last executing test programs: 1m24.385203491s ago: executing program 4 (id=358): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_bp={0x0, 0x8}, 0x8216, 0x6, 0x11000, 0x0, 0x9484, 0x1, 0x400}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x3f000000) 1m24.262791258s ago: executing program 4 (id=360): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="8400"], 0x84}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005000100040000000600"], 0x4c}}, 0x0) 1m24.174765003s ago: executing program 4 (id=363): r0 = socket$rxrpc(0x21, 0x2, 0xa) sendto$rxrpc(r0, 0x0, 0x0, 0x40000c4, 0x0, 0x0) connect$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) unshare(0x32070d00) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x16}, 0x68, r3}) r4 = socket(0xa, 0x1, 0x0) ioctl(r4, 0x8916, &(0x7f0000000000)) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="24000000190004002cbd7000ffc13ce0c1fbdbdf250affffffffffffff7f020000080017c55ed8620f2853d41e66bc1ecce03cf888792dc0440ea33f7819dc38579489bd70f97edffb9d525a27941d052458d543fab2f0fd62de18db52b8c21a6a0bb297566bd4f55a8c5809cc96365a87aa02563cbd3db9b72c935ea6db428f35b522e2f88c946c8a6feb7fad8f684eecab86dd656b8b14cc1a4ca85ba45508281e7304abba56b41234ae0aa5252b2f162962915b48761bb1acfcc2cba9fef3f34cfb17c1793bf32c64ae26175e04663f25955d62304bc5f5914f4a9c6e2ceb50debb1d262b661cfffe302a3db278f572ad6e2996436cbda6cdd5a8"], 0x24}, 0x1, 0x0, 0x0, 0x805}, 0x10) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TIOCSSOFTCAR(r5, 0x541a, &(0x7f0000000040)=0x108f) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe6}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r1, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c42200fd9232f5aa6a361816bf21afb8473a064f1988536d4b5888807b3aaafaf59f53121782a0a9370dc0feae13c8c2a1dcc8a3122aaa3dcd5b9247a915378e6492e5b94073dcdc87e7c794fb262a7e9ee0b9432f74331c6e9412ac6557c54c6ac72bc24ff70ca2f8", 0xda}, {&(0x7f0000000a00)="145a977ce90bcec36cee68138cdb7c53108f9e6776eb08ce8c386ceb3ef2feba0afdcd6e04c99847b690d5148d8313f48a14b0418173a7b6a901d1903cd5d6eb2636c718aa1204b697a3dc3e564ef86e51", 0x51}, {&(0x7f0000000e00)="bfaff4f4485bc73c2c14fa76a76697938161b1a54e68d0412f2c369299d3d2a6d338972f6dd839e5c3087c6e61d959386b5a29aa0e181f8da9f47a25d9b5c94f1fd45daba5169918e54c7969700fc8c0d7513b4c9df33d3dbccf8d7077b1524bc28799d782ae94e68a2f2de8097bb55ae5795c6be07af87457d9ce99e5bd440d4f096a0f74da88f2a75895b0c390e38b11b62d3977cd8cd3127721cd0241f4effe4e43f0bf6506fa44aef9de83b58ab6f93883483bb2077979d0", 0xba}], 0x3}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000800)="cc5a4dbac0affd0a979c63ea8352d608a51fc8625318716ddf62b7752be4540c4ac7d344c53a3ad28313abc2437b60b03c0e587cafcf9a435bf90c618351f70a828238fdf90bc5d36c7d614b82552649954e0185662defd28f78449f073bad544f586136c5076a6f0f1b6fc9adf80557eb44db1b41824e9ef104c95e999766bbf27d74ad5d8fa63210cde65d384dd3e87c1fedaec3144d1ee66a0eb0750363e346cb930dae6109df6b9955bf8af119b5c9a86622af4ff8b5", 0xb8}], 0x1}}], 0x2, 0x2090) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r1, &(0x7f0000000f00)="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", 0xfd0, 0x4c840, 0x0, 0x0) 1m23.272617266s ago: executing program 4 (id=379): r0 = socket$kcm(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000141000001c00128009000100626f6e64000000000c00028005001f"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001600210a"], 0x20}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) r4 = socket(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8983, &(0x7f0000000480)={0x8, 'veth0_to_team\x00', {'pim6reg\x00'}, 0xfffc}) r7 = socket(0x10, 0x803, 0x2) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x1}}}, 0x24}}, 0x8d0) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002980)={&(0x7f00000028c0)=ANY=[@ANYRES32=r2, @ANYRES32=r6, @ANYBLOB="20a004001000000008001d00a9"], 0x28}, 0x1, 0x0, 0x0, 0x20040001}, 0x22000004) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r10) syz_io_uring_setup(0x1104, 0x0, &(0x7f00000001c0)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x70, 0x2, 0x1, 0x3, 0x0, 0x0, {0x0, 0x0, 0x3}, [@CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xf, 0x1, 'netbios-ns\x00'}}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x3}, @CTA_TUPLE_ORIG={0x40, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @local}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @rand_addr=0x64010101}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) r12 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000071000100000000000000000007000000", @ANYRES32=r13, @ANYBLOB="0c000180080001000300010020"], 0x44}}, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000400)={0x50, r8, 0x300, 0x70bd26, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r9}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x24000014) socket(0x21, 0x3, 0x0) 1m23.144996264s ago: executing program 4 (id=380): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) socket$kcm(0x29, 0x0, 0x0) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000a40)="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", 0x1000}], 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8040, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000040)={0x0, 0xffffffff, 0x1, 0x0, 0x90, "ff00f7000000000000000020af88008300"}) r2 = socket(0x10, 0x80003, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', r4, @fallback=0x8, r5}, 0x94) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="dc000000", @ANYRES16=r6, @ANYBLOB="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"], 0xdc}, 0x1, 0x0, 0x0, 0x44013}, 0x40000) syz_open_pts(r1, 0x141601) fcntl$setsig(r1, 0xa, 0x7) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f00000004c0)=ANY=[@ANYRES16=r7, @ANYRESHEX, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r9 = socket(0xa, 0x3, 0x3a) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r8, 0xff, 0xfffffffffffffffc, 0x17}) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) getsockopt$inet_IP_IPSEC_POLICY(r9, 0x0, 0x10, &(0x7f0000000900)={{{@in6=@ipv4={""/10, ""/2, @loopback}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast1}}, 0x0) quotactl_fd$Q_SETQUOTA(r10, 0xffffffff80000802, r11, &(0x7f0000000bc0)={0x1, 0x6, 0x7, 0x6, 0xffffffffffffffc0, 0x2, 0xdf4, 0x9, 0x8}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4e, 0x10000}, 0x28) setsockopt$MRT6_FLUSH(r9, 0x29, 0xd1, &(0x7f0000000000)=0x9, 0x4) setsockopt$MRT6_ADD_MIF(r9, 0x29, 0xca, &(0x7f0000000140)={0x1, 0x1, 0xfb, 0x0, 0x223d}, 0xc) 1m22.992018022s ago: executing program 4 (id=383): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x100000000000009, 0x3c033, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x8312, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x400000000, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3008046, &(0x7f0000001c00)={[{@dioread_nolock}, {@data_err_abort}, {@inlinecrypt}, {@journal_dev={'journal_dev', 0x3d, 0xd5b}}, {@data_err_ignore}, {@nodiscard}, {@user_xattr}, {@grpquota}, {@init_itable}, {@user_xattr}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@errors_remount}, {@lazytime}]}, 0x11, 0x556, &(0x7f00000005c0)="$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") perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000400)=0x0, &(0x7f0000000440)=0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0x58, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000e80)={'gretap0\x00', &(0x7f0000001500)={'gre0\x00', 0x0, 0x80, 0x80, 0x3, 0xc000, {{0x19, 0x4, 0x3, 0x8, 0x64, 0x67, 0x0, 0xa5, 0x2f, 0x0, @remote, @empty, {[@ssrr={0x89, 0x7, 0x4e, [@multicast2]}, @end, @cipso={0x86, 0x28, 0xffffffffffffffff, [{0x7, 0x10, "cd44adc7390263689c476daf54e7"}, {0x2, 0x5, "bfc2de"}, {0x1, 0x5, "47cd3c"}, {0x0, 0x8, "e8fca4e9da2e"}]}, @noop, @generic={0x44, 0x11, "2ccb74dcc7ba9274bf13a9646827e1"}, @ra={0x94, 0x4, 0x1}, @generic={0x44, 0x7, "5b44b6fdef"}]}}}}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000ec0)={'wg1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001640)={'syztnl0\x00', &(0x7f00000015c0)={'ip6tnl0\x00', 0x0, 0x29, 0x5, 0xf, 0x7, 0x27, @ipv4={'\x00', '\xff\xff', @multicast1}, @loopback, 0x20, 0x8000, 0x7, 0x4}}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000001680)={'vxcan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0xc, 0xb}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x8, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x4, 0x30}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000001840)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001800)={&(0x7f00000016c0)={0x140, 0x0, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5fce19b649e609c5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x20040040}, 0x4000) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f00000008c0)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@orlov}, {@abort}, {@nombcache}, {@stripe={'stripe', 0x3d, 0x10}}]}, 0x64, 0x50a, &(0x7f0000000940)="$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") r9 = syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x324a038, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) r10 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000380)={[{@acl}]}, 0x1, 0x561, &(0x7f0000000f80)="$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") sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="ac000000020602030000000000000000000008000000000000000940000000090500150004"], 0xac}, 0x1, 0x0, 0x0, 0x1}, 0x40000) r11 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDFONTOP_SET(r11, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0x8, 0xe, 0x200, &(0x7f0000003c40)="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"}) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r9, 0x660c) setxattr$incfs_metadata(&(0x7f0000000240)='./file1\x00', &(0x7f0000000000), &(0x7f00000002c0)="ff7f000000000000000000004406e8a5c812ca847e3bf9b837c91d46ab", 0x1d, 0x1) lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f0000000000)=ANY=[], 0x361, 0x0) 1m18.962567448s ago: executing program 1 (id=433): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) (async) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r1, 0x2, &(0x7f0000000180)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0xfffc, r0, 0x0}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x6, 0x5, r0, 0x0, 0x0, 0xfffffffffffffffa, 0x0, 0x1, r0}]) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000000200)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYRESDEC, @ANYBLOB="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", @ANYRESOCT], 0x8, 0x303, &(0x7f0000000880)="$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") (async) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000}}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x14, 0x36, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) (async, rerun: 64) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="58000000020605000000000000000000000000030c000300686173683a6970000900020073797a32000000000500040000000000050005000a000000050001000600000014000780080006400000000208000c"], 0x58}}, 0x20000000) (async, rerun: 64) r3 = socket$inet6(0xa, 0x2, 0x0) (async, rerun: 64) r4 = socket(0x10, 0x803, 0x0) (rerun: 64) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r4) (async) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000011008188040f80ec59acbc0413a181000a000000000100000010001f0e0027000f00000000800200121f", 0x2e}], 0x1}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000a400000000328000480080002400000001208000140"], 0xa4}}, 0x0) (async) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="580000001000370400"/20, @ANYRES32=r7, @ANYBLOB="8304050000000000380012800b000100697036746e6c000028000280050009000400000014000300"/50], 0x58}, 0x1, 0x0, 0x0, 0x9005}, 0x0) (async) sendmmsg$inet(r3, &(0x7f0000000880)=[{{&(0x7f0000000580)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) 1m18.835567615s ago: executing program 1 (id=436): syz_mount_image$iso9660(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x800000, &(0x7f0000000200)=ANY=[@ANYBLOB="75746638006d61703d6f983c756661703d6e6f726d616c2c6909000000f2ff00003dda5de4d586f0df206d65656b416d6f64653d3078303030303010303071303030303030302c73657373696f6e3d307830faffffff30303030303030f4e4b4f82c6d61736b3d4d4159574b50be30c8486470722677b93165cfe6f62127553b2017754598752d977369672c7063723d303030303030303030303030303030303030332c64566e745f6d6561737572652c00000000000000006bbf4d6406b59dbc529c00000000000000fada265ab14119997600a2299d2c35a2efc1bf037787a0d801f26d335ef2ba9ac2423a358ccbb776b21e1d3b", @ANYRESOCT, @ANYRES16], 0xfe, 0x686, &(0x7f0000001f80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) sched_setscheduler(r1, 0x3, &(0x7f0000000180)=0x9) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x8c, 0x0, 0x1, 0x401, 0x11, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xa, 0x1, 'Q.931\x00'}}, @CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x30}}, {0x8, 0x2, @broadcast}}}]}]}, 0x8c}}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 1m17.920654548s ago: executing program 1 (id=445): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[], 0xd4}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) socket$can_raw(0x1d, 0x3, 0x1) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @empty, 0x2}, 0x1c) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_emit_ethernet(0x56, &(0x7f0000000380)={@broadcast, @remote, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "f7d8ff", 0x20, 0x3c, 0x1, @local, @mcast2, {[@routing={0x4, 0x2, 0x0, 0x7, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}]}], {0x4e22, 0x0, 0x8}}}}}}, 0x0) setsockopt(r1, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$inet(0x2, 0x1, 0x0) pipe2(&(0x7f0000000080), 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000000201010100000000000000000200000004000180180002801400018008000100b04c94a708000a00ac03cdaa140019800800010004000000080002"], 0x44}, 0x1, 0x0, 0x0, 0x894}, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x20, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}], 0x1, 0x4001) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) dup2(r1, r5) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty, 0x4}], 0x1c) sendto$inet6(r5, &(0x7f0000000040)='l', 0x1, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000080)={r4, 0x2, 0x1, "fa"}, 0x9) sendto$inet6(r1, &(0x7f0000000180)="86", 0x1, 0x20000100, &(0x7f00000000c0)={0xa, 0x4e24, 0x8, @private0, 0x2}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r5, 0x84, 0x19, &(0x7f0000000140)={r4, 0x2}, 0x8) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x627be7e2365e9eab, 0x200000005c832, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000500000/0x2000)=nil, 0x2000, 0x17) r6 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$can_j1939(r6, &(0x7f00000004c0)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/54, 0x36}, {&(0x7f0000000100)}, {&(0x7f0000000140)=""/236, 0xec}, {&(0x7f0000000240)=""/70, 0x46}, {&(0x7f00000002c0)=""/162, 0xa2}], 0x5, &(0x7f0000000400)=""/170, 0xaa}, 0x10000) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r7, 0x89e3, &(0x7f0000000000)={0x58, 0x6, 0xb, 0xc, 0xae}) 1m17.828818384s ago: executing program 1 (id=446): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @remote}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) r2 = fspick(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x1) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000140)={0x2, 0xffffffffffffffbb, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x200, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x5, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r4, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc67000be4a17c", 0xb}, {&(0x7f0000000200)="2e450945f3", 0x5}], 0x2}, 0x600) mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x800008, &(0x7f0000000100)=ANY=[@ANYRES16=r4, @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRES8=r1]) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)) capset(0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000004880)=ANY=[@ANYBLOB="240000003c00bc01010000001ddcdf25037c000004008c820c0001800600060088470000"], 0x24}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x759, &(0x7f0000000380)={[{@noinit_itable}, {@jqfmt_vfsv1}, {@noload}, {@errors_remount}, {@i_version, 0x0}, {@noload}, {@usrquota}, {@grpquota}, {@noinit_itable}, {@acl}, {@usrjquota_path={'usrjquota', 0x3d, './file0'}}, {@jqfmt_vfsold}], [], 0x2c}, 0x0, 0x4f6, &(0x7f0000000c00)="$eJzs3EtvVFUcAPD/nbaUCtiKTx7KKBobjZSW58IFEE3YmJhoDC5rWwhSwNCaAGmkGAOJCw2fwMfOxE/gSjdGjQuNW4lbY0JMN6ALc82duVOnvZ2+mHYs/f2SGc6999w55z/3HuY8ZhrAulXOnpKIzRHxa0R0VzdnZihX/7kzNTH019TEUBJp+tqfSSXf7amJoVrW2nmb8o3eUkTpgyR2FIvtHLt0+czg6OjIhXxH33gpT50dPDVyauTcwOHD+/d1HTo4cKApcWZ1ur39vfM7tx1/88YrQyduvPX9l1l90/x4fRxVPZXnDYsuoa2wpxzlme9lnWcWX/U1YUtdOmnPnkutqwyLlt212eXqqLT/7mirbFV1x8vvt7RywIpK0zTtLOyd/iybTOslSfWENL2aAveAJFpdA6A1ah/0t6eykerEUHEcfG+7dTQqI6As7jv5o3qkvTKCLfdUx0YdK1T+QxFxYvLvT7JHzDkPAQDQXF8fjbh+rNrvqD2qR0rxSF2++/O1oZ6IeCAitkbEg3n/5eGISt5HI+KxunM2L2IVoDxru9j/+bkrT9R3V5sm6/+9mK9tzez/Tde8py3f2lKJvyM5eXp0ZG/+nvRGR2e23V986elptW9e+uXjRuWX6/p/2SMrv9YXzOvxR/usCbrhwfHBu4275tbVyht7pRh/Eu1JLRWxLSK2L+P1s/fs9HNf7Gx0fEb8WZyF+D9q/OLty6jQLOlnEc9Wr/9kzIo/8vW/pLI+efadvrFLl184Xb8+2X/o4MCBvo0xOrK3r3ZXFP3w07VX82RhGDHP9a81jRVdSMuu/31z3v/TK5c9WWp6vXZs6WVcu3m94Zhmuff/huT1Srq2PntxcHz8Qn/EhmSyuH/gv3MvDnbNyJ/F37t77va/NeKfT/PzdkREdhM/HhFPRMSuvO5PRsRTEbF7nvi/O/b0242GkAvHv7Ky+IeXdP0bJY78GDH3obYz335VKPjDciH+jmh0/fdXUr35nuHB8Y0LxTVfTesTd/0GAgAAwBqwqzJPm5T25BNNm6NU2rMnYtP0DMrY+PMnz797brg6n9sTHaXaTFd33Xxofz43nG1nZw3UbWfH91XmjdM0Tbuy7Wz8PrqltaHDurepQfvP/F78SQtwr1nSOlqjX7QBa9Ls9n9z0Wc2/wsZwOpqwvdogDVK+4f1a9Htf6V+BQe0zFzt/0rEnRZUBVhlc7X/Nwp7jqxKXYDVZfwP69fy278vA8Ba5/Mf1qVF/Uh+GYmtx+fJk7SvTKGNE6WY/68A9ETU9tT6NPO/4G+liObUsK2pkXbNuKalOfNsjGaUFaUF87Qv4Q8xrG6i9P+oRjXRGREL3L3TN9uVWuLySles0gg+b+3/TgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHfv3wAAAP//C4DT6g==") mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) lseek(r6, 0x2000, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2a05004, 0x0) chdir(&(0x7f0000000000)='./file0\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_ifreq(r7, 0x8949, &(0x7f0000000000)={'bond0\x00', @ifru_names='erspan0\x00'}) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00') 1m16.936455376s ago: executing program 1 (id=452): socket$inet_sctp(0x2, 0x1, 0x84) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000540)=0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x1c, r5, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x4008004) write$nci(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="414601"], 0x4) socket$can_raw(0x1d, 0x3, 0x1) close_range(r0, 0xffffffffffffffff, 0x3e00000000000000) 1m16.684193171s ago: executing program 1 (id=459): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000cea100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0xfffe, 0x7, @mcast2}, {0xa, 0x0, 0xb, @loopback={0xffffffffffffff9d}}, r1}}, 0x48) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000280)={0xc, 0x8, 0xfa00, {&(0x7f0000000600)}}, 0x10) 1m16.684061531s ago: executing program 32 (id=459): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000cea100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0xfffe, 0x7, @mcast2}, {0xa, 0x0, 0xb, @loopback={0xffffffffffffff9d}}, r1}}, 0x48) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000280)={0xc, 0x8, 0xfa00, {&(0x7f0000000600)}}, 0x10) 1m7.740486933s ago: executing program 33 (id=383): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x100000000000009, 0x3c033, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x8312, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x400000000, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3008046, &(0x7f0000001c00)={[{@dioread_nolock}, {@data_err_abort}, {@inlinecrypt}, {@journal_dev={'journal_dev', 0x3d, 0xd5b}}, {@data_err_ignore}, {@nodiscard}, {@user_xattr}, {@grpquota}, {@init_itable}, {@user_xattr}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@errors_remount}, {@lazytime}]}, 0x11, 0x556, &(0x7f00000005c0)="$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") perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000400)=0x0, &(0x7f0000000440)=0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0x58, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000e80)={'gretap0\x00', &(0x7f0000001500)={'gre0\x00', 0x0, 0x80, 0x80, 0x3, 0xc000, {{0x19, 0x4, 0x3, 0x8, 0x64, 0x67, 0x0, 0xa5, 0x2f, 0x0, @remote, @empty, {[@ssrr={0x89, 0x7, 0x4e, [@multicast2]}, @end, @cipso={0x86, 0x28, 0xffffffffffffffff, [{0x7, 0x10, "cd44adc7390263689c476daf54e7"}, {0x2, 0x5, "bfc2de"}, {0x1, 0x5, "47cd3c"}, {0x0, 0x8, "e8fca4e9da2e"}]}, @noop, @generic={0x44, 0x11, "2ccb74dcc7ba9274bf13a9646827e1"}, @ra={0x94, 0x4, 0x1}, @generic={0x44, 0x7, "5b44b6fdef"}]}}}}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000ec0)={'wg1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001640)={'syztnl0\x00', &(0x7f00000015c0)={'ip6tnl0\x00', 0x0, 0x29, 0x5, 0xf, 0x7, 0x27, @ipv4={'\x00', '\xff\xff', @multicast1}, @loopback, 0x20, 0x8000, 0x7, 0x4}}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000001680)={'vxcan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0xc, 