last executing test programs: 3m52.755026981s ago: executing program 4 (id=53): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="1808000030000000000000000002000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b706000000000000850000002e000000bc0900000000000035090100000000009500000000000000b702000000000000db9af8fff1000000b5090000000000007b9af8ff00000000be8a00000000000007080000f8ffffffbf9400000000000007040000f0ffffffc70200000800000018260000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f1ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3m52.60044286s ago: executing program 4 (id=54): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x9, 0x0, 0x7fff0000}]}) r1 = socket$pptp(0x18, 0x1, 0x2) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000100)=ANY=[@ANYRES16=0x0], 0x3, 0x2b5, &(0x7f0000000380)="$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") mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r2, &(0x7f0000000f80)=""/4096, 0x1000) socket$inet6(0xa, 0xa, 0x2) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r4, &(0x7f0000000900)=@abs={0x1, 0x0, 0x4e21}, 0x4f) connect$unix(r3, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e20}, 0x6e) bind$pptp(r1, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) close_range(r0, 0xffffffffffffffff, 0x0) 3m51.877116242s ago: executing program 4 (id=61): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000006000000000000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000700008500000086000000bf0900000000000055090100000000009500000000000000cd0a0100003f00002500000001000480180000000200048000000000f4ffffffae90f8ff00000000bf91000000000000b702000003000000850000002a000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x61}, 0x94) 3m51.787875137s ago: executing program 4 (id=62): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x84, @broadcast, 0x4e21, 0x4, 'fo\x00', 0x4, 0x7, 0x51}, 0x2c) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@noload}, {@stripe={'stripe', 0x3d, 0xdc}}, {@data_err_abort}, {@noload}, {@data_err_ignore}, {@nodiscard}]}, 0xff, 0x451, &(0x7f0000000940)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x100, 0x0) open_by_handle_at(r1, &(0x7f0000000240)=@reiserfs_2={0x8, 0x2, {0xb}}, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000001180)=[{0x6, 0x5, 0x5, 0x7ffc0001}]}) close_range(r2, 0xffffffffffffffff, 0x2) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) 3m51.401875689s ago: executing program 4 (id=68): r0 = socket$phonet(0x23, 0x2, 0x1) setsockopt$sock_int(r0, 0x1, 0x1, &(0x7f00000000c0)=0x6e, 0x4) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f00000007c0)={[{@nodioread_nolock}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x3}}]}, 0x1, 0x46f, &(0x7f0000000bc0)="$eJzs281rHOUfAPDvTF7a/vqS/Gp9aa0aLUJQTJq0ag9eFAWRioIe6jEm2xK6baSJYmuxqYgnQQp6Fo+if4E3EUQ9CV49eZJC0V7aeorM7Ey72WYTYzadmP18YDbPMzO78/1m3p55nt0AutZQ9pJE7IiIXyNioFFdvMJQ48/1q+cnb1w9P5nEwsJrfyT5eteunp8sVy3ft72oDKcR6YdJsZHFZs+eOzlRr9fOFPXRuVNvjc6ePffEO6cmTtRO1E6PHzly+NDY00+NP9mRPLO8ru17f2b/3hffuPTy5LFLb/74dRbvjmJ5cx6dMpQl/udCrnXZo53eWMV2NpWT3goDYVV6IiLbXWl+/g9ET9zaeQPxwgeVBgesq+zetKX94vkFYBNLouoIgGqUN/rs+bec7lDTY0O48mzjASjL+3oxNZb05s9Emb6W59tOGoqIY/N/fZ5NsU79EAAAzT6e/Oxof0S8d+Orl7K2x0BElP1B9+Svv+Wvu4oxlMGI+H9E7I6IuyJiT0TcXax7b0Tct8Z4bm//pJfX+JHLytp/zxRjW4vbf2XrLwZ7itrOPP++5Ph0vXaw+J8MR9+WrD62zDa+ff6XT9ota27/ZVO2/bItWMRxubelg25qYm4ib5R2wJWLEft6l8o/uTkSkETE3ojYt7qP3lUWph/7cn+7lVbOfxkdGGda+CJLbz7Lfz5a8i8lzeOT07eNT45ujXrt4Gh5VNzup58/erXd9teUfwdcqTX+Nu3/1lUGk+bx2tnObv9fHv9pf/J6Ps7cX8x7d2Ju7sxYRH9yNK8vmj9+671lvVw/O/6HDyx9/u8u3pPlf39EZAfxAxHxYEQ8VMT+cEQ8EhEHlsnxh+dWzj/Sivb/xYipJa9/N4//lv2/+kLPye+/abf9f7b/D+el4WJOfv1bwVLhZJeL1gDX8r8DAACA/4o0/w58ko7cLKfpyEjjO/x74n9pfWZ27vHjM2+fnmp8V34w+tKyp2ug6A+tT9drY8l88YmN/tHxoq+47C89VPQbf9qzLa+PTM7UpyrOHbrd9jbnf+b3nqqjA9bZtiXnjvff8UCACrSOo6eLqxdeCRcD2Kz8Xhu61wrnf/PvYIBNxv0futdS5/+FlrqxANic3P+hezn/oUul31UdAVAh93/oSmv5Xf86FrZujDCqKWzUnZIXIspCuiHiUVinQtVXJgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgM74OwAA//9CxuaI") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000180), 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x10840, &(0x7f0000000100)=ANY=[@ANYBLOB="726f6469722c757466383d300000006ffffffff86e6f6e756d746169493d302c73686f72746e616d653d75696e39352c757466383d312c726f643d6d697865642c73e86f726e87a890616d656e616d653d77696e39352c00"], 0x1, 0x26c, &(0x7f0000000340)="$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") mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r4, 0x11, 0xa, &(0x7f0000000040)=0x4, 0x4) recvmmsg(r2, &(0x7f0000007600), 0x0, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r5, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) syz_emit_ethernet(0x46, &(0x7f0000000240)={@random="05c38c886b60", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @ndisc_ra}}}}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newsa={0x144, 0x10, 0x1, 0xbffffffe, 0x100, {{@in=@empty, @in=@local, 0x1, 0x794, 0x4e23, 0x9, 0x0, 0x0, 0x80, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x8, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0xfd, 0x22}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075a, 0x3}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x22020600) socket$unix(0x1, 0x5, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="16000000000000000800000002"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r6, 0x0, 0x0}, 0x20) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setuid(0xee01) setsockopt$bt_hci_HCI_FILTER(r8, 0x0, 0x2, &(0x7f0000000080)={0x3, [0x9, 0x4], 0x6}, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'macvtap0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0xfc, 0x10, 0x1, 0xfffffffe, 0x25dfdbff, {{@in6=@local, @in6=@private1, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a, r10}, {@in=@local, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffb}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@offload={0xc, 0x1c, {r10, 0x1}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 3m51.140235294s ago: executing program 4 (id=73): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='&'], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00'}) r1 = socket$l2tp(0x2, 0x2, 0x73) sendmmsg$inet(r1, &(0x7f0000005a40)=[{{&(0x7f00000002c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10, &(0x7f0000000480)=[{0x0}, {&(0x7f00000003c0)="4fd0cdbb", 0x4}], 0x2}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x20000000) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) r3 = socket(0x10, 0x80003, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xb, "00000000000204000000000000000010"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) r5 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x40000, 0x3c) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000000080)={r6, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19, 0xd, "faf98317e5b4140989fc8dbe43ea6acc96e3a2503dc3bd3ff87d5812ff010000000000000f35000000b50000000200", "32ffff26f7d31a74df2cfc06c89f3d9e234b30c50997d3bed109ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fc99a", "675237ff070008000100e4162e43ac61b7ad3300e8ffffffffffffff00", [0x6, 0xfffffdfffffffffe]}}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000040)='veth1_to_bond\x00') 3m51.086752778s ago: executing program 32 (id=73): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='&'], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00'}) r1 = socket$l2tp(0x2, 0x2, 0x73) sendmmsg$inet(r1, &(0x7f0000005a40)=[{{&(0x7f00000002c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10, &(0x7f0000000480)=[{0x0}, {&(0x7f00000003c0)="4fd0cdbb", 0x4}], 0x2}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x20000000) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) r3 = socket(0x10, 0x80003, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xb, "00000000000204000000000000000010"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) r5 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x40000, 0x3c) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000000080)={r6, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19, 0xd, "faf98317e5b4140989fc8dbe43ea6acc96e3a2503dc3bd3ff87d5812ff010000000000000f35000000b50000000200", "32ffff26f7d31a74df2cfc06c89f3d9e234b30c50997d3bed109ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fc99a", "675237ff070008000100e4162e43ac61b7ad3300e8ffffffffffffff00", [0x6, 0xfffffdfffffffffe]}}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000040)='veth1_to_bond\x00') 18.768771208s ago: executing program 1 (id=1786): pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r0, 0x0, 0xf3a, 0x0) (async) fcntl$setpipe(r0, 0x407, 0xebea) write$binfmt_elf64(r1, &(0x7f00000001c0)=ANY=[], 0x18c6) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r3 = socket(0x11, 0x3, 0x9b7e) setsockopt$sock_int(r3, 0x1, 0x2e, &(0x7f0000000280)=0xb, 0x4) (async) r4 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r4}, &(0x7f0000000000)=0x0) (async, rerun: 32) r6 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) (async, rerun: 64) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) (rerun: 64) timer_settime(r5, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) (async) timerfd_gettime(0xffffffffffffffff, 0x0) (async) recvmmsg(r3, &(0x7f0000000740)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x2, 0x0) (async, rerun: 32) syz_io_uring_setup(0x3ade, &(0x7f0000000000)={0x0, 0x2732, 0x100, 0x1, 0x8a, 0x0, r0}, &(0x7f0000000080), &(0x7f00000000c0)) (async, rerun: 32) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000085000000d000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r7, 0x0, 0x14, 0x0, &(0x7f0000000040)="f4b84de4115d64244a0e839e88a8", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000073117300000000008510000002000000850000002c00000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) (rerun: 64) 18.666209794s ago: executing program 1 (id=1788): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc}, 0x0, 0x54f, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) accept4(r0, 0x0, 0x0, 0x800) 17.744902327s ago: executing program 1 (id=1794): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="1808000030000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b706000000000000850000002e000000bc0900000000000035090100000000009500000000000000b702000000000000db9af8fff1000000b5090000000000007b9af8ff00000000be8a00000000000007080000f8ffffffbf9400000000000007040000f0ffffffc70200000800000018260000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f1ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x2000000, '\x00', 0x0, @sk_reuseport=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 17.735339418s ago: executing program 1 (id=1795): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000300)={[{@max_batch_time={'max_batch_time', 0x3d, 0x6f253caa}}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@nombcache}, {@quota}, {@init_itable}, {@errors_remount}]}, 0x5, 0x569, &(0x7f0000000b00)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000080)='./file1\x00', &(0x7f0000000840), &(0x7f0000000940)=ANY=[], 0x361, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x306) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) close(0x3) setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f00000013c0)=ANY=[], 0x700, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000280)='./file1\x00', &(0x7f00000000c0), &(0x7f0000001140)=ANY=[@ANYBLOB="e7ec9dffac2b937557824ebfac95b6655be993bd927effff1e45dbecdfd65155ca25b7177aaebeaf0c8640ab01b656f6", @ANYRES32=r0, @ANYRES64=0x0, @ANYRESDEC=r1, @ANYRESOCT=r0, @ANYRES8=r0, @ANYRES8=r2], 0xfe37, 0x0) r4 = syz_clone(0xc008000, 0x0, 0x0, 0x0, 0x0, 0x0) tgkill(r4, r4, 0x13) ptrace(0x10, r4) ptrace$setsig(0x4203, r4, 0x560, &(0x7f0000000080)={0x1b, 0x3, 0x3ff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x1f, 0x15, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x100d}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0xa6}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8001}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xa6}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r8, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000000c0)={0x38, r9, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7ffd}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x38}}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r7, &(0x7f0000001100)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x2c, r9, 0x200, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0xaa3}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x8}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x65}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc040}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xe723, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffef3, 0x10, &(0x7f00000000c0), 0xfffffffffffffd00}, 0x48) 16.3283967s ago: executing program 1 (id=1806): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x300c046, &(0x7f0000001c00)={[{@dioread_nolock}, {@data_err_abort}, {@inlinecrypt}, {@journal_dev={'journal_dev', 0x3d, 0xd5b}}, {@data_err_ignore}, {@nodiscard}, {@user_xattr}, {@grpquota}, {@init_itable}, {@user_xattr}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@errors_remount}, {@lazytime}]}, 0x11, 0x55d, &(0x7f0000000b40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x1c3) mknod$loop(0x0, 0x800, 0x1) unshare(0x26020480) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@map=r1, 0xa, 0x0, 0x7, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="190000000a000000", @ANYRES32=r0, @ANYBLOB, @ANYRES32=r1, @ANYBLOB="7b3bfb461e4192ed3ad15fe2770c3fdfa547e55a19e55e87aa93651da6e6c280ef2f257a401e9fe76905904b7f232de4a56c068c2adc1cfd4199ae2e5b9c8b9da6e83081cda8e2f4cf92e06c59a4f0a7a60c03d9ece7085032a78a78bfbbeb64db89844f2dd5743b969702b1c4c45cc8f8c64683e67d1de635a16c46c40ff03645d65929db96e781588ff5a531d40a181ada89dc8846d536f28d8e57", @ANYRES64=r2], 0x20) copy_file_range(r1, 0x0, r1, &(0x7f00000000c0)=0xaec, 0xd, 0x0) 15.626508361s ago: executing program 1 (id=1813): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000040), 0x7, 0x4e3, &(0x7f0000001200)="$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") r3 = open(0x0, 0x10000, 0x0) getdents(r3, &(0x7f0000001fc0)=""/184, 0xb8) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x1c, 0x2, 0x3, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x1}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x43044) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000300)={0x1c, 0x2, 0x3, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0x1d}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20010) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000001c0)=0x10) mount$9p_unix(&(0x7f0000000180)='./file1\x00', &(0x7f0000000200)='./file1\x00', &(0x7f0000000280), 0x10002, &(0x7f00000002c0)) r6 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0xc00) sendto$inet6(r6, &(0x7f00000000c0)="dc6e4ee4b758631efb26d4f3441acc46bcff6e6af400b7971e4e885f05df60012eb1241b4ed0809c4367406d873b30faa2470aac93d0ede7eadea202f08a72e99840b1411ddca6ef26ce69d5c867d817c317e353b3e862804abe94dec659cb96bd15fee1459119f74a29e8a534d3856d5f45c457efbb86ccdf5138828aeb4d53bb5bad635a22d9f57e86b2f80eb55ee98c53e98135a3cd61db492b35bae9c0aba0aa05c7cf49c0bc", 0xa8, 0x800, &(0x7f0000000180)={0xa, 0x4e20, 0xa, @mcast2, 0xfffffff7}, 0x1c) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x19}, 0x0, 0x0, 0x0, 0x0}, 0x58) r7 = socket$inet(0x10, 0x3, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x1010000, &(0x7f00000003c0)={[{@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'cp949'}}, {@uni_xlate}, {@utf8}, {@utf8no}, {@utf8}, {@utf8no}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'macinuit'}}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'cp950'}}, {@fat=@codepage={'codepage', 0x3d, '857'}}, {@utf8no}, {@shortname_lower}, {@rodir}, {@shortname_lower}, {@numtail}]}, 0x1, 0x371, &(0x7f0000000c00)="$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") ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'bond0\x00'}) r8 = socket$nl_route(0x10, 0x3, 0x0) shutdown(r8, 0x0) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@ipv4_newrule={0x34, 0x20, 0x1, 0x70bd26, 0x25dfdbfb, {0x2, 0x20, 0x80, 0x81, 0x1, 0x0, 0x0, 0x6, 0x2}, [@FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x401}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0xfffffffffffffff7}]}, 0x34}}, 0x0) 15.525481617s ago: executing program 33 (id=1813): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000040), 0x7, 0x4e3, &(0x7f0000001200)="$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") r3 = open(0x0, 0x10000, 0x0) getdents(r3, &(0x7f0000001fc0)=""/184, 0xb8) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x1c, 0x2, 0x3, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x1}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x43044) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000300)={0x1c, 0x2, 0x3, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0x1d}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20010) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000001c0)=0x10) mount$9p_unix(&(0x7f0000000180)='./file1\x00', &(0x7f0000000200)='./file1\x00', &(0x7f0000000280), 0x10002, &(0x7f00000002c0)) r6 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0xc00) sendto$inet6(r6, &(0x7f00000000c0)="dc6e4ee4b758631efb26d4f3441acc46bcff6e6af400b7971e4e885f05df60012eb1241b4ed0809c4367406d873b30faa2470aac93d0ede7eadea202f08a72e99840b1411ddca6ef26ce69d5c867d817c317e353b3e862804abe94dec659cb96bd15fee1459119f74a29e8a534d3856d5f45c457efbb86ccdf5138828aeb4d53bb5bad635a22d9f57e86b2f80eb55ee98c53e98135a3cd61db492b35bae9c0aba0aa05c7cf49c0bc", 0xa8, 0x800, &(0x7f0000000180)={0xa, 0x4e20, 0xa, @mcast2, 0xfffffff7}, 0x1c) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x19}, 0x0, 0x0, 0x0, 0x0}, 0x58) r7 = socket$inet(0x10, 0x3, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x1010000, &(0x7f00000003c0)={[{@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'cp949'}}, {@uni_xlate}, {@utf8}, {@utf8no}, {@utf8}, {@utf8no}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'macinuit'}}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'cp950'}}, {@fat=@codepage={'codepage', 0x3d, '857'}}, {@utf8no}, {@shortname_lower}, {@rodir}, {@shortname_lower}, {@numtail}]}, 0x1, 0x371, &(0x7f0000000c00)="$eJzs3U9oY0UYAPAvfWnSXdD2JgpC9CZo2e5NL7ZIFxZ7UQn+OYjB7aokVWix2B62rQfFo+BRT94U9OBBPIqgiDcPXl1BVsWD7m3B1ZHkvSSvSdrtLnZ18feDTSYz88037w/J20cyfW4x2uem4/zly5diZqYS1cVHFuNKJeYii77dGFfrPf45oQUA+K+7klL8nnKjbTOTQyo3YVoAwDHqff6/EBGNmMtrXv/ysP7Jpz8A3PKK//+fOKzPAfcBIl45likBAMds7P7/vfuaa71/1f7LaulbAQDAreqJp595dGkl4vFGYyZi7c3N5mYzHhq2L52Pl6ITq3EqZuNqRH6h0H2o9B7PnF1ZPtVoNHbip7loRsRUEdjMrxSWsl58PRZiNuaK+OJqI6WUnflkZXmh0RMRuzu9/LFW2WxOx8ki//cnY3V44dEfpPcUcXZl+XSjGKC51o/fidgbflGhO//5mI1vnx8Mk1KtKK0sX1jIJz28z9Edpx7nBq8PvAMCAAAAAAAAAAAAAAAAAAAAAAA3ZL4xMDdYPyd1n/OVcubnJ7T31sfJ44v1gfby9YFSPUVKv732QPOtLPatDzS6Ps+mhQQBAAAAAAAAAAAAAAAAAABgYGOrFq1OZ3V9Y2u7XS7srG9sTUVEt+blrz/64kSM97lGoZqnqEcMUjSKtNvtVsr6nVMWMR6edZP3az74dDDjcp/6YCsmTqN+cFOnc9s9P747rLk764/817BPFpM3MCtN4+GRkdduz6d0PTtqUDhdrqmPZ7+YUirVvFEOv/Ds+IBRiahe/4Hbbk/FwX1St/DVpRfv7O/91ucpd9/9s09efOf9X9qtTjdz9I5gbX3jamq3Kv3OR8heDJd6h2B4blQiL1TKZ0L1sAH39te0su9+fequt7852k5I5ZpXu+fzSJ8s35yPR8NreaE7zZGmE8Pw6WIjOqvTE07+axVu4Jje8d5nH6b0w89HTjE0Nfa2Ufln3n0AAAAAAAAAAAAAAAAAAICy0m/FC8WPfacPi3rwseOfGQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADcPMO//18q7O3GSM1RCn/sTIiqr65vRNRG09b/na0FAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOD/6u8AAAD//0tWXZ0=") ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'bond0\x00'}) r8 = socket$nl_route(0x10, 0x3, 0x0) shutdown(r8, 0x0) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@ipv4_newrule={0x34, 0x20, 0x1, 0x70bd26, 0x25dfdbfb, {0x2, 0x20, 0x80, 0x81, 0x1, 0x0, 0x0, 0x6, 0x2}, [@FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x401}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0xfffffffffffffff7}]}, 0x34}}, 0x0) 7.005301592s ago: executing program 6 (id=1881): syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x9001, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x10000, 0x0, 0x1, 0x401, 0x20004, 0x56e, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0x0, 0x0}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000040)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) 6.389251038s ago: executing program 6 (id=1886): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000040), 0x7, 0x4e3, &(0x7f0000001200)="$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") r2 = open(0x0, 0x10000, 0x0) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x1c, 0x2, 0x3, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x1}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x43044) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000300)={0x1c, 0x2, 0x3, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0x1d}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20010) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000001c0)=0x10) mount$9p_unix(&(0x7f0000000180)='./file1\x00', &(0x7f0000000200)='./file1\x00', &(0x7f0000000280), 0x10002, &(0x7f00000002c0)) r5 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0xc00) sendto$inet6(r5, &(0x7f00000000c0)="dc6e4ee4b758631efb26d4f3441acc46bcff6e6af400b7971e4e885f05df60012eb1241b4ed0809c4367406d873b30faa2470aac93d0ede7eadea202f08a72e99840b1411ddca6ef26ce69d5c867d817c317e353b3e862804abe94dec659cb96bd15fee1459119f74a29e8a534d3856d5f45c457efbb86ccdf5138828aeb4d53bb5bad635a22d9f57e86b2f80eb55ee98c53e98135a3cd61db492b35bae9c0aba0aa05c7cf49c0bc", 0xa8, 0x800, &(0x7f0000000180)={0xa, 0x4e20, 0xa, @mcast2, 0xfffffff7}, 0x1c) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x19}, 0x0, 0x0, 0x0, 0x0}, 0x58) r6 = socket$inet(0x10, 0x3, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x1010000, &(0x7f00000003c0)={[{@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'cp949'}}, {@uni_xlate}, {@utf8}, {@utf8no}, {@utf8}, {@utf8no}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'macinuit'}}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'cp950'}}, {@fat=@codepage={'codepage', 0x3d, '857'}}, {@utf8no}, {@shortname_lower}, {@rodir}, {@shortname_lower}, {@numtail}]}, 0x1, 0x371, &(0x7f0000000c00)="$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") ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bond0\x00'}) r7 = socket$nl_route(0x10, 0x3, 0x0) shutdown(r7, 0x0) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@ipv4_newrule={0x34, 0x20, 0x1, 0x70bd26, 0x25dfdbfb, {0x2, 0x20, 0x80, 0x81, 0x1, 0x0, 0x0, 0x6, 0x2}, [@FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x401}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0xfffffffffffffff7}]}, 0x34}}, 0x0) 5.66220599s ago: executing program 3 (id=1890): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x41, 0x0, 0x0, 0x0, 0x7}, 0x94) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) unshare(0x2c020400) r0 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14, 0xc0800) signalfd(r0, &(0x7f0000000100)={[0x8]}, 0x8) r1 = syz_io_uring_setup(0x10d, &(0x7f00000003c0)={0x0, 0x0, 0x1, 0x0, 0x10}, &(0x7f0000000380)=0x0, &(0x7f0000000580)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r1, 0x3f70, 0x0, 0x0, 0x0, 0x0) setitimer(0x2, &(0x7f0000000040)={{0x0, 0x2710}, {0x77359400}}, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r4 = perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb3, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x800, 0x2000000, 0x0, 0x0, 0x5, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xef, 0x3d27}, 0x400, 0x32, 0x43a1bd76, 0x7, 0x203, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000180)='!pu==0||!') r7 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, 0xffffffffffffffff) syz_usb_connect$lan78xx(0x6, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000009c0)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x800718, &(0x7f0000000200)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x48d, &(0x7f0000000a00)="$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") 5.560778956s ago: executing program 2 (id=1891): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'team_slave_1\x00'}) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c80)=ANY=[@ANYBLOB="94010000100031082bbd700800000000ac1414aa000000000000000000000000ac1414bb0000000000000000000000000000ecdf000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x194}, 0x1, 0x0, 0x0, 0x88000}, 0x0) 5.509903259s ago: executing program 2 (id=1892): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000040), 0x7, 0x4e3, &(0x7f0000001200)="$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") r2 = open(&(0x7f00000000c0)='.