last executing test programs: 29.433002693s ago: executing program 0 (id=711): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180200002020702500000000002020207b0af8ff00000000bda100000000000026010000f8ffffffb702000008000000b703000000000000850000004b00000095"], &(0x7f00000009c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r1) sendmsg$IEEE802154_LLSEC_LIST_DEV(r1, &(0x7f00000006c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000680)={&(0x7f0000000480)={0x14, r2, 0xb13, 0x70bd2a, 0x25dfdbff, {}, [""]}, 0x14}}, 0x40) r3 = socket$kcm(0xa, 0x3, 0x73) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0xf0ffffffffffff, 0x0, 0x4004140}, 0x0) sendmsg$inet(r3, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000002440)="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", 0xffa0}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f0000001940)=[@ip_tos_int={{0x50, 0x29, 0x32}}, @ip_pktinfo={{0x0, 0xe, 0x8, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x0) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="22000018de943807f15df2919a9fa9808f82f3806aacc29f8736033167e8facec5993fe83f874f99f4ebb33c62c7f8b18815ea136d5e2bad018df3bfcf277612e7acdcc6e0f60272110e9121ec5fe9a53226885606f96262fdc0e77d688c", @ANYRES16=r4, @ANYBLOB="00012abd7000ffdbdf25080000000800030001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x6048000}, 0x40004) 29.384100619s ago: executing program 0 (id=713): socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = syz_io_uring_setup(0xbd9, &(0x7f0000000640)={0x0, 0xe826, 0x100, 0x1, 0x800021d}, &(0x7f0000000dc0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r2, 0x847ba, 0xf5ff, 0xe, 0x0, 0x0) 28.967417153s ago: executing program 0 (id=724): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=@updpolicy={0x1fc, 0x19, 0x1, 0x70bd25, 0x1, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@empty, 0x4e21, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xffffffffffffffff}, {0x0, 0x0, 0x8000000000000000}, 0x200, 0x0, 0x0, 0x0, 0x1}, [@tmpl={0x144, 0x5, [{{@in=@loopback, 0x0, 0x6c}, 0x0, @in=@rand_addr=0x640100ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2000, 0x3c}, 0x2, @in6=@dev, 0x0, 0x0, 0x1, 0x0, 0x6}, {{@in=@loopback, 0xfffffffe, 0x6c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3, 0x0, 0x8, 0x2}, {{@in=@dev={0xac, 0x14, 0x14, 0x43}, 0x0, 0x33}, 0x0, @in=@remote}, {{@in=@remote, 0x4d2, 0x33}, 0xa, @in6=@remote, 0x0, 0x5, 0x0, 0x3}]}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x1}, 0x4000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000000)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x100000}}, {@resuid}, {@jqfmt_vfsv1}, {@errors_remount}, {@nobh}, {@usrjquota, 0x2e}], [], 0x2e}, 0x1, 0x46f, &(0x7f0000000580)="$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") r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000009c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd26, 0xa000, {0x0, 0x0, 0x0, r8, {0xe, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) r9 = syz_genetlink_get_family_id$gtp(&(0x7f0000000400), r2) r10 = syz_open_procfs$userns(0x0, &(0x7f00000004c0)) sendmsg$GTP_CMD_ECHOREQ(r4, &(0x7f0000000a40)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000500)={0x48, r9, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@GTPA_MS_ADDR6={0x14, 0xc, @loopback}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r10}, @GTPA_PEER_ADDRESS={0x8, 0x4, @empty}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x40) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x358, 0x158, 0xc8, 0x8, 0x0, 0x5803, 0x288, 0x2e8, 0x2e8, 0x288, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @private1, [], [], 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0x138, 0x158, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@physdev={{0x68}, {'veth1_to_team\x00', {}, 'macvlan0\x00', {}, 0x0, 0x6}}, @inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x108, 0x130, 0x0, {}, [@common=@unspec=@state={{0x28}}, @common=@unspec=@connbytes={{0x38}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) 28.768011679s ago: executing program 0 (id=728): r0 = semget$private(0x0, 0x3, 0x407) semctl$GETNCNT(r0, 0x2, 0xe, &(0x7f0000000280)=""/198) socket$inet6(0xa, 0x2, 0x3a) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x24, r3, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x24}}, 0x0) sendmsg$FOU_CMD_DEL(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r3, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x1c}}, 0x4) syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000540)='./file0\x00', 0x1204018, &(0x7f0000000240)=ANY=[@ANYBLOB="6f76657272696465726f636b7065726d2c6e6f636f6d70726573732c686964652c73657373696f6e3d3078303030303030303030303030303032312c756e686964652c696f636861727365743d63703433372c6f76657272696465726f636b7065726d2c626c6f636b3d3078303030303030303030303030303430302c005fb50aab29cf1d32d24be5ab2a6506aa524c8f1cd5781842ee1c86bee627767fee958f25bb6db8e631262ed8a59d337d730b6698271aeb8c31c1902a7e236e5dd878e6c1352c0c799d8e80d7346f8d2870acebe617c694bbb925d3ab4fb01784c564c03d88c81d2f84f58e8c6ba18548f09fa6"], 0x1, 0x56f, &(0x7f0000000b00)="$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") r4 = inotify_init() r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) bind$unix(r6, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r6, 0x0) connect$unix(r5, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r5, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) close_range(r4, 0xffffffffffffffff, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000c80)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ac1414aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ac1e0001000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000007f000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x590) setsockopt$inet_group_source_req(r1, 0x0, 0x2c, &(0x7f00000004c0)={0x8000, {{0x2, 0x0, @multicast2}}, {{0x2, 0x4e22, @multicast2}}}, 0x108) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{}, &(0x7f0000000a00), &(0x7f0000000400)}, 0x20) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000080)={0x1f, 0xffff, 0x4}, 0x6) write(r7, &(0x7f0000000340)="0a000300", 0x4) shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ebc000/0x1000)=nil) 28.443673061s ago: executing program 0 (id=740): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x225451, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="190000000400000004000000040000b7"], 0x50) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x303, 0x2, 0x4, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1d, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079100000000000007b0a00ff000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xbf, &(0x7f000000cf3d)=""/191, 0x0, 0x0, '\x00', 0x0, @lsm=0x1b}, 0x94) 28.365607471s ago: executing program 0 (id=743): r0 = socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x1a, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0x0, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0xffffffd}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x50, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffe0, 0xa}, {0xf, 0x10}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x20, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x100008}, @TCA_CAKE_FLOW_MODE={0x8}, @TCA_CAKE_ATM={0x8, 0x4, 0x1}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x55}, 0x4004) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x800700, &(0x7f00000003c0)={[{@abort}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x36}}, {@user_xattr}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x3}}]}, 0x1, 0x46f, &(0x7f0000000bc0)="$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") (async) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x3, 0x7, @loopback, 0x800000}, 0x1c) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) (async, rerun: 32) r4 = syz_open_dev$usbfs(&(0x7f0000000000), 0x2, 0x101000) (rerun: 32) mmap(&(0x7f000073f000/0x2000)=nil, 0x2000, 0x2000007, 0x30, r4, 0x4f165000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) time(0x0) 23.971521767s ago: executing program 3 (id=816): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd2d, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x4000, 0x300}, 0x93}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x200}, {0x0, 0x0, 0x0, 0x6000000, 0x3000000, 0x40000000}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8000, 0x5, 0x0, 0xfffffffc, 0x5}, {}, {0x0, 0x0, 0x800000, 0x0, 0x6}, {0x0, 0xc3, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x5}, {0x5}, {}, {0x0, 0x10}, {0x0, 0x470a, 0x0, 0x8000000, 0x4000000}, {}, {0x2, 0x0, 0x0, 0x0, 0x6, 0x6}, {}, {}, {0x0, 0x0, 0x0, 0x1, 0x0, 0xfff}, {0x0, 0x0, 0x0, 0x8000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x20}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x20000}, {}, {0x1, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x60569add}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffff, 0x9}, {0x0, 0x0, 0x0, 0x0, 0xfffff800}, {}, {}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0xfffffffd}, {}, {0x0, 0x9, 0x0, 0xffffffff, 0x0, 0x2}, {}, {0x80, 0x0, 0x0, 0x0, 0x0, 0x80000}, {0x80}, {0x0, 0x0, 0x0, 0x5, 0x5}, {}, {0x0, 0x0, 0x8}, {0x0, 0x2, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x8, 0x0, 0x3}, {}, {0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x8510}, {0xffff}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x8, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1}, {}, {0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, {0x0, 0x7}, {}, {0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x9}, {0x1, 0xfffffffc, 0x200}, {0x5, 0x0, 0x0, 0x200}, {}, {0x4}, {}, {0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x5, 0xfffffffe}, {0x0, 0x0, 0x0, 0x4, 0x9}, {}, {0x0, 0x0, 0x0, 0x0, 0x1, 0x5}, {0x0, 0xb}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x56}, {0x100000, 0x0, 0x0, 0xec33, 0x0, 0x4}, {}, {0xb, 0x0, 0x0, 0x0, 0x0, 0xfe1}, {0x0, 0x1, 0x0, 0x0, 0x4}, {0x0, 0x0, 0xfffffffc}, {}, {0x0, 0xfffffffd}, {0x6}, {0x7f}, {}, {0x0, 0x8, 0x0, 0x0, 0xfffffffe}, {0x4, 0x2, 0x2000000, 0x2, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0xe9d, 0x58a}, {0x2}, {0x2, 0x9, 0x20000000}, {0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0xe600, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x7, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0xfffffffb, 0x0, 0x0, 0x0, 0x8000}, {0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x2d, 0x0, 0x10000}, {0x0, 0x0, 0x8000}, {0x0, 0x8000}, {0x0, 0x0, 0x10000}, {0x0, 0x80000000, 0x0, 0x7fff800, 0x4}, {0x0, 0x3}, {0xffffffff, 0x0, 0x0, 0x0, 0xd}], [{}, {}, {0x0, 0x1}, {0x1}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5, 0x1}, {}, {0x4}, {0x3}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x5}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x1, 0x1}, {}, {0x5}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x4}, {}, {0x5}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x2, 0x1}, {}, {}, {}, {}, {0x5, 0x1}, {}, {}, {}, {0x2}, {}, {}, {0x4}, {0x3}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) 23.899372567s ago: executing program 3 (id=817): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x45, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xff, 0x30000000000}, 0x0, 0x10000, 0xfffffffe, 0x5, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') lseek(r0, 0x1000000, 0xf5ffffff) 23.845834264s ago: executing program 3 (id=819): r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x6c, 0x30, 0xffff, 0xffffffe4, 0x0, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x6}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) 23.712010601s ago: executing program 3 (id=822): bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0900000004000000dd0000000a00000000000000", @ANYRES32, @ANYBLOB="000000000000000000000000000065f0000000008bff03000000000000dda3143803f196beee07fa6bb50c45fb87847ea52126e3ac36", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = getpgid(0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x23}, 0x800, 0x0, 0x2, 0x1, 0x80, 0x7}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000240)={@private0={0xfc, 0x0, '\x00', 0x7}, 0x800, 0x0, 0x2, 0x0, 0x8, 0x8}, 0x20) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r2 = syz_pidfd_open(r0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000140)={{0xa, 0x4e22, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0xf9}, 0x1}, {0xa, 0x4e21, 0xa52, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xcac}, 0xffffffffffffffff, {[0x5, 0x6bfe, 0x1000, 0x4, 0x6, 0x6, 0x7, 0xf4200000]}}, 0x5c) r3 = pidfd_getfd(r2, 0xffffffffffffffff, 0x0) setns(r3, 0x66020000) mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) umount2(&(0x7f0000000040)='.\x00', 0x2) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000400)={0x18, 0x0, {0x2, @multicast, 'ip6tnl0\x00'}}, 0x1e) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$EBT_SO_GET_INIT_INFO(r5, 0x0, 0x82, 0x0, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSARP(r6, 0x8955, &(0x7f0000000a80)={{0x2, 0x4e23, @empty}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x4a, {0x2, 0x0, @rand_addr=0x64010101}, 'lo\x00'}) ioctl$sock_inet_SIOCSARP(r6, 0x8955, &(0x7f00000002c0)={{0x2, 0x0, @multicast1}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}, 0x8, {0x2, 0x0, @empty}, 'lo\x00'}) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 23.664440617s ago: executing program 3 (id=825): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000", 0x2c}], 0x1}, 0x40) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000fe0e000a000f00000002800000121f", 0x2e}], 0x1}, 0x4008084) 23.049550156s ago: executing program 3 (id=834): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000040000000048000000ac1e000100000000000000000000000000000000000000000a0040"], 0xb8}}, 0x4000) 23.049305596s ago: executing program 32 (id=834): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000040000000048000000ac1e000100000000000000000000000000000000000000000a0040"], 0xb8}}, 0x4000) 13.348793138s ago: executing program 33 (id=743): r0 = socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x1a, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0x0, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0xffffffd}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x50, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffe0, 0xa}, {0xf, 0x10}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x20, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x100008}, @TCA_CAKE_FLOW_MODE={0x8}, @TCA_CAKE_ATM={0x8, 0x4, 0x1}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x55}, 0x4004) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x800700, &(0x7f00000003c0)={[{@abort}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x36}}, {@user_xattr}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x3}}]}, 0x1, 0x46f, &(0x7f0000000bc0)="$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") (async) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x3, 0x7, @loopback, 0x800000}, 0x1c) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) (async, rerun: 32) r4 = syz_open_dev$usbfs(&(0x7f0000000000), 0x2, 0x101000) (rerun: 32) mmap(&(0x7f000073f000/0x2000)=nil, 0x2000, 0x2000007, 0x30, r4, 0x4f165000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) time(0x0) 5.157775665s ago: executing program 1 (id=1116): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10002, 0x9, 0x1}, 0x50) r0 = gettid() timer_create(0x0, &(0x7f00000014c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000200)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (fail_nth: 1) 4.874108671s ago: executing program 1 (id=1122): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x80, 0x0, 0x7ffc1ffb}]}) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') mknodat$loop(r4, &(0x7f0000000000)='./file0\x00', 0x4, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) futex_waitv(0x0, 0x0, 0x0, 0x0, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x31}}, 0x2, 0x0, 0x4}}, 0x2e) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000040)={0x0, 0x9, 0x9, [0x4, 0x9, 0x7, 0x6, 0x1000, 0x6, 0x38e0, 0x8, 0x2]}, &(0x7f0000000080)=0x1a) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYRES16=r1], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r7, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180), 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x20, 0x8, 0x0, 0x0}}, 0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f00000000c0)={r6, @in6={{0xa, 0x4e21, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xb0b}}, 0x101, 0xe, 0x1000, 0x7fff, 0x1, 0xaeae, 0x53}, &(0x7f0000000180)=0x9c) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) socket$packet(0x11, 0x3, 0x300) r8 = syz_io_uring_setup(0x10e, &(0x7f0000001cc0)={0x0, 0xf07d, 0x400, 0x40000, 0x101}, &(0x7f0000000400)=0x0, &(0x7f0000000380)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000004c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4004, @fd_index=0x3, 0x632, 0x0, 0x0, 0x14}) io_uring_enter(r8, 0x8aa, 0x0, 0x0, 0x0, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000002060101000000000000000000000000881175ac070000000900020073797a3000000000050005000a000000050004000000000016000300686173683a6e65742c706f72742c6e657400000014000780080008400000009008fa916d8e09bd30b600064000000000"], 0x64}}, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) r12 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r12, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x2, 0x3}}, 0x26) ioctl$PPPIOCGL2TPSTATS(r12, 0x8004745a, &(0x7f0000005280)) 4.220326946s ago: executing program 1 (id=1130): syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) socket(0x15, 0x5, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$sock_int(r0, 0x1, 0x46, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, 0x0, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="0300000004000000040000000100000000000018", @ANYRESHEX, @ANYBLOB="18"], 0x50) 4.219788376s ago: executing program 1 (id=1131): r0 = socket(0x40000000015, 0x5, 0x0) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000f900850000007700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000a80)='./file1\x00', 0x2800810, &(0x7f00000025c0)=ANY=[@ANYBLOB="646f74732c747a3d5554432c646f74732c646f74732c6e6f646f74732c666c7573682c646f74732c6e6f646f74732c71756965742c00b3d27234e95eb4b44190021bbbe89ab824d38c571641668d362b4dff6e47bdf1638c7462a3bd66a53b404ae08c32af6843a2469c7210381b9d48047c77540b6447a8e50c44cb44f91e4264a37e0209c3a234f4803ba56b7a24536ee396f4838f4143b92ad909efb23eb22dce6477c2bb5b8f793b9e07c2120d566cf1f6ba51e4d01e8ef223a2ba72cfb3127844c045765149fb1219f433feb977426596e07082254e9930296256df143ff96377d8c28c533724fbd9fdad260e7d875d0f17374141abc60c8e3c07e4a7bc381791172c217f00964aaf6e213a252b9689ae38342862d27437921e13229d407e1a6037e3f16a2cdab8f9c76a66a72ccc67015c9435e200f9fbb9d78ce426b37310b9f127e7b1207c74eff7b853de7043a001de85931463c7fc7c78be9eb9b5f88c0067aabb3a5d1f94bcc90537c1c1ce509450160c"], 0x3, 0x15d, &(0x7f0000000f00)="$eJzs27+KE1EUB+AzJmrUJrVYDNhYBbWyVCSCOKAoKbRSiDaJBEwzWgWfxNaHEyRVCuGKzpLshoRl/8zO7ub7mhz4ccM9xZ3LGZj3dz6PhpPpp8mreXSyLNqPI49FFt24Eq2ozAIAuEwWKcXvlFK6PosbPyKl1PSOAIC6uf8BYPccev8/amhjAEBtzP8AsHvevH334klR9F/neSfi16wclIPqt8qfPS/69/P/uqtV87IctJb5gyrPD+ZX4+Ze/nBjfi3u3a3yf9nTl8VafiuG9bcPAAAAO6GXL22c73u9bXlV7Xs/sDa/t+N2+8zaAACOYPr12+jDePzxi0JxQYs/KaVjLP/+szoC56SL0y2yiDjZ/zT9ZALqtjr0Te8EAAAAAAAAAAAAAADYpt6vkVpNtwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAb/Q0AAP//LjxONw==") r4 = inotify_init1(0x800) inotify_add_watch(r4, &(0x7f0000000c00)='./file1\x00', 0x20000536) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x101601, 0x119) io_uring_setup(0x6c5, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x40047211, &(0x7f00000000c0)) setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, &(0x7f0000000040)={0xc}, 0x8) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000000)={'bridge_slave_1\x00', {0x2, 0x4e21, @remote}}) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) syz_clone(0x60000400, 0x0, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r6, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}, 0x76e0}) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r7, &(0x7f0000000000)=[{0x1e, 0x0, 0x8, 0xfd, @tick=0x8, {}, {}, @result}], 0x1c) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r8, &(0x7f0000000000)=[{0x1e, 0x0, 0x8, 0xfd, @tick=0xa, {0x28}, {}, @result={0x0, 0x400004}}], 0x1c) r9 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x5, 0xb, &(0x7f0000000540)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRESOCT, @ANYRES16, @ANYRES32=0x0, @ANYRES8=r9], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) 4.152858864s ago: executing program 5 (id=1134): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x4c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10026}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x22a5, 0x38023}}}}}}, @IFLA_AF_SPEC={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc154}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x4c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10026}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x22a5, 0x38023}}}}}}, @IFLA_AF_SPEC={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc154}, 0x0) connect$unix(r1, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) sendmsg$nl_route(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c000000190001000000000000000000802000000004000500000000080001"], 0x2c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c000000190001000000000000000000802000000004000500000000080001"], 0x2c}}, 0x0) fremovexattr(r0, &(0x7f0000000000)=@known='security.apparmor\x00') 4.02715803s ago: executing program 5 (id=1136): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x4e, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14}}}]}, @NFTA_RULE_ID={0x0, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWTABLE={0x0, 0x0, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x0, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x0, 0x2, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_TABLE_USERDATA={0x0, 0x6, "b4e0a9"}, @NFTA_TABLE_NAME={0x0, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x0, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x0, 0x6, "b3f2391515fc4d651ab0c61a36a49636c7811f9460f7291ea14bd8938db0a3724caa43da4c8b7db8668290d1e3061d22276800d3ed16b4c059a96c3e314e35660505d83834ecf384773ff5a091fd5b5b59f998800c85090fae0a7a14349b09c48b498e0d1c387476dcd12cdb73ff6cf12ab799cfc917b1b5332ebbae811d35975d8d3fc5ff0bc5a0eee10000e5701113c49cc432c03913ac17850a0a19b3b145cab52269526b74c432597ddf26901019d4ba1626bfd94c03bbad8121204826329903a609b0ce1007e59318c871b4"}, @NFTA_TABLE_FLAGS={0x0, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELSET={0x0, 0xb, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_SET_ID={0x0, 0xa, 0x1, 0x0, 0x2}, @NFTA_SET_DATA_LEN={0x0, 0x7, 0x1, 0x0, 0x3c}]}], {0x14}}, 0x7c}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x2000009, 0x710bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x0, @perf_config_ext={0x2, 0x6}, 0x0, 0xcda5, 0x43a1bd76, 0x7, 0xc, 0x10001, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r1 = socket(0x21, 0x3, 0x0) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)={0x90000019}) ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, &(0x7f0000000140)='rose0\x00') r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000190001002cbd700000c8c3532d"], 0x24}}, 0x0) 3.974899387s ago: executing program 5 (id=1137): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x41, 0x1, 0x0, 0xe0, 0x0, 0x0, 0x4050, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x528, 0x0, @perf_config_ext={0xe, 0xfffffffffffffffe}, 0x0, 0x40000000, 0xd2, 0x9, 0x103fb, 0x1ff, 0x1ff, 0x0, 0x0, 0x0, 0x400000000000007}, 0x0, 0x1, 0xffffffffffffffff, 0x9) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r1, 0x1, 0x4d, 0x0, &(0x7f0000cab000)) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x20, 0x17, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000d4a64b8c000e000000000018110000", @ANYRES64=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc0910000000000055090100000001569500000000000000180100002020642500000000002020207baaf8ff00000000bda100000000000027010000f8ffffffb702000008000000b7030000000000002500000006000000be91000000000000b5020000020000008500000005000000b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r2 = syz_io_uring_setup(0x12e, &(0x7f0000000340)={0x0, 0x5cb1, 0x2, 0x3, 0xfffffffd}, &(0x7f0000000140)=0x0, &(0x7f0000000280)) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000580)='net/fib_trie\x00') pread64(r4, &(0x7f000003b7c0)=""/102351, 0xffffffffffffffa0, 0x6) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0x200, 0x0, 0x4) io_uring_enter(r2, 0x1e76, 0xf728, 0x5, 0x0, 0x0) r5 = socket(0x2b, 0x1, 0x1) listen(r5, 0x37) connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x1c) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x7ffffffff000, 0x0, 0x31, 0xffffffffffffffff, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) 3.932382983s ago: executing program 1 (id=1138): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000300000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) 3.834134626s ago: executing program 1 (id=1145): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d40)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @private=0xa010102}]}}}, @IFLA_MASTER={0x8, 0x3, r4}]}, 0x40}, 0x1, 0xd, 0x0, 0x4000000}, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000040), 0x3f00}], 0x20}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006261746164760000040002b008000a00", @ANYRES32=r5], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x1400000, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) 3.833893045s ago: executing program 34 (id=1145): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d40)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @private=0xa010102}]}}}, @IFLA_MASTER={0x8, 0x3, r4}]}, 0x40}, 0x1, 0xd, 0x0, 0x4000000}, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000040), 0x3f00}], 0x20}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006261746164760000040002b008000a00", @ANYRES32=r5], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x1400000, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) 3.749665087s ago: executing program 5 (id=1148): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) (async, rerun: 32) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) (async, rerun: 32) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) ioprio_set$pid(0x3, 0x0, 0x0) (async) sendfile(r0, r0, 0x0, 0x67) (async, rerun: 64) r1 = socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 64) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00'}) (async) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) getpgid(0x0) (async) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) (async) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r2 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x23}, 0x800, 0x0, 0x2, 0x1, 0x80, 0x7}, 0x20) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000240)={@private0={0xfc, 0x0, '\x00', 0x7}, 0x800, 0x0, 0x2, 0x0, 0x4008, 0x8}, 0x20) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) (async) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1) (async) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000140)={{0xa, 0x4e23, 0xfffffffe, @private1, 0x1}, {0xa, 0x4e21, 0xa52, @loopback, 0xcac}, 0xffffffffffffffff, {[0x5, 0x6bfe, 0xffffff2f, 0x4, 0x6, 0x6, 0x7, 0xf4200000]}}, 0x5c) (async) r3 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x840, 0x0) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x100) fcntl$setlease(r4, 0x400, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000340)='fdinfo/4\x00') read$eventfd(r5, &(0x7f0000000280), 0x8) setns(r3, 0x66020000) (async, rerun: 64) mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0) (rerun: 64) 3.233476733s ago: executing program 6 (id=1154): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYRES8, @ANYRESHEX=0x0], 0x7c}}, 0x4000042) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0xfff}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x6, 0x7, 0x1, 0x0, "e3c3"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x88}, 0x1, 0x0, 0x0, 0x840}, 0x20004080) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0xfff}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x6, 0x7, 0x1, 0x0, "e3c3"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x88}, 0x1, 0x0, 0x0, 0x840}, 0x20004080) 3.165849882s ago: executing program 6 (id=1155): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x3, @perf_bp={0x0, 0x6}, 0x4, 0x9, 0xfff, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x8000, &(0x7f0000000180)={[{@resuid}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x519, &(0x7f00000009c0)="$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") 2.862160571s ago: executing program 5 (id=1161): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file1\x00', 0x10000, &(0x7f000000b800)=ANY=[@ANYBLOB="6e6f646f74732c666d61736b3d30303030303030303030303030303030303030363637352c646f74733d00970000", @ANYRES32=0x0, @ANYBLOB=',nodots,nodots,nfs=stale_rw,nodots,dots,nodots,nodots,check=relaxed,fmask=00000000000000000177777,gid=', @ANYRESHEX=0xee00, @ANYBLOB=',quiet,tz=UTC,nodots,nodots,dots,umask=00000000000000000076645,nodots,nodots,nfs=stale_rw,nodots,\x00'], 0x5, 0x1f5, &(0x7f0000000800)="$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") 2.586941776s ago: executing program 5 (id=1165): r0 = socket(0x2, 0x80805, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000940)={'filter\x00', 0x7, 0x4, 0x3f0, 0x0, 0xe0, 0x308, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@arp={@empty, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff, 0xff000000, 0x4, 0xb, {@empty, {[0xff, 0xff, 0x0, 0xff]}}, {@empty, {[0xff, 0xff, 0x0, 0x0, 0xff, 0xff]}}, 0xff00, 0x5, 0x1, 0xffff, 0x8, 0x2, 'veth1_virt_wifi\x00', 'veth1_to_bond\x00', {}, {0xff}, 0x0, 0x100}, 0xc0, 0x110, 0x0, {0x1001000000000000}}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @loopback, 0x2, 0x1}}}, {{@arp={@private=0xa010101, @loopback, 0xff, 0x0, 0x5, 0x6, {@empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}}, {@empty, {[0xff, 0x0, 0xff]}}, 0x5, 0x2, 0x5c9, 0x6, 0xff1f, 0x6, 'batadv_slave_1\x00', 'batadv0\x00', {0xff}, {}, 0x0, 0x11}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}, {{@arp={@rand_addr=0x64010100, @private=0xa010100, 0xffffffff, 0x0, 0x5, 0x9, {@mac, {[0x0, 0xff, 0x0, 0xff, 0xff, 0xff]}}, {@mac=@broadcast, {[0xff, 0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x3, 0x9, 0x9, 0x40, 0x6, 0x62e, 'veth1_to_hsr\x00', 'veth1\x00', {}, {}, 0x0, 0x220}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}, @broadcast, @local, 0x2}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) 2.540286413s ago: executing program 2 (id=1166): epoll_create1(0x80000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc\x00\x00\x00\x00\x00\x00\x00\x00D\x00\x00v4\x00\x00s/\x92Ync_\x00me\xf44.\xab%nN\xd4\xfc\x11\x00\xd1l,'}, 0x30) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000000000)={0x7, {"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", 0x1000}}, 0x1006) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) (async, rerun: 32) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) (rerun: 32) getdents64(r3, &(0x7f0000000540)=""/182, 0xb6) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) getdents64(r3, &(0x7f0000000380)=""/208, 0xd0) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) (async, rerun: 64) r5 = socket(0xa, 0x5, 0x0) getsockopt(r5, 0x0, 0x50, &(0x7f0000000380)=""/84, &(0x7f0000001ffc)=0x54) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5800000055003d07000000000001000007000000", @ANYRES32=r4, @ANYBLOB="20000280", @ANYRES32, @ANYBLOB="0000000000000000000000000a0000000000000000000014200001"], 0x58}}, 0x0) (async) r6 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3380, 0x1, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) (async) io_uring_enter(r6, 0x627, 0xc1040000, 0x43, 0x0, 0x0) (async, rerun: 32) r8 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x48, 0x10, 0x49920d862a92153b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x200, 0x8000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MTU={0x8, 0x3}, @IFLA_ADDRESS={0xa, 0x1, @random="02e8eb3dff9f"}]}, 0x48}}, 0x8000) 2.529416304s ago: executing program 35 (id=1165): r0 = socket(0x2, 0x80805, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000940)={'filter\x00', 0x7, 0x4, 0x3f0, 0x0, 0xe0, 0x308, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@arp={@empty, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff, 0xff000000, 0x4, 0xb, {@empty, {[0xff, 0xff, 0x0, 0xff]}}, {@empty, {[0xff, 0xff, 0x0, 0x0, 0xff, 0xff]}}, 0xff00, 0x5, 0x1, 0xffff, 0x8, 0x2, 'veth1_virt_wifi\x00', 'veth1_to_bond\x00', {}, {0xff}, 0x0, 0x100}, 0xc0, 0x110, 0x0, {0x1001000000000000}}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @loopback, 0x2, 0x1}}}, {{@arp={@private=0xa010101, @loopback, 0xff, 0x0, 0x5, 0x6, {@empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}}, {@empty, {[0xff, 0x0, 0xff]}}, 0x5, 0x2, 0x5c9, 0x6, 0xff1f, 0x6, 'batadv_slave_1\x00', 'batadv0\x00', {0xff}, {}, 0x0, 0x11}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}, {{@arp={@rand_addr=0x64010100, @private=0xa010100, 0xffffffff, 0x0, 0x5, 0x9, {@mac, {[0x0, 0xff, 0x0, 0xff, 0xff, 0xff]}}, {@mac=@broadcast, {[0xff, 0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x3, 0x9, 0x9, 0x40, 0x6, 0x62e, 'veth1_to_hsr\x00', 'veth1\x00', {}, {}, 0x0, 0x220}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}, @broadcast, @local, 0x2}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) 2.525062164s ago: executing program 2 (id=1168): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000c40), 0x2, 0x4a7, &(0x7f0000001140)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) (fail_nth: 3) 2.474465211s ago: executing program 4 (id=1169): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001a00910c07a551559a257aac8180"], 0xfe33) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003, 0x10000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gre={{0x8}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x1e}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x0) 2.471435231s ago: executing program 6 (id=1170): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x22883, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfe, {{@in6=@private0, @in6=@private0, 0x0, 0x400, 0x0, 0x0, 0xa, 0x60, 0x0, 0x3b, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, 0x9}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x25dfdbfe, {{@in6=@private0, @in=@remote, 0x0, 0xe9d8, 0x1, 0xc4, 0xa, 0x60, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, 0x80000001}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000004800fc000000000000000000000048000000ac1e000100000000000000000000000000000000000000000a0040"], 0xb8}}, 0x4000) 2.120217086s ago: executing program 4 (id=1171): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f40)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x8, 0x7, 0x1, 0x0, "7c35c1a7"}]}], {0x14}}, 0x74}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082900fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x0, 0x7}, 0x10) 2.109214928s ago: executing program 6 (id=1172): r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast2}, &(0x7f0000000040)=0x10, 0x0) sendto$inet(r0, &(0x7f0000000080)="db3a30b4f5226d1d07ca1f7b6ce7402c213fd33919c673f517a205eaaf0a07a79b542ff67ee31c2b370b378138067c75799579523dcd4c08db07372d29a10ce61877367b34cec16813064ae6b4b429058a8ca973de25", 0x56, 0x0, 0x0, 0x0) syz_usbip_server_init(0x4) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x2, 0x7, &(0x7f0000000100)) r1 = signalfd4(r0, &(0x7f0000000140)={[0x1]}, 0x8, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x4, &(0x7f0000000180)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x110, &(0x7f00000001c0), 0x0, 0x4) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000200)) close(r0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f00000004c0)={0x0, 0xd3, 0x10, 0xca, 0x1}, &(0x7f0000000500)=0x18) sendmsg$inet_sctp(r2, &(0x7f00000005c0)={&(0x7f0000000240)=@in={0x2, 0x4e24, @private=0xa010101}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000280)="2fa6cc355f6060ec6aacc606f953a880b01d5b9926057c9d54ee9448873b11960cf1bfbc3495884533971d8edd7677184e", 0x31}, {&(0x7f00000002c0)="6f16e8898438d984dc2888f078bd10c581b90f4480f440866504ceeca40826b997e683bb92e005ffc18b223e7382598d3d09029d2040435c8eef8b2732ab5e18ee8289a2ae0810a3f16fe6ff766d3dea808aad85cf56f549e6a3b3e315ca72e2ea126e3234ebf838aa212c42cf15962e29f03d6b41a586ace7f91c1a28def861a616d0c566e0f88a85c0bbc2e2f9110f94d1a4b2cfd090b083a84f3885980b51328560b36fb301e2705926a0a37e3e6781daa400d997e69e7695315edf2b6893f1e0922a6fe86e8e47d3b4569460e58329618ce790828145371444cd09dec7ddede652aca8db", 0xe6}, {&(0x7f00000003c0)="40be78d39ad77d7fff99c73d95c6194ca2213fd8785f90530ca3b2e8e6856e48e3116dbcc5d5d2e2ad84fa82b5da19ab7444516e93ef61aac385a95f6046b37d0e6f22bff2e57da841aacce32cabccb845d3fb8b3166ccd29cce2c758acb294011141dd4600239521e367fc41c26186d10eb52e6b69a5f2954c3c64c434b0decec8e62ed1c710e371908ed1551172f44e2a265494c8b10c4a3427b388ead62b41e2646bc35c410d8dd92059428480b91d0a6", 0xb2}], 0x3, &(0x7f0000000540)=[@sndrcv={0x30, 0x84, 0x1, {0xd, 0x3, 0x8000, 0x3, 0xfffffffc, 0x8, 0x4, 0x3, r3}}, @init={0x18, 0x84, 0x0, {0x1, 0x3fd9, 0x2, 0x9}}], 0x48, 0x4090}, 0x4000) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r2, 0xf507, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000600)={r1, 0x0, 0x25, 0x4, @void}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000680), &(0x7f00000006c0)=0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r5) r8 = socket$nl_rdma(0x10, 0x3, 0x14) recvmsg(r8, &(0x7f00000018c0)={&(0x7f0000000740)=@qipcrtr, 0x80, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/187, 0xbb}], 0x1, &(0x7f00000008c0)=""/4096, 0x1000}, 0x2022) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000001900)={0x2, @rand_addr=0x64010101, 0x4e22, 0x2, 'lblc\x00', 0x1, 0x5, 0x45}, 0x2c) syz_io_uring_setup(0x5b99, &(0x7f0000001940)={0x0, 0xec61, 0x40, 0x1, 0x3b5}, &(0x7f00000019c0)=0x0, &(0x7f0000001a00)=0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r9, 0x118, &(0x7f0000001a40), 0x0, 0x4) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000001a80)=r1, 0x4) r11 = syz_open_dev$usbfs(&(0x7f0000001ac0), 0x1, 0x105000) ioctl$USBDEVFS_SUBMITURB(r11, 0x8038550a, &(0x7f0000001bc0)=@urb_type_control={0x2, {0x7}, 0x2, 0x4, &(0x7f0000001b00)={0x40, 0x15, 0x200, 0x6, 0x4f68}, 0x8, 0x80000001, 0x3e00b8c5, 0x0, 0x100, 0x5, &(0x7f0000001b40)="efd85fd228eb4f5aa1dd9d96f17700880258916af9a70e7568d7ce7bb800ba345d379a16ae99eed880b804d985dba9ed279a08e05135c1157a7d65a04f162afa66d762d8a77e17272f7736d04f6741e73c4f20cd16aec8b841464cd1c1c30381a2bab89d5f9b3018"}) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r11, 0xf505, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000001c00)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r4}}) 2.106059788s ago: executing program 2 (id=1173): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000095}, 0x4000090) (fail_nth: 9) 1.796566519s ago: executing program 2 (id=1174): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x11, 0x3, 0x0) getpeername$packet(r2, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe468}, 0x94) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x0, 0x4, 0x0, 0x4}}, @TCA_ACT_BPF_FD={0x8, 0x5, r3}]}, {0xfffffffffffffe45}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x7800, 0x1, 0x8, 0x1798df52, {{0x7, 0x4, 0x1, 0x3, 0x1c, 0x68, 0x0, 0x4, 0x2f, 0x0, @remote, @loopback, {[@rr={0x7, 0x7, 0xf5, [@initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x22004002, &(0x7f0000000080)={[{@jqfmt_vfsold}, {@stripe={'stripe', 0x3d, 0xffff}}, {@sysvgroups}, {@jqfmt_vfsold}, {@nouid32}, {@grpjquota, 0x2e}]}, 0x84, 0x46c, &(0x7f00000004c0)="$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") r4 = socket$unix(0x1, 0x1, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2) bind$unix(r4, &(0x7f0000000380)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 1.592244645s ago: executing program 4 (id=1175): r0 = semget$private(0x0, 0x3, 0x407) semctl$GETNCNT(r0, 0x2, 0xe, &(0x7f0000000280)=""/198) r1 = socket$inet6(0xa, 0x2, 0x3a) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x24, r4, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x24}}, 0x0) sendmsg$FOU_CMD_DEL(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r4, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x1c}}, 0x4) syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000540)='./file0\x00', 0x1204018, &(0x7f0000000240)=ANY=[@ANYBLOB="6f76657272696465726f636b7065726d2c6e6f636f6d70726573732c686964652c73657373696f6e3d3078303030303030303030303030303032312c756e686964652c696f636861727365743d63703433372c6f76657272696465726f636b7065726d2c626c6f636b3d3078303030303030303030303030303430302c005fb50aab29cf1d32d24be5ab2a6506aa524c8f1cd5781842ee1c86bee627767fee958f25bb6db8e631262ed8a59d337d730b6698271aeb8c31c1902a7e236e5dd878e6c1352c0c799d8e80d7346f8d2870acebe617c694bbb925d3ab4fb01784c564c03d88c81d2f84f58e8c6ba18548f09fa6"], 0x1, 0x56f, &(0x7f0000000b00)="$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") r5 = inotify_init() r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) bind$unix(r7, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r6, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r6, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) close_range(r5, 0xffffffffffffffff, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000c80)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ac1414aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ac1e0001000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000007f000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x590) setsockopt$inet_group_source_req(r2, 0x0, 0x2c, &(0x7f00000004c0)={0x8000, {{0x2, 0x0, @multicast2}}, {{0x2, 0x4e22, @multicast2}}}, 0x108) sendmmsg$inet6(r1, &(0x7f0000000800)=[{{&(0x7f00000000c0)={0xa, 0x4e22, 0x0, @loopback={0xff00}, 0x80000006}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000100)="8000102e7577d401", 0x8}], 0x1, &(0x7f0000000140)=ANY=[], 0x18}}], 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{}, &(0x7f0000000a00), &(0x7f0000000400)}, 0x20) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000080)={0x1f, 0xffff, 0x4}, 0x6) write(r8, &(0x7f0000000340)="0a000300", 0x4) shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ebc000/0x1000)=nil) 1.519261164s ago: executing program 2 (id=1176): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x11, 0x3, 0x0) getpeername$packet(r3, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe468}, 0x94) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x0, 0x4, 0x0, 0x4}}, @TCA_ACT_BPF_FD={0x8, 0x5, r4}]}, {0xfffffffffffffe45}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x7800, 0x1, 0x8, 0x1798df52, {{0x7, 0x4, 0x1, 0x3, 0x1c, 0x68, 0x0, 0x4, 0x2f, 0x0, @remote, @loopback, {[@rr={0x7, 0x7, 0xf5, [@initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x22004002, &(0x7f0000000080)={[{@jqfmt_vfsold}, {@stripe={'stripe', 0x3d, 0xffff}}, {@sysvgroups}, {@jqfmt_vfsold}, {@nouid32}, {@grpjquota, 0x2e}]}, 0x84, 