0xb}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x8, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x4, 0x30}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000001840)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001800)={&(0x7f00000016c0)={0x140, 0x0, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5fce19b649e609c5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x20040040}, 0x4000) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f00000008c0)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@orlov}, {@abort}, {@nombcache}, {@stripe={'stripe', 0x3d, 0x10}}]}, 0x64, 0x50a, &(0x7f0000000940)="$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") r9 = syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x324a038, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) r10 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000380)={[{@acl}]}, 0x1, 0x561, &(0x7f0000000f80)="$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") sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="ac000000020602030000000000000000000008000000000000000940000000090500150004"], 0xac}, 0x1, 0x0, 0x0, 0x1}, 0x40000) r11 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDFONTOP_SET(r11, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0x8, 0xe, 0x200, &(0x7f0000003c40)="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"}) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r9, 0x660c) setxattr$incfs_metadata(&(0x7f0000000240)='./file1\x00', &(0x7f0000000000), &(0x7f00000002c0)="ff7f000000000000000000004406e8a5c812ca847e3bf9b837c91d46ab", 0x1d, 0x1) lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f0000000000)=ANY=[], 0x361, 0x0) 3.814418927s ago: executing program 2 (id=1082): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x800}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f00000002c0)={0x0, 'syzkaller0\x00', {0x1}, 0xb5}) r2 = socket$netlink(0x10, 0x3, 0x0) preadv(r0, &(0x7f0000000400)=[{&(0x7f0000000000)=""/28, 0x1c}], 0x1, 0x0, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="300000001000010025bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000040008000400cdff000008001b00"], 0x30}, 0x1, 0x0, 0x0, 0x810}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) 3.675857845s ago: executing program 2 (id=1084): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x80, 0x0, 0x7ffc1ffb}]}) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x55}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000fffe80000000000000101000007f0600080000000000000071273fa7b49301641184a907"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48) 3.610959809s ago: executing program 2 (id=1085): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x10, 0x78}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) syz_emit_ethernet(0x7a, &(0x7f0000004540)=ANY=[], 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0xc, 0x40008, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x1, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800011, 0x6, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r0, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, 0x0}, 0x0) sendmsg$tipc(r0, &(0x7f0000000380)={&(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x0, {0x40, 0x0, 0x2}}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000140)="14ec", 0x2}], 0x1, 0x0, 0x0, 0x20010080}, 0x50) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="8c00000010001fff28bd70000000800000000000", @ANYRES32=0x0, @ANYBLOB="efb00000800000006c0012800b00010062726964676500005c00028008000500010000000c002e"], 0x8c}, 0x1, 0x0, 0x0, 0x4000084}, 0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newqdisc={0x24, 0x10, 0x1, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0x3}, {}, {0xe, 0x12}}}, 0x24}, 0x1, 0x0, 0x0, 0x8b5}, 0x0) 3.306256947s ago: executing program 2 (id=1087): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000080)='configfs\x00', 0x200, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x6) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) pivot_root(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='./file0/file0\x00') 3.280335479s ago: executing program 2 (id=1088): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0xa000, 0x0) read$snapshot(r4, &(0x7f00000002c0)=""/249, 0xf9) r5 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r6, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r6], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1503, 0x4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 3.024242143s ago: executing program 2 (id=1090): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) setresuid(r1, r1, 0x0) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x181400, 0x301c765c0694ce90) syz_io_uring_setup(0x3445, &(0x7f0000000140)={0x0, 0x4e34, 0x2000, 0x2, 0x63, 0x0, r2}, &(0x7f00000001c0), &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) ioctl$VT_DISALLOCATE(r0, 0x5608) 3.023717324s ago: executing program 34 (id=1090): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) setresuid(r1, r1, 0x0) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x181400, 0x301c765c0694ce90) syz_io_uring_setup(0x3445, &(0x7f0000000140)={0x0, 0x4e34, 0x2000, 0x2, 0x63, 0x0, r2}, &(0x7f00000001c0), &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) ioctl$VT_DISALLOCATE(r0, 0x5608) 2.775415328s ago: executing program 5 (id=1097): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$TIOCMGET(r0, 0x5415, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x19) ioctl$TCFLSH(r1, 0x40085500, 0xfffffffffffffffe) ioctl$TCFLSH(r0, 0x400455c8, 0x0) syz_usb_connect(0x2, 0xfffffffffffffe86, 0x0, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000080)={0x0, @private, @empty}, &(0x7f00000000c0)=0xc) syz_emit_ethernet(0x46, &(0x7f00000004c0)={@local, @random="6cf6566994c6", @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x2d, 0x34, 0x0, 0x0, 0xa3, 0x6, 0x0, @remote, @local, {[@rr={0x7, 0xb, 0x9, [@multicast2, @loopback]}]}}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000180)={'filter\x00', 0x7, 0x4, 0x410, 0x240, 0x240, 0x240, 0x328, 0x328, 0x328, 0x4, &(0x7f0000000140), {[{{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x9, 0x1, 0x7, 0x0, 0x0, "bf88182e317358cccdbdab1e668ee46e7067e53ef81caf1f9f2fb8cbbcaac6de173373da3ed11d8562449cafadec17eef97578d28b948666342d0aa7dd5b3481"}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @broadcast, @empty, 0x8, 0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x240}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x460) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x4, 0x40, 0x2, @vifc_lcl_ifindex=r2, @multicast2}, 0x10) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) r3 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r3}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x800) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000002000000a70000000060a0b0400000000000000000200000044000480200001800e000100636f6e6e6c696d69740000000c000280080001400000000010000180090001006c61737400000000100001800a00010072656469720000000900010073797a30000000000900020073797a320000000014000000110001"], 0x98}, 0x1, 0x0, 0x0, 0x4000}, 0x0) close(r4) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000780)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000740)={&(0x7f0000000640)={0xc8, 0x0, 0x1, 0x801, 0x0, 0x0, {0x3, 0x0, 0x9}, [@CTA_SYNPROXY={0x4c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0xfffffff9}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x200}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x41}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x100}]}, @CTA_NAT_SRC={0x68, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @local}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x52, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x20}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @rand_addr=0x64010101}, @CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @loopback}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0xc}, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x50, 0x10, 0x401, 0x800000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4801, 0x15319}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'bond0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PEER_NOTIF_DELAY={0x8, 0x1c, 0x8}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) futex(&(0x7f0000000140), 0xc, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 2.173993183s ago: executing program 5 (id=1107): socket$inet_sctp(0x2, 0x1, 0x84) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000540)=0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x1c, r5, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x4008004) write$nci(r1, &(0x7f0000000480)=ANY=[@ANYBLOB='AF'], 0x4) socket$can_raw(0x1d, 0x3, 0x1) close_range(r0, 0xffffffffffffffff, 0x3e00000000000000) 2.095635738s ago: executing program 6 (id=1109): unshare(0x20000400) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f0000000040)={0x77359400}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_PORT={0x8}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x10}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x20048040) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x8, 0xffe, 0x1ff, 0x42000}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000005200010004000000000000001c00000014"], 0x28}}, 0x0) socket$netlink(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x28616, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000026}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x34, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x4e}, 0x0, 0x40000000}) r2 = syz_io_uring_setup(0x64d, &(0x7f00000006c0)={0x0, 0x11f8, 0x8, 0x0, 0x3b7}, &(0x7f0000000500)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, r2}) io_uring_enter(r2, 0xd12, 0xd9bd, 0x9, 0x0, 0x0) unshare(0x4010000) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x1, 0x1800000}, 0x28) r6 = bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000004440)=@base={0x14, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r5, 0x2, 0x1}, 0x48) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90324fc602f00001550000100053582c137153e370248018080351700d1bd", 0x33fe0}], 0x1}, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r6, &(0x7f0000001600), 0x0}, 0x20) 1.960433846s ago: executing program 6 (id=1110): r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0x48) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x6, 0x40, 0x3, 0x0, 0x4000000000, 0xd4, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x100882, 0x7ff, 0x6, 0x3, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r0) syz_io_uring_setup(0x332b, &(0x7f0000000400)={0x0, 0xb350, 0x800, 0x1, 0x10039}, 0x0, &(0x7f00000001c0)) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) fsopen(0x0, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000540)={0x0, 0xfffffffa, 0x8, 0xfffffff7}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x19}, 0x0, 0x20010, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff], 0x1}, 0x70) 1.759313637s ago: executing program 0 (id=1113): socket(0x2b, 0x800, 0x2001) memfd_create(&(0x7f0000000000)='%%\x00', 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x77359400}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x77359400}, &(0x7f0000001b40)) 1.638778044s ago: executing program 0 (id=1115): socket$netlink(0x10, 0x3, 0x0) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x2201, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xb, 0x4}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0xffffffffffffff98, 0x1, {0xa, 0x7f61, 0x1, 0x85, 0xe23, 0x1, 0x1, 0x7fff, 0x5}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x240080d0) sendmsg$nl_route_sched(r5, 0x0, 0x4008000) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r7 = syz_clone3(&(0x7f0000000580)={0x30800000, &(0x7f00000000c0), &(0x7f0000000140), &(0x7f0000000180), {0x36}, &(0x7f00000004c0)=""/153, 0x99, &(0x7f0000000600)=""/185, &(0x7f0000000200)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4, {r2}}, 0x58) r8 = syz_open_procfs(r7, &(0x7f0000000000)='status\x00') r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r9, &(0x7f0000000080)=ANY=[@ANYRES32=r8], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r9, 0x0) r10 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r10, 0x541c, &(0x7f0000000000)) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback, 0x0, 0x1, 0x6, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000280)={0x4, 0x0}, 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1c00000022000000", @ANYRES32, @ANYBLOB="38a62583a46ee0d0089fd7f80b1eb1cb5a934b81f5671cd9fafb9d926948acc8b4e977a58694974bd9119f55e1c6f23f074a2b7135f7a47f0b9634fa152a869c156dd90688fff4962f32eb584438676e87b4f545cfe857ae767a4398504a5948e43b2bc4f7fa567a633cefbc620b1e9836122a78c177715a4b48cb7f314926648bf5531c10dd5f85d52015202ea1dd75b0191577245f9251", @ANYRES32=r12, @ANYRES64=r11], 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="0e0000000001000000000000", @ANYRES64=r11], 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0], 0x0, 0x84, &(0x7f0000000240), 0x0, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0x4d, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000880)=ANY=[@ANYRES32=0x1, @ANYRES32, @ANYBLOB="1b00000081efe420e28fb831ca", @ANYRES32, @ANYBLOB, @ANYRES32=r13, @ANYRES64=r11], 0x20) r14 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x12, &(0x7f0000000340)=@raw=[@ldst={0x3, 0x1, 0x0, 0xb, 0x2, 0xc, 0x1}, @cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffffa}, @generic={0x6, 0xc, 0x0, 0x13, 0x7}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @map_val={0x18, 0x7, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @ldst={0x2, 0x4090fc460238bc25, 0x3, 0x0, 0x9, 0x30, 0xfffffffffffffffc}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffffc}], &(0x7f00000002c0)='GPL\x00', 0x4, 0xb0, &(0x7f00000006c0)=""/176, 0x40f00, 0xe, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000400)={0x2, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000780)=[{0x1, 0x2, 0x7}, {0x3, 0x2, 0xa, 0xa}]}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r0, 0x0, 0x25, 0x2, @val=@netkit={@void, @value=r14, @void, @void, r11}}, 0x1c) 1.528124361s ago: executing program 3 (id=1116): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe6}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvfrom$inet(r0, 0x0, 0x0, 0x40, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xf, 0x3, 0x2) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000440), 0x0, 0x40000) setsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, 0x0, 0x0) connect$bt_l2cap(r2, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4c, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) perf_event_open(0x0, 0x0, 0x804, 0xffffffffffffffff, 0x1) sched_setscheduler(0x0, 0x2, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x4) getpid() sched_setscheduler(0x0, 0x3, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet(0x2, 0x2, 0x0) r5 = socket(0x10, 0x3, 0x0) sendto$inet6(r5, &(0x7f0000000140)="7800000018002507b9409b14ffff00000204be04020b06050e020909430009003f00064c0a0000000d0085a168d0bf46d32345653600648d0a000500eb16000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160004000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x24040000, 0x0, 0x0) sendmsg$inet(r1, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x600) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000040)={r0, 0x9, 0xcdd, 0xff}) sendmmsg$inet(r0, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c42200fd9232f5aa6a361816bf21afb8473a064f1988536d4b5888807b3aaafaf59f53121782a0a9370dc0feae13c8c2a1dcc8a3122aaa3dcd5b9247a915378e6492e5b94073dcdc87e7c794fb262a7e9ee0b9432f74331c6e9412ac6557c54c6ac72bc24ff70ca2f8", 0xda}, {&(0x7f0000000a00)="145a977ce90bcec36cee68138cdb7c53108f9e6776eb08ce8c386ceb3ef2feba0afdcd6e04c99847b690d5148d8313f48a14b0418173a7b6a901d1903cd5d6eb2636c718aa1204b697a3dc3e564ef86e51", 0x51}, {&(0x7f0000000e00)="bfaff4f4485bc73c2c14fa76a76697938161b1a54e68d0412f2c369299d3d2a6d338972f6dd839e5c3087c6e61d959386b5a29aa0e181f8da9f47a25d9b5c94f1fd45daba5169918e54c7969700fc8c0d7513b4c9df33d3dbccf8d7077b1524bc28799d782ae94e68a2f2de8097bb55ae5795c6be07af87457d9ce99e5bd440d4f096a0f74da88f2a75895b0c390e38b11b62d3977cd8cd3127721cd0241f4effe4e43f0bf6506fa44aef9de83b58ab6f93883483bb2077979d086e9e2f1802241254c7611ac38ae7ca8c823991f43ef7dd50b51195654dc2f63895c913faf1b905a8d2e5c5442196db570bee035eb4bdd98bf2398f6", 0xf6}], 0x3}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000800)="cc5a4dbac0affd0a979c63ea8352d608a51fc8625318716ddf62b7752be4540c4ac7d344c53a3ad28313abc2437b60b03c0e587cafcf9a435bf90c618351f70a828238fdf90bc5d36c7d614b82552649954e0185662defd28f78449f073bad544f", 0x61}], 0x1}}], 0x2, 0x2090) 1.252172417s ago: executing program 5 (id=1117): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x10, 0x78}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) syz_emit_ethernet(0x7a, &(0x7f0000004540)=ANY=[@ANYBLOB], 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0xc, 0x40008, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x1, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800011, 0x6, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r0, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, 0x0}, 0x0) sendmsg$tipc(r0, &(0x7f0000000380)={&(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x0, {0x40, 0x0, 0x2}}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000140)="14ec", 0x2}], 0x1, 0x0, 0x0, 0x20010080}, 0x50) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="8c00000010001fff28bd70000000800000000000", @ANYRES32=0x0, @ANYBLOB="efb00000800000006c0012800b00010062726964676500005c00028008000500010000000c002e"], 0x8c}, 0x1, 0x0, 0x0, 0x4000084}, 0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newqdisc={0x24, 0x10, 0x1, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0x3}, {}, {0xe, 0x12}}}, 0x24}, 0x1, 0x0, 0x0, 0x8b5}, 0x0) 1.173140882s ago: executing program 5 (id=1118): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7fffffffffffffff, 0x3, &(0x7f0000006680)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x90, 0x4a, &(0x7f0000000000)) fdatasync(0xffffffffffffffff) 1.120301825s ago: executing program 0 (id=1119): r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000b80)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000c00)={0x60, 0x2, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0xfffffffeffffffff, 0x0, 0x300, 0x5, 0x8, 0x25, 0x50, 0x3b}) 1.120099505s ago: executing program 5 (id=1120): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000080)='configfs\x00', 0x200, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x6) unshare(0x4020600) pivot_root(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='./file0/file0\x00') 1.078171147s ago: executing program 0 (id=1121): perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x7, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x2412, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010026bd700000020000020000df0b00010001"], 0x20}}, 0x0) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xa43d, 0x80, 0x2, 0x3b9}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x0, &(0x7f0000000340)={[{@usrquota}, {@nojournal_checksum}]}, 0x21, 0x4bd, &(0x7f00000006c0)="$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") setuid(0xee00) r4 = creat(&(0x7f0000000000)='./file0/file0\x00', 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0x0, 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x13, 0x9, &(0x7f00000001c0)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x43}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94) 1.074577567s ago: executing program 5 (id=1122): syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x804818, &(0x7f0000000180)={[{@check_relaxed}, {@check_strict}, {@dmode={'dmode', 0x3d, 0xa7}}, {}, {@unhide}, {@nojoliet}, {@map_acorn}, {@nocompress}]}, 0x2, 0x553, &(0x7f0000000b00)="$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") openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x40040, 0x6ab858183a7ef6ba) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) listen(r0, 0x0) 907.287377ms ago: executing program 6 (id=1123): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7b}]}, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x6, 0x7}, 0x10, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x400, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0x2, 0x1) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000000)) set_mempolicy(0x3, &(0x7f0000000180)=0x9, 0x8) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000007d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) r4 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0xcd1d, 0x10100, 0x0, 0xffffffff}, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r4, 0x10, &(0x7f0000001880)={0x9, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001480)=""/142, 0x8e}, {&(0x7f0000001540)=""/189, 0xbd}, {&(0x7f0000001600)=""/170, 0xaa}, {&(0x7f00000001c0)=""/93, 0x5d}, {&(0x7f0000000280)=""/82, 0x52}, {&(0x7f0000002480)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/96, 0x60}, {&(0x7f00000016c0)=""/199, 0xc7}], &(0x7f0000001840)=[0x7, 0x8, 0xb], 0x8}, 0x20) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x0, 0x7}, 0x10) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000080)='cgroup.freeze\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) lseek(r7, 0x7, 0x4) mq_unlink(&(0x7f0000000000)='eth0\x00') sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a0000000c00", @ANYRES32=r5], 0x20}}, 0x0) 697.259689ms ago: executing program 6 (id=1124): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="911052000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000016c0)=@newsa={0x138, 0x10, 0x1, 0xfff7fffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in=@local, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xffdffffc, 0x40}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8253c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x1}, {0x2, 0x8}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) fcntl$lock(r2, 0x5, &(0x7f0000000100)={0x0, 0x0, 0x1e53f2ca, 0xcfd2, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x70bd2b, 0x2, {0x7, r4}, [@MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x0, 0x2, 0x0, {@ip4=@loopback}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000010}, 0x40080c0) 693.06016ms ago: executing program 0 (id=1133): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000034c0)=@nat={'nat\x00', 0x1b, 0x7fffffe, 0x348, 0x1378, 0x10d8, 0xffffffff, 0x10d8, 0x1200, 0x1470, 0x1470, 0xffffffff, 0x1470, 0x1470, 0x5, 0x0, {[{{@ip={@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffffff, 0xff, 'ip6erspan0\x00', 'ip6tnl0\x00', {0xff}, {0xff}, 0x6c, 0x7, 0x2}, 0x0, 0x70, 0xa8, 0x0, {0x0, 0x2000000}}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x25, @dev={0xac, 0x14, 0x14, 0x16}, @initdev={0xac, 0x1e, 0x0, 0x0}, @port=0x4e21, @gre_key=0xdaf}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x5, @multicast2, @dev={0xac, 0x14, 0x14, 0x2a}, @gre_key=0x49, @icmp_id=0x64}}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, 0x0, 0xffffff00, 'pim6reg\x00', 'dummy0\x00', {0xff}, {}, 0x32, 0x3, 0x74}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x1f, @ipv6=@private0, @ipv4=@loopback, @gre_key=0x7, @icmp_id=0x65}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x2f}, @local, 0xff, 0xffffffff, 'bond0\x00', 'dummy0\x00', {0xff}, {}, 0xc, 0x3, 0x26}, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x8, @local, @private=0xa010101, @gre_key=0x1, @gre_key=0x4}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a8) 474.944932ms ago: executing program 6 (id=1125): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x6000, 0x0, 0x600a4, 0x40}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x8840}, 0x8000) 396.050397ms ago: executing program 6 (id=1126): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = memfd_create(&(0x7f00000005c0)=' \xc76\xbe\x91\x8d\x182)!