\x00', 0x10000, 0x0) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, 0x0, 0x43044) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000019c0)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x20010) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000001c0)=0x10) mount$9p_unix(&(0x7f0000000180)='./file1\x00', &(0x7f0000000200)='./file1\x00', &(0x7f0000000280), 0x10002, &(0x7f00000002c0)) r5 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0xc00) sendto$inet6(r5, &(0x7f00000000c0)="dc6e4ee4b758631efb26d4f3441acc46bcff6e6af400b7971e4e885f05df60012eb1241b4ed0809c4367406d873b30faa2470aac93d0ede7eadea202f08a72e99840b1411ddca6ef26ce69d5c867d817c317e353b3e862804abe94dec659cb96bd15fee1459119f74a29e8a534d3856d5f45c457efbb86ccdf5138828aeb4d53bb5bad635a22d9f57e86b2f80eb55ee98c53e98135a3cd61db492b35bae9c0aba0aa05c7cf49c0bc", 0xa8, 0x800, &(0x7f0000000180)={0xa, 0x4e20, 0xa, @mcast2, 0xfffffff7}, 0x1c) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x19}, 0x0, 0x0, 0x0, 0x0}, 0x58) r6 = socket$inet(0x10, 0x3, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x1010000, &(0x7f00000003c0)={[{@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'cp949'}}, {@uni_xlate}, {@utf8}, {@utf8no}, {@utf8}, {@utf8no}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'macinuit'}}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'cp950'}}, {@fat=@codepage={'codepage', 0x3d, '857'}}, {@utf8no}, {@shortname_lower}, {@rodir}, {@shortname_lower}, {@numtail}]}, 0x1, 0x371, &(0x7f0000000c00)="$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") ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bond0\x00'}) r7 = socket$nl_route(0x10, 0x3, 0x0) shutdown(r7, 0x0) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@ipv4_newrule={0x34, 0x20, 0x1, 0x70bd26, 0x25dfdbfb, {0x2, 0x20, 0x80, 0x81, 0x1, 0x0, 0x0, 0x6, 0x2}, [@FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x401}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0xfffffffffffffff7}]}, 0x34}}, 0x0) 4.237816123s ago: executing program 6 (id=1899): memfd_create(&(0x7f00000004c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07\x8ex\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x1) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b82, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x1a, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bind$rds(0xffffffffffffffff, 0x0, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000002c0)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8004}, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) r3 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f00000000c0)=[{0x800000000, 0x0, 0x1}], 0x1, 0x100000c01, 0x38, 0x0, 0x2}) sendto(r2, &(0x7f00000002c0)='%', 0x300000, 0x0, 0x0, 0x0) prlimit64(0x0, 0x6, &(0x7f0000000140)={0x0, 0x4}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000040000000100000009000100000000", @ANYRES32, @ANYBLOB='\x00\x00'], 0x48) 3.445856819s ago: executing program 6 (id=1905): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x0, &(0x7f0000000000)={[{@noauto_da_alloc}, {@errors_remount}]}, 0x21, 0x4bd, &(0x7f00000006c0)="$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") r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={@loopback={0xfffffffffffffffd, 0x3fc}, 0x0, r1}) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003b80), 0x1, 0x0) lseek(r2, 0xfffffffffffffff9, 0x3) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x3018, 0x10000, 0x9, 0x6, 0x8, 0x20005, 0x7, 0x0, 0x1, 0x0, 0x20000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, 0xffffffffffffffff, 0x0) connect$qrtr(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000200)={[{@nodioread_nolock}, {@block_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}, {@abort}, {@resgid}, {@grpjquota_path={'grpjquota', 0x3d, './file0'}}, {@init_itable_val={'init_itable', 0x3d, 0x3}}]}, 0x1, 0x478, &(0x7f0000000500)="$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") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f00000001c0)='./file0\x00') unlinkat(r2, &(0x7f0000000040)='./file1\x00', 0x0) 3.151819977s ago: executing program 2 (id=1909): r0 = socket$kcm(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000e27f00000400000000000000", @ANYRES32, @ANYRES16=r0], 0x50) sendmsg$nl_route_sched(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d40)=@newqdisc={0x164, 0x24, 0x100, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xfff3}, {0xfff2, 0x10}, {0xc, 0xd}}, [@TCA_STAB={0xe8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x9, 0x8, 0x6, 0x1, 0x92, 0x9, 0x2}}, {0x8, 0x2, [0x4af, 0x1]}}, {{0x1c, 0x1, {0x1, 0x5, 0x4, 0x2, 0x1, 0x6, 0x5, 0x9}}, {0x16, 0x2, [0x81, 0xff80, 0x9, 0x5, 0x2043, 0x5000, 0x5, 0x0, 0x96]}}, {{0x1c, 0x1, {0x6, 0x3, 0x2, 0x7fffffff, 0x1, 0x9, 0xa, 0x4}}, {0xc, 0x2, [0x1, 0x9, 0x81, 0x401]}}, {{0x1c, 0x1, {0xb, 0x2, 0xb7a7, 0x4, 0x2, 0x3, 0x445, 0xa}}, {0x18, 0x2, [0x2, 0x3, 0xff, 0x7, 0x0, 0x8ee9, 0xfff, 0x2000, 0x3, 0x8c]}}, {{0x1c, 0x1, {0x3, 0x7, 0xfc01, 0xff, 0x0, 0x7, 0x8, 0x7}}, {0x12, 0x2, [0xd6e, 0x6, 0x8, 0x8, 0x1, 0x8, 0x9]}}]}, @qdisc_kind_options=@q_gred={{0x9}, {0x4c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x7f, 0x80000001, 0x71f, 0x0, 0xf, 0x100, 0x7, 0x4, 0x6, 0x5, 0x16, 0x0, 0x19, 0x8, 0x9, 0x9d0}}, @TCA_GRED_MAX_P={0x8, 0x4, 0x8000}, @TCA_GRED_MAX_P={0x8, 0x4, 0x3ff}]}}]}, 0x164}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c810) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000a00)="d8000000210081044e81f782db44b9040a00000000fe0500002015000600142603600e1209000a0000b94dcf5c0468c1d67f6f94007134cfeee0800089e408e8d8ef52f40800de00e06bbace8017cbec4c2ee5a7cef4090000001fb79164075ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5035ccb29e00230db70100000040fad95667e006dcdf969b3ef35ce3bb9ad809d50400ce81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a83100043370e9701008400002d3bc75dc0bb9dd33e438c0000000000000000b9c81b6348554b06847ca47f70cd33379a5d8808cdb6282e860b201ea1ab77b5deaf2a49f072eebc6f2a95ec1ab37d9f38b2f888420ad4218cc30416fa1015f36a2347e405d60ed166d572f99001c4191fafe40d2c78caf08bb2f16753d9d41dc6c8d795456e5d8bcd4c1f58985e1e3597509f37f2076e8112a5d97b0ebcfb2ac3e1b06c7ade7214c80a676c715e5262fb9524ee303a7427145092b9bd8abb889b76b47b59a78ccdb9da20d1ee945aef062e93a1971810cd148d80b17595", 0x196}], 0x1}, 0x880) timer_create(0x0, 0x0, 0x0) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f000014e000/0x1000)=nil, &(0x7f0000e18000/0x3000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71, 0x0, 0x5f}) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f00000001c0)=0x2, 0x4) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x7}, 0x1c) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) r4 = syz_io_uring_setup(0x110, &(0x7f0000000340)={0x0, 0xccba, 0x80, 0x3, 0x1003de}, &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x0) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f00000003c0)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x1, 0x6000, @fd_index, 0x400000080001001, 0x0, 0x0, 0x32, 0x1}) io_uring_enter(r4, 0x47f3, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$inet(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x30006041) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r7 = socket(0x2a, 0x80000, 0x80) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x44}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f0000000580)={0x0, ""/256, 0x0, 0x0, 0x0}) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f0000000240)=ANY=[@ANYRES8=r2, @ANYRESDEC=r9, @ANYBLOB=',unhide,hide,gid=', @ANYRESHEX=0x0, @ANYRESHEX=r10], 0x2, 0xa68, &(0x7f0000000ec0)="$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") 2.950365858s ago: executing program 6 (id=1910): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000040), 0x7, 0x4e3, &(0x7f0000001200)="$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") r2 = open(0x0, 0x10000, 0x0) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x1c, 0x2, 0x3, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x1}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x43044) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000300)={0x1c, 0x2, 0x3, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0x1d}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20010) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000001c0)=0x10) mount$9p_unix(&(0x7f0000000180)='./file1\x00', &(0x7f0000000200)='./file1\x00', &(0x7f0000000280), 0x10002, &(0x7f00000002c0)) r5 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0xc00) sendto$inet6(r5, &(0x7f00000000c0)="dc6e4ee4b758631efb26d4f3441acc46bcff6e6af400b7971e4e885f05df60012eb1241b4ed0809c4367406d873b30faa2470aac93d0ede7eadea202f08a72e99840b1411ddca6ef26ce69d5c867d817c317e353b3e862804abe94dec659cb96bd15fee1459119f74a29e8a534d3856d5f45c457efbb86ccdf5138828aeb4d53bb5bad635a22d9f57e86b2f80eb55ee98c53e98135a3cd61db492b35bae9c0aba0aa05c7cf49c0bc", 0xa8, 0x800, &(0x7f0000000180)={0xa, 0x4e20, 0xa, @mcast2, 0xfffffff7}, 0x1c) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x19}, 0x0, 0x0, 0x0, 0x0}, 0x58) r6 = socket$inet(0x10, 0x3, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x1010000, &(0x7f00000003c0)={[{@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'cp949'}}, {@uni_xlate}, {@utf8}, {@utf8no}, {@utf8}, {@utf8no}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'macinuit'}}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'cp950'}}, {@fat=@codepage={'codepage', 0x3d, '857'}}, {@utf8no}, {@shortname_lower}, {@rodir}, {@shortname_lower}, {@numtail}]}, 0x1, 0x371, &(0x7f0000000c00)="$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") ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bond0\x00'}) r7 = socket$nl_route(0x10, 0x3, 0x0) shutdown(r7, 0x0) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@ipv4_newrule={0x34, 0x20, 0x1, 0x70bd26, 0x25dfdbfb, {0x2, 0x20, 0x80, 0x81, 0x1, 0x0, 0x0, 0x6, 0x2}, [@FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x401}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0xfffffffffffffff7}]}, 0x34}}, 0x0) 2.868646623s ago: executing program 2 (id=1911): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x0, 0x0, 0x0, 0x0, 0x8, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x4, 0xaea}, 0x10005, 0x3, 0xfffffbff, 0x3, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) (async) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x0, 0x0, 0x0, 0x0, 0x8, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x4, 0xaea}, 0x10005, 0x3, 0xfffffbff, 0x3, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f00000001c0)='cpu<-0\t\t\t') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'bridge_slave_1\x00', 0x0}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xfffffeffffffffff]}, 0x0, 0x8) io_setup(0x7, 0x0) io_submit(0x0, 0x0, 0x0) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) (async) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r5, r4, 0x25, 0x0, @val=@netkit={@void, @value=r5}}, 0x1c) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="28000000130001002cbd7000fcdbdf250000fff0", @ANYRES32=r4, @ANYBLOB="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", @ANYRES32=r1, @ANYBLOB], 0x28}}, 0x20040000) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="28000000130001002cbd7000fcdbdf250000fff0", @ANYRES32=r4, @ANYBLOB="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", @ANYRES32=r1, @ANYBLOB], 0x28}}, 0x20040000) 2.764830719s ago: executing program 3 (id=1912): r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) write$binfmt_format(r0, &(0x7f0000000100)='0\x00', 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x78, '\x00', 0x0, @fallback=0x30, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) write$qrtrtun(r0, &(0x7f0000000300)="ca0e808bb35b", 0x6) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x7], 0x0, 0x0, 0x80000}}, 0x40) 2.589538719s ago: executing program 2 (id=1913): r0 = syz_clone(0x400100, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) vmsplice(r2, &(0x7f0000000040)=[{&(0x7f0000000000)="e3", 0x1}], 0x1, 0x1) vmsplice(r2, &(0x7f0000000480)=[{&(0x7f00000000c0)='{', 0x1}], 0x1, 0xd) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800"/15], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000000300)=ANY=[@ANYBLOB="500000003f0001002cbd7000ffdbdf25010000003a0004002c4e"], 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x8000) close_range(r2, r1, 0x2) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff3}, {}, {0xe, 0x3f}}, [@TCA_RATE={0x6, 0x5, {0x6, 0x3}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000a53000/0x3000)=nil, 0x3000) madvise(&(0x7f000003d000/0x4000)=nil, 0x4000, 0xa) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r5 = shmget$private(0x0, 0xc000, 0x400, &(0x7f0000627000/0xc000)=nil) shmat(r5, &(0x7f0000ffc000/0x1000)=nil, 0x4000) waitid(0x1, r0, 0x0, 0x2, &(0x7f00000006c0)) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000340)=0x5, 0x4) 2.588753609s ago: executing program 3 (id=1914): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000040), 0x7, 0x4e3, &(0x7f0000001200)="$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") r3 = open(&(0x7f00000000c0)='.\x00', 0x10000, 0x0) getdents(r3, &(0x7f0000001fc0)=""/184, 0xb8) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r4 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, 0x0, 0x43044) sendmsg$NFQNL_MSG_CONFIG(r5, 0x0, 0x20010) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000001c0)=0x10) mount$9p_unix(&(0x7f0000000180)='./file1\x00', &(0x7f0000000200)='./file1\x00', &(0x7f0000000280), 0x10002, &(0x7f00000002c0)) r6 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0xc00) sendto$inet6(r6, &(0x7f00000000c0)="dc6e4ee4b758631efb26d4f3441acc46bcff6e6af400b7971e4e885f05df60012eb1241b4ed0809c4367406d873b30faa2470aac93d0ede7eadea202f08a72e99840b1411ddca6ef26ce69d5c867d817c317e353b3e862804abe94dec659cb96bd15fee1459119f74a29e8a534d3856d5f45c457efbb86ccdf5138828aeb4d53bb5bad635a22d9f57e86b2f80eb55ee98c53e98135a3cd61db492b35bae9c0aba0aa05c7cf49c0bc", 0xa8, 0x800, &(0x7f0000000180)={0xa, 0x4e20, 0xa, @mcast2, 0xfffffff7}, 0x1c) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x19}, 0x0, 0x0, 0x0, 0x0}, 0x58) r7 = socket$inet(0x10, 0x3, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x1010000, &(0x7f00000003c0)={[{@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'cp949'}}, {@uni_xlate}, {@utf8}, {@utf8no}, {@utf8}, {@utf8no}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'macinuit'}}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'cp950'}}, {@fat=@codepage={'codepage', 0x3d, '857'}}, {@utf8no}, {@shortname_lower}, {@rodir}, {@shortname_lower}, {@numtail}]}, 0x1, 0x371, &(0x7f0000000c00)="$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") ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'bond0\x00'}) r8 = socket$nl_route(0x10, 0x3, 0x0) shutdown(r8, 0x0) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@ipv4_newrule={0x34, 0x20, 0x1, 0x70bd26, 0x25dfdbfb, {0x2, 0x20, 0x80, 0x81, 0x1, 0x0, 0x0, 0x6, 0x2}, [@FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x401}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0xfffffffffffffff7}]}, 0x34}}, 0x0) 2.532963953s ago: executing program 5 (id=1915): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000019c0), 0x1, 0x0) (fail_nth: 1) 2.05197834s ago: executing program 3 (id=1918): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) r0 = socket$inet(0x2, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000080)={@private0, 0x0}, &(0x7f00000000c0)=0x14) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', r1}, 0x50) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@map=r2, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) setsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, 0x0, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x8c0, &(0x7f0000000500), 0x3, 0x42f, &(0x7f0000000940)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) open(0x0, 0x15ec8018e424c2cb, 0x86) move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0) ioctl$FS_IOC_FIEMAP(r4, 0xc020660b, &(0x7f0000000400)=ANY=[]) 1.852323272s ago: executing program 2 (id=1919): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000040), 0x7, 0x4e3, &(0x7f0000001200)="$eJzs3EFsVEUYAOD/bbe0QJGKiFJRi2hsNLZQUDiYGIwmHjQx4kGPTVsIUqhpayKEwJIYPBoSr8Z49OrBqxovhpOJVzyaGBJiuACe1rzdt+12+3Yp7bYr7fcl2515O+/NzM6bt/NmuhvApjWY/kki+iLiRkTsjIhCY4LB6tPd2xfH792+OB6lcvnEP0m6W9xJ45kke96eRYYKEYUvkoUX6syev3BmbGpqciaLj8yd/XRk9vyFV06fHTs1eWry3OixY0cOHzr62uirD16pnPzSet0ZuDS9b+87H197b7xY296bPdfXo10GYzCvKBUvtDuzDttRF06KrVK+sfaFYdnS8z9tru5K/98ZXdGy8YANpFwul3uav1wqN7qyZAvw0Eqi0yUAOqP2QZ/e/9YeeQOBLWsz/Oi4W8erN0Bpve9mj4hnKxtr8yDdDfe37TQYxfio9O+36SONF9dgHgIAoN7Px2sjwYbxX3/Enrp0j2RrKP0R8WhE7IqIxyJid0Q8HtW0T0TEkw3H74qIcov8BxviS8efhZurq2Fr6fjv9Wxta2H8F/WrYP1dWWxHRG3APHkwe0+Gorvn5OmpyUMt8vjlrT++avZaWv/a+C99pPnXxoJZOW4WGyboJsbmxlZc4Qa3rkQMFBvrnxQjkvmVgCQi9kbEwK/fLPu4/XXh0y99v28+0r043f3rX1HOXUdrw1JF+buIF6vtX4pF7b+QY9J6fXKkN6YmD46kZ8HB3Dyu/371/bztyXLq/+Nfjbu9ffSnE1nPWr20/bfVnf9RW79dqH9/EpHMr9fONjnQ5eZ5XP3zy6b3NCs9/7ckH1bCtfvSz8fm5mYORWxJ3l26fXRh31o8fY5Stf5DB/L7/65sn/SdeCoi0pP46Yh4Jqp3iINRvrw/Ip6LiAPNqx+/vfn8Jyuv/9pK6z+Re/1b1P4L6/VpIN06s2jL2FRSqqZe2DIf6Dqz/8a9gfz8l9f+RyqhoWxL/vUvWXSJWFqK/MAq3z4AAAB4KBQioq9uLqkvCoXh4eoc0O7YVpianp17OZn+7NxE9TsC/XVpq/PB3Ult/rO/Lj7aED+czRt/3bW1Eh8en56a6FCdgartlT6fFIbnrwXV/p/6uz1TzMD/ma/8wOZ1v/6/59o6FQRYdz7/YbOauVQXKTVJVPKfMrAxLefz31wgbEx5/b/F/3O7YYANoqw7w6b2IP1/cdrrO9teGGBdFeOD+XChoyUB1pvxP2xKy/qS/IoD5Z78l3pjaeLobX3ArlhZMbbm5NWRQDqy6kjuW1eyV+3XFJqmicKDHbBnyU9GrKxNT67+bTm1p+0nfzlbH2t3C/6wLv00L9D6ujHat3bXJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHb6LwAA///zLttP") r3 = open(&(0x7f00000000c0)='.