0x46c, &(0x7f00000004c0)="$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") sendmsg$nl_route(r1, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="a00040ff00"/20, @ANYRES32=r5, @ANYBLOB="14000100fe8000000000000000000000000000aa08000a000100000014000200fe8000000000000000000000000000bb14000600d8000000000000009b000000050000001400020000000000000000000000000000000001080009000200000014000600d5a00000f0ffffff000000001c0300001400060000010000060000000500000004000000"], 0xa0}, 0x1, 0x0, 0x0, 0x40040c1}, 0x4040) r6 = socket$unix(0x1, 0x1, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2) bind$unix(r6, &(0x7f0000000380)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 1.189077517s ago: executing program 4 (id=1177): r0 = syz_open_pts(0xffffffffffffffff, 0x1) splice(0xffffffffffffffff, &(0x7f0000000000)=0x1, r0, &(0x7f0000000040)=0x8, 0x71ea, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x80, r2, 0x2, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x24, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffeffff}]}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffd}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x867}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1db5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_NODE={0x4}]}, 0x80}, 0x1, 0x0, 0x0, 0x64000045}, 0x44802) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000240), r1) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000300)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xb2, &(0x7f00000003c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0xa8, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000640)={'veth1_to_batadv\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000680)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000006c0)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000700)={'team0\x00', 0x0}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000780)=0x14) getpeername$packet(0xffffffffffffffff, &(0x7f00000007c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000800)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000840)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000880)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000940)={'ip6tnl0\x00', &(0x7f00000008c0)={'syztnl1\x00', 0x0, 0x29, 0xfa, 0x2, 0x0, 0x5, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x13}}, @mcast2, 0x7, 0x40, 0x3, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000a00)={'ip6_vti0\x00', &(0x7f0000000980)={'ip6tnl0\x00', 0x0, 0x29, 0x7d, 0x1, 0x5, 0x48, @rand_addr=' \x01\x00', @loopback, 0x21, 0x7800, 0xae}}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000a40)={@mcast2, 0x0}, &(0x7f0000000a80)=0x14) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000ac0)={@rand_addr, 0x0}, &(0x7f0000000b00)=0x14) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'erspan0\x00', &(0x7f0000000b40)={'syztnl0\x00', 0x0, 0x10, 0x20, 0x9d, 0x6, {{0x11, 0x4, 0x1, 0x4, 0x44, 0x67, 0x0, 0xb, 0x4, 0x0, @multicast2, @broadcast, {[@ra={0x94, 0x4}, @rr={0x7, 0xb, 0xb1, [@rand_addr=0x64010100, @broadcast]}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x1b, 0x3, [{0x2, 0x5, "530ab5"}, {0x6, 0x3, "fc"}, {0x1, 0xd, "515e2db77f6d070a4628f1"}]}]}}}}}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c00)={'netdevsim0\x00', 0x0}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000c40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000c80)=0x14) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f00000014c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001480)={&(0x7f0000000cc0)={0x788, r3, 0x10, 0x70bd26, 0x25dfdbfc, {}, [{{0x8, 0x1, r4}, {0x88, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r5}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r6}}}]}}, {{0x8, 0x1, r7}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8, 0x1, r9}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r10}}}]}}, {{0x8, 0x1, r11}, {0x1f0, 0x2, 0x0, 0x1, [{0x84, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x54, 0x4, [{0x9, 0x1, 0x2, 0x7}, {0x9, 0x3, 0x81, 0x1}, {0x7ff, 0x3, 0x9, 0x5}, {0xfff, 0x9, 0xfd, 0x8aa8}, {0x6, 0x7, 0x7f, 0x4}, {0x1, 0x5, 0x3c, 0x3}, {0x5, 0x3, 0x2, 0x5}, {0x2, 0x1, 0x73, 0xb}, {0x40, 0x32, 0xe9, 0xffffffff}, {0x0, 0x3, 0x6, 0x100}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xfa7d}}, {0x8, 0x6, r12}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r13}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r14}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r15}, {0x50, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8, 0x6, r16}}}]}}, {{0x8, 0x1, r17}, {0x130, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r18}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}]}}, {{0x8}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r19}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xa}}, {0x8}}}]}}, {{0x8, 0x1, r20}, {0x130, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r21}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x174}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x2, 0x7, 0xfe, 0x3}, {0x1, 0x4, 0x7, 0x8}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r22}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}]}, 0x788}, 0x1, 0x0, 0x0, 0x3c89b5d328f8dbfb}, 0x4000000) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000001580)=0x0) perf_event_open(&(0x7f0000001500)={0x3, 0x80, 0x0, 0xa4, 0x8, 0x9, 0x0, 0x8, 0x20, 0xe, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffa, 0x8}, 0x8100, 0x80000000, 0xe, 0x7, 0x1, 0xb76, 0xc00, 0x0, 0x6, 0x0, 0x3}, r23, 0xb, 0xffffffffffffffff, 0x8) socket$netlink(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f00000015c0)={0x0, 'netdevsim0\x00', {0x3}, 0x8}) 1.149189742s ago: executing program 2 (id=1178): syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000540)='./file0\x00', 0x1204018, &(0x7f0000000240)=ANY=[@ANYBLOB="6f76657272696465726f636b7065726d2c6e6f636f6d70726573732c686964652c73657373696f6e3d3078303030303030303030303030303032312c756e686964652c696f636861727365743d63703433372c6f76657272696465726f636b7065726d2c626c6f636b3d3078303030303030303030303030303430302c005fb50aab29cf1d32d24be5ab2a6506aa524c8f1cd5781842ee1c86bee627767fee958f25bb6db8e631262ed8a59d337d730b6698271aeb8c31c1902a7e236e5dd878e6c1352c0c799d8e80d7346f8d2870acebe617c694bbb925d3ab4fb01784c564c03d88c81d2f84f58e8c6ba18548f09fa6"], 0x1, 0x56f, &(0x7f0000000b00)="$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") r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'erspan0\x00', &(0x7f0000000040)=@ethtool_cmd={0x2, 0x2, 0xfffffffa, 0x405, 0x40, 0x72, 0xce, 0x3, 0xf9, 0x45, 0xe, 0x1, 0x7, 0xff, 0x9, 0x7fff, [0x802, 0x5]}}) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x9, 0x6031, r0, 0x4000) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f0000000000)={[{@mblk_io_submit}, {@init_itable_val={'init_itable', 0x3d, 0x4007}}, {@barrier_val={'barrier', 0x3d, 0x5}}]}, 0x43, 0x4e1, &(0x7f0000000740)="$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") ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'tunl0\x00', &(0x7f0000000140)={'gretap0\x00', r1, 0x0, 0x8, 0x1, 0x3, {{0xd, 0x4, 0x1, 0x9, 0x34, 0x66, 0x0, 0x1e, 0x2f, 0x0, @loopback, @private=0xa010100, {[@timestamp_addr={0x44, 0x1c, 0x64, 0x1, 0x9, [{@private=0xa010101, 0x1}, {@local, 0xfffffff5}, {@remote, 0x4}]}, @end]}}}}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000140)={0x3ff, 0x288}, 0x0) memfd_create(&(0x7f0000000280)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbduu\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\xa0 \xadA\xe3\xee\x8f$\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\a\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0\x06\x03\xb0\x18\xf6\x86\x88\xf7b\xc1C\xd4\xb3/\tf1\xdbrt\xa7?\xc1\x13\xee\xa8d=@dN\x83\xbal\xc5\xb9\xbe\x80+y\xf5\xf3WH\x8fg\xd3\xba\xc8\x87)\xc8\xc2Z[M\xaa2j\xac\xf6U\a\x06\x8eA\xc9\rEt\x84\x02L\x87b\x87', 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000480)=ANY=[@ANYBLOB="700000000009010400000000000000000a00000008000540000000160900010073797a30000000003c0002000c00028005000100000000002c000180140003000000000000000000000000000800000014000400200100010000000000000000000000020c0004800500"], 0x70}}, 0x4008000) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000001080)={0x3, 0x0, &(0x7f00000010c0)={&(0x7f0000001080)=ANY=[], 0x68}, 0x1, 0x7}, 0x20004000) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x5, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x7) socket$unix(0x1, 0x1, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x1, 0xb, 0x3, 0x0, 0x0, 0xfc, 0x0, 0x4f, 0xff, 0x5, 0x0, 0x8, 0x81}, 0xe) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r6, 0x84, 0x79, &(0x7f0000000440)={r7, 0x7, 0x1}, 0x8) 812.436475ms ago: executing program 4 (id=1179): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100)="290000001800190f00003fffffffda060200000000e80001dd0020040d000600ea1100200005000000", 0x29}], 0x1) 753.926543ms ago: executing program 4 (id=1180): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x80042, 0x100) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x50, 0x1, 0x0, 0xfc, 0x0, 0x7ff0, 0x1082, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7f, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffc00, 0x3, 0x2, 0xfffffffd, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) writev(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0x10, &(0x7f0000000600), 0x1, 0x59d, &(0x7f0000001100)="$eJzs3c9vFGUfAPDvs7stlAItb97kfZGDTUiERG1pwWiMiRDx5sEfJJ5IrG0hhAUaWhNBjJDgf6B/gIk3E2M8EmOIevHqzcSriSESA714WzO7s2WB3f7cMsh8PsnQ55mnk+8zu3z7zDw7MxtAaY1l/1Qi9kbEfIoY6WirRd441vq9u3euzCzduTKTotF4568UKV/X/v2U/xzON94eEb/8kOI/1YfjLly6fHa6Xp+7mNcnFs/NTyxcuvz8mXPTp+dOz52fmnxx8oUjh6eOHOrLfu6KiJ/Gj9eun3pt3zczX+755LuvbqQ4Gjvz9s796JexGFt+TTplr+tL/Q5WkGq+P51vcaoV2CHWpf3+DUTE/2IkqnHvzRuJT98qtHPAlmqkiAZQUkn+Q0m1jwOy89/2UuwRCfCo3D7WmgC4m1pze0vL+V9rzQ3G9ubcwI6lFJ3TOiki+jEzl8WYfyaNZEts0Twc0N3VaxHx/27jf2rm5mhzFj/L/8p9+V+JiDfzn9n6tzcYf+yBuvyHR2cz+f9eR/6/v8H48h8AAAAAAAD65+axiHiu2+d/leXrf6LL9T/DEXG0D/FX//yvcqsPYYAubh+LeCUi2tf+LXXkf260mtd2Na8HGEinztTnDkXE7og4GAPbsvrkCjHG9v080LOt4/q/bMnit68FzPtxq7bt/m1mpxenN7PPQMvtaxFP1brlf1oe/1OX8T8b++fXGKNx/NUfe7Wtnv/AVml8EXGg6/h/78kVaeXnc0w0jwcm2kcFD/vo5I1ve8WX/1CcbPzfsXL+j6bO5/UsrD/Gx3/+ton87378P5hONB85M5iv+3B6cfHiZMRgeuPh9VPr7zM8idr50M6XLP8P7u9+/r/S8f9QRFxdY8wT379+vVeb8R+KM3QtYnZd4//6C/vf/fzvXvHXNv4faY7pB/M15v9gZWtN0KL7CQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/RpWI2BmpMr5crlTGxyOGI+K/saNSv7Cw+OypCx+cn83amt//X2l/0+9Iq57a3/8/2lGfeqB+OCL2RMRn1aFmfXzmQn226J0HAAAAAAAAAAAAAAAAAACAx8Rwj/v/M39Ui+4dsOVqRXcAKIz8h/KS/1Be8h/KS/5Decl/KC/5D+Ul/6G85D+UV7Xx9cmi+wAAAAAAAPTNnqdv/poi4urLQ80lM5i3DRTaM2CrHS26A0BhPOIHysulf1Beq53jmwOAJ19apX37hrcEAAAAAAAAAAAAAPrlwF73/0NZVYruAFCY3vf/ezIAPOnc/w/l5RwfcP8/AAAAAAAAAAAAADz+Fi5dPjtdr89d3Ghh2+Y2V1BYa+H33a3/s49Lf9ZfiNSHjHtEhaL/MgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG3/BAAA//9r5fVk") 636.673658ms ago: executing program 6 (id=1181): r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20081e, &(0x7f0000001980), 0x1, 0x52a, &(0x7f0000001440)="$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") mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) getresgid(&(0x7f0000000200), &(0x7f0000000240)=0x0, &(0x7f0000000280)) fstat(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000340)={{{@in6=@private1, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000440)=0xe8) mount$tmpfs(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0xa0000, &(0x7f0000000480)={[{@nr_blocks={'nr_blocks', 0x3d, [0x0, 0x74]}}, {@gid={'gid', 0x3d, r2}}, {@grpquota_inode_hardlimit={'grpquota_inode_hardlimit', 0x3d, [0x38, 0x31, 0x78, 0x31, 0x25]}}, {@noswap}, {@gid={'gid', 0x3d, r3}}, {@usrquota}, {@inode32}], [{@fowner_lt={'fowner<', r4}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}]}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}}, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500060008000000050003000500000005000300fd00000008000200", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r7], 0x90}}, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0) 0s ago: executing program 6 (id=1182): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0xef, 0x3d27}, 0x400, 0x32, 0x43a1bd76, 0x7, 0x203, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/29], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r1, 0x421, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x500000000000000, 0x0, 0xc35d4f6d52288271}, 0x200048c4) kernel console output (not intermixed with test programs): block 64 out of range 1-5 [ 81.490939][ T5668] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 81.500394][ T5668] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.744: Failed to acquire dquot type 0 [ 81.537608][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.584218][ T29] audit: type=1400 audit(2000000025.653:1354): avc: denied { setopt } for pid=5687 comm="syz.2.751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 81.691739][ T3485] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 81.714567][ T3485] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 81.871257][ T29] audit: type=1400 audit(2000000025.933:1355): avc: denied { write } for pid=5694 comm="syz.2.753" name="hidraw0" dev="devtmpfs" ino=1020 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 81.900636][ T5695] hid-generic 0000:0000:0000.0001: pid 5695 passed too short report [ 82.115888][ T5715] EXT4-fs error (device loop3): __ext4_fill_super:5553: inode #2: comm syz.3.761: iget: checksum invalid [ 82.139377][ T5715] EXT4-fs (loop3): get root inode failed [ 82.145216][ T5715] EXT4-fs (loop3): mount failed [ 82.365167][ T5731] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.398799][ T5738] ISOFS: unable to read i-node block [ 82.408505][ T5738] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 82.437280][ T29] audit: type=1400 audit(2000000026.503:1356): avc: denied { create } for pid=5739 comm="syz.1.769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 82.467485][ T5731] ext4 filesystem being mounted at /164/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 82.490735][ T5740] set_capacity_and_notify: 7 callbacks suppressed [ 82.490755][ T5740] loop1: detected capacity change from 0 to 512 [ 82.518293][ T5746] loop2: detected capacity change from 0 to 512 [ 82.543084][ T5740] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.769: inode has both inline data and extents flags [ 82.566235][ T5746] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -13 [ 82.574394][ T29] audit: type=1400 audit(2000000026.633:1357): avc: denied { connect } for pid=5730 comm="syz.4.766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 82.591870][ T5746] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #13: comm syz.2.770: iget: bad i_size value: 12154757448730 [ 82.593999][ T29] audit: type=1400 audit(2000000026.633:1358): avc: denied { read } for pid=5730 comm="syz.4.766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 82.609516][ T5740] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.769: couldn't read orphan inode 15 (err -117) [ 82.644414][ T5746] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.770: couldn't read orphan inode 13 (err -117) [ 82.657215][ T5746] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.687045][ T5740] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.704213][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.759507][ T5754] loop4: detected capacity change from 0 to 512 [ 82.759846][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.805115][ T5754] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -13 [ 82.815104][ T5754] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #13: comm syz.4.773: iget: bad i_size value: 12154757448730 [ 82.819908][ T3323] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.838893][ T5754] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.773: couldn't read orphan inode 13 (err -117) [ 82.851588][ T5754] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.870238][ T29] audit: type=1400 audit(2000000026.913:1359): avc: denied { wake_alarm } for pid=5756 comm="syz.2.774" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 82.964380][ T5764] loop3: detected capacity change from 0 to 512 [ 82.984748][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.994261][ T5764] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 83.015445][ T5764] EXT4-fs error (device loop3): ext4_quota_enable:7173: comm syz.3.778: Bad quota inum: 5, type: 1 [ 83.038824][ T5764] EXT4-fs warning (device loop3): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=5). Please run e2fsck to fix. [ 83.068767][ T5773] loop4: detected capacity change from 0 to 512 [ 83.081796][ T5773] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -13 [ 83.106715][ T5764] EXT4-fs (loop3): mount failed [ 83.107770][ T5773] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #13: comm syz.4.780: iget: bad i_size value: 12154757448730 [ 83.150283][ T5773] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.780: couldn't read orphan inode 13 (err -117) [ 83.162702][ T5773] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.197438][ T5778] loop3: detected capacity change from 0 to 164 [ 83.209680][ T5778] ISOFS: unable to read i-node block [ 83.226850][ T5778] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 83.227179][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.361153][ T5788] loop3: detected capacity change from 0 to 512 [ 83.391241][ T5788] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.461564][ T5788] ext4 filesystem being mounted at /158/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.492933][ T5794] loop1: detected capacity change from 0 to 2048 [ 83.501814][ T5780] loop4: detected capacity change from 0 to 512 [ 83.510424][ T5788] Direct I/O collision with buffered writes! File: /file1 Comm: syz.3.785 [ 83.574085][ T5794] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.590136][ T3326] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.597647][ T5794] ext4 filesystem being mounted at /156/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.605572][ T5780] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.611836][ T5794] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.634007][ T5780] ext4 filesystem being mounted at /167/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.844212][ T5811] __nla_validate_parse: 16 callbacks suppressed [ 83.844230][ T5811] netlink: 76 bytes leftover after parsing attributes in process `syz.1.792'. [ 83.932802][ T5816] loop3: detected capacity change from 0 to 164 [ 83.955450][ T5816] ISOFS: unable to read i-node block [ 83.970227][ T5816] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 84.136582][ T5832] syzkaller1: entered promiscuous mode [ 84.142135][ T5832] syzkaller1: entered allmulticast mode [ 84.166354][ T5832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.175610][ T5839] FAULT_INJECTION: forcing a failure. [ 84.175610][ T5839] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 84.188841][ T5839] CPU: 0 UID: 0 PID: 5839 Comm: syz.3.802 Not tainted syzkaller #0 PREEMPT(voluntary) [ 84.188918][ T5839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 84.188934][ T5839] Call Trace: [ 84.188942][ T5839] [ 84.188952][ T5839] __dump_stack+0x1d/0x30 [ 84.188991][ T5839] dump_stack_lvl+0x95/0xd0 [ 84.189020][ T5839] dump_stack+0x15/0x1b [ 84.189047][ T5839] should_fail_ex+0x263/0x280 [ 84.189150][ T5839] should_fail+0xb/0x20 [ 84.189170][ T5839] should_fail_usercopy+0x1a/0x20 [ 84.189275][ T5839] _copy_from_user+0x1c/0xb0 [ 84.189370][ T5839] do_handle_open+0x40b/0x790 [ 84.189406][ T5839] __x64_sys_open_by_handle_at+0x44/0x50 [ 84.189446][ T5839] x64_sys_call+0x2b6a/0x3000 [ 84.189480][ T5839] do_syscall_64+0xc0/0x2a0 [ 84.189572][ T5839] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.189594][ T5839] RIP: 0033:0x7f4e8186acb9 [ 84.189645][ T5839] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 84.189665][ T5839] RSP: 002b:00007f4e802c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 84.189691][ T5839] RAX: ffffffffffffffda RBX: 00007f4e81ae5fa0 RCX: 00007f4e8186acb9 [ 84.189710][ T5839] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000007 [ 84.189727][ T5839] RBP: 00007f4e802c7090 R08: 0000000000000000 R09: 0000000000000000 [ 84.189792][ T5839] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 84.189808][ T5839] R13: 00007f4e81ae6038 R14: 00007f4e81ae5fa0 R15: 00007ffe94813d78 [ 84.189836][ T5839] [ 84.190371][ T5832] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.413584][ T5843] netlink: 'syz.2.804': attribute type 21 has an invalid length. [ 84.430188][ T5843] EXT4-fs: Ignoring removed nobh option [ 84.446708][ T5843] ------------[ cut here ]------------ [ 84.452230][ T5843] EA inode 11 i_nlink=1026 [ 84.452249][ T5843] WARNING: fs/ext4/xattr.c:1058 at ext4_xattr_inode_update_ref+0x2e6/0x320, CPU#0: syz.2.804/5843 [ 84.467599][ T5843] Modules linked in: [ 84.471539][ T5843] CPU: 0 UID: 0 PID: 5843 Comm: syz.2.804 Not tainted syzkaller #0 PREEMPT(voluntary) [ 84.481272][ T5843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 84.491636][ T5843] RIP: 0010:ext4_xattr_inode_update_ref+0x305/0x320 [ 84.498344][ T5843] Code: 11 cf 9b ff 4c 8d 2d 4a aa 3f 05 49 8d 7e 40 e8 c1 85 b7 ff 49 8b 6e 40 4c 89 e7 e8 f5 80 b7 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 2b ff ff ff e8 6c bc c5 03 66 66 66 2e 0f 1f 84 [ 84.518074][ T5843] RSP: 0018:ffffc90001a0b5a8 EFLAGS: 00010246 [ 84.524285][ T5843] RAX: ffff88810b28ab90 RBX: ffff88810a9fc610 RCX: ffffffff81bc669b [ 84.532284][ T5843] RDX: 0000000000000402 RSI: 000000000000000b RDI: ffffffff86fc10d0 [ 84.540332][ T5843] RBP: 000000000000000b R08: 000188810a9fc5c3 R09: 0000000000000000 [ 84.548419][ T5843] R10: ffffc90001a0b4d8 R11: 0001c90001a0b4d8 R12: ffff88810a9fc5c0 [ 84.556479][ T5843] R13: ffffffff86fc10d0 R14: ffff88810a9fc578 R15: 0000000000000001 [ 84.564513][ T5843] FS: 00007fc6c1ce76c0(0000) GS:ffff8882aeb79000(0000) knlGS:0000000000000000 [ 84.573554][ T5843] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 84.580206][ T5843] CR2: 000020000000f000 CR3: 0000000144960000 CR4: 00000000003506f0 [ 84.588230][ T5843] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 84.596279][ T5843] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 84.604372][ T5843] Call Trace: [ 84.607702][ T5843] [ 84.610726][ T5843] ext4_xattr_set_entry+0x77c/0x1010 [ 84.616172][ T5843] ext4_xattr_ibody_set+0x184/0x3c0 [ 84.621432][ T5843] ext4_expand_extra_isize_ea+0xd7b/0x11a0 [ 84.627370][ T5843] __ext4_expand_extra_isize+0x246/0x280 [ 84.633133][ T5843] __ext4_mark_inode_dirty+0x29d/0x3f0 [ 84.638689][ T5843] ext4_evict_inode+0x7c3/0xd40 [ 84.643592][ T5843] ? __pfx_ext4_evict_inode+0x10/0x10 [ 84.644350][ T5846] netlink: 44 bytes leftover after parsing attributes in process `syz.3.805'. [ 84.649105][ T5843] evict+0x2af/0x510 [ 84.661962][ T5843] ? __dquot_initialize+0x146/0x7c0 [ 84.667278][ T5843] iput+0x4b9/0x650 [ 84.671158][ T5843] ext4_process_orphan+0x1a9/0x1c0 [ 84.676376][ T5843] ext4_orphan_cleanup+0x6a8/0xa00 [ 84.681540][ T5843] ext4_fill_super+0x3476/0x3800 [ 84.686574][ T5843] ? set_blocksize+0x1a3/0x310 [ 84.691435][ T5843] ? setup_bdev_super+0x30e/0x370 [ 84.696661][ T5843] ? __pfx_ext4_fill_super+0x10/0x10 [ 84.702036][ T5843] get_tree_bdev_flags+0x291/0x300 [ 84.707269][ T5843] ? __pfx_ext4_fill_super+0x10/0x10 [ 84.712594][ T5843] get_tree_bdev+0x1f/0x30 [ 84.717080][ T5843] ext4_get_tree+0x1c/0x30 [ 84.721532][ T5843] vfs_get_tree+0x57/0x1d0 [ 84.726083][ T5843] do_new_mount+0x288/0x700 [ 84.730632][ T5843] path_mount+0x4c0/0xb90 [ 84.735039][ T5843] ? user_path_at+0xbf/0x130 [ 84.739712][ T5843] __se_sys_mount+0x28c/0x2e0 [ 84.744476][ T5843] __x64_sys_mount+0x67/0x80 [ 84.749121][ T5843] x64_sys_call+0x2cca/0x3000 [ 84.753846][ T5843] do_syscall_64+0xc0/0x2a0 [ 84.758450][ T5843] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.764446][ T5843] RIP: 0033:0x7fc6c328bf4a [ 84.768898][ T5843] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 84.788636][ T5843] RSP: 002b:00007fc6c1ce6e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 84.797137][ T5843] RAX: ffffffffffffffda RBX: 00007fc6c1ce6ee0 RCX: 00007fc6c328bf4a [ 84.805209][ T5843] RDX: 0000200000000180 RSI: 0000200000000140 RDI: 00007fc6c1ce6ea0 [ 84.813217][ T5843] RBP: 0000200000000180 R08: 00007fc6c1ce6ee0 R09: 0000000000800718 [ 84.821359][ T5843] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000140 [ 84.829551][ T5843] R13: 00007fc6c1ce6ea0 R14: 0000000000000497 R15: 0000200000000200 [ 84.837669][ T5843] [ 84.840758][ T5843] ---[ end trace 0000000000000000 ]--- [ 84.847656][ T5843] EXT4-fs (loop2): 1 orphan inode deleted [ 84.854045][ T5843] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.948817][ T5851] netlink: 132 bytes leftover after parsing attributes in process `syz.3.807'. [ 84.971353][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.047833][ T5855] kernel profiling enabled (shift: 63) [ 85.053343][ T5855] profiling shift: 63 too large [ 85.077743][ T5855] netlink: 'syz.2.808': attribute type 28 has an invalid length. [ 85.090142][ T5858] ISOFS: unable to read i-node block [ 85.105698][ T5858] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 85.298494][ T5867] netlink: 36 bytes leftover after parsing attributes in process `syz.3.814'. [ 85.765871][ T5884] netlink: 256 bytes leftover after parsing attributes in process `syz.2.821'. [ 85.784572][ T5887] netlink: 'syz.3.822': attribute type 4 has an invalid length. [ 85.858274][ T5892] EXT4-fs (loop1): corrupt root inode, run e2fsck [ 85.865025][ T5892] EXT4-fs (loop1): mount failed [ 86.069412][ T5902] netlink: 40 bytes leftover after parsing attributes in process `syz.1.828'. [ 86.087146][ T5903] netlink: 'syz.2.829': attribute type 9 has an invalid length. [ 86.142343][ T37] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 86.152243][ T37] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.205117][ T5906] netlink: 44 bytes leftover after parsing attributes in process `syz.1.830'. [ 86.225937][ T37] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 86.235863][ T37] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.326559][ T37] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 86.336476][ T37] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.375710][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.455656][ T37] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 86.465565][ T37] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.499053][ T5920] ISOFS: unable to read i-node block [ 86.508383][ T5920] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 86.535246][ T29] kauditd_printk_skb: 38 callbacks suppressed [ 86.535303][ T29] audit: type=1400 audit(2000000030.603:1398): avc: denied { mounton } for pid=5922 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 86.567892][ T5924] 9pnet_fd: Insufficient options for proto=fd [ 86.574756][ T5924] netlink: 36 bytes leftover after parsing attributes in process `syz.2.837'. [ 86.592293][ T29] audit: type=1400 audit(2000000030.633:1399): avc: denied { mounton } for pid=5923 comm="syz.2.837" path="/syzcgroup/net/syz2/cgroup.procs" dev="cgroup" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 86.694385][ T5932] netlink: 28 bytes leftover after parsing attributes in process `syz.4.838'. [ 86.703414][ T5932] netlink: 28 bytes leftover after parsing attributes in process `syz.4.838'. [ 86.744459][ T37] bridge_slave_1: left allmulticast mode [ 86.750181][ T37] bridge_slave_1: left promiscuous mode [ 86.755983][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.785825][ T5939] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -13 [ 86.795434][ T37] bridge_slave_0: left allmulticast mode [ 86.801206][ T37] bridge_slave_0: left promiscuous mode [ 86.807159][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.826322][ T5939] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #13: comm syz.4.838: iget: bad i_size value: 12154757448730 [ 86.839652][ T5939] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.838: couldn't read orphan inode 13 (err -117) [ 86.863216][ T5939] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.885895][ T29] audit: type=1326 audit(2000000030.953:1400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5928 comm="syz.4.838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f695d09acb9 code=0x7ffc0000 [ 86.909322][ T29] audit: type=1326 audit(2000000030.953:1401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5928 comm="syz.4.838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f695d09acb9 code=0x7ffc0000 [ 86.932960][ T29] audit: type=1326 audit(2000000030.953:1402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5928 comm="syz.4.838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f695d09acb9 code=0x7ffc0000 [ 86.962208][ T29] audit: type=1400 audit(2000000031.023:1403): avc: denied { read open } for pid=5951 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=483 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 86.987793][ T29] audit: type=1400 audit(2000000031.023:1404): avc: denied { getattr } for pid=5951 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=483 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 87.025697][ T29] audit: type=1326 audit(2000000031.063:1405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5928 comm="syz.4.838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f695d09acb9 code=0x7ffc0000 [ 87.049212][ T29] audit: type=1326 audit(2000000031.063:1406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5928 comm="syz.4.838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f695d09acb9 code=0x7ffc0000 [ 87.115382][ T29] audit: type=1400 audit(2000000031.183:1407): avc: denied { add_name } for pid=5950 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 87.150538][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.160349][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 87.185729][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 87.220754][ T37] bond0 (unregistering): Released all slaves [ 87.252786][ T3400] syû: Port: 1 Link DOWN [ 87.369222][ T5979] tc_dump_action: action bad kind [ 87.444747][ T37] hsr_slave_0: left promiscuous mode [ 87.459878][ T37] hsr_slave_1: left promiscuous mode [ 87.496358][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.503863][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 87.565400][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 87.572830][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 87.598133][ T37] veth1_macvtap: left promiscuous mode [ 87.603680][ T37] veth0_macvtap: left promiscuous mode [ 87.624004][ T37] veth1_vlan: left promiscuous mode [ 87.629340][ T37] veth0_vlan: left promiscuous mode [ 87.738777][ T37] team0 (unregistering): Port device team_slave_1 removed [ 87.750180][ T37] team0 (unregistering): Port device team_slave_0 removed [ 87.766474][ T53] smc: removing ib device syû [ 87.940562][ T6017] set_capacity_and_notify: 5 callbacks suppressed [ 87.940594][ T6017] loop1: detected capacity change from 0 to 8192 [ 87.967016][ T5922] chnl_net:caif_netlink_parms(): no params data found [ 88.005915][ T6017] loop1: p1 < > p2 p3 < p5 p6 > p4 [ 88.011254][ T6017] loop1: partition table partially beyond EOD, truncated [ 88.035896][ T6017] loop1: p1 start 100663296 is beyond EOD, truncated [ 88.042722][ T6017] loop1: p2 size 134217732 extends beyond EOD, truncated [ 88.058795][ T6017] loop1: p4 size 14876672 extends beyond EOD, truncated [ 88.080084][ T6017] loop1: p5 size 134217732 extends beyond EOD, truncated [ 88.092732][ T6017] loop1: p6 size 14876672 extends beyond EOD, truncated [ 88.098433][ T5922] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.106981][ T5922] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.119549][ T5922] bridge_slave_0: entered allmulticast mode [ 88.126785][ T5922] bridge_slave_0: entered promiscuous mode [ 88.134112][ T5922] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.141209][ T5922] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.148491][ T5922] bridge_slave_1: entered allmulticast mode [ 88.173012][ T5922] bridge_slave_1: entered promiscuous mode [ 88.245029][ T5922] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.257458][ T37] IPVS: stop unused estimator thread 0... [ 88.277487][ T5922] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.322488][ T5922] team0: Port device team_slave_0 added [ 88.331419][ T5922] team0: Port device team_slave_1 added [ 88.376755][ T5922] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.383862][ T5922] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.409982][ T5922] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.428065][ T5922] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.435091][ T5922] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.461119][ T5922] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.495511][ T5922] hsr_slave_0: entered promiscuous mode [ 88.501755][ T5922] hsr_slave_1: entered promiscuous mode [ 88.507944][ T5922] debugfs: 'hsr0' already exists in 'hsr' [ 88.513732][ T5922] Cannot create hsr debugfs directory [ 88.538219][ T6052] gtp0: entered promiscuous mode [ 88.689840][ T6048] syz.4.857 invoked oom-killer: gfp_mask=0x402d02(GFP_NOIO|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN|__GFP_ACCOUNT), order=0, oom_score_adj=1000 [ 88.704312][ T6048] CPU: 1 UID: 0 PID: 6048 Comm: syz.4.857 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 88.704405][ T6048] Tainted: [W]=WARN [ 88.704415][ T6048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 88.704431][ T6048] Call Trace: [ 88.704438][ T6048] [ 88.704448][ T6048] __dump_stack+0x1d/0x30 [ 88.704478][ T6048] dump_stack_lvl+0x95/0xd0 [ 88.704560][ T6048] dump_stack+0x15/0x1b [ 88.704584][ T6048] dump_header+0x80/0x240 [ 88.704606][ T6048] oom_kill_process+0x295/0x350 [ 88.704688][ T6048] out_of_memory+0x97d/0xb80 [ 88.704713][ T6048] try_charge_memcg+0x62e/0xa10 [ 88.704822][ T6048] obj_cgroup_charge_pages+0xa6/0x150 [ 88.704926][ T6048] __memcg_kmem_charge_page+0x9e/0x170 [ 88.704966][ T6048] __alloc_frozen_pages_noprof+0x18a/0x350 [ 88.705007][ T6048] alloc_pages_mpol+0xb3/0x260 [ 88.705118][ T6048] alloc_pages_noprof+0x8f/0x130 [ 88.705231][ T6048] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 88.705284][ T6048] __kvmalloc_node_noprof+0x471/0x680 [ 88.705318][ T6048] ? ip_set_alloc+0x24/0x30 [ 88.705431][ T6048] ? ip_set_alloc+0x24/0x30 [ 88.705537][ T6048] ip_set_alloc+0x24/0x30 [ 88.705581][ T6048] hash_netiface_create+0x282/0x740 [ 88.705652][ T6048] ? __pfx_hash_netiface_create+0x10/0x10 [ 88.705697][ T6048] ip_set_create+0x3cf/0x970 [ 88.705752][ T6048] ? __nla_parse+0x40/0x60 [ 88.705842][ T6048] nfnetlink_rcv_msg+0x509/0x5d0 [ 88.705908][ T6048] netlink_rcv_skb+0x123/0x220 [ 88.705945][ T6048] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 88.706034][ T6048] nfnetlink_rcv+0x167/0x1720 [ 88.706121][ T6048] ? __list_del_entry_valid_or_report+0x65/0x130 [ 88.706155][ T6048] ? __rmqueue_pcplist+0x9b6/0xb80 [ 88.706182][ T6048] ? _raw_spin_lock_bh+0x56/0xb0 [ 88.706288][ T6048] ? should_fail_ex+0x30/0x280 [ 88.706371][ T6048] ? selinux_nlmsg_lookup+0x99/0x890 [ 88.706410][ T6048] ? __rcu_read_unlock+0x33/0x70 [ 88.706448][ T6048] ? __netlink_lookup+0x276/0x2b0 [ 88.706496][ T6048] netlink_unicast+0x5c0/0x690 [ 88.706569][ T6048] netlink_sendmsg+0x5c8/0x6f0 [ 88.706641][ T6048] ? __pfx_netlink_sendmsg+0x10/0x10 [ 88.706733][ T6048] __sock_sendmsg+0x145/0x170 [ 88.706762][ T6048] ____sys_sendmsg+0x31e/0x4a0 [ 88.706804][ T6048] ___sys_sendmsg+0x195/0x1e0 [ 88.706871][ T6048] __x64_sys_sendmsg+0xd4/0x160 [ 88.706918][ T6048] x64_sys_call+0x17ba/0x3000 [ 88.706952][ T6048] do_syscall_64+0xc0/0x2a0 [ 88.707015][ T6048] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.707050][ T6048] RIP: 0033:0x7f695d09acb9 [ 88.707071][ T6048] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 88.707097][ T6048] RSP: 002b:00007f695baf7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 88.707199][ T6048] RAX: ffffffffffffffda RBX: 00007f695d315fa0 RCX: 00007f695d09acb9 [ 88.707214][ T6048] RDX: 0000000000000800 RSI: 0000200000000200 RDI: 0000000000000003 [ 88.707227][ T6048] RBP: 00007f695d108bf7 R08: 0000000000000000 R09: 0000000000000000 [ 88.707298][ T6048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 88.707314][ T6048] R13: 00007f695d316038 R14: 00007f695d315fa0 R15: 00007ffe63d31dc8 [ 88.707402][ T6048] [ 88.707413][ T6048] memory: usage 307200kB, limit 307200kB, failcnt 61 [ 89.031246][ T6048] memory+swap: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 89.039198][ T6048] kmem: usage 306684kB, limit 9007199254740988kB, failcnt 0 [ 89.046534][ T6048] Memory cgroup stats for /syz4: [ 89.046781][ T6048] cache 139264 [ 89.053511][ T5922] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 89.055176][ T6048] rss 389120 [ 89.055187][ T6048] shmem 0 [ 89.055196][ T6048] mapped_file 139264 [ 89.055207][ T6048] dirty 139264 [ 89.075419][ T6048] writeback 0 [ 89.078728][ T6048] workingset_refault_anon 0 [ 89.083245][ T6048] workingset_refault_file 0 [ 89.087796][ T6048] swap 0 [ 89.090731][ T6048] swapcached 0 [ 89.094189][ T6048] pgpgin 42001 [ 89.097583][ T6048] pgpgout 41872 [ 89.101075][ T6048] pgfault 41727 [ 89.104598][ T6048] pgmajfault 5 [ 89.108007][ T6048] inactive_anon 380928 [ 89.112105][ T6048] active_anon 8192 [ 89.115868][ T6048] inactive_file 0 [ 89.119529][ T6048] active_file 139264 [ 89.123493][ T6048] unevictable 0 [ 89.127084][ T6048] hierarchical_memory_limit 314572800 [ 89.132493][ T6048] hierarchical_memsw_limit 9223372036854771712 [ 89.138795][ T6048] total_cache 139264 [ 89.142718][ T6048] total_rss 389120 [ 89.146500][ T6048] total_shmem 0 [ 89.150053][ T6048] total_mapped_file 139264 [ 89.154553][ T6048] total_dirty 139264 [ 89.158549][ T6048] total_writeback 0 [ 89.162375][ T6048] total_workingset_refault_anon 0 [ 89.167456][ T6048] total_workingset_refault_file 0 [ 89.172515][ T6048] total_swap 0 [ 89.175938][ T6048] total_swapcached 0 [ 89.179851][ T6048] total_pgpgin 42001 [ 89.183776][ T6048] total_pgpgout 41872 [ 89.187867][ T6048] total_pgfault 41727 [ 89.191876][ T6048] total_pgmajfault 5 [ 89.195838][ T6048] total_inactive_anon 380928 [ 89.200452][ T6048] total_active_anon 8192 [ 89.204768][ T6048] total_inactive_file 0 [ 89.209003][ T6048] total_active_file 139264 [ 89.213493][ T6048] total_unevictable 0 [ 89.217555][ T6048] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.857,pid=6047,uid=0 [ 89.232174][ T6048] Memory cgroup out of memory: Killed process 6047 (syz.4.857) total-vm:94132kB, anon-rss:1204kB, file-rss:22156kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 89.273084][ T5922] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 89.366041][ T5922] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 89.377227][ T5922] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 89.385354][ T6078] ip6t_srh: unknown srh match flags 4000 [ 89.440040][ T6080] loop2: detected capacity change from 0 to 164 [ 89.459269][ T6080] ISOFS: unable to read i-node block [ 89.480005][ T6080] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 89.564936][ T5922] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.628810][ T6094] loop4: detected capacity change from 0 to 1024 [ 89.636446][ T5922] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.668086][ T6096] 8021q: adding VLAN 0 to HW filter on device bond3 [ 89.674960][ T6094] EXT4-fs error (device loop4): __ext4_fill_super:5553: inode #2: comm syz.4.866: iget: checksum invalid [ 89.695308][ T6097] __nla_validate_parse: 1 callbacks suppressed [ 89.695323][ T6097] netlink: 28 bytes leftover after parsing attributes in process `syz.1.865'. [ 89.710502][ T6097] netlink: 28 bytes leftover after parsing attributes in process `syz.1.865'. [ 89.727310][ T6094] EXT4-fs (loop4): get root inode failed [ 89.733005][ T6094] EXT4-fs (loop4): mount failed [ 89.739431][ T3890] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.746619][ T3890] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.757639][ T386] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.764772][ T386] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.784855][ T6097] loop1: detected capacity change from 0 to 512 [ 89.811860][ T6097] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -13 [ 89.832586][ T5922] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 89.843235][ T5922] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 89.866721][ T6097] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #13: comm syz.1.865: iget: bad i_size value: 12154757448730 [ 89.879665][ T6106] loop4: detected capacity change from 0 to 512 [ 89.889520][ T6097] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.865: couldn't read orphan inode 13 (err -117) [ 89.924626][ T6097] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.948371][ T6106] ext4 filesystem being mounted at /178/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 90.166314][ T6115] loop1: detected capacity change from 0 to 512 [ 90.235563][ T5922] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.258854][ T6115] ext4 filesystem being mounted at /177/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 90.284550][ T6122] TCP: TCP_TX_DELAY enabled [ 90.345723][ T6128] netlink: 28 bytes leftover after parsing attributes in process `syz.4.868'. [ 90.354684][ T6128] netlink: 28 bytes leftover after parsing attributes in process `syz.4.868'. [ 90.413482][ T6115] netlink: 28 bytes leftover after parsing attributes in process `syz.1.869'. [ 90.422462][ T6115] netlink: 28 bytes leftover after parsing attributes in process `syz.1.869'. [ 90.483122][ T5922] veth0_vlan: entered promiscuous mode [ 90.508482][ T5922] veth1_vlan: entered promiscuous mode [ 90.517585][ T6137] netlink: 4 bytes leftover after parsing attributes in process `syz.1.870'. [ 90.545421][ T5922] veth0_macvtap: entered promiscuous mode [ 90.562182][ T5922] veth1_macvtap: entered promiscuous mode [ 90.574484][ T6140] loop1: detected capacity change from 0 to 164 [ 90.587293][ T5922] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.599135][ T6140] ISOFS: unable to read i-node block [ 90.604628][ T6140] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 90.615658][ T5922] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.628761][ T333] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.644562][ T6140] FAULT_INJECTION: forcing a failure. [ 90.644562][ T6140] name failslab, interval 1, probability 0, space 0, times 0 [ 90.657350][ T6140] CPU: 0 UID: 0 PID: 6140 Comm: syz.1.871 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 90.657428][ T6140] Tainted: [W]=WARN [ 90.657438][ T6140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 90.657455][ T6140] Call Trace: [ 90.657464][ T6140] [ 90.657474][ T6140] __dump_stack+0x1d/0x30 [ 90.657506][ T6140] dump_stack_lvl+0x95/0xd0 [ 90.657535][ T6140] dump_stack+0x15/0x1b [ 90.657574][ T6140] should_fail_ex+0x263/0x280 [ 90.657602][ T6140] should_failslab+0x8c/0xb0 [ 90.657640][ T6140] __kmalloc_noprof+0xb8/0x580 [ 90.657667][ T6140] ? security_sk_alloc+0x52/0x120 [ 90.657702][ T6140] security_sk_alloc+0x52/0x120 [ 90.657784][ T6140] sk_prot_alloc+0xc2/0x180 [ 90.657824][ T6140] sk_alloc+0x34/0x3d0 [ 90.657900][ T6140] unix_create1+0xa5/0x400 [ 90.657934][ T6140] unix_stream_connect+0x196/0xa00 [ 90.657973][ T6140] ? selinux_netlbl_socket_connect+0x114/0x130 [ 90.658090][ T6140] ? selinux_socket_connect+0x57/0x70 [ 90.658121][ T6140] ? __pfx_unix_stream_connect+0x10/0x10 [ 90.658223][ T6140] __sys_connect+0x1f1/0x2a0 [ 90.658265][ T6140] __x64_sys_connect+0x3f/0x50 [ 90.658301][ T6140] x64_sys_call+0x2e09/0x3000 [ 90.658405][ T6140] do_syscall_64+0xc0/0x2a0 [ 90.658436][ T6140] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.658481][ T6140] RIP: 0033:0x7f5a2ad3acb9 [ 90.658502][ T6140] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 90.658525][ T6140] RSP: 002b:00007f5a29797028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 90.658545][ T6140] RAX: ffffffffffffffda RBX: 00007f5a2afb5fa0 RCX: 00007f5a2ad3acb9 [ 90.658559][ T6140] RDX: 000000000000006e RSI: 0000200000000080 RDI: 0000000000000004 [ 90.658572][ T6140] RBP: 00007f5a29797090 R08: 0000000000000000 R09: 0000000000000000 [ 90.658623][ T6140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 90.658636][ T6140] R13: 00007f5a2afb6038 R14: 00007f5a2afb5fa0 R15: 00007ffef805c8e8 [ 90.658662][ T6140] [ 90.661602][ T333] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.879110][ T333] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.888266][ T333] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.919823][ T6145] loop1: detected capacity change from 0 to 128 [ 90.948432][ T6145] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 90.976447][ T6150] loop5: detected capacity change from 0 to 512 [ 90.985725][ T6148] loop4: detected capacity change from 0 to 164 [ 90.997048][ T6150] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.844: bad orphan inode 13 [ 91.019900][ T6148] ISOFS: unable to read i-node block [ 91.035727][ T6148] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 91.045484][ T6150] ext4_test_bit(bit=12, block=4) = 1 [ 91.050917][ T6150] is_bad_inode(inode)=0 [ 91.055179][ T6150] NEXT_ORPHAN(inode)=0 [ 91.059274][ T6150] max_ino=32 [ 91.062495][ T6150] i_nlink=1 [ 91.121484][ T6150] FAULT_INJECTION: forcing a failure. [ 91.121484][ T6150] name failslab, interval 1, probability 0, space 0, times 0 [ 91.134283][ T6150] CPU: 0 UID: 0 PID: 6150 Comm: syz.5.844 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 91.134321][ T6150] Tainted: [W]=WARN [ 91.134330][ T6150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 91.134375][ T6150] Call Trace: [ 91.134385][ T6150] [ 91.134395][ T6150] __dump_stack+0x1d/0x30 [ 91.134454][ T6150] dump_stack_lvl+0x95/0xd0 [ 91.134476][ T6150] dump_stack+0x15/0x1b [ 91.134496][ T6150] should_fail_ex+0x263/0x280 [ 91.134524][ T6150] should_failslab+0x8c/0xb0 [ 91.134704][ T6150] kmem_cache_alloc_noprof+0x68/0x490 [ 91.134765][ T6150] ? getname_flags+0x7f/0x3b0 [ 91.134860][ T6150] getname_flags+0x7f/0x3b0 [ 91.134883][ T6150] do_sys_openat2+0x60/0x150 [ 91.134921][ T6150] __x64_sys_openat+0xf2/0x120 [ 91.135026][ T6150] x64_sys_call+0x2b07/0x3000 [ 91.135051][ T6150] do_syscall_64+0xc0/0x2a0 [ 91.135074][ T6150] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.135096][ T6150] RIP: 0033:0x7fdeebe4acb9 [ 91.135148][ T6150] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.135169][ T6150] RSP: 002b:00007fdeea8a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 91.135189][ T6150] RAX: ffffffffffffffda RBX: 00007fdeec0c5fa0 RCX: 00007fdeebe4acb9 [ 91.135203][ T6150] RDX: 000000000000275a RSI: 0000200000000080 RDI: ffffffffffffff9c [ 91.135217][ T6150] RBP: 00007fdeea8a7090 R08: 0000000000000000 R09: 0000000000000000 [ 91.135308][ T6150] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 91.135320][ T6150] R13: 00007fdeec0c6038 R14: 00007fdeec0c5fa0 R15: 00007ffe9637f1c8 [ 91.135340][ T6150] [ 91.391816][ T6167] netlink: 'syz.2.880': attribute type 1 has an invalid length. [ 91.460949][ T6168] bond4: entered promiscuous mode [ 91.493305][ T6168] 8021q: adding VLAN 0 to HW filter on device bond4 [ 91.534507][ T6185] netlink: 40 bytes leftover after parsing attributes in process `syz.2.884'. [ 91.592443][ T6187] netlink: 4 bytes leftover after parsing attributes in process `syz.4.885'. [ 91.653757][ T6189] ISOFS: unable to read i-node block [ 91.703486][ T6189] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 91.740483][ T6193] netlink: 28 bytes leftover after parsing attributes in process `syz.4.887'. [ 91.762921][ T6192] xt_l2tp: v2 doesn't support IP mode [ 91.792606][ T6193] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -13 [ 91.809437][ T6193] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #13: comm syz.4.887: iget: bad i_size value: 12154757448730 [ 91.844285][ T6193] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.887: couldn't read orphan inode 13 (err -117) [ 91.957017][ T29] kauditd_printk_skb: 32 callbacks suppressed [ 91.957116][ T29] audit: type=1326 audit(2000000036.023:1440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6204 comm="syz.2.894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6c328acb9 code=0x7ffc0000 [ 92.029218][ T29] audit: type=1326 audit(2000000036.063:1441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6204 comm="syz.2.894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6c328acb9 code=0x7ffc0000 [ 92.052648][ T29] audit: type=1326 audit(2000000036.063:1442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6204 comm="syz.2.894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6c328acb9 code=0x7ffc0000 [ 92.076117][ T29] audit: type=1326 audit(2000000036.063:1443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6204 comm="syz.2.894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fc6c328acb9 code=0x7ffc0000 [ 92.099691][ T29] audit: type=1326 audit(2000000036.063:1444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6204 comm="syz.2.894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6c328acb9 code=0x7ffc0000 [ 92.123161][ T29] audit: type=1326 audit(2000000036.063:1445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6208 comm="syz.2.894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc6c324b58e code=0x7ffc0000 [ 92.146761][ T29] audit: type=1326 audit(2000000036.083:1446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6204 comm="syz.2.894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6c328acb9 code=0x7ffc0000 [ 92.170341][ T29] audit: type=1326 audit(2000000036.083:1447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6204 comm="syz.2.894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6c328acb9 code=0x7ffc0000 [ 92.193811][ T29] audit: type=1326 audit(2000000036.083:1448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6204 comm="syz.2.894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fc6c328acb9 code=0x7ffc0000 [ 92.217156][ T29] audit: type=1326 audit(2000000036.083:1449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6204 comm="syz.2.894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6c328acb9 code=0x7ffc0000 [ 92.273872][ T6216] FAULT_INJECTION: forcing a failure. [ 92.273872][ T6216] name failslab, interval 1, probability 0, space 0, times 0 [ 92.286607][ T6216] CPU: 0 UID: 0 PID: 6216 Comm: syz.2.897 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 92.286647][ T6216] Tainted: [W]=WARN [ 92.286656][ T6216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 92.286704][ T6216] Call Trace: [ 92.286712][ T6216] [ 92.286720][ T6216] __dump_stack+0x1d/0x30 [ 92.286803][ T6216] dump_stack_lvl+0x95/0xd0 [ 92.286832][ T6216] dump_stack+0x15/0x1b [ 92.286858][ T6216] should_fail_ex+0x263/0x280 [ 92.286913][ T6216] should_failslab+0x8c/0xb0 [ 92.286943][ T6216] kmem_cache_alloc_lru_noprof+0x6c/0x490 [ 92.286973][ T6216] ? alloc_inode+0x9a/0x170 [ 92.287026][ T6216] alloc_inode+0x9a/0x170 [ 92.287129][ T6216] path_from_stashed+0xec/0x330 [ 92.287163][ T6216] nsfs_fh_to_dentry+0x5c6/0x6c0 [ 92.287195][ T6216] exportfs_decode_fh_raw+0xbc/0x4e0 [ 92.287273][ T6216] ? __pfx_vfs_dentry_acceptable+0x10/0x10 [ 92.287312][ T6216] ? kstrtouint+0x76/0xc0 [ 92.287350][ T6216] ? should_failslab+0x8c/0xb0 [ 92.287516][ T6216] do_handle_to_path+0x6c/0xe0 [ 92.287554][ T6216] do_handle_open+0x577/0x790 [ 92.287669][ T6216] __x64_sys_open_by_handle_at+0x44/0x50 [ 92.287771][ T6216] x64_sys_call+0x2b6a/0x3000 [ 92.287804][ T6216] do_syscall_64+0xc0/0x2a0 [ 92.287834][ T6216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.287866][ T6216] RIP: 0033:0x7fc6c328acb9 [ 92.287947][ T6216] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 92.287968][ T6216] RSP: 002b:00007fc6c1ce7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 92.287994][ T6216] RAX: ffffffffffffffda RBX: 00007fc6c3505fa0 RCX: 00007fc6c328acb9 [ 92.288064][ T6216] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000007 [ 92.288123][ T6216] RBP: 00007fc6c1ce7090 R08: 0000000000000000 R09: 0000000000000000 [ 92.288140][ T6216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 92.288156][ T6216] R13: 00007fc6c3506038 R14: 00007fc6c3505fa0 R15: 00007ffe857ed6a8 [ 92.288185][ T6216] [ 92.306916][ T6212] tun0: tun_chr_ioctl cmd 1074025681 [ 92.461735][ T6221] netlink: 'syz.1.900': attribute type 10 has an invalid length. [ 92.575750][ T6221] dummy0: entered promiscuous mode [ 92.580927][ T6221] dummy0: entered allmulticast mode [ 92.589921][ T6221] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 92.738866][ T6233] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -13 [ 92.752044][ T6233] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #13: comm syz.4.905: iget: bad i_size value: 12154757448730 [ 92.771058][ T6235] vlan2: entered allmulticast mode [ 92.776376][ T6235] bond0: entered allmulticast mode [ 92.784636][ T6233] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.905: couldn't read orphan inode 13 (err -117) [ 92.865699][ T6212] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.897611][ T6212] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.979137][ T6246] set_capacity_and_notify: 6 callbacks suppressed [ 92.979158][ T6246] loop2: detected capacity change from 0 to 164 [ 92.983102][ T6246] ISOFS: unable to read i-node block [ 92.983117][ T6246] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 93.152357][ T6255] FAULT_INJECTION: forcing a failure. [ 93.152357][ T6255] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 93.165637][ T6255] CPU: 0 UID: 0 PID: 6255 Comm: syz.2.914 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 93.165703][ T6255] Tainted: [W]=WARN [ 93.165713][ T6255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 93.165730][ T6255] Call Trace: [ 93.165737][ T6255] [ 93.165801][ T6255] __dump_stack+0x1d/0x30 [ 93.165831][ T6255] dump_stack_lvl+0x95/0xd0 [ 93.165905][ T6255] dump_stack+0x15/0x1b [ 93.165933][ T6255] should_fail_ex+0x263/0x280 [ 93.166066][ T6255] should_fail+0xb/0x20 [ 93.166092][ T6255] should_fail_usercopy+0x1a/0x20 [ 93.166189][ T6255] _copy_from_user+0x1c/0xb0 [ 93.166227][ T6255] ___sys_sendmsg+0xc1/0x1e0 [ 93.166335][ T6255] __sys_sendmmsg+0x185/0x320 [ 93.166429][ T6255] __x64_sys_sendmmsg+0x57/0x70 [ 93.166561][ T6255] x64_sys_call+0x1e28/0x3000 [ 93.166628][ T6255] do_syscall_64+0xc0/0x2a0 [ 93.166652][ T6255] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.166682][ T6255] RIP: 0033:0x7fc6c328acb9 [ 93.166753][ T6255] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.166772][ T6255] RSP: 002b:00007fc6c1ce7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 93.166795][ T6255] RAX: ffffffffffffffda RBX: 00007fc6c3505fa0 RCX: 00007fc6c328acb9 [ 93.166815][ T6255] RDX: 0000000000000318 RSI: 00002000000bd000 RDI: 0000000000000005 [ 93.166832][ T6255] RBP: 00007fc6c1ce7090 R08: 0000000000000000 R09: 0000000000000000 [ 93.166850][ T6255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 93.166913][ T6255] R13: 00007fc6c3506038 R14: 00007fc6c3505fa0 R15: 00007ffe857ed6a8 [ 93.166935][ T6255] [ 93.489711][ T6261] loop4: detected capacity change from 0 to 512 [ 93.498291][ T6261] EXT4-fs: Ignoring removed oldalloc option [ 93.511063][ T6261] EXT4-fs (loop4): 1 truncate cleaned up [ 93.597755][ T6266] loop5: detected capacity change from 0 to 512 [ 93.606029][ T6266] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -13 [ 93.635725][ T6266] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #13: comm syz.5.918: iget: bad i_size value: 12154757448730 [ 93.668554][ T6266] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.918: couldn't read orphan inode 13 (err -117) [ 93.738440][ T6273] loop4: detected capacity change from 0 to 512 [ 93.786808][ T6273] EXT4-fs (loop4): corrupt root inode, run e2fsck [ 93.802241][ T6273] EXT4-fs (loop4): mount failed [ 93.804313][ T6277] bond_slave_0: entered promiscuous mode [ 93.812824][ T6277] bond_slave_1: entered promiscuous mode [ 93.829146][ T6277] macvtap1: entered allmulticast mode [ 93.834688][ T6277] bond0: entered allmulticast mode [ 93.839840][ T6277] bond_slave_0: entered allmulticast mode [ 93.845629][ T6277] bond_slave_1: entered allmulticast mode [ 93.872327][ T6277] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 93.895875][ T6281] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 94.024084][ T6288] netlink: 'syz.4.926': attribute type 1 has an invalid length. [ 94.190929][ T6317] loop4: detected capacity change from 0 to 512 [ 94.216400][ T6317] EXT4-fs: Ignoring removed bh option [ 94.244024][ T6317] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 94.256006][ T6324] loop2: detected capacity change from 0 to 256 [ 94.262759][ T6324] msdos: Bad value for 'fmask' [ 94.278620][ T6317] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.935: invalid indirect mapped block 256 (level 2) [ 94.328902][ T6317] EXT4-fs (loop4): 2 truncates cleaned up [ 94.346610][ T6317] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.935: bg 0: block 5: invalid block bitmap [ 94.359409][ T6317] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 94.371695][ T6317] EXT4-fs (loop4): This should not happen!! Data will be lost [ 94.371695][ T6317] [ 94.381465][ T6317] EXT4-fs (loop4): Total free blocks count 0 [ 94.387612][ T6317] EXT4-fs (loop4): Free/Dirty block details [ 94.393567][ T6317] EXT4-fs (loop4): free_blocks=0 [ 94.398639][ T6317] EXT4-fs (loop4): dirty_blocks=66 [ 94.403788][ T6317] EXT4-fs (loop4): Block reservation details [ 94.409873][ T6317] EXT4-fs (loop4): i_reserved_data_blocks=66 [ 94.426533][ T6332] bond1: Removing last arp target with arp_interval on [ 94.561291][ T6340] loop5: detected capacity change from 0 to 512 [ 94.571962][ T6340] EXT4-fs: Ignoring removed mblk_io_submit option [ 94.626478][ T6352] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 94.647524][ T6355] loop1: detected capacity change from 0 to 512 [ 94.671399][ T6357] loop2: detected capacity change from 0 to 164 [ 94.684724][ T6357] ISOFS: unable to read i-node block [ 94.690136][ T6357] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 94.704503][ T6340] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.942: invalid indirect mapped block 4294967295 (level 1) [ 94.719483][ T6340] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.942: invalid indirect mapped block 4294967295 (level 1) [ 94.734479][ T6340] EXT4-fs (loop5): 2 truncates cleaned up [ 94.753682][ T6362] netlink: 'syz.4.947': attribute type 4 has an invalid length. [ 94.765634][ T6355] ext4 filesystem being mounted at /193/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.810463][ T6368] FAULT_INJECTION: forcing a failure. [ 94.810463][ T6368] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 94.823601][ T6368] CPU: 1 UID: 0 PID: 6368 Comm: syz.5.949 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 94.823637][ T6368] Tainted: [W]=WARN [ 94.823644][ T6368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 94.823661][ T6368] Call Trace: [ 94.823670][ T6368] [ 94.823679][ T6368] __dump_stack+0x1d/0x30 [ 94.823713][ T6368] dump_stack_lvl+0x95/0xd0 [ 94.823741][ T6368] dump_stack+0x15/0x1b [ 94.823760][ T6368] should_fail_ex+0x263/0x280 [ 94.823785][ T6368] should_fail+0xb/0x20 [ 94.823861][ T6368] should_fail_usercopy+0x1a/0x20 [ 94.823898][ T6368] _copy_from_iter+0xcf/0xea0 [ 94.823933][ T6368] ? __alloc_skb+0x397/0x4b0 [ 94.823995][ T6368] ? __alloc_skb+0x219/0x4b0 [ 94.824031][ T6368] netlink_sendmsg+0x4ae/0x6f0 [ 94.824060][ T6368] ? __pfx_netlink_sendmsg+0x10/0x10 [ 94.824086][ T6368] __sock_sendmsg+0x145/0x170 [ 94.824192][ T6368] ____sys_sendmsg+0x31e/0x4a0 [ 94.824227][ T6368] ___sys_sendmsg+0x195/0x1e0 [ 94.824274][ T6368] __x64_sys_sendmsg+0xd4/0x160 [ 94.824393][ T6368] x64_sys_call+0x17ba/0x3000 [ 94.824425][ T6368] do_syscall_64+0xc0/0x2a0 [ 94.824462][ T6368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.824491][ T6368] RIP: 0033:0x7fdeebe4acb9 [ 94.824512][ T6368] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.824536][ T6368] RSP: 002b:00007fdeea8a7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 94.824561][ T6368] RAX: ffffffffffffffda RBX: 00007fdeec0c5fa0 RCX: 00007fdeebe4acb9 [ 94.824579][ T6368] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 94.824633][ T6368] RBP: 00007fdeea8a7090 R08: 0000000000000000 R09: 0000000000000000 [ 94.824650][ T6368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 94.824666][ T6368] R13: 00007fdeec0c6038 R14: 00007fdeec0c5fa0 R15: 00007ffe9637f1c8 [ 94.824760][ T6368] [ 95.091152][ T6369] __nla_validate_parse: 18 callbacks suppressed [ 95.091173][ T6369] netlink: 4 bytes leftover after parsing attributes in process `syz.1.945'. [ 95.206656][ T333] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 95.221686][ T333] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 31 with error 28 [ 95.235038][ T333] EXT4-fs (loop1): This should not happen!! Data will be lost [ 95.235038][ T333] [ 95.244763][ T333] EXT4-fs (loop1): Total free blocks count 0 [ 95.250777][ T333] EXT4-fs (loop1): Free/Dirty block details [ 95.256720][ T333] EXT4-fs (loop1): free_blocks=65280 [ 95.262032][ T333] EXT4-fs (loop1): dirty_blocks=31 [ 95.267194][ T333] EXT4-fs (loop1): Block reservation details [ 95.273279][ T333] EXT4-fs (loop1): i_reserved_data_blocks=31 [ 95.282742][ T6385] sctp: [Deprecated]: syz.2.955 (pid 6385) Use of struct sctp_assoc_value in delayed_ack socket option. [ 95.282742][ T6385] Use struct sctp_sack_info instead [ 95.343687][ T6393] loop1: detected capacity change from 0 to 1024 [ 95.366871][ T6393] EXT4-fs: Ignoring removed oldalloc option [ 95.373648][ T6395] ------------[ cut here ]------------ [ 95.379280][ T6395] verifier bug: REG INVARIANTS VIOLATION (true_reg2): range bounds violation u64=[0x17, 0x10] s64=[0x17, 0x10] u32=[0x17, 0x10] s32=[0x17, 0x10] var_off=(0x10, 0x0) [ 95.395933][ T6395] WARNING: kernel/bpf/verifier.c:2748 at reg_bounds_sanity_check+0x15b/0x660, CPU#0: syz.4.954/6395 [ 95.406808][ T6395] Modules linked in: [ 95.410750][ T6395] CPU: 0 UID: 0 PID: 6395 Comm: syz.4.954 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 95.422061][ T6395] Tainted: [W]=WARN [ 95.426101][ T6395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 95.436417][ T6395] RIP: 0010:reg_bounds_sanity_check+0x27d/0x660 [ 95.442721][ T6395] Code: 24 78 4c 8b 44 24 70 4c 8b 4c 24 60 41 ff 74 24 20 41 55 53 ff 74 24 68 ff 74 24 78 ff b4 24 90 00 00 00 ff b4 24 b0 00 00 00 <67> 48 0f b9 3a 48 83 c4 38 4c 8b ac 24 98 00 00 00 49 8d 85 80 08 [ 95.462482][ T6395] RSP: 0018:ffffc90000e633a0 EFLAGS: 00010246 [ 95.468628][ T6395] RAX: ffff8881374f6d90 RBX: 0000000000000010 RCX: 0000000000000017 [ 95.476780][ T6395] RDX: ffffffff867fcb34 RSI: ffffffff86810d65 RDI: ffffffff86fb6f20 [ 95.484861][ T6395] RBP: ffff8881374cb0b0 R08: 0000000000000010 R09: 0000000000000017 [ 95.492903][ T6395] R10: 00000000000000d0 R11: 0000000000000002 R12: ffff8881374cb070 [ 95.501051][ T6395] R13: 0000000000000010 R14: ffff8881374cb0bc R15: ffff8881374cb0a8 [ 95.509336][ T6395] FS: 00007f695bad66c0(0000) GS:ffff8882aeb79000(0000) knlGS:0000000000000000 [ 95.518479][ T6395] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 95.525149][ T6395] CR2: 00002000000017c0 CR3: 000000011b1fc000 CR4: 00000000003506f0 [ 95.533161][ T6395] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 95.541384][ T6395] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 95.549439][ T6395] Call Trace: [ 95.552752][ T6395] [ 95.555772][ T6395] reg_set_min_max+0x1f2/0x260 [ 95.560638][ T6395] check_cond_jmp_op+0x13bd/0x1a80 [ 95.565867][ T6395] do_check+0x3356/0x8250 [ 95.570281][ T6395] do_check_common+0xccf/0x1300 [ 95.575256][ T6395] bpf_check+0x2f85/0xc890 [ 95.579844][ T6395] ? __alloc_frozen_pages_noprof+0x18a/0x350 [ 95.586245][ T6395] ? __vmap_pages_range_noflush+0xb9c/0xcc0 [ 95.592228][ T6395] ? pcpu_block_update+0x24e/0x3b0 [ 95.597685][ T6395] ? pcpu_block_refresh_hint+0x157/0x170 [ 95.603420][ T6395] ? pcpu_block_update_hint_alloc+0x640/0x660 [ 95.609602][ T6395] ? css_rstat_updated+0xbb/0x280 [ 95.614827][ T6395] ? mod_memcg_state+0x182/0x260 [ 95.619809][ T6395] ? __rcu_read_unlock+0x4e/0x70 [ 95.624844][ T6395] ? pcpu_memcg_post_alloc_hook+0xec/0x170 [ 95.630720][ T6395] ? pcpu_alloc_noprof+0xd18/0x1210 [ 95.636004][ T6395] ? should_fail_ex+0x30/0x280 [ 95.640875][ T6395] ? __kmalloc_noprof+0x2a3/0x580 [ 95.646022][ T6395] ? security_bpf_prog_load+0x60/0x140 [ 95.651533][ T6395] ? selinux_bpf_prog_load+0xac/0xd0 [ 95.656977][ T6395] ? security_bpf_prog_load+0x9e/0x140 [ 95.662605][ T6395] bpf_prog_load+0xf76/0x1140 [ 95.667689][ T6395] ? security_bpf+0x2b/0x90 [ 95.672379][ T6395] __sys_bpf+0x469/0x7b0 [ 95.676870][ T6395] __x64_sys_bpf+0x41/0x50 [ 95.681428][ T6395] x64_sys_call+0x28e1/0x3000 [ 95.686168][ T6395] do_syscall_64+0xc0/0x2a0 [ 95.690718][ T6395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.696786][ T6395] RIP: 0033:0x7f695d09acb9 [ 95.701265][ T6395] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.721017][ T6395] RSP: 002b:00007f695bad6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 95.729519][ T6395] RAX: ffffffffffffffda RBX: 00007f695d316090 