\x9a%\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00r\xbb\xdd\xe8\x87\x05=\xfb\x8b}\xfc\x1d\x03\xe1\xfcm\x9b\xf7fo\"i\xa1hk\x1f\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94T\x81@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f\x19\xf7]#\xed,\xc7\x11\tp\xf4\xa3\xee\x00\x00\x00\x00\'}\x18\xe8O\xa8#K\xb6\xe4U\x92\xd2\x9d\xb8?2\xc8\xe7kovd\xa4\x1bl+\x14\x17\x14\x17C2! U\x04:\xd93F\xb9\xfc\x1b\xfd}\x05\xf9\x11\xf3)>q\x10\xd3\xf0\xaf>\xf8t(bX\xe3g\x05\xfe\b\xbcy\x95*\xca\a\xaf\xbb\xf9\xc3Y\xa2\x91\x90.\xc8\xbe\xb0\xa6\xbd\xbd\xfd\xfaf*\xb2&\x82\xa0\x17\xe7)\xf5\xa2\xccv\n\x1b\xd4\xf4\x11*\xc9\xc6*\xa4.\x94[$\xb8\xb3Q\xde\xd8A\xa4~c,`\x02\xb8\x01r\x89\x82\x13\xd0}C7\xfb\xf2\tM\x1e\xe9\xa5\v\xc5\xba(\x89\xb0l\x92H\x1cR\x1f>\xc4ie\xe0B\xf0[\xe2\xe1\x12\x1d\x8fR&\xd1\xa6#\xda.\x0f\xd7\xd7\xa4\x90\x14\x92I\xf82&\x16<\xf2RR\xc2\x02.Q\xef\x85\xef\xf9\xe5\x00\xe9\xca\xb1\x8c\x11\x11l\x9f\xc8\b\xf7A\xa6\x81\xad\xdc\x95\xc8\xef\x102\xa8\x87\x01\x00\\\xfee \n0F\xbc\x85\xc5C\xd0\x99\xe4\t\xab`\'t\xc2\xe9\x13\xcag\xea\xb3\xb5\x92\x00J\xc6y\x05\xcc\xde\xa0\xf6\xb9 \xe5\xdd\f\x18\xfc\xe0\xc3(\xd8\xeb\x1a6\xe6\xfa\x93\xc07R\x0f-\x9e\xf3\x87E\xa3\xd5o\x1bA\x88L/\xe7>45Q?\be\x7f\xa9\x9a\xcae\xd8Y\xdf]\x1bS\x825\xcb\x00\xa4}\x97\x84T\xad\x9b\x1e!\x8a\xbc\x02+#Q\xa9 \xe9\x05r\xe1\xec\x0f\xa7\xe6Of\x95\x02{', 0x4) ftruncate(r1, 0x400000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r2, 0x11b, 0x1, &(0x7f0000000100), &(0x7f0000000180)=0x80) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_tcp(0x2, 0x1, 0x0) syz_usb_connect$uac1(0x5, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x2a606, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x7, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x40, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) r11 = socket$phonet(0x23, 0x2, 0x1) sendto$phonet(r11, 0x0, 0x5c, 0x0, &(0x7f0000000480)={0x23, 0x26, 0x3, 0x2d}, 0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) 210.613698ms ago: executing program 0 (id=1127): r0 = getpid() r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) 203.104878ms ago: executing program 3 (id=1128): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) syz_emit_ethernet(0xe, &(0x7f0000000e80)={@empty, @dev, @void, {@generic={0x88f5}}}, 0x0) msgctl$IPC_SET(0x0, 0x1, 0x0) r0 = msgget$private(0x0, 0xc1) msgctl$IPC_RMID(r0, 0x0) 104.243864ms ago: executing program 3 (id=1129): r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)={0x20c040, 0x0, 0x10}, 0x18) pipe(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0xcb, &(0x7f0000000380)={@local, @random="5f00b28da525", @val={@val={0x88a8, 0x4, 0x1}, {0x8100, 0x0, 0x0, 0x1}}, {@llc_tr={0x11, {@llc={0x42, 0xe, "37e2", "12311ce36084c624d73b1dcb6fb98b2f97ad0f08874447dfcec1346b1d5195024c2b573baf33f2610bd624358b5d90a42cf20167a0fec50793472f117838fef1f5464bfbd8258c6ee790dd20e0379de107953d03b8bd49ffc4bcd0630409bc8a49a654b028261c7f850ebff3a34c50ac945802a9ea2f73dc9bcf425f2d02440ea985ec254b2eb5931878f6be0190899e2a7c93060a263e2a66ced1259918f738c00b5925f5361943ff81f60543d0bddd57"}}}}}, &(0x7f0000000480)={0x1, 0x1, [0x545, 0x475, 0x1dc, 0x74b]}) fcntl$setpipe(r1, 0x407, 0x80000001) renameat2(r0, &(0x7f0000000200)='./file0\x00', r1, &(0x7f0000000280)='./file0\x00', 0x5) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x3) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000340)=@generic={&(0x7f0000000300)='./file0\x00', r2}, 0x18) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000014000103f7000000010000000ad27c42de5b7e770e6865408e2b4520bfa997706c69cff6b014c9029ebf841cad6a00c6e0522b4e8599330e0277d7bc7bdc0f9dd54f06ebc85f577bc58d80961037a5db356c4fea63d5dbf4edc2129474cbe11fd1a53de85be6360ce1d510241718420b3035d5a7f7bddcb039dba07709ac084c51acadfe521c5f51"], 0x14}}, 0x4014) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r4) 103.977844ms ago: executing program 3 (id=1130): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newsa={0x13c, 0x10, 0x413, 0xf0ffffff, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@rand_addr=' \x01\x00', 0xfffd, 0x0, 0x4e24, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee00}, {@in=@rand_addr=0x64010100, 0x20, 0x32}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {0x0, 0x7, 0x0, 0x4, 0x2000000000000000, 0x4, 0x20000000008}, {0x100000001, 0x8, 0xcc}, {0xf8}, 0x0, 0x4, 0x2, 0x0, 0x1}, [@algo_aead={0x4c, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0x0, 0x40}}]}, 0x13c}}, 0x844) 55.142937ms ago: executing program 3 (id=1131): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000080)='configfs\x00', 0x200, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x6) unshare(0x4020600) pivot_root(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='./file0/file0\x00') 0s ago: executing program 3 (id=1132): r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0xfffffffffffffffb}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x3, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x1d, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) dup2(r0, r2) kernel console output (not intermixed with test programs): [ 73.392578][ T4986] msdos: Unknown parameter 'cô¡UŒÁ…ã§ict' [ 73.638347][ T4986] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4986 comm=syz.3.487 [ 73.846468][ T5012] netlink: 'syz.5.490': attribute type 4 has an invalid length. [ 74.103964][ T5020] loop2: detected capacity change from 0 to 7 [ 74.131806][ T5020] tipc: Started in network mode [ 74.136780][ T5020] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 74.145738][ T5020] tipc: Enabling of bearer rejected, failed to enable media [ 74.386570][ T5041] loop2: detected capacity change from 0 to 128 [ 74.467377][ T3315] EXT4-fs (loop0): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 74.521318][ T5046] loop0: detected capacity change from 0 to 512 [ 74.559336][ T5046] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.495: bad orphan inode 15 [ 74.701629][ T5046] ext4_test_bit(bit=14, block=18) = 1 [ 74.707166][ T5046] is_bad_inode(inode)=0 [ 74.711444][ T5046] NEXT_ORPHAN(inode)=1023 [ 74.715793][ T5046] max_ino=32 [ 74.719161][ T5046] i_nlink=0 [ 74.788428][ T5046] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2972: inode #15: comm syz.0.495: corrupted xattr block 19: invalid header [ 74.819199][ T29] audit: type=1400 audit(1769311343.753:760): avc: denied { write } for pid=5091 comm="syz.3.497" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 74.842566][ T29] audit: type=1326 audit(1769311343.753:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5091 comm="syz.3.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f714751acb9 code=0x7ffc0000 [ 74.865960][ T29] audit: type=1326 audit(1769311343.753:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5091 comm="syz.3.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=166 compat=0 ip=0x7f714751acb9 code=0x7ffc0000 [ 74.890102][ T5093] netlink: 'syz.3.497': attribute type 13 has an invalid length. [ 74.953442][ T5046] EXT4-fs warning (device loop0): ext4_evict_inode:273: xattr delete (err -117) [ 74.963580][ T5093] gretap0: refused to change device tx_queue_len [ 74.970773][ T5093] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 74.988458][ T5103] netlink: 28 bytes leftover after parsing attributes in process `syz.5.498'. [ 75.005191][ T5046] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none. [ 75.020262][ T5046] ext4 filesystem being mounted at /99/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 75.053809][ T5046] netlink: 8 bytes leftover after parsing attributes in process `syz.0.495'. [ 75.094217][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0009-000000000000. [ 75.280147][ T5111] netlink: 44 bytes leftover after parsing attributes in process `syz.3.501'. [ 76.087682][ T5130] loop5: detected capacity change from 0 to 512 [ 76.101981][ T5130] EXT4-fs: Ignoring removed nomblk_io_submit option [ 76.148993][ T5130] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 76.172209][ T5130] System zones: 0-2, 18-18, 34-34 [ 76.188964][ T5130] EXT4-fs (loop5): orphan cleanup on readonly fs [ 76.233452][ T5130] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.507: bg 0: block 248: padding at end of block bitmap is not set [ 76.349381][ T5130] __quota_error: 26 callbacks suppressed [ 76.349404][ T5130] Quota error (device loop5): write_blk: dquota write failed [ 76.362632][ T5130] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 76.415759][ T5130] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.507: Failed to acquire dquot type 1 [ 76.438778][ T5135] loop2: detected capacity change from 0 to 128 [ 76.462568][ T5135] msdos: Unknown parameter 'cô¡UŒÁ…ã§ict' [ 76.507035][ T5130] EXT4-fs (loop5): 1 truncate cleaned up [ 76.538228][ T5130] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 76.630604][ T29] audit: type=1326 audit(1769311345.573:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5127 comm="syz.5.507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2b2e0acb9 code=0x7ffc0000 [ 76.708059][ T29] audit: type=1326 audit(1769311345.573:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5127 comm="syz.5.507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=122 compat=0 ip=0x7fc2b2e0acb9 code=0x7ffc0000 [ 76.731406][ T29] audit: type=1326 audit(1769311345.573:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5127 comm="syz.5.507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2b2e0acb9 code=0x7ffc0000 [ 76.754655][ T29] audit: type=1326 audit(1769311345.573:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5127 comm="syz.5.507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fc2b2e0acb9 code=0x7ffc0000 [ 76.777933][ T29] audit: type=1326 audit(1769311345.573:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5127 comm="syz.5.507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2b2e0acb9 code=0x7ffc0000 [ 76.801287][ T29] audit: type=1326 audit(1769311345.573:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5127 comm="syz.5.507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fc2b2e0acb9 code=0x7ffc0000 [ 76.824498][ T29] audit: type=1326 audit(1769311345.573:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5127 comm="syz.5.507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2b2e0acb9 code=0x7ffc0000 [ 76.847815][ T29] audit: type=1326 audit(1769311345.573:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5127 comm="syz.5.507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc2b2e0acb9 code=0x7ffc0000 [ 76.851525][ T5138] netlink: 'syz.0.508': attribute type 4 has an invalid length. [ 76.909162][ T4860] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.961407][ T5135] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5135 comm=syz.2.509 [ 77.199288][ T5153] netlink: 8 bytes leftover after parsing attributes in process `syz.2.516'. [ 77.229051][ T5152] loop5: detected capacity change from 0 to 512 [ 77.266715][ T5152] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 77.275977][ T5152] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 77.361378][ T5152] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 77.418533][ T5152] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 77.467481][ T5152] System zones: 0-2, 18-18, 34-35 [ 77.478076][ T5152] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.570460][ T4860] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.673944][ T5171] netlink: 'syz.3.519': attribute type 4 has an invalid length. [ 77.866716][ T5179] netlink: 8 bytes leftover after parsing attributes in process `syz.0.522'. [ 77.882034][ T5179] bond5: option ad_actor_sys_prio: invalid value (0) [ 77.889126][ T5179] bond5: option ad_actor_sys_prio: allowed values 1 - 65535 [ 78.023931][ T5183] loop5: detected capacity change from 0 to 512 [ 78.030605][ T5183] EXT4-fs: Ignoring removed nomblk_io_submit option [ 78.042597][ T5183] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 78.060190][ T5179] bond5 (unregistering): Released all slaves [ 78.074108][ T5183] System zones: 0-2, 18-18, 34-34 [ 78.093267][ T5183] EXT4-fs (loop5): orphan cleanup on readonly fs [ 78.113314][ T5183] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.523: bg 0: block 248: padding at end of block bitmap is not set [ 78.150600][ T5183] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.523: Failed to acquire dquot type 1 [ 78.231791][ T5183] EXT4-fs (loop5): 1 truncate cleaned up [ 78.262119][ T5183] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 78.324702][ T5194] netlink: 8 bytes leftover after parsing attributes in process `syz.0.526'. [ 78.339320][ T5194] bond5: option ad_actor_sys_prio: invalid value (0) [ 78.346122][ T5194] bond5: option ad_actor_sys_prio: allowed values 1 - 65535 [ 78.371646][ T5194] bond5 (unregistering): Released all slaves [ 78.445185][ T4860] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.523299][ T5203] loop2: detected capacity change from 0 to 2048 [ 78.542667][ T5203] EXT4-fs: Ignoring removed bh option [ 78.577076][ T5203] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.613514][ T5203] EXT4-fs (loop2): Online defrag not supported with bigalloc [ 78.684285][ T5186] chnl_net:caif_netlink_parms(): no params data found [ 78.801579][ T5186] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.808758][ T5186] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.822114][ T5186] bridge_slave_0: entered allmulticast mode [ 78.835648][ T5186] bridge_slave_0: entered promiscuous mode [ 78.853798][ T5186] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.861061][ T5186] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.874095][ T3346] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 78.889329][ T5186] bridge_slave_1: entered allmulticast mode [ 78.895965][ T3346] EXT4-fs (loop2): Delayed block allocation failed for inode 20 at logical offset 0 with max blocks 101 with error 28 [ 78.904586][ T5234] netlink: 'syz.0.532': attribute type 4 has an invalid length. [ 78.908743][ T3346] EXT4-fs (loop2): This should not happen!! Data will be lost [ 78.908743][ T3346] [ 78.925900][ T3346] EXT4-fs (loop2): Total free blocks count 0 [ 78.931945][ T3346] EXT4-fs (loop2): Free/Dirty block details [ 78.937888][ T3346] EXT4-fs (loop2): free_blocks=2415919104 [ 78.943630][ T3346] EXT4-fs (loop2): dirty_blocks=112 [ 78.948877][ T3346] EXT4-fs (loop2): Block reservation details [ 78.954879][ T3346] EXT4-fs (loop2): i_reserved_data_blocks=7 [ 78.963176][ T5186] bridge_slave_1: entered promiscuous mode [ 78.983498][ T5186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.994196][ T5186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.029760][ T5186] team0: Port device team_slave_0 added [ 79.036702][ T5186] team0: Port device team_slave_1 added [ 79.069410][ T5186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.076418][ T5186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.098079][ T5240] loop2: detected capacity change from 0 to 128 [ 79.102367][ T5186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.114352][ T5186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.126986][ T5186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.153042][ T5186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.183121][ T5186] hsr_slave_0: entered promiscuous mode [ 79.277327][ T5240] msdos: Unknown parameter 'cô¡UŒÁ…ã§ict' [ 79.410153][ T5186] hsr_slave_1: entered promiscuous mode [ 79.426392][ T5186] debugfs: 'hsr0' already exists in 'hsr' [ 79.432202][ T5186] Cannot create hsr debugfs directory [ 79.669228][ T5186] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 79.691252][ T5186] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 79.706330][ T5186] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 79.721074][ T5186] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 79.749878][ T5251] loop2: detected capacity change from 0 to 512 [ 79.758103][ T5251] EXT4-fs: Ignoring removed nomblk_io_submit option [ 79.811347][ T5251] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 79.841449][ T5251] System zones: 0-2, 18-18, 34-34 [ 79.846735][ T5251] EXT4-fs (loop2): orphan cleanup on readonly fs [ 79.867285][ T5266] pimreg: tun_chr_ioctl cmd 1074025677 [ 79.883623][ T5266] pimreg: linktype set to 780 [ 79.889943][ T5251] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.539: bg 0: block 248: padding at end of block bitmap is not set [ 79.909200][ T5251] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.539: Failed to acquire dquot type 1 [ 79.928550][ T5251] EXT4-fs (loop2): 1 truncate cleaned up [ 79.935332][ T5251] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 79.953189][ T5186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.970864][ T5266] netlink: 8 bytes leftover after parsing attributes in process `syz.3.542'. [ 79.984210][ T5186] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.007585][ T5266] vlan2: entered allmulticast mode [ 80.022997][ T5266] dummy0: entered allmulticast mode [ 80.048287][ T5266] batman_adv: batadv0: Adding interface: vlan2 [ 80.054604][ T5266] batman_adv: batadv0: The MTU of interface vlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.079822][ T5266] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 80.103994][ T5076] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.111222][ T5076] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.125558][ T580] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.132778][ T580] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.218958][ T5280] loop3: detected capacity change from 0 to 512 [ 80.239941][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.259429][ T5280] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.318972][ T5280] ext4 filesystem being mounted at /120/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.394536][ T5186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.404454][ T5291] loop0: detected capacity change from 0 to 128 [ 80.434381][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.446500][ T5291] msdos: Unknown parameter 'cô¡UŒÁ…ã§ict' [ 80.734396][ T5186] veth0_vlan: entered promiscuous mode [ 80.750567][ T5186] veth1_vlan: entered promiscuous mode [ 80.771290][ T5186] veth0_macvtap: entered promiscuous mode [ 