last executing test programs: 5.909782846s ago: executing program 1 (id=563): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x601, 0x0, 0x0, {0x3, 0x0, 0x9}}, @NFT_MSG_NEWSETELEM={0x64c, 0xc, 0xa, 0x3, 0x0, 0x0, {0x8, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x60c, 0x3, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x3c, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0xfffffe00}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0xb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x800}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x7ff}]}]}]}, {0x138, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0xf4, 0x6, 0x1, 0x0, "cea06dfcdc4adf802a99498ede3e3574f08c7d913726c2595c6cd8408e51ce597d03ed3daaa30f199f5268e89c7c198df6aeaf651e2c6970fd2a1ce43ec927dd6c5cdbe12f06185b8e622f2364701b383f8b489817973973790e442634c6402d08100e989c58c4291e8ca7a48ead64e6bb16f2411ac2402594f4b3ac7a8a35e6c1d94d42efbd8263ec9691336b8c953df38bfc5201be48dd4783325199d297b2d5f9c5225e10a1ea98201697768c584c5df19fbb800b569b371a61437a6f42647f14c5d4d79691dd561d1343dae4b4a149972d55c33736ad0846feb8c0490a2b9a5c736115d27f596fb35ff5dabca5cb"}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_EXPRESSIONS={0x28, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x4}}}, {0x10, 0x1, 0x0, 0x1, @dynset={{0xb}, @void}}]}]}, {0x160, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x15c, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1a, 0x1, "18f25489ca66bbffbffb3eb7f4e2b19da988d204b1e0"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x100}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x9b}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x7}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x522}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x9}]}, @NFTA_DATA_VALUE={0x29, 0x1, "fd1c1725045448e251203afb0d0046eebf35ca107609eeb62c1a07a46e8a721659d6eaee29"}, @NFTA_DATA_VALUE={0x53, 0x1, "6e088074b5a729220baae125c369acddf6174820f05c429750f8d122203e9e1d5c03a81b7eea856f8d8473b2e514de89fc54ad00edd3be8f54b3ffeb9017a3bcc7c3b180d0db184988836c48665ad8"}]}]}, {0x1b0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x7c, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x18, 0x1, "53ad8f9687e27c64268d07e08988ede38e873116"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0xd61}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0xe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x7}]}]}, @NFTA_SET_ELEM_USERDATA={0x87, 0x6, 0x1, 0x0, "8ea43a04a4e34cc0256ddd83ef0cf19ff534ac511a8fc3efaab51b694005d188e9b2a8596fe0de2044ab364d0fbf8fcb07b9fc620fdb86690214cdc7cc9a1301f2f70185a0c42437ddecef29888ccb51de44844e25506728e9c0a2cbefdeb2cdb260ab93d2b6d7c187364bb2c7e0512cf2cc6e4644bdbd10af3bfd5e697f7f474272ef"}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x9}, @NFTA_SET_ELEM_KEY={0x70, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0xe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x7f}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x8000}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xfffffffffffffffc}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}, {0x3c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x4}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_KEY={0x20, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}, {0x144, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_KEY_END={0x124, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0xfff}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0xcb, 0x1, "7e605d2fe846c5e0e5750c86e1ee6f9ed1daeb181af67b628a71838cc60b37faa6747acded6381c1a55c194961c838e4a10bb9c626166c42ea27d978b5ad025c5d8da265f0933d6bc9a085514e2c2777e2abcda5886563015c6698f06b7598b158d849697e75c93d1aeb4673919cc6d77b0bec2bb79a1cf16eac66decba48919cfc86afa20d6a62414fa01e465376c7ed5b52bab6f35ecece57fbe32728c513d6037b4eeeb642b149fc7ab189b516752717a9cb97964efea37775911075bb4725772423595d144"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x10}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xfffffffffffffffe}]}]}]}, @NFT_MSG_DELTABLE={0x74, 0x2, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x4}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x1}}, @NFT_MSG_DELRULE={0x120, 0x8, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_USERDATA={0xeb, 0x7, 0x1, 0x0, "0d56cc733473449e39ac61422ee8f8bcc2480d87e99402975db0f8767903faab64a949d745259f55130279b528e45e006e652bcb613251766d6cc514ea83bfa320002c73a67ebea0992a2cfd5f0f5265f223df18e1338376b44bd98ce4cba640cbd52d8a9100a82fc568a559e3ad90ade074c3d2da82855df290cc1f74bc17ada52e240ea9d6fa0992329836ae37dff884976e7ffcfe0861316cb9cf24bc13f5380d06e2e9b9ad6eddd616f422eb3307ea527f6406ef68d5c7cadf05e98843d7d2ac717dd5679dfd4541145dd7336f335ba80526e5a56eacc2ec05c3c84a3c53f071a5f981ef14"}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x0, 0x0, 0x0, {0x6952f0fb02b2ffc6, 0x0, 0x8}}, @NFT_MSG_NEWTABLE={0xe4, 0x0, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_TABLE_USERDATA={0xce, 0x6, "9e053efd984a14c4cdb40464688be00892fa94c8e2b531f5a0f5b11b1e8092eb0d6583ad265d1541824d8e7ae74ca1d3af8314af98fb243ad8d5108cfe12e424613a25805a0bd76efad2479881be3709d93ff4bba3cc60e95439cb99cfbd748b72ff274d14a33798a6c837d6d747d76f878298a9b97bcc075a952796a916bbbbc134690caf55dd3eed92ac3c2e6e643ab2e5f24fd52372d6c64dd1544e57683956ce21455b2cfeedcdaaf1a7d56d0ca7bca1a3a7ceff84ee0f573a3ab704d02427875c0fea32b7189e97"}]}, @NFT_MSG_NEWRULE={0xb4, 0x6, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_RULE_EXPRESSIONS={0x94, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}, {0x20, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_NAT_REG_ADDR_MAX={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}, {0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}, {0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}, {0xc, 0x1, 0x0, 0x1, @log={{0x8}, @void}}, {0xc, 0x1, 0x0, 0x1, @log={{0x8}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x2c, 0x2, 0xa, 0x687, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0x4}]}], {0x14}}, 0xa08}, 0x1, 0x0, 0x0, 0x880}, 0x0) 5.86978863s ago: executing program 1 (id=565): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000080)='./file1\x00', 0x8, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0xfd, 0x1bf, &(0x7f0000000480)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="0c000000fe000000", @ANYRES8], 0x0) 5.681784245s ago: executing program 1 (id=570): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000079001800000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bf"], 0x0, 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@getchain={0x24, 0x66, 0x921, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xc}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f00000000c0)=0x6) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f00000001c0)=0x8) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') read$char_usb(r3, &(0x7f0000000000)=""/25, 0x19) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003580)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c710016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa73d897e3896d863081b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbd744e517e65ddab19e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f200004304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188541c300f5c1bf56705ba12d198e897186b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710f7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47cbb0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9ea410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be0a33c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06a6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c6062368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c5bed4b0d73dffb17a88aaad5921aee7dae6a2f3009d9cb434898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a64d903b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e7ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a00000000000000000000000000006a728258ca3d846a000e80d5f43109a48ddc54cec5d7f78c80e010ed02ffc0846577cafcd9e0ad83149bfb08ba7b5b431311041deb5e5d65610ad6e8d6ed55e900071b4d37d9fadb17a0407e7251866b63faccfe936980f59ceaa9d6b6863024b482023799a4f30a225b560f320e89ed44130e78f8cf000ac3c743b08d4256f282fc36162ac4b59527a3b67560313914ff6ac4ac43cd0e79d6372da631de3fde6c29de3b43d3046df23019ecadd57f175a2443928b1bcb9be16f54936796c3b928dc07c70771622cef2fafeb239a3c"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x1, 0x0, 0x4}, 0x10}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140), 0x404300, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x5, &(0x7f0000000040)=@framed={{}, [@jmp={0x6, 0x0, 0x2}, @alu={0x7, 0x0, 0x4}]}, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='rss_stat\x00', r5}, 0x10) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'bond0\x00'}) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={0x0}}, 0x0) syz_open_dev$evdev(&(0x7f0000000700), 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) 5.63010833s ago: executing program 1 (id=571): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='utf8=0,shor|name=winnt,shortname=lower,check=normal,shortname=winnt,uni_xlate=1,rodir,iocharset=cp866,\x00'], 0x1, 0x220, &(0x7f0000000240)="$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") bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x10, 0x4, &(0x7f0000001280)=ANY=[@ANYBLOB="18000000000000000000000000d15286db358b8c15857633eccf00000871102b7c0bfe79129f4ea274cfb440cf80b28451fe80936bf799757496a967a5e5ca3de62008e5812f532d2f82610836639f71b7b9f2706646d6df5d46c46dd39d1a91185deac14000bd8792bab640e9902daf1deddd10aa5f1bb60b9aefb9710c990416eec4286c9e2436b9473a8a9c32b1c1b6ddd3fe1a13e62582be641c67e94b9fd269bd6e1119578cea9629280954d23b84742aa26b9eedb3b8fc175b3114e16c20527920a520cd"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) socketpair$tipc(0x1e, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x10001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000", @ANYRES16=r1, @ANYBLOB="010b000000000000000222"], 0x14}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@migrate={0xec, 0x21, 0xd39, 0x0, 0x0, {{@in=@dev, @in=@empty}}, [@migrate={0x9c, 0x11, [{@in6=@private2, @in=@empty, @in=@remote, @in=@loopback}, {@in6=@local, @in=@private, @in=@multicast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}]}]}, 0xec}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000100)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f00000000c0), 0x12) 5.550111956s ago: executing program 1 (id=573): r0 = fsopen(&(0x7f0000000400)='pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000080)='\x00\x00\x00\x00\x00\x00\x00\xee', 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000240)='k\x04!