\x00', 0x10000, 0x0) getdents(r3, &(0x7f0000001fc0)=""/184, 0xb8) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r4 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, 0x0, 0x43044) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000019c0)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x20010) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000001c0)=0x10) mount$9p_unix(&(0x7f0000000180)='./file1\x00', &(0x7f0000000200)='./file1\x00', &(0x7f0000000280), 0x10002, &(0x7f00000002c0)) r6 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0xc00) sendto$inet6(r6, &(0x7f00000000c0)="dc6e4ee4b758631efb26d4f3441acc46bcff6e6af400b7971e4e885f05df60012eb1241b4ed0809c4367406d873b30faa2470aac93d0ede7eadea202f08a72e99840b1411ddca6ef26ce69d5c867d817c317e353b3e862804abe94dec659cb96bd15fee1459119f74a29e8a534d3856d5f45c457efbb86ccdf5138828aeb4d53bb5bad635a22d9f57e86b2f80eb55ee98c53e98135a3cd61db492b35bae9c0aba0aa05c7cf49c0bc", 0xa8, 0x800, &(0x7f0000000180)={0xa, 0x4e20, 0xa, @mcast2, 0xfffffff7}, 0x1c) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x19}, 0x0, 0x0, 0x0, 0x0}, 0x58) r7 = socket$inet(0x10, 0x3, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x1010000, &(0x7f00000003c0)={[{@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'cp949'}}, {@uni_xlate}, {@utf8}, {@utf8no}, {@utf8}, {@utf8no}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'macinuit'}}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'cp950'}}, {@fat=@codepage={'codepage', 0x3d, '857'}}, {@utf8no}, {@shortname_lower}, {@rodir}, {@shortname_lower}, {@numtail}]}, 0x1, 0x371, &(0x7f0000000c00)="$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") ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'bond0\x00'}) r8 = socket$nl_route(0x10, 0x3, 0x0) shutdown(r8, 0x0) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@ipv4_newrule={0x34, 0x20, 0x1, 0x70bd26, 0x25dfdbfb, {0x2, 0x20, 0x80, 0x81, 0x1, 0x0, 0x0, 0x6, 0x2}, [@FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x401}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0xfffffffffffffff7}]}, 0x34}}, 0x0) 1.479224264s ago: executing program 5 (id=1922): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x3d1, 0xfffffffffffffffb}, 0x4, 0x9, 0x10000, 0x8, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="1808000030000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7060000000000008500000005000000bc090000000000000d090100000000009500000000000000b702000000000000db9af8fff1000000b5090000000000007b9af8ff00000000be8a00000000000007080000f8ffffffbf9400000000000007040000f0ffffffc70200000800000018260000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f1ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.352693731s ago: executing program 3 (id=1923): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x41, 0x0, 0x0, 0x0, 0x7}, 0x94) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) unshare(0x2c020400) r0 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14, 0xc0800) signalfd(r0, &(0x7f0000000100)={[0x8]}, 0x8) r1 = syz_io_uring_setup(0x10d, &(0x7f00000003c0)={0x0, 0x0, 0x1, 0x0, 0x10}, &(0x7f0000000380)=0x0, &(0x7f0000000580)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r1, 0x3f70, 0x0, 0x0, 0x0, 0x0) setitimer(0x2, &(0x7f0000000040)={{0x0, 0x2710}, {0x77359400}}, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r4 = perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb3, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x800, 0x2000000, 0x0, 0x0, 0x5, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xef, 0x3d27}, 0x400, 0x32, 0x43a1bd76, 0x7, 0x203, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000180)='!pu==0||!') r7 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, 0xffffffffffffffff) syz_usb_connect$lan78xx(0x6, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000009c0)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x800718, &(0x7f0000000200)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x48d, &(0x7f0000000a00)="$eJzs281rHOUfAPDvTLKb9teX5FfrS2vVaBGCYtKkVXvwolQQqSjooR5jsi2h20aaKLYWm4p4EqSgZ/Eo+hd4E0HUk+DVkycpFO2lrafITGaSTbp5odlk0+7nAzP7PDPP7Dzfnbdnn2c3gI7Vn82SiJ0R8UdE9M5lFxfon3u5ef3i2K3rF8eSmJ198+8kL3fj+sWxsmi53Y4iM5BGpJ8kxU4Wmzp/4fRovV47V+SHps+8OzR1/sIz758ZPVU7VTs7cvTokcPDzz838mxL4sziurH/o8kD+155+8prYyeuvPPLd1l9dxbrG+Nolf4s8H9mc0vXPdnqnbXZrnzek8+T7jZXhjXriojscFXy6783umLh4PXGyx+3tXLAhsqeTT3Lr56ZBe5hSay1ZKXhngHc/coHffb9t5w2odmxZVx7ce4LUBb3zWKaW9MdaVGmMv/9tvX6I+LEzL9fZVNsUD8EAECjz8a+PF6Nnvjw1revZm2P3vk1aTyQv/6Zz3cXYyh9EfH/iNgTEfdFxN6IuD8iL/tgRDy0zvrc3v5Jr67zLVeUtf9eKMa2Frf/ytZf9HUVuV15/JXk5ES9dqj4TAai0pPlh1fYxw/Hfv98uXWN7b9syvZftgWLelztXtJBNz46PRqV9US94NrliP3dzeJP5kcCkojYFxH757da0wDP7jIx8dQ3B5YrtHr8K2jBONPs11l4M1n8M7Ek/lLSOD45cdv45NC2qNcODZVnxe1+/e3TN5bb/7rib4FrtbnXhuO/tEhf0jheO9Xa/d/h+Z9Wk7fyceZqMeb4wej09LnhiGpyPM9Xi7L58pGFbct8WT47/wcONr/+9xTbZPE/HBHZSfxIRDwaEY8VdX88Ip6IiIMrxPjzS6vHH2mbjv/liPGm97/583/J8T9/4XR5a1xYsmKi6/RP3y+3/7Ud/yN5aqBYkt//VtGsOt1NqnynnxsAAADcTdL8N/BJOjifTtPBwbnf8O+N/6X1yanpp09Ovnd2fO638n1RScuert6iP7Q+Ua8NJzPFO1aSY1GvjRR9xWV/6eGi3/iLru15fnBssj7e5tih0+1Y5vrP/NXV7toBG2x706Uj1U2vCNAGS8fR08XZS6+HmwHcq/xfGzrXKtd/uln1ADaf5z90rmbX/6UleWMBcG/y/IfO5fqHDpX+2O4aAG3k+Q8dadU/77cnsa1xSXXlwtUtUueWJbbqQckTEWUi3RL1kdigRLvvTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAK3xXwAAAP//uIXZzg==") 1.352309281s ago: executing program 0 (id=1924): r0 = socket$kcm(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000e27f00000400000000000000", @ANYRES32, @ANYBLOB="00f8ffffffffffffff000000eec20abf044b5d6544"], 0x50) sendmsg$nl_route_sched(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newtaction={0xb0, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0x9c, 0x1, [@m_csum={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xffffffffffffffa5, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_skbedit={0x68, 0x1, 0x0, 0x0, {{0xc}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2, 0x9, 0x3f, 0x8be6, 0x4}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x4}, @TCA_SKBEDIT_PTYPE={0x0, 0x7, 0x2}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c810) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000a00)="d8000000210081044e81f782db44b9040a00000000fe0500002015000600142603600e1209000a0000b94dcf5c0468c1d67f6f94007134cfeee0800089e408e8d8ef52f40800de00e06bbace8017cbec4c2ee5a7cef4090000001fb79164075ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5035ccb29e00230db70100000040fad95667e006dcdf969b3ef35ce3bb9ad809d50400ce81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a83100043370e9701008400002d3bc75dc0bb9dd33e438c0000000000000000b9c81b6348554b06847ca47f70cd33379a5d8808cdb6282e860b201ea1ab77b5deaf2a49f072eebc6f2a95ec1ab37d9f38b2f888420ad4218cc30416fa1015f36a2347e405d60ed166d572f99001c4191fafe40d2c78caf08bb2f16753d9d41dc6c8d795456e5d8bcd4c1f58985e1e3597509f37f2076e8112a5d97b0ebcfb2ac3e1b06c7ade7214c80a676c715e5262fb9524ee303a7427145092b9bd8abb889b76b47b59a78ccdb9da20d1ee945aef062e93a1971810cd148d80b17595", 0x196}], 0x1}, 0x880) timer_create(0x0, 0x0, 0x0) r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f000014e000/0x1000)=nil, &(0x7f0000e18000/0x3000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71, 0x0, 0x5f}) r3 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.net/cgroup.procs\x00', 0x0, 0x0, 0x200) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$inet(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x30006041) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xef, 0x3d27}, 0x400, 0x32, 0x43a1bd76, 0x7, 0x203, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x3) socket$unix(0x1, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, 0xffffffffffffffff) r6 = socket(0x10, 0x803, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x44}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, &(0x7f0000000580)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r7, 0xc0c89425, &(0x7f0000000bc0)={"d3094e334d349994da3d9082c5efa435", 0x0, r8, {0x9, 0x6}, {0x0, 0x8}, 0x4, [0x64fc, 0xf, 0x4, 0x6, 0x9, 0x4, 0x6, 0x7, 0xfffffffffffffff9, 0x6, 0x4, 0xfffffffffffffffb, 0x5, 0xf, 0x800, 0x8000000000000001]}) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001400b59527bd7000fcdbdf2523090000", @ANYRES32=r10, @ANYBLOB="140002"], 0x34}}, 0x0) 1.350813051s ago: executing program 5 (id=1925): syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@broadcast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x2a, 0x65, 0x0, 0x0, 0x2f, 0x0, @private, @empty}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x88a8, 0x0, 0x0, [0xff, 0x0]}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x7}}}, {}, {0x8, 0x6558, 0xfffffffd}}}}}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000200)={0xffffffffffffffff, &(0x7f0000000080)='\x00', 0x0, &(0x7f0000000140)={@_ha_fsid={[0xbb, 0x10]}, {0x2, 0x6, 0xdc8b, 0xfffffffffffffff7}}, 0x3000, &(0x7f0000000180)={@_ha_fsid}, &(0x7f00000001c0)=0xc4c7}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@ipv4_newaddr={0x34, 0x14, 0x503, 0x70bd32, 0x25dfdc00, {0x2, 0x0, 0x0, 0xff, r5}, [@IFA_LOCAL={0x8, 0x2, @loopback}, @IFA_LABEL={0x14, 0x3, 'xfrm0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004011}, 0x0) sendmsg$GTP_CMD_ECHOREQ(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x98, r1, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_FAMILY={0x5, 0xd, 0x23}, @GTPA_MS_ADDR6={0x14, 0xc, @private1={0xfc, 0x1, '\x00', 0x1}}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDR6={0x14, 0xb, @private2={0xfc, 0x2, '\x00', 0x1}}, @GTPA_MS_ADDR6={0x14, 0xc, @dev={0xfe, 0x80, '\x00', 0x33}}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDR6={0x14, 0xb, @ipv4={'\x00', '\xff\xff', @local}}]}, 0x98}}, 0x800) 930.746875ms ago: executing program 5 (id=1926): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10, {{@in=@multicast1=0xe0000002, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80, 0x6}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffffffffffb}, {}, 0x0, 0x6e6bb8, 0x0, 0x0, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0x0, 0xa, 0x10}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, 0x0, 0x6e6bb5}}, 0xb8}}, 0x0) 841.193761ms ago: executing program 0 (id=1927): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000001e1affd5"], 0x7c}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000a00)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000ac1414aa00000000000000000000000000000005000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400000000000000000080000000000000000000000000000000044000500ac1414aa000000000000000000000000000000003c"], 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="cc0000002100010000000000fddbdf25fc000000000000000000000000000001fc0200000000000001a8000000000001fffc0000000000000a00008000000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000000005000110000000000000009000000ffff7f00000100000000000000000000ffff0a01010264010102000000000000000000000000e00000010000000000000000000000003c0000000000000002"], 0xcc}, 0x1, 0x0, 0x0, 0x800}, 0x42000) 794.979613ms ago: executing program 5 (id=1928): r0 = open(&(0x7f0000000000)='./file0\x00', 0x200080, 0x2dc) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x10, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0x9ffc) r2 = inotify_init1(0x0) fcntl$addseals(r2, 0x409, 0x1) ioctl$TIOCGPKT(r1, 0x80045438, &(0x7f0000001cc0)) 656.845382ms ago: executing program 0 (id=1929): r0 = syz_clone(0x400100, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) vmsplice(r2, &(0x7f0000000040)=[{&(0x7f0000000000)="e3", 0x1}], 0x1, 0x1) vmsplice(r2, &(0x7f0000000480)=[{&(0x7f00000000c0)='{', 0x1}], 0x1, 0xd) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800"/15], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000000300)=ANY=[@ANYBLOB="500000003f0001002cbd7000ffdbdf25010000003a0004002c4e"], 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x8000) close_range(r2, r1, 0x2) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff3}, {}, {0xe, 0x3f}}, [@TCA_RATE={0x6, 0x5, {0x6, 0x3}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000a53000/0x3000)=nil, 0x3000) madvise(&(0x7f000003d000/0x4000)=nil, 0x4000, 0xa) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r5 = shmget$private(0x0, 0xc000, 0x400, &(0x7f0000627000/0xc000)=nil) shmat(r5, &(0x7f0000ffc000/0x1000)=nil, 0x4000) waitid(0x1, r0, 0x0, 0x2, &(0x7f00000006c0)) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000340)=0x5, 0x4) 656.616161ms ago: executing program 5 (id=1930): unshare(0x6a040000) unshare(0x10060200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r3 = socket$caif_stream(0x25, 0x1, 0x4) setsockopt$CAIFSO_LINK_SELECT(r3, 0x116, 0x7f, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000540)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0xf}]}}]}, 0x48}}, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000019c0), 0x1, 0x0) 514.25003ms ago: executing program 0 (id=1931): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="1808000030000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b706000000000000850000002e000000bc0900000000000035090100000000009500000000000000b702000000000000db9af8fff1000000b5090000000000007b9af8ff00000000be8a00000000000007080000f8ffffffbf9400000000000007040000f0ffffffc70200000800000018260000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f1ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 381.606267ms ago: executing program 0 (id=1932): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x3, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0xc64}, 0x10014, 0x0, 0x800000, 0x0, 0x4, 0x2, 0x6, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000018c0)={'team0\x00'}) syz_emit_ethernet(0x1fa, &(0x7f0000000e80)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}, @link_local, @val={@val={0x88a8, 0x2, 0x0, 0x3}, {0x8100, 0x7, 0x1, 0x3}}, {@ipv6={0x86dd, @generic={0x8, 0x6, "10e3ff", 0x1bc, 0x3b, 0xff, @remote, @dev={0xfe, 0x80, '\x00', 0x3c}, {[@routing={0x0, 0xe, 0x2, 0x1, 0x0, [@mcast2, @private2={0xfc, 0x2, '\x00', 0x7}, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @empty}, @mcast1, @local, @remote]}, @routing={0x87, 0x0, 0x1, 0x7}, @hopopts={0x0, 0x5, '\x00', [@hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x15}}, @jumbo={0xc2, 0x4, 0x3ff}, @hao={0xc9, 0x10, @loopback}]}, @dstopts={0x73}, @srh={0x2, 0x10, 0x4, 0x8, 0xc3, 0x40, 0x0, [@mcast2, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, @empty, @private2={0xfc, 0x2, '\x00', 0x1}]}, @srh={0x29, 0x2, 0x4, 0x1, 0xcf, 0xc3d415cfffc7d9ff, 0x7, [@remote]}], "5937c9912be08c2bac103fee03a8b5d64df0d5fc516c5c10ab7bbfae71209f329025c50ec5ed8cda6ef6fae6234d44cf76ec9ea75cb154cae513d5feab5bfbf55806bbb6b94d0bd66e30a518ea384a9bf71f622ec9472eedf73d0a4e"}}}}}, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x2b, &(0x7f0000000000)={0x15, 0x1, 0x70000000}) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = msgget(0x1, 0x240) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000700)='./file1\x00', 0x0, &(0x7f0000000000), 0xfe, 0x250, &(0x7f0000000c00)="$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") msgctl$IPC_RMID(r3, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r4, 0x40286608, &(0x7f0000000080)={0x7, 0x9, 0x3, 0x7, 0x3, 0x1ff}) msgctl$IPC_RMID(r3, 0x0) msgctl$IPC_RMID(r3, 0x0) sendmsg$key(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="02170105150000002dbd7000fbdbdf2502000100000004d481fc4d040100000002001000000004d5000004d40000000004000300ffffffffffff01000000000000000200000000000000080012008a060200b96b6e00ff00000006003200010880000700000000000000000000005e4a00000000000000000001fc4b429f770a1b3c77345656c601000000000000000000000000000102000b004000000000000000"], 0xa8}}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280), &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000004c0)={r5, 0x5, 0xfffffffd, 0x8, 0x8, 0x76cc, 0x7, 0x0, {0x0, @in={{0x2, 0x4e24, @empty}}, 0x2, 0x5, 0x6, 0x6c6, 0x1}}, &(0x7f00000002c0)=0xb0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000140)=r5, 0x4) ioctl$SIOCGETLINKNAME(0xffffffffffffffff, 0x89e0, &(0x7f0000000040)={0x0, 0x2}) socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = dup(r6) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r6, &(0x7f0000000800)={&(0x7f0000000180)={0xa, 0x4e24, 0x9, @loopback, 0x4}, 0x1c, &(0x7f00000001c0)=[{&(0x7f00000002c0)=')', 0x1}], 0x1}, 0x4048043) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000400)={0x0, @in6={{0xa, 0x4e20, 0x8, @empty, 0x1}}, 0x3, 0xfffc, 0xe651, 0x2, 0x4, 0x8, 0xff}, 0x9c) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x1, 0xf06, 0x0, 0xac, 0x81, 0x5}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x37}}}, 0xfffffc, 0x31, 0xffdf1896, 0x5, 0xa6, 0x0, 0x6}, 0x9c) 200.953338ms ago: executing program 0 (id=1933): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000019c0), 0x1, 0x0) (fail_nth: 2) 43.299687ms ago: executing program 6 (id=1934): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000004000000080000000c"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000100000000000000f8ffffffb703000008000000b70400000300000085000000030000009500000000000000b69fea3b3147570d637d4f1f80e85d09360ba3e7b0917aeaeee21bc5c9d42b8c4ba7ec57fba7a17bf959d2f7017912d1c00d93a1755a345f62d4a2a1bdd1487d095f5d666b969936e5d57c3ee08e08f40435692805edea2a456e2bf615bd7b05b7c0f6b4ef3a05"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680)) getgroups(0x0, 0x0) setgroups(0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1, r0}, 0xc) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000140)=ANY=[], 0x32600) setsockopt$MRT_DEL_VIF(r2, 0x0, 0xcb, &(0x7f0000000040)={0xffffffffffffffff, 0x4, 0xa4, 0x2, @vifc_lcl_addr=@local, @local}, 0x10) 0s ago: executing program 3 (id=1935): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000600)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x0}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001003300000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) kernel console output (not intermixed with test programs): 183][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.830375][ T7842] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 210.853966][ T7842] ext4 filesystem being mounted at /247/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 210.907877][ T7837] EXT4-fs warning (device loop3): verify_group_input:137: Cannot add at group 7 (only 1 groups) [ 210.960393][ T7845] loop2: detected capacity change from 0 to 128 [ 210.968294][ T3313] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 211.122594][ T7857] netlink: 'syz.1.1253': attribute type 10 has an invalid length. [ 211.178421][ T7861] ref_ctr increment failed for inode: 0x54d offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff8881387c3600 [ 211.232608][ T7861] Cannot find add_set index 2 as target [ 211.450851][ T7870] netlink: 'syz.2.1257': attribute type 1 has an invalid length. [ 211.471574][ T7870] 8021q: adding VLAN 0 to HW filter on device bond4 [ 211.728688][ T7874] loop3: detected capacity change from 0 to 512 [ 211.742770][ T7875] loop1: detected capacity change from 0 to 512 [ 212.516647][ T7874] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.1258: bg 0: block 5: invalid block bitmap [ 212.529302][ T7874] loop3: lost filesystem error report for type 5 error -117 [ 212.529677][ T7875] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.1259: bg 0: block 5: invalid block bitmap [ 212.549869][ T7875] loop1: lost filesystem error report for type 5 error -117 [ 212.552047][ T7874] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6688: Corrupt filesystem [ 212.567325][ T7880] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.568872][ T7874] loop3: lost filesystem error report for type 5 error -117 [ 212.579210][ T7875] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6688: Corrupt filesystem [ 212.579312][ T7874] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.1258: invalid indirect mapped block 3 (level 2) [ 212.588891][ T7875] loop1: lost filesystem error report for type 5 error -117 [ 212.589757][ T28] audit: type=1400 audit(1770836440.011:815): avc: denied { read } for pid=7877 comm="syz.2.1260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 212.598013][ T7874] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 212.616364][ T7875] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.1259: invalid indirect mapped block 3 (level 2) [ 212.634335][ T7874] EXT4-fs (loop3): 1 orphan inode deleted [ 212.640252][ T7875] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 212.649800][ T7874] EXT4-fs (loop3): 1 truncate cleaned up [ 212.650279][ T7874] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.664924][ T7875] EXT4-fs (loop1): 1 orphan inode deleted [ 212.700782][ T7872] 9pnet_fd: p9_fd_create_unix (7872): problem connecting socket: ./file1: -111 [ 212.704529][ T7875] EXT4-fs (loop1): 1 truncate cleaned up [ 212.720071][ T7875] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.735633][ T7880] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.796015][ T7873] 9pnet_fd: p9_fd_create_unix (7873): problem connecting socket: ./file1: -111 [ 212.896437][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.003999][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.742898][ T7898] __nla_validate_parse: 7 callbacks suppressed [ 213.743057][ T7898] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1267'. [ 213.851982][ T7898] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1267'. [ 213.937582][ T7902] netlink: 'syz.2.1267': attribute type 10 has an invalid length. [ 213.957311][ T7898] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1267'. [ 213.999976][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 213.999994][ T28] audit: type=1326 audit(1770836441.451:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7908 comm="syz.1.1270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa70779bf79 code=0x7ffc0000 [ 214.047139][ T7902] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1267'. [ 214.069005][ T7912] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1271'. [ 214.081701][ T28] audit: type=1326 audit(1770836441.501:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7908 comm="syz.1.1270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa70779bf79 code=0x7ffc0000 [ 214.131718][ T28] audit: type=1326 audit(1770836441.501:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7908 