RCX: 00007f695d09acb9 [ 95.737722][ T6395] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 95.745950][ T6395] RBP: 00007f695d108bf7 R08: 0000000000000000 R09: 0000000000000000 [ 95.754162][ T6395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 95.762202][ T6395] R13: 00007f695d316128 R14: 00007f695d316090 R15: 00007ffe63d31dc8 [ 95.770269][ T6395] [ 95.773363][ T6395] ---[ end trace 0000000000000000 ]--- [ 95.815189][ T6392] EXT4-fs warning (device loop1): ext4_empty_dir:3097: inode #11: comm syz.1.956: directory missing '..' [ 95.884940][ T6401] EXT4-fs (loop5): corrupt root inode, run e2fsck [ 95.913576][ T6401] EXT4-fs (loop5): mount failed [ 95.979345][ T6410] ISOFS: unable to read i-node block [ 95.984945][ T6410] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 96.051354][ T6417] netlink: 96 bytes leftover after parsing attributes in process `syz.1.960'. [ 96.273009][ T53] Bluetooth: hci0: Frame reassembly failed (-84) [ 96.408292][ T53] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.425496][ T6437] chnl_net:caif_netlink_parms(): no params data found [ 96.452228][ T53] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.512669][ T6437] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.520129][ T6437] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.527712][ T6437] bridge_slave_0: entered allmulticast mode [ 96.535941][ T6437] bridge_slave_0: entered promiscuous mode [ 96.549330][ T53] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.561837][ T6476] netlink: 'syz.1.975': attribute type 29 has an invalid length. [ 96.570364][ T6437] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.577690][ T6437] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.585158][ T6437] bridge_slave_1: entered allmulticast mode [ 96.591793][ T6437] bridge_slave_1: entered promiscuous mode [ 96.598358][ T6476] netlink: 'syz.1.975': attribute type 29 has an invalid length. [ 96.609449][ T6476] netlink: 500 bytes leftover after parsing attributes in process `syz.1.975'. [ 96.627076][ T53] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.650218][ T6437] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.662117][ T6437] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.698504][ T6437] team0: Port device team_slave_0 added [ 96.705837][ T6437] team0: Port device team_slave_1 added [ 96.732895][ T6437] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.739942][ T6437] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.765963][ T6437] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.895561][ T53] bond0 (unregistering): Released all slaves [ 96.903588][ T6437] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.910647][ T6437] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.936831][ T6437] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.965639][ T6437] hsr_slave_0: entered promiscuous mode [ 96.971977][ T6437] hsr_slave_1: entered promiscuous mode [ 96.972607][ T53] IPVS: stopping backup sync thread 4333 ... [ 96.978403][ T6437] debugfs: 'hsr0' already exists in 'hsr' [ 96.989602][ T6437] Cannot create hsr debugfs directory [ 97.004518][ T53] hsr_slave_0: left promiscuous mode [ 97.010554][ T53] hsr_slave_1: left promiscuous mode [ 97.018257][ T53] veth1_macvtap: left promiscuous mode [ 97.023974][ T53] veth0_macvtap: left promiscuous mode [ 97.029576][ T53] veth1_vlan: left promiscuous mode [ 97.034954][ T53] veth0_vlan: left promiscuous mode [ 97.193282][ T6437] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 97.202546][ T6437] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 97.215640][ T6437] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 97.235414][ T6437] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 97.262445][ T6437] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.270083][ T6437] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.277471][ T6437] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.284665][ T6437] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.294775][ T333] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.302883][ T333] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.339542][ T6437] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.352484][ T6437] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.362292][ T168] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.369469][ T168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.381558][ T333] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.388812][ T333] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.469523][ T6437] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.633265][ T6551] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 97.656511][ T6437] veth0_vlan: entered promiscuous mode [ 97.662639][ T6551] block device autoloading is deprecated and will be removed. [ 97.677472][ T6437] veth1_vlan: entered promiscuous mode [ 97.707938][ T6437] veth0_macvtap: entered promiscuous mode [ 97.728393][ T6437] veth1_macvtap: entered promiscuous mode [ 97.762242][ T6437] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.776457][ T6566] netlink: 12 bytes leftover after parsing attributes in process `syz.1.982'. [ 97.794687][ T6437] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.818205][ T6566] 8021q: adding VLAN 0 to HW filter on device bond1 [ 97.839546][ T333] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.857342][ T29] kauditd_printk_skb: 39 callbacks suppressed [ 97.857373][ T29] audit: type=1400 audit(2000000041.923:1489): avc: denied { append } for pid=6576 comm="syz.2.984" name="file0" dev="tmpfs" ino=1198 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 97.884179][ T333] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.913150][ T333] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.928656][ T29] audit: type=1400 audit(2000000041.993:1490): avc: denied { setopt } for pid=6578 comm="syz.1.985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 97.936512][ T333] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.973940][ T29] audit: type=1326 audit(2000000042.033:1491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6578 comm="syz.1.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a2ad3acb9 code=0x7ffc0000 [ 97.997447][ T29] audit: type=1326 audit(2000000042.033:1492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6578 comm="syz.1.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a2ad3acb9 code=0x7ffc0000 [ 98.020954][ T29] audit: type=1326 audit(2000000042.033:1493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6578 comm="syz.1.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f5a2ad3acb9 code=0x7ffc0000 [ 98.072781][ T29] audit: type=1326 audit(2000000042.133:1494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6587 comm="syz.6.965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f788900acb9 code=0x7ffc0000 [ 98.096234][ T29] audit: type=1326 audit(2000000042.133:1495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6587 comm="syz.6.965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f788900acb9 code=0x7ffc0000 [ 98.119623][ T29] audit: type=1326 audit(2000000042.133:1496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6587 comm="syz.6.965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f788900acb9 code=0x7ffc0000 [ 98.143043][ T29] audit: type=1326 audit(2000000042.133:1497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6587 comm="syz.6.965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f788900acb9 code=0x7ffc0000 [ 98.151529][ T6589] netlink: 36 bytes leftover after parsing attributes in process `syz.6.965'. [ 98.167059][ T29] audit: type=1326 audit(2000000042.133:1498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6587 comm="syz.6.965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f788900acb9 code=0x7ffc0000 [ 98.175574][ T6589] netlink: 16 bytes leftover after parsing attributes in process `syz.6.965'. [ 98.207915][ T6589] netlink: 36 bytes leftover after parsing attributes in process `syz.6.965'. [ 98.217230][ T6589] netlink: 36 bytes leftover after parsing attributes in process `syz.6.965'. [ 98.262339][ T6595] set_capacity_and_notify: 2 callbacks suppressed [ 98.262357][ T6595] loop6: detected capacity change from 0 to 1024 [ 98.290586][ T6595] EXT4-fs error (device loop6): __ext4_fill_super:5553: inode #2: comm syz.6.987: iget: checksum invalid [ 98.305872][ T3741] Bluetooth: hci0: command 0x1003 tx timeout [ 98.312732][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 98.322434][ T6595] EXT4-fs (loop6): get root inode failed [ 98.328213][ T6595] EXT4-fs (loop6): mount failed [ 98.375864][ T6603] netlink: 24 bytes leftover after parsing attributes in process `syz.6.989'. [ 98.386931][ T6603] netlink: 44 bytes leftover after parsing attributes in process `syz.6.989'. [ 98.426531][ T6606] loop6: detected capacity change from 0 to 512 [ 98.445073][ T6606] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 98.453168][ T6606] EXT4-fs (loop6): orphan cleanup on readonly fs [ 98.463869][ T6606] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #3: comm syz.6.990: corrupted inode contents [ 98.478942][ T6606] EXT4-fs error (device loop6): ext4_dirty_inode:6502: inode #3: comm syz.6.990: mark_inode_dirty error [ 98.490973][ T6606] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #3: comm syz.6.990: corrupted inode contents [ 98.502981][ T6606] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #3: comm syz.6.990: mark_inode_dirty error [ 98.514702][ T6606] EXT4-fs error (device loop6): ext4_acquire_dquot:6986: comm syz.6.990: Failed to acquire dquot type 0 [ 98.526618][ T6606] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #16: comm syz.6.990: corrupted inode contents [ 98.539220][ T6606] EXT4-fs error (device loop6): ext4_dirty_inode:6502: inode #16: comm syz.6.990: mark_inode_dirty error [ 98.551361][ T6606] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #16: comm syz.6.990: corrupted inode contents [ 98.563709][ T6606] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #16: comm syz.6.990: mark_inode_dirty error [ 98.575220][ T6606] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #16: comm syz.6.990: corrupted inode contents [ 98.587617][ T6606] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem [ 98.596513][ T6606] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #16: comm syz.6.990: corrupted inode contents [ 98.608896][ T6606] EXT4-fs error (device loop6): ext4_truncate:4635: inode #16: comm syz.6.990: mark_inode_dirty error [ 98.620387][ T6606] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem [ 98.630329][ T6606] EXT4-fs (loop6): 1 truncate cleaned up [ 98.754530][ T6620] loop6: detected capacity change from 0 to 256 [ 98.816794][ T6629] loop2: detected capacity change from 0 to 512 [ 98.826166][ T6631] loop4: detected capacity change from 0 to 164 [ 98.839359][ T6631] ISOFS: unable to read i-node block [ 98.850602][ T6631] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 98.860250][ T6629] ext4 filesystem being mounted at /224/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 98.876775][ T6631] FAULT_INJECTION: forcing a failure. [ 98.876775][ T6631] name failslab, interval 1, probability 0, space 0, times 0 [ 98.889541][ T6631] CPU: 1 UID: 0 PID: 6631 Comm: syz.4.996 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 98.889607][ T6631] Tainted: [W]=WARN [ 98.889616][ T6631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 98.889643][ T6631] Call Trace: [ 98.889651][ T6631] [ 98.889660][ T6631] __dump_stack+0x1d/0x30 [ 98.889687][ T6631] dump_stack_lvl+0x95/0xd0 [ 98.889751][ T6631] dump_stack+0x15/0x1b [ 98.889777][ T6631] should_fail_ex+0x263/0x280 [ 98.889845][ T6631] should_failslab+0x8c/0xb0 [ 98.889920][ T6631] kmem_cache_alloc_noprof+0x68/0x490 [ 98.889941][ T6631] ? pidfs_register_pid+0x87/0x180 [ 98.889982][ T6631] pidfs_register_pid+0x87/0x180 [ 98.890103][ T6631] unix_stream_connect+0x1f8/0xa00 [ 98.890140][ T6631] ? selinux_netlbl_socket_connect+0x114/0x130 [ 98.890172][ T6631] ? __pfx_unix_stream_connect+0x10/0x10 [ 98.890221][ T6631] __sys_connect+0x1f1/0x2a0 [ 98.890253][ T6631] __x64_sys_connect+0x3f/0x50 [ 98.890286][ T6631] x64_sys_call+0x2e09/0x3000 [ 98.890414][ T6631] do_syscall_64+0xc0/0x2a0 [ 98.890437][ T6631] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.890499][ T6631] RIP: 0033:0x7f695d09acb9 [ 98.890527][ T6631] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.890588][ T6631] RSP: 002b:00007f695baf7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 98.890613][ T6631] RAX: ffffffffffffffda RBX: 00007f695d315fa0 RCX: 00007f695d09acb9 [ 98.890631][ T6631] RDX: 000000000000006e RSI: 0000200000000080 RDI: 0000000000000004 [ 98.890648][ T6631] RBP: 00007f695baf7090 R08: 0000000000000000 R09: 0000000000000000 [ 98.890664][ T6631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 98.890680][ T6631] R13: 00007f695d316038 R14: 00007f695d315fa0 R15: 00007ffe63d31dc8 [ 98.890759][ T6631] [ 99.152157][ T6629] EXT4-fs error (device loop2): ext4_lookup:1785: inode #12: comm syz.2.997: iget: bad i_size value: 2533274857506816 [ 99.166873][ T6629] EXT4-fs (loop2): shut down requested (0) [ 99.217548][ T6649] loop1: detected capacity change from 0 to 256 [ 99.224036][ T6435] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 99.248406][ T6649] msdos: Unexpected value for 'dots' [ 99.469497][ T6674] loop6: detected capacity change from 0 to 512 [ 99.526950][ T6674] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz.6.1010: bad orphan inode 13 [ 99.553589][ T6674] ext4_test_bit(bit=12, block=4) = 1 [ 99.559004][ T6674] is_bad_inode(inode)=0 [ 99.563257][ T6674] NEXT_ORPHAN(inode)=0 [ 99.567394][ T6674] max_ino=32 [ 99.567864][ T6679] loop1: detected capacity change from 0 to 512 [ 99.570613][ T6674] i_nlink=1 [ 99.595825][ T6674] FAULT_INJECTION: forcing a failure. [ 99.595825][ T6674] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 99.609056][ T6674] CPU: 0 UID: 0 PID: 6674 Comm: syz.6.1010 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 99.609097][ T6674] Tainted: [W]=WARN [ 99.609106][ T6674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 99.609197][ T6674] Call Trace: [ 99.609205][ T6674] [ 99.609215][ T6674] __dump_stack+0x1d/0x30 [ 99.609271][ T6674] dump_stack_lvl+0x95/0xd0 [ 99.609301][ T6674] dump_stack+0x15/0x1b [ 99.609326][ T6674] should_fail_ex+0x263/0x280 [ 99.609352][ T6674] should_fail+0xb/0x20 [ 99.609410][ T6674] should_fail_usercopy+0x1a/0x20 [ 99.609449][ T6674] strncpy_from_user+0x27/0x250 [ 99.609494][ T6674] getname_flags+0xad/0x3b0 [ 99.609592][ T6674] do_sys_openat2+0x60/0x150 [ 99.609651][ T6674] __x64_sys_openat+0xf2/0x120 [ 99.609687][ T6674] x64_sys_call+0x2b07/0x3000 [ 99.609733][ T6674] do_syscall_64+0xc0/0x2a0 [ 99.609762][ T6674] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.609791][ T6674] RIP: 0033:0x7f788900acb9 [ 99.609815][ T6674] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 99.609837][ T6674] RSP: 002b:00007f7887a67028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 99.609856][ T6674] RAX: ffffffffffffffda RBX: 00007f7889285fa0 RCX: 00007f788900acb9 [ 99.609897][ T6674] RDX: 000000000000275a RSI: 0000200000000080 RDI: ffffffffffffff9c [ 99.609979][ T6674] RBP: 00007f7887a67090 R08: 0000000000000000 R09: 0000000000000000 [ 99.609996][ T6674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 99.610049][ T6674] R13: 00007f7889286038 R14: 00007f7889285fa0 R15: 00007ffc54b410f8 [ 99.610070][ T6674] [ 99.805249][ T6679] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 99.840320][ T6690] loop6: detected capacity change from 0 to 512 [ 99.852848][ T6679] EXT4-fs error (device loop1): ext4_quota_enable:7173: comm syz.1.1011: Bad quota inum: 32, type: 1 [ 99.869513][ T6694] loop2: detected capacity change from 0 to 512 [ 99.877810][ T6679] EXT4-fs warning (device loop1): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=32). Please run e2fsck to fix. [ 99.906669][ T6694] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -13 [ 99.922033][ T6694] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #13: comm syz.2.1015: iget: bad i_size value: 12154757448730 [ 99.942055][ T6679] EXT4-fs (loop1): mount failed [ 99.947122][ T6694] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.1015: couldn't read orphan inode 13 (err -117) [ 99.962988][ T6690] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -13 [ 99.979562][ T6690] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #13: comm syz.6.1014: iget: bad i_size value: 12154757448730 [ 99.992987][ T6690] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.1014: couldn't read orphan inode 13 (err -117) [ 100.047033][ T6705] ISOFS: unable to read i-node block [ 100.106034][ T6705] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 100.116440][ T6713] netlink: 'syz.2.1020': attribute type 6 has an invalid length. [ 100.168737][ T6710] syzkaller0: entered promiscuous mode [ 100.174295][ T6710] syzkaller0: entered allmulticast mode [ 100.224035][ T6719] __nla_validate_parse: 4 callbacks suppressed [ 100.224054][ T6719] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1025'. [ 100.275963][ T6722] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1026'. [ 100.311765][ T6719] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 100.359818][ T6731] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1030'. [ 100.368941][ T6731] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1030'. [ 100.433168][ T6735] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -13 [ 100.442470][ T6729] ext4 filesystem being mounted at /215/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.454874][ T6735] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #13: comm syz.2.1030: iget: bad i_size value: 12154757448730 [ 100.486581][ T6743] netlink: 'syz.1.1033': attribute type 10 has an invalid length. [ 100.494742][ T6743] dummy0: left promiscuous mode [ 100.499635][ T6743] dummy0: left allmulticast mode [ 100.507140][ T6743] team0: Failed to send options change via netlink (err -105) [ 100.514786][ T6743] team0: Port device dummy0 added [ 100.523312][ T6743] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1033'. [ 100.533320][ T6743] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 100.554156][ T6745] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1034'. [ 100.571558][ T6735] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.1030: couldn't read orphan inode 13 (err -117) [ 100.584280][ T6747] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1034'. [ 100.601966][ T6746] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1034'. [ 100.635573][ T6750] ISOFS: unable to read i-node block [ 100.641255][ T6750] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 100.704318][ T6759] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1039'. [ 100.723171][ T6761] netlink: 'syz.4.1040': attribute type 10 has an invalid length. [ 100.731082][ T6761] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1040'. [ 100.744883][ T6759] mmap: syz.5.1039 (6759) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 100.770556][ T6761] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 100.787354][ T6753] loop6: p1 p3 p4 [ 100.793773][ T6753] loop6: p1 size 477167616 extends beyond EOD, truncated [ 100.821598][ T6753] loop6: p3 start 4294901760 is beyond EOD, truncated [ 100.828522][ T6753] loop6: p4 size 32768 extends beyond EOD, truncated [ 100.889168][ T6776] FAULT_INJECTION: forcing a failure. [ 100.889168][ T6776] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 100.902432][ T6776] CPU: 0 UID: 0 PID: 6776 Comm: syz.4.1045 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 100.902514][ T6776] Tainted: [W]=WARN [ 100.902524][ T6776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 100.902548][ T6776] Call Trace: [ 100.902557][ T6776] [ 100.902567][ T6776] __dump_stack+0x1d/0x30 [ 100.902712][ T6776] dump_stack_lvl+0x95/0xd0 [ 100.902739][ T6776] dump_stack+0x15/0x1b [ 100.902763][ T6776] should_fail_ex+0x263/0x280 [ 100.902794][ T6776] should_fail+0xb/0x20 [ 100.902878][ T6776] should_fail_usercopy+0x1a/0x20 [ 100.902913][ T6776] _copy_from_iter+0xcf/0xea0 [ 100.902946][ T6776] ? __alloc_skb+0x397/0x4b0 [ 100.903029][ T6776] ? __alloc_skb+0x219/0x4b0 [ 100.903068][ T6776] netlink_sendmsg+0x4ae/0x6f0 [ 100.903098][ T6776] ? __pfx_netlink_sendmsg+0x10/0x10 [ 100.903125][ T6776] __sock_sendmsg+0x145/0x170 [ 100.903192][ T6776] ____sys_sendmsg+0x31e/0x4a0 [ 100.903237][ T6776] ___sys_sendmsg+0x195/0x1e0 [ 100.903297][ T6776] __x64_sys_sendmsg+0xd4/0x160 [ 100.903357][ T6776] x64_sys_call+0x17ba/0x3000 [ 100.903391][ T6776] do_syscall_64+0xc0/0x2a0 [ 100.903418][ T6776] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.903448][ T6776] RIP: 0033:0x7f695d09acb9 [ 100.903469][ T6776] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 100.903495][ T6776] RSP: 002b:00007f695baf7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 100.903570][ T6776] RAX: ffffffffffffffda RBX: 00007f695d315fa0 RCX: 00007f695d09acb9 [ 100.903590][ T6776] RDX: 0000000020000050 RSI: 0000200000000300 RDI: 0000000000000003 [ 100.903607][ T6776] RBP: 00007f695baf7090 R08: 0000000000000000 R09: 0000000000000000 [ 100.903623][ T6776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 100.903639][ T6776] R13: 00007f695d316038 R14: 00007f695d315fa0 R15: 00007ffe63d31dc8 [ 100.903730][ T6776] [ 101.190943][ T6790] netlink: 'syz.5.1047': attribute type 28 has an invalid length. [ 101.275305][ T3688] udevd[3688]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 101.286187][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 101.327156][ T6806] netlink: 'syz.6.1052': attribute type 2 has an invalid length. [ 101.437018][ T6812] netlink: 'syz.6.1054': attribute