\xcd\x8f\xe2Uk_\xae\xd5\xc3\xdf\x00\x00\x00', 0x0, r0) socket$packet(0x11, 0x3, 0x300) r1 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x24}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0x68, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x2}}, [@filter_kind_options=@f_flow={{0x9}, {0x38, 0x2, [@TCA_FLOW_ACT={0x34, 0x9, 0x0, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x68}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x2e}}}}}, 0x28}}, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000000)='\x04\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb\x9a\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000x0}) process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)=""/4096, 0x1000}], 0x1, 0x0) ptrace$getenv(0x4205, r2, 0x202, &(0x7f0000000000)) (async) socket$nl_generic(0x10, 0x3, 0x10) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) (async) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, &(0x7f0000000000), 0x4000000) (async) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000000)=0x80000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r3 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) ftruncate(r4, 0x8001) (async) ioctl$IMADDTIMER(r3, 0x80044940, &(0x7f00000001c0)) (async) getpgid(0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x0, &(0x7f0000001080), 0x1, 0x4f7, &(0x7f0000000540)="$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") (async) socket$nl_generic(0x10, 0x3, 0x10) 3.311928069s ago: executing program 2 (id=625): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="c4000000190001000000000000000000ac1414bb000000000000000000000000000000000000000000000000000000000080ffffff0100000a000000060000", @ANYRES32=0x0, @ANYRES32=0xee01], 0xc4}}, 0x0) 3.162198922s ago: executing program 2 (id=626): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 3.161596382s ago: executing program 2 (id=627): socket$nl_route(0x10, 0x3, 0x0) gettid() r0 = creat(&(0x7f0000000040)='./file0\x00', 0x1de) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x1010, r0, 0x0) syz_io_uring_setup(0x16d2, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000003c0)=@IORING_OP_RECVMSG={0xa, 0x1, 0x4, r0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@x25={0x9, @remote}, 0x80, &(0x7f0000000240)=[{&(0x7f00000008c0)=""/147, 0x93}], 0x1}, 0x0, 0x2000, 0x1, {0x0, r4}}) close(r0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x0, 0x0, 0x0) fsopen(0x0, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000000)=0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={0x0}, 0x10) open(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x9}, 0x0, 0x9, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, &(0x7f0000000100)={{0x1}}) read(r7, &(0x7f00000002c0)=""/200, 0x39) timer_getoverrun(r6) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r7, 0x54a2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000380)='./file0\x00', 0x22000011, &(0x7f0000000000)={[{@jqfmt_vfsold}, {@noblock_validity}, {@user_xattr}]}, 0x86, 0x48e, &(0x7f0000000400)="$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") 901.791447ms ago: executing program 3 (id=687): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001680)={{0x14, 0x10, 0x1, 0xe00}, [@NFT_MSG_NEWSETELEM={0x50, 0xc, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x24, 0x3, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x1c, 0xb, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x4}}}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x78}}, 0x0) 901.377506ms ago: executing program 3 (id=688): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x6d}}, {{0x6, 0x0, 0xb, 0x9, 0x0, 0x4}, {0x65, 0x0, 0x6, 0x9}}, [@printk={@ld, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x2, 0xa, 0x9}, {0x4, 0x0, 0x3, 0x9}, {}, {}, {0x15}}], {{0x5, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x2000000}}}, &(0x7f0000000040)='syzkaller\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 797.830955ms ago: executing program 3 (id=691): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='utf8=0,shor|name=winnt,shortname=lower,check=normal,shortname=winnt,uni_xlate=1,rodir,iocharset=cp866,\x00'], 0x1, 0x220, &(0x7f0000000240)="$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") bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x10, 0x4, &(0x7f0000001280)=ANY=[@ANYBLOB="18000000000000000000000000d15286db358b8c15857633eccf00000871102b7c0bfe79129f4ea274cfb440cf80b28451fe80936bf799757496a967a5e5ca3de62008e5812f532d2f82610836639f71b7b9f2706646d6df5d46c46dd39d1a91185deac14000bd8792bab640e9902daf1deddd10aa5f1bb60b9aefb9710c990416eec4286c9e2436b9473a8a9c32b1c1b6ddd3fe1a13e62582be641c67e94b9fd269bd6e1119578cea9629280954d23b84742aa26b9eedb3b8fc175b3114e16c20527920a520cd"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) socketpair$tipc(0x1e, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x10001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="010b000000000000000222"], 0x14}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000100)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f00000000c0), 0x12) 744.647039ms ago: executing program 3 (id=692): r0 = fsopen(&(0x7f0000000400)='pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000080)='\x00\x00\x00\x00\x00\x00\x00\xee', 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000240)='k\x04!\xcd\x8f\xe2Uk_\xae\xd5\xc3\xdf\x00\x00\x00', 0x0, r0) socket$packet(0x11, 0x3, 0x300) r1 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x24}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0x68, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x2}}, [@filter_kind_options=@f_flow={{0x9}, {0x38, 0x2, [@TCA_FLOW_ACT={0x34, 0x9, 0x0, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x68}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x2e}}}}}, 0x28}}, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000000)='\x04\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb\x9a\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x24}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0x68, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x2}}, [@filter_kind_options=@f_flow={{0x9}, {0x38, 0x2, [@TCA_FLOW_ACT={0x34, 0x9, 0x0, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x68}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x2e}}}}}, 0x28}}, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000000)='\x04\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb\x9a\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000x0}, &(0x7f0000000300)=0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x83, 0x39e2, 0x10000, 0x840, r1, 0x5, '\x00', r2, 0xffffffffffffffff, 0x3, 0x2, 0x3, 0x1}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r4) r5 = socket$inet6(0xa, 0x80002, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000000340), 0x0, 0x105000) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000380)) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1a10716, &(0x7f0000000780)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@mblk_io_submit}, {@grpjquota_path}, {@resuid}, {@prjquota}, {@usrjquota}, {@usrjquota}, {@min_batch_time={'min_batch_time', 0x3d, 0x100409e}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0xff, 0x46d, &(0x7f0000001bc0)="$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") write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000080)) setsockopt$sock_linger(r5, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x2c, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000003880)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x2}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @gre={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r7}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0xca90}, @IFLA_GRE_TOS={0x5}, @IFLA_GRE_TTL={0x5}]}}}]}, 0x50}}, 0x4000) socket(0x10, 0x803, 0x0) r8 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r9, 0x6, 0x9, &(0x7f0000000200)={{0xff, @local, 0x0, 0x0, 'lc\x00'}, {@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x44) r10 = fcntl$dupfd(r8, 0x0, r8) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) readv(r10, &(0x7f0000000000)=[{&(0x7f0000001140)=""/136, 0x88}], 0x1) sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x2, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 199.608514ms ago: executing program 4 (id=706): r0 = fsopen(&(0x7f0000000400)='pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000080)='\x00\x00\x00\x00\x00\x00\x00\xee', 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000240)='k\x04!\xcd\x8f\xe2Uk_\xae\xd5\xc3\xdf\x00\x00\x00', 0x0, r0) socket$packet(0x11, 0x3, 0x300) r1 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x24}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0x68, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x2}}, [@filter_kind_options=@f_flow={{0x9}, {0x38, 0x2, [@TCA_FLOW_ACT={0x34, 0x9, 0x0, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x68}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x2e}}}}}, 0x28}}, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000000)='\x04\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb\x9a\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000x0}) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x0, 0x0, r3}, 0xc) setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast1}}, 0x5c) 105.004472ms ago: executing program 2 (id=708): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000079001800000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bf"], 0x0, 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@getchain={0x24, 0x66, 0x921, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xc}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f00000000c0)=0x6) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f00000001c0)=0x8) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') read$char_usb(r3, &(0x7f0000000000)=""/25, 0x19) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003580)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x1, 0x0, 0x4}, 0x10}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140), 0x404300, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x5, &(0x7f0000000040)=@framed={{}, [@jmp={0x6, 0x0, 0x2}, @alu={0x7, 0x0, 0x4}]}, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='rss_stat\x00', r5}, 0x10) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) syz_open_dev$evdev(&(0x7f0000000700), 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) 104.019802ms ago: executing program 2 (id=709): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x5, 0x1010, r0, 0xbc508000) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x18}, 0x1, 0x0, 0x0, 0x8885}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000980), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000680)=ANY=[@ANYBLOB="94000000", @ANYBLOB="010000000000000000001d0000000c000600010000000100000074002f8008000100000000000c00020000000000000000005c0003802400038006000300a3aa0000080002000000000006000300a2aa00000600010000000000050003"], 0x94}}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), 0xffffffffffffffff) syz_io_uring_setup(0x0, &(0x7f0000000400), &(0x7f0000000000), 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c00000007000000030000000100000ff3fdffff0500003dcc00000000000205000000000000000900000003000000060000000000010004000000010000000100000081000000000000000f03000000032a08000000"], 0x0, 0x6b}, 0x20) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000001000)='./cgroup/file0\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000100)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x100}}, {@barrier_val={'barrier', 0x3d, 0xc3c}}, {@journal_async_commit}]}, 0x1, 0x4c9, &(0x7f0000000540)="$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") openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x20042, 0x1ff) close(0xffffffffffffffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000}) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b80)={r5, 0xe0, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00), 0x8, 0x0, 0x8, 0x8, &(0x7f0000000a40)}}, 0x10) write(r3, &(0x7f0000000000)='#', 0x1) 42.771257ms ago: executing program 0 (id=710): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f000000c300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a14000000020a010300000000000000000000000920000000000a010400000000000000000a0000000900010073797a310000000020000000050a0300000000000000000002000000090001"], 0x7c}}, 0x0) 42.019417ms ago: executing program 4 (id=711): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x0, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_DYNSET_SET_ID={0x8}, @NFTA_DYNSET_OP={0x8}, @NFTA_DYNSET_SREG_KEY={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x90}}, 0x0) 36.492637ms ago: executing program 4 (id=712): socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0xf87, &(0x7f0000001180)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd606410a60f51000000000000000000000000ffff64010100fe80000000000000003a0000000000aa84"], 0x0) 2.00971ms ago: executing program 0 (id=713): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="c4000000190001000000000000000000ac1414bb0000000000000000000000fcff00000000000000000000000000000000000000000100000a00000006000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000000000000000000000000000000000000000000000faffffffffffffff000000000000000000100000000000000000000000000000000000000000000000000000000000000900"], 0xc4}}, 0x0) 1.70375ms ago: executing program 2 (id=714): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001680)={{0x14, 0x10, 0x1, 0xe00}, [@NFT_MSG_NEWSETELEM={0x58, 0xc, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x2c, 0x3, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_EXPRESSIONS={0x1c, 0xb, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x4}}}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x80}}, 0x0) 1.50574ms ago: executing program 4 (id=715): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='utf8=0,shor|name=winnt,shortname=lower,check=normal,shortname=winnt,uni_xlate=1,rodir,iocharset=cp866,\x00'], 0x1, 0x220, &(0x7f0000000240)="$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") bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x10, 0x4, &(0x7f0000001280)=ANY=[@ANYBLOB="18000000000000000000000000d15286db358b8c15857633eccf00000871102b7c0bfe79129f4ea274cfb440cf80b28451fe80936bf799757496a967a5e5ca3de62008e5812f532d2f82610836639f71b7b9f2706646d6df5d46c46dd39d1a91185deac14000bd8792bab640e9902daf1deddd10aa5f1bb60b9aefb9710c990416eec4286c9e2436b9473a8a9c32b1c1b6ddd3fe1a13e62582be641c67e94b9fd269bd6e1119578cea9629280954d23b84742aa26b9eedb3b8fc175b3114e16c20527920a520cd"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) socketpair$tipc(0x1e, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x10001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="010b000000000000000222"], 0x14}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000100)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f00000000c0), 0x12) 0s ago: executing program 0 (id=716): r0 = fsopen(&(0x7f0000000400)='pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000080)='\x00\x00\x00\x00\x00\x00\x00\xee', 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000240)='k\x04!