiscuous mode [ 29.984634][ T30] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.994939][ T3312] veth1_macvtap: entered promiscuous mode [ 30.006291][ T30] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.015276][ T30] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.036956][ T30] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.046153][ T30] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.059850][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.070499][ T30] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.079588][ T30] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.089845][ T3316] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 30.112088][ T30] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.128541][ T3317] veth0_macvtap: entered promiscuous mode [ 30.152865][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.165340][ T3317] veth1_macvtap: entered promiscuous mode [ 30.190959][ T30] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.211053][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.266754][ T30] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.278468][ T30] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.290156][ T30] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.311997][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.313693][ C1] hrtimer: interrupt took 47258 ns [ 30.326043][ T3486] netlink: 'syz.3.4': attribute type 29 has an invalid length. [ 30.334784][ T30] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.350185][ T30] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.359149][ T30] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.374204][ T30] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.482047][ T3496] capability: warning: `syz.4.5' uses deprecated v2 capabilities in a way that may be insecure [ 30.528638][ T28] kauditd_printk_skb: 48 callbacks suppressed [ 30.528653][ T28] audit: type=1400 audit(1771983760.413:128): avc: denied { write } for pid=3495 comm="syz.4.5" name="file0" dev="tmpfs" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 30.558460][ T28] audit: type=1400 audit(1771983760.413:129): avc: denied { open } for pid=3495 comm="syz.4.5" path="/0/file0" dev="tmpfs" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 30.582228][ T28] audit: type=1400 audit(1771983760.423:130): avc: denied { unlink } for pid=3317 comm="syz-executor" name="file0" dev="tmpfs" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 30.623257][ T28] audit: type=1400 audit(1771983760.443:131): avc: denied { write } for pid=3499 comm="syz.4.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 30.992765][ T3501] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 31.079108][ T1099] IPVS: starting estimator thread 0... [ 31.090942][ T28] audit: type=1400 audit(1771983760.553:132): avc: denied { shutdown } for pid=3491 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 31.110455][ T28] audit: type=1400 audit(1771983760.563:133): avc: denied { create } for pid=3491 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 31.129969][ T28] audit: type=1400 audit(1771983760.563:134): avc: denied { ioctl } for pid=3491 comm="syz.2.3" path="socket:[4692]" dev="sockfs" ino=4692 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 31.155303][ T3500] loop4: detected capacity change from 0 to 256 [ 31.162097][ T28] audit: type=1400 audit(1771983760.563:135): avc: denied { bind } for pid=3491 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 31.189497][ T3500] ======================================================= [ 31.189497][ T3500] WARNING: The mand mount option has been deprecated and [ 31.189497][ T3500] and is ignored by this kernel. Remove the mand [ 31.189497][ T3500] option from the mount to silence this warning. [ 31.189497][ T3500] ======================================================= [ 31.312426][ T3503] IPVS: using max 2112 ests per chain, 105600 per kthread [ 31.323787][ T28] audit: type=1400 audit(1771983761.133:136): avc: denied { prog_run } for pid=3504 comm="syz.3.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 31.324200][ T3500] FAT-fs (loop4): Directory bread(block 64) failed [ 31.368203][ T3500] FAT-fs (loop4): Directory bread(block 65) failed [ 31.403915][ T3500] FAT-fs (loop4): Directory bread(block 66) failed [ 31.456283][ T3500] FAT-fs (loop4): Directory bread(block 67) failed [ 31.478263][ T3512] loop2: detected capacity change from 0 to 256 [ 31.490053][ T3514] loop1: detected capacity change from 0 to 512 [ 31.491252][ T3500] FAT-fs (loop4): Directory bread(block 68) failed [ 31.506499][ T3514] EXT4-fs: Ignoring removed nobh option [ 31.551040][ T3500] FAT-fs (loop4): Directory bread(block 69) failed [ 31.558228][ T3500] FAT-fs (loop4): Directory bread(block 70) failed [ 31.620454][ T28] audit: type=1400 audit(1771983761.153:137): avc: denied { create } for pid=3504 comm="syz.3.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 31.678605][ T3514] ------------[ cut here ]------------ [ 31.685881][ T3514] EA inode 11 i_nlink=1026 [ 31.686113][ T3514] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x313/0x350, CPU#0: syz.1.9/3514 [ 31.701292][ T3500] FAT-fs (loop4): Directory bread(block 71) failed [ 31.702555][ T3514] Modules linked in: [ 31.702960][ T3514] CPU: 0 UID: 0 PID: 3514 Comm: syz.1.9 Not tainted syzkaller #0 PREEMPT(full) [ 31.710255][ T3500] FAT-fs (loop4): Directory bread(block 72) failed [ 31.714641][ T3514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 31.714823][ T3514] RIP: 0010:ext4_xattr_inode_update_ref+0x332/0x350 [ 31.715039][ T3514] Code: 14 61 99 ff 4c 8d 2d 1d f0 5d 05 49 8d 7e 40 e8 94 f2 b5 ff 49 8b 6e 40 4c 89 e7 e8 c8 ed b5 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 02 ff ff ff e8 7f 3b dd 03 66 66 66 66 66 66 2e [ 31.715091][ T3514] RSP: 0018:ffffc9000185f5a8 EFLAGS: 00010246 [ 31.715255][ T3514] RAX: ffff888105d64c78 RBX: ffff88811b9464a8 RCX: ffffffff81bff418 [ 31.715319][ T3514] RDX: 0000000000000402 RSI: 000000000000000b RDI: ffffffff871de420 [ 31.798870][ T3514] RBP: 000000000000000b R08: 000188811b94645b R09: 0000000000000000 [ 31.811482][ T3514] R10: ffffc9000185f4d8 R11: 0001c9000185f4d8 R12: ffff88811b946458 [ 31.819641][ T3514] R13: ffffffff871de420 R14: ffff88811b946410 R15: 0000000000000001 [ 31.828511][ T3514] FS: 00007f5442aee6c0(0000) GS:ffff8882ae8db000(0000) knlGS:0000000000000000 [ 31.838480][ T3514] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 31.845906][ T3514] CR2: 0000000034747865 CR3: 000000011c682000 CR4: 00000000003506f0 [ 31.854720][ T3514] Call Trace: [ 31.858713][ T3514] [ 31.862603][ T3514] ext4_xattr_set_entry+0x77c/0x1010 [ 31.869042][ T3514] ext4_xattr_ibody_set+0x184/0x3c0 [ 31.876600][ T3514] ext4_expand_extra_isize_ea+0xd7b/0x11a0 [ 31.885910][ T3514] __ext4_expand_extra_isize+0x246/0x280 [ 31.892888][ T3514] __ext4_mark_inode_dirty+0x29b/0x400 [ 31.899129][ T3514] ext4_evict_inode+0x7c3/0xd60 [ 31.905022][ T3514] ? __pfx_ext4_evict_inode+0x10/0x10 [ 31.912211][ T3514] evict+0x2af/0x510 [ 31.916941][ T3514] iput+0x41a/0x580 [ 31.922413][ T3514] ext4_process_orphan+0x1a9/0x1c0 [ 31.928171][ T3514] ext4_orphan_cleanup+0x6a8/0xa00 [ 31.934740][ T3514] ext4_fill_super+0x3408/0x37c0 [ 31.940921][ T3514] ? set_blocksize+0x14c/0x270 [ 31.946301][ T3514] ? setup_bdev_super+0x30e/0x370 [ 31.952150][ T3514] ? __pfx_ext4_fill_super+0x10/0x10 [ 31.958151][ T3514] get_tree_bdev_flags+0x291/0x300 [ 31.964282][ T3514] ? __pfx_ext4_fill_super+0x10/0x10 [ 31.970000][ T3514] get_tree_bdev+0x1f/0x30 [ 31.975605][ T3514] ext4_get_tree+0x1c/0x30 [ 31.980791][ T3514] vfs_get_tree+0x57/0x1d0 [ 31.986640][ T3514] do_new_mount+0x288/0x8d0 [ 31.992072][ T3514] path_mount+0x4d0/0xbc0 [ 31.996841][ T3514] __se_sys_mount+0x28c/0x2e0 [ 32.002582][ T3514] __x64_sys_mount+0x67/0x80 [ 32.007873][ T3514] x64_sys_call+0x2d61/0x3020 [ 32.013428][ T3514] do_syscall_64+0x12c/0x370 [ 32.018752][ T3514] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 32.025820][ T3514] RIP: 0033:0x7f54440bd8ca [ 32.031629][ T3514] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 32.049723][ T3512] FAT-fs (loop2): Directory bread(block 64) failed [ 32.052211][ T3514] RSP: 002b:00007f5442aede58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 32.052360][ T3514] RAX: ffffffffffffffda RBX: 00007f5442aedee0 RCX: 00007f54440bd8ca [ 32.062903][ T3512] FAT-fs (loop2): Directory bread(block 65) failed [ 32.067795][ T3514] RDX: 0000200000000180 RSI: 0000200000000140 RDI: 00007f5442aedea0 [ 32.067872][ T3514] RBP: 0000200000000180 R08: 00007f5442aedee0 R09: 0000000000800718 [ 32.067979][ T3514] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000140 [ 32.068100][ T3514] R13: 00007f5442aedea0 R14: 00000000000004a3 R15: 00002000000003c0 [ 32.068302][ T3514] [ 32.080758][ T3500] FAT-fs (loop4): Directory bread(block 73) failed [ 32.084116][ T3514] ---[ end trace 0000000000000000 ]--- [ 32.104828][ T3512] FAT-fs (loop2): Directory bread(block 66) failed [ 32.148903][ T3514] EXT4-fs (loop1): 1 orphan inode deleted [ 32.161644][ T3514] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.244955][ T3522] loop3: detected capacity change from 0 to 512 [ 32.251853][ T3522] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 32.503638][ T3514] syz.1.9 (3514) used greatest stack depth: 10248 bytes left [ 32.579216][ T3512] FAT-fs (loop2): Directory bread(block 67) failed [ 32.618373][ T3512] FAT-fs (loop2): Directory bread(block 68) failed [ 32.626834][ T3512] FAT-fs (loop2): Directory bread(block 69) failed [ 32.635322][ T3512] FAT-fs (loop2): Directory bread(block 70) failed [ 32.642860][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.688495][ T3525] loop1: detected capacity change from 0 to 1024 [ 32.709800][ T3527] netlink: 'syz.3.13': attribute type 13 has an invalid length. [ 32.717949][ T3512] FAT-fs (loop2): Directory bread(block 71) failed [ 32.739379][ T3525] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.755800][ T3512] FAT-fs (loop2): Directory bread(block 72) failed [ 32.816463][ T3512] FAT-fs (loop2): Directory bread(block 73) failed [ 33.069472][ T3527] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.076754][ T3527] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.115758][ T3538] loop2: detected capacity change from 0 to 256 [ 33.170860][ T3538] vfat: Unknown parameter '0x0000000000000000' [ 33.392573][ T3529] SELinux: failed to load policy [ 33.405665][ T3527] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 33.424225][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.473608][ T3527] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 33.528141][ T3544] loop3: detected capacity change from 0 to 512 [ 33.615565][ T3544] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #11: comm syz.3.13: iget: bad extra_isize 90 (inode size 256) [ 33.672276][ T3544] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 33.672561][ T3544] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.13: error while reading EA inode 11 err=-117 [ 33.681743][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 33.681767][ C0] EXT4-fs (loop3): initial error at time 1771983763: ext4_xattr_inode_iget:441: inode 11 [ 33.681798][ C0] EXT4-fs (loop3): last error at time 1771983763: ext4_xattr_inode_iget:441: inode 11 [ 33.751011][ T3544] loop3: lost filesystem error report for type 5 error -117 [ 33.755667][ T3544] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 33.806800][ T3544] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #11: comm syz.3.13: iget: bad extra_isize 90 (inode size 256) [ 33.871075][ T3544] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 33.871430][ T3544] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.13: error while reading EA inode 11 err=-117 [ 33.920646][ T3544] loop3: lost filesystem error report for type 5 error -117 [ 33.945994][ T3544] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #18: comm syz.3.13: iget: bad extra_isize 90 (inode size 256) [ 34.004229][ T3544] loop3: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 34.004936][ T3544] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.13: error while reading EA inode 18 err=-117 [ 34.029076][ T3544] loop3: lost filesystem error report for type 5 error -117 [ 34.029593][ T3544] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #18: comm syz.3.13: iget: bad extra_isize 90 (inode size 256) [ 34.092288][ T3580] loop4: detected capacity change from 0 to 512 [ 34.099068][ T3580] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 34.221541][ T3544] loop3: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 34.221977][ T3544] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.13: error while reading EA inode 18 err=-117 [ 34.321036][ T3544] loop3: lost filesystem error report for type 5 error -117 [ 34.518057][ T3544] EXT4-fs (loop3): 1 orphan inode deleted [ 34.534895][ T3544] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.827841][ T3586] loop2: detected capacity change from 0 to 512 [ 34.835023][ T3586] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 35.164514][ T3555] batadv_slave_1: entered promiscuous mode [ 35.177427][ T3571] batadv_slave_1: left promiscuous mode [ 35.183356][ T2132] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.192640][ T3575] Zero length message leads to an empty skb [ 35.207595][ T2132] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.238150][ T2132] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.258794][ T2132] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.494004][ T3593] loop2: detected capacity change from 0 to 1024 [ 35.502974][ T3593] EXT4-fs: inline encryption not supported [ 35.527629][ T3593] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.550908][ T3527] syz.3.13 (3527) used greatest stack depth: 9888 bytes left [ 35.596667][ T3598] xt_hashlimit: size too large, truncated to 1048576 [ 35.665911][ T3594] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4222: comm syz.2.21: Allocating blocks 497-513 which overlap fs metadata [ 35.690871][ T3594] EXT4-fs (loop2): Remounting filesystem read-only [ 35.699349][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.736535][ T28] kauditd_printk_skb: 20 callbacks suppressed [ 35.736553][ T28] audit: type=1400 audit(1771983765.613:158): avc: denied { map } for pid=3592 comm="syz.2.21" path="/4/file1/cgroup.controllers" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 35.860009][ T3601] SELinux: failed to load policy [ 35.876863][ T28] audit: type=1400 audit(1771983765.613:159): avc: denied { write } for pid=3592 comm="syz.2.21" path="/4/file1/cgroup.controllers" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 35.973372][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.987670][ T3606] netlink: 'syz.0.24': attribute type 29 has an invalid length. [ 36.477333][ T28] audit: type=1400 audit(1771983766.363:160): avc: denied { append } for pid=3611 comm="syz.2.25" name="001" dev="devtmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 36.486797][ T3612] vhci_hcd vhci_hcd.0: invalid port number 0 [ 36.570636][ T3612] loop2: detected capacity change from 0 to 512 [ 36.602626][ T3612] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.25: inode has both inline data and extents flags [ 36.691271][ T3612] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 36.700657][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 36.716798][ C1] EXT4-fs (loop2): initial error at time 1771983766: ext4_orphan_get:1391: inode 15 [ 36.726709][ C1] EXT4-fs (loop2): last error at time 1771983766: ext4_orphan_get:1391: inode 15 [ 36.770464][ T3612] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.25: couldn't read orphan inode 15 (err -117) [ 36.805792][ T3610] SELinux: failed to load policy [ 36.816457][ T3612] loop2: lost filesystem error report for type 5 error -117 [ 36.817042][ T3612] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.840075][ T3622] loop0: detected capacity change from 0 to 512 [ 36.867865][ T3622] EXT4-fs: Ignoring removed nobh option [ 36.893423][ T3622] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 36.912348][ T28] audit: type=1400 audit(1771983766.803:161): avc: denied { create } for pid=3611 comm="syz.2.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 36.941046][ T3622] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 36.951885][ T28] audit: type=1400 audit(1771983766.843:162): avc: denied { remove_name } for pid=3611 comm="syz.2.25" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 37.010572][ T28] audit: type=1400 audit(1771983766.843:163): avc: denied { rename } for pid=3611 comm="syz.2.25" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 37.024579][ T3612] netlink: 'syz.2.25': attribute type 5 has an invalid length. [ 37.071069][ T28] audit: type=1400 audit(1771983766.903:164): avc: denied { create } for pid=3611 comm="syz.2.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 37.091532][ T28] audit: type=1400 audit(1771983766.903:165): avc: denied { write } for pid=3611 comm="syz.2.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 37.120965][ T3622] EXT4-fs (loop0): 1 truncate cleaned up [ 37.201243][ T3622] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.281742][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.353355][ T3634] netlink: 'syz.3.31': attribute type 29 has an invalid length. [ 37.362856][ T3634] netlink: 'syz.3.31': attribute type 29 has an invalid length. [ 37.397845][ T28] audit: type=1400 audit(1771983767.273:166): avc: denied { create } for pid=3619 comm="syz.0.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 37.655722][ T28] audit: type=1400 audit(1771983767.313:167): avc: denied { write } for pid=3619 comm="syz.0.30" name="event2" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 38.013838][ T3619] syz.0.30 (3619) used greatest stack depth: 9424 bytes left [ 38.025546][ T3620] syz.0.30 (3620) used greatest stack depth: 6072 bytes left [ 38.053765][ T3637] SELinux: failed to load policy [ 38.141087][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.722031][ T3644] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 38.808812][ T3394] IPVS: starting estimator thread 0... [ 38.940723][ T3646] IPVS: using max 2448 ests per chain, 122400 per kthread [ 39.226181][ T3657] loop4: detected capacity change from 0 to 512 [ 39.232793][ T3657] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 39.937310][ T3661] loop0: detected capacity change from 0 to 512 [ 39.943950][ T3661] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 39.972537][ T3662] loop1: detected capacity change from 0 to 256 [ 40.145888][ T3664] loop4: detected capacity change from 0 to 256 [ 40.187983][ T3667] netlink: 'syz.1.39': attribute type 13 has an invalid length. [ 40.232152][ T3668] loop2: detected capacity change from 0 to 512 [ 40.277374][ T3668] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 40.322475][ T3668] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.40: bg 0: block 255: padding at end of block bitmap is not set [ 40.358572][ T3668] loop2: lost filesystem error report for type 5 error -117 [ 40.358725][ T3668] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 40.366068][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 40.366103][ C0] EXT4-fs (loop2): initial error at time 1771983770: ext4_validate_block_bitmap:441 [ 40.366128][ C0] EXT4-fs (loop2): last error at time 1771983770: ext4_validate_block_bitmap:441 [ 40.507723][ T3667] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.515057][ T3667] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.524864][ T3668] loop2: lost filesystem error report for type 5 error -117 [ 40.530787][ T3668] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.40: invalid indirect mapped block 1 (level 1) [ 40.601492][ T3668] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 40.601814][ T3668] EXT4-fs (loop2): 1 truncate cleaned up [ 40.633910][ T3668] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.673843][ T3683] loop1: detected capacity change from 0 to 512 [ 40.711776][ T3683] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #11: comm syz.1.39: iget: bad extra_isize 90 (inode size 256) [ 40.725370][ T3688] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=3688 comm=syz.2.40 [ 40.742896][ T3667] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 40.763922][ T3683] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 40.764105][ T3683] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.39: error while reading EA inode 11 err=-117 [ 40.773539][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 40.773558][ C0] EXT4-fs (loop1): initial error at time 1771983770: ext4_xattr_inode_iget:441: inode 11 [ 40.773597][ C0] EXT4-fs (loop1): last error at time 1771983770: ext4_xattr_inode_iget:441: inode 11 [ 40.780850][ T3667] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 40.794554][ T3683] loop1: lost filesystem error report for type 5 error -117 [ 40.834810][ T3683] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #11: comm syz.1.39: iget: bad extra_isize 90 (inode size 256) [ 40.860934][ T3683] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 40.861163][ T3683] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.39: error while reading EA inode 11 err=-117 [ 40.883887][ T3683] loop1: lost filesystem error report for type 5 error -117 [ 40.884075][ T3683] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #18: comm syz.1.39: iget: bad extra_isize 90 (inode size 256) [ 40.905175][ T3683] loop1: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 40.905417][ T3683] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.39: error while reading EA inode 18 err=-117 [ 40.927108][ T3683] loop1: lost filesystem error report for type 5 error -117 [ 40.927311][ T3683] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #18: comm syz.1.39: iget: bad extra_isize 90 (inode size 256) [ 40.958652][ T3683] loop1: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 40.963933][ T3683] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.39: error while reading EA inode 18 err=-117 [ 41.004266][ T3683] loop1: lost filesystem error report for type 5 error -117 [ 41.009809][ T3683] EXT4-fs (loop1): 1 orphan inode deleted [ 41.059302][ T3683] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.067370][ T12] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.080326][ T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.090753][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.123703][ T12] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.138886][ T12] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.191323][ T3697] syz.3.46 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 41.206019][ T3699] loop4: detected capacity change from 0 to 256 [ 41.254681][ T28] kauditd_printk_skb: 74 callbacks suppressed [ 41.254721][ T28] audit: type=1400 audit(1771983771.143:242): avc: denied { ioctl } for pid=3696 comm="syz.4.47" path="socket:[5276]" dev="sockfs" ino=5276 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 41.391387][ T28] audit: type=1400 audit(1771983771.223:243): avc: denied { create } for pid=3702 comm="syz.4.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 41.462796][ T3690] loop0: detected capacity change from 0 to 1024 [ 41.473780][ T3704] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 41.494943][ T3708] netlink: 19 bytes leftover after parsing attributes in process `syz.4.48'. [ 41.564558][ T3690] EXT4-fs: inline encryption not supported [ 41.663930][ T3690] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.739848][ T28] audit: type=1400 audit(1771983771.613:244): avc: denied { ioctl } for pid=3702 comm="syz.4.48" path="socket:[4961]" dev="sockfs" ino=4961 ioctlcmd=0x4944 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 41.833670][ T3716] loop3: detected capacity change from 0 to 2048 [ 41.842831][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.887247][ T3716] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.902091][ T28] audit: type=1400 audit(1771983771.773:245): avc: denied { create } for pid=3717 comm="syz.4.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 41.923184][ T3691] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4222: comm syz.0.43: Allocating blocks 497-513 which overlap fs metadata [ 41.989673][ T3726] 9pnet_fd: p9_fd_create_tcp (3726): problem connecting socket to 127.0.0.1 [ 41.991283][ T3728] netlink: 4 bytes leftover after parsing attributes in process `syz.1.54'. [ 42.010436][ T3728] netlink: 12 bytes leftover after parsing attributes in process `syz.1.54'. [ 42.013392][ T28] audit: type=1400 audit(1771983771.833:246): avc: denied { write } for pid=3717 comm="syz.4.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 42.069885][ T3691] EXT4-fs (loop0): Remounting filesystem read-only [ 42.087390][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.094847][ T28] audit: type=1400 audit(1771983771.873:247): avc: denied { mounton } for pid=3725 comm="syz.4.53" path="/syzcgroup/cpu/syz4/cgroup.procs" dev="cgroup" ino=249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 42.157190][ T28] audit: type=1400 audit(1771983772.033:248): avc: denied { read append } for pid=3733 comm="syz.3.55" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 42.184562][ T3736] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 42.193664][ T3736] SELinux: failed to load policy [ 42.229399][ T28] audit: type=1400 audit(1771983772.033:249): avc: denied { open } for pid=3733 comm="syz.3.55" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 42.264539][ T3740] loop2: detected capacity change from 0 to 164 [ 42.270756][ T28] audit: type=1400 audit(1771983772.033:250): avc: denied { ioctl } for pid=3733 comm="syz.3.55" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 42.312874][ T28] audit: type=1400 audit(1771983772.203:251): avc: denied { mount } for pid=3739 comm="syz.2.58" name="/" dev="loop2" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 42.335129][ T3734] loop3: detected capacity change from 0 to 8192 [ 42.341757][ T3740] rock: directory entry would overflow storage [ 42.348918][ T3740] rock: sig=0x4f50, size=4, remaining=3 [ 42.354634][ T3740] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 42.371056][ T3304] loop3: p1 p3 p4 [ 42.374880][ T3304] loop3: p1 size 477167616 extends beyond EOD, truncated [ 42.464519][ T3745] IPv6: A: Disabled Multicast RS [ 42.484139][ T3304] loop3: p3 start 4294901760 is beyond EOD, truncated [ 42.496236][ T3304] loop3: p4 size 32768 extends beyond EOD, truncated [ 42.506094][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.519598][ T3734] loop3: p1 p3 p4 [ 42.526607][ T3734] loop3: p1 size 477167616 extends beyond EOD, truncated [ 42.540492][ T3746] loop2: detected capacity change from 0 to 512 [ 42.547148][ T3746] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 42.555887][ T3734] loop3: p3 start 4294901760 is beyond EOD, truncated [ 42.584046][ T3734] loop3: p4 size 32768 extends beyond EOD, truncated [ 42.612061][ T3748] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3748 comm=syz.0.61 [ 42.646047][ T3751] netlink: 27 bytes leftover after parsing attributes in process `syz.0.62'. [ 42.683956][ T3749] udevd[3749]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 42.693863][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 42.710837][ T3732] loop4: detected capacity change from 0 to 512 [ 42.714829][ T3749] udevd[3749]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 42.734936][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 42.761382][ T3732] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #11: comm syz.4.56: iget: bad extra_isize 90 (inode size 256) [ 42.798445][ T3732] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 42.798625][ T3732] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.56: error while reading EA inode 11 err=-117 [ 42.807810][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 42.807837][ C0] EXT4-fs (loop4): initial error at time 1771983772: ext4_xattr_inode_iget:441: inode 11 [ 42.807863][ C0] EXT4-fs (loop4): last error at time 1771983772: ext4_xattr_inode_iget:441: inode 11 [ 42.849007][ T3759] netlink: 'syz.3.63': attribute type 29 has an invalid length. [ 42.865080][ T3759] netlink: 'syz.3.63': attribute type 29 has an invalid length. [ 42.892841][ T3732] loop4: lost filesystem error report for type 5 error -117 [ 42.893090][ T3732] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #11: comm syz.4.56: iget: bad extra_isize 90 (inode size 256) [ 42.925107][ T3756] loop0: detected capacity change from 0 to 512 [ 42.945306][ T3732] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 42.949808][ T3732] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.56: error while reading EA inode 11 err=-117 [ 42.995304][ T3732] loop4: lost filesystem error report for type 5 error -117 [ 42.995643][ T3732] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #18: comm syz.4.56: iget: bad extra_isize 90 (inode size 256) [ 43.002013][ T3756] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.030593][ T3732] loop4: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 43.031976][ T3732] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.56: error while reading EA inode 18 err=-117 [ 43.032174][ T3756] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.067722][ T3732] loop4: lost filesystem error report for type 5 error -117 [ 43.079726][ T3732] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #18: comm syz.4.56: iget: bad extra_isize 90 (inode size 256) [ 43.082459][ T3763] loop1: detected capacity change from 0 to 256 [ 43.103980][ T3732] loop4: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 43.113377][ T3732] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.56: error while reading EA inode 18 err=-117 [ 43.215109][ T3765] vhci_hcd vhci_hcd.0: invalid port number 0 [ 43.282843][ T3732] loop4: lost filesystem error report for type 5 error -117 [ 43.284470][ T3732] EXT4-fs (loop4): 1 orphan inode deleted [ 43.292200][ T3765] loop1: detected capacity change from 0 to 512 [ 43.319384][ T3732] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.345136][ T3765] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.66: inode has both inline data and extents flags [ 43.399974][ T3765] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 43.400289][ T3765] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.66: couldn't read orphan inode 15 (err -117) [ 43.409564][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 43.409588][ C0] EXT4-fs (loop1): initial error at time 1771983773: ext4_orphan_get:1391: inode 15 [ 43.409612][ C0] EXT4-fs (loop1): last error at time 1771983773: ext4_orphan_get:1391: inode 15 [ 43.524731][ T3765] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.579482][ T3765] netlink: 'syz.1.66': attribute type 5 has an invalid length. [ 43.611896][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.131655][ T3781] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 44.162120][ T3394] IPVS: starting estimator thread 0... [ 44.196062][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.227502][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.242228][ T3787] netlink: 'syz.1.72': attribute type 3 has an invalid length. [ 44.280233][ T3787] netlink: 228 bytes leftover after parsing attributes in process `syz.1.72'. [ 44.291476][ T3783] IPVS: using max 2256 ests per chain, 112800 per kthread [ 44.360193][ T3791] xt_hashlimit: size too large, truncated to 1048576 [ 44.360661][ T3787] sctp: [Deprecated]: syz.1.72 (pid 3787) Use of int in max_burst socket option deprecated. [ 44.360661][ T3787] Use struct sctp_assoc_value instead [ 44.430748][ T3792] netlink: 40 bytes leftover after parsing attributes in process `syz.4.73'. [ 44.560403][ T3785] SELinux: failed to load policy [ 44.567522][ T3789] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 44.575885][ T3789] SELinux: failed to load policy [ 44.638582][ T3794] loop3: detected capacity change from 0 to 1024 [ 44.664984][ T3798] netlink: 188 bytes leftover after parsing attributes in process `syz.1.76'. [ 44.702341][ T3798] syz_tun: entered allmulticast mode [ 44.708340][ T3797] syz_tun: left allmulticast mode [ 44.724763][ T3794] EXT4-fs (loop3): can't mount with journal_async_commit, fs mounted w/o journal [ 44.857088][ T3794] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 44.918606][ T3809] xt_hashlimit: size too large, truncated to 1048576 [ 45.019827][ T3811] loop2: detected capacity change from 0 to 512 [ 45.026581][ T3811] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 45.064857][ T3813] netlink: 'syz.1.78': attribute type 29 has an invalid length. [ 45.080052][ T3813] netlink: 'syz.1.78': attribute type 29 has an invalid length. [ 45.489932][ T3830] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 45.744886][ T3834] x_tables: unsorted entry at hook 3 [ 45.764749][ T3832] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 45.837804][ T3836] FAULT_INJECTION: forcing a failure. [ 45.837804][ T3836] name fail_futex, interval 1, probability 0, space 0, times 1 [ 45.861489][ T3832] SELinux: failed to load policy [ 45.870300][ T3836] CPU: 0 UID: 0 PID: 3836 Comm: syz.1.87 Tainted: G W syzkaller #0 PREEMPT(full) [ 45.870336][ T3836] Tainted: [W]=WARN [ 45.870344][ T3836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 45.870357][ T3836] Call Trace: [ 45.870363][ T3836] [ 45.870443][ T3836] __dump_stack+0x1d/0x30 [ 45.870467][ T3836] dump_stack_lvl+0x95/0xd0 [ 45.870496][ T3836] dump_stack+0x15/0x1b [ 45.870518][ T3836] should_fail_ex+0x263/0x280 [ 45.870571][ T3836] should_fail+0xb/0x20 [ 45.870590][ T3836] get_futex_key+0x12f/0xbe0 [ 45.870672][ T3836] futex_wait_setup+0x4d/0x3e0 [ 45.870698][ T3836] __futex_wait+0xa9/0x260 [ 45.870720][ T3836] ? __pfx_futex_wake_mark+0x10/0x10 [ 45.870745][ T3836] futex_wait+0x9c/0x1d0 [ 45.870769][ T3836] do_futex+0x2bf/0x380 [ 45.870869][ T3836] ? irqentry_exit+0x91/0x520 [ 45.870899][ T3836] __se_sys_futex+0x2f6/0x370 [ 45.870962][ T3836] __x64_sys_futex+0x78/0x90 [ 45.871013][ T3836] x64_sys_call+0x24ab/0x3020 [ 45.871039][ T3836] do_syscall_64+0x12c/0x370 [ 45.871070][ T3836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.871153][ T3836] RIP: 0033:0x7f54440bc629 [ 45.871235][ T3836] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 45.871250][ T3836] RSP: 002b:00007f5442b0f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 45.871267][ T3836] RAX: ffffffffffffffda RBX: 00007f5444335fa0 RCX: 00007f54440bc629 [ 45.871281][ T3836] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000020000000cffc [ 45.871293][ T3836] RBP: 00007f5442b0f090 R08: 0000000000000000 R09: 0000000000000000 [ 45.871344][ T3836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 45.871420][ T3836] R13: 00007f5444336038 R14: 00007f5444335fa0 R15: 00007ffd23a7fc28 [ 45.871441][ T3836] [ 46.285178][ T3849] xt_hashlimit: size too large, truncated to 1048576 [ 46.393770][ T3851] xt_hashlimit: size too large, truncated to 1048576 [ 46.509199][ T3857] EXT4-fs: Ignoring removed nobh option [ 46.540496][ T3857] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 46.578914][ T3857] EXT4-fs (loop3): 1 truncate cleaned up [ 46.582459][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 46.582474][ T28] audit: type=1400 audit(1771983776.463:270): avc: denied { bpf } for pid=3859 comm="syz.0.96" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 46.585172][ T3857] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.592590][ T28] audit: type=1400 audit(1771983776.483:271): avc: denied { perfmon } for pid=3859 comm="syz.0.96" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 46.681499][ T28] audit: type=1400 audit(1771983776.533:272): avc: denied { ioctl } for pid=3859 comm="syz.0.96" path="socket:[5589]" dev="sockfs" ino=5589 ioctlcmd=0xb100 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 46.717379][ T3864] ISOFS: primary root directory is empty. Disabling Rock Ridge and switching to Joliet. [ 46.768482][ T28] audit: type=1400 audit(1771983776.653:273): avc: denied { read } for pid=3863 comm="syz.0.97" name="vsock" dev="devtmpfs" ino=257 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 46.811313][ T3864] netlink: 176 bytes leftover after parsing attributes in process `syz.0.97'. [ 46.820573][ T28] audit: type=1400 audit(1771983776.653:274): avc: denied { open } for pid=3863 comm="syz.0.97" path="/dev/vsock" dev="devtmpfs" ino=257 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 46.991980][ T3871] set_capacity_and_notify: 2 callbacks suppressed [ 46.991996][ T3871] loop2: detected capacity change from 0 to 128 [ 47.010941][ T3871] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 47.025138][ T28] audit: type=1400 audit(1771983776.923:275): avc: denied { nlmsg_read } for pid=3874 comm="syz.1.100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 47.046606][ T3871] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.059891][ T3877] loop0: detected capacity change from 0 to 512 [ 47.092758][ T3877] EXT4-fs: Ignoring removed nobh option [ 47.108675][ T3879] netlink: 'syz.1.102': attribute type 22 has an invalid length. [ 47.129864][ T3877] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 47.140902][ T3879] netlink: 4 bytes leftover after parsing attributes in process `syz.1.102'. [ 47.191874][ T3877] EXT4-fs (loop0): 1 truncate cleaned up [ 47.197952][ T3877] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.214227][ T3312] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 47.232726][ T28] audit: type=1400 audit(1771983777.123:276): avc: denied { connect } for pid=3882 comm="syz.4.104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 47.280755][ T28] audit: type=1400 audit(1771983777.123:277): avc: denied { write } for pid=3882 comm="syz.4.104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 47.324689][ T28] audit: type=1400 audit(1771983777.213:278): avc: denied { create } for pid=3886 comm="syz.4.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 47.360384][ T28] audit: type=1400 audit(1771983777.213:279): avc: denied { ioctl } for pid=3886 comm="syz.4.106" path="socket:[6295]" dev="sockfs" ino=6295 ioctlcmd=0x89ef scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 47.389545][ T3892] loop1: detected capacity change from 0 to 512 [ 47.439792][ T3892] EXT4-fs: Ignoring removed nobh option [ 47.465047][ T3892] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 47.485611][ T3895] loop4: detected capacity change from 0 to 512 [ 47.491487][ T3892] EXT4-fs (loop1): 1 truncate cleaned up [ 47.498006][ T3892] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.525208][ T3891] loop2: detected capacity change from 0 to 1024 [ 47.543527][ T3895] EXT4-fs: Ignoring removed orlov option [ 47.553312][ T3856] syz.3.95 (3856) used greatest stack depth: 5880 bytes left [ 47.582364][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.600059][ T3891] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 47.625141][ T3891] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.640663][ T3895] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.671808][ T3895] ext4 filesystem being mounted at /21/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 47.731322][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 47.801683][ T3869] syz.0.98 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 47.822564][ T3907] xt_hashlimit: size too large, truncated to 1048576 [ 47.831286][ T3869] CPU: 0 UID: 0 PID: 3869 Comm: syz.0.98 Tainted: G W syzkaller #0 PREEMPT(full) [ 47.831336][ T3869] Tainted: [W]=WARN [ 47.831344][ T3869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 47.831432][ T3869] Call Trace: [ 47.831439][ T3869] [ 47.831448][ T3869] __dump_stack+0x1d/0x30 [ 47.831476][ T3869] dump_stack_lvl+0x95/0xd0 [ 47.831573][ T3869] dump_stack+0x15/0x1b [ 47.831600][ T3869] dump_header+0x80/0x240 [ 47.831622][ T3869] oom_kill_process+0x295/0x350 [ 47.831649][ T3869] out_of_memory+0x97d/0xb80 [ 47.831679][ T3869] try_charge_memcg+0x62e/0xa10 [ 47.831716][ T3869] obj_cgroup_charge_pages+0x23/0xc0 [ 47.831744][ T3869] __memcg_kmem_charge_page+0x9e/0x170 [ 47.831837][ T3869] __alloc_frozen_pages_noprof+0x18a/0x360 [ 47.831864][ T3869] alloc_pages_mpol+0xb3/0x260 [ 47.831895][ T3869] alloc_pages_noprof+0x8f/0x130 [ 47.832054][ T3869] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 47.832093][ T3869] __kvmalloc_node_noprof+0x3d4/0x650 [ 47.832179][ T3869] ? ip_set_alloc+0x24/0x30 [ 47.832276][ T3869] ? ip_set_alloc+0x24/0x30 [ 47.832302][ T3869] ? __kmalloc_cache_noprof+0x18a/0x410 [ 47.832335][ T3869] ip_set_alloc+0x24/0x30 [ 47.832361][ T3869] hash_netiface_create+0x282/0x740 [ 47.832462][ T3869] ? __pfx_hash_netiface_create+0x10/0x10 [ 47.832490][ T3869] ip_set_create+0x3cf/0x970 [ 47.832528][ T3869] ? __mutex_lock_slowpath+0xa/0x10 [ 47.832558][ T3869] nfnetlink_rcv_msg+0x509/0x5d0 [ 47.832608][ T3869] netlink_rcv_skb+0x123/0x220 [ 47.832637][ T3869] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 47.832667][ T3869] nfnetlink_rcv+0x167/0x1720 [ 47.832687][ T3869] ? __kfree_skb+0x109/0x150 [ 47.832713][ T3869] ? nlmon_xmit+0x4f/0x60 [ 47.832740][ T3869] ? consume_skb+0x4b/0x160 [ 47.832797][ T3869] ? nlmon_xmit+0x4f/0x60 [ 47.832910][ T3869] ? dev_hard_start_xmit+0x3b9/0x3f0 [ 47.832943][ T3869] ? __dev_queue_xmit+0x1393/0x1f40 [ 47.832973][ T3869] ? __dev_queue_xmit+0x148/0x1f40 [ 47.833019][ T3869] ? ref_tracker_free+0x37d/0x3e0 [ 47.833048][ T3869] ? __netlink_deliver_tap+0x4dc/0x500 [ 47.833081][ T3869] netlink_unicast+0x5c0/0x690 [ 47.833121][ T3869] netlink_sendmsg+0x5c8/0x6f0 [ 47.833205][ T3869] ? __pfx_netlink_sendmsg+0x10/0x10 [ 47.833237][ T3869] ____sys_sendmsg+0x5af/0x600 [ 47.833272][ T3869] ___sys_sendmsg+0x195/0x1e0 [ 47.833324][ T3869] __x64_sys_sendmsg+0xd4/0x160 [ 47.833352][ T3869] x64_sys_call+0x194c/0x3020 [ 47.833383][ T3869] do_syscall_64+0x12c/0x370 [ 47.833456][ T3869] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.833476][ T3869] RIP: 0033:0x7fbe3433c629 [ 47.833492][ T3869] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 47.833509][ T3869] RSP: 002b:00007fbe32d97028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 47.833533][ T3869] RAX: ffffffffffffffda RBX: 00007fbe345b5fa0 RCX: 00007fbe3433c629 [ 47.833634][ T3869] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003 [ 47.833647][ T3869] RBP: 00007fbe343d2b39 R08: 0000000000000000 R09: 0000000000000000 [ 47.833662][ T3869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 47.833676][ T3869] R13: 00007fbe345b6038 R14: 00007fbe345b5fa0 R15: 00007ffe04741508 [ 47.833697][ T3869] [ 47.839243][ T3869] memory: usage 307200kB, limit 307200kB, failcnt 488 [ 48.170484][ T3869] memory+swap: usage 44276kB, limit 9007199254740988kB, failcnt 0 [ 48.171581][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.178350][ T3869] kmem: usage 43640kB, limit 9007199254740988kB, failcnt 0 [ 48.178363][ T3869] Memory cgroup stats for /syz0: [ 48.221113][ T3869] cache 4096 [ 48.230806][ T3869] rss 0 [ 48.233579][ T3869] shmem 0 [ 48.236591][ T3869] mapped_file 0 [ 48.242795][ T3869] dirty 0 [ 48.245956][ T3869] writeback 0 [ 48.254221][ T3869] workingset_refault_anon 53 [ 48.258835][ T3869] workingset_refault_file 622 [ 48.279741][ T3869] swap 466944 [ 48.283395][ T3869] swapcached 770048 [ 48.290692][ T3869] pgpgin 30739 [ 48.294069][ T3869] pgpgout 30738 [ 48.310574][ T3869] pgfault 21299 [ 48.314049][ T3869] pgmajfault 47 [ 48.317501][ T3869] inactive_anon 0 [ 48.340572][ T3869] active_anon 0 [ 48.344193][ T3869] inactive_file 4096 [ 48.348135][ T3869] active_file 0 [ 48.359022][ T3869] unevictable 0 [ 48.364591][ T3869] hierarchical_memory_limit 314572800 [ 48.369980][ T3869] hierarchical_memsw_limit 9223372036854771712 [ 48.386404][ T3869] total_cache 4096 [ 48.390156][ T3869] total_rss 0 [ 48.396258][ T3869] total_shmem 0 [ 48.399935][ T3869] total_mapped_file 0 [ 48.404163][ T3869] total_dirty 0 [ 48.407768][ T3869] total_writeback 0 [ 48.411885][ T3869] total_workingset_refault_anon 53 [ 48.417000][ T3869] total_workingset_refault_file 622 [ 48.422282][ T3869] total_swap 466944 [ 48.426081][ T3869] total_swapcached 770048 [ 48.430389][ T3869] total_pgpgin 30739 [ 48.434397][ T3869] total_pgpgout 30738 [ 48.438439][ T3869] total_pgfault 21299 [ 48.442436][ T3869] total_pgmajfault 47 [ 48.446452][ T3869] total_inactive_anon 0 [ 48.450651][ T3869] total_active_anon 0 [ 48.454700][ T3869] total_inactive_file 4096 [ 48.459209][ T3869] total_active_file 0 [ 48.463374][ T3869] total_unevictable 0 [ 48.467352][ T3869] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.98,pid=3868,uid=0 [ 48.482160][ T3869] Memory cgroup out of memory: Killed process 3868 (syz.0.98) total-vm:96208kB, anon-rss:1220kB, file-rss:22404kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 48.580298][ T3920] xt_hashlimit: size too large, truncated to 1048576 [ 48.591092][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.636923][ T3923] loop0: detected capacity change from 0 to 512 [ 48.658260][ T3925] netlink: 40 bytes leftover after parsing attributes in process `syz.4.114'. [ 48.689412][ T3923] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 48.764430][ T3923] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.778889][ T3923] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.878723][ T3923] EXT4-fs (loop0): shut down requested (0) [ 48.903385][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.922577][ T3923] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=15 [ 48.950806][ T3923] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=15 [ 48.965918][ T3933] loop3: detected capacity change from 0 to 512 [ 48.972533][ T3933] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 48.986198][ T3923] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=15 [ 49.082219][ T3935] loop1: detected capacity change from 0 to 2048 [ 49.130797][ T3923] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=15 [ 49.166101][ T3923] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=15 [ 49.202134][ T3935] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.218306][ T3923] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 49.257180][ T3923] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 49.270324][ T3938] syz.4.118 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 49.284374][ T3938] CPU: 1 UID: 0 PID: 3938 Comm: syz.4.118 Tainted: G W syzkaller #0 PREEMPT(full) [ 49.284512][ T3938] Tainted: [W]=WARN [ 49.284519][ T3938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 49.284531][ T3938] Call Trace: [ 49.284538][ T3938] [ 49.284546][ T3938] __dump_stack+0x1d/0x30 [ 49.284617][ T3938] dump_stack_lvl+0x95/0xd0 [ 49.284643][ T3938] dump_stack+0x15/0x1b [ 49.284707][ T3938] dump_header+0x80/0x240 [ 49.284728][ T3938] oom_kill_process+0x295/0x350 [ 49.284749][ T3938] out_of_memory+0x97d/0xb80 [ 49.284772][ T3938] try_charge_memcg+0x62e/0xa10 [ 49.284883][ T3938] obj_cgroup_charge_pages+0x23/0xc0 [ 49.284911][ T3938] __memcg_kmem_charge_page+0x9e/0x170 [ 49.284973][ T3938] __alloc_frozen_pages_noprof+0x18a/0x360 [ 49.285007][ T3938] alloc_pages_mpol+0xb3/0x260 [ 49.285036][ T3938] alloc_pages_noprof+0x8f/0x130 [ 49.285068][ T3938] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 49.285110][ T3938] __kvmalloc_node_noprof+0x3d4/0x650 [ 49.285218][ T3938] ? futex_hash_allocate+0x190/0x9d0 [ 49.285296][ T3938] ? futex_hash_allocate+0x190/0x9d0 [ 49.285326][ T3938] futex_hash_allocate+0x190/0x9d0 [ 49.285432][ T3938] ? cap_task_prctl+0x13f/0x6e0 [ 49.285455][ T3938] futex_hash_prctl+0xd8/0xf0 [ 49.285558][ T3938] __se_sys_prctl+0xa3d/0x13f0 [ 49.285585][ T3938] __x64_sys_prctl+0x67/0x80 [ 49.285612][ T3938] x64_sys_call+0x2533/0x3020 [ 49.285751][ T3938] do_syscall_64+0x12c/0x370 [ 49.285792][ T3938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.285818][ T3938] RIP: 0033:0x7f04dd68c629 [ 49.285885][ T3938] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 49.285905][ T3938] RSP: 002b:00007f04dc0e7028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 49.285929][ T3938] RAX: ffffffffffffffda RBX: 00007f04dd905fa0 RCX: 00007f04dd68c629 [ 49.285995][ T3938] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 49.286010][ T3938] RBP: 00007f04dd722b39 R08: 0000000000000000 R09: 0000000000000000 [ 49.286026][ T3938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 49.286103][ T3938] R13: 00007f04dd906038 R14: 00007f04dd905fa0 R15: 00007ffc53b76798 [ 49.286121][ T3938] [ 49.286129][ T3938] memory: usage 293680kB, limit 307200kB, failcnt 155 [ 49.519938][ T3938] memory+swap: usage 75644kB, limit 9007199254740988kB, failcnt 0 [ 49.521115][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.527904][ T3938] kmem: usage 75372kB, limit 9007199254740988kB, failcnt 0 [ 49.544089][ T3938] Memory cgroup stats for /syz4: [ 49.544505][ T3938] cache 16384 [ 49.552769][ T3938] rss 0 [ 49.555523][ T3938] shmem 0 [ 49.558599][ T3938] mapped_file 16384 [ 49.562561][ T3938] dirty 0 [ 49.565591][ T3938] writeback 16384 [ 49.569232][ T3938] workingset_refault_anon 8 [ 49.573765][ T3938] workingset_refault_file 0 [ 49.578321][ T3938] swap 167936 [ 49.581641][ T3938] swapcached 196608 [ 49.585491][ T3938] pgpgin 43937 [ 49.588926][ T3938] pgpgout 43925 [ 49.592411][ T3938] pgfault 25495 [ 49.595865][ T3938] pgmajfault 5 [ 49.599230][ T3938] inactive_anon 0 [ 49.602898][ T3938] active_anon 28672 [ 49.606704][ T3938] inactive_file 0 [ 49.610342][ T3938] active_file 20480 [ 49.614193][ T3938] unevictable 0 [ 49.617707][ T3938] hierarchical_memory_limit 314572800 [ 49.623118][ T3938] hierarchical_memsw_limit 9223372036854771712 [ 49.624378][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.629267][ T3938] total_cache 16384 [ 49.629277][ T3938] total_rss 0 [ 49.629285][ T3938] total_shmem 0 [ 49.649587][ T3938] total_mapped_file 16384 [ 49.654056][ T3938] total_dirty 0 [ 49.657511][ T3938] total_writeback 16384 [ 49.661730][ T3938] total_workingset_refault_anon 8 [ 49.666839][ T3938] total_workingset_refault_file 0 [ 49.671902][ T3938] total_swap 167936 [ 49.675718][ T3938] total_swapcached 196608 [ 49.680044][ T3938] total_pgpgin 43937 [ 49.683963][ T3938] total_pgpgout 43925 [ 49.687937][ T3938] total_pgfault 25495 [ 49.691922][ T3938] total_pgmajfault 5 [ 49.695854][ T3938] total_inactive_anon 0 [ 49.699994][ T3938] total_active_anon 28672 [ 49.704322][ T3938] total_inactive_file 0 [ 49.708457][ T3938] total_active_file 20480 [ 49.712792][ T3938] total_unevictable 0 [ 49.716753][ T3938] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.118,pid=3937,uid=0 [ 49.731489][ T3938] Memory cgroup out of memory: Killed process 3937 (syz.4.118) total-vm:94028kB, anon-rss:1228kB, file-rss:22368kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 49.848792][ T3948] netlink: 12 bytes leftover after parsing attributes in process `syz.4.122'. [ 49.886210][ T3942] capability: warning: `syz.1.119' uses 32-bit capabilities (legacy support in use) [ 49.906875][ T3948] netlink: 8 bytes leftover after parsing attributes in process `syz.4.122'. [ 49.941732][ T3942] program syz.1.119 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 49.993102][ T3961] netlink: 'syz.2.126': attribute type 3 has an invalid length. [ 50.001762][ T3962] netlink: 8 bytes leftover after parsing attributes in process `syz.3.123'. [ 50.026602][ T3961] netlink: 8 bytes leftover after parsing attributes in process `syz.2.126'. [ 50.039697][ T3965] loop4: detected capacity change from 0 to 256 [ 50.079911][ T3965] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 50.094332][ T3965] FAT-fs (loop4): error, corrupted file size (i_pos 196, 2048) [ 50.123970][ T3965] FAT-fs (loop4): Filesystem has been set read-only [ 50.142668][ T3970] random: crng reseeded on system resumption [ 50.172916][ T3974] vhci_hcd vhci_hcd.0: invalid port number 0 [ 50.213187][ T3974] loop2: detected capacity change from 0 to 512 [ 50.237513][ T3974] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.132: inode has both inline data and extents flags [ 50.251266][ T3974] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 50.251374][ T3974] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.132: couldn't read orphan inode 15 (err -117) [ 50.260550][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 50.260579][ C0] EXT4-fs (loop2): initial error at time 1771983780: ext4_orphan_get:1391: inode 15 [ 50.260603][ C0] EXT4-fs (loop2): last error at time 1771983780: ext4_orphan_get:1391: inode 15 [ 50.297657][ T3974] fserror_report: 1 callbacks suppressed [ 50.297672][ T3974] loop2: lost filesystem error report for type 5 error -117 [ 50.304520][ T3974] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.334418][ T3974] netlink: 'syz.2.132': attribute type 5 has an invalid length. [ 50.350873][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.378933][ T3983] can0: slcan on ptm0. [ 50.383664][ T3980] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 50.431170][ T3982] can0 (unregistered): slcan off ptm0. [ 50.494948][ T3985] netlink: 24 bytes leftover after parsing attributes in process `syz.2.134'. [ 50.506166][ T3985] ip6gre1: entered promiscuous mode [ 50.511979][ T3985] ip6gre1: entered allmulticast mode [ 50.519000][ T2132] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 50.519363][ T3985] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 50.528098][ T2132] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 50.541605][ T3548] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 50.690241][ T3987] SELinux: failed to load policy [ 50.773298][ T3991] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 50.799990][ T3991] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.812708][ T3991] ext4 filesystem being mounted at /23/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 50.883167][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.925011][ T3998] FAULT_INJECTION: forcing a failure. [ 50.925011][ T3998] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 50.938285][ T3998] CPU: 1 UID: 0 PID: 3998 Comm: syz.0.138 Tainted: G W syzkaller #0 PREEMPT(full) [ 50.938328][ T3998] Tainted: [W]=WARN [ 50.938334][ T3998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 50.938347][ T3998] Call Trace: [ 50.938353][ T3998] [ 50.938361][ T3998] __dump_stack+0x1d/0x30 [ 50.938388][ T3998] dump_stack_lvl+0x95/0xd0 [ 50.938415][ T3998] dump_stack+0x15/0x1b [ 50.938433][ T3998] should_fail_ex+0x263/0x280 [ 50.938511][ T3998] should_fail+0xb/0x20 [ 50.938530][ T3998] should_fail_usercopy+0x1a/0x20 [ 50.938626][ T3998] _copy_from_user+0x1c/0xb0 [ 50.938659][ T3998] ___sys_sendmsg+0xc1/0x1e0 [ 50.938697][ T3998] __x64_sys_sendmsg+0xd4/0x160 [ 50.938773][ T3998] x64_sys_call+0x194c/0x3020 [ 50.938800][ T3998] do_syscall_64+0x12c/0x370 [ 50.938834][ T3998] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.938907][ T3998] RIP: 0033:0x7fbe3433c629 [ 50.938925][ T3998] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 50.939016][ T3998] RSP: 002b:00007fbe32d97028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 50.939037][ T3998] RAX: ffffffffffffffda RBX: 00007fbe345b5fa0 RCX: 00007fbe3433c629 [ 50.939053][ T3998] RDX: 0000000000000000 RSI: 0000200000007940 RDI: 000000000000000a [ 50.939066][ T3998] RBP: 00007fbe32d97090 R08: 0000000000000000 R09: 0000000000000000 [ 50.939080][ T3998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 50.939094][ T3998] R13: 00007fbe345b6038 R14: 00007fbe345b5fa0 R15: 00007ffe04741508 [ 50.939114][ T3998] [ 51.103341][ T3547] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 51.130751][ T3547] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 51.166000][ T4003] netlink: 12 bytes leftover after parsing attributes in process `syz.0.140'. [ 51.219344][ T4005] process 'syz.4.141' launched '/dev/fd/4/./file0' with NULL argv: empty string added [ 51.489293][ T4011] bridge0: entered promiscuous mode [ 51.615313][ T4016] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 51.871193][ T28] kauditd_printk_skb: 184 callbacks suppressed [ 51.871216][ T28] audit: type=1400 audit(1771983781.753:464): avc: denied { create } for pid=4017 comm="syz.4.145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 52.013213][ T4026] set_capacity_and_notify: 2 callbacks suppressed [ 52.013281][ T4026] loop2: detected capacity change from 0 to 512 [ 52.039247][ T4026] EXT4-fs: Ignoring removed nobh option [ 52.046074][ T4026] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 52.099543][ T28] audit: type=1400 audit(1771983781.953:465): avc: denied { ioctl } for pid=4024 comm="syz.4.147" path="socket:[5847]" dev="sockfs" ino=5847 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 52.265664][ T4038] loop4: detected capacity change from 0 to 512 [ 52.272456][ T4026] EXT4-fs (loop2): 1 truncate cleaned up [ 52.289117][ T4026] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.328311][ T4040] loop1: detected capacity change from 0 to 512 [ 52.335109][ T4040] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 52.354610][ T4044] 9p: Bad value for 'wfdno' [ 52.365246][ T4038] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.409757][ T28] audit: type=1400 audit(1771983782.283:466): avc: denied { connect } for pid=4043 comm="syz.3.153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 52.473392][ T4038] ext4 filesystem being mounted at /34/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 52.516744][ T28] audit: type=1400 audit(1771983782.293:467): avc: denied { name_bind } for pid=4043 comm="syz.3.153" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 52.584036][ T28] audit: type=1400 audit(1771983782.293:468): avc: denied { kexec_image_load } for pid=4043 comm="syz.3.153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 52.637087][ T28] audit: type=1400 audit(1771983782.393:469): avc: denied { append } for pid=4031 comm="syz.4.150" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 52.700670][ T28] audit: type=1400 audit(1771983782.403:470): avc: denied { getopt } for pid=4031 comm="syz.4.150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 52.799614][ T4023] syz.2.146 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 52.880663][ T28] audit: type=1400 audit(1771983782.403:471): avc: denied { create } for pid=4031 comm="syz.4.150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 52.921343][ T4023] CPU: 1 UID: 0 PID: 4023 Comm: syz.2.146 Tainted: G W syzkaller #0 PREEMPT(full) [ 52.921377][ T4023] Tainted: [W]=WARN [ 52.921386][ T4023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 52.921398][ T4023] Call Trace: [ 52.921404][ T4023] [ 52.921410][ T4023] __dump_stack+0x1d/0x30 [ 52.921531][ T4023] dump_stack_lvl+0x95/0xd0 [ 52.921591][ T4023] dump_stack+0x15/0x1b [ 52.921612][ T4023] dump_header+0x80/0x240 [ 52.921633][ T4023] oom_kill_process+0x295/0x350 [ 52.921685][ T4023] out_of_memory+0x97d/0xb80 [ 52.921749][ T4023] try_charge_memcg+0x62e/0xa10 [ 52.921787][ T4023] obj_cgroup_charge_pages+0x23/0xc0 [ 52.921855][ T4023] __memcg_kmem_charge_page+0x9e/0x170 [ 52.921880][ T4023] __alloc_frozen_pages_noprof+0x18a/0x360 [ 52.921912][ T4023] alloc_pages_mpol+0xb3/0x260 [ 52.922014][ T4023] alloc_pages_noprof+0x8f/0x130 [ 52.922092][ T4023] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 52.922128][ T4023] __kvmalloc_node_noprof+0x3d4/0x650 [ 52.922219][ T4023] ? ip_set_alloc+0x24/0x30 [ 52.922243][ T4023] ? ip_set_alloc+0x24/0x30 [ 52.922279][ T4023] ? __kmalloc_cache_noprof+0x18a/0x410 [ 52.922301][ T4023] ip_set_alloc+0x24/0x30 [ 52.922322][ T4023] hash_netiface_create+0x282/0x740 [ 52.922378][ T4023] ? __pfx_hash_netiface_create+0x10/0x10 [ 52.922413][ T4023] ip_set_create+0x3cf/0x970 [ 52.922448][ T4023] ? mutex_lock+0x60/0x90 [ 52.922475][ T4023] nfnetlink_rcv_msg+0x509/0x5d0 [ 52.922524][ T4023] netlink_rcv_skb+0x123/0x220 [ 52.922622][ T4023] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 52.922653][ T4023] nfnetlink_rcv+0x167/0x1720 [ 52.922674][ T4023] ? __kfree_skb+0x109/0x150 [ 52.922699][ T4023] ? nlmon_xmit+0x4f/0x60 [ 52.922780][ T4023] ? consume_skb+0x4b/0x160 [ 52.922866][ T4023] ? nlmon_xmit+0x4f/0x60 [ 52.922896][ T4023] ? dev_hard_start_xmit+0x3b9/0x3f0 [ 52.922923][ T4023] ? __dev_queue_xmit+0x1393/0x1f40 [ 52.923081][ T4023] ? __dev_queue_xmit+0x148/0x1f40 [ 52.923108][ T4023] ? ref_tracker_free+0x37d/0x3e0 [ 52.923133][ T4023] ? __netlink_deliver_tap+0x4dc/0x500 [ 52.923203][ T4023] netlink_unicast+0x5c0/0x690 [ 52.923236][ T4023] netlink_sendmsg+0x5c8/0x6f0 [ 52.923266][ T4023] ? __pfx_netlink_sendmsg+0x10/0x10 [ 52.923294][ T4023] ____sys_sendmsg+0x5af/0x600 [ 52.923323][ T4023] ___sys_sendmsg+0x195/0x1e0 [ 52.923366][ T4023] __x64_sys_sendmsg+0xd4/0x160 [ 52.923430][ T4023] x64_sys_call+0x194c/0x3020 [ 52.923506][ T4023] do_syscall_64+0x12c/0x370 [ 52.923617][ T4023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.923638][ T4023] RIP: 0033:0x7ff604b9c629 [ 52.923655][ T4023] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 52.923718][ T4023] RSP: 002b:00007ff6035ef028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 52.923739][ T4023] RAX: ffffffffffffffda RBX: 00007ff604e15fa0 RCX: 00007ff604b9c629 [ 52.923754][ T4023] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003 [ 52.923777][ T4023] RBP: 00007ff604c32b39 R08: 0000000000000000 R09: 0000000000000000 [ 52.923790][ T4023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 52.923863][ T4023] R13: 00007ff604e16038 R14: 00007ff604e15fa0 R15: 00007ffd5c6a8738 [ 52.923883][ T4023] [ 52.925024][ T4023] memory: usage 307200kB, limit 307200kB, failcnt 185 [ 53.040816][ T28] audit: type=1400 audit(1771983782.403:472): avc: denied { setopt } for pid=4031 comm="syz.4.150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 53.048049][ T4023] memory+swap: usage 307476kB, limit 9007199254740988kB, failcnt 0 [ 53.099540][ T28] audit: type=1400 audit(1771983782.443:473): avc: denied { create } for pid=4043 comm="syz.3.153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 53.246754][ T4023] kmem: usage 307020kB, limit 9007199254740988kB, failcnt 0 [ 53.358464][ T4023] Memory cgroup stats for /syz2: [ 53.358809][ T4023] cache 4096 [ 53.380604][ T4023] rss 0 [ 53.429079][ T4023] shmem 0 [ 53.432233][ T4023] mapped_file 0 [ 53.435695][ T4023] dirty 0 [ 53.438661][ T4023] writeback 0 [ 53.441973][ T4023] workingset_refault_anon 45 [ 53.446561][ T4023] workingset_refault_file 2 [ 