type 21 has an invalid length. [ 101.457580][ T6812] sch_tbf: burst 1821 is lower than device lo mtu (65550) ! [ 101.566834][ T6828] EXT4-fs warning (device loop6): read_mmp_block:111: Error -74 while reading MMP block 34 [ 101.701980][ T6844] tipc: Started in network mode [ 101.707031][ T6844] tipc: Node identity aaaaaaaaaa2a, cluster identity 4711 [ 101.714317][ T6844] tipc: Enabled bearer , priority 15 [ 101.840776][ T6855] netlink: 'syz.1.1068': attribute type 10 has an invalid length. [ 101.849560][ T6856] EXT4-fs: Ignoring removed nomblk_io_submit option [ 101.858270][ T6855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.867492][ T6856] EXT4-fs mount: 37 callbacks suppressed [ 101.867513][ T6856] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.895341][ T6855] team0: Device bond0 failed to register rx_handler [ 101.919102][ T6862] team0 (unregistering): Port device dummy0 removed [ 102.082916][ T6865] bond2: up delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 102.094143][ T6880] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 102.111128][ T6880] bond2: (slave lo): Enslaving as a backup interface with an up link [ 102.127783][ T6880] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 102.145504][ T6878] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 102.212214][ T6889] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 102.289205][ T6889] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=200ec018, mo2=0002] [ 102.314580][ T6889] System zones: 1-12 [ 102.351224][ T6889] EXT4-fs (loop4): 1 truncate cleaned up [ 102.386205][ T6889] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.425854][ T6904] FAULT_INJECTION: forcing a failure. [ 102.425854][ T6904] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 102.438988][ T6904] CPU: 1 UID: 0 PID: 6904 Comm: syz.6.1077 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 102.439047][ T6904] Tainted: [W]=WARN [ 102.439055][ T6904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 102.439067][ T6904] Call Trace: [ 102.439075][ T6904] [ 102.439082][ T6904] __dump_stack+0x1d/0x30 [ 102.439108][ T6904] dump_stack_lvl+0x95/0xd0 [ 102.439174][ T6904] dump_stack+0x15/0x1b [ 102.439200][ T6904] should_fail_ex+0x263/0x280 [ 102.439228][ T6904] should_fail+0xb/0x20 [ 102.439314][ T6904] should_fail_usercopy+0x1a/0x20 [ 102.439341][ T6904] _copy_from_user+0x1c/0xb0 [ 102.439368][ T6904] ___sys_sendmsg+0xc1/0x1e0 [ 102.439461][ T6904] __sys_sendmmsg+0x185/0x320 [ 102.439532][ T6904] __x64_sys_sendmmsg+0x57/0x70 [ 102.439610][ T6904] x64_sys_call+0x1e28/0x3000 [ 102.439639][ T6904] do_syscall_64+0xc0/0x2a0 [ 102.439668][ T6904] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.439749][ T6904] RIP: 0033:0x7f788900acb9 [ 102.439768][ T6904] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.439793][ T6904] RSP: 002b:00007f7887a67028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 102.439815][ T6904] RAX: ffffffffffffffda RBX: 00007f7889285fa0 RCX: 00007f788900acb9 [ 102.439828][ T6904] RDX: 0000000000000318 RSI: 00002000000bd000 RDI: 0000000000000005 [ 102.439841][ T6904] RBP: 00007f7887a67090 R08: 0000000000000000 R09: 0000000000000000 [ 102.439963][ T6904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 102.439978][ T6904] R13: 00007f7889286038 R14: 00007f7889285fa0 R15: 00007ffc54b410f8 [ 102.440005][ T6904] [ 102.792410][ T6851] syz.2.1066 (6851) used greatest stack depth: 6968 bytes left [ 102.832325][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.841637][ T6141] tipc: Node number set to 8432298 [ 102.867846][ T6925] ISOFS: unable to read i-node block [ 102.878394][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.889807][ T6925] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 102.932357][ T6930] 9p: Bad value for 'wfdno' [ 103.017138][ T29] kauditd_printk_skb: 47 callbacks suppressed [ 103.017157][ T29] audit: type=1400 audit(2000000047.083:1544): avc: granted { setsecparam } for pid=6943 comm="syz.1.1090" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 103.044602][ T6941] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.075763][ T6952] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.1089: bad orphan inode 13 [ 103.087820][ T6952] ext4_test_bit(bit=12, block=4) = 1 [ 103.088328][ T6955] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 103.093165][ T6952] is_bad_inode(inode)=0 [ 103.113557][ T6952] NEXT_ORPHAN(inode)=0 [ 103.117884][ T6952] max_ino=32 [ 103.118176][ T6950] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 103.121104][ T6952] i_nlink=1 [ 103.126051][ T6952] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.144420][ T29] audit: type=1400 audit(2000000047.183:1545): avc: denied { append } for pid=6949 comm="syz.1.1091" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 103.172072][ T6952] EXT4-fs warning (device loop2): dx_probe:801: inode #2: comm syz.2.1089: Unrecognised inode hash code 20 [ 103.183596][ T6952] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.1089: Corrupt directory, running e2fsck is recommended [ 103.199306][ T6952] EXT4-fs warning (device loop2): dx_probe:801: inode #2: comm syz.2.1089: Unrecognised inode hash code 20 [ 103.210902][ T6952] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.1089: Corrupt directory, running e2fsck is recommended [ 103.248606][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.276065][ T6961] FAULT_INJECTION: forcing a failure. [ 103.276065][ T6961] name failslab, interval 1, probability 0, space 0, times 0 [ 103.288867][ T6961] CPU: 0 UID: 0 PID: 6961 Comm: syz.6.1095 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 103.288899][ T6961] Tainted: [W]=WARN [ 103.288905][ T6961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 103.288917][ T6961] Call Trace: [ 103.288924][ T6961] [ 103.288931][ T6961] __dump_stack+0x1d/0x30 [ 103.289039][ T6961] dump_stack_lvl+0x95/0xd0 [ 103.289139][ T6961] dump_stack+0x15/0x1b [ 103.289159][ T6961] should_fail_ex+0x263/0x280 [ 103.289182][ T6961] should_failslab+0x8c/0xb0 [ 103.289253][ T6961] kmem_cache_alloc_noprof+0x68/0x490 [ 103.289274][ T6961] ? skb_clone+0x151/0x1f0 [ 103.289311][ T6961] skb_clone+0x151/0x1f0 [ 103.289385][ T6961] __netlink_deliver_tap+0x2c9/0x500 [ 103.289435][ T6961] netlink_unicast+0x66b/0x690 [ 103.289510][ T6961] netlink_sendmsg+0x5c8/0x6f0 [ 103.289533][ T6961] ? __pfx_netlink_sendmsg+0x10/0x10 [ 103.289606][ T6961] __sock_sendmsg+0x145/0x170 [ 103.289632][ T6961] ____sys_sendmsg+0x31e/0x4a0 [ 103.289665][ T6961] ___sys_sendmsg+0x195/0x1e0 [ 103.289711][ T6961] __x64_sys_sendmsg+0xd4/0x160 [ 103.289819][ T6961] x64_sys_call+0x17ba/0x3000 [ 103.289843][ T6961] do_syscall_64+0xc0/0x2a0 [ 103.289942][ T6961] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.289967][ T6961] RIP: 0033:0x7f788900acb9 [ 103.290046][ T6961] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.290066][ T6961] RSP: 002b:00007f7887a67028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 103.290091][ T6961] RAX: ffffffffffffffda RBX: 00007f7889285fa0 RCX: 00007f788900acb9 [ 103.290110][ T6961] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 103.290127][ T6961] RBP: 00007f7887a67090 R08: 0000000000000000 R09: 0000000000000000 [ 103.290143][ T6961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 103.290169][ T6961] R13: 00007f7889286038 R14: 00007f7889285fa0 R15: 00007ffc54b410f8 [ 103.290189][ T6961] [ 103.292796][ T6962] team_slave_0: entered promiscuous mode [ 103.310708][ T6950] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 103.318193][ T6962] team_slave_1: entered promiscuous mode [ 103.523323][ T6962] macvtap2: entered allmulticast mode [ 103.532605][ T6962] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 103.540372][ T6950] ext4 filesystem being mounted at /235/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.561404][ T6967] set_capacity_and_notify: 13 callbacks suppressed [ 103.561424][ T6967] loop4: detected capacity change from 0 to 164 [ 103.574883][ T29] audit: type=1326 audit(2000000047.623:1546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6963 comm="syz.6.1096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f788900acb9 code=0x7ffc0000 [ 103.598544][ T29] audit: type=1326 audit(2000000047.623:1547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6963 comm="syz.6.1096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f788900acb9 code=0x7ffc0000 [ 103.622076][ T29] audit: type=1326 audit(2000000047.623:1548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6963 comm="syz.6.1096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=30 compat=0 ip=0x7f788900acb9 code=0x7ffc0000 [ 103.645445][ T29] audit: type=1326 audit(2000000047.623:1549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6963 comm="syz.6.1096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f788900acb9 code=0x7ffc0000 [ 103.668933][ T29] audit: type=1326 audit(2000000047.623:1550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6963 comm="syz.6.1096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f788900acb9 code=0x7ffc0000 [ 103.690423][ T6975] loop2: detected capacity change from 0 to 512 [ 103.700610][ T6956] team_slave_0: left promiscuous mode [ 103.706085][ T6956] team_slave_1: left promiscuous mode [ 103.712209][ T6967] ISOFS: unable to read i-node block [ 103.718043][ T6967] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 103.758799][ T6980] x_tables: ip6_tables: RATEEST.0 target: invalid size 32 (kernel) != (user) 2 [ 103.779316][ T6975] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.801201][ T6975] ext4 filesystem being mounted at /237/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.811192][ T6983] loop5: detected capacity change from 0 to 512 [ 103.846482][ T6983] ext4: Unknown parameter 'appraise' [ 103.891336][ T6983] 9p: Bad value for 'rfdno' [ 103.901737][ T29] audit: type=1400 audit(2000000047.953:1551): avc: denied { setopt } for pid=6982 comm="syz.5.1100" lport=59720 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 103.903346][ T3323] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 103.959486][ T386] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 103.988039][ T386] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 31 with error 28 [ 104.000609][ T386] EXT4-fs (loop2): This should not happen!! Data will be lost [ 104.000609][ T386] [ 104.010322][ T386] EXT4-fs (loop2): Total free blocks count 0 [ 104.016393][ T386] EXT4-fs (loop2): Free/Dirty block details [ 104.022308][ T386] EXT4-fs (loop2): free_blocks=65280 [ 104.027647][ T386] EXT4-fs (loop2): dirty_blocks=31 [ 104.032810][ T386] EXT4-fs (loop2): Block reservation details [ 104.038876][ T386] EXT4-fs (loop2): i_reserved_data_blocks=31 [ 104.046207][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.066949][ T6995] loop5: detected capacity change from 0 to 512 [ 104.115772][ T29] audit: type=1400 audit(2000000048.183:1552): avc: denied { ioctl } for pid=6990 comm="syz.6.1106" path="/dev/input/event0" dev="devtmpfs" ino=242 ioctlcmd=0x4503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 104.141871][ T6995] EXT4-fs (loop5): corrupt root inode, run e2fsck [ 104.171939][ T6995] EXT4-fs (loop5): mount failed [ 104.270758][ T29] audit: type=1400 audit(2000000048.333:1553): avc: denied { compute_member } for pid=7018 comm="syz.2.1113" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 104.339399][ T7019] loop2: detected capacity change from 0 to 4096 [ 104.367919][ T7019] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.402359][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.412718][ T7026] FAULT_INJECTION: forcing a failure. [ 104.412718][ T7026] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 104.425932][ T7026] CPU: 0 UID: 0 PID: 7026 Comm: syz.1.1116 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 104.426038][ T7026] Tainted: [W]=WARN [ 104.426046][ T7026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 104.426062][ T7026] Call Trace: [ 104.426072][ T7026] [ 104.426082][ T7026] __dump_stack+0x1d/0x30 [ 104.426111][ T7026] dump_stack_lvl+0x95/0xd0 [ 104.426140][ T7026] dump_stack+0x15/0x1b [ 104.426209][ T7026] should_fail_ex+0x263/0x280 [ 104.426394][ T7026] should_fail+0xb/0x20 [ 104.426423][ T7026] should_fail_usercopy+0x1a/0x20 [ 104.426457][ T7026] copy_fpstate_to_sigframe+0x636/0x7d0 [ 104.426491][ T7026] ? copy_fpstate_to_sigframe+0xe5/0x7d0 [ 104.426563][ T7026] ? x86_task_fpu+0x36/0x60 [ 104.426603][ T7026] get_sigframe+0x34c/0x470 [ 104.426632][ T7026] ? get_signal+0xdbe/0xf60 [ 104.426700][ T7026] x64_setup_rt_frame+0xa7/0x4e0 [ 104.426770][ T7026] arch_do_signal_or_restart+0x24b/0x450 [ 104.426810][ T7026] exit_to_user_mode_loop+0x6a/0x6f0 [ 104.426840][ T7026] do_syscall_64+0x1d3/0x2a0 [ 104.426868][ T7026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.426952][ T7026] RIP: 0033:0x7f5a2acfb58e [ 104.426973][ T7026] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 104.426997][ T7026] RSP: 002b:00007f5a29796fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 104.427022][ T7026] RAX: 0000000000000001 RBX: 00007f5a297976c0 RCX: 00007f5a2acfb58e [ 104.427040][ T7026] RDX: 0000000000000001 RSI: 00007f5a29797090 RDI: 0000000000000004 [ 104.427056][ T7026] RBP: 00007f5a29797090 R08: 0000000000000000 R09: 0000000000000000 [ 104.427085][ T7026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 104.427101][ T7026] R13: 00007f5a2afb6038 R14: 00007f5a2afb5fa0 R15: 00007ffef805c8e8 [ 104.427163][ T7026] [ 104.563937][ T7027] loop5: detected capacity change from 0 to 512 [ 104.608540][ T7034] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.725409][ T7034] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.740341][ T7040] FAULT_INJECTION: forcing a failure. [ 104.740341][ T7040] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 104.753560][ T7040] CPU: 0 UID: 0 PID: 7040 Comm: syz.4.1124 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 104.753598][ T7040] Tainted: [W]=WARN [ 104.753606][ T7040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 104.753622][ T7040] Call Trace: [ 104.753631][ T7040] [ 104.753717][ T7040] __dump_stack+0x1d/0x30 [ 104.753749][ T7040] dump_stack_lvl+0x95/0xd0 [ 104.753776][ T7040] dump_stack+0x15/0x1b [ 104.753834][ T7040] should_fail_ex+0x263/0x280 [ 104.753870][ T7040] should_fail+0xb/0x20 [ 104.753899][ T7040] should_fail_usercopy+0x1a/0x20 [ 104.753959][ T7040] _copy_from_iter+0xcf/0xea0 [ 104.753991][ T7040] ? lockref_put_return+0xf7/0x130 [ 104.754029][ T7040] packet_sendmsg+0x2046/0x3370 [ 104.754145][ T7040] ? avc_has_perm+0x101/0x190 [ 104.754239][ T7040] ? selinux_socket_sendmsg+0x192/0x1c0 [ 104.754324][ T7040] ? __pfx_packet_sendmsg+0x10/0x10 [ 104.754425][ T7040] __sock_sendmsg+0x145/0x170 [ 104.754456][ T7040] __sys_sendto+0x2b2/0x380 [ 104.754503][ T7040] __x64_sys_sendto+0x76/0x90 [ 104.754539][ T7040] x64_sys_call+0x29a7/0x3000 [ 104.754594][ T7040] do_syscall_64+0xc0/0x2a0 [ 104.754641][ T7040] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.754669][ T7040] RIP: 0033:0x7f695d09acb9 [ 104.754715][ T7040] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.754734][ T7040] RSP: 002b:00007f695baf7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 104.754760][ T7040] RAX: ffffffffffffffda RBX: 00007f695d315fa0 RCX: 00007f695d09acb9 [ 104.754775][ T7040] RDX: 000000000000fc13 RSI: 0000200000000800 RDI: 0000000000000003 [ 104.754855][ T7040] RBP: 00007f695baf7090 R08: 0000000000000000 R09: fffffffffffffef0 [ 104.754872][ T7040] R10: 0000000000000880 R11: 0000000000000246 R12: 0000000000000001 [ 104.754889][ T7040] R13: 00007f695d316038 R14: 00007f695d315fa0 R15: 00007ffe63d31dc8 [ 104.754916][ T7040] [ 104.989921][ T7034] netlink: 'syz.2.1120': attribute type 1 has an invalid length. [ 104.997824][ T7034] netlink: 'syz.2.1120': attribute type 2 has an invalid length. [ 105.099196][ T7053] loop4: detected capacity change from 0 to 512 [ 105.109814][ T7056] netlink: 'syz.5.1127': attribute type 10 has an invalid length. [ 105.117968][ T7053] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e01c, mo2=0002] [ 105.130808][ T7053] System zones: 1-12 [ 105.132973][ T7056] team0: Failed to send options change via netlink (err -105) [ 105.135383][ T7053] EXT4-fs error (device loop4): dx_probe:791: inode #2: comm syz.4.1128: Directory hole found for htree index block 0 [ 105.142339][ T7056] team0: Port device dummy0 added [ 105.159997][ T7053] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -117 [ 105.160292][ T7056] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 105.168389][ T7053] EXT4-fs error (device loop4): dx_probe:791: inode #2: comm syz.4.1128: Directory hole found for htree index block 0 [ 105.213114][ T7053] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 105.222116][ T7053] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.271948][ T7053] netlink: 'syz.4.1128': attribute type 13 has an invalid length. [ 105.282033][ T7062] loop1: detected capacity change from 0 to 128 [ 105.309676][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.471499][ T7080] __nla_validate_parse: 15 callbacks suppressed [ 105.471520][ T7080] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1136'. [ 105.728107][ T7106] loop6: detected capacity change from 0 to 1024 [ 105.779616][ T7106] EXT4-fs error (device loop6): __ext4_fill_super:5553: inode #2: comm syz.6.1147: iget: checksum invalid [ 105.794980][ T7120] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.803521][ T7120] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.813278][ T7106] EXT4-fs (loop6): get root inode failed [ 105.819008][ T7106] EXT4-fs (loop6): mount failed [ 105.852786][ T7124] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1150'. [ 105.912242][ T7127] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1151'. [ 105.960403][ T7131] loop6: detected capacity change from 0 to 512 [ 105.980430][ T7131] EXT4-fs warning (device loop6): ext4_init_metadata_csum:4637: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 105.994078][ T7131] EXT4-fs (loop6): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 106.005484][ T3309] udevd[3309]: incorrect jbd checksum on /dev/loop6 [ 106.042650][ T53] bridge0 (unregistering): left allmulticast mode [ 106.071065][ T53] bond0 (unregistering): Released all slaves [ 106.086792][ T53] bond1 (unregistering): Released all slaves [ 106.110013][ T7139] syzkaller1: entered promiscuous mode [ 106.115665][ T7139] syzkaller1: entered allmulticast mode [ 106.143880][ T7105] chnl_net:caif_netlink_parms(): no params data found [ 106.153403][ T53] tipc: Left network mode [ 106.177099][ T53] hsr_slave_0: left promiscuous mode [ 106.183146][ T53] hsr_slave_1: left promiscuous mode [ 106.229657][ T7153] SELinux: policydb magic number 0x7850006 does not match expected magic number 0xf97cff8c [ 106.240147][ T7153] SELinux: failed to load policy [ 106.296412][ T7158] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 106.300776][ T7105] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.306329][ T7158] EXT4-fs (loop6): orphan cleanup on readonly fs [ 106.311730][ T7105] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.335986][ T7105] bridge_slave_0: entered allmulticast mode [ 106.342442][ T7158] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #3: comm syz.6.1155: corrupted inode contents [ 106.357697][ T7105] bridge_slave_0: entered promiscuous mode [ 106.364447][ T7158] EXT4-fs error (device loop6): ext4_dirty_inode:6502: inode #3: comm syz.6.1155: mark_inode_dirty error [ 106.364638][ T7105] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.382943][ T7105] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.390949][ T7105] bridge_slave_1: entered allmulticast mode [ 106.397846][ T7105] bridge_slave_1: entered promiscuous mode [ 106.411766][ T7164] ip6t_srh: unknown srh match flags 4000 [ 106.417980][ T7158] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #3: comm syz.6.1155: corrupted inode contents [ 106.434357][ T7158] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #3: comm syz.6.1155: mark_inode_dirty error [ 106.440622][ T7105] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.474242][ T7158] EXT4-fs error (device loop6): ext4_acquire_dquot:6986: comm syz.6.1155: Failed to acquire dquot type 0 [ 106.486100][ T7105] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.505094][ T7171] ISOFS: unable to read i-node block [ 106.512479][ T7158] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #16: comm syz.6.1155: corrupted inode contents [ 106.545359][ T7171] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 106.555390][ T7158] EXT4-fs error (device loop6): ext4_dirty_inode:6502: inode #16: comm syz.6.1155: mark_inode_dirty error [ 106.590356][ T7105] team0: Port device team_slave_0 added [ 106.606645][ T7158] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #16: comm syz.6.1155: corrupted inode contents [ 106.611281][ T7105] team0: Port device team_slave_1 added [ 106.629354][ T7158] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #16: comm syz.6.1155: mark_inode_dirty error [ 106.657638][ T7158] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #16: comm syz.6.1155: corrupted inode contents [ 106.733769][ T7158] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem [ 106.743217][ T7105] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 106.750283][ T7105] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 106.776320][ T7105] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 106.787684][ T7158] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #16: comm syz.6.1155: corrupted inode contents [ 106.800063][ T7158] EXT4-fs error (device loop6): ext4_truncate:4635: inode #16: comm syz.6.1155: mark_inode_dirty error [ 106.812596][ T7158] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem [ 106.822024][ T7105] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 106.822352][ T7158] EXT4-fs (loop6): 1 truncate cleaned up [ 106.829083][ T7105] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 106.829119][ T7105] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.864816][ T7105] hsr_slave_0: entered promiscuous mode [ 106.877560][ T7105] hsr_slave_1: entered promiscuous mode [ 106.883447][ T7105] debugfs: 'hsr0' already exists in 'hsr' [ 106.889245][ T7105] Cannot create hsr debugfs directory [ 106.916755][ T7158] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 106.981330][ T53] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.995702][ T7199] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.1168: bad orphan inode 13 [ 107.019468][ T6437] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.050993][ T7199] ext4_test_bit(bit=12, block=4) = 1 [ 107.056405][ T7199] is_bad_inode(inode)=0 [ 107.060595][ T7199] NEXT_ORPHAN(inode)=0 [ 107.064840][ T7199] max_ino=32 [ 107.068060][ T7199] i_nlink=1 [ 107.077036][ T7199] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.101423][ T53] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.154513][ T7199] FAULT_INJECTION: forcing a failure. [ 107.154513][ T7199] name failslab, interval 1, probability 0, space 0, times 0 [ 107.167216][ T7199] CPU: 1 UID: 0 PID: 7199 Comm: syz.2.1168 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 107.167257][ T7199] Tainted: [W]=WARN [ 107.167266][ T7199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 107.167281][ T7199] Call Trace: [ 107.167326][ T7199] [ 107.167337][ T7199] __dump_stack+0x1d/0x30 [ 107.167369][ T7199] dump_stack_lvl+0x95/0xd0 [ 107.167397][ T7199] dump_stack+0x15/0x1b [ 107.167422][ T7199] should_fail_ex+0x263/0x280 [ 107.167462][ T7199] should_failslab+0x8c/0xb0 [ 107.167489][ T7199] kmem_cache_alloc_noprof+0x68/0x490 [ 107.167579][ T7199] ? alloc_empty_file+0x76/0x200 [ 107.167763][ T7199] alloc_empty_file+0x76/0x200 [ 107.167800][ T7199] path_openat+0x62/0x23c0 [ 107.167842][ T7199] ? _parse_integer_limit+0x170/0x190 [ 107.167935][ T7199] ? _parse_integer+0x27/0x40 [ 107.167961][ T7199] ? kstrtoull+0x111/0x140 [ 107.167987][ T7199] ? kstrtouint+0x76/0xc0 [ 107.168043][ T7199] do_filp_open+0x15d/0x280 [ 107.168093][ T7199] do_sys_openat2+0xa6/0x150 [ 107.168169][ T7199] __x64_sys_openat+0xf2/0x120 [ 107.168208][ T7199] x64_sys_call+0x2b07/0x3000 [ 107.168241][ T7199] do_syscall_64+0xc0/0x2a0 [ 107.168328][ T7199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.168357][ T7199] RIP: 0033:0x7fc6c328acb9 [ 107.168377][ T7199] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.168401][ T7199] RSP: 002b:00007fc6c1ce7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 107.168490][ T7199] RAX: ffffffffffffffda RBX: 00007fc6c3505fa0 RCX: 00007fc6c328acb9 [ 107.168509][ T7199] RDX: 000000000000275a RSI: 0000200000000080 RDI: ffffffffffffff9c [ 107.168525][ T7199] RBP: 00007fc6c1ce7090 R08: 0000000000000000 R09: 0000000000000000 [ 107.168538][ T7199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 107.168606][ T7199] R13: 00007fc6c3506038 R14: 00007fc6c3505fa0 R15: 00007ffe857ed6a8 [ 107.168632][ T7199] [ 107.387464][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.408572][ T7224] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 107.415210][ T7224] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 107.422710][ T7224] vhci_hcd vhci_hcd.0: Device attached [ 107.445965][ T53] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.455997][ T7230] FAULT_INJECTION: forcing a failure. [ 107.455997][ T7230] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 107.469397][ T7230] CPU: 1 UID: 0 PID: 7230 Comm: syz.2.1173 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 107.469463][ T7230] Tainted: [W]=WARN [ 107.469473][ T7230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 107.469567][ T7230] Call Trace: [ 107.469577][ T7230] [ 107.469587][ T7230] __dump_stack+0x1d/0x30 [ 107.469621][ T7230] dump_stack_lvl+0x95/0xd0 [ 107.469651][ T7230] dump_stack+0x15/0x1b [ 107.469676][ T7230] should_fail_ex+0x263/0x280 [ 107.469714][ T7230] should_fail+0xb/0x20 [ 107.469741][ T7230] should_fail_usercopy+0x1a/0x20 [ 107.469799][ T7230] _copy_to_user+0x20/0xa0 [ 107.469838][ T7230] simple_read_from_buffer+0xb5/0x130 [ 107.469949][ T7230] proc_fail_nth_read+0x10e/0x150 [ 107.469987][ T7230] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 107.470017][ T7230] vfs_read+0x1ab/0x7f0 [ 107.470116][ T7230] ? __rcu_read_unlock+0x4e/0x70 [ 107.470220][ T7230] ? __fget_files+0x184/0x1c0 [ 107.470249][ T7230] ? mutex_lock+0x57/0x90 [ 107.470355][ T7230] ksys_read+0xdc/0x1a0 [ 107.470381][ T7230] __x64_sys_read+0x40/0x50 [ 107.470404][ T7230] x64_sys_call+0x2889/0x3000 [ 107.470433][ T7230] do_syscall_64+0xc0/0x2a0 [ 107.470523][ T7230] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.470551][ T7230] RIP: 0033:0x7fc6c324b58e [ 107.470569][ T7230] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 107.470591][ T7230] RSP: 002b:00007fc6c1ce6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 107.470614][ T7230] RAX: ffffffffffffffda RBX: 00007fc6c1ce76c0 RCX: 00007fc6c324b58e [ 107.470632][ T7230] RDX: 000000000000000f RSI: 00007fc6c1ce70a0 RDI: 0000000000000004 [ 107.470671][ T7230] RBP: 00007fc6c1ce7090 R08: 0000000000000000 R09: 0000000000000000 [ 107.470687][ T7230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 107.470711][ T7230] R13: 00007fc6c3506038 R14: 00007fc6c3505fa0 R15: 00007ffe857ed6a8 [ 107.470736][ T7230] [ 107.717548][ T53] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.735056][ T7238] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1174'. [ 107.744330][ T7238] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1174'. [ 107.754178][ T3484] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 107.789088][ T7238] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -13 [ 107.799275][ T7105] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 107.804529][ T7238] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #13: comm syz.2.1174: iget: bad i_size value: 12154757448730 [ 107.818924][ T3484] usb 13-1: new full-speed USB device number 2 using vhci_hcd [ 107.834498][ T7238] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.1174: couldn't read orphan inode 13 (err -117) [ 107.862957][ T7238] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.880567][ T7105] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 107.899179][ T7246] ISOFS: unable to read i-node block [ 107.906605][ T7105] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 107.930504][ T7105] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 107.936505][ T7246] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 107.949089][ T53] bridge_slave_1: left allmulticast mode [ 107.954837][ T53] bridge_slave_1: left promiscuous mode [ 107.960562][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.972927][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.982687][ T53] bridge_slave_0: left allmulticast mode [ 107.988428][ T53] bridge_slave_0: left promiscuous mode [ 107.994142][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.006216][ T53] bond_slave_0: left promiscuous mode [ 108.011748][ T53] bond_slave_1: left promiscuous mode [ 108.081434][ T7259] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -13 [ 108.090068][ T7259] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #13: comm syz.2.1176: iget: bad i_size value: 12154757448730 [ 108.103532][ T7259] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.1176: couldn't read orphan inode 13 (err -117) [ 108.117732][ T7259] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.165534][ T53] bond0 (unregistering): left allmulticast mode [ 108.171875][ T53] bond_slave_0: left allmulticast mode [ 108.177404][ T53] bond_slave_1: left allmulticast mode [ 108.189620][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 108.199929][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 108.209727][ T53] bond0 (unregistering): Released all slaves [ 108.217456][ T53] bond1 (unregistering): Released all slaves [ 108.220215][ T7225] vhci_hcd: connection reset by peer [ 108.230335][ T168] vhci_hcd vhci_hcd.6: stop threads [ 108.230943][ T53] bond2 (unregistering): (slave lo): Releasing backup interface [ 108.235734][ T168] vhci_hcd vhci_hcd.6: release socket [ 108.248790][ T168] vhci_hcd vhci_hcd.6: disconnect device [ 108.255072][ T53] bond2 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 108.266757][ T53] bond2 (unregistering): Released all slaves [ 108.278272][ T7253] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1176'. [ 108.287360][ T7253] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1176'. [ 108.343427][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.362629][ T53] hsr_slave_0: left promiscuous mode [ 108.378946][ T53] hsr_slave_1: left promiscuous mode [ 108.384814][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.392239][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 108.404454][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.411932][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 108.423992][ T53] veth1_macvtap: left promiscuous mode [ 108.429625][ T53] veth0_macvtap: left promiscuous mode [ 108.435526][ T53] veth1_vlan: left promiscuous mode [ 108.440798][ T53] veth0_vlan: left promiscuous mode [ 108.454989][ T7279] ISOFS: unable to read i-node block [ 108.460473][ T7279] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 108.554144][ T53] team0 (unregistering): Port device team_slave_1 removed [ 108.565031][ T53] team0 (unregistering): Port device team_slave_0 removed [ 108.596840][ T53] team0 (unregistering): Port device dummy0 removed [ 108.622447][ T7206] chnl_net:caif_netlink_parms(): no params data found [ 108.654161][ T7293] netlink: 'syz.4.1179': attribute type 6 has an invalid length. [ 108.704452][ T7279] netlink: 'syz.2.1178': attribute type 2 has an invalid length. [ 108.712294][ T7279] netlink: 'syz.2.1178': attribute type 1 has an invalid length. [ 108.720293][ T7206] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.727635][ T7206] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.737414][ T7206] bridge_slave_0: entered allmulticast mode [ 108.744314][ T7206] bridge_slave_0: entered promiscuous mode [ 108.751633][ T7206] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.758761][ T7206] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.766361][ T7206] bridge_slave_1: entered allmulticast mode [ 108.773170][ T7206] bridge_slave_1: entered promiscuous mode [ 108.802750][ T7206] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 108.820363][ T7105] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.844748][ T7206] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 108.864545][ T7304] set_capacity_and_notify: 7 callbacks suppressed [ 108.864565][ T7304] loop4: detected capacity change from 0 to 1024 [ 108.883052][ T7311] loop6: detected capacity change from 0 to 512 [ 108.987224][ T7304] __quota_error: 147 callbacks suppressed [ 108.987242][ T7304] Quota error (device loop4): do_check_range: Getting block 64 out of range 1-5 [ 109.002190][ T7304] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 109.006417][ T7105] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.011817][ T7304] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.1180: Failed to acquire dquot type 0 [ 109.034936][ T7311] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.055043][ T7206] team0: Port device team_slave_0 added [ 109.067023][ T7234] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.074186][ T7234] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.094385][ T7311] ext4 filesystem being mounted at /45/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 109.107155][ T29] audit: type=1400 audit(2000000053.173:1699): avc: denied { mounton } for pid=7277 comm="syz.2.1178" path="/258/file0/file0" dev="loop2" ino=1984 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=dir permissive=1 [ 109.131583][ T7206] team0: Port device team_slave_1 added [ 109.142603][ T29] audit: type=1400 audit(2000000053.173:1700): avc: denied { mount } for pid=7277 comm="syz.2.1178" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 109.171241][ T7206] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.178258][ T7206] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 109.204281][ T7206] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.204986][ T7304] EXT4-fs error (device loop4): mb_free_blocks:2037: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 109.230132][ T7206] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.237173][ T7206] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 109.263130][ T7206] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.274104][ T7304] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #13: comm syz.4.1180: corrupted inode contents [ 109.276405][ T3890] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.286659][ T29] audit: type=1400 audit(2000000053.353:1701): avc: denied { unmount } for pid=7277 comm="syz.2.1178" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 109.293085][ T3890] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.331809][ T7311] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1181'. [ 109.340924][ T7311] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1181'. [ 109.356698][ T7304] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #13: comm syz.4.1180: mark_inode_dirty error [ 109.368495][ T7304] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #13: comm syz.4.1180: corrupted inode contents [ 109.380844][ T7304] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #13: comm syz.4.1180: mark_inode_dirty error [ 109.423224][ T7206] hsr_slave_0: entered promiscuous mode [ 109.439046][ T7206] hsr_slave_1: entered promiscuous mode [ 109.446176][ T7206] debugfs: 'hsr0' already exists in 'hsr' [ 109.451938][ T7206] Cannot create hsr debugfs directory [ 109.462203][ T6437] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.481637][ T7304] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #13: comm syz.4.1180: corrupted inode contents [ 109.495518][ T7321] ================================================================== [ 109.503647][ T7321] BUG: KCSAN: data-race in copy_mm / lru_gen_del_mm [ 109.506623][ T7304] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 109.510277][ T7321] [ 109.510287][ T7321] write to 0xffff88810a537238 of 8 bytes by task 7320 on cpu 0: [ 109.528772][ T7321] lru_gen_del_mm+0x28a/0x3e0 [ 109.533498][ T7321] __mmput+0x17a/0x1c0 [ 109.537614][ T7321] mmput+0x40/0x50 [ 109.541380][ T7321] exit_mm+0xe3/0x180 [ 109.545400][ T7321] do_exit+0x3fa/0x1590 [ 109.549760][ T7321] do_group_exit+0x138/0x140 [ 109.554378][ T7321] __x64_sys_exit_group+0x1f/0x20 [ 109.559472][ T7321] x64_sys_call+0x2fff/0x3000 [ 109.564186][ T7321] do_syscall_64+0xc0/0x2a0 [ 109.568708][ T7321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.574637][ T7321] [ 109.576985][ T7321] read to 0xffff88810a536c00 of 1664 bytes by task 7321 on cpu 1: [ 109.584801][ T7321] copy_mm+0xe1/0x370 [ 109.588801][ T7321] copy_process+0xcbd/0x1f10 [ 109.593410][ T7321] kernel_clone+0x16b/0x5b0 [ 109.597939][ T7321] __x64_sys_clone+0x143/0x180 [ 109.602719][ T7321] x64_sys_call+0x12d0/0x3000 [ 109.607437][ T7321] do_syscall_64+0xc0/0x2a0 [ 109.611961][ T7321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.617872][ T7321] [ 109.620216][ T7321] Reported by Kernel Concurrency Sanitizer on: [ 109.626404][ T7321] CPU: 1 UID: 0 PID: 7321 Comm: dhcpcd-run-hook Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 109.638250][ T7321] Tainted: [W]=WARN [ 109.642072][ T7321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 109.652263][ T7321] ================================================================== SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 109.667784][ T29] audit: type=1400 audit(2000000053.733:1702): avc: denied { write } for pid=3306 comm="syz-executor" path="pipe:[1827]" dev="pipefs" ino=1827 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 109.733138][ T7304] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #13: comm syz.4.1180: corrupted inode contents [ 109.786537][ T7304] EXT4-fs error (device loop4): ext4_truncate:4635: inode #13: comm syz.4.1180: mark_inode_dirty error [ 109.824555][ T7304] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 109.857939][ T29] audit: type=1400 audit(2000000053.753:1703): avc: denied { recv } for pid=7321 comm="dhcpcd-run-hook" saddr=10.128.0.163 src=45376 daddr=10.128.0.31 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 109.876200][ T7304] EXT4-fs (loop4): 1 truncate cleaned up [ 109.954539][ T7304] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.980272][ T7304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.036898][ T31] bridge_slave_1: left allmulticast mode [ 110.042589][ T31] bridge_slave_1: left promiscuous mode [ 110.048441][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.057635][ T31] bridge_slave_0: left allmulticast mode [ 110.063319][ T31] bridge_slave_0: left promiscuous mode [ 110.069186][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.185948][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 110.195622][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 110.205216][ T31] bond0 (unregistering): Released all slaves [ 110.248946][ T31] hsr_slave_0: left promiscuous mode [ 110.264543][ T31] hsr_slave_1: left promiscuous mode [ 110.270317][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 110.284804][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 110.334995][ T31] team0 (unregistering): Port device team_slave_1 removed [ 110.361496][ T31] team0 (unregistering): Port device team_slave_0 removed [ 111.384199][ T31] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.437311][ T31] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.487047][ T31] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.538570][ T31] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.618880][ T31] bridge_slave_1: left allmulticast mode [ 111.624733][ T31] bridge_slave_1: left promiscuous mode [ 111.630596][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.639113][ T31] bridge_slave_0: left allmulticast mode [ 111.644991][ T31] bridge_slave_0: left promiscuous mode [ 111.650699][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.660007][ T31] bridge_slave_1: left allmulticast mode [ 111.665860][ T31] bridge_slave_1: left promiscuous mode [ 111.671633][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.680633][ T31] bridge_slave_0: left allmulticast mode [ 111.686420][ T31] bridge_slave_0: left promiscuous mode [ 111.692150][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.700933][ T31] bridge_slave_1: left allmulticast mode [ 111.706748][ T31] bridge_slave_1: left promiscuous mode [ 111.712520][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.721113][ T31] bridge_slave_0: left allmulticast mode [ 111.726852][ T31] bridge_slave_0: left promiscuous mode [ 111.732653][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.866399][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 111.876337][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 111.885994][ T31] bond0 (unregistering): Released all slaves [ 111.965802][ T31] bond1 (unregistering): Released all slaves [ 111.974152][ T31] bond2 (unregistering): Released all slaves [ 111.982625][ T31] bond0 (unregistering): Released all slaves [ 111.991522][ T31] bond3 (unregistering): Released all slaves [ 111.999795][ T31] bond4 (unregistering): Released all slaves [ 112.085772][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 112.095934][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 112.105483][ T31] bond0 (unregistering): Released all slaves [ 112.138831][ T31] tipc: Disabling bearer [ 112.146226][ T31] tipc: Left network mode [ 112.154516][ T31] hsr_slave_0: left promiscuous mode [ 112.160194][ T31] hsr_slave_1: left promiscuous mode [ 112.165791][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 112.173322][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 112.182778][ T31] hsr_slave_0: left promiscuous mode [ 112.188511][ T31] hsr_slave_1: left promiscuous mode [ 112.194793][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 112.202324][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 112.212058][ T31] hsr_slave_0: left promiscuous mode [ 112.217859][ T31] hsr_slave_1: left promiscuous mode [ 112.223646][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.231106][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 112.238731][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.246251][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 112.258395][ T31] veth1_macvtap: left promiscuous mode [ 112.263956][ T31] veth0_macvtap: left promiscuous mode [ 112.269485][ T31] veth1_vlan: left promiscuous mode [ 112.274800][ T31] veth0_vlan: left promiscuous mode [ 112.356018][ T31] team0 (unregistering): Port device team_slave_1 removed [ 112.366005][ T31] team0 (unregistering): Port device team_slave_0 removed [ 112.429078][ T31] team0 (unregistering): Port device team_slave_1 removed [ 112.438860][ T31] team0 (unregistering): Port device team_slave_0 removed [ 112.469906][ T31] team0 (unregistering): Port device dummy0 removed [ 112.505759][ T31] team0 (unregistering): Port device team_slave_1 removed [ 112.515593][ T31] team0 (unregistering): Port device team_slave_0 removed [ 112.863965][ T3484] usb 13-1: enqueue for inactive port 0 [ 112.869667][ T3484] usb 13-1: enqueue for inactive port 0 [ 112.954240][ T3484] vhci_hcd vhci_hcd.6: vhci_device speed not set