\xcd\x8f\xe2Uk_\xae\xd5\xc3\xdf\x00\x00\x00', 0x0, r0) socket$packet(0x11, 0x3, 0x300) r1 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x24}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0x68, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x2}}, [@filter_kind_options=@f_flow={{0x9}, {0x38, 0x2, [@TCA_FLOW_ACT={0x34, 0x9, 0x0, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x68}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x2e}}}}}, 0x28}}, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000000)='\x04\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb\x9a\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x00, priority 10 [ 40.149332][ T29] audit: type=1400 audit(1721872391.476:167): avc: denied { name_bind } for pid=3461 comm="syz.1.70" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 40.170854][ T29] audit: type=1400 audit(1721872391.476:168): avc: denied { node_bind } for pid=3461 comm="syz.1.70" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 40.198902][ T1497] bridge_slave_1: left allmulticast mode [ 40.207536][ T1497] bridge_slave_1: left promiscuous mode [ 40.214922][ T1497] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.237474][ T1497] bridge_slave_0: left allmulticast mode [ 40.243256][ T1497] bridge_slave_0: left promiscuous mode [ 40.249114][ T1497] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.372064][ T3474] loop3: detected capacity change from 0 to 512 [ 40.384194][ T3474] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.72: casefold flag without casefold feature [ 40.400324][ T3474] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.72: couldn't read orphan inode 15 (err -117) [ 40.413597][ T3474] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.546693][ T29] audit: type=1400 audit(1721872391.856:169): avc: denied { mount } for pid=3468 comm="syz.3.72" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 40.571249][ T29] audit: type=1400 audit(1721872391.876:170): avc: denied { create } for pid=3468 comm="syz.3.72" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 40.703196][ T29] audit: type=1400 audit(1721872392.036:171): avc: denied { unmount } for pid=3085 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 40.723253][ T3085] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.737273][ T29] audit: type=1400 audit(1721872392.076:172): avc: denied { read } for pid=3480 comm="syz.4.75" dev="nsfs" ino=4026532513 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 40.760211][ T29] audit: type=1400 audit(1721872392.076:173): avc: denied { open } for pid=3480 comm="syz.4.75" path="net:[4026532513]" dev="nsfs" ino=4026532513 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 40.783417][ T29] audit: type=1400 audit(1721872392.076:174): avc: denied { create } for pid=3480 comm="syz.4.75" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 40.829464][ T1497] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 40.856417][ T1497] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 40.871444][ T29] audit: type=1400 audit(1721872392.156:175): avc: denied { getopt } for pid=3484 comm="syz.1.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 40.891087][ T29] audit: type=1400 audit(1721872392.176:176): avc: denied { setopt } for pid=3486 comm="syz.4.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 40.931352][ T1497] bond0 (unregistering): Released all slaves [ 40.959530][ T3251] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 41.008815][ T3251] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 41.022487][ T3251] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 41.034830][ T3251] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 41.079304][ T1497] hsr_slave_0: left promiscuous mode [ 41.094754][ T1497] hsr_slave_1: left promiscuous mode [ 41.110288][ T1497] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 41.117867][ T1497] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 41.135848][ T1497] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 41.143327][ T1497] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 41.159092][ T1497] veth1_macvtap: left promiscuous mode [ 41.164681][ T1497] veth0_macvtap: left promiscuous mode [ 41.170396][ T1497] veth1_vlan: left promiscuous mode [ 41.175680][ T1497] veth0_vlan: left promiscuous mode [ 41.205435][ T3166] tipc: Node number set to 423121802 [ 41.313854][ T1497] team0 (unregistering): Port device team_slave_1 removed [ 41.332826][ T1497] team0 (unregistering): Port device team_slave_0 removed [ 41.455760][ T3251] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.472192][ T3251] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.488001][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.497053][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.550622][ T912] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.557780][ T912] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.625089][ T3251] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 41.774824][ T3251] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.967719][ T3251] veth0_vlan: entered promiscuous mode [ 41.993712][ T3251] veth1_vlan: entered promiscuous mode [ 42.029872][ T3251] veth0_macvtap: entered promiscuous mode [ 42.037772][ T3251] veth1_macvtap: entered promiscuous mode [ 42.051162][ T3251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.061835][ T3251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.072030][ T3251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.082724][ T3251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.092677][ T3251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.103446][ T3251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.113535][ T3251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.124037][ T3251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.141701][ T3251] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 42.152736][ T3251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.163864][ T3251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.173767][ T3251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.184393][ T3251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.194250][ T3251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.204729][ T3251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.214600][ T3251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.225265][ T3251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.265494][ T3251] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.283915][ T3251] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.292730][ T3251] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.301580][ T3251] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.311199][ T3251] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.669861][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 43.384687][ T3726] loop1: detected capacity change from 0 to 256 [ 43.737993][ T3750] loop3: detected capacity change from 0 to 4096 [ 43.745120][ T3750] EXT4-fs: Ignoring removed nomblk_io_submit option [ 43.777919][ T3750] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.807983][ T3757] loop1: detected capacity change from 0 to 512 [ 43.846940][ T3750] EXT4-fs error (device loop3): ext4_do_update_inode:5154: inode #15: comm syz.3.177: corrupted inode contents [ 43.867962][ T3757] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.906006][ T3757] ext4 filesystem being mounted at /51/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.915697][ T3750] EXT4-fs error (device loop3): ext4_dirty_inode:6014: inode #15: comm syz.3.177: mark_inode_dirty error [ 43.936218][ T3750] EXT4-fs error (device loop3): ext4_do_update_inode:5154: inode #15: comm syz.3.177: corrupted inode contents [ 43.959435][ T3086] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.968905][ T3750] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #15: comm syz.3.177: mark_inode_dirty error [ 43.991754][ T3750] EXT4-fs error (device loop3): ext4_do_update_inode:5154: inode #15: comm syz.3.177: corrupted inode contents [ 44.013664][ T3750] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #15: comm syz.3.177: mark_inode_dirty error [ 44.030763][ T3750] EXT4-fs error (device loop3): ext4_do_update_inode:5154: inode #15: comm syz.3.177: corrupted inode contents [ 44.043328][ T3750] EXT4-fs error (device loop3): ext4_truncate:4241: inode #15: comm syz.3.177: mark_inode_dirty error [ 44.065045][ T3750] EXT4-fs error (device loop3) in ext4_setattr:5553: Corrupt filesystem [ 44.113444][ T3085] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.193020][ T3778] loop1: detected capacity change from 0 to 256 [ 44.323869][ T3792] loop0: detected capacity change from 0 to 512 [ 44.345683][ T3792] EXT4-fs: Ignoring removed nomblk_io_submit option [ 44.416833][ T3792] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 44.425986][ T3792] EXT4-fs (loop0): fragment/cluster size (4096) != block size (1024) [ 45.005095][ T3822] loop2: detected capacity change from 0 to 1024 [ 45.028318][ T3822] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.050880][ T3822] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.232194][ T3842] netlink: 67 bytes leftover after parsing attributes in process `syz.0.217'. [ 45.241231][ T3842] IPv6: NLM_F_CREATE should be specified when creating new route [ 45.331009][ T3842] IPv6: Can't replace route, no match found [ 45.399136][ T29] kauditd_printk_skb: 36 callbacks suppressed [ 45.399200][ T29] audit: type=1400 audit(1721872396.726:213): avc: denied { prog_load } for pid=3819 comm="syz.2.207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 45.424297][ T29] audit: type=1400 audit(1721872396.726:214): avc: denied { bpf } for pid=3819 comm="syz.2.207" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 45.445445][ T29] audit: type=1400 audit(1721872396.726:215): avc: denied { perfmon } for pid=3819 comm="syz.2.207" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 45.621832][ T29] audit: type=1400 audit(1721872396.816:216): avc: denied { append } for pid=2771 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 45.644884][ T29] audit: type=1400 audit(1721872396.956:217): avc: denied { read write } for pid=3091 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 45.653546][ T3852] Zero length message leads to an empty skb [ 45.669134][ T29] audit: type=1400 audit(1721872396.956:218): avc: denied { open } for pid=3091 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 45.699393][ T29] audit: type=1400 audit(1721872396.956:219): avc: denied { ioctl } for pid=3091 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 45.728230][ T29] audit: type=1400 audit(1721872397.006:220): avc: denied { open } for pid=3851 comm="syz.3.221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 45.748010][ T29] audit: type=1400 audit(1721872397.006:221): avc: denied { kernel } for pid=3851 comm="syz.3.221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 45.767346][ T29] audit: type=1400 audit(1721872397.036:222): avc: denied { create } for pid=3855 comm="syz.0.222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 45.891438][ T3251] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.934401][ T3872] netlink: 4 bytes leftover after parsing attributes in process `syz.3.230'. [ 45.954097][ T3872] netlink: 12 bytes leftover after parsing attributes in process `syz.3.230'. [ 46.025976][ T3886] netlink: 28 bytes leftover after parsing attributes in process `syz.1.235'. [ 46.076745][ T3890] syz.3.237 uses obsolete (PF_INET,SOCK_PACKET) [ 46.102062][ T3890] syzkaller1: entered promiscuous mode [ 46.107750][ T3890] syzkaller1: entered allmulticast