80.779747][ T5186] veth1_macvtap: entered promiscuous mode [ 80.791521][ T5186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.809123][ T5186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.828069][ T5295] netlink: 84 bytes leftover after parsing attributes in process `syz.3.547'. [ 80.837047][ T5295] netlink: 'syz.3.547': attribute type 2 has an invalid length. [ 80.911904][ T580] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.967540][ T580] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.000764][ T580] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.030523][ T580] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.041769][ T5319] netlink: 'syz.2.545': attribute type 4 has an invalid length. [ 81.285952][ T5334] loop6: detected capacity change from 0 to 256 [ 81.348123][ C0] Illegal XDP return value 16128 on prog (id 156) dev bond_slave_1, expect packet loss! [ 81.468476][ T5341] netlink: 44 bytes leftover after parsing attributes in process `syz.0.556'. [ 81.655948][ T5348] loop3: detected capacity change from 0 to 128 [ 81.681865][ T5354] loop6: detected capacity change from 0 to 1024 [ 81.707038][ T5348] msdos: Unknown parameter 'cô¡UŒÁ…ã§ict' [ 81.711218][ T5354] EXT4-fs: Ignoring removed orlov option [ 81.736043][ T5356] EXT4-fs: Ignoring removed nomblk_io_submit option [ 81.745975][ T5354] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.779596][ T5356] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 81.790504][ T3306] loop5: p2 p3 p4 < > [ 81.794653][ T3306] loop5: p2 size 590592 extends beyond EOD, truncated [ 81.828824][ T5356] System zones: 0-2, 18-18, 34-34 [ 81.841635][ T5356] EXT4-fs (loop0): orphan cleanup on readonly fs [ 81.848664][ T3306] loop5: p3 start 589824 is beyond EOD, truncated [ 81.869986][ T5356] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.563: bg 0: block 248: padding at end of block bitmap is not set [ 81.907376][ T5186] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.917004][ T5352] loop5: p2 p3 p4 < > [ 81.921343][ T5352] loop5: p2 size 590592 extends beyond EOD, truncated [ 81.928820][ T5352] loop5: p3 start 589824 is beyond EOD, truncated [ 81.948081][ T5356] __quota_error: 109 callbacks suppressed [ 81.948101][ T5356] Quota error (device loop0): write_blk: dquota write failed [ 81.961407][ T5356] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 82.006438][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 82.010735][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 82.017103][ T5356] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.563: Failed to acquire dquot type 1 [ 82.074597][ T5365] EXT4-fs: Ignoring removed nomblk_io_submit option [ 82.094441][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 82.106214][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 82.114541][ T5365] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 82.126059][ T5367] netlink: 'syz.3.566': attribute type 15 has an invalid length. [ 82.133914][ T5367] netlink: 24 bytes leftover after parsing attributes in process `syz.3.566'. [ 82.146355][ T5365] System zones: 0-2, 18-18, 34-34 [ 82.159928][ T5356] EXT4-fs (loop0): 1 truncate cleaned up [ 82.176184][ T5356] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 82.188805][ T5367] IPVS: Scheduler module ip_vs_sip not found [ 82.195324][ T5365] EXT4-fs (loop6): orphan cleanup on readonly fs [ 82.210126][ T5365] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.564: bg 0: block 248: padding at end of block bitmap is not set [ 82.232419][ T29] audit: type=1326 audit(1769311607.173:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5355 comm="syz.0.563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f288a06acb9 code=0x7ffc0000 [ 82.255908][ T29] audit: type=1326 audit(1769311607.173:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5355 comm="syz.0.563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=122 compat=0 ip=0x7f288a06acb9 code=0x7ffc0000 [ 82.279197][ T29] audit: type=1326 audit(1769311607.173:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5355 comm="syz.0.563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f288a06acb9 code=0x7ffc0000 [ 82.302651][ T29] audit: type=1326 audit(1769311607.173:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5355 comm="syz.0.563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f288a06acb9 code=0x7ffc0000 [ 82.303624][ T5365] Quota error (device loop6): write_blk: dquota write failed [ 82.326064][ T29] audit: type=1326 audit(1769311607.173:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5355 comm="syz.0.563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f288a06acb9 code=0x7ffc0000 [ 82.333339][ T5365] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 82.356977][ T29] audit: type=1326 audit(1769311607.173:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5355 comm="syz.0.563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f288a06acb9 code=0x7ffc0000 [ 82.380910][ T5365] EXT4-fs error (device loop6): ext4_acquire_dquot:6986: comm syz.6.564: Failed to acquire dquot type 1 [ 82.421896][ T5365] EXT4-fs (loop6): 1 truncate cleaned up [ 82.433945][ T5365] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 82.500949][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.615789][ T5398] set_capacity_and_notify: 3 callbacks suppressed [ 82.615804][ T5398] loop5: detected capacity change from 0 to 512 [ 82.644923][ T5398] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.659770][ T5396] geneve2: entered promiscuous mode [ 82.659959][ T5398] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.678109][ T5403] FAULT_INJECTION: forcing a failure. [ 82.678109][ T5403] name failslab, interval 1, probability 0, space 0, times 0 [ 82.691017][ T5403] CPU: 1 UID: 0 PID: 5403 Comm: syz.0.574 Not tainted syzkaller #0 PREEMPT(voluntary) [ 82.691104][ T5403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 82.691120][ T5403] Call Trace: [ 82.691128][ T5403] [ 82.691137][ T5403] __dump_stack+0x1d/0x30 [ 82.691168][ T5403] dump_stack_lvl+0x95/0xd0 [ 82.691203][ T5403] dump_stack+0x15/0x1b [ 82.691229][ T5403] should_fail_ex+0x263/0x280 [ 82.691257][ T5403] should_failslab+0x8c/0xb0 [ 82.691291][ T5403] __kmalloc_cache_noprof+0x64/0x4a0 [ 82.691399][ T5403] ? sctp_add_bind_addr+0x71/0x1e0 [ 82.691427][ T5403] sctp_add_bind_addr+0x71/0x1e0 [ 82.691464][ T5403] sctp_do_bind+0x427/0x4b0 [ 82.691496][ T5403] sctp_connect_new_asoc+0x153/0x3a0 [ 82.691625][ T5403] __sctp_connect+0x424/0x7a0 [ 82.691662][ T5403] sctp_inet_connect+0xe8/0x110 [ 82.691690][ T5403] ? __pfx_sctp_inet_connect+0x10/0x10 [ 82.691762][ T5403] __sys_connect+0x1f1/0x2a0 [ 82.691794][ T5403] __x64_sys_connect+0x3f/0x50 [ 82.691817][ T5403] x64_sys_call+0x2e09/0x3000 [ 82.691850][ T5403] do_syscall_64+0xc0/0x2a0 [ 82.691886][ T5403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.691973][ T5403] RIP: 0033:0x7f288a06acb9 [ 82.691993][ T5403] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.692151][ T5403] RSP: 002b:00007f2888aa6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 82.692176][ T5403] RAX: ffffffffffffffda RBX: 00007f288a2e6090 RCX: 00007f288a06acb9 [ 82.692194][ T5403] RDX: 000000000000001c RSI: 0000200000000000 RDI: 0000000000000003 [ 82.692210][ T5403] RBP: 00007f2888aa6090 R08: 0000000000000000 R09: 0000000000000000 [ 82.692227][ T5403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 82.692295][ T5403] R13: 00007f288a2e6128 R14: 00007f288a2e6090 R15: 00007fff53bc9718 [ 82.692317][ T5403] [ 82.911877][ T4860] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.954562][ T5407] program syz.0.576 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 83.014056][ T5412] loop0: detected capacity change from 0 to 128 [ 83.104242][ T5412] bio_check_eod: 22773 callbacks suppressed [ 83.104259][ T5412] syz.0.578: attempt to access beyond end of device [ 83.104259][ T5412] loop0: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 83.123948][ T5412] syz.0.578: attempt to access beyond end of device [ 83.123948][ T5412] loop0: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 83.138013][ T5412] syz.0.578: attempt to access beyond end of device [ 83.138013][ T5412] loop0: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 83.151783][ T5412] syz.0.578: attempt to access beyond end of device [ 83.151783][ T5412] loop0: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 83.166517][ T5412] syz.0.578: attempt to access beyond end of device [ 83.166517][ T5412] loop0: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 83.192365][ T5412] syz.0.578: attempt to access beyond end of device [ 83.192365][ T5412] loop0: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 83.198484][ T5415] netlink: 'syz.5.577': attribute type 4 has an invalid length. [ 83.209610][ T5412] syz.0.578: attempt to access beyond end of device [ 83.209610][ T5412] loop0: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 83.227257][ T5412] syz.0.578: attempt to access beyond end of device [ 83.227257][ T5412] loop0: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 83.241053][ T5412] syz.0.578: attempt to access beyond end of device [ 83.241053][ T5412] loop0: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 83.257786][ T5412] syz.0.578: attempt to access beyond end of device [ 83.257786][ T5412] loop0: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 83.368017][ T5186] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.476051][ T5430] loop2: detected capacity change from 0 to 512 [ 83.498154][ T5430] EXT4-fs: Ignoring removed nomblk_io_submit option [ 83.535035][ T5430] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 83.559280][ T5430] System zones: 0-2, 18-18, 34-34 [ 83.564486][ T5430] EXT4-fs (loop2): orphan cleanup on readonly fs [ 83.600461][ T5430] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.583: bg 0: block 248: padding at end of block bitmap is not set [ 83.644537][ T5430] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.583: Failed to acquire dquot type 1 [ 83.681095][ T5430] EXT4-fs (loop2): 1 truncate cleaned up [ 83.702550][ T5430] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 83.789117][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.840663][ T5441] netlink: 28 bytes leftover after parsing attributes in process `syz.2.588'. [ 84.059646][ T5450] loop5: detected capacity change from 0 to 128 [ 84.105410][ T5450] msdos: Unknown parameter 'cô¡UŒÁ…ã§ict' [ 84.155345][ T5457] 8021q: adding VLAN 0 to HW filter on device bond5 [ 84.191747][ T5457] bond5: (slave batadv1): Opening slave failed [ 84.323515][ T5467] loop2: detected capacity change from 0 to 1024 [ 84.339582][ T5467] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 84.358740][ T5467] ext4 filesystem being mounted at /107/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.369776][ T5470] loop5: detected capacity change from 0 to 512 [ 84.381436][ T5467] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.596: bg 0: block 112: padding at end of block bitmap is not set [ 84.393788][ T5470] EXT4-fs: Ignoring removed nomblk_io_submit option [ 84.408182][ T5467] EXT4-fs (loop2): Remounting filesystem read-only [ 84.423466][ T5470] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 84.431619][ T5470] System zones: 0-2, 18-18, 34-34 [ 84.436976][ T5470] EXT4-fs (loop5): orphan cleanup on readonly fs [ 84.448478][ T5470] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.593: bg 0: block 248: padding at end of block bitmap is not set [ 84.463315][ T5470] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.593: Failed to acquire dquot type 1 [ 84.475734][ T5470] EXT4-fs (loop5): 1 truncate cleaned up [ 84.478728][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 84.493288][ T5470] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 84.620976][ T5483] loop2: detected capacity change from 0 to 512 [ 84.627804][ T5483] EXT4-fs: Ignoring removed nomblk_io_submit option [ 84.657119][ T5483] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 84.665412][ T5483] System zones: 0-2, 18-18, 34-34 [ 84.670793][ T5483] EXT4-fs (loop2): orphan cleanup on readonly fs [ 84.678853][ T5483] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.599: bg 0: block 248: padding at end of block bitmap is not set [ 84.694519][ T5483] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.599: Failed to acquire dquot type 1 [ 84.706488][ T5483] EXT4-fs (loop2): 1 truncate cleaned up [ 84.714979][ T5483] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 84.868114][ T5487] netlink: 'syz.0.601': attribute type 4 has an invalid length. [ 84.880498][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.898005][ T5488] syz_tun: entered promiscuous mode [ 84.903306][ T5488] vlan3: entered promiscuous mode [ 84.918646][ T5493] netlink: 120 bytes leftover after parsing attributes in process `syz.6.605'. [ 84.989574][ T4860] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.044340][ T5498] loop3: detected capacity change from 0 to 1024 [ 85.052141][ T5498] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 85.104229][ T5502] 8021q: adding VLAN 0 to HW filter on device bond1 [ 85.192185][ T5502] bond1: (slave batadv1): Opening slave failed [ 85.386931][ T5529] loop3: detected capacity change from 0 to 512 [ 85.393627][ T5529] EXT4-fs: Ignoring removed nomblk_io_submit option [ 85.409971][ T5529] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 85.428412][ T5529] System zones: 0-2, 18-18, 34-34 [ 85.433816][ T5529] EXT4-fs (loop3): orphan cleanup on readonly fs [ 85.477944][ T5529] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.615: bg 0: block 248: padding at end of block bitmap is not set [ 85.507806][ T5529] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.615: Failed to acquire dquot type 1 [ 85.558207][ T5529] EXT4-fs (loop3): 1 truncate cleaned up [ 85.564671][ T5529] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 85.653342][ T5538] netlink: 'syz.0.616': attribute type 15 has an invalid length. [ 85.661182][ T5538] netlink: 24 bytes leftover after parsing attributes in process `syz.0.616'. [ 85.765818][ T5541] loop6: detected capacity change from 0 to 8192 [ 85.823034][ T5541] tc_dump_action: action bad kind [ 86.211021][ T5544] tmpfs: Bad value for 'mpol' [ 86.216724][ T5544] netlink: 68 bytes leftover after parsing attributes in process `syz.2.620'. [ 86.251513][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.407516][ T5564] EXT4-fs (loop2): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.476347][ T5569] msdos: Unknown parameter 'cô¡UŒÁ…ã§ict' [ 86.513459][ T5564] EXT4-fs error (device loop2): htree_dirblock_to_tree:1051: inode #2: comm syz.2.626: Directory hole found for htree leaf block 0 [ 86.549229][ T5564] EXT4-fs (loop2): Remounting filesystem read-only [ 86.587306][ T3316] EXT4-fs (loop2): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 86.630896][ T5572] netlink: 8 bytes leftover after parsing attributes in process `syz.0.628'. [ 86.639867][ T5572] netlink: 32 bytes leftover after parsing attributes in process `syz.0.628'. [ 86.648813][ T5572] netlink: 8 bytes leftover after parsing attributes in process `syz.0.628'. [ 86.657667][ T5572] netlink: 2 bytes leftover after parsing attributes in process `syz.0.628'. [ 86.712165][ T5572] netlink: 32 bytes leftover after parsing attributes in process `syz.0.628'. [ 86.902731][ T5587] netlink: 8 bytes leftover after parsing attributes in process `syz.5.632'. [ 87.010097][ T5589] 8021q: adding VLAN 0 to HW filter on device bond2 [ 87.325394][ T29] kauditd_printk_skb: 188 callbacks suppressed [ 87.325414][ T29] audit: type=1400 audit(1769311868.258:1088): avc: denied { validate_trans } for pid=5599 comm="syz.6.636" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 87.362864][ T5602] tmpfs: Bad value for 'mpol' [ 87.457039][ T5608] msdos: Unknown parameter 'cô¡UŒÁ…ã§ict' [ 87.571630][ T5611] IPVS: Scheduler module ip_vs_ not found [ 87.622178][ T5621] netlink: 'syz.2.643': attribute type 1 has an invalid length. [ 87.630012][ T5621] netlink: 'syz.2.643': attribute type 2 has an invalid length. [ 87.733275][ T5608] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5608 comm=syz.0.640 [ 87.733346][ T5630] tmpfs: Bad value for 'mpol' [ 87.828052][ T5637] set_capacity_and_notify: 4 callbacks suppressed [ 87.828067][ T5637] loop0: detected capacity change from 0 to 256 [ 87.843149][ T5627] loop2: detected capacity change from 0 to 512 [ 87.848554][ T29] audit: type=1400 audit(1769311868.768:1089): avc: denied { accept } for pid=5623 comm="syz.2.647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 87.869634][ T5627] EXT4-fs: Ignoring removed oldalloc option [ 87.892547][ T5638] netlink: 'syz.5.650': attribute type 15 has an invalid length. [ 87.915750][ T5627] EXT4-fs error (device loop2): ext4_xattr_inode_iget:437: comm syz.2.647: Parent and EA inode have the same ino 15 [ 87.950775][ T5627] EXT4-fs error (device loop2): ext4_xattr_inode_iget:437: comm syz.2.647: Parent and EA inode have the same ino 15 [ 87.974173][ T5627] EXT4-fs (loop2): 1 orphan inode deleted [ 87.982855][ T5627] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.006220][ T29] audit: type=1400 audit(1769311868.938:1090): avc: denied { allowed } for pid=5644 comm="syz.3.652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 88.072874][ T29] audit: type=1326 audit(1769311869.008:1091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5646 comm="syz.0.653" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f288a06acb9 code=0x0 [ 88.148188][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.173539][ T5652] loop2: detected capacity change from 0 to 1024 [ 88.180936][ T29] audit: type=1400 audit(1769311869.118:1092): avc: denied { create } for pid=5649 comm="syz.5.654" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_dnrt_socket permissive=1 [ 88.202477][ T5652] EXT4-fs: Ignoring removed bh option [ 88.210681][ T5652] EXT4-fs: Ignoring removed nobh option [ 88.224418][ T5652] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.258274][ T5653] loop5: detected capacity change from 0 to 8192 [ 88.268610][ T5653] vfat: Unknown parameter '' [ 88.300724][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.546876][ T29] audit: type=1400 audit(1769311869.478:1093): avc: denied { execute } for pid=5677 comm="syz.6.664" path="/21/pids.current" dev="tmpfs" ino=131 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 88.650098][ T5682] netlink: 'syz.6.665': attribute type 15 has an invalid length. [ 88.681281][ T29] audit: type=1400 audit(1769311869.618:1094): avc: denied { accept } for pid=5683 comm="syz.3.666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 88.723175][ T29] audit: type=1400 audit(1769311869.658:1095): avc: denied { sqpoll } for pid=5683 comm="syz.3.666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 88.797940][ T29] audit: type=1400 audit(1769311869.728:1096): avc: denied { create } for pid=5687 comm="syz.3.667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 88.818495][ T5688] loop3: detected capacity change from 0 to 512 [ 88.834169][ T5688] EXT4-fs: Ignoring removed orlov option [ 88.840070][ T5688] EXT4-fs: Ignoring removed i_version option [ 88.846098][ T5688] EXT4-fs: Ignoring removed nomblk_io_submit option [ 88.886064][ T5688] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 88.894092][ T5688] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c040e118, mo2=0002] [ 88.920610][ T5688] EXT4-fs (loop3): orphan cleanup on readonly fs [ 88.935966][ T5688] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=0 [ 88.947822][ T5688] EXT4-fs warning (device loop3): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 88.962455][ T5688] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 88.987289][ T5688] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.667: bg 0: block 40: padding at end of block bitmap is not set [ 89.036004][ T5688] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 89.072356][ T5688] EXT4-fs (loop3): 1 truncate cleaned up [ 89.072819][ T5688] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 89.100253][ T5688] lo: entered allmulticast mode [ 89.140087][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.144078][ T5701] loop0: detected capacity change from 0 to 512 [ 89.218803][ T5705] __nla_validate_parse: 9 callbacks suppressed [ 89.218822][ T5705] netlink: 68 bytes leftover after parsing attributes in process `syz.3.673'. [ 89.286370][ T5701] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.314037][ T5713] netlink: 24 bytes leftover after parsing attributes in process `syz.2.676'. [ 89.390123][ T5701] ext4 filesystem being mounted at /136/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.413205][ T5717] netlink: 24 bytes leftover after parsing attributes in process `syz.6.677'. [ 89.441798][ T5713] loop2: detected capacity change from 0 to 256 [ 89.461258][ T5720] netlink: 4 bytes leftover after parsing attributes in process `syz.3.680'. [ 89.485693][ T5721] x_tables: ip_tables: dccp match: only valid for protocol 33 [ 89.497835][ T5720] netlink: 4 bytes leftover after parsing attributes in process `syz.3.680'. [ 