comm="syz.1.1270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7fa70779bf79 code=0x7ffc0000 [ 214.150318][ T7910] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1267'. [ 214.165688][ T28] audit: type=1326 audit(1770836441.501:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7908 comm="syz.1.1270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa70779bf79 code=0x7ffc0000 [ 214.174586][ T7916] tun0: tun_chr_ioctl cmd 1074025675 [ 214.189733][ T28] audit: type=1326 audit(1770836441.501:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7908 comm="syz.1.1270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7fa70779bf79 code=0x7ffc0000 [ 214.218882][ T28] audit: type=1326 audit(1770836441.501:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7908 comm="syz.1.1270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa70779bf79 code=0x7ffc0000 [ 214.218958][ T7914] ref_ctr increment failed for inode: 0x44f offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff8881387c1b00 [ 214.242956][ T7916] tun0: persist enabled [ 214.258883][ T7916] tun0: tun_chr_ioctl cmd 1074025675 [ 214.271685][ T28] audit: type=1326 audit(1770836441.501:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7908 comm="syz.1.1270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa70779bf79 code=0x7ffc0000 [ 214.276456][ T7916] tun0: persist disabled [ 214.374736][ T7914] Cannot find add_set index 2 as target [ 214.425357][ T28] audit: type=1326 audit(1770836441.501:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7908 comm="syz.1.1270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa70779bf79 code=0x7ffc0000 [ 214.449336][ T28] audit: type=1326 audit(1770836441.501:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7908 comm="syz.1.1270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa70779bf79 code=0x7ffc0000 [ 214.535319][ T7938] 9pnet_fd: p9_fd_create_unix (7938): problem connecting socket: ./file1: -1 [ 215.044683][ T7940] loop2: detected capacity change from 0 to 512 [ 216.063337][ T7940] loop2: detected capacity change from 0 to 256 [ 216.849821][ T7947] loop1: detected capacity change from 0 to 512 [ 216.992264][ T7947] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 217.031803][ T7947] ext4 filesystem being mounted at /252/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 217.091833][ T28] audit: type=1400 audit(1770836444.521:826): avc: denied { setattr } for pid=7946 comm="syz.1.1281" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 217.130940][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.146789][ T7953] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1283'. [ 217.233061][ T7963] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1287'. [ 217.263095][ T7963] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1287'. [ 217.292025][ T7963] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1287'. [ 217.312085][ T7963] netlink: 'syz.1.1287': attribute type 10 has an invalid length. [ 217.330421][ T7966] Process accounting resumed [ 217.366949][ T7970] netlink: 'syz.0.1280': attribute type 63 has an invalid length. [ 217.391204][ T7970] lo: entered promiscuous mode [ 217.399899][ T7970] lo: entered allmulticast mode [ 217.658489][ T7984] loop3: detected capacity change from 0 to 512 [ 217.799286][ T7984] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.1289: bg 0: block 5: invalid block bitmap [ 217.812029][ T7984] loop3: lost filesystem error report for type 5 error -117 [ 217.812938][ T7984] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6688: Corrupt filesystem [ 217.829174][ T7984] loop3: lost filesystem error report for type 5 error -117 [ 217.830643][ T7984] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.1289: invalid indirect mapped block 3 (level 2) [ 217.851421][ T7984] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 217.854119][ T7984] EXT4-fs (loop3): 1 orphan inode deleted [ 217.869332][ T7984] EXT4-fs (loop3): 1 truncate cleaned up [ 217.875719][ T7984] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 217.904428][ T7984] 9pnet_fd: p9_fd_create_unix (7984): problem connecting socket: ./file1: -1 [ 219.007618][ T8010] netlink: 'syz.1.1300': attribute type 3 has an invalid length. [ 219.131864][ T8016] netlink: 'syz.5.1302': attribute type 63 has an invalid length. [ 219.160299][ T8016] lo: entered promiscuous mode [ 219.170389][ T8016] lo: entered allmulticast mode [ 219.367890][ T7994] Process accounting resumed [ 219.451733][ T8025] loop2: detected capacity change from 0 to 512 [ 219.516513][ T8028] 9pnet_fd: p9_fd_create_unix (8028): problem connecting socket: ./file1: -1 [ 219.678497][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.983346][ T8028] loop2: detected capacity change from 0 to 256 [ 221.464500][ T8049] loop1: detected capacity change from 0 to 512 [ 221.545334][ T8049] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.1308: bg 0: block 5: invalid block bitmap [ 221.558220][ T8049] loop1: lost filesystem error report for type 5 error -117 [ 221.596348][ T8049] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6688: Corrupt filesystem [ 221.612596][ T8049] loop1: lost filesystem error report for type 5 error -117 [ 221.613643][ T8049] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.1308: invalid indirect mapped block 3 (level 2) [ 221.634996][ T8049] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 221.639238][ T8049] EXT4-fs (loop1): 1 orphan inode deleted [ 221.654686][ T8049] EXT4-fs (loop1): 1 truncate cleaned up [ 221.660950][ T8049] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 221.729734][ T8053] 9pnet_fd: p9_fd_create_unix (8053): problem connecting socket: ./file1: -111 [ 221.827214][ T28] audit: type=1326 audit(1770836449.281:827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8055 comm="syz.5.1311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d477dbf79 code=0x7fc00000 [ 221.879592][ T28] audit: type=1326 audit(1770836449.311:828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8055 comm="syz.5.1311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0d477dbf79 code=0x7fc00000 [ 221.910961][ T28] audit: type=1326 audit(1770836449.311:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8055 comm="syz.5.1311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d477dbf79 code=0x7fc00000 [ 221.951808][ T28] audit: type=1326 audit(1770836449.331:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8055 comm="syz.5.1311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f0d477dbf79 code=0x7fc00000 [ 221.999352][ T28] audit: type=1326 audit(1770836449.331:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8055 comm="syz.5.1311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d477dbf79 code=0x7fc00000 [ 222.049454][ T28] audit: type=1326 audit(1770836449.331:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8055 comm="syz.5.1311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d477dbf79 code=0x7fc00000 [ 222.080028][ T28] audit: type=1326 audit(1770836449.331:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8055 comm="syz.5.1311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d477dbf79 code=0x7fc00000 [ 222.103708][ T28] audit: type=1326 audit(1770836449.331:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8055 comm="syz.5.1311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d477dbf79 code=0x7fc00000 [ 222.127836][ T28] audit: type=1326 audit(1770836449.331:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8055 comm="syz.5.1311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d477dbf79 code=0x7fc00000 [ 222.156427][ T28] audit: type=1326 audit(1770836449.331:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8055 comm="syz.5.1311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d477dbf79 code=0x7fc00000 [ 222.478490][ T8065] FAULT_INJECTION: forcing a failure. [ 222.478490][ T8065] name failslab, interval 1, probability 0, space 0, times 0 [ 222.503079][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.521836][ T8065] CPU: 0 UID: 0 PID: 8065 Comm: syz.5.1315 Tainted: G W syzkaller #0 PREEMPT(full) [ 222.521875][ T8065] Tainted: [W]=WARN [ 222.521883][ T8065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 222.521896][ T8065] Call Trace: [ 222.521903][ T8065] [ 222.521911][ T8065] __dump_stack+0x1d/0x30 [ 222.522011][ T8065] dump_stack_lvl+0x95/0xd0 [ 222.522162][ T8065] dump_stack+0x15/0x1b [ 222.522185][ T8065] should_fail_ex+0x263/0x280 [ 222.522215][ T8065] should_failslab+0x8c/0xb0 [ 222.522244][ T8065] kmem_cache_alloc_noprof+0x68/0x490 [ 222.522302][ T8065] ? alloc_empty_file+0x76/0x200 [ 222.522351][ T8065] alloc_empty_file+0x76/0x200 [ 222.522373][ T8065] path_openat+0x65/0x2050 [ 222.522399][ T8065] ? path_openat+0x1ab2/0x2050 [ 222.522458][ T8065] ? path_openat+0x1b01/0x2050 [ 222.522485][ T8065] ? _parse_integer_limit+0x170/0x190 [ 222.522513][ T8065] ? _parse_integer+0x27/0x40 [ 222.522558][ T8065] ? kstrtoull+0x111/0x140 [ 222.522591][ T8065] do_file_open+0x16c/0x290 [ 222.522653][ T8065] file_open_name+0xfa/0x120 [ 222.522678][ T8065] __se_sys_acct+0x8c/0x4f0 [ 222.522710][ T8065] __x64_sys_acct+0x1f/0x30 [ 222.522812][ T8065] x64_sys_call+0x2e7f/0x3020 [ 222.522839][ T8065] do_syscall_64+0x12c/0x370 [ 222.522874][ T8065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.522962][ T8065] RIP: 0033:0x7f0d477dbf79 [ 222.522980][ T8065] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 222.523067][ T8065] RSP: 002b:00007f0d4622f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a3 [ 222.523091][ T8065] RAX: ffffffffffffffda RBX: 00007f0d47a55fa0 RCX: 00007f0d477dbf79 [ 222.523211][ T8065] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000100 [ 222.523225][ T8065] RBP: 00007f0d4622f090 R08: 0000000000000000 R09: 0000000000000000 [ 222.523240][ T8065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 222.523255][ T8065] R13: 00007f0d47a56038 R14: 00007f0d47a55fa0 R15: 00007ffee3706d78 [ 222.523276][ T8065] [ 223.112669][ T8087] loop2: detected capacity change from 0 to 512 [ 223.537035][ T8087] loop2: detected capacity change from 0 to 256 [ 223.957730][ T8091] loop3: detected capacity change from 0 to 512 [ 225.371116][ T8111] loop3: detected capacity change from 0 to 512 [ 225.790032][ T8115] random: crng reseeded on system resumption [ 225.820382][ T8111] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.1324: bg 0: block 5: invalid block bitmap [ 225.833045][ T8111] loop3: lost filesystem error report for type 5 error -117 [ 225.834500][ T8111] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6688: Corrupt filesystem [ 225.850645][ T8111] loop3: lost filesystem error report for type 5 error -117 [ 225.850858][ T8111] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.1324: invalid indirect mapped block 3 (level 2) [ 225.871722][ T8111] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 225.879029][ T8111] EXT4-fs (loop3): 1 orphan inode deleted [ 225.894340][ T8111] EXT4-fs (loop3): 1 truncate cleaned up [ 225.906664][ T8111] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 225.936522][ T8117] Cannot find add_set index 2 as target [ 226.103816][ T8102] 9pnet_fd: p9_fd_create_unix (8102): problem connecting socket: ./file1: -1 [ 226.273816][ T8123] loop5: detected capacity change from 0 to 512 [ 226.402906][ T8123] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.1328: bg 0: block 5: invalid block bitmap [ 226.415576][ T8123] loop5: lost filesystem error report for type 5 error -117 [ 226.415866][ T8123] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6688: Corrupt filesystem [ 226.432417][ T8123] loop5: lost filesystem error report for type 5 error -117 [ 226.432760][ T8123] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.1328: invalid indirect mapped block 3 (level 2) [ 226.453491][ T8123] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 226.453844][ T8123] EXT4-fs (loop5): 1 orphan inode deleted [ 226.468823][ T8123] EXT4-fs (loop5): 1 truncate cleaned up [ 226.475313][ T8123] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.508197][ T8123] 9pnet_fd: p9_fd_create_unix (8123): problem connecting socket: ./file1: -1 [ 226.749468][ T8115] uprobe: syz.2.1329:8115 failed to unregister, leaking uprobe [ 226.833532][ T8131] loop2: detected capacity change from 0 to 512 [ 226.895298][ T3780] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.926713][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.125997][ T28] kauditd_printk_skb: 65 callbacks suppressed [ 227.126015][ T28] audit: type=1400 audit(1770836454.581:902): avc: denied { accept } for pid=8148 comm="syz.3.1337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 227.226141][ T8154] loop2: detected capacity change from 0 to 512 [ 227.699295][ T8155] loop2: detected capacity change from 0 to 256 [ 227.764368][ T8159] 9pnet_fd: p9_fd_create_unix (8159): problem connecting socket: ./file0: -2 [ 228.506446][ T8166] netlink: 'syz.3.1341': attribute type 1 has an invalid length. [ 228.621299][ T8166] bond5: entered promiscuous mode [ 228.639335][ T8166] 8021q: adding VLAN 0 to HW filter on device bond5 [ 229.005147][ T8196] loop1: detected capacity change from 0 to 512 [ 229.083980][ T8196] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.1348: bg 0: block 5: invalid block bitmap [ 229.096722][ T8196] loop1: lost filesystem error report for type 5 error -117 [ 229.097236][ T8196] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6688: Corrupt filesystem [ 229.113819][ T8196] loop1: lost filesystem error report for type 5 error -117 [ 229.114554][ T8196] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.1348: invalid indirect mapped block 3 (level 2) [ 229.135510][ T8196] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 229.136236][ T8196] EXT4-fs (loop1): 1 orphan inode deleted [ 229.151424][ T8196] EXT4-fs (loop1): 1 truncate cleaned up [ 229.158864][ T8196] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.194650][ T8196] 9pnet_fd: p9_fd_create_unix (8196): problem connecting socket: ./file1: -111 [ 229.518227][ T8203] loop3: detected capacity change from 0 to 512 [ 229.546586][ T8203] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 229.569032][ T8203] EXT4-fs error (device loop3): ext4_iget_extra_inode:5073: inode #15: comm syz.3.1349: corrupted in-inode xattr: invalid ea_ino [ 229.590257][ T8203] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 229.622846][ T8203] EXT4-fs (loop3): Remounting filesystem read-only [ 229.662086][ T8203] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 229.692572][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.742815][ T28] audit: type=1400 audit(1770836457.201:903): avc: denied { write } for pid=8216 comm="syz.1.1352" name="hwrng" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 229.768866][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.816552][ T28] audit: type=1400 audit(1770836457.271:904): avc: denied { name_connect } for pid=8223 comm="syz.0.1355" dest=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 229.856417][ T8226] loop5: detected capacity change from 0 to 512 [ 229.883201][ T8226] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.898312][ T8226] ext4 filesystem being mounted at /222/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 229.972263][ T3780] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.533193][ T8256] batadv_slave_1: entered promiscuous mode [ 230.681181][ T12] tipc: Subscription rejected, illegal request [ 230.687851][ T28] audit: type=1400 audit(1770836458.131:905): avc: denied { read } for pid=8249 comm="syz.5.1363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 230.847894][ T8277] loop2: detected capacity change from 0 to 1024 [ 230.874706][ T8279] IPv6: NLM_F_CREATE should be specified when creating new route [ 230.949508][ T8280] loop2: detected capacity change from 0 to 1024 [ 230.969497][ T8284] FAULT_INJECTION: forcing a failure. [ 230.969497][ T8284] name failslab, interval 1, probability 0, space 0, times 0 [ 231.037342][ T8284] CPU: 0 UID: 0 PID: 8284 Comm: syz.1.1372 Tainted: G W syzkaller #0 PREEMPT(full) [ 231.037404][ T8284] Tainted: [W]=WARN [ 231.037412][ T8284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 231.037424][ T8284] Call Trace: [ 231.037432][ T8284] [ 231.037440][ T8284] __dump_stack+0x1d/0x30 [ 231.037467][ T8284] dump_stack_lvl+0x95/0xd0 [ 231.037572][ T8284] dump_stack+0x15/0x1b [ 231.037598][ T8284] should_fail_ex+0x263/0x280 [ 231.037631][ T8284] should_failslab+0x8c/0xb0 [ 231.037658][ T8284] __kmalloc_noprof+0xb8/0x580 [ 231.037718][ T8284] ? inotify_handle_inode_event+0x124/0x3d0 [ 231.037756][ T8284] ? refcount_dec_and_lock+0x111/0x170 [ 231.037838][ T8284] inotify_handle_inode_event+0x124/0x3d0 [ 231.037886][ T8284] ? __pfx_inotify_freeing_mark+0x10/0x10 [ 231.037923][ T8284] inotify_ignored_and_remove_idr+0x29/0x60 [ 231.037966][ T8284] inotify_freeing_mark+0x1d/0x30 [ 231.038003][ T8284] fsnotify_destroy_mark+0x128/0x150 [ 231.038040][ T8284] inotify_handle_inode_event+0x37a/0x3d0 [ 231.038075][ T8284] ? __pfx_inotify_handle_inode_event+0x10/0x10 [ 231.038160][ T8284] fsnotify_handle_inode_event+0x1c0/0x220 [ 231.038188][ T8284] fsnotify+0x148a/0x1730 [ 231.038223][ T8284] __fsnotify_parent+0x358/0x3a0 [ 231.038254][ T8284] vfs_open+0x19c/0x1e0 [ 231.038273][ T8284] path_openat+0x1b70/0x2050 [ 231.038361][ T8284] do_file_open+0x16c/0x290 [ 231.038392][ T8284] file_open_name+0xfa/0x120 [ 231.038412][ T8284] __se_sys_acct+0x8c/0x4f0 [ 231.038503][ T8284] __x64_sys_acct+0x1f/0x30 [ 231.038528][ T8284] x64_sys_call+0x2e7f/0x3020 [ 231.038565][ T8284] do_syscall_64+0x12c/0x370 [ 231.038679][ T8284] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.038706][ T8284] RIP: 0033:0x7fa70779bf79 [ 231.038798][ T8284] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 231.038825][ T8284] RSP: 002b:00007fa7061f7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a3 [ 231.038851][ T8284] RAX: ffffffffffffffda RBX: 00007fa707a15fa0 RCX: 00007fa70779bf79 [ 231.038869][ T8284] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000100 [ 231.038883][ T8284] RBP: 00007fa7061f7090 R08: 0000000000000000 R09: 0000000000000000 [ 231.038897][ T8284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 231.038980][ T8284] R13: 00007fa707a16038 R14: 00007fa707a15fa0 R15: 00007ffff18a4e88 [ 231.039003][ T8284] [ 231.300865][ T8286] tipc: Failed to remove unknown binding: 66,0,0/0:859570416/859570417 [ 231.309939][ T8279] loop3: detected capacity change from 0 to 8192 [ 231.323546][ T28] audit: type=1400 audit(1770836458.741:906): avc: denied { connect } for pid=8285 comm="syz.0.1373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 231.336868][ T8284] Process accounting resumed [ 231.405366][ T8293] loop1: detected capacity change from 0 to 1024 [ 231.413829][ T8293] EXT4-fs: inline encryption not supported [ 231.430366][ T7459] loop3: p1 p2 p4 [ 231.435830][ T7459] loop3: p1 size 262144 extends beyond EOD, truncated [ 231.445386][ T7459] loop3: p2 start 4293394690 is beyond EOD, truncated [ 231.453010][ T7459] loop3: p4 size 100663296 extends beyond EOD, truncated [ 231.453830][ T8293] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 231.481050][ T8279] loop3: p1 p2 p4 [ 231.485338][ T8279] loop3: p1 size 262144 extends beyond EOD, truncated [ 231.494743][ T8279] loop3: p2 start 4293394690 is beyond EOD, truncated [ 231.538170][ T8279] loop3: p4 size 100663296 extends beyond EOD, truncated [ 231.663686][ T8299] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.1374: bg 0: block 5: invalid block bitmap [ 231.676464][ T8299] loop5: lost filesystem error report for type 5 error -117 [ 231.682643][ T8299] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6688: Corrupt filesystem [ 231.698824][ T8299] loop5: lost filesystem error report for type 5 error -117 [ 231.700544][ T8299] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.1374: invalid indirect mapped block 3 (level 2) [ 231.721362][ T8299] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 231.721987][ T8299] EXT4-fs (loop5): 1 orphan inode deleted [ 231.736963][ T8299] EXT4-fs (loop5): 1 truncate cleaned up [ 231.743699][ T8299] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 231.765570][ T8299] 9pnet_fd: p9_fd_create_unix (8299): problem connecting socket: ./file1: -111 [ 231.850632][ T7465] udevd[7465]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 231.892767][ T7459] udevd[7459]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 232.124187][ T7459] udevd[7459]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 232.140815][ T7465] udevd[7465]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 232.269561][ T8317] set_capacity_and_notify: 1 callbacks suppressed [ 232.269580][ T8317] loop2: detected capacity change from 0 to 512 [ 232.674172][ T8317] loop2: detected capacity change from 0 to 256 [ 232.738599][ T28] audit: type=1400 audit(1770836460.181:907): avc: denied { map } for pid=8292 comm="syz.1.1375" path="/newroot/273/file1/file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 232.771576][ T8305] tipc: Enabling of bearer rejected, failed to enable media [ 232.797710][ T3780] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.918645][ T28] audit: type=1400 audit(1770836460.181:908): avc: denied { execute } for pid=8292 comm="syz.1.1375" path="/newroot/273/file1/file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 232.972818][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.516368][ T8343] loop1: detected capacity change from 0 to 512 [ 233.594106][ T8343] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.1383: bg 0: block 5: invalid block bitmap [ 233.606651][ T8343] loop1: lost filesystem error report for type 5 error -117 [ 233.607308][ T8343] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6688: Corrupt filesystem [ 233.623479][ T8343] loop1: lost filesystem error report for type 5 error -117 [ 233.624033][ T8343] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.1383: invalid indirect mapped block 3 (level 2) [ 233.645111][ T8343] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 233.647412][ T8343] EXT4-fs (loop1): 1 orphan inode deleted [ 233.662476][ T8343] EXT4-fs (loop1): 1 truncate cleaned up [ 233.669264][ T8343] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 233.701739][ T8343] 9pnet_fd: p9_fd_create_unix (8343): problem connecting socket: ./file1: -1 [ 233.813775][ T8338] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=24 sclass=netlink_tcpdiag_socket pid=8338 comm=syz.5.1381 [ 233.891399][ T8347] loop3: detected capacity change from 0 to 512 [ 233.950787][ T8338] IPVS: dh: FWM 3 0x00000003 - no destination available [ 233.982080][ T8347] EXT4-fs: Ignoring removed nomblk_io_submit option [ 234.008000][ T3525] IPVS: starting estimator thread 0... [ 234.023391][ T8347] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.1388: iget: bad extended attribute block 262144 [ 234.060602][ T8353] loop2: detected capacity change from 0 to 128 [ 234.111705][ T8348] IPVS: using max 2496 ests per chain, 124800 per kthread [ 234.125203][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.134980][ T8347] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 234.135223][ T8347] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.1388: couldn't read orphan inode 15 (err -117) [ 234.182003][ T8347] loop3: lost filesystem error report for type 5 error -117 [ 234.189882][ T8347] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 234.234743][ T28] audit: type=1400 audit(1770836461.671:909): avc: denied { bind } for pid=8357 comm="syz.1.1391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 234.289089][ T28] audit: type=1400 audit(1770836461.671:910): avc: denied { write } for pid=8357 comm="syz.1.1391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 234.359396][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.458619][ T28] audit: type=1326 audit(1770836461.911:911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8374 comm="syz.2.1396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e8b69bf79 code=0x7ffc0000 [ 234.521676][ T28] audit: type=1326 audit(1770836461.911:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8374 comm="syz.2.1396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e8b69bf79 code=0x7ffc0000 [ 234.581645][ T28] audit: type=1326 audit(1770836461.911:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8374 comm="syz.2.1396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f9e8b69bf79 code=0x7ffc0000 [ 234.626884][ T28] audit: type=1326 audit(1770836461.911:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8374 comm="syz.2.1396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e8b69bf79 code=0x7ffc0000 [ 234.699395][ T28] audit: type=1326 audit(1770836461.911:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8374 comm="syz.2.1396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e8b69bf79 code=0x7ffc0000 [ 234.704919][ T4830] IPVS: stop unused estimator thread 0... [ 234.724938][ T8376] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 234.735192][ T8376] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 234.750926][ T8390] netlink: 'syz.2.1397': attribute type 4 has an invalid length. [ 234.767522][ T28] audit: type=1326 audit(1770836461.911:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8374 comm="syz.2.1396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=92 compat=0 ip=0x7f9e8b69bf79 code=0x7ffc0000 [ 234.771128][ T8388] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.837326][ T8388] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.849307][ T8376] __nla_validate_parse: 4 callbacks suppressed [ 234.849483][ T8376] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1393'. [ 234.873167][ T8394] loop3: detected capacity change from 0 to 512 [ 234.926359][ T8394] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.1399: bg 0: block 5: invalid block bitmap [ 234.938855][ T8394] loop3: lost filesystem error report for type 5 error -117 [ 234.939415][ T8394] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6688: Corrupt filesystem [ 234.955752][ T8394] loop3: lost filesystem error report for type 5 error -117 [ 234.956236][ T8394] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.1399: invalid indirect mapped block 3 (level 2) [ 234.977278][ T8394] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 234.977891][ T8394] EXT4-fs (loop3): 1 orphan inode deleted [ 234.993109][ T8394] EXT4-fs (loop3): 1 truncate cleaned up [ 234.999781][ T8394] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 235.018818][ T8394] 9pnet_fd: p9_fd_create_unix (8394): problem connecting socket: ./file1: -111 [ 235.278572][ T8376] hsr_slave_0: left promiscuous mode [ 235.284895][ T8376] hsr_slave_1: left promiscuous mode [ 235.454740][ T8414] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1407'. [ 235.523454][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.625470][ T8431] lo speed is unknown, defaulting to 1000 [ 235.632281][ T8431] lo speed is unknown, defaulting to 1000 [ 235.638263][ T8431] lo speed is unknown, defaulting to 1000 [ 235.669762][ T8431] infiniband syz0: set active [ 235.674775][ T8431] infiniband syz0: added lo [ 235.691192][ T8431] RDS/IB: syz0: added [ 235.695346][ T8431] smc: adding ib device syz0 with port count 1 [ 235.701776][ T8431] smc: ib device syz0 port 1 has no pnetid [ 235.712622][ T10] lo speed is unknown, defaulting to 1000 [ 235.718606][ T3532] lo speed is unknown, defaulting to 1000 [ 235.724798][ T8431] lo speed is unknown, defaulting to 1000 [ 235.767177][ T8431] lo speed is unknown, defaulting to 1000 [ 235.811844][ T8431] lo speed is unknown, defaulting to 1000 [ 235.849672][ T8431] lo speed is unknown, defaulting to 1000 [ 235.892616][ T8431] lo speed is unknown, defaulting to 1000 [ 235.930485][ T8445] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1416'. [ 235.930550][ T8431] lo speed is unknown, defaulting to 1000 [ 235.974742][ T8445] netlink: 168 bytes leftover after parsing attributes in process `syz.5.1416'. [ 236.126209][ T8453] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1416'. [ 236.414354][ T8462] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1421'. [ 236.435350][ T8468] loop1: detected capacity change from 0 to 512 [ 236.492902][ T8471] loop2: detected capacity change from 0 to 2048 [ 237.001204][ T8468] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 237.062913][ T8468] ext4 filesystem being mounted at /285/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 237.117770][ T8477] loop2: detected capacity change from 0 to 512 [ 237.182205][ T8477] SELinux: security_context_str_to_sid (unconfined_usmackfsfloor=lt{uY(Μ:v_?BAА%3֎Rww/锺J$bJe<,fsuuid=2eec,errors=continue) failed with errno=-22 [ 237.226753][ T8479] lo speed is unknown, defaulting to 1000 [ 237.295482][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.600368][ T8492] netlink: 'syz.0.1429': attribute type 13 has an invalid length. [ 237.913446][ T8510] netlink: 'syz.1.1432': attribute type 1 has an invalid length. [ 237.954059][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 237.954078][ T28] audit: type=1400 audit(1770836466.412:931): avc: denied { setopt } for pid=8511 comm="syz.5.1434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 238.054201][ T8492] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.061417][ T8492] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.403469][ T8534] loop3: detected capacity change from 0 to 512 [ 238.471089][ T8533] netlink: 336 bytes leftover after parsing attributes in process `syz.2.1437'. [ 238.487308][ T8534] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.1436: bg 0: block 5: invalid block bitmap [ 238.500056][ T8534] loop3: lost filesystem error report for type 5 error -117 [ 238.500752][ T8534] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6688: Corrupt filesystem [ 238.517134][ T8534] loop3: lost filesystem error report for type 5 error -117 [ 238.517897][ T8534] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.1436: invalid indirect mapped block 3 (level 2) [ 238.539044][ T8534] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 238.541073][ T8534] EXT4-fs (loop3): 1 orphan inode deleted [ 238.556387][ T8534] EXT4-fs (loop3): 1 truncate cleaned up [ 238.562794][ T8534] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 238.583844][ T8534] 9pnet_fd: p9_fd_create_unix (8534): problem connecting socket: ./file1: -111 [ 238.839765][ T8492] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 238.855297][ T8492] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 238.880761][ T8541] netlink: 336 bytes leftover after parsing attributes in process `syz.2.1439'. [ 238.947059][ T23] lo speed is unknown, defaulting to 1000 [ 238.953019][ T23] syz0: Port: 1 Link DOWN [ 238.967819][ T8510] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 238.968274][ T12] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 239.072338][ T12] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.080855][ T12] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 239.089745][ T12] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.118384][ T12] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 239.175452][ T28] audit: type=1400 audit(1770836467.632:932): avc: denied { create } for pid=8559 comm="syz.2.1445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 239.196588][ T12] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.206638][ T8563] random: crng reseeded on system resumption [ 239.327428][ T23] lo speed is unknown, defaulting to 1000 [ 239.436131][ T8563] ref_ctr increment failed for inode: 0x61a offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff8881387c3cc0 [ 239.460639][ T8568] lo speed is unknown, defaulting to 1000 [ 239.593050][ T8566] Cannot find add_set index 2 as target [ 239.745105][ T12] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 239.754119][ T12] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.765355][ T8567] loop5: detected capacity change from 0 to 128 [ 239.792946][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.846335][ T8575] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1443'. [ 239.847273][ T8567] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 239.952347][ T8582] netlink: 336 bytes leftover after parsing attributes in process `syz.3.1449'. [ 239.975431][ T8567] ext4 filesystem being mounted at /234/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 239.995781][ T8585] random: crng reseeded on system resumption [ 240.020598][ T8585] ref_ctr increment failed for inode: 0x625 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff8881383c6540 [ 240.048879][ T8557] EXT4-fs warning (device loop5): verify_group_input:137: Cannot add at group 7 (only 1 groups) [ 240.111261][ T8585] Cannot find add_set index 2 as target [ 240.466828][ T8603] netlink: 'syz.1.1455': attribute type 1 has an invalid length. [ 240.572630][ T8612] loop3: detected capacity change from 0 to 512 [ 240.630861][ T8612] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.1457: bg 0: block 5: invalid block bitmap [ 240.643631][ T8612] loop3: lost filesystem error report for type 5 error -117 [ 240.649237][ T8612] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6688: Corrupt filesystem [ 240.665678][ T8612] loop3: lost filesystem error report for type 5 error -117 [ 240.668422][ T8612] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.1457: invalid indirect mapped block 3 (level 2) [ 240.689217][ T8612] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 240.689911][ T8612] EXT4-fs (loop3): 1 orphan inode deleted [ 240.705123][ T8612] EXT4-fs (loop3): 1 truncate cleaned up [ 240.711872][ T8612] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 240.744223][ T8612] 9pnet_fd: p9_fd_create_unix (8612): problem connecting socket: ./file1: -1 [ 241.136234][ T8603] 8021q: adding VLAN 0 to HW filter on device bond5 [ 241.294021][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.617878][ T8624] netlink: 336 bytes leftover after parsing attributes in process `syz.1.1463'. [ 241.863986][ T8631] random: crng reseeded on system resumption [ 241.880551][ T8631] ref_ctr increment failed for inode: 0x63a offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff8881387c1b00 [ 241.932968][ T8634] Cannot find add_set index 2 as target [ 242.152148][ T3780] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 242.194913][ T8647] netlink: 'syz.2.1473': attribute type 1 has an invalid length. [ 242.467151][ T8656] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 242.473796][ T8656] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 242.497233][ T8656] vhci_hcd vhci_hcd.0: Device attached [ 242.515319][ T8657] vhci_hcd: connection closed [ 242.515636][ T51] vhci_hcd vhci_hcd.1: stop threads [ 242.546395][ T8647] 8021q: adding VLAN 0 to HW filter on device bond5 [ 242.548557][ T51] vhci_hcd vhci_hcd.1: release socket [ 242.570973][ T51] vhci_hcd vhci_hcd.1: disconnect device [ 242.581458][ T8660] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1472'. [ 242.783301][ T8670] ipvlan2: entered allmulticast mode [ 242.788747][ T8670] dummy0: entered allmulticast mode [ 243.380679][ T8676] random: crng reseeded on system resumption [ 243.404810][ T8676] Cannot find add_set index 2 as target [ 243.431663][ T8682] loop2: detected capacity change from 0 to 128 [ 243.544673][ T8690] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1487'. [ 243.557379][ T28] audit: type=1400 audit(1770836472.012:933): avc: denied { setopt } for pid=8692 comm="syz.0.1488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 243.588595][ T8693] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1488'. [ 243.622197][ T8693] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1488'. [ 243.682553][ T8693] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 243.792726][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 243.821389][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 243.824709][ T8684] loop1: detected capacity change from 0 to 512 [ 243.836790][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 243.846673][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 243.855068][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 243.863058][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 243.871297][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 243.879290][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 243.894471][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 243.903041][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 243.916800][ T10] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 243.963063][ T8723] random: crng reseeded on system resumption [ 244.129055][ T8720] fido_id[8720]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 244.192816][ T8729] 9pnet_fd: p9_fd_create_unix (8729): problem connecting socket: ./file1: -1 [ 244.656270][ T8729] loop2: detected capacity change from 0 to 256 [ 245.011086][ T8732] Cannot find add_set index 2 as target [ 245.427396][ T8739] 9pnet_fd: p9_fd_create_unix (8739): problem connecting socket: ./file1: -1 [ 245.857107][ T8739] loop2: detected capacity change from 0 to 256 [ 245.983154][ T8744] loop3: detected capacity change from 0 to 1024 [ 246.087710][ T8749] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1502'. [ 246.142545][ T8744] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 246.201558][ T8755] netlink: 336 bytes leftover after parsing attributes in process `syz.5.1504'. [ 246.232749][ T8744] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1499'. [ 246.277038][ T28] audit: type=1326 audit(1770836474.732:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8756 comm="syz.2.1505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e8b69bf79 code=0x7ffc0000 [ 246.315058][ T8744] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 246.340109][ T8684] EXT4-fs (loop1): 1 orphan inode deleted [ 246.358473][ T28] audit: type=1326 audit(1770836474.752:935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8756 comm="syz.2.1505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f9e8b69bf79 code=0x7ffc0000 [ 246.407683][ T8684] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 246.446280][ T8768] loop5: detected capacity change from 0 to 512 [ 246.454185][ T28] audit: type=1326 audit(1770836474.752:936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8756 comm="syz.2.1505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e8b69bf79 code=0x7ffc0000 [ 246.494732][ T8767] batadv_slave_1: entered promiscuous mode [ 246.507488][ T8768] EXT4-fs (loop5): 1 orphan inode deleted [ 246.553020][ T8768] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 246.580928][ T8767] batadv_slave_1: left promiscuous mode [ 246.616585][ T28] audit: type=1326 audit(1770836474.752:937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8756 comm="syz.2.1505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e8b69bf79 code=0x7ffc0000 [ 246.642349][ T28] audit: type=1326 audit(1770836474.752:938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8756 comm="syz.2.1505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f9e8b69bf79 code=0x7ffc0000 [ 246.673922][ T28] audit: type=1326 audit(1770836474.752:939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8756 comm="syz.2.1505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e8b69bf79 code=0x7ffc0000 [ 246.693530][ T8684] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.708046][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.740398][ T8779] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1514'. [ 246.756878][ T28] audit: type=1326 audit(1770836474.762:940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8756 comm="syz.2.1505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9e8b69bf79 code=0x7ffc0000 [ 246.784011][ T28] audit: type=1326 audit(1770836474.762:941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8756 comm="syz.2.1505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e8b69bf79 code=0x7ffc0000 [ 246.812463][ T28] audit: type=1326 audit(1770836474.762:942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8756 comm="syz.2.1505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9e8b69bf79 code=0x7ffc0000 [ 246.843494][ T8786] loop2: detected capacity change from 0 to 512 [ 247.286727][ T8786] loop2: detected capacity change from 0 to 256 [ 247.344302][ T3780] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.593061][ T8805] netlink: 336 bytes leftover after parsing attributes in process `syz.2.1521'. [ 247.603985][ T8807] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1522'. [ 247.705823][ T8813] loop2: detected capacity change from 0 to 1024 [ 247.724952][ T8813] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 247.757895][ T8813] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 247.779248][ T8813] EXT4-fs (loop2): write access unavailable, skipping orphan cleanup [ 247.792132][ T8813] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 247.996699][ T8829] loop5: detected capacity change from 0 to 128 [ 248.060927][ T8829] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 248.073709][ T8829] ext4 filesystem being mounted at /247/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 248.090907][ T8825] EXT4-fs warning (device loop5): verify_group_input:137: Cannot add at group 7 (only 1 groups) [ 248.342418][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.449553][ T8839] loop3: detected capacity change from 0 to 512 [ 248.484144][ T8839] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.1529: bg 0: block 5: invalid block bitmap [ 248.496572][ T8839] loop3: lost filesystem error report for type 5 error -117 [ 248.497096][ T8839] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6688: Corrupt filesystem [ 248.513386][ T8839] loop3: lost filesystem error report for type 5 error -117 [ 248.513685][ T8839] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.1529: invalid indirect mapped block 3 (level 2) [ 248.534559][ T8839] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 248.539423][ T8839] EXT4-fs (loop3): 1 orphan inode deleted [ 248.554670][ T8839] EXT4-fs (loop3): 1 truncate cleaned up [ 248.561445][ T8839] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 248.583134][ T8839] 9pnet_fd: p9_fd_create_unix (8839): problem connecting socket: ./file1: -111 [ 248.667728][ T8838] lo speed is unknown, defaulting to 1000 [ 249.017606][ T8850] loop1: detected capacity change from 0 to 128 [ 249.027846][ T8850] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 249.046834][ T8850] ext4 filesystem being mounted at /307/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 249.068235][ T8850] EXT4-fs warning (device loop1): verify_group_input:137: Cannot add at group 7 (only 1 groups) [ 249.125969][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.233998][ T3314] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 249.302948][ T3780] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 249.354215][ T8880] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1542'. [ 