mode [ 46.187101][ T3907] netlink: 4 bytes leftover after parsing attributes in process `syz.2.244'. [ 46.217141][ T3910] loop1: detected capacity change from 0 to 512 [ 46.223776][ T3910] ======================================================= [ 46.223776][ T3910] WARNING: The mand mount option has been deprecated and [ 46.223776][ T3910] and is ignored by this kernel. Remove the mand [ 46.223776][ T3910] option from the mount to silence this warning. [ 46.223776][ T3910] ======================================================= [ 46.266150][ T3910] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 46.279540][ T3910] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002] [ 46.294859][ T3910] System zones: 1-12 [ 46.294956][ T3907] netlink: 12 bytes leftover after parsing attributes in process `syz.2.244'. [ 46.299085][ T3910] EXT4-fs (loop1): orphan cleanup on readonly fs [ 46.314306][ T3910] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.242: bg 0: block 361: padding at end of block bitmap is not set [ 46.335402][ T3910] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 46.342596][ T3916] loop3: detected capacity change from 0 to 4096 [ 46.361901][ T3910] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #11: comm syz.1.242: attempt to clear invalid blocks 33619980 len 1 [ 46.389053][ T3910] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.242: invalid indirect mapped block 1811939328 (level 0) [ 46.422285][ T3916] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.459525][ T3928] unsupported nla_type 28682 [ 46.482056][ T3937] netlink: 4 bytes leftover after parsing attributes in process `syz.2.255'. [ 46.490688][ T3910] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.242: invalid indirect mapped block 2 (level 2) [ 46.492690][ T3937] netlink: 12 bytes leftover after parsing attributes in process `syz.2.255'. [ 46.532890][ T3910] EXT4-fs (loop1): 1 truncate cleaned up [ 46.542330][ T3910] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 46.548846][ T3941] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 46.575153][ T3944] netlink: 4 bytes leftover after parsing attributes in process `syz.2.258'. [ 46.586948][ T3944] netlink: 12 bytes leftover after parsing attributes in process `syz.2.258'. [ 46.602587][ T3946] loop4: detected capacity change from 0 to 1768 [ 46.697497][ T3899] veth0_vlan: left promiscuous mode [ 46.703197][ T3899] veth0_vlan: entered promiscuous mode [ 46.740990][ T3086] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 46.780820][ T3957] ip6_tunnel: non-ECT from fe80:0040:0000:0000:0000:0000:0000:00aa with DS=0xe [ 46.848153][ T3965] xt_limit: Overflow, try lower: 262144/524288 [ 46.943062][ T3981] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 47.024803][ T3989] loop1: detected capacity change from 0 to 128 [ 47.063113][ T3993] loop0: detected capacity change from 0 to 256 [ 47.110251][ T3989] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 47.128777][ T3989] ext4 filesystem being mounted at /68/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.140772][ T3085] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.204172][ T4006] xt_connbytes: Forcing CT accounting to be enabled [ 47.211394][ T4006] Cannot find add_set index 0 as target [ 47.211836][ T3086] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 47.328946][ T4025] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 47.363269][ T4030] macvlan0: entered allmulticast mode [ 47.368765][ T4030] veth1_vlan: entered allmulticast mode [ 47.387150][ T4036] netlink: 'syz.0.293': attribute type 29 has an invalid length. [ 47.396960][ T4036] netlink: 'syz.0.293': attribute type 29 has an invalid length. [ 47.479027][ T4045] loop4: detected capacity change from 0 to 1024 [ 47.489319][ T4045] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.595015][ T4052] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 47.619294][ T4054] loop0: detected capacity change from 0 to 256 [ 47.813608][ T4066] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.820899][ T4066] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.007138][ T4083] loop0: detected capacity change from 0 to 512 [ 48.014099][ T4083] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 48.027263][ T4083] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 48.039196][ T4083] EXT4-fs (loop0): 1 truncate cleaned up [ 48.045243][ T4083] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.090361][ T3091] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.126552][ T4090] loop0: detected capacity change from 0 to 512 [ 48.140441][ T4090] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.153312][ T4090] ext4 filesystem being mounted at /73/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.166221][ T4090] EXT4-fs error (device loop0): ext4_add_entry:2435: inode #2: comm syz.0.312: Directory hole found for htree leaf block 0 [ 48.182888][ T4090] EXT4-fs error (device loop0): ext4_add_entry:2435: inode #2: comm syz.0.312: Directory hole found for htree leaf block 0 [ 48.211559][ T3091] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.242452][ T4099] pim6reg: entered allmulticast mode [ 48.249760][ T4100] loop0: detected capacity change from 0 to 256 [ 48.306940][ T4099] Dead loop on virtual device ip6_vti0, fix it urgently! [ 48.320987][ T3088] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.349386][ T4108] loop3: detected capacity change from 0 to 128 [ 48.378756][ T4108] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 48.399401][ T4108] vhci_hcd: invalid port number 219 [ 48.404656][ T4108] vhci_hcd: default hub control req: ecdb v6ab1 i00db l1556 [ 48.668236][ T4132] syzkaller1: entered promiscuous mode [ 48.674034][ T4132] syzkaller1: entered allmulticast mode [ 49.009046][ T4149] loop2: detected capacity change from 0 to 256 [ 49.063881][ T4151] loop3: detected capacity change from 0 to 512 [ 49.082390][ T4151] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.125957][ T4151] ext4 filesystem being mounted at /80/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.146349][ T4151] smc: net device wg0 applied user defined pnetid SYZ0 [ 49.181753][ T3085] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.333623][ T4175] xt_limit: Overflow, try lower: 262144/524288 [ 49.406974][ T4182] loop1: detected capacity change from 0 to 512 [ 49.477626][ T4184] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 49.530292][ T4196] loop0: detected capacity change from 0 to 256 [ 49.577710][ T4191] loop4: detected capacity change from 0 to 8192 [ 49.606379][ T4191] loop4: p1 < > p2 p3 p4 < p5 > [ 49.619167][ T4191] loop4: p3 size 16744448 extends beyond EOD, truncated [ 49.629929][ T4200] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 49.817484][ T4224] macvlan0: entered allmulticast mode [ 49.822934][ T4224] veth1_vlan: entered allmulticast mode [ 49.871401][ T4231] netlink: 'syz.4.361': attribute type 29 has an invalid length. [ 49.886811][ T4233] FAULT_INJECTION: forcing a failure. [ 49.886811][ T4233] name failslab, interval 1, probability 0, space 0, times 1 [ 49.893753][ T4231] netlink: 'syz.4.361': attribute type 29 has an invalid length. [ 49.899715][ T4233] CPU: 1 UID: 0 PID: 4233 Comm: syz.0.362 Not tainted 6.10.0-syzkaller-12261-gd1e9a63dcd72 #0 [ 49.899751][ T4233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 49.899772][ T4233] Call Trace: [ 49.899781][ T4233] [ 49.899791][ T4233] dump_stack_lvl+0xf2/0x150 [ 49.938668][ T4233] dump_stack+0x15/0x20 [ 49.942943][ T4233] should_fail_ex+0x229/0x230 [ 49.947929][ T4233] ? skb_clone+0x154/0x1f0 [ 49.952524][ T4233] should_failslab+0x8f/0xb0 [ 49.957299][ T4233] kmem_cache_alloc_noprof+0x4c/0x290 [ 49.962884][ T4233] skb_clone+0x154/0x1f0 [ 49.967283][ T4233] __netlink_deliver_tap+0x2bd/0x4c0 [ 49.972630][ T4233] netlink_unicast+0x641/0x670 [ 49.977445][ T4233] netlink_sendmsg+0x5cc/0x6e0 [ 49.982652][ T4233] ? __pfx_netlink_sendmsg+0x10/0x10 [ 49.988693][ T4233] __sock_sendmsg+0x140/0x180 [ 49.993418][ T4233] ____sys_sendmsg+0x312/0x410 [ 49.998320][ T4233] __sys_sendmsg+0x1e9/0x280 [ 50.003060][ T4233] __x64_sys_sendmsg+0x46/0x50 [ 50.007988][ T4233] x64_sys_call+0x26f8/0x2e00 [ 50.012704][ T4233] do_syscall_64+0xc9/0x1c0 [ 50.017277][ T4233] ? clear_bhb_loop+0x55/0xb0 [ 50.021994][ T4233] ? clear_bhb_loop+0x55/0xb0 [ 50.026755][ T4233] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.032728][ T4233] RIP: 0033:0x7ff52d535f19 [ 50.037215][ T4233] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 50.056997][ T4233] RSP: 002b:00007ff52c1b7048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 50.065555][ T4233] RAX: ffffffffffffffda RBX: 00007ff52d6c5f60 RCX: 00007ff52d535f19 [ 50.073560][ T4233] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 50.081740][ T4233] RBP: 00007ff52c1b70a0 R08: 0000000000000000 R09: 0000000000000000 [ 50.090005][ T4233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 50.098714][ T4233] R13: 000000000000000b R14: 00007ff52d6c5f60 R15: 00007ffc9779d4b8 [ 50.106717][ T4233] [ 50.138387][ T4237] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.191677][ T4237] bridge_slave_0 (unregistering): left allmulticast mode [ 50.198973][ T4237] bridge_slave_0 (unregistering): left promiscuous mode [ 50.206450][ T4237] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.441962][ T29] kauditd_printk_skb: 167 callbacks suppressed [ 50.441980][ T29] audit: type=1400 audit(1721872401.776:390): avc: denied { setattr } for pid=4251 comm="syz.4.368" name="UDPLITEv6" dev="sockfs" ino=7507 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 50.497591][ T29] audit: type=1400 audit(1721872401.786:391): avc: denied { create } for pid=4251 comm="syz.4.368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 50.593975][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.633133][ T4271] loop1: detected capacity change from 0 to 512 [ 50.645888][ T4271] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 50.664778][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.686270][ T4271] EXT4-fs (loop1): 1 truncate cleaned up [ 50.697587][ T4276] loop2: detected capacity change from 0 to 256 [ 50.707476][ T4271] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.731596][ T4276] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 50.779723][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.791497][ T29] audit: type=1400 audit(1721872402.126:392): avc: denied { mounton } for pid=4275 comm="syz.2.375" path="/37/file0/bus" dev="loop2" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 50.871542][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.908051][ T4249] chnl_net:caif_netlink_parms(): no params data found [ 50.921097][ T3086] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.951590][ T29] audit: type=1400 audit(1721872402.286:393): avc: denied { read } for pid=4290 comm="syz.3.379" path="socket:[6686]" dev="sockfs" ino=6686 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 51.073669][ T4249] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.081466][ T4249] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.102025][ T29] audit: type=1400 audit(1721872402.386:394): avc: denied { read } for pid=2827 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 51.150283][ T4249] bridge_slave_0: entered allmulticast mode [ 51.159969][ T4249] bridge_slave_0: entered promiscuous mode [ 51.167203][ T29] audit: type=1400 audit(1721872402.476:395): avc: denied { name_connect } for pid=4301 comm="syz.1.381" dest=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 51.199686][ T4249] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.208572][ T4249] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.228831][ T4312] __nla_validate_parse: 29 callbacks suppressed [ 51.228861][ T4312] netlink: 12 bytes leftover after parsing attributes in process `syz.4.385'. [ 51.229998][ T4249] bridge_slave_1: entered allmulticast mode [ 51.262437][ T4310] loop3: detected capacity change from 0 to 512 [ 51.274875][ T4249] bridge_slave_1: entered promiscuous mode [ 51.285235][ T29] audit: type=1400 audit(1721872402.616:396): avc: denied { search } for pid=2827 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 51.308909][ T4310] EXT4-fs error (device loop3): ext4_quota_enable:7018: comm syz.3.384: Bad quota inum: 1, type: 2 [ 51.347788][ T4310] EXT4-fs warning (device loop3): ext4_enable_quotas:7066: Failed to enable quota tracking (type=2, err=-117, ino=1). Please run e2fsck to fix. [ 51.370397][ T29] audit: type=1400 audit(1721872402.656:397): avc: denied { read } for pid=2827 comm="dhcpcd" name="n25" dev="tmpfs" ino=2074 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 51.392075][ T29] audit: type=1400 audit(1721872402.656:398): avc: denied { open } for pid=2827 comm="dhcpcd" path="/run/udev/data/n25" dev="tmpfs" ino=2074 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 51.415066][ T29] audit: type=1400 audit(1721872402.656:399): avc: denied { getattr } for pid=2827 comm="dhcpcd" path="/run/udev/data/n25" dev="tmpfs" ino=2074 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 51.446209][ T4310] EXT4-fs (loop3): mount failed [ 51.572096][ T4345] netlink: 12 bytes leftover after parsing attributes in process `syz.1.392'. [ 51.798415][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 51.809361][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 51.820390][ T11] bond0 (unregistering): Released all slaves [ 51.835066][ T4333] syzkaller1: entered promiscuous mode [ 51.843026][ T4333] syzkaller1: entered allmulticast mode [ 51.851047][ T4342] netlink: 36 bytes leftover after parsing attributes in process `syz.4.391'. [ 51.861709][ T4355] netlink: 4 bytes leftover after parsing attributes in process `syz.3.395'. [ 51.895078][ T4361] netlink: 12 bytes leftover after parsing attributes in process `syz.3.395'. [ 51.922736][ T4249] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.940072][ T4249] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.980238][ T4249] team0: Port device team_slave_0 added [ 51.998401][ T4249] team0: Port device team_slave_1 added [ 52.024825][ T11] hsr_slave_0: left promiscuous mode [ 52.047937][ T4388] xt_limit: Overflow, try lower: 262144/524288 [ 52.061153][ T11] hsr_slave_1: left promiscuous mode [ 52.082372][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 52.083286][ T4393] loop2: detected capacity change from 0 to 128 [ 52.089871][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 52.110866][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 52.118422][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 52.134383][ T4393] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 52.161432][ T11] veth1_macvtap: left promiscuous mode [ 52.167197][ T11] veth0_macvtap: left promiscuous mode [ 52.173093][ T11] veth1_vlan: left allmulticast mode [ 52.178479][ T11] veth1_vlan: left promiscuous mode [ 52.183814][ T11] veth0_vlan: left promiscuous mode [ 52.204135][ T4393] ext4 filesystem being mounted at /41/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 52.234570][ T4416] netlink: 36 bytes leftover after parsing attributes in process `syz.4.411'. [ 52.456216][ T11] macvlan0 (unregistering): left allmulticast mode [ 52.460251][ T4433] loop3: detected capacity change from 0 to 512 [ 52.476717][ T4435] netlink: 8 bytes leftover after parsing attributes in process `syz.4.416'. [ 52.476748][ T3251] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 52.487633][ T4433] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 52.515450][ T4433] EXT4-fs (loop3): 1 truncate cleaned up [ 52.534505][ T4433] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.537053][ T11] team0 (unregistering): Port device team_slave_1 removed [ 52.566409][ T11] team0 (unregistering): Port device team_slave_0 removed [ 52.598511][ T4433] netlink: 8 bytes leftover after parsing attributes in process `syz.3.415'. [ 52.620303][ T4439] netlink: 'syz.2.417': attribute type 29 has an invalid length. [ 52.630936][ T4441] netlink: 'syz.2.417': attribute type 29 has an invalid length. [ 52.641796][ T4439] netlink: 500 bytes leftover after parsing attributes in process `syz.2.417'. [ 52.661671][ T3085] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.673701][ T4249] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.682084][ T4249] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.713439][ T4249] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.729646][ T4445] FAULT_INJECTION: forcing a failure. [ 52.729646][ T4445] name failslab, interval 1, probability 0, space 0, times 0 [ 52.733218][ T4249] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.743454][ T4445] CPU: 0 UID: 0 PID: 4445 Comm: syz.2.419 Not tainted 6.10.0-syzkaller-12261-gd1e9a63dcd72 #0 [ 52.750436][ T4249] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.760552][ T4445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 52.760570][ T4445] Call Trace: [ 52.760579][ T4445] [ 52.760587][ T4445] dump_stack_lvl+0xf2/0x150 [ 52.790775][ T4249] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.802090][ T4445] dump_stack+0x15/0x20 [ 52.802125][ T4445] should_fail_ex+0x229/0x230 [ 52.802234][ T4445] ? skb_clone+0x154/0x1f0 [ 52.842643][ T4445] should_failslab+0x8f/0xb0 [ 52.847375][ T4445] kmem_cache_alloc_noprof+0x4c/0x290 [ 52.852909][ T4445] skb_clone+0x154/0x1f0 [ 52.857260][ T4445] nfnetlink_rcv+0x2de/0x15b0 [ 52.861987][ T4445] ? kmem_cache_free+0xd8/0x280 [ 52.866875][ T4445] ? nlmon_xmit+0x51/0x60 [ 52.871283][ T4445] ? __kfree_skb+0x102/0x150 [ 52.875966][ T4445] ? consume_skb+0x57/0x180 [ 52.881951][ T4445] ? nlmon_xmit+0x51/0x60 [ 52.889109][ T4445] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 52.896193][ T4445] ? __dev_queue_xmit+0xb86/0x1fe0 [ 52.901381][ T4445] ? ref_tracker_free+0x3a5/0x410 [ 52.906481][ T4445] ? __dev_queue_xmit+0x161/0x1fe0 [ 52.911647][ T4445] netlink_unicast+0x593/0x670 [ 52.916446][ T4445] netlink_sendmsg+0x5cc/0x6e0 [ 52.921257][ T4445] ? __pfx_netlink_sendmsg+0x10/0x10 [ 52.926615][ T4445] __sock_sendmsg+0x140/0x180 [ 52.931419][ T4445] ____sys_sendmsg+0x312/0x410 [ 52.936273][ T4445] __sys_sendmsg+0x1e9/0x280 [ 52.940943][ T4445] __x64_sys_sendmsg+0x46/0x50 [ 52.945922][ T4445] x64_sys_call+0x26f8/0x2e00 [ 52.950666][ T4445] do_syscall_64+0xc9/0x1c0 [ 52.955196][ T4445] ? clear_bhb_loop+0x55/0xb0 [ 52.959893][ T4445] ? clear_bhb_loop+0x55/0xb0 [ 52.964610][ T4445] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.970567][ T4445] RIP: 0033:0x7f9269325f19 [ 52.975178][ T4445] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 53.000205][ T4445] RSP: 002b:00007f9267fa7048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 53.010020][ T4445] RAX: ffffffffffffffda RBX: 00007f92694b5f60 RCX: 00007f9269325f19 [ 53.019211][ T4445] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 53.028441][ T4445] RBP: 00007f9267fa70a0 R08: 0000000000000000 R09: 0000000000000000 [ 53.038373][ T4445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 53.048377][ T4445] R13: 000000000000000b R14: 00007f92694b5f60 R15: 00007fff681cc058 [ 53.058140][ T4445] [ 53.100140][ T4249] hsr_slave_0: entered promiscuous mode [ 53.109762][ T4249] hsr_slave_1: entered promiscuous mode [ 53.125557][ T4249] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.139016][ T4249] Cannot create hsr debugfs directory [ 53.200772][ T4484] loop2: detected capacity change from 0 to 1024 [ 53.251767][ T4484] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.265665][ T4484] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.305041][ T4484] autofs4:pid:4484:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1000000.1), cmd(0xc018937e) [ 53.319874][ T4484] autofs4:pid:4484:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc018937e) [ 53.372415][ T3251] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.493722][ T4518] loop2: detected capacity change from 0 to 256 [ 53.578851][ T4527] loop4: detected capacity change from 0 to 512 [ 53.601178][ T4527] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.611041][ T4249] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 53.614860][ T4527] ext4 filesystem being mounted at /103/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.633958][ T4249] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 53.642666][ T4527] EXT4-fs error (device loop4): ext4_add_entry:2435: inode #2: comm syz.4.435: Directory hole found for htree leaf block 0 [ 53.657885][ T4249] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 53.660275][ T4527] EXT4-fs error (device loop4): ext4_do_update_inode:5154: inode #2: comm syz.4.435: corrupted inode contents [ 53.677012][ T4527] EXT4-fs error (device loop4): ext4_dirty_inode:6014: inode #2: comm syz.4.435: mark_inode_dirty error [ 53.690109][ T4527] EXT4-fs error (device loop4): ext4_do_update_inode:5154: inode #2: comm syz.4.435: corrupted inode contents [ 53.692303][ T4249] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 53.711173][ T4527] EXT4-fs error (device loop4): ext4_add_entry:2435: inode #2: comm syz.4.435: Directory hole found for htree leaf block 0 [ 53.738990][ T3088] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.849629][ T4546] netlink: 28 bytes leftover after parsing attributes in process `syz.2.440'. [ 53.981292][ T4249] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.003614][ T4565] loop4: detected capacity change from 0 to 512 [ 54.017385][ T4249] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.043595][ T4574] loop2: detected capacity change from 0 to 256 [ 54.050568][ T3165] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.057694][ T3165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.075526][ T4565] EXT4-fs error (device loop4): ext4_quota_enable:7018: comm syz.4.445: Bad quota inum: 1, type: 2 [ 54.088978][ T4568] erspan1: entered allmulticast mode [ 54.115252][ T3165] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.122491][ T3165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.141586][ T4249] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 54.142150][ T4565] EXT4-fs warning (device loop4): ext4_enable_quotas:7066: Failed to enable quota tracking (type=2, err=-117, ino=1). Please run e2fsck to fix. [ 54.152508][ T4249] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.211668][ T4565] EXT4-fs (loop4): mount failed [ 54.368359][ T4249] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.552525][ T4643] loop4: detected capacity change from 0 to 256 [ 54.582770][ T4644] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: invalid value (0) [ 54.595102][ T4644] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: allowed values 1 - 65535 [ 54.632665][ T4249] veth0_vlan: entered promiscuous mode [ 54.658218][ T4249] veth1_vlan: entered promiscuous mode [ 54.690012][ T4249] veth0_macvtap: entered promiscuous mode [ 54.707922][ T4656] syzkaller1: entered promiscuous mode [ 54.713550][ T4656] syzkaller1: entered allmulticast mode [ 54.731738][ T4249] veth1_macvtap: entered promiscuous mode [ 54.772716][ T4249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.783377][ T4249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.796253][ T4249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.808559][ T4249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.818623][ T4249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.829225][ T4249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.839225][ T4249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.849940][ T4249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.869301][ T4249] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.879070][ T4249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.889697][ T4249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.899652][ T4249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.900612][ T4675] xt_TPROXY: Can be used only with -p tcp or -p udp [ 54.910169][ T4249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.910186][ T4249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.947742][ T4249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.961337][ T4249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.973494][ T4249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.003890][ T4249] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.015083][ T4249] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.023862][ T4249] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.032721][ T4249] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.042607][ T4249] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.072408][ T4684] xt_limit: Overflow, try lower: 262144/524288 [ 55.088599][ T4687] netlink: 'syz.3.471': attribute type 9 has an invalid length. [ 55.096696][ T4687] netlink: 'syz.3.471': attribute type 6 has an invalid length. [ 55.107896][ T4689] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 55.260007][ T4712] loop1: detected capacity change from 0 to 256 [ 55.413653][ T4723] FAULT_INJECTION: forcing a failure. [ 55.413653][ T4723] name failslab, interval 1, probability 0, space 0, times 