89.508846][ T5717] loop6: detected capacity change from 0 to 256 [ 89.517844][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.621335][ T5728] program syz.3.683 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 89.654069][ T5731] batman_adv: batadv0: Adding interface: dummy0 [ 89.660508][ T5731] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.747532][ T5731] batman_adv: batadv0: Interface activated: dummy0 [ 89.796546][ T5736] loop3: detected capacity change from 0 to 512 [ 89.824262][ T5736] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.687: bad orphan inode 13 [ 89.858996][ T5734] loop5: detected capacity change from 0 to 128 [ 89.933691][ T5736] ext4_test_bit(bit=12, block=4) = 1 [ 89.939075][ T5736] is_bad_inode(inode)=0 [ 89.943263][ T5736] NEXT_ORPHAN(inode)=0 [ 89.947418][ T5736] max_ino=32 [ 89.950749][ T5736] i_nlink=1 [ 89.983010][ T5742] msdos: Unknown parameter 'cô¡UŒÁ…ã§ict' [ 90.008452][ T5736] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.062512][ T5743] msdos: Unknown parameter 'cô¡UŒÁ…ã§ict' [ 90.080435][ T5736] netlink: 4 bytes leftover after parsing attributes in process `syz.3.687'. [ 90.197586][ T5736] netlink: 4 bytes leftover after parsing attributes in process `syz.3.687'. [ 90.259287][ T5721] can0: slcan on ttyS3. [ 90.336002][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.369987][ T5752] netlink: 24 bytes leftover after parsing attributes in process `syz.0.692'. [ 90.462239][ T5742] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5742 comm=syz.6.689 [ 90.514457][ T5757] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #3: comm syz.0.694: corrupted inode contents [ 90.590027][ T5757] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #3: comm syz.0.694: mark_inode_dirty error [ 90.647897][ T5757] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #3: comm syz.0.694: corrupted inode contents [ 90.683485][ T5743] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5743 comm=syz.2.688 [ 90.730277][ T5757] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #3: comm syz.0.694: mark_inode_dirty error [ 90.767964][ T5757] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.694: Failed to acquire dquot type 0 [ 90.800020][ T5757] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #16: comm syz.0.694: corrupted inode contents [ 90.840068][ T5757] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #16: comm syz.0.694: mark_inode_dirty error [ 90.872080][ T5757] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #16: comm syz.0.694: corrupted inode contents [ 90.900019][ T5757] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.694: mark_inode_dirty error [ 90.912841][ T5718] can0 (unregistered): slcan off ttyS3. [ 90.980141][ T5757] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #16: comm syz.0.694: corrupted inode contents [ 91.034053][ T5757] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 91.061401][ T5757] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #16: comm syz.0.694: corrupted inode contents [ 91.094101][ T5757] EXT4-fs error (device loop0): ext4_truncate:4635: inode #16: comm syz.0.694: mark_inode_dirty error [ 91.127603][ T5757] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 91.151934][ T5757] EXT4-fs (loop0): 1 truncate cleaned up [ 91.168949][ T5757] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.203007][ T5757] ext4 filesystem being mounted at /143/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.248259][ T5796] EXT4-fs (loop5): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.341548][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.366106][ T5796] EXT4-fs error (device loop5): htree_dirblock_to_tree:1051: inode #2: comm syz.5.698: Directory hole found for htree leaf block 0 [ 91.421856][ T5808] msdos: Unknown parameter 'cô¡UŒÁ…ã§ict' [ 91.438542][ T5796] EXT4-fs (loop5): Remounting filesystem read-only [ 91.518977][ T4860] EXT4-fs (loop5): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 91.528860][ T5819] netlink: 'syz.3.704': attribute type 1 has an invalid length. [ 91.584053][ T5820] delete_channel: no stack [ 91.599086][ T5825] EXT4-fs (loop0): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.627286][ T5819] bond3: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 91.759958][ T5830] netlink: 24 bytes leftover after parsing attributes in process `syz.5.705'. [ 91.844624][ T5834] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 91.867790][ T3315] EXT4-fs (loop0): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 91.936543][ T5840] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 91.958627][ T5840] vhci_hcd vhci_hcd.2: invalid port number 96 [ 91.964788][ T5840] vhci_hcd vhci_hcd.2: default hub control req: 0311 v0005 i0060 l7 [ 92.065301][ T5858] program syz.0.712 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 92.183264][ T5866] msdos: Unknown parameter 'cô¡UŒÁ…ã§ict' [ 92.196035][ T5871] netlink: 24 bytes leftover after parsing attributes in process `syz.6.717'. [ 92.276269][ T5873] EXT4-fs: Ignoring removed oldalloc option [ 92.314179][ T5873] EXT4-fs: Ignoring removed orlov option [ 92.456502][ T5873] EXT4-fs (loop2): failed to open journal device unknown-block(0,0) -6 [ 92.483907][ T5880] msdos: Unknown parameter 'cô¡UŒÁ…ã§ict' [ 92.514937][ T5883] EXT4-fs: dax option not supported [ 92.843985][ T5866] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5866 comm=syz.3.713 [ 92.872792][ T5880] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5880 comm=syz.0.720 [ 93.021375][ T5890] set_capacity_and_notify: 15 callbacks suppressed [ 93.021418][ T5890] loop5: detected capacity change from 0 to 128 [ 93.046889][ T29] kauditd_printk_skb: 57 callbacks suppressed [ 93.046907][ T29] audit: type=1400 audit(1769311873.978:1152): avc: denied { getopt } for pid=5892 comm="syz.3.726" lport=135 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 93.050110][ T5890] msdos: Unknown parameter 'cô¡UŒÁ…ã§ict' [ 93.165847][ T5896] program syz.3.727 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 93.194827][ T5898] loop6: detected capacity change from 0 to 512 [ 93.238438][ T5898] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz.6.728: bad orphan inode 13 [ 93.272923][ T5904] loop2: detected capacity change from 0 to 512 [ 93.284569][ T5898] ext4_test_bit(bit=12, block=4) = 1 [ 93.289968][ T5898] is_bad_inode(inode)=0 [ 93.294384][ T5898] NEXT_ORPHAN(inode)=0 [ 93.298579][ T5898] max_ino=32 [ 93.301805][ T5898] i_nlink=1 [ 93.316023][ T5904] EXT4-fs: Ignoring removed nomblk_io_submit option [ 93.345949][ T5904] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 93.358024][ T5898] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.364461][ T5904] System zones: 0-2, 18-18, 34-34 [ 93.401488][ T5904] EXT4-fs (loop2): orphan cleanup on readonly fs [ 93.413173][ T5904] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.730: bg 0: block 248: padding at end of block bitmap is not set [ 93.436674][ T5904] Quota error (device loop2): write_blk: dquota write failed [ 93.444260][ T5904] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 93.467571][ T5904] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.730: Failed to acquire dquot type 1 [ 93.532366][ T5186] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.541946][ T5904] EXT4-fs (loop2): 1 truncate cleaned up [ 93.558950][ T5912] loop5: detected capacity change from 0 to 128 [ 93.561888][ T5904] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 93.602028][ T5914] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.612476][ T5912] msdos: Unknown parameter 'cô¡UŒÁ…ã§ict' [ 93.633567][ T5916] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 93.656951][ T5914] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.712416][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.722264][ T5919] 8021q: adding VLAN 0 to HW filter on device bond4 [ 93.757917][ T5914] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.792507][ T29] audit: type=1326 audit(1769311874.728:1153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5913 comm="syz.6.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1ceb4acb9 code=0x7ffc0000 [ 93.841024][ T29] audit: type=1326 audit(1769311874.758:1154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5913 comm="syz.6.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1ceb4acb9 code=0x7ffc0000 [ 93.864741][ T29] audit: type=1326 audit(1769311874.758:1155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5913 comm="syz.6.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd1ceb4acb9 code=0x7ffc0000 [ 93.889386][ T29] audit: type=1326 audit(1769311874.758:1156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5913 comm="syz.6.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1ceb4acb9 code=0x7ffc0000 [ 93.913232][ T29] audit: type=1326 audit(1769311874.758:1157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5913 comm="syz.6.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1ceb4acb9 code=0x7ffc0000 [ 93.936685][ T29] audit: type=1326 audit(1769311874.758:1158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5913 comm="syz.6.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1ceb4acb9 code=0x7ffc0000 [ 93.960133][ T29] audit: type=1326 audit(1769311874.758:1159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5913 comm="syz.6.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1ceb4acb9 code=0x7ffc0000 [ 93.987452][ T5933] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5933 comm=syz.5.734 [ 94.011129][ T5914] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.057285][ T5938] netlink: 'syz.2.742': attribute type 5 has an invalid length. [ 94.084964][ T5076] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.097950][ T5076] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.111000][ T5076] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.121546][ T5946] loop2: detected capacity change from 0 to 512 [ 94.143413][ T5076] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.169332][ T5946] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.206492][ T5946] ext4 filesystem being mounted at /140/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.209370][ T5956] SELinux: policydb magic number 0x400 does not match expected magic number 0xf97cff8c [ 94.226987][ T5956] SELinux: failed to load policy [ 94.233272][ T5956] __nla_validate_parse: 4 callbacks suppressed [ 94.233302][ T5956] netlink: 20 bytes leftover after parsing attributes in process `syz.0.746'. [ 94.285657][ T5946] netlink: 8 bytes leftover after parsing attributes in process `syz.2.742'. [ 94.294707][ T5946] netlink: 12 bytes leftover after parsing attributes in process `syz.2.742'. [ 94.307768][ T5946] geneve2: entered promiscuous mode [ 94.313036][ T5946] geneve2: entered allmulticast mode [ 94.459939][ T5971] netlink: 20 bytes leftover after parsing attributes in process `syz.6.751'. [ 94.469652][ T5971] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=5971 comm=syz.6.751 [ 94.514793][ T5976] netlink: 24 bytes leftover after parsing attributes in process `syz.6.752'. [ 94.539545][ T5976] loop6: detected capacity change from 0 to 256 [ 94.630304][ T5982] loop6: detected capacity change from 0 to 128 [ 94.653509][ T5982] msdos: Unknown parameter 'cô¡UŒÁ…ã§ict' [ 94.849858][ T5994] loop0: detected capacity change from 0 to 512 [ 94.869023][ T5994] EXT4-fs: Ignoring removed nobh option [ 94.924301][ T5994] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.982143][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.992033][ T5982] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5982 comm=syz.6.755 [ 95.013071][ T5994] ext4 filesystem being mounted at /158/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 95.024727][ T5994] EXT4-fs error (device loop0): ext4_lookup:1785: inode #12: comm syz.0.760: iget: bad i_size value: 2533274857506816 [ 95.042236][ T5994] EXT4-fs error (device loop0): ext4_lookup:1785: inode #12: comm syz.0.760: iget: bad i_size value: 2533274857506816 [ 95.065318][ T5994] EXT4-fs error (device loop0): ext4_lookup:1785: inode #12: comm syz.0.760: iget: bad i_size value: 2533274857506816 [ 95.105319][ T6010] lo speed is unknown, defaulting to 1000 [ 95.120268][ T6010] lo speed is unknown, defaulting to 1000 [ 95.127921][ T6010] lo speed is unknown, defaulting to 1000 [ 95.140335][ T5994] EXT4-fs error (device loop0): ext4_find_dest_de:2050: inode #2: block 3: comm syz.0.760: bad entry in directory: inode out of bounds - offset=92, inode=117440528, rec_len=16, size=2048 fake=0 [ 95.170093][ T6010] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 95.203101][ T6010] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 95.220350][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.232263][ T6017] 8021q: adding VLAN 0 to HW filter on device bond1 [ 95.245631][ T6010] lo speed is unknown, defaulting to 1000 [ 95.284269][ T6010] lo speed is unknown, defaulting to 1000 [ 95.318942][ T6010] lo speed is unknown, defaulting to 1000 [ 95.335318][ T6010] lo speed is unknown, defaulting to 1000 [ 95.341621][ T6010] lo speed is unknown, defaulting to 1000 [ 95.376281][ T6010] lo speed is unknown, defaulting to 1000 [ 95.382655][ T6010] lo speed is unknown, defaulting to 1000 [ 95.405161][ T6003] loop3: detected capacity change from 0 to 8192 [ 95.451604][ T6026] loop6: detected capacity change from 0 to 8192 [ 95.507769][ T3305] loop6: p1 p2 p3 p4 [ 95.514133][ T3305] loop6: p1 size 262144 extends beyond EOD, truncated [ 95.529133][ T3305] loop6: p2 start 2531787010 is beyond EOD, truncated [ 95.535980][ T3305] loop6: p3 size 100663552 extends beyond EOD, truncated [ 95.549844][ T3305] loop6: p4 size 50331648 extends beyond EOD, truncated [ 95.584140][ T6026] loop6: p1 p2 p3 p4 [ 95.588486][ T6026] loop6: p1 size 262144 extends beyond EOD, truncated [ 95.596769][ T6026] loop6: p2 start 2531787010 is beyond EOD, truncated [ 95.603755][ T6026] loop6: p3 size 100663552 extends beyond EOD, truncated [ 95.621504][ T6026] loop6: p4 size 50331648 extends beyond EOD, truncated [ 95.660292][ T6042] EXT4-fs (loop0): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.683615][ T6042] EXT4-fs error (device loop0): htree_dirblock_to_tree:1051: inode #2: comm syz.0.770: Directory hole found for htree leaf block 0 [ 95.708277][ T6042] EXT4-fs (loop0): Remounting filesystem read-only [ 95.717650][ T6041] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.770623][ T6041] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.793513][ T3315] EXT4-fs (loop0): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 96.011113][ T6053] tmpfs: Bad value for 'mpol' [ 96.016798][ T6053] netlink: 68 bytes leftover after parsing attributes in process `syz.2.773'. [ 96.035887][ T6053] netlink: 4 bytes leftover after parsing attributes in process `syz.2.773'. [ 96.049574][ T6051] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 96.321498][ T6069] netlink: 24 bytes leftover after parsing attributes in process `syz.3.778'. [ 96.387100][ T6077] EXT4-fs: Ignoring removed i_version option [ 96.397892][ T6079] netlink: 8 bytes leftover after parsing attributes in process `syz.6.780'. [ 96.406757][ T6079] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 96.417561][ T6077] EXT4-fs: Ignoring removed mblk_io_submit option [ 96.424190][ T6077] EXT4-fs: Ignoring removed bh option [ 96.438585][ T6080] sg_read: process 386 (syz.2.777) changed security contexts after opening file descriptor, this is not allowed. [ 96.440251][ T6077] EXT4-fs: Ignoring removed nobh option [ 96.469748][ T6079] netlink: 76 bytes leftover after parsing attributes in process `syz.6.780'. [ 96.504431][ T6079] x_tables: duplicate underflow at hook 2 [ 96.683488][ T6089] msdos: Unknown parameter 'cô¡UŒÁ…ã§ict' [ 96.970098][ T6099] EXT4-fs (loop0): shut down requested (0) [ 96.991304][ T6099] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=16 [ 97.011774][ T6099] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=16 [ 97.031021][ T6099] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=16 [ 97.109535][ T6105] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6105 comm=syz.3.784 [ 97.322301][ T6116] netlink: 'syz.3.792': attribute type 3 has an invalid length. [ 97.486291][ T6122] EXT4-fs error (device loop0): ext4_xattr_set_entry:1670: inode #15: comm syz.0.797: corrupted xattr entries [ 97.523301][ T6122] EXT4-fs error (device loop0): ext4_xattr_block_set:2220: inode #15: comm syz.0.797: bad block 113 [ 97.538239][ T6132] msdos: Unknown parameter 'cô¡UŒÁ…ã§ict' [ 97.671871][ T6139] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 97.693136][ T6139] EXT4-fs (loop0): orphan cleanup on readonly fs [ 97.707991][ T6139] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.801: Failed to acquire dquot type 1 [ 97.788934][ T6139] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.801: bg 0: block 40: padding at end of block bitmap is not set [ 97.803403][ T6139] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 97.813337][ T6139] EXT4-fs (loop0): 1 truncate cleaned up [ 97.826178][ T6139] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #16: comm syz.0.801: corrupted xattr block 31: invalid header [ 97.849714][ T6139] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=16 [ 97.854821][ T6142] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=23 sclass=netlink_tcpdiag_socket pid=6142 comm=syz.5.802 [ 97.861961][ T6139] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #16: comm syz.0.801: corrupted xattr block 31: invalid header [ 97.877395][ T6143] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #16: comm syz.0.801: corrupted xattr block 31: invalid header [ 97.899985][ T6139] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=16 [ 97.900614][ T6143] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=16 [ 97.919493][ T6143] EXT4-fs error (device loop0): ext4_get_link:106: inode #16: comm syz.0.801: bad symlink. [ 97.930483][ T6139] EXT4-fs error (device loop0): ext4_get_link:106: inode #16: comm syz.0.801: bad symlink. [ 97.958025][ T6132] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6132 comm=syz.3.799 [ 97.998017][ T6149] netlink: 'syz.5.805': attribute type 2 has an invalid length. [ 98.005712][ T6149] netlink: 'syz.5.805': attribute type 4 has an invalid length. [ 98.057628][ T29] kauditd_printk_skb: 214 callbacks suppressed [ 98.057648][ T29] audit: type=1400 audit(1769311878.998:1372): avc: denied { read write } for pid=6151 comm="syz.3.807" name="uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 98.087243][ T29] audit: type=1400 audit(1769311878.998:1373): avc: denied { open } for pid=6151 comm="syz.3.807" path="/dev/uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 98.293733][ T6173] 8021q: adding VLAN 0 to HW filter on device bond2 [ 98.314950][ T6173] bond2: (slave batadv2): Opening slave failed [ 98.323146][ T6174] set_capacity_and_notify: 10 callbacks suppressed [ 98.323163][ T6174] loop5: detected capacity change from 0 to 512 [ 98.339727][ T29] audit: type=1400 audit(1769311879.278:1374): avc: denied { ioctl } for pid=6171 comm="syz.3.814" path="socket:[14835]" dev="sockfs" ino=14835 ioctlcmd=0x89ef scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 98.432062][ T6182] loop0: detected capacity change from 0 to 512 [ 98.449091][ T6181] erspan1: entered allmulticast mode [ 98.504464][ T6183] loop2: detected capacity change from 0 to 512 [ 98.545003][ T29] audit: type=1326 audit(1769311879.478:1375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6158 comm="syz.0.808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f288a06acb9 code=0x7ffc0000 [ 98.568404][ T29] audit: type=1326 audit(1769311879.478:1376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6158 comm="syz.0.808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f288a06acb9 code=0x7ffc0000 [ 98.591787][ T29] audit: type=1326 audit(1769311879.478:1377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6158 comm="syz.0.808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f288a06acb9 code=0x7ffc0000 [ 98.615158][ T29] audit: type=1326 audit(1769311879.478:1378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6158 comm="syz.0.808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f288a06acb9 code=0x7ffc0000 [ 98.638534][ T29] audit: type=1326 audit(1769311879.478:1379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6158 comm="syz.0.808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f288a06acb9 code=0x7ffc0000 [ 98.661895][ T29] audit: type=1326 audit(1769311879.478:1380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6158 comm="syz.0.808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f288a06acb9 code=0x7ffc0000 [ 98.685289][ T29] audit: type=1326 audit(1769311879.478:1381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6158 comm="syz.0.808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f288a06acb9 code=0x7ffc0000 [ 98.727467][ T6187] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0, syncid = 0, id = 0 [ 98.894394][ T6193] loop5: detected capacity change from 0 to 128 [ 98.904067][ T6193] msdos: Unknown parameter 'cô¡UŒÁ…ã§ict' [ 98.942419][ T6196] tipc: Started in network mode [ 98.947350][ T6196] tipc: Node identity , cluster identity 4711 [ 98.953555][ T6196] tipc: Failed to obtain node identity [ 98.959119][ T6196] tipc: Enabling of bearer rejected, failed to enable media [ 99.139682][ T6202] syzkaller1: entered promiscuous mode [ 99.145401][ T6202] syzkaller1: entered allmulticast mode [ 99.196105][ T6218] netlink: 'syz.2.828': attribute type 46 has an invalid length. [ 99.210937][ T6220] process 'syz.6.829' launched './file2' with NULL argv: empty string added [ 99.380917][ T6231] __nla_validate_parse: 6 callbacks suppressed [ 99.380935][ T6231] netlink: 8 bytes leftover after parsing attributes in process `syz.6.833'. [ 99.396064][ T6231] netlink: 8 bytes leftover after parsing attributes in process `syz.6.833'. [ 99.406478][ T6231] random: crng reseeded on system resumption [ 99.418379][ T6231] Restarting kernel threads ... [ 99.423587][ T6231] Done restarting kernel threads. [ 99.433391][ T6231] netlink: 8 bytes leftover after parsing attributes in process `syz.6.833'. [ 99.480313][ T6234] loop3: detected capacity change from 0 to 512 [ 99.751613][ T6253] 8021q: adding VLAN 0 to HW filter on device bond2 [ 99.767653][ T6253] bond2: (slave batadv2): Opening slave failed [ 99.804913][ T6256] loop3: detected capacity change from 0 to 512 [ 99.905241][ T6256] team0: Device gtp0 is of different type [ 100.079949][ T6272] loop0: detected capacity change from 0 to 256 [ 100.110735][ T6272] lo speed is unknown, defaulting to 1000 [ 100.238143][ T6284] netlink: 128 bytes leftover after parsing attributes in process `syz.5.854'. [ 100.299286][ T6286] netlink: 24 bytes leftover after parsing attributes in process `syz.5.855'. [ 100.311055][ T6286] loop5: detected capacity change from 0 to 256 [ 100.378463][ T6291] loop6: detected capacity change from 0 to 512 [ 100.785363][ T6311] loop6: detected capacity change from 0 to 512 [ 101.093391][ T6317] program syz.3.865 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 101.152573][ T6320] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 101.162641][ T6320] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 101.162679][ T6320] EXT4-fs: failed to create workqueue [ 101.177822][ T6320] EXT4-fs (loop3): mount failed [ 101.204063][ T6325] netlink: 'syz.6.867': attribute type 30 has an invalid length. [ 101.270652][ T6327] netlink: 12 bytes leftover after parsing attributes in process `syz.3.869'. [ 101.279671][ T6327] tc_dump_action: action bad kind [ 101.287353][ T6327] program syz.3.869 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 101.365812][ T6338] EXT4-fs: Ignoring removed nobh option [ 101.376531][ T6338] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 101.426037][ T6338] EXT4-fs (loop3): 1 truncate cleaned up [ 101.490805][ T6356] msdos: Unknown parameter 'cô¡UŒÁ…ã§ict' [ 101.574922][ T6361] Cannot find set identified by id 0 to match [ 101.753316][ T6374] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 101.779542][ T6374] EXT4-fs (loop3): orphan cleanup on readonly fs [ 101.794995][ T6374] EXT4-fs warning (device loop3): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 101.810253][ T6374] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 101.819826][ T6374] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #16: comm syz.3.878: corrupted inode contents [ 101.838617][ T6374] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #16: comm syz.3.878: mark_inode_dirty error [ 101.850247][ T6374] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #16: comm syz.3.878: corrupted inode contents [ 101.862606][ T6374] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.878: mark_inode_dirty error [ 101.875292][ T6374] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #16: comm syz.3.878: corrupted inode contents [ 101.887658][ T6374] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 101.896571][ T6374] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #16: comm syz.3.878: corrupted inode contents [ 101.908954][ T6374] EXT4-fs error (device loop3): ext4_truncate:4635: inode #16: comm syz.3.878: mark_inode_dirty error [ 101.920426][ T6374] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 101.930450][ T6374] EXT4-fs (loop3): 1 truncate cleaned up [ 101.934161][ T6356] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6356 comm=syz.0.873 [ 101.986301][ T6383] EXT4-fs: Ignoring removed nomblk_io_submit option [ 101.994836][ T6383] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 102.003579][ T6383] System zones: 0-2, 18-18, 34-34 [ 102.009396][ T6383] EXT4-fs (loop3): orphan cleanup on readonly fs [ 102.016658][ T6383] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.880: bg 0: block 248: padding at end of block bitmap is not set [ 102.031898][ T6383] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.880: Failed to acquire dquot type 1 [ 102.043882][ T6383] EXT4-fs (loop3): 1 truncate cleaned up [ 102.186566][ T6394] EXT4-fs error (device loop3): htree_dirblock_to_tree:1051: inode #2: comm syz.3.885: Directory hole found for htree leaf block 0 [ 102.201873][ T6394] EXT4-fs (loop3): Remounting filesystem read-only [ 102.294512][ T6407] netlink: 8 bytes leftover after parsing attributes in process `syz.2.889'. [ 102.361415][ T6409] msdos: Unknown parameter 'cô¡UŒÁ…ã§ict' [ 102.370908][ T6411] netlink: 68 bytes leftover after parsing attributes in process `syz.2.891'. [ 102.522925][ T6415] EXT4-fs: Ignoring removed nomblk_io_submit option [ 102.553635][ T6415] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 102.561776][ T6415] System zones: 0-2, 18-18, 34-34 [ 102.567032][ T6415] EXT4-fs (loop2): orphan cleanup on readonly fs [ 102.584036][ T6415] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.893: bg 0: block 248: padding at end of block bitmap is not set [ 102.604962][ T6415] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.893: Failed to acquire dquot type 1 [ 102.617302][ T6418] netlink: 24 bytes leftover after parsing attributes in process `syz.5.894'. [ 102.618291][ T6415] EXT4-fs (loop2): 1 truncate cleaned up [ 102.632780][ T6415] EXT4-fs mount: 18 callbacks suppressed [ 102.632793][ T6415] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 102.665496][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.735882][ T6419] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6419 comm=syz.3.890 [ 102.914666][ T6423] team0: Device gtp0 is of different type [ 103.056565][ T6438] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.067854][ T6438] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.097154][ T6440] netlink: 184 bytes leftover after parsing attributes in process `syz.5.899'. [ 103.122549][ T6442] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.900: error while reading EA inode 32 err=-116 [ 103.135154][ T6442] EXT4-fs (loop2): Remounting filesystem read-only [ 103.141917][ T6442] EXT4-fs warning (device loop2): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 103.152140][ T6442] EXT4-fs (loop2): 1 orphan inode deleted [ 103.168708][ T6442] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.199107][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.208459][ T29] kauditd_printk_skb: 212 callbacks suppressed [ 103.208567][ T29] audit: type=1400 audit(1769311884.148:1589): avc: denied { bind } for pid=6444 comm="syz.5.901" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 103.294908][ T6447] vhci_hcd vhci_hcd.3: default hub control req: 8013 v0000 i0000 l31125 [ 103.394232][ T29] audit: type=1400 audit(1769311884.318:1590): avc: denied { write } for pid=6446 comm="syz.2.902" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 103.418443][ T29] audit: type=1400 audit(1769311884.318:1591): avc: denied { open } for pid=6446 comm="syz.2.902" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 103.461181][ T6460] set_capacity_and_notify: 13 callbacks suppressed [ 103.461199][ T6460] loop2: detected capacity change from 0 to 512 [ 103.475644][ T6458] netlink: 'syz.3.904': attribute type 4 has an invalid length. [ 103.499111][ T29] audit: type=1326 audit(1769311884.388:1592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6457 comm="syz.3.904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f714751acb9 code=0x7ffc0000 [ 103.520017][ T6460] EXT4-fs: Ignoring removed nomblk_io_submit option [ 103.522631][ T29] audit: type=1326 audit(1769311884.388:1593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6457 comm="syz.3.904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f714751acb9 code=0x7ffc0000 [ 103.552415][ T29] audit: type=1326 audit(1769311884.388:1594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6457 comm="syz.3.904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f714751acb9 code=0x7ffc0000 [ 103.575967][ T29] audit: type=1326 audit(1769311884.388:1595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6457 comm="syz.3.904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f714751acb9 code=0x7ffc0000 [ 103.599448][ T29] audit: type=1326 audit(1769311884.388:1596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6457 comm="syz.3.904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f714751acb9 code=0x7ffc0000 [ 103.622904][ T29] audit: type=1326 audit(1769311884.388:1597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6457 comm="syz.3.904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f714751acb9 code=0x7ffc0000 [ 103.646587][ T29] audit: type=1326 audit(1769311884.388:1598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6457 comm="syz.3.904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f714751acb9 code=0x7ffc0000 [ 103.672582][ T6460] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 103.707502][ T6460] System zones: 0-2, 18-18, 34-34 [ 103.722926][ T6460] EXT4-fs (loop2): orphan cleanup on readonly fs [ 103.741146][ T6460] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.905: bg 0: block 248: padding at end of block bitmap is not set [ 103.799137][ T6460] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.905: Failed to acquire dquot type 1 [ 103.841860][ T6460] EXT4-fs (loop2): 1 truncate cleaned up [ 103.868868][ T6460] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 103.889918][ T6463] loop5: detected capacity change from 0 to 128 [ 103.905420][ T6465] loop3: detected capacity change from 0 to 1024 [ 103.912323][ T6465] EXT4-fs: Ignoring removed bh option [ 103.943084][ T6463] msdos: Unknown parameter 'cô¡UŒÁ…ã§ict' [ 103.952230][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.952812][ T6465] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.024444][ T6465] lo speed is unknown, defaulting to 1000 [ 104.073772][ T6471] 8021q: adding VLAN 0 to HW filter on device bond6 [ 104.104779][ T6471] bond6: (slave batadv2): Opening slave failed [ 104.274052][ T6477] loop0: detected capacity change from 0 to 2048 [ 104.292334][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.341201][ T6477] lo speed is unknown, defaulting to 1000 [ 104.467305][ T6492] loop3: detected capacity change from 0 to 256 [ 104.496071][ T6492] FAT-fs (loop3): Directory bread(block 64) failed [ 104.519819][ T6492] FAT-fs (loop3): Directory bread(block 65) failed [ 104.526549][ T6492] FAT-fs (loop3): Directory bread(block 66) failed [ 104.533863][ T6492] FAT-fs (loop3): Directory bread(block 67) failed [ 104.540556][ T6492] FAT-fs (loop3): Directory bread(block 68) failed [ 104.547244][ T6492] FAT-fs (loop3): Directory bread(block 69) failed [ 104.554324][ T6492] FAT-fs (loop3): Directory bread(block 70) failed [ 104.562514][ T6492] FAT-fs (loop3): Directory bread(block 71) failed [ 104.570522][ T6492] FAT-fs (loop3): Directory bread(block 72) failed [ 104.577154][ T6492] FAT-fs (loop3): Directory bread(block 73) failed [ 104.586182][ T6497] __nla_validate_parse: 3 callbacks suppressed [ 104.586200][ T6497] netlink: 12 bytes leftover after parsing attributes in process `syz.6.917'. [ 104.668807][ T6502] loop3: detected capacity change from 0 to 512 [ 104.700487][ T6502] EXT4-fs: Ignoring removed nomblk_io_submit option [ 104.717006][ T6505] netlink: 'syz.5.919': attribute type 7 has an invalid length. [ 104.727364][ T6502] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 104.736359][ T6502] System zones: 0-2, 18-18, 34-34 [ 104.744979][ T6502] EXT4-fs (loop3): orphan cleanup on readonly fs [ 104.752435][ T6502] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.918: bg 0: block 248: padding at end of block bitmap is not set [ 104.767189][ T6502] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.918: Failed to acquire dquot type 1 [ 104.783042][ T6502] EXT4-fs (loop3): 1 truncate cleaned up [ 104.798030][ T6502] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 104.848399][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.939070][ T6523] netlink: 24 bytes leftover after parsing attributes in process `syz.2.923'. [ 104.955310][ T6519] program syz.5.924 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 105.003058][ T6515] FAULT_INJECTION: forcing a failure. [ 105.003058][ T6515] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 105.016367][ T6515] CPU: 0 UID: 0 PID: 6515 Comm: syz.6.922 Not tainted syzkaller #0 PREEMPT(voluntary) [ 105.016479][ T6515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 105.016497][ T6515] Call Trace: [ 105.016505][ T6515] [ 105.016573][ T6515] __dump_stack+0x1d/0x30 [ 105.016610][ T6515] dump_stack_lvl+0x95/0xd0 [ 105.016711][ T6515] dump_stack+0x15/0x1b [ 105.016734][ T6515] should_fail_ex+0x263/0x280 [ 105.016760][ T6515] should_fail+0xb/0x20 [ 105.016778][ T6515] should_fail_usercopy+0x1a/0x20 [ 105.016807][ T6515] _copy_from_iter+0xcf/0xea0 [ 105.016861][ T6515] ? __pfx_woken_wake_function+0x10/0x10 [ 105.016907][ T6515] file_tty_write+0x322/0x690 [ 105.017083][ T6515] ? __pfx_tty_write+0x10/0x10 [ 105.017122][ T6515] tty_write+0x25/0x30 [ 105.017160][ T6515] vfs_write+0x5a6/0x9f0 [ 105.017219][ T6515] ksys_write+0xdc/0x1a0 [ 105.017255][ T6515] __x64_sys_write+0x40/0x50 [ 105.017280][ T6515] x64_sys_call+0x2847/0x3000 [ 105.017325][ T6515] do_syscall_64+0xc0/0x2a0 [ 105.017466][ T6515] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.017493][ T6515] RIP: 0033:0x7fd1ceb4acb9 [ 105.017512][ T6515] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.017535][ T6515] RSP: 002b:00007fd1cd5a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 105.017561][ T6515] RAX: ffffffffffffffda RBX: 00007fd1cedc5fa0 RCX: 00007fd1ceb4acb9 [ 105.017599][ T6515] RDX: 0000000000001006 RSI: 0000200000000000 RDI: 0000000000000004 [ 105.017614][ T6515] RBP: 00007fd1cd5a7090 R08: 0000000000000000 R09: 0000000000000000 [ 105.017626][ T6515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 105.017641][ T6515] R13: 00007fd1cedc6038 R14: 00007fd1cedc5fa0 R15: 00007ffec59c9948 [ 105.017667][ T6515] [ 105.246007][ T6538] loop3: detected capacity change from 0 to 128 [ 105.304674][ T6538] msdos: Unknown parameter 'cô¡UŒÁ…ã§ict' [ 105.337787][ T6546] loop6: detected capacity change from 0 to 512 [ 105.354989][ T6546] EXT4-fs: Ignoring removed nomblk_io_submit option [ 105.369131][ T6551] loop5: detected capacity change from 0 to 128 [ 105.377115][ T6546] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 105.395597][ T6546] System zones: 0-2, 18-18, 34-34 [ 105.424788][ T6551] msdos: Unknown parameter 'cô¡UŒÁ…ã§ict' [ 105.434254][ T6546] EXT4-fs (loop6): orphan cleanup on readonly fs [ 105.441391][ T6546] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.932: bg 0: block 248: padding at end of block bitmap is not set [ 105.456556][ T6546] EXT4-fs error (device loop6): ext4_acquire_dquot:6986: comm syz.6.932: Failed to acquire dquot type 1 [ 105.469792][ T6546] EXT4-fs (loop6): 1 truncate cleaned up [ 105.476174][ T6546] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 105.607914][ T5186] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.673197][ T6558] loop6: detected capacity change from 0 to 1024 [ 105.680291][ T6558] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 105.691247][ T6558] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 105.718167][ T6558] JBD2: no valid journal superblock found [ 105.723963][ T6558] EXT4-fs (loop6): Could not load journal inode [ 105.734953][ T6562] netlink: 24 bytes leftover after parsing attributes in process `syz.3.939'. [ 105.781642][ T6564] FAULT_INJECTION: forcing a failure. [ 105.781642][ T6564] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 105.794890][ T6564] CPU: 0 UID: 0 PID: 6564 Comm: syz.3.940 Not tainted syzkaller #0 PREEMPT(voluntary) [ 105.794922][ T6564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 105.794938][ T6564] Call Trace: [ 105.794946][ T6564] [ 105.794955][ T6564] __dump_stack+0x1d/0x30 [ 105.794987][ T6564] dump_stack_lvl+0x95/0xd0 [ 105.795015][ T6564] dump_stack+0x15/0x1b [ 105.795087][ T6564] should_fail_ex+0x263/0x280 [ 105.795110][ T6564] should_fail+0xb/0x20 [ 105.795131][ T6564] should_fail_usercopy+0x1a/0x20 [ 105.795161][ T6564] _copy_from_user+0x1c/0xb0 [ 105.795213][ T6564] do_sys_poll+0x137/0xc10 [ 105.795314][ T6564] ? avc_has_perm_noaudit+0xab/0x130 [ 105.795447][ T6564] __se_sys_ppoll+0x1e2/0x220 [ 105.795516][ T6564] __x64_sys_ppoll+0x67/0x80 [ 105.795543][ T6564] x64_sys_call+0x22fe/0x3000 [ 105.795636][ T6564] do_syscall_64+0xc0/0x2a0 [ 105.795691][ T6564] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.795774][ T6564] RIP: 0033:0x7f714751acb9 [ 105.795794][ T6564] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.795818][ T6564] RSP: 002b:00007f7145f77028 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 105.795889][ T6564] RAX: ffffffffffffffda RBX: 00007f7147795fa0 RCX: 00007f714751acb9 [ 105.795908][ T6564] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000040 [ 105.795925][ T6564] RBP: 00007f7145f77090 R08: 0000000000000000 R09: 0000000000000000 [ 105.795941][ T6564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 105.795957][ T6564] R13: 00007f7147796038 R14: 00007f7147795fa0 R15: 00007ffddfc40328 [ 105.796004][ T6564] [ 105.978035][ T6558] netlink: 8 bytes leftover after parsing attributes in process `syz.6.937'. [ 105.988198][ T6558] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=6558 comm=syz.6.937 [ 106.006756][ T6558] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 106.104248][ T6575] 8021q: adding VLAN 0 to HW filter on device bond1 [ 106.121283][ T6575] bond1: (slave batadv1): Opening slave failed [ 106.244666][ T6587] EXT4-fs: Ignoring removed nomblk_io_submit option [ 106.252660][ T6587] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 106.261081][ T6587] System zones: 0-2, 18-18, 34-34 [ 106.266578][ T6587] EXT4-fs (loop2): orphan cleanup on readonly fs [ 106.279307][ T6587] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.947: bg 0: block 248: padding at end of block bitmap is not set [ 106.295234][ T6587] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.947: Failed to acquire dquot type 1 [ 106.307872][ T6587] EXT4-fs (loop2): 1 truncate cleaned up [ 106.314345][ T6587] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 106.427595][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.462650][ T6590] msdos: Unknown parameter 'cô¡UŒÁ…ã§ict' [ 106.585033][ T6594] netlink: 132 bytes leftover after parsing attributes in process `syz.2.949'. [ 107.029752][ T6621] msdos: Unknown parameter 'cô¡UŒÁ…ã§ict' [ 107.109161][ T6627] msdos: Unknown parameter 'cô¡UŒÁ…ã§ict' [ 107.311674][ T6634] FAULT_INJECTION: forcing a failure. [ 107.311674][ T6634] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 107.325183][ T6634] CPU: 0 UID: 0 PID: 6634 Comm: syz.3.964 Not tainted syzkaller #0 PREEMPT(voluntary) [ 107.325239][ T6634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 107.325257][ T6634] Call Trace: [ 107.325265][ T6634] [ 107.325275][ T6634] __dump_stack+0x1d/0x30 [ 107.325387][ T6634] dump_stack_lvl+0x95/0xd0 [ 107.325480][ T6634] dump_stack+0x15/0x1b [ 107.325504][ T6634] should_fail_ex+0x263/0x280 [ 107.325528][ T6634] should_fail_alloc_page+0xf2/0x100 [ 107.325559][ T6634] __alloc_frozen_pages_noprof+0x108/0x350 [ 107.325638][ T6634] alloc_pages_mpol+0xb3/0x260 [ 107.325664][ T6634] ? anon_pipe_write+0x11/0xb30 [ 107.325684][ T6634] alloc_pages_noprof+0x8f/0x130 [ 107.325772][ T6634] anon_pipe_write+0x69f/0xb30 [ 107.325791][ T6634] ? anon_pipe_write+0x11/0xb30 [ 107.325818][ T6634] ? __pfx_anon_pipe_write+0x10/0x10 [ 107.325887][ T6634] vfs_write+0x5a6/0x9f0 [ 107.325996][ T6634] ksys_write+0xdc/0x1a0 [ 107.326013][ T6634] __x64_sys_write+0x40/0x50 [ 107.326029][ T6634] x64_sys_call+0x2847/0x3000 [ 107.326132][ T6634] do_syscall_64+0xc0/0x2a0 [ 107.326158][ T6634] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.326176][ T6634] RIP: 0033:0x7f714751acb9 [ 107.326229][ T6634] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.326363][ T6634] RSP: 002b:00007f7145f77028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 107.326382][ T6634] RAX: ffffffffffffffda RBX: 00007f7147795fa0 RCX: 00007f714751acb9 [ 107.326394][ T6634] RDX: 00000000200002e6 RSI: 0000200000000640 RDI: 0000000000000005 [ 107.326429][ T6634] RBP: 00007f7145f77090 R08: 0000000000000000 