249.368262][ T6948] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 249.368290][ T8880] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1542'. [ 249.406300][ T6948] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 249.430247][ T6948] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 249.441799][ T6948] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 249.448327][ T8877] Process accounting resumed [ 249.488461][ T8888] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1546'. [ 249.511819][ T28] kauditd_printk_skb: 28 callbacks suppressed [ 249.511838][ T28] audit: type=1400 audit(1770836477.962:971): avc: denied { write } for pid=8885 comm="syz.5.1546" lport=55150 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 249.623470][ T8873] loop3: detected capacity change from 0 to 8192 [ 249.644190][ T8893] netlink: 336 bytes leftover after parsing attributes in process `syz.5.1548'. [ 250.096816][ T8894] loop2: detected capacity change from 0 to 256 [ 250.315482][ T8899] loop1: detected capacity change from 0 to 128 [ 250.420104][ T8899] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 250.485912][ T8898] lo speed is unknown, defaulting to 1000 [ 250.519115][ T8899] ext4 filesystem being mounted at /309/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 250.601818][ T8899] netlink: 'syz.1.1550': attribute type 1 has an invalid length. [ 250.706704][ T8899] 8021q: adding VLAN 0 to HW filter on device bond6 [ 250.888524][ T28] audit: type=1400 audit(1770836479.342:972): avc: denied { create } for pid=8924 comm="syz.3.1559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 250.958408][ T3314] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 251.145388][ T8939] Cannot find add_set index 2 as target [ 251.693640][ T8943] loop3: detected capacity change from 0 to 256 [ 251.768258][ T8943] FAT-fs (loop3): codepage cp857 not found [ 252.289498][ T8956] loop1: detected capacity change from 0 to 1024 [ 252.429391][ T8936] loop5: detected capacity change from 0 to 512 [ 252.441903][ T8936] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 252.468737][ T8936] EXT4-fs (loop5): 1 truncate cleaned up [ 252.492282][ T8936] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 252.508136][ T8951] loop3: detected capacity change from 0 to 512 [ 252.616655][ T8951] EXT4-fs (loop3): 1 orphan inode deleted [ 252.688270][ T8951] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 252.731882][ T8973] lo speed is unknown, defaulting to 1000 [ 252.842906][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.978725][ T8992] random: crng reseeded on system resumption [ 253.466749][ T8994] loop1: detected capacity change from 0 to 256 [ 253.492894][ T8989] __nla_validate_parse: 2 callbacks suppressed [ 253.492914][ T8989] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1578'. [ 253.536965][ T8994] FAT-fs (loop1): codepage cp857 not found [ 253.627370][ T9000] Cannot find add_set index 2 as target [ 253.650791][ T3780] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.753624][ T9004] netlink: 'syz.1.1582': attribute type 1 has an invalid length. [ 253.858198][ T9004] 8021q: adding VLAN 0 to HW filter on device bond7 [ 253.954750][ T28] audit: type=1400 audit(1770836482.412:973): avc: denied { map } for pid=9007 comm="syz.5.1581" path="/proc/813/net/ipv6_route" dev="proc" ino=4026533446 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 254.166993][ T9022] loop3: detected capacity change from 0 to 512 [ 254.292734][ T9020] loop2: detected capacity change from 0 to 8192 [ 254.524427][ T9036] lo speed is unknown, defaulting to 1000 [ 254.935473][ T9050] loop3: detected capacity change from 0 to 2048 [ 254.953057][ T9020] netlink: 'syz.2.1588': attribute type 1 has an invalid length. [ 254.973987][ T9050] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 255.058702][ T28] audit: type=1400 audit(1770836483.512:974): avc: denied { map } for pid=9049 comm="syz.3.1598" path="/315/file0/hugetlb.2MB.usage_in_bytes" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 255.124162][ T9050] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1598: bg 0: block 234: padding at end of block bitmap is not set [ 255.154040][ T9050] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 806 with max blocks 318 with error 28 [ 255.182894][ T9050] EXT4-fs (loop3): This should not happen!! Data will be lost [ 255.182894][ T9050] [ 255.182918][ T9050] EXT4-fs (loop3): Total free blocks count 0 [ 255.182933][ T9050] EXT4-fs (loop3): Free/Dirty block details [ 255.182947][ T9050] EXT4-fs (loop3): free_blocks=0 [ 255.182992][ T9050] EXT4-fs (loop3): dirty_blocks=1136 [ 255.183004][ T9050] EXT4-fs (loop3): Block reservation details [ 255.183015][ T9050] EXT4-fs (loop3): i_reserved_data_blocks=71 [ 255.242527][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.356566][ T9064] netlink: 'syz.0.1600': attribute type 1 has an invalid length. [ 255.383448][ T9068] netlink: 336 bytes leftover after parsing attributes in process `syz.5.1603'. [ 255.559036][ T9078] netlink: 'syz.5.1606': attribute type 63 has an invalid length. [ 255.598511][ T9077] loop1: detected capacity change from 0 to 512 [ 255.623125][ T9077] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.1605: bg 0: block 5: invalid block bitmap [ 255.635788][ T9077] loop1: lost filesystem error report for type 5 error -117 [ 255.639330][ T9077] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6688: Corrupt filesystem [ 255.655992][ T9077] loop1: lost filesystem error report for type 5 error -117 [ 255.656803][ T9077] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.1605: invalid indirect mapped block 3 (level 2) [ 255.677569][ T9077] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 255.762610][ T9077] EXT4-fs (loop1): 1 orphan inode deleted [ 255.777573][ T9077] EXT4-fs (loop1): 1 truncate cleaned up [ 255.783891][ T9077] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 255.800898][ T9077] 9pnet_fd: p9_fd_create_unix (9077): problem connecting socket: ./file1: -1 [ 255.886368][ T9086] loop3: detected capacity change from 0 to 512 [ 255.989581][ T9086] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.1608: bg 0: block 5: invalid block bitmap [ 256.002125][ T9086] loop3: lost filesystem error report for type 5 error -117 [ 256.002735][ T9086] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6688: Corrupt filesystem [ 256.019197][ T9086] loop3: lost filesystem error report for type 5 error -117 [ 256.021310][ T9086] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.1608: invalid indirect mapped block 3 (level 2) [ 256.042452][ T9086] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 256.044649][ T9086] EXT4-fs (loop3): 1 orphan inode deleted [ 256.059552][ T9086] EXT4-fs (loop3): 1 truncate cleaned up [ 256.066366][ T9086] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 256.088146][ T9086] 9pnet_fd: p9_fd_create_unix (9086): problem connecting socket: ./file1: -1 [ 256.336209][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.379053][ T9096] lo speed is unknown, defaulting to 1000 [ 256.441386][ T9100] loop1: detected capacity change from 0 to 512 [ 256.465141][ T9100] EXT4-fs (loop1): orphan cleanup on readonly fs [ 256.485686][ T9100] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 256.526111][ T9103] random: crng reseeded on system resumption [ 256.535037][ T9100] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.1611: invalid indirect mapped block 8 (level 2) [ 256.549647][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.564875][ T9103] Cannot find add_set index 2 as target [ 256.576062][ T9100] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 256.576660][ T9100] EXT4-fs (loop1): Remounting filesystem read-only [ 256.608282][ T9100] EXT4-fs (loop1): 1 truncate cleaned up [ 256.614765][ T9100] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 256.697499][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.743636][ T9119] batman_adv: batadv0: Interface deactivated: dummy0 [ 256.777080][ T9119] batman_adv: batadv0: Removing interface: dummy0 [ 256.790325][ T9119] bridge_slave_0: left allmulticast mode [ 256.796261][ T9119] bridge_slave_0: left promiscuous mode [ 256.818748][ T9124] netlink: 'syz.2.1619': attribute type 39 has an invalid length. [ 256.827420][ T9119] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.836879][ T9119] bridge_slave_1: left allmulticast mode [ 256.850607][ T9119] bridge_slave_1: left promiscuous mode [ 256.863334][ T9119] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.882900][ T9127] loop2: detected capacity change from 0 to 512 [ 256.890829][ T9119] bond0: (slave bond_slave_0): Releasing backup interface [ 256.920514][ T9119] bond0: (slave bond_slave_1): Releasing backup interface [ 256.937385][ T9127] loop2: detected capacity change from 0 to 512 [ 256.964235][ T9119] team0: Port device team_slave_0 removed [ 256.997060][ T9119] team0: Port device team_slave_1 removed [ 257.009700][ T9119] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 257.027816][ T9119] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 257.044716][ T9119] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 257.113610][ T9124] hsr_slave_1 (unregistering): left promiscuous mode [ 257.118439][ T9108] loop5: detected capacity change from 0 to 512 [ 257.144445][ T9122] lo speed is unknown, defaulting to 1000 [ 257.182139][ T9108] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 257.258410][ T9108] EXT4-fs error (device loop5): ext4_get_branch:178: inode #11: block 4294967295: comm syz.5.1615: invalid block [ 257.284362][ T9108] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 257.290087][ T9108] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.1615: invalid indirect mapped block 4294967295 (level 1) [ 257.311195][ T9132] /dev/loop2: Can't open blockdev [ 257.330655][ T9108] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 257.339550][ T9108] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.1615: invalid indirect mapped block 4294967295 (level 1) [ 257.467730][ T9108] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 257.473220][ T9108] EXT4-fs (loop5): 2 truncates cleaned up [ 257.519820][ T9108] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 257.549046][ T9126] EXT4-fs (loop3): 1 orphan inode deleted [ 257.609996][ T28] audit: type=1400 audit(1770836486.062:975): avc: denied { watch_reads } for pid=9140 comm="syz.0.1623" path="/344/file0" dev="tmpfs" ino=1858 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 257.658663][ T9143] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1624'. [ 257.667385][ T9126] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 257.865751][ T3780] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.878131][ T9126] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.909981][ T9147] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.1625: bg 0: block 5: invalid block bitmap [ 257.922548][ T9147] loop1: lost filesystem error report for type 5 error -117 [ 257.922816][ T9147] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6688: Corrupt filesystem [ 257.938925][ T9147] loop1: lost filesystem error report for type 5 error -117 [ 257.950662][ T9147] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.1625: invalid indirect mapped block 3 (level 2) [ 257.971492][ T9147] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 257.971752][ T9147] EXT4-fs (loop1): 1 orphan inode deleted [ 257.987185][ T9147] EXT4-fs (loop1): 1 truncate cleaned up [ 258.003177][ T9147] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 258.026950][ T9147] 9pnet_fd: p9_fd_create_unix (9147): problem connecting socket: ./file1: -1 [ 258.075932][ T9157] random: crng reseeded on system resumption [ 258.096189][ T9150] lo speed is unknown, defaulting to 1000 [ 258.181842][ T9157] Cannot find add_set index 2 as target [ 258.322882][ T9167] random: crng reseeded on system resumption [ 258.336894][ T9167] Cannot find add_set index 2 as target [ 258.366984][ T9172] iso9660: Unknown parameter 'overriderockpermatQp[' [ 258.379687][ T9165] 9pnet_fd: p9_fd_create_unix (9165): problem connecting socket: ./file1: -1 [ 259.047319][ T9178] 9pnet_fd: p9_fd_create_unix (9178): problem connecting socket: ./file1: -1 [ 259.389703][ T9178] set_capacity_and_notify: 4 callbacks suppressed [ 259.389726][ T9178] loop5: detected capacity change from 0 to 256 [ 260.024658][ T9182] netlink: 'syz.2.1634': attribute type 39 has an invalid length. [ 260.054842][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.059412][ T9178] FAT-fs (loop5): codepage cp857 not found [ 260.167665][ T9184] lo speed is unknown, defaulting to 1000 [ 260.184093][ T9175] loop2: detected capacity change from 0 to 136 [ 260.254848][ T9175] Attempt to read inode for relocated directory [ 260.619687][ T9194] netlink: 'syz.0.1640': attribute type 1 has an invalid length. [ 260.693222][ T9] IPVS: starting estimator thread 0... [ 260.698888][ T28] audit: type=1400 audit(1770836489.152:976): avc: denied { listen } for pid=9183 comm="syz.1.1636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 260.811505][ T9199] IPVS: using max 2448 ests per chain, 122400 per kthread [ 260.884489][ T9212] random: crng reseeded on system resumption [ 260.935448][ T9212] Cannot find add_set index 2 as target [ 260.942156][ T9216] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1646'. [ 261.215516][ T9236] loop3: detected capacity change from 0 to 512 [ 261.236978][ T9236] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.1653: bg 0: block 5: invalid block bitmap [ 261.249592][ T9236] loop3: lost filesystem error report for type 5 error -117 [ 261.250003][ T9236] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6688: Corrupt filesystem [ 261.266425][ T9236] loop3: lost filesystem error report for type 5 error -117 [ 261.267010][ T9236] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.1653: invalid indirect mapped block 3 (level 2) [ 261.288060][ T9236] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 261.288524][ T9236] EXT4-fs (loop3): 1 orphan inode deleted [ 261.303889][ T9236] EXT4-fs (loop3): 1 truncate cleaned up [ 261.310333][ T9236] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 261.327475][ T9236] 9pnet_fd: p9_fd_create_unix (9236): problem connecting socket: ./file1: -1 [ 261.569531][ T9196] loop2: detected capacity change from 0 to 2048 [ 261.812324][ T9250] random: crng reseeded on system resumption [ 261.823131][ T9250] Cannot find add_set index 2 as target [ 261.851800][ T9252] loop2: detected capacity change from 0 to 512 [ 261.925167][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.955380][ T9230] loop5: detected capacity change from 0 to 512 [ 262.096555][ T9260] lo speed is unknown, defaulting to 1000 [ 262.172061][ T9264] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1664'. [ 262.190781][ T9266] loop3: detected capacity change from 0 to 512 [ 262.231279][ T9266] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.1661: bg 0: block 5: invalid block bitmap [ 262.243795][ T9266] loop3: lost filesystem error report for type 5 error -117 [ 262.254263][ T9266] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6688: Corrupt filesystem [ 262.270531][ T9266] loop3: lost filesystem error report for type 5 error -117 [ 262.271295][ T9266] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.1661: invalid indirect mapped block 3 (level 2) [ 262.292240][ T9266] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 262.292557][ T9266] EXT4-fs (loop3): 1 orphan inode deleted [ 262.307426][ T9266] EXT4-fs (loop3): 1 truncate cleaned up [ 262.313589][ T9266] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 262.329147][ T9266] 9pnet_fd: p9_fd_create_unix (9266): problem connecting socket: ./file1: -111 [ 262.404483][ T9230] EXT4-fs (loop5): 1 orphan inode deleted [ 262.520119][ T9230] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 262.657501][ T9273] lo speed is unknown, defaulting to 1000 [ 263.213256][ T9230] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.278621][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.330840][ T9297] loop1: detected capacity change from 0 to 128 [ 263.351789][ T9297] EXT4-fs warning (device loop1): ext4_init_metadata_csum:4642: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 263.406383][ T9297] EXT4-fs (loop1): Couldn't mount because of unsupported optional features (fffc1829) [ 263.429092][ T9305] netlink: 'syz.0.1675': attribute type 63 has an invalid length. [ 263.438352][ T9] lo speed is unknown, defaulting to 1000 [ 263.446403][ T9] syz0: Port: 1 Link ACTIVE [ 263.474183][ T9] lo speed is unknown, defaulting to 1000 [ 263.597341][ T9300] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1673'. [ 263.638800][ T9317] netlink: 'syz.5.1681': attribute type 1 has an invalid length. [ 263.901897][ T28] audit: type=1400 audit(1770836492.332:977): avc: denied { read } for pid=9321 comm="syz.2.1683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 264.218183][ T9312] lo speed is unknown, defaulting to 1000 [ 264.307648][ T9335] loop1: detected capacity change from 0 to 512 [ 264.346611][ T9335] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.1685: bg 0: block 5: invalid block bitmap [ 264.359064][ T9335] loop1: lost filesystem error report for type 5 error -117 [ 264.359378][ T9335] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6688: Corrupt filesystem [ 264.375505][ T9335] loop1: lost filesystem error report for type 5 error -117 [ 264.375712][ T9335] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.1685: invalid indirect mapped block 3 (level 2) [ 264.396196][ T9335] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 264.396715][ T9335] EXT4-fs (loop1): 1 orphan inode deleted [ 264.411943][ T9335] EXT4-fs (loop1): 1 truncate cleaned up [ 264.418114][ T9335] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 264.434912][ T9335] 9pnet_fd: p9_fd_create_unix (9335): problem connecting socket: ./file1: -111 [ 264.478434][ T9333] Process accounting resumed [ 264.860535][ T9366] loop3: detected capacity change from 0 to 512 [ 264.870043][ T9366] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.1692: bg 0: block 5: invalid block bitmap [ 264.882929][ T9366] loop3: lost filesystem error report for type 5 error -117 [ 264.885582][ T9366] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6688: Corrupt filesystem [ 264.901900][ T9366] loop3: lost filesystem error report for type 5 error -117 [ 264.902166][ T9366] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.1692: invalid indirect mapped block 3 (level 2) [ 264.922764][ T9366] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 264.970152][ T9366] EXT4-fs (loop3): 1 orphan inode deleted [ 264.985769][ T9366] EXT4-fs (loop3): 1 truncate cleaned up [ 265.012158][ T9366] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 265.031867][ T9366] 9pnet_fd: p9_fd_create_unix (9366): problem connecting socket: ./file1: -1 [ 265.068455][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.116227][ T9379] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1699'. [ 265.213782][ T9381] loop5: detected capacity change from 0 to 4096 [ 265.236541][ T9381] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 265.274500][ T9381] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000. [ 265.349932][ T28] audit: type=1400 audit(1770836493.782:978): avc: denied { watch } for pid=9380 comm="syz.5.1700" path="/277/file1/file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 265.358838][ T9390] netlink: 'syz.1.1703': attribute type 1 has an invalid length. [ 265.399409][ T28] audit: type=1400 audit(1770836493.782:979): avc: denied { watch_reads } for pid=9380 comm="syz.5.1700" path="/277/file1" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 265.462943][ T3780] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.464057][ T28] audit: type=1400 audit(1770836493.792:980): avc: denied { append } for pid=9380 comm="syz.5.1700" name="file2" dev="loop5" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 265.602117][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.649404][ T9400] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1707'. [ 265.679680][ T9403] loop5: detected capacity change from 0 to 512 [ 265.725566][ T9403] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 265.741287][ T9403] ext4 filesystem being mounted at /279/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 265.777674][ T3780] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.804940][ T9404] lo speed is unknown, defaulting to 1000 [ 266.067247][ T9421] 9pnet_fd: p9_fd_create_unix (9421): problem connecting socket: ./file1: -1 [ 266.372107][ T9423] tun0: tun_chr_ioctl cmd 1074025675 [ 266.386847][ T9427] netlink: 'syz.3.1714': attribute type 2 has an invalid length. [ 266.398504][ T9426] loop1: detected capacity change from 0 to 164 [ 266.802871][ T9426] Symlink component flag not implemented [ 266.809982][ T9427] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1714'. [ 266.828124][ T9423] tun0: persist disabled [ 266.844097][ T9426] Symlink component flag not implemented (7) [ 266.925520][ T9431] Symlink component flag not implemented (7) [ 267.020883][ T9431] Symlink component flag not implemented (7) [ 267.139819][ T9417] team0: No ports can be present during mode change [ 267.253449][ T9434] loop3: detected capacity change from 0 to 512 [ 267.270837][ T9434] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 267.438518][ T9451] loop5: detected capacity change from 0 to 