0 [ 55.427457][ T4723] CPU: 1 UID: 0 PID: 4723 Comm: syz.4.481 Not tainted 6.10.0-syzkaller-12261-gd1e9a63dcd72 #0 [ 55.438532][ T4723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 55.449070][ T4723] Call Trace: [ 55.452534][ T4723] [ 55.455497][ T4723] dump_stack_lvl+0xf2/0x150 [ 55.460215][ T4723] dump_stack+0x15/0x20 [ 55.464398][ T4723] should_fail_ex+0x229/0x230 [ 55.469138][ T4723] ? skb_clone+0x154/0x1f0 [ 55.473756][ T4723] should_failslab+0x8f/0xb0 [ 55.478475][ T4723] kmem_cache_alloc_noprof+0x4c/0x290 [ 55.483906][ T4723] skb_clone+0x154/0x1f0 [ 55.488293][ T4723] nfnetlink_rcv+0x2de/0x15b0 [ 55.493010][ T4723] ? kmem_cache_free+0xd8/0x280 [ 55.498696][ T4723] ? nlmon_xmit+0x51/0x60 [ 55.503340][ T4723] ? __kfree_skb+0x102/0x150 [ 55.507987][ T4723] ? consume_skb+0x57/0x180 [ 55.512601][ T4723] ? nlmon_xmit+0x51/0x60 [ 55.517587][ T4723] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 55.524309][ T4723] ? __dev_queue_xmit+0xb86/0x1fe0 [ 55.529503][ T4723] ? ref_tracker_free+0x3a5/0x410 [ 55.534624][ T4723] ? __dev_queue_xmit+0x161/0x1fe0 [ 55.539864][ T4723] netlink_unicast+0x593/0x670 [ 55.547142][ T4723] netlink_sendmsg+0x5cc/0x6e0 [ 55.552067][ T4723] ? __pfx_netlink_sendmsg+0x10/0x10 [ 55.558610][ T4723] __sock_sendmsg+0x140/0x180 [ 55.565705][ T4723] ____sys_sendmsg+0x312/0x410 [ 55.571830][ T4723] __sys_sendmsg+0x1e9/0x280 [ 55.576518][ T4723] __x64_sys_sendmsg+0x46/0x50 [ 55.582180][ T4723] x64_sys_call+0x26f8/0x2e00 [ 55.586969][ T4723] do_syscall_64+0xc9/0x1c0 [ 55.591504][ T4723] ? clear_bhb_loop+0x55/0xb0 [ 55.596209][ T4723] ? clear_bhb_loop+0x55/0xb0 [ 55.600995][ T4723] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.607158][ T4723] RIP: 0033:0x7f1686b75f19 [ 55.612231][ T4723] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 55.633726][ T4723] RSP: 002b:00007f16857f7048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 55.642827][ T4723] RAX: ffffffffffffffda RBX: 00007f1686d05f60 RCX: 00007f1686b75f19 [ 55.650929][ T4723] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 55.658930][ T4723] RBP: 00007f16857f70a0 R08: 0000000000000000 R09: 0000000000000000 [ 55.666996][ T4723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 55.675077][ T4723] R13: 000000000000000b R14: 00007f1686d05f60 R15: 00007ffeb0311018 [ 55.683163][ T4723] [ 55.729460][ T4727] netlink: 'syz.0.484': attribute type 1 has an invalid length. [ 55.737885][ T4727] NCSI netlink: No device for ifindex 131092 [ 55.759891][ T29] kauditd_printk_skb: 53 callbacks suppressed [ 55.759907][ T29] audit: type=1400 audit(1721872407.086:453): avc: denied { mount } for pid=4725 comm="syz.0.484" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 55.788361][ T29] audit: type=1400 audit(1721872407.086:454): avc: denied { unmount } for pid=4725 comm="syz.0.484" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 55.813678][ T4727] wireguard0: entered promiscuous mode [ 55.819580][ T4727] wireguard0: entered allmulticast mode [ 55.989017][ T4758] loop3: detected capacity change from 0 to 512 [ 56.011508][ T4760] loop0: detected capacity change from 0 to 128 [ 56.027933][ T4763] loop2: detected capacity change from 0 to 256 [ 56.030504][ T4758] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.054501][ T4758] ext4 filesystem being mounted at /109/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.054526][ T4760] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 56.073942][ T4755] veth3: entered promiscuous mode [ 56.084732][ T4755] veth3: entered allmulticast mode [ 56.090571][ T4755] bridge2: port 1(veth3) entered blocking state [ 56.097090][ T4755] bridge2: port 1(veth3) entered disabled state [ 56.099717][ T4758] EXT4-fs error (device loop3): ext4_add_entry:2435: inode #2: comm syz.3.493: Directory hole found for htree leaf block 0 [ 56.108935][ T4760] ext4 filesystem being mounted at /5/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 56.172795][ T4771] EXT4-fs error (device loop3): ext4_do_update_inode:5154: inode #2: comm syz.3.493: corrupted inode contents [ 56.191977][ T4771] EXT4-fs error (device loop3): ext4_dirty_inode:6014: inode #2: comm syz.3.493: mark_inode_dirty error [ 56.235528][ T4771] EXT4-fs error (device loop3): ext4_do_update_inode:5154: inode #2: comm syz.3.493: corrupted inode contents [ 56.247884][ T4249] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 56.259501][ T4758] EXT4-fs error (device loop3): ext4_add_entry:2435: inode #2: comm syz.3.493: Directory hole found for htree leaf block 0 [ 56.259533][ T29] audit: type=1400 audit(1721872407.586:455): avc: denied { watch watch_reads } for pid=4776 comm="syz.1.499" path="/116" dev="tmpfs" ino=612 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 56.298345][ T4781] __nla_validate_parse: 12 callbacks suppressed [ 56.298366][ T4781] netlink: 28 bytes leftover after parsing attributes in process `syz.4.500'. [ 56.322664][ T3085] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.391169][ T29] audit: type=1400 audit(1721872407.726:456): avc: denied { checkpoint_restore } for pid=4776 comm="syz.1.499" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 56.409844][ T4802] netlink: 12 bytes leftover after parsing attributes in process `syz.4.506'. [ 56.427744][ T29] audit: type=1400 audit(1721872407.726:457): avc: denied { create } for pid=4787 comm="syz.2.504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 56.487010][ T4809] macvlan0: entered promiscuous mode [ 56.492895][ T29] audit: type=1400 audit(1721872407.766:458): avc: denied { ioctl } for pid=4787 comm="syz.2.504" path="/dev/virtual_nci" dev="devtmpfs" ino=108 ioctlcmd=0x0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 56.517507][ T29] audit: type=1400 audit(1721872407.766:459): avc: denied { bind } for pid=4787 comm="syz.2.504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 56.552915][ T4809] ipvlan0: entered promiscuous mode [ 56.557615][ T4779] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 56.567569][ T4809] ipvlan0: left promiscuous mode [ 56.581878][ T4811] loop0: detected capacity change from 0 to 512 [ 56.588947][ T29] audit: type=1400 audit(1721872407.886:460): avc: denied { bind } for pid=4776 comm="syz.1.499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 56.595077][ T4777] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 56.622771][ T4809] macvlan0: left promiscuous mode [ 56.634401][ T4811] EXT4-fs error (device loop0): ext4_quota_enable:7018: comm syz.0.509: Bad quota inum: 1, type: 2 [ 56.657148][ T4811] EXT4-fs warning (device loop0): ext4_enable_quotas:7066: Failed to enable quota tracking (type=2, err=-117, ino=1). Please run e2fsck to fix. [ 56.685228][ T4811] EXT4-fs (loop0): mount failed [ 56.835984][ T29] audit: type=1400 audit(1721872408.126:461): avc: denied { write } for pid=4831 comm="syz.3.517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 56.855777][ T29] audit: type=1400 audit(1721872408.126:462): avc: denied { connect } for pid=4831 comm="syz.3.517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 56.915223][ T4847] loop2: detected capacity change from 0 to 512 [ 56.925110][ T4848] netlink: 4 bytes leftover after parsing attributes in process `syz.0.520'. [ 56.935813][ T4847] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 56.973235][ T4847] EXT4-fs (loop2): 1 truncate cleaned up [ 56.991902][ T4847] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.046301][ T4843] loop4: detected capacity change from 0 to 512 [ 57.067714][ T4843] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 57.075823][ T4843] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002] [ 57.084220][ T4843] EXT4-fs (loop4): orphan cleanup on readonly fs [ 57.092666][ T4843] EXT4-fs warning (device loop4): ext4_block_to_path:107: block 3279949761 > max in inode 13 [ 57.104447][ T4843] EXT4-fs warning (device loop4): ext4_block_to_path:107: block 3279949762 > max in inode 13 [ 57.114841][ T4843] EXT4-fs (loop4): 1 truncate cleaned up [ 57.120975][ T4843] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 57.137691][ T4856] netlink: 8 bytes leftover after parsing attributes in process `syz.1.523'. [ 57.138073][ T4843] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.151177][ T4856] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: invalid value (0) [ 57.171941][ T4856] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: allowed values 1 - 65535 [ 57.337291][ T4867] loop4: detected capacity change from 0 to 256 [ 57.381735][ T3251] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.385862][ T4870] loop3: detected capacity change from 0 to 256 [ 57.405971][ T4870] vfat: Unknown parameter 'shor|name' [ 57.423624][ T4875] loop2: detected capacity change from 0 to 512 [ 57.439279][ T4875] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.528: bad orphan inode 17 [ 57.462039][ T4875] ext4_test_bit(bit=16, block=4) = 1 [ 57.467590][ T4875] is_bad_inode(inode)=0 [ 57.471978][ T4875] NEXT_ORPHAN(inode)=0 [ 57.476286][ T4875] max_ino=32 [ 57.479495][ T4875] i_nlink=1 [ 57.484464][ T4875] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.520895][ T4875] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.528: bg 0: block 7: invalid block bitmap [ 57.608854][ T4891] netlink: 'syz.4.533': attribute type 29 has an invalid length. [ 57.609561][ T4892] loop3: detected capacity change from 0 to 164 [ 57.635694][ T4892] iso9660: Unknown parameter 'dmvde' [ 57.642880][ T3251] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.667750][ T4891] netlink: 'syz.4.533': attribute type 29 has an invalid length. [ 57.685716][ T4891] netlink: 500 bytes leftover after parsing attributes in process `syz.4.533'. [ 57.800747][ T4896] loop2: detected capacity change from 0 to 512 [ 57.829489][ T4896] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 57.837755][ T4896] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002] [ 57.845933][ T4896] EXT4-fs (loop2): orphan cleanup on readonly fs [ 57.853285][ T4896] EXT4-fs warning (device loop2): ext4_block_to_path:107: block 3279949761 > max in inode 13 [ 57.863638][ T4896] EXT4-fs warning (device loop2): ext4_block_to_path:107: block 3279949762 > max in inode 13 [ 57.874050][ T4896] EXT4-fs (loop2): 1 truncate cleaned up [ 57.895241][ T4896] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 57.919720][ T4896] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.099752][ T4915] loop1: detected capacity change from 0 to 256 [ 58.103809][ T4916] netlink: 4 bytes leftover after parsing attributes in process `syz.2.541'. [ 58.111190][ T4915] vfat: Unknown parameter 'shor|name' [ 58.129732][ T4916] netlink: 12 bytes leftover after parsing attributes in process `syz.2.541'. [ 58.246445][ T4932] loop4: detected capacity change from 0 to 512 [ 58.352223][ T4940] loop2: detected capacity change from 0 to 512 [ 58.364841][ T4940] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 58.372945][ T4940] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002] [ 58.380986][ T4940] EXT4-fs (loop2): orphan cleanup on readonly fs [ 58.382695][ T4944] loop1: detected capacity change from 0 to 256 [ 58.394739][ T4940] EXT4-fs warning (device loop2): ext4_block_to_path:107: block 3279949761 > max in inode 13 [ 58.405031][ T4940] EXT4-fs warning (device loop2): ext4_block_to_path:107: block 3279949762 > max in inode 13 [ 58.415528][ T4940] EXT4-fs (loop2): 1 truncate cleaned up [ 58.422339][ T4940] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 58.439694][ T4940] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.487562][ T4932] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.500310][ T4932] ext4 filesystem being mounted at /134/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.515024][ T4932] EXT4-fs error (device loop4): ext4_add_entry:2435: inode #2: comm syz.4.546: Directory hole found for htree leaf block 0 [ 58.530802][ T4946] macsec0: entered promiscuous mode [ 58.540973][ T4932] EXT4-fs error (device loop4): ext4_add_entry:2435: inode #2: comm syz.4.546: Directory hole found for htree leaf block 0 [ 58.581560][ T3088] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.600072][ T4948] loop3: detected capacity change from 0 to 1024 [ 58.700453][ T4950] loop1: detected capacity change from 0 to 512 [ 58.710734][ T4950] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 58.729335][ T4950] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002] [ 58.738814][ T4950] System zones: 1-12 [ 58.742912][ T4950] EXT4-fs (loop1): orphan cleanup on readonly fs [ 58.749893][ T4950] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.555: bg 0: block 361: padding at end of block bitmap is not set [ 58.765795][ T4950] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 58.774761][ T4950] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #11: comm syz.1.555: attempt to clear invalid blocks 33619980 len 1 [ 58.793473][ T4950] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.555: invalid indirect mapped block 1811939328 (level 0) [ 58.809027][ T4950] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.555: invalid indirect mapped block 2 (level 2) [ 58.822782][ T4950] EXT4-fs (loop1): 1 truncate cleaned up [ 58.830176][ T4950] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 58.842870][ T4950] FAULT_INJECTION: forcing a failure. [ 58.842870][ T4950] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 58.856080][ T4950] CPU: 1 UID: 0 PID: 4950 Comm: syz.1.555 Not tainted 6.10.0-syzkaller-12261-gd1e9a63dcd72 #0 [ 58.866350][ T4950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 58.876441][ T4950] Call Trace: [ 58.879740][ T4950] [ 58.882762][ T4950] dump_stack_lvl+0xf2/0x150 [ 58.887388][ T4950] dump_stack+0x15/0x20 [ 58.891950][ T4950] should_fail_ex+0x229/0x230 [ 58.896688][ T4950] should_fail+0xb/0x10 [ 58.900900][ T4950] should_fail_usercopy+0x1a/0x20 [ 58.905982][ T4950] _copy_from_user+0x1e/0xd0 [ 58.910689][ T4950] copy_msghdr_from_user+0x54/0x2a0 [ 58.915933][ T4950] __sys_sendmsg+0x17d/0x280 [ 58.920814][ T4950] __x64_sys_sendmsg+0x46/0x50 [ 58.925744][ T4950] x64_sys_call+0x26f8/0x2e00 [ 58.931006][ T4950] do_syscall_64+0xc9/0x1c0 [ 58.935555][ T4950] ? clear_bhb_loop+0x55/0xb0 [ 58.940440][ T4950] ? clear_bhb_loop+0x55/0xb0 [ 58.945751][ T4950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.951954][ T4950] RIP: 0033:0x7f070da55f19 [ 58.956391][ T4950] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 58.978093][ T4950] RSP: 002b:00007f070c6d7048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 58.986712][ T4950] RAX: ffffffffffffffda RBX: 00007f070dbe5f60 RCX: 00007f070da55f19 [ 58.994790][ T4950] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000003 [ 59.002784][ T4950] RBP: 00007f070c6d70a0 R08: 0000000000000000 R09: 0000000000000000 [ 59.010778][ T4950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 59.018807][ T4950] R13: 000000000000000b R14: 00007f070dbe5f60 R15: 00007ffd2b487808 [ 59.026821][ T4950] [ 59.301555][ T4945] macsec0: left promiscuous mode [ 59.535269][ C0] sched: RT throttling activated [ 59.577418][ T3086] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 59.604131][ T4960] loop1: detected capacity change from 0 to 256 [ 59.614219][ T4960] vfat: Unknown parameter 'shor|name' [ 59.644533][ T4964] loop4: detected capacity change from 0 to 512 [ 59.652215][ T4966] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4966 comm=syz.2.559 [ 59.659075][ T4964] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 59.705920][ T4964] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002] [ 59.714139][ T4964] System zones: 1-12 [ 59.718243][ T4964] EXT4-fs (loop4): orphan cleanup on readonly fs [ 59.719189][ T4965] loop2: detected capacity change from 0 to 1024 [ 59.731069][ T4964] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.554: bg 0: block 361: padding at end of block bitmap is not set [ 59.745823][ T4964] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 59.757619][ T4964] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #11: comm syz.4.554: attempt to clear invalid blocks 33619980 len 1 [ 59.771811][ T4964] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.554: invalid indirect mapped block 1811939328 (level 0) [ 59.787387][ T4964] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.554: invalid indirect mapped block 2 (level 2) [ 59.802882][ T4964] EXT4-fs (loop4): 1 truncate cleaned up [ 59.821929][ T4964] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 59.828778][ T4982] loop1: detected capacity change from 0 to 256 [ 59.999518][ T4958] veth0_vlan: left promiscuous mode [ 60.023278][ T4958] veth0_vlan: entered promiscuous mode [ 60.096910][ T5001] loop1: detected capacity change from 0 to 256 [ 60.105370][ T5001] vfat: Unknown parameter 'shor|name' [ 60.115805][ T3088] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 60.213345][ T5012] netlink: 12 bytes leftover after parsing attributes in process `syz.4.575'. [ 60.281233][ T5016] netlink: 8 bytes leftover after parsing attributes in process `syz.4.576'. [ 60.292459][ T28] veth1_vlan (unregistering): left allmulticast mode [ 60.314657][ T28] macvlan0 (unregistering): left allmulticast mode [ 60.402005][ T5018] loop2: detected capacity change from 0 to 512 [ 60.477877][ T5018] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 60.485844][ T5018] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002] [ 60.497782][ T5022] bond0: entered promiscuous mode [ 60.502859][ T5022] bond_slave_0: entered promiscuous mode [ 60.508856][ T5022] bond_slave_1: entered promiscuous mode [ 60.508890][ T5018] EXT4-fs (loop2): orphan cleanup on readonly fs [ 60.534964][ T5018] EXT4-fs warning (device loop2): ext4_block_to_path:107: block 3279949761 > max in inode 13 [ 60.545779][ T5018] EXT4-fs warning (device loop2): ext4_block_to_path:107: block 3279949762 > max in inode 13 [ 60.556261][ T5018] EXT4-fs (loop2): 1 truncate cleaned up [ 60.562481][ T5018] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 60.575289][ T5018] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.679964][ T5030] loop2: detected capacity change from 0 to 256 [ 60.814439][ T5036] loop2: detected capacity change from 0 to 256 [ 60.821032][ T5036] vfat: Unknown parameter 'shor|name' [ 60.889137][ T5044] netlink: 4 bytes leftover after parsing attributes in process `syz.2.587'. [ 60.915129][ C1] eth0: bad gso: type: 1, size: 1408 [ 61.013437][ T5051] syzkaller1: entered promiscuous mode [ 61.019030][ T5051] syzkaller1: entered allmulticast mode [ 61.058642][ T5049] loop2: detected capacity change from 0 to 512 [ 61.088862][ T5049] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 61.096886][ T5049] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002] [ 61.110531][ T5049] EXT4-fs (loop2): orphan cleanup on readonly fs [ 61.121279][ T5049] EXT4-fs warning (device loop2): ext4_block_to_path:107: block 3279949761 > max in inode 13 [ 61.129930][ T5056] loop3: detected capacity change from 0 to 512 [ 61.139349][ T5049] EXT4-fs warning (device loop2): ext4_block_to_path:107: block 3279949762 > max in inode 13 [ 61.156242][ T5056] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.592: corrupted in-inode xattr: invalid ea_ino [ 61.177877][ T5049] EXT4-fs (loop2): 1 truncate cleaned up [ 61.184030][ T5056] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.592: couldn't read orphan inode 15 (err -117) [ 61.195511][ T5049] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 61.209278][ T5056] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.212576][ T5061] loop0: detected capacity change from 0 to 256 [ 61.234213][ T5049] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.244775][ T5056] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.592: invalid indirect mapped block 234881024 (level 0) [ 61.259746][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 61.259762][ T29] audit: type=1400 audit(1721872412.596:473): avc: denied { setattr } for pid=5055 comm="syz.3.592" path="/137/file0/file0/file0" dev="loop3" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 61.260483][ T5056] --map-set only usable from mangle table [ 61.302126][ T29] audit: type=1400 audit(1721872412.636:474): avc: denied { ioctl } for pid=5055 comm="syz.3.592" path="/137/file0/file0/file0" dev="loop3" ino=13 ioctlcmd=0x89f2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 61.315957][ T5063] loop4: detected capacity change from 0 to 256 [ 61.335376][ T5063] vfat: Unknown parameter 'shor|name' [ 61.338803][ T3085] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.409949][ T5068] __nla_validate_parse: 1 callbacks suppressed [ 61.409964][ T5068] netlink: 8 bytes leftover after parsing attributes in process `syz.3.596'. [ 61.430405][ T5070] loop0: detected capacity change from 0 to 128 [ 61.438839][ T5070] EXT4-fs: Ignoring removed nobh option [ 61.449782][ T5070] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 61.462555][ T5068] netlink: 20 bytes leftover after parsing attributes in process `syz.3.596'. [ 61.467851][ T5070] ext4 filesystem being mounted at /13/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 61.492740][ T5068] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.515061][ T4249] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 61.558165][ T5068] bridge_slave_0 (unregistering): left allmulticast mode [ 61.565248][ T5068] bridge_slave_0 (unregistering): left promiscuous mode [ 61.572480][ T5068] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.625084][ T5079] xt_limit: Overflow, try lower: 262144/524288 [ 61.675172][ T5076] loop0: detected capacity change from 0 to 8192 [ 61.690891][ T5081] netlink: 36 bytes leftover after parsing attributes in process `syz.4.603'. [ 61.710282][ T29] audit: type=1400 audit(1721872413.036:475): avc: denied { write } for pid=5075 comm="syz.0.600" name="sg0" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 61.734328][ T29] audit: type=1400 audit(1721872413.036:476): avc: denied { append } for pid=5075 comm="syz.0.600" name="sg0" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 61.818395][ T5088] loop3: detected capacity change from 0 to 256 [ 61.832427][ T29] audit: type=1400 audit(1721872413.116:477): avc: denied { unmount } for pid=4249 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 61.864878][ T5092] netlink: 4 bytes leftover after parsing attributes in process `syz.4.608'. [ 61.881149][ T5092] netlink: 12 bytes leftover after parsing attributes in process `syz.4.608'. [ 61.934422][ T29] audit: type=1400 audit(1721872413.266:478): avc: denied { wake_alarm } for pid=5098 comm="syz.4.611" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 62.018456][ T5103] loop3: detected capacity change from 0 to 512 [ 62.063560][ T5105] loop0: detected capacity change from 0 to 256 [ 62.064312][ T5103] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 62.081015][ T5105] vfat: Unknown parameter 'shor|name' [ 62.103120][ T5103] EXT4-fs (loop3): 1 truncate cleaned up [ 62.122431][ T5103] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.122528][ T29] audit: type=1400 audit(1721872413.456:479): avc: denied { read } for pid=5112 comm="syz.4.617" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 62.220805][ T5124] loop4: detected capacity change from 0 to 512 [ 62.244032][ T5124] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 62.254009][ T5127] netlink: 4 bytes leftover after parsing attributes in process `syz.2.621'. [ 62.268910][ T5127] netlink: 12 bytes leftover after parsing attributes in process `syz.2.621'. [ 62.292069][ T5124] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002] [ 62.305891][ T5124] System zones: 1-12 [ 62.310064][ T5124] EXT4-fs (loop4): orphan cleanup on readonly fs [ 62.317223][ T5124] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.618: bg 0: block 361: padding at end of block bitmap is not set [ 62.324868][ T3085] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.335312][ T5124] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 62.359872][ T5124] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #11: comm syz.4.618: attempt to clear invalid blocks 33619980 len 1 [ 62.386409][ T5124] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.618: invalid indirect mapped block 1811939328 (level 0) [ 62.415842][ T5134] netlink: 12 bytes leftover after parsing attributes in process `syz.2.625'. [ 62.433549][ T5136] loop3: detected capacity change from 0 to 256 [ 62.444449][ T5124] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.618: invalid indirect mapped block 2 (level 2) [ 62.475971][ T5124] EXT4-fs (loop4): 1 truncate cleaned up [ 62.571316][ T5150] loop4: detected capacity change from 0 to 256 [ 62.619975][ T5150] vfat: Unknown parameter 'shor|name' [ 62.668949][ T5159] netlink: 4 bytes leftover after parsing attributes in process `syz.0.633'. [ 62.687693][ T5159] netlink: 12 bytes leftover after parsing attributes in process `syz.0.633'. [ 62.849734][ T5183] loop4: detected capacity change from 0 to 256 [ 62.883514][ T5187] loop3: detected capacity change from 0 to 256 [ 62.911675][ T5187] vfat: Unknown parameter 