53.460977][ T4023] swap 462848 [ 53.474655][ T4023] swapcached 462848 [ 53.478635][ T4023] pgpgin 26498 [ 53.488216][ T4023] pgpgout 26497 [ 53.491953][ T4023] pgfault 27536 [ 53.495534][ T4023] pgmajfault 10 [ 53.495764][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.499058][ T4023] inactive_anon 0 [ 53.512063][ T4023] active_anon 0 [ 53.515615][ T4023] inactive_file 0 [ 53.519323][ T4023] active_file 4096 [ 53.524751][ T4023] unevictable 0 [ 53.528288][ T4023] hierarchical_memory_limit 314572800 [ 53.533965][ T4023] hierarchical_memsw_limit 9223372036854771712 [ 53.540381][ T4023] total_cache 4096 [ 53.544437][ T4023] total_rss 0 [ 53.547716][ T4023] total_shmem 0 [ 53.551322][ T4023] total_mapped_file 0 [ 53.555633][ T4023] total_dirty 0 [ 53.608315][ T4023] total_writeback 0 [ 53.617214][ T4057] loop4: detected capacity change from 0 to 128 [ 53.624097][ T4057] EXT4-fs: Ignoring removed nobh option [ 53.634140][ T4023] total_workingset_refault_anon 45 [ 53.639324][ T4023] total_workingset_refault_file 2 [ 53.644765][ T4023] total_swap 462848 [ 53.648601][ T4023] total_swapcached 462848 [ 53.649289][ T4057] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 53.653322][ T4023] total_pgpgin 26498 [ 53.668998][ T4023] total_pgpgout 26497 [ 53.673038][ T4023] total_pgfault 27536 [ 53.677047][ T4023] total_pgmajfault 10 [ 53.681077][ T4023] total_inactive_anon 0 [ 53.685238][ T4023] total_active_anon 0 [ 53.689251][ T4023] total_inactive_file 0 [ 53.693469][ T4023] total_active_file 4096 [ 53.697701][ T4023] total_unevictable 0 [ 53.701807][ T4023] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.146,pid=4022,uid=0 [ 53.716453][ T4023] Memory cgroup out of memory: Killed process 4022 (syz.2.146) total-vm:94160kB, anon-rss:1232kB, file-rss:22404kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 53.720973][ T4057] ext4 filesystem being mounted at /35/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 53.812544][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.872935][ T4066] netlink: 72 bytes leftover after parsing attributes in process `syz.1.159'. [ 53.891030][ T4066] netlink: 12 bytes leftover after parsing attributes in process `syz.1.159'. [ 53.899926][ T4066] netlink: 8 bytes leftover after parsing attributes in process `syz.1.159'. [ 53.947272][ T4055] loop0: detected capacity change from 0 to 1024 [ 53.980990][ T4055] EXT4-fs: inline encryption not supported [ 54.005268][ T4055] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.072144][ T4044] kexec: Could not allocate control_code_buffer [ 54.209088][ T4087] FAULT_INJECTION: forcing a failure. [ 54.209088][ T4087] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 54.224518][ T4087] CPU: 0 UID: 0 PID: 4087 Comm: syz.1.166 Tainted: G W syzkaller #0 PREEMPT(full) [ 54.224549][ T4087] Tainted: [W]=WARN [ 54.224590][ T4087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 54.224600][ T4087] Call Trace: [ 54.224607][ T4087] [ 54.224614][ T4087] __dump_stack+0x1d/0x30 [ 54.224638][ T4087] dump_stack_lvl+0x95/0xd0 [ 54.224659][ T4087] dump_stack+0x15/0x1b [ 54.224717][ T4087] should_fail_ex+0x263/0x280 [ 54.224767][ T4087] should_fail+0xb/0x20 [ 54.224783][ T4087] should_fail_usercopy+0x1a/0x20 [ 54.224802][ T4087] _copy_from_user+0x1c/0xb0 [ 54.224904][ T4087] do_sock_getsockopt+0xf1/0x210 [ 54.224934][ T4087] __x64_sys_getsockopt+0x11d/0x1a0 [ 54.224964][ T4087] x64_sys_call+0x2dcf/0x3020 [ 54.225047][ T4087] do_syscall_64+0x12c/0x370 [ 54.225124][ T4087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.225144][ T4087] RIP: 0033:0x7f54440bc629 [ 54.225221][ T4087] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 54.225236][ T4087] RSP: 002b:00007f5442b0f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 54.225254][ T4087] RAX: ffffffffffffffda RBX: 00007f5444335fa0 RCX: 00007f54440bc629 [ 54.225266][ T4087] RDX: 000000000000000d RSI: 0000000000000112 RDI: 0000000000000004 [ 54.225331][ T4087] RBP: 00007f5442b0f090 R08: 00002000000000c0 R09: 0000000000000000 [ 54.225346][ T4087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 54.225360][ T4087] R13: 00007f5444336038 R14: 00007f5444335fa0 R15: 00007ffd23a7fc28 [ 54.225412][ T4087] [ 54.406067][ T4088] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 54.440619][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 54.500907][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.567179][ T4092] loop3: detected capacity change from 0 to 512 [ 54.613900][ T4095] loop1: detected capacity change from 0 to 512 [ 54.679633][ T4095] EXT4-fs: Ignoring removed nobh option [ 54.696285][ T4092] EXT4-fs: Ignoring removed nobh option [ 54.721349][ T4095] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 54.744386][ T4092] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 54.783617][ T4095] EXT4-fs (loop1): 1 truncate cleaned up [ 54.790821][ T4095] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.824459][ T4092] EXT4-fs (loop3): 1 truncate cleaned up [ 54.869284][ T3317] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 54.882735][ T4099] loop0: detected capacity change from 0 to 164 [ 54.889719][ T4092] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.904461][ T4099] Unable to read rock-ridge attributes [ 54.993126][ T4099] Unable to read rock-ridge attributes [ 55.001752][ T4101] 9p: Bad value for 'rfdno' [ 55.031323][ T4104] netlink: 4 bytes leftover after parsing attributes in process `syz.2.171'. [ 55.059678][ T4107] loop4: detected capacity change from 0 to 512 [ 55.074333][ T4104] bond_slave_0: entered promiscuous mode [ 55.084932][ T4107] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 55.098476][ T4104] macvtap1: entered promiscuous mode [ 55.115702][ T4107] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.117554][ T4104] bond0: entered promiscuous mode [ 55.147063][ T4115] loop0: detected capacity change from 0 to 512 [ 55.165259][ T4104] bond_slave_1: entered promiscuous mode [ 55.171164][ T4107] ext4 filesystem being mounted at /37/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.183536][ T4115] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 55.211839][ T4107] EXT4-fs (loop4): shut down requested (0) [ 55.226277][ T4104] macvtap1: entered allmulticast mode [ 55.242218][ T4115] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.254937][ T4104] bond0: entered allmulticast mode [ 55.260215][ T4104] bond_slave_0: entered allmulticast mode [ 55.270843][ T4104] bond_slave_1: entered allmulticast mode [ 55.277609][ T4104] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 55.279362][ T4115] ext4 filesystem being mounted at /30/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.342890][ T4115] EXT4-fs (loop0): shut down requested (0) [ 55.354996][ T4115] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=15 [ 55.371941][ T4115] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=15 [ 55.386516][ T4115] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=15 [ 55.411245][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.451568][ T4122] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4122 comm=syz.2.176 [ 55.454236][ T4121] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=15 [ 55.485318][ T4122] syz_tun: entered allmulticast mode [ 55.491581][ T4122] netlink: 4 bytes leftover after parsing attributes in process `syz.2.176'. [ 55.505042][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.521158][ T4121] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=15 [ 55.531970][ T4122] syz_tun (unregistering): left allmulticast mode [ 55.652259][ T4132] EXT4-fs: Ignoring removed nobh option [ 55.658500][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.667964][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.692754][ T4132] EXT4-fs (loop3): orphan cleanup on readonly fs [ 55.710712][ T4132] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #15: comm syz.3.179: corrupted inode contents [ 55.741099][ T4132] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 55.750562][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 55.767012][ C0] EXT4-fs (loop3): initial error at time 1771983785: ext4_do_update_inode:5569: inode 15 [ 55.776861][ C0] EXT4-fs (loop3): last error at time 1771983785: ext4_do_update_inode:5569: inode 15 [ 55.786069][ T4132] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 55.807865][ T4132] loop3: lost filesystem error report for type 5 error -117 [ 55.818586][ T4141] netlink: 8 bytes leftover after parsing attributes in process `syz.1.180'. [ 55.851284][ T4141] 9p: Bad value for 'rfdno' [ 55.871760][ T4132] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #15: comm syz.3.179: corrupted inode contents [ 55.893683][ T4132] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 55.893834][ T4132] EXT4-fs error (device loop3): ext4_evict_inode:303: inode #15: comm syz.3.179: mark_inode_dirty error [ 55.921656][ T4145] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 56.009046][ T4146] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 56.039513][ T4132] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 56.046948][ T4132] EXT4-fs (loop3): 1 orphan inode deleted [ 56.169317][ T4128] EXT4-fs: inline encryption not supported [ 56.265074][ T4128] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.286799][ T4132] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 56.378793][ T4149] EXT4-fs: Ignoring removed orlov option [ 56.392643][ T4149] EXT4-fs: Ignoring removed nobh option [ 56.410134][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.411155][ T4142] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4222: comm syz.4.177: Allocating blocks 497-513 which overlap fs metadata [ 56.433291][ T4142] EXT4-fs (loop4): Remounting filesystem read-only [ 56.444759][ T4149] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.503777][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.549139][ T4164] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 56.560151][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.570965][ T4164] EXT4-fs error (device loop4): xattr_find_entry:337: inode #15: comm syz.4.186: corrupted xattr entries [ 56.588232][ T4164] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 56.590827][ T4164] EXT4-fs (loop4): 1 orphan inode deleted [ 56.605769][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 56.605795][ C0] EXT4-fs (loop4): initial error at time 1771983786: xattr_find_entry:337: inode 15 [ 56.605827][ C0] EXT4-fs (loop4): last error at time 1771983786: xattr_find_entry:337: inode 15 [ 56.673489][ T4164] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.729864][ T4174] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 56.772294][ T4174] ext4 filesystem being mounted at /41/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.799680][ T4174] EXT4-fs (loop1): shut down requested (0) [ 56.873277][ T4182] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=15 [ 56.923139][ T4182] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=15 [ 56.967210][ T4185] EXT4-fs: Ignoring removed orlov option [ 56.972944][ T4182] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=15 [ 56.982432][ T4174] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=15 [ 57.008310][ T4183] EXT4-fs: Ignoring removed nobh option [ 57.010688][ T4185] EXT4-fs: Ignoring removed oldalloc option [ 57.030729][ T4174] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=15 [ 57.031329][ T4185] EXT4-fs (loop0): filesystem too large to mount safely on this system [ 57.052813][ T4183] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 57.078981][ T4186] IPv6: A: Disabled Multicast RS [ 57.093681][ T4169] set_capacity_and_notify: 7 callbacks suppressed [ 57.093697][ T4169] loop2: detected capacity change from 0 to 512 [ 57.106772][ T4185] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 57.124668][ T4169] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #11: comm syz.2.189: iget: bad extra_isize 90 (inode size 256) [ 57.145808][ T28] kauditd_printk_skb: 98 callbacks suppressed [ 57.145822][ T28] audit: type=1400 audit(1771983787.033:572): avc: denied { bind } for pid=4184 comm="syz.0.191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 57.250818][ T4189] 9p: Bad value for 'rfdno' [ 57.270631][ T4169] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 57.271130][ T4169] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.189: error while reading EA inode 11 err=-117 [ 57.292437][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 57.292476][ C0] EXT4-fs (loop2): initial error at time 1771983787: ext4_xattr_inode_iget:441: inode 11 [ 57.292507][ C0] EXT4-fs (loop2): last error at time 1771983787: ext4_xattr_inode_iget:441: inode 11 [ 57.321103][ T4188] xfrm0 speed is unknown, defaulting to 1000 [ 57.328103][ T4188] xfrm0 speed is unknown, defaulting to 1000 [ 57.336243][ T28] audit: type=1400 audit(1771983787.203:573): avc: denied { name_bind } for pid=4184 comm="syz.0.191" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 57.370613][ T4169] loop2: lost filesystem error report for type 5 error -117 [ 57.380874][ T4169] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #11: comm syz.2.189: iget: bad extra_isize 90 (inode size 256) [ 57.393786][ T4188] xfrm0 speed is unknown, defaulting to 1000 [ 57.447373][ T4169] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 57.447591][ T4169] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.189: error while reading EA inode 11 err=-117 [ 57.473209][ T28] audit: type=1400 audit(1771983787.203:574): avc: denied { node_bind } for pid=4184 comm="syz.0.191" saddr=172.20.20.33 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 57.530659][ T4169] loop2: lost filesystem error report for type 5 error -117 [ 57.530828][ T4169] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #18: comm syz.2.189: iget: bad extra_isize 90 (inode size 256) [ 57.553004][ T4183] EXT4-fs (loop4): 1 truncate cleaned up [ 57.577050][ T28] audit: type=1400 audit(1771983787.273:575): avc: denied { name_bind } for pid=4184 comm="syz.0.191" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 57.609946][ T4188] infiniband syz1: set active [ 57.614714][ T4188] infiniband syz1: added xfrm0 [ 57.619506][ T3547] xfrm0 speed is unknown, defaulting to 1000 [ 57.639062][ T4188] RDS/IB: syz1: added [ 57.645314][ T4188] smc: adding ib device syz1 with port count 1 [ 57.714522][ T4188] smc: ib device syz1 port 1 has no pnetid [ 57.754784][ T4169] loop2: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 57.779015][ T4169] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.189: error while reading EA inode 18 err=-117 [ 57.870833][ T4188] xfrm0 speed is unknown, defaulting to 1000 [ 57.887878][ T4169] loop2: lost filesystem error report for type 5 error -117 [ 57.888071][ T4169] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #18: comm syz.2.189: iget: bad extra_isize 90 (inode size 256) [ 57.890377][ T10] xfrm0 speed is unknown, defaulting to 1000 [ 57.906852][ T4206] loop1: detected capacity change from 0 to 512 [ 57.921655][ T4169] loop2: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 57.921943][ T4169] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.189: error while reading EA inode 18 err=-117 [ 57.950690][ T4169] loop2: lost filesystem error report for type 5 error -117 [ 57.951129][ T4169] EXT4-fs (loop2): 1 orphan inode deleted [ 57.977548][ T4188] xfrm0 speed is unknown, defaulting to 1000 [ 57.997497][ T4206] EXT4-fs: Ignoring removed mblk_io_submit option [ 58.046641][ T4206] EXT4-fs: Mount option(s) incompatible with ext2 [ 58.084867][ T4212] netlink: 'syz.4.197': attribute type 29 has an invalid length. [ 58.111256][ T4212] netlink: 'syz.4.197': attribute type 29 has an invalid length. [ 58.120583][ T28] audit: type=1400 audit(1771983787.993:576): avc: denied { write } for pid=4205 comm="syz.1.195" name="001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 58.153752][ T4188] xfrm0 speed is unknown, defaulting to 1000 [ 58.237257][ T4188] xfrm0 speed is unknown, defaulting to 1000 [ 58.305585][ T4188] xfrm0 speed is unknown, defaulting to 1000 [ 58.485745][ T4220] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 58.933776][ T28] audit: type=1400 audit(1771983788.823:577): avc: denied { create } for pid=4221 comm="syz.3.201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 59.008060][ T4219] SELinux: failed to load policy [ 59.040573][ T28] audit: type=1400 audit(1771983788.823:578): avc: denied { bind } for pid=4221 comm="syz.3.201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 59.069030][ T28] audit: type=1400 audit(1771983788.823:579): avc: denied { setopt } for pid=4221 comm="syz.3.201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 59.099045][ T4228] loop9: detected capacity change from 0 to 7 [ 59.152304][ T4228] Buffer I/O error on dev loop9, logical block 0, async page read [ 59.180605][ T28] audit: type=1400 audit(1771983788.823:580): avc: denied { write } for pid=4221 comm="syz.3.201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 59.189530][ T4228] Buffer I/O error on dev loop9, logical block 0, async page read [ 59.217472][ T28] audit: type=1400 audit(1771983788.833:581): avc: denied { setopt } for pid=4221 comm="syz.3.201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 59.304189][ T4243] loop0: detected capacity change from 0 to 256 [ 59.322140][ T4228] loop9: unable to read partition table [ 59.328137][ T4228] loop_reread_partitions: partition scan of loop9 (Sj %`ր5) failed (rc=-5) [ 59.329177][ T3304] Buffer I/O error on dev loop9, logical block 0, async page read [ 59.380731][ T3304] Buffer I/O error on dev loop9, logical block 0, async page read [ 59.398867][ T3304] Buffer I/O error on dev loop9, logical block 0, async page read [ 59.430757][ T3304] Buffer I/O error on dev loop9, logical block 0, async page read [ 59.438770][ T3304] Buffer I/O error on dev loop9, logical block 0, async page read [ 59.520564][ T4238] Invalid logical block size (4) [ 59.540769][ T3304] Buffer I/O error on dev loop9, logical block 0, async page read [ 59.567081][ T3304] Buffer I/O error on dev loop9, logical block 0, async page read [ 59.585653][ T3304] Buffer I/O error on dev loop9, logical block 0, async page read [ 59.642693][ T4252] loop0: detected capacity change from 0 to 1024 [ 59.701452][ T4252] EXT4-fs: Ignoring removed mblk_io_submit option [ 59.783716][ T4257] netlink: 'syz.2.211': attribute type 29 has an invalid length. [ 59.792122][ T4257] netlink: 'syz.2.211': attribute type 29 has an invalid length. [ 59.956958][ T4266] netlink: 182 bytes leftover after parsing attributes in process `syz.2.213'. [ 60.036062][ T4268] netlink: 260 bytes leftover after parsing attributes in process `syz.2.213'. [ 60.207116][ T4273] netlink: 12 bytes leftover after parsing attributes in process `syz.2.215'. [ 60.602585][ T4290] loop2: detected capacity change from 0 to 2048 [ 60.760170][ T2132] ================================================================== [ 60.768275][ T2132] BUG: KCSAN: data-race in n_tty_lookahead_flow_ctrl / tty_set_termios [ 60.776540][ T2132] [ 60.778858][ T2132] write to 0xffff888155fb3d08 of 44 bytes by task 4298 on cpu 0: [ 60.786578][ T2132] tty_set_termios+0xc0/0x910 [ 60.791272][ T2132] set_termios+0x4a7/0x4f0 [ 60.795704][ T2132] tty_mode_ioctl+0x37f/0x5b0 [ 60.800395][ T2132] n_tty_ioctl_helper+0x87/0x370 [ 60.805345][ T2132] n_tty_ioctl+0x101/0x230 [ 60.809754][ T2132] tty_ioctl+0x83e/0xb80 [ 60.813991][ T2132] __se_sys_ioctl+0xce/0x140 [ 60.818574][ T2132] __x64_sys_ioctl+0x43/0x50 [ 60.823158][ T2132] x64_sys_call+0x1563/0x3020 [ 60.827833][ T2132] do_syscall_64+0x12c/0x370 [ 60.832416][ T2132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.838295][ T2132] [ 60.840603][ T2132] read to 0xffff888155fb3d21 of 1 bytes by task 2132 on cpu 1: [ 60.848126][ T2132] n_tty_lookahead_flow_ctrl+0x126/0x300 [ 60.853842][ T2132] tty_port_default_lookahead_buf+0x91/0xc0 [ 60.859728][ T2132] flush_to_ldisc+0x288/0x340 [ 60.864392][ T2132] process_scheduled_works+0x4de/0x9e0 [ 60.869844][ T2132] worker_thread+0x581/0x770 [ 60.874429][ T2132] kthread+0x22a/0x280 [ 60.878490][ T2132] ret_from_fork+0x150/0x360 [ 60.883087][ T2132] ret_from_fork_asm+0x1a/0x30 [ 60.887854][ T2132] [ 60.890163][ T2132] value changed: 0x11 -> 0x86 [ 60.894817][ T2132] [ 60.897133][ T2132] Reported by Kernel Concurrency Sanitizer on: [ 60.903279][ T2132] CPU: 1 UID: 0 PID: 2132 Comm: kworker/u8:8 Tainted: G W syzkaller #0 PREEMPT(full) [ 60.914288][ T2132] Tainted: [W]=WARN [ 60.918071][ T2132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 60.928114][ T2132] Workqueue: events_unbound flush_to_ldisc [ 60.933911][ T2132] ================================================================== [ 62.360622][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!