512 [ 267.467808][ T9451] EXT4-fs: EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31 [ 267.516118][ T9452] lo speed is unknown, defaulting to 1000 [ 267.930861][ T28] audit: type=1400 audit(1770836496.382:981): avc: denied { shutdown } for pid=9465 comm="syz.5.1728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 268.112778][ T9482] lo: left promiscuous mode [ 268.134503][ T9482] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1733'. [ 268.177232][ T9482] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1733'. [ 268.221820][ T9482] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1733'. [ 268.444497][ T9491] loop1: detected capacity change from 0 to 512 [ 268.923845][ T9493] x_tables: duplicate underflow at hook 1 [ 268.940719][ T9491] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.1731: bg 0: block 5: invalid block bitmap [ 268.953167][ T9491] loop1: lost filesystem error report for type 5 error -117 [ 268.953362][ T9491] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6688: Corrupt filesystem [ 268.969694][ T9491] loop1: lost filesystem error report for type 5 error -117 [ 268.970077][ T9491] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.1731: invalid indirect mapped block 3 (level 2) [ 268.990690][ T9491] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 268.991190][ T9491] EXT4-fs (loop1): 1 orphan inode deleted [ 269.006418][ T9491] EXT4-fs (loop1): 1 truncate cleaned up [ 269.012592][ T9491] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 269.038008][ T9486] 9pnet_fd: p9_fd_create_unix (9486): problem connecting socket: ./file1: -1 [ 269.038951][ T9482] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1733'. [ 269.056877][ T9482] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1733'. [ 269.066155][ T9482] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1733'. [ 269.074885][ T28] audit: type=1400 audit(1770836497.522:982): avc: denied { read } for pid=9492 comm="syz.0.1736" path="socket:[23781]" dev="sockfs" ino=23781 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 269.118101][ T9482] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1733'. [ 269.157329][ T9482] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1733'. [ 269.166637][ T9482] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1733'. [ 269.277152][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.372085][ T9505] lo speed is unknown, defaulting to 1000 [ 269.564406][ T9519] random: crng reseeded on system resumption [ 269.608672][ T9519] Cannot find add_set index 2 as target [ 269.811709][ T10] IPVS: starting estimator thread 0... [ 269.884034][ T9534] loop3: detected capacity change from 0 to 164 [ 269.951876][ T9531] IPVS: using max 2016 ests per chain, 100800 per kthread [ 270.036919][ T9534] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 270.515200][ T9547] 9pnet_fd: p9_fd_create_unix (9547): problem connecting socket: ./file1: -1 [ 271.105234][ T9545] loop1: detected capacity change from 0 to 128 [ 271.184821][ T9545] syz.1.1752: attempt to access beyond end of device [ 271.184821][ T9545] loop1: rw=8390659, sector=104, nr_sectors = 937 limit=128 [ 271.268833][ T9549] tc_dump_action: action bad kind [ 271.281917][ T9564] random: crng reseeded on system resumption [ 271.295920][ T9559] lo speed is unknown, defaulting to 1000 [ 271.570120][ T9564] Cannot find add_set index 2 as target [ 271.849887][ T9572] __nla_validate_parse: 74 callbacks suppressed [ 271.849909][ T9572] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1762'. [ 272.402921][ T9587] loop5: detected capacity change from 0 to 512 [ 272.420477][ T9591] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1768'. [ 272.443447][ T9591] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1768'. [ 272.462690][ T9591] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1768'. [ 272.475032][ T9591] netlink: 'syz.1.1768': attribute type 10 has an invalid length. [ 272.483311][ T9591] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1768'. [ 272.496056][ T9591] FAULT_INJECTION: forcing a failure. [ 272.496056][ T9591] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 272.510027][ T9591] CPU: 1 UID: 0 PID: 9591 Comm: syz.1.1768 Tainted: G W syzkaller #0 PREEMPT(full) [ 272.510062][ T9591] Tainted: [W]=WARN [ 272.510095][ T9591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 272.510114][ T9591] Call Trace: [ 272.510128][ T9591] [ 272.510137][ T9591] __dump_stack+0x1d/0x30 [ 272.510164][ T9591] dump_stack_lvl+0x95/0xd0 [ 272.510259][ T9591] dump_stack+0x15/0x1b [ 272.510281][ T9591] should_fail_ex+0x263/0x280 [ 272.510312][ T9591] should_fail+0xb/0x20 [ 272.510360][ T9591] should_fail_usercopy+0x1a/0x20 [ 272.510392][ T9591] _copy_from_iter+0xcf/0xea0 [ 272.510490][ T9591] ? __alloc_skb+0x397/0x4b0 [ 272.510522][ T9591] ? __alloc_skb+0x219/0x4b0 [ 272.510637][ T9591] netlink_sendmsg+0x4ae/0x6f0 [ 272.510663][ T9591] ? __pfx_netlink_sendmsg+0x10/0x10 [ 272.510700][ T9591] ____sys_sendmsg+0x5af/0x600 [ 272.510753][ T9591] ___sys_sendmsg+0x195/0x1e0 [ 272.510787][ T9591] __x64_sys_sendmsg+0xd4/0x160 [ 272.510818][ T9591] x64_sys_call+0x194c/0x3020 [ 272.510842][ T9591] do_syscall_64+0x12c/0x370 [ 272.510898][ T9591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.510947][ T9591] RIP: 0033:0x7fa70779bf79 [ 272.510967][ T9591] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 272.510995][ T9591] RSP: 002b:00007fa7061f7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 272.511019][ T9591] RAX: ffffffffffffffda RBX: 00007fa707a15fa0 RCX: 00007fa70779bf79 [ 272.511035][ T9591] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 000000000000000a [ 272.511050][ T9591] RBP: 00007fa7061f7090 R08: 0000000000000000 R09: 0000000000000000 [ 272.511080][ T9591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 272.511095][ T9591] R13: 00007fa707a16038 R14: 00007fa707a15fa0 R15: 00007ffff18a4e88 [ 272.511114][ T9591] [ 272.591050][ T9589] netlink: 'syz.2.1767': attribute type 1 has an invalid length. [ 272.610220][ T9587] EXT4-fs warning (device loop5): ext4_enable_quotas:7226: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 272.741242][ T9587] EXT4-fs (loop5): mount failed [ 272.908277][ T9589] 8021q: adding VLAN 0 to HW filter on device bond7 [ 273.254576][ T9618] loop2: detected capacity change from 0 to 512 [ 273.563374][ T9618] loop2: detected capacity change from 0 to 256 [ 274.420958][ T9641] loop2: detected capacity change from 0 to 512 [ 274.480640][ T9641] lo speed is unknown, defaulting to 1000 [ 274.669238][ T9650] loop5: detected capacity change from 0 to 8192 [ 275.243753][ T9657] loop5: detected capacity change from 0 to 512 [ 275.251516][ T4830] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 275.262679][ T57] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 275.282649][ T57] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 275.309647][ T57] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 275.502981][ T9678] loop3: detected capacity change from 0 to 512 [ 275.515361][ T9678] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.1787: bg 0: block 5: invalid block bitmap [ 275.527809][ T9678] loop3: lost filesystem error report for type 5 error -117 [ 275.528338][ T9678] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6688: Corrupt filesystem [ 275.544505][ T9678] loop3: lost filesystem error report for type 5 error -117 [ 275.544705][ T9678] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.1787: invalid indirect mapped block 3 (level 2) [ 275.565403][ T9678] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 275.565614][ T9678] EXT4-fs (loop3): 1 orphan inode deleted [ 275.580681][ T9678] EXT4-fs (loop3): 1 truncate cleaned up [ 275.586923][ T9678] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 275.603386][ T9678] 9pnet_fd: p9_fd_create_unix (9678): problem connecting socket: ./file1: -111 [ 275.877422][ T9657] EXT4-fs (loop5): 1 orphan inode deleted [ 275.897919][ T9657] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 276.004404][ T9685] netlink: 'syz.2.1790': attribute type 10 has an invalid length. [ 276.014150][ T9685] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1790'. [ 276.065283][ T9657] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.075046][ T9684] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1790'. [ 276.085560][ T9684] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1790'. [ 276.106794][ T9684] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1790'. [ 276.189719][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.259734][ T9694] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1791'. [ 276.327822][ T9700] loop1: detected capacity change from 0 to 1024 [ 276.347988][ T9706] netlink: 'syz.3.1796': attribute type 10 has an invalid length. [ 276.359498][ T9706] netlink: 'syz.3.1796': attribute type 2 has an invalid length. [ 276.374725][ T9711] netlink: 'syz.2.1797': attribute type 10 has an invalid length. [ 276.375622][ T9700] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 276.437563][ T9700] pim6reg1: entered promiscuous mode [ 276.452894][ T9715] 9pnet_fd: p9_fd_create_unix (9715): problem connecting socket: ./file1: -1 [ 276.824690][ T9700] pim6reg1: entered allmulticast mode [ 276.846092][ T9718] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: comm syz.1.1795: inode #2948509306: comm syz.1.1795: iget: illegal inode # [ 277.040037][ T9727] netlink: 'syz.2.1804': attribute type 10 has an invalid length. [ 277.049168][ T9725] loop5: detected capacity change from 0 to 2048 [ 277.063096][ T9727] __nla_validate_parse: 5 callbacks suppressed [ 277.063114][ T9727] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1804'. [ 277.078823][ T9718] EXT4-fs (loop1): Remounting filesystem read-only [ 277.091863][ T9718] EXT4-fs warning (device loop1): ext4_xattr_block_set:2200: inode #19: comm syz.1.1795: dec ref error=-30 [ 277.129020][ T9725] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 277.629888][ T9727] netlink: 'syz.2.1804': attribute type 2 has an invalid length. [ 277.646372][ T3780] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.668094][ T9727] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1804'. [ 277.690833][ T28] audit: type=1400 audit(1770836506.142:983): avc: denied { unlink } for pid=3314 comm="syz-executor" name="file0" dev="loop1" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 277.856271][ T5060] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.106083][ T9756] loop5: detected capacity change from 0 to 512 [ 278.127787][ T9751] lo speed is unknown, defaulting to 1000 [ 278.223670][ T9756] EXT4-fs warning (device loop5): ext4_enable_quotas:7226: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 278.320432][ T9756] EXT4-fs (loop5): mount failed [ 278.398369][ T5864] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 278.470296][ T5864] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.598119][ T5864] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 278.622084][ T5864] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.822860][ T5864] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 278.833533][ T5864] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.915036][ T9776] loop5: detected capacity change from 0 to 512 [ 278.925030][ T9776] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.1815: bg 0: block 5: invalid block bitmap [ 278.937572][ T9776] loop5: lost filesystem error report for type 5 error -117 [ 278.938735][ T9776] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6688: Corrupt filesystem [ 278.955392][ T9776] loop5: lost filesystem error report for type 5 error -117 [ 278.955728][ T9776] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.1815: invalid indirect mapped block 3 (level 2) [ 278.976681][ T9776] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 278.977494][ T9776] EXT4-fs (loop5): 1 orphan inode deleted [ 278.992823][ T9776] EXT4-fs (loop5): 1 truncate cleaned up [ 278.999507][ T9776] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 279.031998][ T9776] 9pnet_fd: p9_fd_create_unix (9776): problem connecting socket: ./file1: -111 [ 279.228050][ T5864] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 279.305120][ T9784] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1819'. [ 279.334517][ T5864] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.436647][ T9792] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1821'. [ 279.446536][ T9792] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1821'. [ 279.455761][ T9792] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1821'. [ 279.467209][ T9792] netlink: 'syz.2.1821': attribute type 10 has an invalid length. [ 279.475367][ T9792] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1821'. [ 279.549864][ T9763] lo speed is unknown, defaulting to 1000 [ 279.572038][ T5864] bridge_slave_1: left allmulticast mode [ 279.577830][ T5864] bridge_slave_1: left promiscuous mode [ 279.591765][ T5864] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.615126][ T5864] bridge_slave_0: left allmulticast mode [ 279.620956][ T5864] bridge_slave_0: left promiscuous mode [ 279.623116][ T3780] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.638122][ T5864] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.763702][ T5864] dvmrp1 (unregistering): left allmulticast mode [ 279.825031][ T5864] team0: Port device bond0 removed [ 279.857587][ T5864] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 279.873994][ T5864] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 279.884839][ T5864] bond0 (unregistering): Released all slaves [ 279.895518][ T5864] bond1 (unregistering): Released all slaves [ 279.907556][ T5864] bond2 (unregistering): Released all slaves [ 279.919160][ T5864] bond3 (unregistering): Released all slaves [ 279.934760][ T5864] bond4 (unregistering): Released all slaves [ 279.948961][ T5864] bond5 (unregistering): Released all slaves [ 279.962872][ T5864] bond6 (unregistering): Released all slaves [ 279.975901][ T5864] bond7 (unregistering): Released all slaves [ 279.988605][ T5864] bond8 (unregistering): Released all slaves [ 280.194230][ T5864] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 280.204926][ T5864] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 280.215765][ T5864] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 280.242044][ T5864] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 280.318760][ T5864] veth1_vlan: left promiscuous mode [ 280.331699][ T5864] veth0_vlan: left promiscuous mode [ 280.346877][ T9831] loop3: detected capacity change from 0 to 512 [ 280.433371][ T9831] EXT4-fs warning (device loop3): ext4_enable_quotas:7226: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 280.461851][ T5864] team0 (unregistering): Port device team_slave_1 removed [ 280.482293][ T9831] EXT4-fs (loop3): mount failed [ 280.509415][ T5864] team0 (unregistering): Port device team_slave_0 removed [ 280.994371][ T9763] chnl_net:caif_netlink_parms(): no params data found [ 281.070218][ T9763] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.121134][ T9858] loop3: detected capacity change from 0 to 128 [ 281.148420][ T9763] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.178181][ T9858] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 281.191721][ T9763] bridge_slave_0: entered allmulticast mode [ 281.199664][ T9763] bridge_slave_0: entered promiscuous mode [ 281.222135][ T9858] ext4 filesystem being mounted at /362/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 281.225022][ T9763] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.243175][ T9763] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.250636][ T9763] bridge_slave_1: entered allmulticast mode [ 281.256426][ T9854] EXT4-fs warning (device loop3): verify_group_input:137: Cannot add at group 7 (only 1 groups) [ 281.259363][ T9763] bridge_slave_1: entered promiscuous mode [ 281.279592][ T9869] netlink: 'syz.2.1837': attribute type 10 has an invalid length. [ 281.287831][ T9869] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1837'. [ 281.305145][ T9763] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 281.325011][ T28] audit: type=1326 audit(1770836509.782:984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9868 comm="syz.2.1837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e8b69bf79 code=0x7ffc0000 [ 281.350091][ T9763] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 281.373909][ T9763] team0: Port device team_slave_0 added [ 281.380672][ T9763] team0: Port device team_slave_1 added [ 281.391851][ T28] audit: type=1326 audit(1770836509.812:985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9868 comm="syz.2.1837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7f9e8b69bf79 code=0x7ffc0000 [ 281.402005][ T3313] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 281.435631][ T9876] netlink: 'syz.5.1839': attribute type 63 has an invalid length. [ 281.455435][ T9763] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 281.461782][ T28] audit: type=1326 audit(1770836509.812:986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9868 comm="syz.2.1837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e8b69bf79 code=0x7ffc0000 [ 281.464542][ T9763] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 281.514090][ T9763] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 281.525839][ T9763] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 281.533247][ T9763] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 281.559547][ T9763] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 281.617162][ T9879] loop2: detected capacity change from 0 to 512 [ 281.626091][ T28] audit: type=1326 audit(1770836509.812:987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9868 comm="syz.2.1837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f9e8b69bf79 code=0x7ffc0000 [ 281.632113][ T9888] random: crng reseeded on system resumption [ 281.657308][ T28] audit: type=1326 audit(1770836509.812:988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9868 comm="syz.2.1837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e8b69bf79 code=0x7ffc0000 [ 281.704596][ T28] audit: type=1326 audit(1770836509.812:989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9868 comm="syz.2.1837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9e8b69bf79 code=0x7ffc0000 [ 281.729735][ T28] audit: type=1326 audit(1770836509.812:990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9868 comm="syz.2.1837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e8b69bf79 code=0x7ffc0000 [ 281.757854][ T9879] loop2: detected capacity change from 0 to 256 [ 281.846360][ T9896] Cannot find add_set index 2 as target [ 281.879347][ T28] audit: type=1326 audit(1770836509.812:991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9868 comm="syz.2.1837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9e8b69bf79 code=0x7ffc0000 [ 281.914535][ T5864] IPVS: stop unused estimator thread 0... [ 281.992941][ T9763] hsr_slave_0: entered promiscuous mode [ 282.012150][ T9763] hsr_slave_1: entered promiscuous mode [ 282.018875][ T28] audit: type=1326 audit(1770836509.812:992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9868 comm="syz.2.1837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e8b69bf79 code=0x7ffc0000 [ 282.043251][ T9909] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1843'. [ 282.059706][ T9763] debugfs: 'hsr0' already exists in 'hsr' [ 282.078465][ T9763] Cannot create hsr debugfs directory [ 282.521370][ T9926] loop2: detected capacity change from 0 to 128 [ 282.672365][ T9763] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 282.731811][ T9763] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 282.742214][ T9763] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 282.757719][ T9763] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 283.110945][ T9963] loop2: detected capacity change from 0 to 512 [ 283.143061][ T9763] 8021q: adding VLAN 0 to HW filter on device bond0 [ 283.181280][ T9921] loop5: detected capacity change from 0 to 512 [ 283.289657][ T9763] 8021q: adding VLAN 0 to HW filter on device team0 [ 283.383917][ T5864] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.391267][ T5864] bridge0: port 1(bridge_slave_0) entered forwarding state [ 283.414808][ T9963] loop2: detected capacity change from 0 to 256 [ 283.447067][ T4830] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.454281][ T4830] bridge0: port 2(bridge_slave_1) entered forwarding state [ 283.574280][ T9921] EXT4-fs (loop5): 1 orphan inode deleted [ 283.593715][ T9976] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1851'. [ 283.622850][ T9976] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1851'. [ 283.637494][ T9921] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 283.693690][ T9763] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 283.721179][ T3780] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.764567][ T9985] netlink: 'syz.5.1852': attribute type 63 has an invalid length. [ 283.832305][ T9992] random: crng reseeded on system resumption [ 283.862425][ T9991] lo speed is unknown, defaulting to 1000 [ 283.949447][ T9992] Cannot find add_set index 2 as target [ 284.013170][T10006] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1855'. [ 284.034396][T10006] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1855'. [ 284.051972][T10006] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1855'. [ 284.069487][ T9763] veth0_vlan: entered promiscuous mode [ 284.076156][T10006] netlink: 'syz.5.1855': attribute type 