R09: 0000000000000000 [ 107.326441][ T6634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 107.326452][ T6634] R13: 00007f7147796038 R14: 00007f7147795fa0 R15: 00007ffddfc40328 [ 107.326472][ T6634] [ 107.595430][ T6642] netlink: 'syz.6.968': attribute type 13 has an invalid length. [ 107.612907][ T6644] netlink: 'syz.2.967': attribute type 1 has an invalid length. [ 107.690832][ T6653] netlink: 180 bytes leftover after parsing attributes in process `syz.3.970'. [ 107.711327][ T6642] batman_adv: batadv0: Interface deactivated: dummy0 [ 107.740184][ T6654] netlink: 4 bytes leftover after parsing attributes in process `syz.2.967'. [ 107.758307][ T6655] netlink: 8 bytes leftover after parsing attributes in process `syz.3.970'. [ 107.789280][ T6642] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.799313][ T6642] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.810791][ T6656] netlink: 80 bytes leftover after parsing attributes in process `syz.2.967'. [ 107.884795][ T580] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.914640][ T580] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.943217][ T580] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.956209][ T580] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.987165][ T6664] 8021q: adding VLAN 0 to HW filter on device bond3 [ 107.991360][ T6666] netlink: 68 bytes leftover after parsing attributes in process `syz.5.973'. [ 108.016623][ T6664] bond3: (slave batadv2): Opening slave failed [ 108.201015][ T6677] netlink: 'syz.0.976': attribute type 39 has an invalid length. [ 108.252807][ T29] kauditd_printk_skb: 102 callbacks suppressed [ 108.252856][ T29] audit: type=1326 audit(1769314449.190:1693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6679 comm="syz.5.978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2b2e0acb9 code=0x7ffc0000 [ 108.291952][ T6680] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 108.305777][ T6680] ext4 filesystem being mounted at /99/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 108.342727][ T29] audit: type=1326 audit(1769314449.190:1694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6679 comm="syz.5.978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=244 compat=0 ip=0x7fc2b2e0acb9 code=0x7ffc0000 [ 108.366210][ T29] audit: type=1326 audit(1769314449.190:1695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6679 comm="syz.5.978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2b2e0acb9 code=0x7ffc0000 [ 108.389640][ T29] audit: type=1326 audit(1769314449.190:1696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6679 comm="syz.5.978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fc2b2e0acb9 code=0x7ffc0000 [ 108.412901][ T29] audit: type=1326 audit(1769314449.190:1697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6679 comm="syz.5.978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2b2e0acb9 code=0x7ffc0000 [ 108.431177][ T6685] msdos: Unknown parameter 'núÿ' [ 108.436319][ T29] audit: type=1326 audit(1769314449.190:1698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6679 comm="syz.5.978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fc2b2e0acb9 code=0x7ffc0000 [ 108.464571][ T29] audit: type=1326 audit(1769314449.190:1699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6679 comm="syz.5.978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2b2e0acb9 code=0x7ffc0000 [ 108.487940][ T29] audit: type=1326 audit(1769314449.190:1700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6679 comm="syz.5.978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fc2b2e0acb9 code=0x7ffc0000 [ 108.511274][ T29] audit: type=1326 audit(1769314449.190:1701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6679 comm="syz.5.978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2b2e0acb9 code=0x7ffc0000 [ 108.534630][ T29] audit: type=1326 audit(1769314449.190:1702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6679 comm="syz.5.978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fc2b2e0acb9 code=0x7ffc0000 [ 108.575293][ T6680] lo speed is unknown, defaulting to 1000 [ 108.633176][ T6689] set_capacity_and_notify: 8 callbacks suppressed [ 108.633198][ T6689] loop2: detected capacity change from 0 to 128 [ 108.666788][ T6689] team0: Device gtp0 is of different type [ 108.684465][ T6692] loop6: detected capacity change from 0 to 512 [ 108.695791][ T6692] EXT4-fs error (device loop6): ext4_xattr_inode_iget:446: comm syz.6.982: error while reading EA inode 32 err=-116 [ 108.733012][ T4860] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 108.762158][ T6692] EXT4-fs (loop6): Remounting filesystem read-only [ 108.782112][ T6692] EXT4-fs warning (device loop6): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 108.801988][ T6692] EXT4-fs (loop6): 1 orphan inode deleted [ 108.808677][ T6692] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.843147][ T5186] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.885425][ T6704] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6704 comm=syz.0.986 [ 108.964388][ T6709] loop5: detected capacity change from 0 to 128 [ 108.996940][ T6709] msdos: Unknown parameter 'cô¡UŒÁ…ã§ict' [ 109.397822][ T6731] netlink: 'syz.6.992': attribute type 4 has an invalid length. [ 109.445043][ T6733] loop5: detected capacity change from 0 to 128 [ 109.455216][ T6733] msdos: Unknown parameter 'cô¡UŒÁ…ã§ict' [ 109.686443][ T6741] loop3: detected capacity change from 0 to 128 [ 109.703362][ T6741] msdos: Unknown parameter 'cô¡UŒÁ…ã§ict' [ 109.902885][ T6753] loop5: detected capacity change from 0 to 128 [ 109.979603][ T6753] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 110.011303][ T6757] loop3: detected capacity change from 0 to 128 [ 110.034773][ T6753] ext4 filesystem being mounted at /106/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.043407][ T6757] msdos: Unknown parameter 'cô¡UŒÁ…ã§ict' [ 110.076590][ T4860] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 110.179817][ T6774] loop5: detected capacity change from 0 to 128 [ 110.215240][ T6774] msdos: Unknown parameter 'cô¡UŒÁ…ã§ict' [ 110.340450][ T6781] loop6: detected capacity change from 0 to 8192 [ 110.408851][ T6781] loop6: p2 p3 p4[EZD] [ 110.416179][ T6781] loop6: p3 start 331781 is beyond EOD, truncated [ 110.422776][ T6781] loop6: p4 size 197376 extends beyond EOD, truncated [ 110.569696][ T6757] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6757 comm=syz.3.1007 [ 110.667782][ T6799] loop3: detected capacity change from 0 to 512 [ 110.692456][ T6799] EXT4-fs: Ignoring removed orlov option [ 110.719077][ T6799] EXT4-fs error (device loop3): ext4_iget_extra_inode:5073: inode #15: comm syz.3.1023: corrupted in-inode xattr: bad e_name length [ 110.742734][ T6799] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.1023: couldn't read orphan inode 15 (err -117) [ 110.780322][ T6799] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.801150][ T6806] msdos: Unknown parameter 'cô¡UŒÁ…ã§ict' [ 110.885569][ T6799] lo speed is unknown, defaulting to 1000 [ 111.023665][ T6799] netlink: 'syz.3.1023': attribute type 13 has an invalid length. [ 111.035815][ T6799] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 111.052065][ T6809] netlink: 'syz.0.1021': attribute type 4 has an invalid length. [ 111.148270][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.205763][ T3380] page_pool_release_retry() stalled pool shutdown: id 28, 51 inflight 60 sec [ 138.001398][ T6813] __nla_validate_parse: 6 callbacks suppressed [ 138.001565][ T6813] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1028'. [ 138.024313][ T6821] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1030'. [ 138.038849][ T6813] set_capacity_and_notify: 1 callbacks suppressed [ 138.038884][ T6813] loop2: detected capacity change from 0 to 256 [ 138.065682][ T29] kauditd_printk_skb: 39 callbacks suppressed [ 138.065701][ T29] audit: type=1326 audit(1769314479.013:1742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6816 comm="syz.5.1027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2b2e0acb9 code=0x7ffc0000 [ 138.117247][ T29] audit: type=1326 audit(1769314479.043:1743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6816 comm="syz.5.1027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc2b2e0acb9 code=0x7ffc0000 [ 138.140697][ T29] audit: type=1326 audit(1769314479.043:1744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6816 comm="syz.5.1027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2b2e0acb9 code=0x7ffc0000 [ 138.164143][ T29] audit: type=1326 audit(1769314479.043:1745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6816 comm="syz.5.1027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc2b2e0acb9 code=0x7ffc0000 [ 138.187952][ T29] audit: type=1326 audit(1769314479.043:1746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6816 comm="syz.5.1027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2b2e0acb9 code=0x7ffc0000 [ 138.211488][ T29] audit: type=1326 audit(1769314479.043:1747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6816 comm="syz.5.1027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc2b2e0acb9 code=0x7ffc0000 [ 138.235283][ T29] audit: type=1326 audit(1769314479.053:1748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6816 comm="syz.5.1027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2b2e0acb9 code=0x7ffc0000 [ 138.258777][ T29] audit: type=1326 audit(1769314479.053:1749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6816 comm="syz.5.1027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2b2e0acb9 code=0x7ffc0000 [ 138.282224][ T29] audit: type=1326 audit(1769314479.063:1750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6816 comm="syz.5.1027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc2b2e0acb9 code=0x7ffc0000 [ 138.306652][ T29] audit: type=1326 audit(1769314479.063:1751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6816 comm="syz.5.1027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2b2e0acb9 code=0x7ffc0000 [ 138.377436][ T6838] 8021q: adding VLAN 0 to HW filter on device bond4 [ 138.393293][ T6838] bond4: (slave batadv2): Opening slave failed [ 138.484264][ T6847] netlink: 'syz.6.1035': attribute type 5 has an invalid length. [ 138.792525][ T6852] netlink: 83992 bytes leftover after parsing attributes in process `syz.6.1037'. [ 138.801860][ T6852] netlink: zone id is out of range [ 138.807031][ T6852] netlink: zone id is out of range [ 138.812195][ T6852] netlink: zone id is out of range [ 138.826796][ T6852] netlink: set zone limit has 8 unknown bytes [ 139.026018][ T6863] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1042'. [ 139.059904][ T6865] netlink: 'syz.6.1043': attribute type 1 has an invalid length. [ 139.067846][ T6865] netlink: 'syz.6.1043': attribute type 1 has an invalid length. [ 139.075732][ T6865] netlink: 'syz.6.1043': attribute type 1 has an invalid length. [ 139.083538][ T6865] netlink: 'syz.6.1043': attribute type 1 has an invalid length. [ 139.091358][ T6865] netlink: 3814 bytes leftover after parsing attributes in process `syz.6.1043'. [ 139.112513][ T6868] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1042'. [ 139.142830][ T6868] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 139.150390][ T6868] macsec1: entered allmulticast mode [ 139.155907][ T6868] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 139.164839][ T6868] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 139.172046][ T6868] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 139.230798][ T6877] loop2: detected capacity change from 0 to 128 [ 139.388079][ T6877] bio_check_eod: 88 callbacks suppressed [ 139.388169][ T6877] syz.2.1048: attempt to access beyond end of device [ 139.388169][ T6877] loop2: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 139.450732][ T6877] syz.2.1048: attempt to access beyond end of device [ 139.450732][ T6877] loop2: rw=2049, sector=169, nr_sectors = 24 limit=128 [ 139.493664][ T6889] loop6: detected capacity change from 0 to 512 [ 139.500373][ T6877] syz.2.1048: attempt to access beyond end of device [ 139.500373][ T6877] loop2: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 139.554449][ T6892] FAULT_INJECTION: forcing a failure. [ 139.554449][ T6892] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 139.568434][ T6892] CPU: 1 UID: 0 PID: 6892 Comm: syz.5.1053 Not tainted syzkaller #0 PREEMPT(voluntary) [ 139.568524][ T6892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 139.568542][ T6892] Call Trace: [ 139.568554][ T6892] [ 139.568565][ T6892] __dump_stack+0x1d/0x30 [ 139.568595][ T6892] dump_stack_lvl+0x95/0xd0 [ 139.568622][ T6892] dump_stack+0x15/0x1b [ 139.568658][ T6892] should_fail_ex+0x263/0x280 [ 139.568684][ T6892] should_fail+0xb/0x20 [ 139.568702][ T6892] should_fail_usercopy+0x1a/0x20 [ 139.568724][ T6892] _copy_from_iter+0xcf/0xea0 [ 139.568755][ T6892] ? __alloc_skb+0x397/0x4b0 [ 139.568779][ T6892] ? __alloc_skb+0x219/0x4b0 [ 139.568870][ T6892] netlink_sendmsg+0x4ae/0x6f0 [ 139.568899][ T6892] ? __pfx_netlink_sendmsg+0x10/0x10 [ 139.568973][ T6892] __sock_sendmsg+0x145/0x170 [ 139.569012][ T6892] sock_write_iter+0x1d2/0x210 [ 139.569046][ T6892] do_iter_readv_writev+0x4fd/0x5a0 [ 139.569120][ T6892] vfs_writev+0x2e1/0x900 [ 139.569164][ T6892] do_writev+0xe9/0x210 [ 139.569196][ T6892] __x64_sys_writev+0x45/0x50 [ 139.569226][ T6892] x64_sys_call+0x1ba5/0x3000 [ 139.569313][ T6892] do_syscall_64+0xc0/0x2a0 [ 139.569359][ T6892] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.569387][ T6892] RIP: 0033:0x7fc2b2e0acb9 [ 139.569408][ T6892] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 139.569478][ T6892] RSP: 002b:00007fc2b1867028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 139.569503][ T6892] RAX: ffffffffffffffda RBX: 00007fc2b3085fa0 RCX: 00007fc2b2e0acb9 [ 139.569522][ T6892] RDX: 0000000000000001 RSI: 0000200000000280 RDI: 0000000000000005 [ 139.569539][ T6892] RBP: 00007fc2b1867090 R08: 0000000000000000 R09: 0000000000000000 [ 139.569556][ T6892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 139.569609][ T6892] R13: 00007fc2b3086038 R14: 00007fc2b3085fa0 R15: 00007ffd07c1afc8 [ 139.569681][ T6892] [ 139.623821][ T6877] syz.2.1048: attempt to access beyond end of device [ 139.623821][ T6877] loop2: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 139.786569][ T6877] syz.2.1048: attempt to access beyond end of device [ 139.786569][ T6877] loop2: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 139.800060][ T6877] syz.2.1048: attempt to access beyond end of device [ 139.800060][ T6877] loop2: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 139.844913][ T6877] syz.2.1048: attempt to access beyond end of device [ 139.844913][ T6877] loop2: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 139.868657][ T6877] syz.2.1048: attempt to access beyond end of device [ 139.868657][ T6877] loop2: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 139.892355][ T6877] syz.2.1048: attempt to access beyond end of device [ 139.892355][ T6877] loop2: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 139.908134][ T6877] syz.2.1048: attempt to access beyond end of device [ 139.908134][ T6877] loop2: rw=2049, sector=313, nr_sectors = 8 limit=128 [ 140.023816][ T6903] loop6: detected capacity change from 0 to 512 [ 140.036288][ T6901] netlink: 'syz.2.1056': attribute type 1 has an invalid length. [ 140.044163][ T6901] netlink: 'syz.2.1056': attribute type 1 has an invalid length. [ 140.051916][ T6901] netlink: 'syz.2.1056': attribute type 1 has an invalid length. [ 140.059704][ T6901] netlink: 'syz.2.1056': attribute type 1 has an invalid length. [ 140.067505][ T6901] netlink: 3814 bytes leftover after parsing attributes in process `syz.2.1056'. [ 140.101420][ T6903] EXT4-fs error (device loop6): ext4_xattr_inode_iget:437: comm syz.6.1057: Parent and EA inode have the same ino 15 [ 140.130388][ T6907] loop2: detected capacity change from 0 to 128 [ 140.168652][ T6907] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 140.194676][ T6903] EXT4-fs error (device loop6): ext4_xattr_inode_iget:437: comm syz.6.1057: Parent and EA inode have the same ino 15 [ 140.217112][ T6907] ext4 filesystem being mounted at /188/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 140.227951][ T6903] EXT4-fs (loop6): 1 orphan inode deleted [ 140.234356][ T6903] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.293642][ T6903] EXT4-fs error (device loop6): ext4_find_dest_de:2050: inode #2: block 13: comm syz.6.1057: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 140.420755][ T6921] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1058'. [ 140.433294][ T6921] vlan2: entered promiscuous mode [ 140.438475][ T6921] dummy0: entered promiscuous mode [ 140.461261][ T5186] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.530354][ T3380] IPVS: starting estimator thread 0... [ 140.551950][ T6930] loop3: detected capacity change from 0 to 1024 [ 140.574252][ T6930] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 140.593877][ T6935] loop6: detected capacity change from 0 to 128 [ 140.611876][ T6930] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8801e019, mo2=0000] [ 140.623676][ T6938] IPVS: using max 1680 ests per chain, 84000 per kthread [ 140.644729][ T6930] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 2: comm syz.3.1064: lblock 2 mapped to illegal pblock 2 (length 1) [ 140.662431][ T6930] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 48: comm syz.3.1064: lblock 0 mapped to illegal pblock 48 (length 1) [ 140.687705][ T6935] msdos: Unknown parameter 'cô¡UŒÁ…ã§ict' [ 140.730422][ T6930] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.1064: Failed to acquire dquot type 0 [ 140.790637][ T6930] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 140.829474][ T6930] EXT4-fs error (device loop3): ext4_evict_inode:253: inode #11: comm syz.3.1064: mark_inode_dirty error [ 140.861845][ T6930] EXT4-fs warning (device loop3): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 140.880664][ T6930] EXT4-fs (loop3): 1 orphan inode deleted [ 140.899270][ T6930] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.911588][ T5076] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:10: lblock 1 mapped to illegal pblock 1 (length 1) [ 140.936339][ T5076] EXT4-fs error (device loop3): ext4_release_dquot:7022: comm kworker/u8:10: Failed to release dquot type 0 [ 140.965067][ T6930] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.974772][ T6930] EXT4-fs error (device loop3): __ext4_get_inode_loc:4830: comm syz.3.1064: Invalid inode table block 1 in block_group 0 [ 141.005866][ T3316] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 141.005868][ T6930] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 141.037706][ T6930] EXT4-fs error (device loop3): ext4_quota_off:7270: inode #3: comm syz.3.1064: mark_inode_dirty error [ 141.071617][ T6973] tipc: Started in network mode [ 141.076738][ T6973] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 141.097403][ T6973] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 141.105709][ T6973] tipc: Enabled bearer , priority 10 [ 141.197522][ T6935] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6935 comm=syz.6.1062 [ 141.344764][ T6990] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 141.358196][ T6990] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.549545][ T7012] loop2: detected capacity change from 0 to 512 [ 141.609716][ T7019] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1075'. [ 141.618714][ T7019] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1075'. [ 141.685692][ T6990] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 141.697019][ T6990] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.814396][ T7014] 8021q: adding VLAN 0 to HW filter on device bond3 [ 141.846067][ T7022] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 141.890930][ T7019] 8021q: adding VLAN 0 to HW filter on device bond0 [ 141.900469][ T7033] loop2: detected capacity change from 0 to 512 [ 141.928571][ T7033] EXT4-fs (loop2): orphan cleanup on readonly fs [ 141.938797][ T7019] bond3: (slave bond0): making interface the new active one [ 141.950909][ T7033] EXT4-fs warning (device loop2): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 141.956400][ T7019] bond3: (slave bond0): Enslaving as an active interface with an up link [ 141.976826][ T7033] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 141.996686][ T7033] EXT4-fs error (device loop2): __ext4_iget:5426: inode #14: block 1886221359: comm syz.2.1078: invalid block [ 142.023468][ T7033] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.1078: couldn't read orphan inode 14 (err -117) [ 142.053149][ T7033] EXT4-fs (loop2): 1 truncate cleaned up [ 142.059398][ T7033] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 142.081059][ T6990] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 142.094903][ T6990] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.105862][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.186993][ T6990] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 142.197385][ T6990] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.223001][ T3380] tipc: Node number set to 1 [ 142.309733][ T7046] FAULT_INJECTION: forcing a failure. [ 142.309733][ T7046] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 142.322984][ T7046] CPU: 1 UID: 0 PID: 7046 Comm: syz.5.1079 Not tainted syzkaller #0 PREEMPT(voluntary) [ 142.323033][ T7046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 142.323050][ T7046] Call Trace: [ 142.323099][ T7046] [ 142.323107][ T7046] __dump_stack+0x1d/0x30 [ 142.323139][ T7046] dump_stack_lvl+0x95/0xd0 [ 142.323169][ T7046] dump_stack+0x15/0x1b [ 142.323196][ T7046] should_fail_ex+0x263/0x280 [ 142.323239][ T7046] should_fail+0xb/0x20 [ 142.323263][ T7046] should_fail_usercopy+0x1a/0x20 [ 142.323312][ T7046] _copy_from_user+0x1c/0xb0 [ 142.323338][ T7046] ___sys_sendmsg+0xc1/0x1e0 [ 142.323379][ T7046] __sys_sendmmsg+0x185/0x320 [ 142.323436][ T7046] __x64_sys_sendmmsg+0x57/0x70 [ 142.323466][ T7046] x64_sys_call+0x1e28/0x3000 [ 142.323494][ T7046] do_syscall_64+0xc0/0x2a0 [ 142.323533][ T7046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.323562][ T7046] RIP: 0033:0x7fc2b2e0acb9 [ 142.323584][ T7046] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 142.323603][ T7046] RSP: 002b:00007fc2b1846028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 142.323625][ T7046] RAX: ffffffffffffffda RBX: 00007fc2b3086090 RCX: 00007fc2b2e0acb9 [ 142.323713][ T7046] RDX: 0000000000000001 RSI: 0000200000002740 RDI: 0000000000000004 [ 142.323728][ T7046] RBP: 00007fc2b1846090 R08: 0000000000000000 R09: 0000000000000000 [ 142.323744][ T7046] R10: 0000000004044044 R11: 0000000000000246 R12: 0000000000000001 [ 142.323760][ T7046] R13: 00007fc2b3086128 R14: 00007fc2b3086090 R15: 00007ffd07c1afc8 [ 142.323786][ T7046] [ 142.326949][ T5074] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 2816 - 0 [ 142.498494][ T5074] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.506887][ T5074] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 2816 - 0 [ 142.515169][ T5074] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.549042][ T31] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 2816 - 0 [ 142.557331][ T31] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.583388][ T31] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 2816 - 0 [ 142.591650][ T31] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.854136][ T7063] netlink: 'syz.6.1091': attribute type 1 has an invalid length. [ 142.865680][ T7063] loop6: detected capacity change from 0 to 512 [ 142.875091][ T7063] ext3: Unknown parameter 'dont_hash' [ 143.003266][ T7075] FAULT_INJECTION: forcing a failure. [ 143.003266][ T7075] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 143.016592][ T7075] CPU: 0 UID: 0 PID: 7075 Comm: syz.6.1094 Not tainted syzkaller #0 PREEMPT(voluntary) [ 143.016655][ T7075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 143.016672][ T7075] Call Trace: [ 143.016680][ T7075] [ 143.016689][ T7075] __dump_stack+0x1d/0x30 [ 143.016721][ T7075] dump_stack_lvl+0x95/0xd0 [ 143.016751][ T7075] dump_stack+0x15/0x1b [ 143.016839][ T7075] should_fail_ex+0x263/0x280 [ 143.016881][ T7075] should_fail_alloc_page+0xf2/0x100 [ 143.016907][ T7075] __alloc_frozen_pages_noprof+0x108/0x350 [ 143.016942][ T7075] alloc_pages_mpol+0xb3/0x260 [ 143.017025][ T7075] vma_alloc_folio_noprof+0x1a9/0x300 [ 143.017099][ T7075] do_wp_page+0xf6d/0x2560 [ 143.017198][ T7075] ? css_rstat_updated+0xbb/0x280 [ 143.017242][ T7075] ? __rcu_read_lock+0x36/0x50 [ 143.017284][ T7075] handle_mm_fault+0x8c7/0x3030 [ 143.017415][ T7075] ? vma_start_read+0x1c7/0x2c0 [ 143.017469][ T7075] do_user_addr_fault+0x62f/0x1050 [ 143.017498][ T7075] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 143.017588][ T7075] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 143.017617][ T7075] ? irqentry_exit+0x3c/0x510 [ 143.017724][ T7075] exc_page_fault+0x62/0xa0 [ 143.017751][ T7075] asm_exc_page_fault+0x26/0x30 [ 143.017775][ T7075] RIP: 0033:0x7fd1cea02898 [ 143.017796][ T7075] Code: 85 ed 74 3b 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 47 0f b6 0c 08 45 84 c9 74 08 <45> 88 0c 00 49 8b 47 10 48 83 c0 01 49 89 47 10 83 e9 01 73 d3 41 [ 143.017879][ T7075] RSP: 002b:00007fd1cd5a6470 EFLAGS: 00010202 [ 143.017900][ T7075] RAX: 0000000000009005 RBX: 00007fd1cd5a6530 RCX: 0000000000000101 [ 143.017918][ T7075] RDX: 00000000000001ff RSI: 0000000000000800 RDI: 00007fd1cd5a65d0 [ 143.017944][ T7075] RBP: 0000000000000102 R08: 00007fd1c5187000 R09: 0000000000000004 [ 143.018001][ T7075] R10: 0000200000000b02 R11: 000000000000061d R12: 0000000000000601 [ 143.018017][ T7075] R13: 00007fd1cebf7880 R14: 0000000000000015 R15: 00007fd1cd5a65d0 [ 143.018048][ T7075] [ 143.018057][ T7075] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 143.174294][ T29] kauditd_printk_skb: 164 callbacks suppressed [ 143.174345][ T29] audit: type=1400 audit(1769314484.124:1912): avc: denied { lock } for pid=7081 comm="syz.0.1096" path="socket:[17558]" dev="sockfs" ino=17558 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 143.251757][ T7075] loop6: detected capacity change from 0 to 1024 [ 143.259871][ T7075] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 143.272855][ T7075] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8801e019, mo2=0000] [ 143.282317][ T7065] lo speed is unknown, defaulting to 1000 [ 143.296214][ T7075] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #3: block 2: comm syz.6.1094: lblock 2 mapped to illegal pblock 2 (length 1) [ 143.315871][ T7075] Quota error (device loop6): qtree_write_dquot: dquota write failed [ 143.325001][ T7075] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #3: block 48: comm syz.6.1094: lblock 0 mapped to illegal pblock 48 (length 1) [ 143.339420][ T7075] Quota error (device loop6): v2_write_file_info: Can't write info structure [ 143.348277][ T7075] EXT4-fs error (device loop6): ext4_acquire_dquot:6986: comm syz.6.1094: Failed to acquire dquot type 0 [ 143.377798][ T7075] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 143.392984][ T7075] EXT4-fs error (device loop6): ext4_evict_inode:253: inode #11: comm syz.6.1094: mark_inode_dirty error [ 143.407451][ T7065] chnl_net:caif_netlink_parms(): no params data found [ 143.414845][ T7075] EXT4-fs warning (device loop6): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 143.428818][ T7075] EXT4-fs (loop6): 1 orphan inode deleted [ 143.435434][ T7075] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.451699][ T5076] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:10: lblock 1 mapped to illegal pblock 1 (length 1) [ 143.466572][ T5076] Quota error (device loop6): remove_tree: Can't read quota data block 1 [ 143.475085][ T5076] EXT4-fs error (device loop6): ext4_release_dquot:7022: comm kworker/u8:10: Failed to release dquot type 0 [ 143.505746][ T7075] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.516014][ T7075] EXT4-fs error (device loop6): __ext4_get_inode_loc:4830: comm syz.6.1094: Invalid inode table block 1 in block_group 0 [ 143.528888][ T7075] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 143.538444][ T7075] EXT4-fs error (device loop6): ext4_quota_off:7270: inode #3: comm syz.6.1094: mark_inode_dirty error [ 143.557074][ T7065] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.564248][ T7065] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.587754][ T7065] bridge_slave_0: entered allmulticast mode [ 143.601597][ T7065] bridge_slave_0: entered promiscuous mode [ 143.608603][ T7065] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.615804][ T7065] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.623242][ T7065] bridge_slave_1: entered allmulticast mode [ 143.629833][ T7065] bridge_slave_1: entered promiscuous mode [ 143.661545][ T29] audit: type=1400 audit(1769314484.604:1913): avc: denied { create } for pid=7105 comm="syz.6.1105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 143.713710][ T7065] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 143.737423][ T7065] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 143.758152][ T29] audit: type=1326 audit(1769314484.704:1914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7113 comm="syz.5.1107" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc2b2e0acb9 code=0x0 [ 143.775634][ T7065] team0: Port device team_slave_0 added [ 143.806372][ T7065] team0: Port device team_slave_1 added [ 143.829265][ T7120] __nla_validate_parse: 1 callbacks suppressed [ 143.829284][ T7120] netlink: 134744 bytes leftover after parsing attributes in process `syz.6.1109'. [ 143.844976][ T7065] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 143.845351][ T7120] netlink: zone id is out of range [ 143.851947][ T7065] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 143.857128][ T7120] netlink: zone id is out of range [ 143.857144][ T7120] netlink: get zone limit has 4 unknown bytes [ 143.894690][ T7065] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 143.906421][ T7065] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 143.913429][ T7065] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 143.939417][ T7065] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 143.966421][ T7127] 9p: Bad value for 'rfdno' [ 143.975721][ T29] audit: type=1400 audit(1769314484.924:1915): avc: denied { write } for pid=7128 comm="syz.6.1110" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 144.012068][ T7065] hsr_slave_0: entered promiscuous mode [ 144.021444][ T7065] hsr_slave_1: entered promiscuous mode [ 144.027349][ T7065] debugfs: 'hsr0' already exists in 'hsr' [ 144.033134][ T7065] Cannot create hsr debugfs directory [ 144.209910][ T7065] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 144.242075][ T7065] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 144.253229][ T7065] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 144.294782][ T7065] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 144.417779][ T7065] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.425009][ T7065] bridge0: port 2(bridge_slave_1) entered forwarding state [ 144.432603][ T7065] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.439814][ T7065] bridge0: port 1(bridge_slave_0) entered forwarding state [ 144.633401][ T7065] 8021q: adding VLAN 0 to HW filter on device bond0 [ 144.665557][ T5074] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.686566][ T7154] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1117'. [ 144.699120][ T5074] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.743992][ T7065] 8021q: adding VLAN 0 to HW filter on device team0 [ 144.775049][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.782264][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 144.812810][ T5076] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.819957][ T5076] bridge0: port 2(bridge_slave_1) entered forwarding state [ 144.836357][ T29] audit: type=1400 audit(1769314485.784:1916): avc: denied { getattr } for pid=4860 comm="syz-executor" path="/133/file0/target/dbroot" dev="configfs" ino=18684 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 144.926717][ T7065] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 144.937175][ T7065] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 144.948812][ T7169] netlink: 'syz.6.1123': attribute type 1 has an invalid length. [ 144.955386][ T29] audit: type=1400 audit(1769314485.784:1917): avc: denied { remove_name } for pid=4860 comm="syz-executor" name="dbroot" dev="configfs" ino=17908 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 144.979955][ T29] audit: type=1400 audit(1769314485.784:1918): avc: denied { unlink } for pid=4860 comm="syz-executor" name="dbroot" dev="configfs" ino=17908 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 145.005965][ T7170] netlink: 'syz.3.1116': attribute type 4 has an invalid length. [ 145.116353][ T7169] 8021q: adding VLAN 0 to HW filter on device bond5 [ 145.394006][ T7065] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 145.694202][ T7065] veth0_vlan: entered promiscuous mode [ 145.728745][ T7065] veth1_vlan: entered promiscuous mode [ 145.747268][ T7202] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.807208][ T7065] veth0_macvtap: entered promiscuous mode [ 145.815355][ T7192] netlink: 'syz.6.1126': attribute type 1 has an invalid length. [ 145.847832][ T7192] 8021q: adding VLAN 0 to HW filter on device bond6 [ 145.877200][ T7202] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.901312][ T7065] veth1_macvtap: entered promiscuous mode [ 145.918905][ T7205] 8021q: adding VLAN 0 to HW filter on device bond6 [ 145.926801][ T7205] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 145.938378][ T7205] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 145.957116][ T7202] team0: Port device netdevsim1 removed [ 145.964242][ T7202] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.979070][ T7192] gretap1: entered promiscuous mode [ 145.986880][ T7192] bond6: (slave gretap1): making interface the new active one [ 145.997035][ T7192] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 146.009331][ T4860] ================================================================== [ 146.017456][ T4860] BUG: KCSAN: data-race in __dentry_kill / lookup_fast [ 146.024356][ T4860] [ 146.026715][ T4860] read-write to 0xffff8881004980c0 of 4 bytes by task 3313 on cpu 0: [ 146.029500][ T7065] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 146.034796][ T4860] __dentry_kill+0x230/0x4b0 [ 146.046616][ T4860] finish_dput+0x2b/0x200 [ 146.050967][ T4860] dput+0x52/0x60 [ 146.054630][ T4860] __fput+0x444/0x650 [ 146.058657][ T4860] fput_close_sync+0xad/0x190 [ 146.063375][ T4860] __x64_sys_close+0x55/0xf0 [ 146.068002][ T4860] x64_sys_call+0x2c25/0x3000 [ 146.072821][ T4860] do_syscall_64+0xc0/0x2a0 [ 146.074596][ T7065] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 146.077347][ T4860] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.077372][ T4860] [ 146.077380][ T4860] read to 0xffff8881004980c0 of 4 bytes by task 4860 on cpu 1: [ 146.100454][ T4860] lookup_fast+0xf0/0x320 [ 146.104832][ T4860] path_openat+0x415/0x23c0 [ 146.109372][ T4860] do_filp_open+0x15d/0x280 [ 146.113929][ T4860] do_sys_openat2+0xa6/0x150 [ 146.118563][ T4860] __x64_sys_openat+0xf2/0x120 [ 146.123373][ T4860] x64_sys_call+0x2b07/0x3000 [ 146.128103][ T4860] do_syscall_64+0xc0/0x2a0 [ 146.132679][ T4860] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.138611][ T4860] [ 146.140951][ T4860] value changed: 0x00200080 -> 0x00004080 [ 146.146693][ T4860] [ 146.149031][ T4860] Reported by Kernel Concurrency Sanitizer on: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 146.155204][ T4860] CPU: 1 UID: 0 PID: 4860 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) [ 146.165132][ T4860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 146.175208][ T4860] ================================================================== [ 146.207059][ T580] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.281532][ T7202] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.379143][ T580] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.387998][ T580] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.423347][ T580] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.474548][ T5074] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.486124][ T580] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.497581][ T580] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.509037][ T580] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.751469][ T580] bridge_slave_1: left allmulticast mode [ 146.757270][ T580] bridge_slave_1: left promiscuous mode [ 146.763139][ T580] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.773090][ T580] bridge_slave_0: left allmulticast mode [ 146.778779][ T580] bridge_slave_0: left promiscuous mode [ 146.784703][ T580] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.809631][ T580] bond6 (unregistering): (slave gretap1): Releasing active interface [ 146.984402][ T580] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 146.993726][ T580] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 147.003283][ T580] bond0 (unregistering): Released all slaves [ 147.010807][ T580] bond1 (unregistering): Released all slaves [ 147.019222][ T580] bond2 (unregistering): Released all slaves [ 147.027889][ T580] bond3 (unregistering): Released all slaves [ 147.036582][ T580] bond4 (unregistering): Released all slaves [ 147.045119][ T580] bond5 (unregistering): Released all slaves [ 147.053852][ T580] bond6 (unregistering): Released all slaves [ 147.098811][ T580] hsr_slave_0: left promiscuous mode [ 147.104713][ T580] hsr_slave_1: left promiscuous mode [ 147.110552][ T580] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 147.119659][ T580] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 147.127588][ T580] batman_adv: batadv0: Removing interface: dummy0 [ 147.169390][ T580] team0 (unregistering): Port device team_slave_1 removed [ 147.180895][ T580] team0 (unregistering): Port device team_slave_0 removed [ 147.552417][ T580] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.994994][ T580] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.114788][ T580] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.165157][ T580] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.432860][ T580] bridge_slave_1: left allmulticast mode [ 148.438699][ T580] bridge_slave_1: left promiscuous mode [ 148.444537][ T580] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.453836][ T580] bridge_slave_0: left allmulticast mode [ 148.459569][ T580] bridge_slave_0: left promiscuous mode [ 148.465401][ T580] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.544868][ T580] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 148.554921][ T580] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 148.565059][ T580] bond0 (unregistering): Released all slaves [ 148.636887][ T580] hsr_slave_0: left promiscuous mode [ 148.642708][ T580] hsr_slave_1: left promiscuous mode [ 148.648453][ T580] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 148.655893][ T580] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 148.663777][ T580] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 148.671189][ T580] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 148.684698][ T580] veth1_macvtap: left promiscuous mode [ 148.690293][ T580] veth0_macvtap: left promiscuous mode [ 148.696992][ T580] veth1_vlan: left promiscuous mode [ 148.702371][ T580] veth0_vlan: left promiscuous mode [ 148.776851][ T580] team0 (unregistering): Port device team_slave_1 removed [ 148.786848][ T580] team0 (unregistering): Port device team_slave_0 removed [ 149.045288][ T580] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 149.055189][ T580] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.094183][ T580] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 149.104274][ T580] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.145916][ T580] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 149.155865][ T580] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.194012][ T580] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 149.203938][ T580] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.269285][ T580] bridge_slave_1: left allmulticast mode [ 149.275035][ T580] bridge_slave_1: left promiscuous mode [ 149.280728][ T580] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.288642][ T580] bridge_slave_0: left allmulticast mode [ 149.294396][ T580] bridge_slave_0: left promiscuous mode [ 149.300075][ T580] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.356907][ T580] bond3 (unregistering): (slave ip6gretap1): Releasing backup interface [ 149.383260][ T580] dvmrp6 (unregistering): left allmulticast mode [ 149.504042][ T580] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 149.514023][ T580] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 149.523573][ T580] bond0 (unregistering): Released all slaves [ 149.531037][ T580] bond1 (unregistering): Released all slaves [ 149.539553][ T580] bond2 (unregistering): Released all slaves [ 149.548014][ T580] bond3 (unregistering): Released all slaves [ 149.556578][ T580] bond4 (unregistering): Released all slaves [ 149.607805][ T580] hsr_slave_0: left promiscuous mode [ 149.615251][ T580] hsr_slave_1: left promiscuous mode [ 149.621221][ T580] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 149.628659][ T580] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 149.637057][ T580] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 149.644708][ T580] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 149.652779][ T580] batman_adv: batadv0: Removing interface: vlan2 [ 149.662807][ T580] veth1_macvtap: left promiscuous mode [ 149.668322][ T580] veth0_macvtap: left promiscuous mode [ 149.674200][ T580] veth1_vlan: left promiscuous mode [ 149.679569][ T580] veth0_vlan: left promiscuous mode [ 149.753189][ T580] team0 (unregistering): Port device team_slave_1 removed [ 149.763890][ T580] team0 (unregistering): Port device team_slave_0 removed [ 149.795893][ T580] lo (unregistering): left allmulticast mode