'shor|name' [ 62.972778][ T5185] netlink: 'syz.0.643': attribute type 11 has an invalid length. [ 63.188924][ T5217] loop4: detected capacity change from 0 to 256 [ 63.200081][ T5217] vfat: Unknown parameter 'shor|name' [ 63.224017][ T5221] loop3: detected capacity change from 0 to 256 [ 63.296545][ T5227] loop0: detected capacity change from 0 to 512 [ 63.303758][ T5227] EXT4-fs (loop0): Unsupported encryption level 9 [ 63.319030][ T29] audit: type=1400 audit(1721872414.656:480): avc: denied { bind } for pid=5226 comm="syz.0.658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 63.342335][ T29] audit: type=1400 audit(1721872414.656:481): avc: denied { name_bind } for pid=5226 comm="syz.0.658" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 63.364192][ T29] audit: type=1400 audit(1721872414.656:482): avc: denied { node_bind } for pid=5226 comm="syz.0.658" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 63.397341][ T5227] raw_sendmsg: syz.0.658 forgot to set AF_INET. Fix it! [ 63.427456][ T5232] syzkaller1: entered promiscuous mode [ 63.433085][ T5232] syzkaller1: entered allmulticast mode [ 63.588439][ T5246] loop3: detected capacity change from 0 to 256 [ 63.595038][ T5246] vfat: Unknown parameter 'shor|name' [ 63.675611][ T5250] team0: entered promiscuous mode [ 63.680703][ T5250] team_slave_0: entered promiscuous mode [ 63.686517][ T5250] team_slave_1: entered promiscuous mode [ 63.703009][ T5250] syz_tun: entered promiscuous mode [ 63.722131][ T5253] loop3: detected capacity change from 0 to 256 [ 63.776087][ T5249] syz_tun: left promiscuous mode [ 63.781611][ T5249] team0: left promiscuous mode [ 63.786634][ T5249] team_slave_0: left promiscuous mode [ 63.792443][ T5249] team_slave_1: left promiscuous mode [ 63.904304][ T5256] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 64.075151][ T5266] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 64.157502][ T5266] loop3: detected capacity change from 0 to 512 [ 64.186897][ T5266] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 64.215687][ T5271] loop4: detected capacity change from 0 to 2048 [ 64.222458][ T5266] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e11c, mo2=0002] [ 64.235682][ T5266] System zones: 1-12 [ 64.239937][ T5266] EXT4-fs (loop3): orphan cleanup on readonly fs [ 64.263445][ T5266] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.675: bg 0: block 361: padding at end of block bitmap is not set [ 64.300851][ T5266] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 64.328918][ T5266] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #11: comm syz.3.675: attempt to clear invalid blocks 33619980 len 1 [ 64.356583][ T5266] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.675: invalid indirect mapped block 1811939328 (level 0) [ 64.403828][ T5266] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.675: invalid indirect mapped block 2 (level 2) [ 64.437664][ T5276] loop4: detected capacity change from 0 to 256 [ 64.449452][ T5266] EXT4-fs (loop3): 1 truncate cleaned up [ 64.455851][ T5276] vfat: Unknown parameter 'shor|name' [ 64.586768][ C1] eth0: bad gso: type: 1, size: 1408 [ 64.702298][ T5288] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57187 sclass=netlink_route_socket pid=5288 comm=syz.4.684 [ 64.751296][ T5288] loop4: detected capacity change from 0 to 1024 [ 64.879256][ T5307] loop3: detected capacity change from 0 to 256 [ 64.909745][ T5307] vfat: Unknown parameter 'shor|name' [ 64.970589][ T5308] loop0: detected capacity change from 0 to 2048 [ 64.982166][ T5310] loop2: detected capacity change from 0 to 512 [ 65.026459][ T5308] loop0: p1 < > p2 < > p3 p4 < > [ 65.031554][ T5308] loop0: partition table partially beyond EOD, truncated [ 65.043250][ T5308] loop0: p1 start 2305 is beyond EOD, truncated [ 65.049642][ T5308] loop0: p2 start 4294902784 is beyond EOD, truncated [ 65.056484][ T5308] loop0: p3 start 4278191616 is beyond EOD, truncated [ 65.067562][ C1] eth0: bad gso: type: 1, size: 1408 [ 65.073317][ C1] eth0: bad gso: type: 1, size: 1408 [ 65.078889][ T5317] loop3: detected capacity change from 0 to 1024 [ 65.087470][ T5310] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 65.095473][ T5310] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002] [ 65.110614][ T5308] capability: warning: `syz.0.690' uses deprecated v2 capabilities in a way that may be insecure [ 65.133013][ T5320] netlink: 'syz.4.695': attribute type 29 has an invalid length. [ 65.150268][ T5320] netlink: 'syz.4.695': attribute type 29 has an invalid length. [ 65.158254][ T5310] EXT4-fs (loop2): orphan cleanup on readonly fs [ 65.168125][ T5310] EXT4-fs warning (device loop2): ext4_block_to_path:107: block 3279949761 > max in inode 13 [ 65.182778][ T5310] EXT4-fs warning (device loop2): ext4_block_to_path:107: block 3279949762 > max in inode 13 [ 65.188703][ T5317] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 65.193447][ T5310] EXT4-fs (loop2): 1 truncate cleaned up [ 65.212691][ C1] eth0: bad gso: type: 1, size: 1408 [ 65.215471][ T5317] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 30 with error 28 [ 65.231833][ T5317] EXT4-fs (loop3): This should not happen!! Data will be lost [ 65.231833][ T5317] [ 65.241597][ T5317] EXT4-fs (loop3): Total free blocks count 0 [ 65.247666][ T5317] EXT4-fs (loop3): Free/Dirty block details [ 65.253587][ T5317] EXT4-fs (loop3): free_blocks=68451041280 [ 65.259535][ T5317] EXT4-fs (loop3): dirty_blocks=32 [ 65.264653][ T5317] EXT4-fs (loop3): Block reservation details [ 65.270699][ T5317] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 65.400508][ T5338] loop0: detected capacity change from 0 to 256 [ 65.416013][ T5338] vfat: Unknown parameter 'shor|name' [ 65.490112][ C1] eth0: bad gso: type: 1, size: 1408 [ 65.511714][ T5344] loop0: detected capacity change from 0 to 512 [ 65.524695][ T5344] EXT4-fs: Ignoring removed mblk_io_submit option [ 65.535997][ T5344] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #12: comm syz.0.705: corrupted in-inode xattr: invalid ea_ino [ 65.559740][ T5344] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.705: couldn't read orphan inode 12 (err -117) [ 65.583923][ T5344] sg_read: process 110 (syz.0.705) changed security contexts after opening file descriptor, this is not allowed. [ 65.621620][ T5356] loop2: detected capacity change from 0 to 512 [ 65.630852][ T5356] EXT4-fs: Invalid want_extra_isize 256 [ 65.690399][ T5366] loop4: detected capacity change from 0 to 256 [ 65.697451][ T5366] ================================================================== [ 65.705565][ T5366] BUG: KCSAN: data-race in fsnotify / fsnotify_put_mark [ 65.712533][ T5366] [ 65.714865][ T5366] write to 0xffff88810116e890 of 4 bytes by task 3072 on cpu 1: [ 65.722502][ T5366] fsnotify_put_mark+0x2d8/0x5d0 [ 65.727456][ T5366] __se_sys_inotify_rm_watch+0x105/0x180 [ 65.733191][ T5366] __x64_sys_inotify_rm_watch+0x31/0x40 [ 65.738753][ T5366] x64_sys_call+0x1d25/0x2e00 [ 65.743444][ T5366] do_syscall_64+0xc9/0x1c0 [ 65.747987][ T5366] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.753900][ T5366] [ 65.756226][ T5366] read to 0xffff88810116e890 of 4 bytes by task 5366 on cpu 0: [ 65.763767][ T5366] fsnotify+0x36c/0x11a0 [ 65.768010][ T5366] __fsnotify_parent+0x285/0x380 [ 65.772961][ T5366] __fput+0x5ca/0x6f0 [ 65.776959][ T5366] __fput_sync+0x44/0x60 [ 65.781214][ T5366] __se_sys_close+0x101/0x1b0 [ 65.785936][ T5366] __x64_sys_close+0x1f/0x30 [ 65.790540][ T5366] x64_sys_call+0x2630/0x2e00 [ 65.795226][ T5366] do_syscall_64+0xc9/0x1c0 [ 65.799744][ T5366] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.805657][ T5366] [ 65.807992][ T5366] value changed: 0x00002008 -> 0x00000000 [ 65.813790][ T5366] [ 65.816109][ T5366] Reported by Kernel Concurrency Sanitizer on: [ 65.822253][ T5366] CPU: 0 UID: 0 PID: 5366 Comm: syz.4.715 Not tainted 6.10.0-syzkaller-12261-gd1e9a63dcd72 #0 [ 65.832507][ T5366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 65.842564][ T5366] ================================================================== [ 65.856122][ T5366] vfat: Unknown parameter 'shor|name' [ 65.884222][ T3085] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /168/bus/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 65.922097][ T3085] EXT4-fs error (device loop3): ext4_empty_dir:3094: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 65.942250][ T3085] EXT4-fs warning (device loop3): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.' [ 65.955141][ T3085] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /168/bus/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 65.980447][ T3085] EXT4-fs error (device loop3): ext4_empty_dir:3094: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 66.001010][ T3085] EXT4-fs warning (device loop3): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.' [ 66.012543][ T3085] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /168/bus/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 66.035214][ T3085] EXT4-fs error (device loop3): ext4_empty_dir:3094: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 66.054746][ T3085] EXT4-fs warning (device loop3): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.' [ 66.066332][ T3085] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /168/bus/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 66.087783][ T3085] EXT4-fs error (device loop3): ext4_empty_dir:3094: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 66.107079][ T3085] EXT4-fs warning (device loop3): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.' [ 66.118764][ T3085] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /168/bus/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 66.140224][ T3085] EXT4-fs warning (device loop3): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.' [ 66.152121][ T3085] EXT4-fs warning (device loop3): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.' [ 66.164108][ T3085] EXT4-fs warning (device loop3): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.' [ 66.176491][ T3085] EXT4-fs warning (device loop3): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.' [ 66.188302][ T3085] EXT4-fs warning (device loop3): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.' [ 66.200321][ T3085] EXT4-fs warning (device loop3): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.' [ 66.521954][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.568786][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.628743][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.678485][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.743489][ T11] bridge_slave_1: left allmulticast mode [ 66.749214][ T11] bridge_slave_1: left promiscuous mode [ 66.754879][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.038556][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 67.048979][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 67.059434][ T11] bond0 (unregistering): Released all slaves [ 67.139124][ T11] hsr_slave_0: left promiscuous mode [ 67.145019][ T11] hsr_slave_1: left promiscuous mode [ 67.151408][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 67.159337][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 67.168742][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 67.176734][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 67.189598][ T11] veth1_macvtap: left promiscuous mode [ 67.195634][ T11] veth0_macvtap: left promiscuous mode [ 67.203230][ T11] veth1_vlan: left promiscuous mode [ 67.209237][ T11] veth0_vlan: left promiscuous mode [ 67.290465][ T11] team0 (unregistering): Port device team_slave_1 removed [ 67.304593][ T11] team0 (unregistering): Port device team_slave_0 removed [ 67.327518][ T11] smc: removing net device wg0 with user defined pnetid SYZ0 [ 68.138390][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 68.138407][ T29] audit: type=1400 audit(1721872419.476:490): avc: denied { sys_chroot } for pid=5487 comm="dhcpcd" capability=18 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 68.173989][ T29] audit: type=1400 audit(1721872419.506:491): avc: denied { setgid } for pid=5487 comm="dhcpcd" capability=6 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 68.195844][ T29] audit: type=1400 audit(1721872419.506:492): avc: denied { setuid } for pid=5487 comm="dhcpcd" capability=7 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 68.217323][ T29] audit: type=1400 audit(1721872419.506:493): avc: denied { setrlimit } for pid=5487 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=process permissive=1