10 has an invalid length. [ 284.111625][T10006] netlink: 168 bytes leftover after parsing attributes in process `syz.5.1855'. [ 284.122578][ T9763] veth1_vlan: entered promiscuous mode [ 284.151283][ T9763] veth0_macvtap: entered promiscuous mode [ 284.169692][T10006] netlink: 'syz.5.1855': attribute type 2 has an invalid length. [ 284.177559][T10006] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1855'. [ 284.187663][T10006] FAULT_INJECTION: forcing a failure. [ 284.187663][T10006] name failslab, interval 1, probability 0, space 0, times 0 [ 284.202046][ T9763] veth1_macvtap: entered promiscuous mode [ 284.222216][ T9763] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 284.241711][T10006] CPU: 0 UID: 0 PID: 10006 Comm: syz.5.1855 Tainted: G W syzkaller #0 PREEMPT(full) [ 284.241752][T10006] Tainted: [W]=WARN [ 284.241760][T10006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 284.241772][T10006] Call Trace: [ 284.241778][T10006] [ 284.241844][T10006] __dump_stack+0x1d/0x30 [ 284.241876][T10006] dump_stack_lvl+0x95/0xd0 [ 284.241907][T10006] dump_stack+0x15/0x1b [ 284.241932][T10006] should_fail_ex+0x263/0x280 [ 284.242037][T10006] should_failslab+0x8c/0xb0 [ 284.242121][T10006] kmem_cache_alloc_noprof+0x68/0x490 [ 284.242166][T10006] ? skb_clone+0x151/0x1f0 [ 284.242298][T10006] skb_clone+0x151/0x1f0 [ 284.242380][T10006] __netlink_deliver_tap+0x2c9/0x500 [ 284.242404][T10006] ? netlink_attachskb+0x2e2/0x660 [ 284.242439][T10006] netlink_sendskb+0x126/0x150 [ 284.242548][T10006] netlink_unicast+0x2a2/0x690 [ 284.242639][T10006] netlink_ack+0x4c8/0x500 [ 284.242673][T10006] netlink_rcv_skb+0x192/0x220 [ 284.242705][T10006] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 284.242738][T10006] rtnetlink_rcv+0x1c/0x30 [ 284.242761][T10006] netlink_unicast+0x5c0/0x690 [ 284.242798][T10006] netlink_sendmsg+0x5c8/0x6f0 [ 284.242861][T10006] ? __pfx_netlink_sendmsg+0x10/0x10 [ 284.242885][T10006] ____sys_sendmsg+0x5af/0x600 [ 284.242908][T10006] ___sys_sendmsg+0x195/0x1e0 [ 284.242954][T10006] __x64_sys_sendmsg+0xd4/0x160 [ 284.242981][T10006] x64_sys_call+0x194c/0x3020 [ 284.243024][T10006] do_syscall_64+0x12c/0x370 [ 284.243058][T10006] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.243115][T10006] RIP: 0033:0x7f0d477dbf79 [ 284.243178][T10006] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 284.243240][T10006] RSP: 002b:00007f0d4622f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 284.243266][T10006] RAX: ffffffffffffffda RBX: 00007f0d47a55fa0 RCX: 00007f0d477dbf79 [ 284.243304][T10006] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 000000000000000a [ 284.243317][T10006] RBP: 00007f0d4622f090 R08: 0000000000000000 R09: 0000000000000000 [ 284.243330][T10006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 284.243342][T10006] R13: 00007f0d47a56038 R14: 00007f0d47a55fa0 R15: 00007ffee3706d78 [ 284.243365][T10006] [ 284.481490][ T9763] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 284.552996][ T3426] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.567042][ T3426] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.607594][ T3426] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.634545][ T3426] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.652165][T10019] loop5: detected capacity change from 0 to 128 [ 284.660273][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 284.660288][ T28] audit: type=1400 audit(1770836513.102:998): avc: denied { mounton } for pid=9763 comm="syz-executor" path="/root/syzkaller.zCE1bP/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=25937 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 284.743827][T10019] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 284.783093][ T28] audit: type=1400 audit(1770836513.182:999): avc: denied { mount } for pid=9763 comm="syz-executor" name="/" dev="gadgetfs" ino=4876 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 284.806513][ T28] audit: type=1400 audit(1770836513.232:1000): avc: denied { mount } for pid=10022 comm="syz.6.1814" name="/" dev="hugetlbfs" ino=26648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 284.809540][T10019] ext4 filesystem being mounted at /313/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 284.833724][ T28] audit: type=1400 audit(1770836513.242:1001): avc: denied { name_bind } for pid=10022 comm="syz.6.1814" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 284.892447][ T28] audit: type=1400 audit(1770836513.352:1002): avc: denied { ioctl } for pid=9990 comm="syz.0.1854" path="socket:[26632]" dev="sockfs" ino=26632 ioctlcmd=0x891c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 284.942711][T10016] EXT4-fs warning (device loop5): verify_group_input:137: Cannot add at group 7 (only 1 groups) [ 284.955902][T10025] lo speed is unknown, defaulting to 1000 [ 284.967100][T10027] loop6: detected capacity change from 0 to 512 [ 284.975040][ T9] IPVS: starting estimator thread 0... [ 285.056345][T10027] EXT4-fs warning (device loop6): ext4_enable_quotas:7226: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 285.092621][T10028] IPVS: using max 2448 ests per chain, 122400 per kthread [ 285.142005][T10027] EXT4-fs (loop6): mount failed [ 285.255718][T10038] netlink: 'syz.6.1862': attribute type 63 has an invalid length. [ 285.266774][T10038] lo: entered promiscuous mode [ 285.272419][T10038] lo: entered allmulticast mode [ 285.324166][T10043] random: crng reseeded on system resumption [ 285.730713][T10046] Cannot find add_set index 2 as target [ 285.748130][ T28] audit: type=1400 audit(1770836514.202:1003): avc: denied { create } for pid=10041 comm="syz.6.1864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 285.771127][ T4830] IPVS: stop unused estimator thread 0... [ 285.841732][ T28] audit: type=1400 audit(1770836514.252:1004): avc: denied { setopt } for pid=10041 comm="syz.6.1864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 285.893551][T10052] loop2: detected capacity change from 0 to 1024 [ 285.996298][T10052] loop2: detected capacity change from 0 to 4096 [ 286.007208][ T3780] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 286.065818][T10052] EXT4-fs: test_dummy_encryption option not supported [ 286.107149][T10067] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1870'. [ 286.140588][T10067] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1870'. [ 286.160942][T10067] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1870'. [ 286.177350][T10069] loop6: detected capacity change from 0 to 512 [ 286.181103][T10067] netlink: 'syz.5.1870': attribute type 10 has an invalid length. [ 286.204392][T10067] netlink: 'syz.5.1870': attribute type 2 has an invalid length. [ 286.218830][T10070] loop3: detected capacity change from 0 to 512 [ 286.286855][T10073] loop2: detected capacity change from 0 to 512 [ 286.296450][T10073] 9pnet_fd: p9_fd_create_unix (10073): problem connecting socket: ./file1: -1 [ 286.603409][T10073] loop2: detected capacity change from 0 to 256 [ 286.702167][T10070] EXT4-fs (loop3): 1 orphan inode deleted [ 286.712375][T10069] EXT4-fs (loop6): 1 orphan inode deleted [ 286.752157][T10070] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 286.771487][T10069] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 286.980178][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.010544][ T9763] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.031391][T10089] loop2: detected capacity change from 0 to 512 [ 287.073615][T10089] EXT4-fs: quotafile must be on filesystem root [ 287.101699][T10096] loop5: detected capacity change from 0 to 128 [ 287.196363][T10089] loop2: detected capacity change from 0 to 512 [ 287.292670][T10096] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 287.326348][T10096] ext4 filesystem being mounted at /317/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 287.369645][T10090] EXT4-fs warning (device loop5): verify_group_input:137: Cannot add at group 7 (only 1 groups) [ 287.527266][T10113] netlink: 'syz.3.1884': attribute type 63 has an invalid length. [ 287.558240][T10113] lo: entered promiscuous mode [ 287.590608][T10113] lo: entered allmulticast mode [ 288.019867][T10116] lo speed is unknown, defaulting to 1000 [ 288.091442][T10126] loop6: detected capacity change from 0 to 512 [ 288.186593][T10126] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.1886: bg 0: block 5: invalid block bitmap [ 288.306110][T10132] netlink: 'syz.3.1888': attribute type 10 has an invalid length. [ 288.318191][T10126] loop6: lost filesystem error report for type 5 error -117 [ 288.318480][T10126] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6688: Corrupt filesystem [ 288.333617][T10132] netlink: 'syz.3.1888': attribute type 2 has an invalid length. [ 288.444121][T10126] loop6: lost filesystem error report for type 5 error -117 [ 288.444469][T10126] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.1886: invalid indirect mapped block 3 (level 2) [ 288.571677][T10126] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 288.572198][T10126] EXT4-fs (loop6): 1 orphan inode deleted [ 288.629596][T10126] EXT4-fs (loop6): 1 truncate cleaned up [ 288.637501][T10126] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 288.682595][T10126] 9pnet_fd: p9_fd_create_unix (10126): problem connecting socket: ./file1: -1 [ 288.899607][ T3780] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 289.062796][T10152] lo speed is unknown, defaulting to 1000 [ 289.639231][T10158] Cannot find add_set index 2 as target [ 289.782445][ T9763] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.482897][T10178] __nla_validate_parse: 10 callbacks suppressed [ 290.482942][T10178] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1903'. [ 290.541313][T10135] EXT4-fs (loop3): 1 orphan inode deleted [ 290.667517][T10135] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 290.714671][T10182] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 290.770863][T10182] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 290.877037][T10182] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #12: comm syz.6.1905: corrupted xattr block 6: invalid header [ 290.884377][T10194] netlink: 'syz.2.1909': attribute type 10 has an invalid length. [ 290.900613][T10182] EXT4-fs (loop6): Remounting filesystem read-only [ 290.920627][T10182] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=12 [ 290.939947][T10194] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1909'. [ 290.951185][T10182] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=12 [ 290.968056][ T28] audit: type=1400 audit(1770836519.422:1005): avc: denied { mounton } for pid=10181 comm="syz.6.1905" path="/10/file0/file0" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 290.992444][ T28] audit: type=1400 audit(1770836519.422:1006): avc: denied { mount } for pid=10181 comm="syz.6.1905" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 290.992816][T10196] set_capacity_and_notify: 5 callbacks suppressed [ 290.992831][T10196] loop2: detected capacity change from 0 to 1764 [ 291.024919][ T28] audit: type=1400 audit(1770836519.422:1007): avc: denied { create } for pid=10191 comm="syz.0.1908" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 291.055558][T10196] iso9660: Unknown parameter '18446744073709551615' [ 291.064481][ T9763] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=12 [ 291.078867][ T9763] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=12 [ 291.090989][ T9763] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=12 [ 291.102245][ T28] audit: type=1400 audit(1770836519.422:1008): avc: denied { write } for pid=10191 comm="syz.0.1908" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 291.131696][ T9763] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=12 [ 291.140940][ T9763] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=12 [ 291.150387][ T9763] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=12 [ 291.150619][T10135] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.160062][ T9763] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=12 [ 291.169860][ T28] audit: type=1400 audit(1770836519.422:1009): avc: denied { mounton } for pid=10181 comm="syz.6.1905" path="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 291.178322][ T9763] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=12 [ 291.209501][ T9763] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=12 [ 291.219107][ T9763] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=12 [ 291.228878][ T9763] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=12 [ 291.238553][ T9763] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=12 [ 291.247788][ T9763] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=12 [ 291.257139][ T9763] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=12 [ 291.266527][ T28] audit: type=1400 audit(1770836519.512:1010): avc: denied { unmount } for pid=9763 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 291.287629][ T9763] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=12 [ 291.288818][ T28] audit: type=1400 audit(1770836519.682:1011): avc: denied { remove_name } for pid=9763 comm="syz-executor" name="file0" dev="loop6" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 291.304408][ T9763] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=12 [ 291.345844][ T9763] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=12 [ 291.355527][ T9763] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 291.361685][ T28] audit: type=1400 audit(1770836519.812:1012): avc: denied { rmdir } for pid=9763 comm="syz-executor" name="file0" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 291.364869][ T9763] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 291.396866][ T9763] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 291.434566][ T9763] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.435734][ T28] audit: type=1400 audit(1770836519.882:1013): avc: denied { unlink } for pid=9763 comm="syz-executor" name="file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 291.521940][T10209] loop3: detected capacity change from 0 to 512 [ 291.537036][T10209] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.1914: bg 0: block 5: invalid block bitmap [ 291.549637][T10209] loop3: lost filesystem error report for type 5 error -117 [ 291.549804][T10209] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6688: Corrupt filesystem [ 291.566192][T10209] loop3: lost filesystem error report for type 5 error -117 [ 291.631689][T10209] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.1914: invalid indirect mapped block 3 (level 2) [ 291.652448][T10209] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 291.652944][T10209] EXT4-fs (loop3): 1 orphan inode deleted [ 291.667945][T10209] EXT4-fs (loop3): 1 truncate cleaned up [ 291.674135][T10209] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 291.696750][T10209] 9pnet_fd: p9_fd_create_unix (10209): problem connecting socket: ./file1: -111 [ 291.796815][T10211] lo speed is unknown, defaulting to 1000 [ 291.925475][T10217] netlink: 'syz.2.1913': attribute type 63 has an invalid length. [ 291.964327][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.034399][T10224] loop6: detected capacity change from 0 to 512 [ 292.089694][T10217] lo: entered promiscuous mode [ 292.124479][T10228] loop3: detected capacity change from 0 to 512 [ 292.149882][T10224] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.1910: bg 0: block 5: invalid block bitmap [ 292.160824][T10228] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 292.192927][T10228] EXT4-fs (loop3): 1 truncate cleaned up [ 292.205986][T10228] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 292.249955][T10224] loop6: lost filesystem error report for type 5 error -117 [ 292.250492][T10224] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6688: Corrupt filesystem [ 292.341376][T10237] FAULT_INJECTION: forcing a failure. [ 292.341376][T10237] name failslab, interval 1, probability 0, space 0, times 0 [ 292.361712][T10224] loop6: lost filesystem error report for type 5 error -117 [ 292.373750][T10224] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.1910: invalid indirect mapped block 3 (level 2) [ 292.381689][T10237] CPU: 0 UID: 0 PID: 10237 Comm: syz.5.1915 Tainted: G W syzkaller #0 PREEMPT(full) [ 292.381725][T10237] Tainted: [W]=WARN [ 292.381733][T10237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 292.381746][T10237] Call Trace: [ 292.381754][T10237] [ 292.381828][T10237] __dump_stack+0x1d/0x30 [ 292.381855][T10237] dump_stack_lvl+0x95/0xd0 [ 292.381879][T10237] dump_stack+0x15/0x1b [ 292.381979][T10237] should_fail_ex+0x263/0x280 [ 292.382054][T10237] should_failslab+0x8c/0xb0 [ 292.382084][T10237] kmem_cache_alloc_noprof+0x68/0x490 [ 292.382115][T10237] ? do_getname+0x2e/0x1c0 [ 292.382147][T10237] do_getname+0x2e/0x1c0 [ 292.382188][T10237] getname_flags+0x1d/0x30 [ 292.382218][T10237] do_sys_openat2+0x60/0x130 [ 292.382265][T10237] __x64_sys_openat+0xf2/0x120 [ 292.382288][T10237] x64_sys_call+0x1e39/0x3020 [ 292.382314][T10237] do_syscall_64+0x12c/0x370 [ 292.382347][T10237] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.382442][T10237] RIP: 0033:0x7f0d477dbf79 [ 292.382460][T10237] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 292.382548][T10237] RSP: 002b:00007f0d461ed028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 292.382573][T10237] RAX: ffffffffffffffda RBX: 00007f0d47a56180 RCX: 00007f0d477dbf79 [ 292.382589][T10237] RDX: 0000000000000001 RSI: 00002000000019c0 RDI: ffffffffffffff9c [ 292.382604][T10237] RBP: 00007f0d461ed090 R08: 0000000000000000 R09: 0000000000000000 [ 292.382620][T10237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 292.382634][T10237] R13: 00007f0d47a56218 R14: 00007f0d47a56180 R15: 00007ffee3706d78 [ 292.382654][T10237] [ 292.569968][T10224] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 292.570491][T10224] EXT4-fs (loop6): 1 orphan inode deleted [ 292.585615][T10224] EXT4-fs (loop6): 1 truncate cleaned up [ 292.595056][T10224] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 292.626746][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.641728][T10242] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1924'. [ 292.686531][T10224] 9pnet_fd: p9_fd_create_unix (10224): problem connecting socket: ./file1: -1 [ 292.696160][T10247] netlink: 'syz.0.1924': attribute type 10 has an invalid length. [ 292.715015][T10247] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1924'. [ 292.755452][T10242] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1924'. [ 292.785102][T10252] netlink: 'syz.0.1924': attribute type 2 has an invalid length. [ 292.793002][T10252] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1924'. [ 292.843693][T10242] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1924'. [ 292.914850][T10253] loop2: detected capacity change from 0 to 512 [ 292.982507][T10254] loop2: detected capacity change from 0 to 256 [ 293.115078][T10257] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1926'. [ 293.150481][T10244] loop3: detected capacity change from 0 to 512 [ 293.197100][T10259] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1927'. [ 293.379866][T10263] netlink: 'syz.0.1929': attribute type 63 has an invalid length. [ 293.413485][T10265] lo speed is unknown, defaulting to 1000 [ 293.729102][T10244] EXT4-fs (loop3): 1 orphan inode deleted [ 293.810691][T10278] lo speed is unknown, defaulting to 1000 [ 293.835500][T10244] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 293.973696][ T9763] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.992286][T10244] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.044262][ T7459] ================================================================== [ 294.052681][ T7459] BUG: KCSAN: data-race in fill_mg_cmtime / shmem_symlink [ 294.060001][ T7459] [ 294.062399][ T7459] write to 0xffff8881053966bc of 4 bytes by task 7465 on cpu 1: [ 294.070306][ T7459] shmem_symlink+0x387/0x3b0 [ 294.074934][ T7459] vfs_symlink+0x106/0x220 [ 294.079365][ T7459] filename_symlinkat+0xe8/0x2b0 [ 294.084313][ T7459] __se_sys_symlink+0x42/0x1b0 [ 294.089098][ T7459] __x64_sys_symlink+0x31/0x40 [ 294.093871][ T7459] x64_sys_call+0x2465/0x3020 [ 294.098557][ T7459] do_syscall_64+0x12c/0x370 [ 294.103251][ T7459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.109235][ T7459] [ 294.111557][ T7459] read to 0xffff8881053966bc of 4 bytes by task 7459 on cpu 0: [ 294.119113][ T7459] fill_mg_cmtime+0x5b/0x260 [ 294.123737][ T7459] generic_fillattr+0x24a/0x340 [ 294.128631][ T7459] shmem_getattr+0x181/0x200 [ 294.133407][ T7459] vfs_getattr_nosec+0x146/0x1e0 [ 294.138366][ T7459] vfs_getattr+0x48/0x60 [ 294.142627][ T7459] vfs_statx_path+0x28/0x140 [ 294.147295][ T7459] vfs_statx+0xc4/0x170 [ 294.152033][ T7459] vfs_fstatat+0x118/0x170 [ 294.156553][ T7459] __se_sys_newfstatat+0x55/0x3e0 [ 294.161594][ T7459] __x64_sys_newfstatat+0x55/0x70 [ 294.166742][ T7459] x64_sys_call+0x2c64/0x3020 [ 294.171442][ T7459] do_syscall_64+0x12c/0x370 [ 294.176067][ T7459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.182067][ T7459] [ 294.184399][ T7459] value changed: 0x1df4456c -> 0x1e38c0c1 [ 294.190294][ T7459] [ 294.192627][ T7459] Reported by Kernel Concurrency Sanitizer on: [ 294.198871][ T7459] CPU: 0 UID: 0 PID: 7459 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(full) [ 294.209479][ T7459] Tainted: [W]=WARN [ 294.213639][ T7459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 294.223792][ T7459] ==================================================================